The biggest fear is not the technology, it is the potential of human error that could expose your organization to a cyberattack. The majority of CISOs agree that an employee carelessly falling victim to a phishing scam is the most likely cause of a security breach. Most also agree that they will not be able to reduce the level of employee disregard for information security. How do we guard against human error without limiting employee efficiency and productivity?
CISO Council
The Greatest Fears?

Speakers
December 8, 2021
VirtualAgenda
All times Central Standard Time (CST)
11:00 AM - 12:15 PM
The Greatest Fears?
Panelists
Jonathan Rau
CISO
Lightspin
Jonathan is the Chief Information Security Officer for Lightspin, joining from IHS Markit a global information services where he ran Cloud & Offensive Security and created a security data graph project with his team. Jonathan has held roles at AWS, NBCUniversal, Blue Cross/Blue Shield and is a US Army veteran. Outside of work Jonathan works on his blog, open source projects, spends time with his 2 daughters and practices home cooking, research in military histories of the world, and travels around the East Coast of the US.
Norm Kromberg
CISO
SouthernCarlson
I am a security, technology audit, controls, governance, risk management, quality and compliance subject matter expert. With over 25 years of professional experience I am able to help companies of any size implement effective and efficient technology control management processes. I am a senior level IT Executive with extensive experience in creating and delivering technology management solutions to include data controls, transaction processing, quality, operations, network support, regulatory compliance and project management. Effective team builder and leader with a proven track record in establishing a strategic vision and gaining buy-in from all levels of the organization. I am skilled in developing customer-driven teams that contribute to successful organizational performance.
My goal is a senior level role in Security, IT Audit, Technology Management, Governance, Compliance, Risk Management, Quality Improvement or consulting.
Certification:
CISA, CGEIT, CRISC, ITIL Foundation, National Bank Examiner, Certified Quality Auditor (inactive), Six Sigma Green Belt.
Specialties: -Risk Assessment
-Offshore Management
-Application Development
-IT Strategy / ITIL
-Technology Audit
-System Integration
-Change Control / Management
-Vendor Management
-Network Management
-Information Security
-Privacy
-Compliance
-FFIEC
-Data Center operations
-Service Auditor Review - SSAE-16
-Business Continuity Planning /Disaster Recovery
-Audit Committee relations
-Project Management
-Governance
-Sarbanes
-COBIT
-Quality Programs / Testing
Lonnie Washington
Executive Director Infrastructure Services
City Colleges of Chicago
Joshua Crumbaugh
CISO, Warehouse Services & CTO PhishFirewall
Warehouse Services, Inc.
Leon Ravenna
CISO
KAR Global
John Tryon
AVP - Security Design & Architecture
Health Care Service Corporation