2024-08-06 –, Siena
Firetower is the introduction of a comprehensive research framework that integrates cybersecurity data with financial market data to identify correlations, trends, and predictive indicators. This will enhance our understanding of the financial implications of cyber incidents and inform risk management strategies for financial institutions, regulators, and businesses.
Introduction (2 minutes)
Briefly introduce yourselves and your affiliation (30 seconds)
State the project name: Project Firetower (15 seconds)
Introduce the analogy: Firetower as a system to combat cyber threats (30 seconds)
Thesis Statement: Introduction of a comprehensive research framework that integrates cybersecurity data with financial market data to identify correlations, trends, and predictive indicators. This will enhance our understanding of the financial implications of cyber incidents and inform risk management strategies for financial institutions, regulators, and businesses. (45 seconds)
II. Significance of Cybersecurity (5 minutes)
A. Importance in General (2 minutes)
Briefly define cybersecurity financial problem, as a CISO, How much should I spend on my Cyber Program?(30 seconds)
Highlight its growing importance in both academic and industry sectors with increased regulatory scrutiny (SEC disclosures) (30 seconds)
Emphasize its role in national security and economic development (45 seconds)
Briefly mention the 2023 Federal Cybersecurity Research and Development Strategic Plan (15 seconds)
Briefly discuss its role in protecting critical infrastructure (30 seconds)
B. Importance in Finance (2 minutes)
Explain the increased risk of cyber threats due to digitalization (45 seconds)
Mention the growth of remote work and cloud computing (15 seconds)
Highlight the public companies' cybersecurity disclosure requirements related to SEC, or NYDFS (30 seconds)
Building policy in a vacuum is dangerous to national security, critical infrastructure protection, to the corporations and the men and women who protect them.
Emphasize the need for advanced analytical tools to understand this data (45 seconds)
III. The Problem: Limitations of Existing Models (2 minutes)
Briefly introduce existing models like the Gordon-Loeb model (30 seconds)
Explain how these models focus primarily on data vulnerability and potential loss value (45 seconds)
Emphasize how current quantitative risk models fall short due to subjectivity and qualitative measure
Point out the limitations of these models: neglecting broader cybersecurity costs (IT infrastructure, updates, etc.) (45 seconds)
IV. Project Firetower: A Comprehensive Solution (10 minutes)
A. Objectives (5 minutes)
Explain how Project Firetower integrates cybersecurity data with financial market data (2 min)
Discuss the identification of correlations, trends, and predictive indicators (45 seconds)
Emphasize the project's goal to enhance understanding of financial implications of cyber incidents (45 seconds)
Explain how this will inform risk management strategies for financial institutions (45 seconds)
B. Innovation: Bridging the Gap (5 minutes)
Introduce the concept of "broader IT costs" associated with cybersecurity (45 seconds)
Briefly mention examples like mergers, acquisitions, divestitures that involve data backup, network updates, security policies, etc. introduce complexity to risk that can be pulled out of financial statements (30 seconds)
Explain how Project Firetower bridges the gap between existing models and these broader IT costs (45 seconds) correlated from publicly available data
V. Conclusion (2 minutes)
Briefly reiterate the project's potential benefits for financial institutions (45 seconds)
I will mention the core cyber capital strategies, recapping how Project Firetower aligns with them (30 seconds)
Thank the audience for their time (15 seconds)
VI. Q&A (5 minutes)
A seasoned leader with over 17 years of experience across technology, banking, and insurance, Brandon is an experienced CSO and currently lends his experience safeguards companies through his advisory and consultation efforts. He oversees a comprehensive global security program, encompassing cyber defense, data protection, identity management, physical security, data privacy, and business continuity/disaster recovery. From the boardroom to the classroom, Brandon's expertise is wide-ranging, spanning data collection, computer forensics, and crafting robust security and privacy strategies for heavily regulated industries. His ability to navigate complex data systems and collaborate with multinational corporations to establish best practices is well-recognized within the industry. This recognition is evident through his frequent speaking engagements and guest lectures while advising companies on how they can leave their mark on the industry.
He plays a pivotal role in academia by actively advising on programming and curriculum, ensuring the next generation of professionals are well-equipped to navigate the dynamic landscape of cybersecurity.