This presentation outlines the journey of improving our Cyber Security program by transforming how we document, assess, and manage risk. We will begin by highlighting the initial challenges discovered when joining the team—specifically the reliance on undocumented, tribal knowledge and the inconsistencies this created across processes, controls, and risk understanding.
Next, we’ll discuss insights gained from meeting with engineers, architects, analysts, and leaders. These conversations revealed variations in execution, gaps in documentation, and a shared need for consistency, transparency, and a unified approach.
We will walk through our gap-identification work using a compliance context review, examining policies, standards, regulatory mappings, SOPs, and existing risk-control relationships. This analysis exposed areas where controls were undocumented, misaligned, or not functioning as intended.
The presentation then covers our shift to structured risk assessments aligned with frameworks such as NIST and ISO, followed by the creation of a unified Process, Risk, and Controls Framework. This included defining processes, mapping risks, assigning ownership, and standardizing documentation for policies, standards, and controls.
We will conclude by sharing best practices and demonstrating how these efforts strengthened our culture, improved visibility, and advanced our overall cyber risk posture.
SPEAKER: Gary Martino, CEO at Sicura Networks LLC
Gary has over 20 years of cyber security experience implementing compensating controls and identifying and quantifying risks to comply with PCI, ISO, NIST, and HIPAA regulations. Working across various industries including defense, healthcare, hospitality, sport and leisure to build successful security teams to detect and protect against the latest threats.
Over the years, Gary has held various industry certifications in both IT and Security and is currently enjoying retirement and spending much needed time with family.
Visit Gary on LinkedIn: https://www.linkedin.com/in/gary-martino-8487567/
DETAILS:
Date: Thursday, April 16
Time: 12:00 - 1:15 p.m.
Location: In-Person and Online via Zoom
CPE: 1
ON PREMISES
XiFin, Inc.
12225 El Camino Real
San Diego, CA 92130
Attendance capacity is limited to 50
ONLINE
Online access is available via the chapter’s Zoom account (registration below).
Attendance capacity is 500