Using Incident Response Practice For Stealth Risk Analysis

Tuesday, August 19, 2025
9:45 AM - 10:15 AM
CISO Forum Track (Salon III)

About This Session

As a CISO, it's hard to get the attention of executive leadership amongst all the competing business issues. One big problem is that even if they agree on the potential impact of an incident, they won't agree on the probability of it happening, so your plans get lost in the shuffle. In this session we'll talk about one way to get them to take the risks as seriously as you do: tabletop exercises. Put on your social engineering hats, and prepare for the kind of fun that usually only the red team gets to have.

Speaker

Wendy Nather2

Wendy Nather2

Senior Research Initiatives Director - 1Password

Wendy Nather is the Senior Research Initiatives Director at 1Password. She was previously the Director of Advisory CISOs at Duo Security, Research Director at the Retail ISAC, and Research Director of the Information Security Practice at 451 Research. Wendy led IT security for the EMEA region of the investment banking division of Swiss Bank Corporation (now UBS) and served as CISO of the Texas Education Agency. She was inducted into the Infosecurity Europe Hall of Fame in 2021. Wendy serves on the Board of Directors for Sightline Security, is on the Steering Committee for the IST Ransomware Task Force, and is a Senior Fellow at the Atlantic Council's Cyber Statecraft Initiative.