With 20+ years in information security, Allan Alford has served as CISO four times in three industries. Alford parlayed an IT career into a product security career and then ultimately fused the two disciplines. Allan has worked in companies from 5 employees to 50,000 and executes a risk-based approach to security, as well as compliance with NIST CSF, CIS CSC 20, GDPR, ISO 27001, DFARS and others.

 Alford gives back to the security community via The Cyber Ranch Podcast and by authoring articles and speaking at conferences.

 Alford holds a Master of Information Systems & Security, a Bachelor of Liberal Arts (with a focus on leadership) and a CISM certification.

Dov Yoran has a career-long focus in information security as a founder, investor, and advisor.  Currently, he is the co-founder and CEO of Command Zero, Inc. (stealth) and partner of MetroSITE Group, LLC.

Prior to that, he led Strategy, Business Development and Growth for the Cisco Security Business Group. The team focused on OEM, licensing and strategic partners, technology integrations & ecosystems, architecture as well as new market growth opportunities and corporate development efforts across the security portfolio.

Dov came to Cisco as part of the ThreatGRID acquisition in June of 2014. He was co-founder and CEO of ThreatGRID, the first unified malware analysis and threat intelligence solution that helped organizations defend against advanced cyberattacks. Prior to that, he was a co-founder and partner at MetroSITE Group, an advisory services firm to both emerging security companies and large enterprises. Previously, he held leadership roles at Solutionary (now NTT), Symantec, Riptech (acquired by Symantec) and Accenture.

Dov is a Founding Member of the Cloud Security Alliance (CSA) and frequently speaks at industry events. He has a Masters in Science (MS) in Engineering Management with a concentration in Information Security Management from George Washington University and a Bachelor of Science (BS), cum laude, in Chemistry from Tufts University.

Jake Margolis is the Chief Information Security Officer for the Metropolitan Water District of Southern California (MWD). MWD provides water to over 19 million people in Southern California through 26 member agencies. Jake holds a Master’s Degree in Information Systems and Technology Management and is a Certified Information Systems Security Professional (CISSP). Prior to joining Metropolitan Water District, he served as the CISO for the County of Orange in California. In his capacity as the County of Orange CISO he has oversaw the development and implementation of multiple countywide cybersecurity initiatives that lead the County to receive an award from the National Association of Counties for its Cybersecurity Program.  He has also served as the Information Assurance Manager for the California National Guard and California Military Department and has served in Command and Primary Staff capacities as a US Army Officer.

Joe Bernik is the Global Banking & Markets, Enterprise Risk & Finance  Business Information Security Executive at Bank of America responsible for leading all aspects of information security.  Prior, Joe was the Chief Technical Strategist at McAfee. He has two decades of experience creating and implementing cyber security management programs at global Financial Institutions. While serving as Chief Information Security Officer (CISO) and head of Information risk at ABN AMRO, Fifth Third Bank and BNY Mellon, Joe led teams dedicated to protecting customer data, complying with data-related laws and regulations, and managing incident response programs. Joe started his career with the US Defense Department (DOD) securing military systems.

Joe is an avid speaker and writer and has held posts on several industry groups including the Federal Reserve Council on Fraud the Financial Services Information Sharing and Analysis Center (FS-ISAC) and the Open Web Application Security Project (OWASP).   Mr. Bernik also serves as advisor to the Congressional Banking Committee where he has presented and testified on matters of National Security.

Mr. Bernik holds degrees in Information Systems and Business Administration from the University of Mary Washington and the City University of New York respectively.

Corey Hirsch served from 2005 – 2015 as CIO of Teledyne LeCroy, a leader in Electronic Test and Measurement equipment including oscilloscopes and protocol analyzers, and has subsequently served as CISO of Teledyne Technologies, LeCroy’s corporate parent.  Teledyne is a provider of enabling technologies for industrial growth markets including aerospace and defense, deepwater oil and gas, oceanographic research, air and water quality monitoring, electronic design, factory automation and medical imaging. Dr. Hirsch teaches on Columbia’s Masters of Technology Management program, including cyber risk management. Prior to joining LeCroy in 2001, Hirsch led the EMEA region of Tektronix as VP Europe through EMU phase I and II, the culmination of a 24 year career with a leading Test and Measurement firm. With 44 years’ experience in technology design and manufacturing, and 21 years’ tenure teaching on post graduate programs in the US and UK, Hirsch is a widely recognized speaker, author, and practitioner in ERM and related fields.   He has authored articles in journals such as JISSEC on ERM and information security.   He developed and implemented a system for aligning risk management across a diverse enterprise, and published the methodology in a book chapter in 2008. Hirsch earned his Masters in Business Administration at the University of Oregon, and his Doctorate at Brunel University in London.  He was awarded the Certified Information Security Manager certificate from ISACA in 2005.

Michael is currently the head of cybersecurity at New Avon where he executes on all things security for the corporate and digital properties ranging from strategic through operational. His many years of experience in security started in 1999 and has progressed along with the threat landscape and the technology and process meant to combat them.   Solutions Michael has implemented include GRC, enterprise monitoring, SIEM, risk assessment, vulnerability/pentesting management and remediation.

Industries that Michael has worked on include Telecom, Real Estate, Direct-Selling and a few start-ups. His “day job” has included more than 20 years doing infrastructure and provides him an end-to-end perspective on the relationship between the business need and its reliance on security.

Michael earned degrees in Industrial Psychology & Business from the University at Buffalo and an MBA from Iona College.

Nathan Green is a Sr. Subject Matter Expert in cybersecurity risk at Dataminr, a New York-based company that specializes in artificial intelligence to provide real-time information alerts to public and private sector clients. He received an MA in technology & national security studies from Georgetown University’s Walsh School of Foreign Service and a BA from the University of Maine. He also serves on the State Department’s OSAC cybersecurity committee.

Nick has been in the security field for over twenty years, and has led security teams in a variety of industries including finance, cloud hosting, consumer goods, and identity verification. His focus is on building strategic security teams in fast-changing organizations that create the safety to innovate and drive the business forward.  Nick’s broad experience as a CISO as well as a CIO leads to a unique perspective on how a holistic security strategy can help drive positive business outcomes while also protecting the business.

Paul Innella founded, financed, and built TDI into a world-class multi-million dollar profitable consulting firm, offering cybersecurity services to government agencies and commercial clients around the world. Paul has overseen cyber programs and managed security professionals in the United States, England, Bahrain, Singapore, Japan, and Guam. Since entering the cybersecurity space some 20 years ago, he has endeavored to improve the field through active participation in the cyber community at large, volunteering his time and resources, freely offering expertise via lectures and publications, and by building a company whose entire value system promotes cybersecurity advancement. After nearly two decades as CEO of a company renowned for service delivery excellence, Paul charted and executed a strategy for moving TDI from services only to R&D by leveraging clearly articulated intellectual property in the development of a SaaS solution and embarking on a journey to build a cybersecurity ecosystem. He is a CISSP who holds a B.S. in Computer Science from James Madison University and serves as a Board Member on the Children’s Hospital Foundation Board, James Madison University STEM Executive Advisory Council, and the WashingtonExec’s Cyber Council.

Dr. Robert Coles is an Honorary Professor at UCL and Visiting Professor at Royal Holloway, University of London. He holds a number of commercial board positions including Chair of the Crossword Consulting Ltd Board, Chair of the Crossword Cybersecurity PLC advisory board, member of the advisory boards for Think Cyber Ltd, UK bank, a US pharmaceutical and the Government of Singapore Ministry of Health and member of the Tech-Nation Cybersecurity judging panel. Robert has over 30 years of cybersecurity experience and has held a number of Chief Information Security Officer positions, including for the NHS and health and care system, GSK, National Grid and Merrill Lynch.  In all these roles, he owned the information security risk and was responsible for providing leadership across the organisations. He was accountable to the Executive and their Boards for establishing information security strategy and direction, building information security teams and delivering the information security change programme. Prior to these CISO roles, he held a number of “head of” roles at Royal Bank of Scotland, and was the first lead partner, and set up, KPMG’s Information Security Services for EMEA. Robert has extensive links with major industry information security networking groups and government security agencies.  He also has links with a number of universities and participates in leading edge research, particularly with Royal Holloway where he is an Executive Sponsor for the Institute of Information Security Innovation, and Cranfield University where he is an executive sponsor for the Cyber Masters Programme. He was awarded a PhD in psychology by the University of Leeds for his work on the perceptions of information and IT risk and has published and presented on this and other topics.

Dr Leivesley has experience in catastrophic risk, global media commentary, government and private sector incidents, exercising and advising on loss prevention and recovery.  Her prime focus is on the protection of life and critical infrastructure from extreme threats.  She has worked with global USA corporations on risk strategy for catastrophic incidents using exercises with Boards and facilitating executive meetings.  In 2021 she presented to the Baker Institute, Rice University on vulnerabilities in the energy sector and nuclear conflict risks in the South and East China seas.  In 2015 she presented to the Electrical Infrastructure Security Council’s conference in the Capitol Building on Black Swan risks.

Dr Leivesley Chairs the Permanent Monitoring Panel for Mitigation of Catastrophic Risk for the WFS (CERN) and has led 12 remote multinational science meetings on Covid-19 Mitigation and the Panel has also met on Engineering for Resilience in Infrastructure; Nuclear Conflict Mitigation Risk Management and Planetary Defence against Near Earth Objects (NEOs).

Communicator since 2001 on many international television news outputs including BBC World Service describing live international and UK incidents and all major forms of threat – cyber, terrorism, aviation, Polonium-210 and Novichok poisonings, Chechen terrorist Beslan child hostages, security issue with Iran, DPRK, USA Presidential security, Covid-19, and unexplained incidents such as MH370 leading to media stories in all countries on novel concept of cyber hijack as new risk in civil aviation.

Dr Leivesley received Scientific Advisory Training from the British Home Office to become a Scientific Advisor for national survival from nuclear, chemical and biological weapons effects and in the Cold War she held an  appointment as a Scientific Advisor for operations in civilian nuclear bunkers under London.

PhD London University on catastrophic risk across all industry sectors, awarded in field of Economics. Innovator of technological solutions to improvised terrorist devices for chemical and explosives weapon’s effects.  Specialist in CBRN for the British Register of Security Engineers and Specialists RSES, Member 25 years of the International Association of Bomb Technicians and Investigators (IABTI) and Member of the Royal United Services Institute, Member of the Australian College of Education.

DR SALLY LEIVESLEY PhD Lond., MSPD, BA(Hons) Qld., FICPEM,FRSA,MACE,MIABTI,RSES

Sally@Newrisk.com

Managing Director Newrisk Limited  UK  www.Newrisk.com

Mobile+ 44 (0) 79749 16470 Direct Line 24 Hour +44 (0) 20 8660 3873

Chair Permanent Monitoring Panel for Catastrophic Risk

World Federation of Scientists

Newrisk Limited, Fifth Floor, 30-31 Furnival Street, London, UK EC4A 1JQ

Tanya Janca, also known as SheHacksPurple, is the author of ‘Alice and Bob Learn Application Security’. She is also the founder of We Hack Purple, an online learning academy, community and weekly podcast that revolves around teaching everyone to create secure software. Tanya has been coding and working in IT for over twenty years, won numerous awards, and has been everywhere from startups to public service to tech giants (Microsoft, Adobe, & Nokia). She has worn many hats; startup founder, pentester, CISO, AppSec Engineer, and software developer. She is an award-winning public speaker, active blogger & streamer and has delivered hundreds of talks and trainings on 6 continents. She values diversity, inclusion and kindness, which shines through in her countless initiatives.

Advisor: Nord VPN, Cloud Defense, NeuraLegion, ICTC PAC
Founder: We Hack Purple, OWASP DevSlop, #CyberMentoringMonday, WoSEC

• Valentina Soria is an Executive Director and Head of Global Threat Intelligence at Morgan Stanley. She supervises a global team of intelligence analysts who are responsible for monitoring the threat landscape and assessing operational risks to the Firm’s assets, people, and operations.
• Her team’s expertise spans the cyber and fraud domains, as well as geopolitical risk, civil unrest, extreme weather, terrorism, and pandemics.
• Prior to joining Morgan Stanley in January 2017, she spent three years at the Bank of England where she was appointed Head of Threat Intelligence in 2015. In this capacity, Valentina has been a longstanding contributor to several global industry information-sharing initiatives. In addition to being an active member of the FS-ISAC Americas Threat Intelligence Committee (TIC) for almost two years, she co-chairs the TIC’s Executive Committee. She is also an active contributor to the Analysis & Resilience Center (former FSARC) and actively supports efforts to enhance intelligence sharing between government and private sector partners.
• Valentina started her career as a Counter-Terrorism Fellow at the Royal United Services Institute in London prior to joining IHS Jane’s as a security consultant specializing in counterterrorism, national security, and intelligence matters.