The One-Hour Security Plan: Transforming Cybersecurity Risk Management

Tuesday, May 20, 2025 | 8:00AM–8:45AM ET | Harborside Ballroom B, 4th Floor
Session Type: Breakout Session
Delivery Format: Presentation/Panel
Cyber risk management is often slow, compliance-driven, and burdensome for security teams, while resource teams remain disengaged. This session explores how Agile and Lean principles transformed cyber risk management—streamlining workflows, decentralizing execution, and improving security alignment. Developed at the University of Arizona and later by SibylSoft, this methodology evolved from manual, spreadsheet-based processes to a structured, AI-powered platform that made implementation easier and more scalable. Presenters Sonya Lowry (SibylSoft CEO & Founder), Teresa Banks, and Wendy Epley (University of Arizona Information Security Office) will share how process optimization and the right tools have increased engagement, accelerated risk identification, and improved security outcomes.

Presenters

  • Wendy Epley

    Principal Analyst, Information Security GRC, The University of Arizona
  • Sonya Lowry

    President & Chief Innovation Officer, SibylSoft, Inc.

Resources & Downloads

  • One Hour Security Plan Slides

    Updated on 5/9/2025