Building a Cyber Risk Management Program

About the Authors

Brian Allen was the chief security officer for Time Warner Cable, a critical infrastructure Fortune 130 enterprise. He worked for EY as the subcompetency lead for their cyber risk management program efforts, presenting to dozens of boards and C-suite executives at some of the largest global organizations. Today, Brian works at the Bank Policy Institute as the SVP, Cybersecurity and Technology Risk Management, working with bank executives (CEO, GC, CRO, CISO), advocating for the industry in front of regulators, legislators, law enforcement agencies, and the intelligence communities. Mr. Allen has worked on several industry and government coordinated critical infrastructure groups including the executive committees of the Comm-ISAC and Comm-Sector Coordinating Council. He was appointed by the FCC Chairman to represent the communications industry in working with NIST on the development of the Cybersecurity Framework. Mr. Allen is an author of two enterprise security risk management books, an adjunct professor at the University of Connecticut’s MBA Financial Risk Management program, teaching cybersecurity risk and enterprise risk management concepts, and has spoken globally on the topic, including multiple keynote addresses. He holds multiple industry certifications and is a member of the New York State Bar Association.

Brandon Bapst is a cyber risk advisor in EY’s cybersecurity practice. He works closely with executives, CSOs, and CISOs on developing mature cyber ...