Ken Kulawiak
Senior Manager,
Wipfli LLP
The Cyber-Risk Cycle: Obtain Leadership Buy-in and Maintain FTC Compliance
Thursday, May 02, 2024 | 11:45AM–12:45PM CT | Greenway Ballroom D-G, Second Floor
Session Type:
Breakout Session
Delivery Format:
Presentation/Panel Session
The Federal Trade Commission (FTC) Safeguards Rule requires higher education to develop an "information security program." This and the ever-present cyberthreats circulating the globe have ensured that your board and senior leaders are finally listening when it comes to the importance of cybersecurity. But what do you tell them and how do you convey the messages in a digestible, meaningful manner to obtain budget and buy-in to maintain and improve your information security program? The answer is RISK. The discussion will identify security frameworks that can be leveraged to measure the effectiveness of your Information Security Program. Via a standardized framework for managing risk, metrics and information can be developed to leverage telling your story and teaching your board members which risks are most critical to the organization, all while ensuring FTC compliance stipulations are met.