ABSTRACT

Data breaches are not as random as you might think. Building upon previous work forecasting fraud among business customers, we discovered something often overlooked by practitioners. Insufficient staffing is a strong predictor of data breach, and surprisingly, audit staff is just as effective at preventing a data breach as staff working in information technology.

This session will demonstrate how cybersecurity data breach can be accurately forecast based upon the number of employees overall, and the number of employees with certain certifications that relate to cybersecurity. You will learn how this approach of measuring cybersecurity could help your organization to set risk appetite goals in terms of expected frequency of data breach and to right size the cybersecurity team to meet these goals.

SPEAKERS

Peter T. Davis

Peter Davis (LL.M, CPA, CMA, CMC, CISA, CISSP, CISM, COBIT FC/IC/AC/INCS, COBIT 2019 FC, ITIL FC, PMP, SSGB, CGEIT, ISTQB CTFL, PRINCE2 FC, ISO 27001 FC/PI/PA, ISO 27005 PRM, ISO 31000 PRM, ISO 20000 FC/PI/PA, ISO 9001 FC, ISO 28000 FC, Open FAIR FC, PMI-RMP, Lean IT FC, RESILIA FC, Scrum FC, ISO 27032 LM, DevOps FC, ISO 30301 PA) is the Principal of Peter Davis+Associates (https://www.linkedin.com/company/216799/admin/), a management consulting firm specializing in IT Governance, Security, and Audit. Prior to founding PDA, Mr. Davis’ private sector experience included stints with two large Canadian banks and a manufacturing company. He was formerly a principal in the Information Systems Audit practice of Ernst & Young. In the public sector, Mr. Davis was Director of Information Systems Audit in the Office of the Provincial Auditor (Ontario), where he had oversight audit responsibilities for all Ontario crown corporations, agencies and boards. A 38-year information technology governance, audit and security veteran, Mr. Davis’ career includes positions as consultant, security administrator, security planner, and information systems auditor.               

Mr. Davis also is the past President and founder of the Toronto ISSA chapter, past Recording Secretary of the ISSA’s International Board and past Computer Security Institute Advisory Committee member. In addition, he was a member of the international committee formed to develop Generally Accepted System Security Principles (GSSP). Mr. Davis has written or co-written 13 books including “Project Management Process Capability Assessment,” “Lean Six Sigma Secrets for the CIO,” “Hacking Wireless Networks for Dummies,” “Wireless Networks for Dummies,” “Computer Security for Dummies,” and “Securing and Controlling Cisco Routers.” Peter is listed in the International Who’s Who of Professionals. He is a past Editor of EDPACS, a monthly publication for security and audit professionals.

Dr. Thomas Lee

Dr. Thomas Lee is the CEO of VivoSecurity, a Silicon Valley based company focused on data collection, regression modeling and A.I. to bring predictability to the randomness of data breach. In cybersecurity, Thomas has developed models to forecast fraud in online banking, probability for PII data breach, probability for lawsuits and costs in the event of a PII data breach, and the likelihood of a shareholder lawsuit for public companies in the event of a stock drop. He has developed models to forecast PII data breaches by state and models to forecast the number of data breaches in the healthcare industry.

Thomas has been an invited speaker at the Richmond Fed research conference 2018, invited participant at Richmond Fed cyber security workshop 2019, invited speaker at O.R.X Toronto & Milan 2018, speaker at OpRisk North America 2018, ACAMS panelist 2019, PRMIA NYC & BCG 2018, ISACA Silicon Valley 2022 and Silicon Valley Affiliate of WiSyS 2022. Outside of cybersecurity, Thomas has pioneered computational techniques in medicine for refining x-ray diffraction data, noise reduction in electron micrographs using in 2D Fourier filtering, and singular value decomposition applied to electron micrographs to determine molecular packing of hemoglobin molecules in sickle cell anemia. Thomas has multiple patents and publications in peer reviewed journals and holds BS degrees in Physics and Electrical Engineering from the University of Washington, and an MS and PhD in Biophysics from the University of Chicago.

CPE: 4.0 Hrs

Please Note:  There is a cancellation policy in effect