POPULARITY
3 episodes with Operational risk
7 episodes with Operational risk
2 episodes with Operational risk
2 episodes with Operational risk
2 episodes with Operational risk
2 episodes with Operational risk
7 episodes with Operational risk
31 episodes with Operational risk
2 episodes with Operational risk
Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society. In this episode, Justin interviews Colette Cummins, Chief Risk Officer of Inland Fisheries Ireland and a RIMS-CRMP Commissioner, on what it's like to be a CRO in an organization whose mission is protecting a national natural resource. Justin invites Colette to share her career journey, and she tells how she developed in credit risk management, audit, and enterprise risk management, and how she landed in the public sector, protecting the environment while guiding Inland Fisheries Ireland toward building a solid risk framework. Colette speaks of the surprises she found in the public sector, and the impressive risk mindset and commitment she finds at IFI. Listen for principles of building out risk registers and a risk framework, whether in the private sector or a public sector agency. Key Takeaways: [:01] About RIMS and RIMScast. [:16] About this episode of RIMScast. Our guest today is Collete Cummins. She is the Chief Risk Officer for Inland Fisheries Ireland and a RIMS-CRMP Commissioner. We're going to have a great dialog. But first… [:42] RIMS-CRMP Workshop. We are delighted to announce that on August 27th and 28th, RIMS President Manny Padilla will be leading the two-day in-person workshop at St. John's University at 101 Astor Place in New York City. A link to the registration is in this episode's show notes. [1:02] RIMS-CRMP Virtual Workshops. RIMS will partner with PARIMA for the RIMS-CRMP Exam Prep on September 1st and 2nd. Registration links are in this episode's show notes. [1:12] On the webinars page, you will see a two-part series hosted by the RIMS Membership Department. The "Classroom to Career" webinar series highlights how RIMS equips students with the knowledge, skills, and connections needed to thrive in risk management careers. [1:28] Participants will gain insights into industry trends, career pathways, and practical tools that help them confidently step into the evolving world of risk management after graduation. These sessions will be hosted on September 1st and 9th. [1:41] These sessions are member exclusives and are complimentary for RIMS members, of course. So, if you are interested in becoming a member, this would be the time. Visit RIMS.org/membership. [1:51] RIMS is back on YouTube. Our handle is @RIMSOfficialChannel. We've got plenty of videos there, including RIMScast, RIMScast Canada video podcasts, and other informative and entertaining content from RIMS. Subscribe to the channel today! [2:08] On with the Show! Our guest today is Colette Cummins. She is the Chief Risk Officer for Inland Fisheries Ireland. The IFI is the dedicated state agency for protecting, managing, and conserving Ireland's inland fisheries and sea angling resources. [2:26] Colette is the agency's first CRO, but she's not new to risk management. We're going to hear about her career journey and why she feels that this position was custom-made for her, combining her love for environmental awareness with her risk management knowledge. [2:42] Colette is also a RIMS-CRMP Commissioner, and on September 24th, you can hear from her directly, along with Elliott Long, another RIMS-CRMP Commissioner, in the informational session, "A Conversation with RIMS-CRMP Commissioners Who Hold the Credential." [2:58] That's a free informational session. Visit RIMS.org/CertificationWeek for more information. A link is in this episode's show notes. But we're here to talk with Colette about her fascinating career and risk philosophies. Let's get to it! [3:13] Interview! Colette Cummins, Welcome to RIMScast! [3:28] Colette was told once that she is excessively optimistic. She's very positive. She took it as a compliment. [4:18] Colette started fresh out of university in credit analysis and credit risk management. She worked in a few financial services organizations. It gave her a taste for risk management at a high level. It was around portfolio analysis and the credit history of customers. [4:51] The role Colette was in wound down, and she was looking to move into a different area in the company, Hewlett Packard Enterprise, in the financial services subsidiary. An opportunity came up to work in internal audit. She decided to try it for a year. She stayed in it for 15 years. [5:32] In the middle of those 15 years, Colette had an interim stint in Operational Risk Management for a year and a half, and she loved it. [5:47] Colette says, in Operational Risk, you're seeing down at a tactical level how to manage and monitor risk. It was very much around risk monitoring. [6:01] Colette explains why she stayed in internal audit for 15 years. Ten years were spent in various internal audit management roles in the financial services subsidiary. It was a tough time for HPE in terms of meeting the new regulatory challenges in Ireland and Europe for financial services. [6:41] Colette was asked to take on the Head of Internal Audit role. She did that for five years. She went into Internal Audit for one year in 2008. In 2015, she worked in Operational Risk. In 2017, she was asked to come back to take over as Head of Internal Audit. [7:11] It was a challenging situation because new EU regulations were coming in for banks and financial services businesses. It was a lot of pressure to meet these. There was a lot of scrutiny from Irish regulators. It was a challenging environment for Internal Audit. [7:53] When Colette moved in as Head of Internal Audit, it was a pivotal role in terms of steering the organization through that regulatory time. It was a great learning experience and very helpful now that she's in a public sector role. [8:09] Colette says, the whole time she was Head of Internal Audit, she was thinking, "How do I get back to Risk? How do I get out of here?" She loved Operational Risk. [8:27] Colette networked heavily within the organization. She got the opportunity to move out of Financial Services up into the global HPE organization as an Enterprise Risk Manager. She got that role through networking. She enjoyed that ERM role and did it for about five years. [9:26] Colette says it was a strategic role. She was working with the heads of each business unit, reviewing their risks. It had a very heavy emphasis on reporting to the audit committee and the board on what was happening in risk management in the business units. [9:58] Colette didn't feel as if she was effecting change or driving new strategies within the organization, but she learned a huge amount about negotiating with senior management and a lot about the fundamentals of risk management. [10:18] For the last year or two of her role, Colette wondered what she was doing there. She had a sense of wanting to stay in risk management but wanting to do something different, maybe something more value-add and less commercially driven. [10:39] Colette says towards the end of 2025, HPE announced it was cutting resources and implementing cost-cutting initiatives. As part of that, her role was made redundant. At first, it was a big upheaval and quite a shock after 22 years with the organization. [11:03] Colette says that upheaval turned into a great opportunity. It was the push she needed to ask herself where she wanted to go and what she wanted to do. It was an opportunity to try something completely different. [11:28] Colette says she didn't know anybody in the public sector. She had no contacts. But in Ireland, you cannot in any way canvass for jobs in the public sector. Everything is heavily regulated with very strict anti-corruption regulations. [11:54] Colette says she had no knowledge of the organization. She had no intention of applying for a role for at least six months. But she started looking at what was out there. She was going to put some time into development and building out her CV and getting some qualifications. [12:33] Colette says she had been thinking she would like to do something in the public sector; something more meaningful and less commercially-driven. She wanted to do something with more autonomy, more impact, and more control over risk at the organisation. [12:54] Colette says, one Wednesday afternoon, she was looking, and she saw this job that had just come up. It's in exactly the right location, it's public sector, and it's IFI, an environmental body. Colette said, "Wow! This is it!" Forgetting her six months off, she had to go for it. [13:19] Colette interviewed for the job when she hadn't yet finished her old role at HPE. She was hugely busy, trying to wrap up her role and interviewing. The interview process for the public sector in Ireland is extremely rigorous and tough. She was successful in the role. [13:43] Colette says she just had a couple of weeks off and then went straight into it in March of 2026. She has been CRO at Inland Fisheries Ireland for four months now. [14:06] Colette says IFI is the state organization that is responsible for protecting the fish stock in Ireland. Ireland is a country with a lot of waterways. IFI is responsible for protecting the fish in 45,000 miles of rivers, 128,000 hectares of lakes, and 3,500 miles of shoreline. [14:43] It's doing everything to protect and restore the fish stock in those areas. Historically, the organization was very much about protection, preventing fishermen from overfishing and from fishing illegally, especially protected species. IFI has a substantial staff who patrol the rivers. [15:17] Now IFI is working on pollution, reacting to any pollution episodes and ensuring that they're investigated and stopped. Colette says that prevention measures sit with a different state body. The Environmental Protection Agency works on the prevention of pollution. [15:41] Colette says because the IFI has staff on the ground, it will see pollution coming in, react to it, and get in touch with the EPA to say, We've seen something coming into this river at this location. We need your team out here to source and stop it. [16:08] The IFI staff on the ground takes samples of the water and has them ready for when the EPA team comes to look at it. Another huge element of what the IFI does is restoring the habitat and creating the perfect environment for the fish. They research how the stock is developing. [16:35] The IFI research teams go out and do things like electrofishing, where they stun the fish for a few seconds to take a scale from the fish, test it, and work out the genetic trail of the fish and where they've come from. There's a huge amount of information they take from that. [16:58] The IFI works on the rivers, as well. Salmon, in particular, always go back to where they spawned. You need to keep that route open for them. If a barrier, like a dam, has been built, the IFI team works with construction companies to remove those. [17:19] The IFI has a wide series of activities: patrolling, protection, pollution, habitat restoration, and research. Colette is sure risk professionals hearing this are saying, That's a lot of risks! [17:37] Justin points out that the IFI covers thousands of miles. It's not just the particulars of the job but also the volume and area it has to cover. [18:03] Colette says the other element is that fishing or angling is part of Ireland's tourist industry. The IFI promotes fishing, without overfishing, obviously, and supports and partners with the local fishing organizations. [18:28] A Quick Break! Many fantastic RIMS events are coming up in 2026. You can register now for the Second Annual RIMS Texas Regional Conference, which will be held from August 10th through the 12th at the Grand Hyatt on the San Antonio River Walk. [18:44] Visit RIMS.org/Events for registration information. The hotel cutoff date was July 10th. Reservations may still be made after the hotel cutoff date, subject to availability; however, the negotiated group rate is no longer guaranteed, so reserve now. [19:00] The 11th Annual Chicagoland Risk Forum will return to the Old Post Office on Thursday, September 24th, 2026. Visit ChicagolandRiskForum.org for more information. [19:11] The RIMS Western Regional Conference will be held from October 4th through the 7th in Seattle, Washington. The agenda is live, and registration is open. Visit RIMSWesternRegional.com and the link in this episode's show notes for more information. [19:28] Save the dates: October 18th through the 21st. We will be in Quebec City to celebrate the 50th Live RIMS Canada Conference. Booth sales are open, and sponsorship opportunities are still available. Advance registration is open now. [19:44] Visit RIMSCanadaConference.ca for more information. Also, remember to check out RIMS.org/Canada for our spinoff show, RIMScast Canada, hosted by National Conference Committee Chair, Aaron Lukoni. [19:59] The RIMS ERM Conference 2026 will be held on November 19th and 20th in Columbus, Ohio. Registration is now open. [20:08] An announcement seeking nominations for the RIMS Global ERM Award of Distinction will be made public in July. Visit RIMS.org/ERM2026. [20:19] We're already looking to RISKWORLD 2027, which will be held over four days in New Orleans, Louisiana, from April 18th through the 21st! The call for session proposals is now live and will stay active through August 21st. [20:34] RIMS members can exclusively register by September 4th for the best rate. And get first access to the hotel block. Hotel reservations open on October 28th, ahead of public registration. Sitting this out is the real risk! The link to registration is in this episode's show notes. [20:54] Let's Return to Our Interview with Inland Fisheries CRO and RIMS-CRMP Commissioner Colette Cummins! [21:05] Justin comments that fish is a critical food source, so IFI has to make sure that they're clean, healthy, and they keep repopulating. Colette agrees but says that it's less about food and more about environmental protection. [21:23] Colette says some species have been reduced a huge amount in the last number of years because of things like pollution, habitat destruction, etc. It's really about environmental protection, restoring that stock, and bringing it back to where it should be for a natural balance. [21:42] Colette says her CRO role is new at IFI. That's what made it even more exciting for her. She says, when she came in, it was basically a blank sheet. IFI had dealt with risk by using a third party to give them a risk management model and some training. [22:10] Colette says the IFI was trying to work with that in-house, without any risk management expertise. It brought in a bit of a risk mindset, but essentially, Colette had a clean sheet to start with. She came in in March, and now she's building out the risk register. [22:36] Colette's first task was to design the risk framework. Colette loves risk management and has done lots of various elements of it, but she's never had complete autonomy, where she was driving change in the organization. [22:55] By full autonomy, Colette means she owns everything. Anything that happens to do with risk comes to her. [23:01] Up until now, Colette's role has been designing the framework: establishing how the organization is going to manage risk, building that out, getting people on board with that framework. It's split into six departments within the organization. [23:29] Each head of that department, or ELT member, will own their risk register, or their list of risks. Colette is working closely with them to ensure they have all their risks listed within that register and that they fully understand them. [23:48] Colette is looking at their controls and helping them devise new controls, looking at how the risk matches the risk appetite of the organization, and working with the next level of management beneath them to help them develop their risk registers to report up to the ELT. [24:40] Colette says IFI had been trying to recruit a CRO for some time. She wishes she had known! She would have applied last year. She just happened to see it. The existing model wasn't working. There was a real need. [25:00] The audit committee and board were saying they weren't happy. They said they needed to see risk management alive in the organization. Colette had to dive straight in, hit the ground running, and start building it out straightaway. It was exactly the challenge she was looking for. [25:18] Colette says it's so good to have that autonomy and responsibility, but also accountability. She is completely accountable for everything that happens with risk. Colette gets each member of the ELT to develop their risk register and report that up to the audit committee. [25:45] If anybody is doing anything where they want to think about risk, they talk to Colette. It's not complicated. They don't go to somebody else. Everybody knows, if it's got the word "risk," they come to Colette. Colette says the full visibility of everything is great. [26:19] Colette says she's starting with a very simplistic model to build the registers. She says it's drawn more from ISO, but it's a very simplistic model to get the organization started. Colette moved from a private-sector global IT company to the public sector. [26:56] The one thing that is challenging is that things move much slower in government. It moves much slower, and that's probably even more so in Ireland than in Europe and maybe than in the U.S. [27:16] You could come in and see this is the change that is needed, and think you could go ahead and effect that change within a couple of weeks? Oh, no you don't! You need to take everything slowly and get the right approvals and authorizations, etc. [27:29] Colette says she is starting with a really simplistic model: set out your risks, set out your controls, set out your mitigating actions, and then, we're going to get the organization working on that with that framework. [27:43] Colette hopes to do it within six months, but knowing the public sector, it could be a year. Then start building in other elements to it to make it a more mature and sophisticated framework. [28:19] Every change has to be approved by the Audit and Risk Committee (ARC). If Colette wants to make a small tweak in the existing framework, it goes back to the Audit and Risk Committee, which meets every three months. [28:51] Colette presented to the ARC in June. She presented how she wanted to move forward. There was no question. She knew they were going to approve it. She couldn't just go ahead and put the framework in place. [29:08] It needs to go through the protocols and have the conversation with the ARC and just take it nice and slow to effect any change. That is one challenge that's different for Colette. But otherwise, she can bring all of her experience from different areas and use every bit of it. [29:37] One More Quick Break! RIMS has launched RIMS, The Foundation for Risk ManagementTM. The Foundation is dedicated to shaping the future of the profession. Contribute to strengthen the global risk management community and invest in the future of the industry. [29:57] The Foundation also supports the Spencer Educational Foundation but has a different mission. The Foundation focuses on providing opportunities for those professionals who have already decided to enter risk management and are just getting started. [30:11] You can learn more about the Foundation by visiting RIMS.org/FRM. While you're there, be sure to check out information about the Susan Meltzer Scholarship Fund, which was established to honor Ms. Meltzer, who was RIMS President in 1999 and 2000. [30:30] Susan Meltzer was a cherished RIMS President and contributed so much to RIMS and the greater risk community. Learn more at RIMS.org/FRM. [30:39] Let's Return to Our Interview with Colette Cummins! [30:53] Colette Cummins is speaking with us today from County Kildare, about 30 miles outside Dublin, Ireland. The IFI offices are on the edge of Dublin, the capital of Ireland. Colette says the land is actually greener and more beautiful than the travel brochures could describe. [31:30] Colette says Ireland is full of rich waterways, which keeps her in a job. She lives near Dublin but is originally from the Southwest of Ireland, which is by far the most beautiful. The coastline is stunning. It's where most Irish go on holidays. It's gorgeous. [32:00] Colette says the accent in the Southwest of Ireland is different. Colette's husband from the middle of Ireland requests subtitles when he visits her family in the Southwest. Colette describes the difference between the accents in the South and North of Ireland. [33:05] Colette says the IFI Corporate Risk Register has generic risks around AI, cyber, training, and resources. [33:33] One of their biggest risks is health and safety. Staff are going out and patrolling rivers. They will sometimes come across fishermen who are happily overfishing and not keen to meet a patrolling officer who tells them they shouldn't be taking all this fish and depleting the stocks. [34:08] There is a health and safety risk with the patrolling officer being out on a river on boats. There is a health and safety risk in meeting an acrimonious and adversarial fisherman. [34:28] Because IFI does research, they have staff in labs, using high-tech equipment, with a health and safety risk. They have engineers looking at the rivers and habitats and maybe some constructions in the rivers that need to be removed. They have a health and safety risk. [34:37] These are new risks and things for Colette to get her head around. How do we do this? How do we manage that? And the other side is regulation. There are a lot of different regulations that impact IFI. [35:22] Colette says, In the public sector, your reputation is critically important, because you're the face of the state. Reputation is an impact factor you need to build into every risk. If IFI does something wrong, it could end up in the national media the day after. IFI uses taxpayers' money. [36:15] Colette says another huge category of risk for IFI is procurement, ensuring they are using taxpayers' money in the right way and not misusing it. [36:50] Colette says that prioritizing risks comes back to the goals. In procurement, there is the risk of spending money in a way that's not compliant. There is also the risk that there are too many procurement controls and the business can't move fast enough or do what it needs to do. [37:24] Colette says it comes to the organizational goals. What is the impact on the organizational goals? Which risk is going to have a greater detrimental impact on the organization's mission? One caveat: the health and well-being of the staff override everything. [37:55] Health and safety risk trumps everything. IFI would be completely averse to any risk that will impact the health and safety of the staff. Health and safety trumps every other risk. [38:16] Justin says he and Colette met recently for the RIMS-CRMP series where everyone can see her on September 24th. Justin says Colette is very positive and upbeat and speaks about her role with a lot of enthusiasm and joviality. [38:39] Colette says there are 330 people in IFI. It's not commercially driven, so a lot of people are at IFI because they love the work. For some people Colette works with, it's a vocation. They would nearly do the same job without being paid because they have such passion for it. [39:11] Colette met with the research team on site at the rivers to get a better understanding and just to see the passion they have for the job. Using her risk knowledge to help them do their jobs better and to help them protect themselves from risks was rewarding and enjoyable to Colette. [39:45] Colette says being able to use her experience across the organization is just fantastic. Colette has a lot of different experience, and to bring it all together and use it every day when she is challenged with a new task is fantastic and very rewarding. [40:27] Colette says this is the field staff's very busy time because this is when all the fishing is happening, this is when pollution is more likely to happen, and when the temperatures go up, the fish are under pressure, so you have to try and protect the waters. [40:42] Colette says the research staff was delighted to hear that someone was coming down from the head office to go out and make the time to really understand the organization. They were very anxious to show her everything. There is such pride in the organization. [41:!5] Justin says a lot of the risk professionals listening are in the private sector, and he asks Colette what would most surprise them about risk management in a public environmental organization. [41:40] Colette says a lot of the differences in the public sector are what you would expect: things move slower, and the protocols. [41:49] What surprised Colette the most is what a strong risk mindset they have. There's a good understanding of risk already, even through the layers of management. They can look at what's going on, the processes, and the activities and ask, "What are the risks here?" [42:16] There is also a commitment to risk that Colette was not expecting. She was expecting to meet a research manager who wanted to research and leave risks to Colette. She hasn't had that anywhere. They all ask her to talk with them about their risks. "Am I managing them right?" [42:39] Colette says there is knowledge and commitment, and that has been the biggest surprise for her. It obviously makes her job a lot easier. [42:48] Justin says this is excellent. It has been such a pleasure to meet you these last couple of days. We're going to see you during RIMS Certification week on September 24th. [42:57] Justin says, You will be co-hosting the informational session, "A Conversation with RIMS-CRMP Commissioners Who Hold the Credential." You're such a breath of fresh air. We really appreciate your contributions, and I learned a lot speaking with you today and yesterday. [41:12] Justin says, You have a fascinating job, and I hope that you have a chance to attend a RIMS event, maybe lead a session, and connect with our live audiences, as well. Colette says she would love to at some stage in the future. [43:32] Special thanks again to Colette Cummins of Inland Fisheries Ireland for joining us here on RIMScast. [43:38] You can hear Colette again on September 24th during RIMS Certification Week for the special informational session, "A Conversation with RIMS-CRMP Commissioners Who Hold the Credential." [43:49] That session will be held at 10:00 a.m. Eastern. Visit RIMS.org/CertificationWeek. The link is also in this episode's show notes. We've got sessions on the 22nd, 23rd, and 24th of September. We look forward to seeing you there. [44:05] Plug Time! Become a RIMS member and get access to the tools, thought leadership, and network you need to succeed. Visit RIMS.org/membership or email membershipdept@RIMS.org for more information. [44:22] Risk Knowledge is the RIMS searchable content library that provides relevant information for today's risk professionals. Materials include RIMS executive reports, survey findings, contributed articles, industry research, benchmarking data, and more. [44:39] For the best reporting on the profession of risk management, read Risk Management Magazine at RMMagazine.com. It is written and published by the best minds in risk management. [44:52] Justin Smulison is the Business Content Manager at RIMS. Please remember to subscribe to RIMScast on your favorite podcasting app. You can email us at Content@RIMS.org. [43:05] Practice good risk management, stay safe, and thank you again for your continued support! Links: RIMS Certification Week: Sept. 21‒24 | Complimentary For All RIMS Texas Regional Conference 2026 | Aug. 10‒12 in San Antonio | Register Now! Spencer Educational Foundation's 2026 Funding Their Future Gala | Sept. 17, 2026 RISKWORLD 2027 Registration | RIMS members can lock in 2026 rates now through Sept. 4 | Education Content Submission ChicagoLand Risk Forum | Sept. 24, 2026 RIMS Western Regional Conference — Oct. 4‒7, 2026 | Seattle, WA | Register Today. RIMS Canada Conference — Oct. 18‒21, 2026 | Quebec City | www.rimscanadaconference.ca | Advance Registration Open | Sponsorship Opportunities Available RIMS ERM Conference 2026 | November 19‒20 in Columbus, Ohio | Registration Now Open! | www.rims.org/ERM2026 RIMS, the Foundation for Risk Management Spencer Educational Foundation — Scholarships and Grants | Open Calls and Timelines. RIMS Now RIMS-Certified Risk Management Professional (RIMS-CRMP) | Insights Video Series Featuring Joe Milan! The Strategic and Enterprise Risk Center RIMS Diversity Equity Inclusion Council RIMS-CRMP Stories RIMScast Canada — Episodes Now Live RISK PAC | RIMS Advocacy RIMScast on YouTube! RIMS Risk Management Magazine | Contribute | Q2 2026 Issue Now Available Sponsor RIMScast — Sales@RIMS.org Fisheriesireland.ie/ Upcoming RIMS-CRMP Virtual Workshops: RIMS-CRMP Exam Prep Workshop — Live In NY — Aug 27‒28! RIMS-CRMP Exam Prep with PARIMA | Sept 1‒2 Full RIMS-CRMP Prep Course Schedule See the full calendar of RIMS Virtual Workshops Upcoming RIMS Webinars: RIMS.org/Webinars "RIMS Student Series: Classroom to Career Part 1" | Sept 1 "RIMS Student Series: Classroom to Career Part 2" | Sept 9 Related RIMScast Episodes: "Reputation and Defense with Jeff McKissack" "Choosing the Challenge with Johnell Holly" "Supply Chain Integrity and Sustainability with Nicole Sherwin of EcoVadis" Sponsored RIMScast Episodes: "48 Hours From a Storm: What to Do Before A Hurricane Strikes" | Sponsored by Global Risk Consultants, a TÜV SÜD Company (New!) "AI-Scale, Risk Ready: Engineering Controls for the New Data Center Boom" | Sponsored by Global Risk Consultants, a TÜV SÜD Company "Facing Into Risk: Navigating the New Risk Landscape" (New!) | Sponsored by AXA XL "Secondary Perils, Major Risks: The New Face of Weather-Related Challenge" | Sponsored by AXA XL "The ART of Risk: Rethinking Risk Through Insight, Design, and Innovation" | Sponsored by Alliant "Mastering ERM: Leveraging Internal and External Risk Factors" | Sponsored by Diligent "Cyberrisk: Preparing Beyond 2025" | Sponsored by Alliant "The New Reality of Risk Engineering: From Code Compliance to Resilience" | Sponsored by AXA XL "Change Management: AI's Role in Loss Control and Property Insurance" | Sponsored by Global Risk Consultants, a TÜV SÜD Company "Demystifying Multinational Fronting Insurance Programs" | Sponsored by Zurich "Understanding Third-Party Litigation Funding" | Sponsored by Zurich "What Risk Managers Can Learn From School Shootings" | Sponsored by Merrill Herzog "Simplifying the Challenges of OSHA Recordkeeping" | Sponsored by Medcor "How Insurance Builds Resilience Against an Active Assailant Attack" | Sponsored by Merrill Herzog "Third-Party and Cyber Risk Management Tips" | Sponsored by Alliant RIMS Publications, Content, and Links: RIMS Membership — Whether you are a new member or need to transition, be a part of the global risk management community! RIMS Virtual Workshops On-Demand Webinars RIMS-Certified Risk Management Professional (RIMS-CRMP) RISK PAC | RIMS Advocacy RIMS Strategic & Enterprise Risk Center RIMS-CRMP Stories — Featuring RIMS President Manny Padilla! RIMS Publications, Content, and Links: RIMS Membership — Whether you are a new member or need to transition, be a part of the global risk management community! RIMS Virtual Workshops On-Demand Webinars RIMS-Certified Risk Management Professional (RIMS-CRMP) RISK PAC | RIMS Advocacy RIMS Strategic & Enterprise Risk Center RIMS-CRMP Stories — Featuring RIMS President Manny Padilla! RIMS Events, Education, and Services: RIMS Risk Maturity Model® Sponsor RIMScast: Contact sales@rims.org or pd@rims.org for more information. Want to Learn More? Keep up with the podcast on RIMS.org, and listen on Spotify and Apple Podcasts. Have a question or suggestion? Email: Content@rims.org. Join the Conversation! Follow @RIMSorg on Facebook, Twitter, and LinkedIn. About our guest: Colette Cummins, Chief Risk Officer, Inland Fisheries Ireland RIMS-CRMP Commissioner Production and engineering provided by Podfly.
Cyber and Operational Risk in the Quantum Era: Financial Stability amid Escalating Geopolitical ConflictThis panel took place at the 2026 International Monetary Fund and World Bank Group Spring Meetings.Financial stability is under fire as geopolitics and cyber risk collide. As global tensions intensify and technological capabilities accelerate, financial institutions face a rapidly evolving threat landscape where cyber operations, financial crime, and state-sponsored actors are increasingly intertwined. From ransomware campaigns and sanctions evasion to sophisticated cyber intrusions targeting critical infrastructure, adversaries are exploiting digital systems and global financial networks in new and complex ways.As these threats continue to evolve, the quantum horizon introduces an additional layer of strategic risk. This executive panel will examine how advances in quantum computing could reshape cyber and operational risk across the financial sector, while also considering the growing convergence between cyber-enabled crime, ransomware payments, sanctions evasion, and global illicit finance networks. Leaders from policy, finance, and technology will explore the implications of quantum-enabled decryption, the expanding links between cyber threats and illicit finance, and the operational vulnerabilities that could undermine confidence in critical financial infrastructure.The discussion focused on how institutions and regulators can strengthen resilience, enhance cross-border coordination, and prepare for a future in which emerging technologies, cyber conflict, ransomware, and financial crime increasingly intersect. The panel explored what these developments mean for international efforts to combat cyber-enabled financial crime and how global standards bodies, national authorities, and financial institutions can strengthen cooperation to protect the integrity and resilience of the international financial system.Opening Remarks:Cindy Termorshuizen, Deputy Minister of International Development, Government of CanadaPanelists:Giles Thomson, Director, Economic Crime and Sanctions, His Majesty's Treasury; Incoming President, FATFStefan Ingves, Chair, Toronto Centre; Former Governor, Sveriges RiksbankMichele Mosca, Professor, Institute for Quantum Computing, University of WaterlooModerator:Jennifer Elliott, Assistant Director, Monetary and Capital Markets, IMF; Board Member, Toronto CentreWatch the executive panel session here.Read the transcript here. Read their biographies here.
Dr. Jeffrey Edwards, founder and chief risk strategist of FFERM Technologies, joins host KJ to challenge the financial industry's decades-old reliance on likelihood and impact heat maps for risk management. He traces that methodology back to a 1984 Department of Defense weapons framework that was never designed for financial services, and explains why it leaves institutions blind to risk contagion, compounding, and black swan events. The episode makes a compelling case that the next major financial collapse is not unpredictable. It is just being measured with the wrong ruler. Key Takeaways: 4:58 — Where did the financial industry's risk management framework actually come from? 14:28 — What happens when two separate risk events collide at the same time? 15:32 – When should an institution stop relying on the heat map as its primary risk tool? 23:19 — How does FFERM Technologies transform a risk score into something actually useful? Quote of the Show (13:09):"Math can guide you down the wrong path if you're asking and looking at it the wrong way." – Dr. Jeffrey Edwards Join our Anti-PR newsletter where we’re keeping a watchful and clever eye on PR trends, PR fails, and interesting news in tech so you don't have to. You're welcome. Want PR that actually matters? Get 30 minutes of expert advice in a fast-paced, zero-nonsense session from Karla Jo Helms, a veteran Crisis PR and Anti-PR Strategist who knows how to tell your story in the best possible light and get the exposure you need to disrupt your industry. Click here to book your call: https://info.jotopr.com/free-anti-pr-eval Ways to connect with Dr. Jeffrey Edwards:LinkedIn: http://www.linkedin.com/in/drjeffreyedwardsCompany Website: https://www.ffermtech.com/site How to get more Disruption/Interruption: Amazon Music - https://music.amazon.com/podcasts/eccda84d-4d5b-4c52-ba54-7fd8af3cbe87/disruption-interruption Apple Podcast - https://podcasts.apple.com/us/podcast/disruption-interruption/id1581985755 Spotify - https://open.spotify.com/show/6yGSwcSp8J354awJkCmJlD YouTube: https://www.youtube.com/results?search_query=disruption+%2F+interuuptionSee omnystudio.com/listener for privacy information.
Send us Fan MailMost business owners think resilience means predicting the next crisis.They're wrong.You can't control the economy. You can't control government policy, cybercriminals, supply chain disruptions, competitors, or the next reputational crisis.But you can control how prepared your business is to respond.In this episode of Mastering Risk, we strip away the complicated frameworks, endless spreadsheets, and risk management jargon to focus on a much simpler question:What happens when something your business depends on suddenly stops working?Every business operates within four critical risk domains:Cyber Risk: protecting the technology, systems, data, and digital infrastructure your business depends on.Operational Risk: identifying hidden dependencies, vulnerable suppliers, key personnel, and single points of failure that could disrupt your ability to deliver.Strategic Risk: understanding the regulatory, economic, competitive, and political environment that can change the rules governing your business.Reputational Risk: preparing for the event, mistake, controversy, or online crisis that can damage years of trust in a matter of hours.The objective isn't to eliminate risk.That's impossible.The objective is to understand the business you've built, identify where it is vulnerable, and decide what you will do before disruption occurs.Because the middle of a crisis is the worst possible time to start figuring out your response.If you're a founder, entrepreneur, CEO, or business leader who wants to protect revenue, maintain customer confidence, and build a company capable of growing despite disruption, this episode is for you.Subscribe to Mastering Risk for practical, evidence-based strategies to help you build a stronger, more resilient business.https://preparednesslabs.caDISCLOSURE Information shared here is for educational purposes only. Individuals and business owners should evaluate their own business strategies, and identify any potential risks. The information shared here is not a guarantee of success. Your results may vary.Copyright © 2026.Support the showhttps://preparednesslabs.ca/
The Do One Better! Podcast – Philanthropy, Sustainability and Social Entrepreneurship
Patrick Dunne, author of "Boards", joins host Alberto Lidji on the Do One Better Podcast for a timely conversation on how boards can become more effective, more agile and more valuable. Drawing on the third edition of his book "Boards", Patrick explores how governance is changing in a world shaped by AI, faster decision making, dynamic strategy, rising uncertainty and more complex risk. He looks at the growing role of AI in boardrooms, from summarising papers and tracking regulatory change to supporting better decisions, while also considering where human judgement remains essential. Patrick also discusses the increasing importance of subcommittees, the value of bringing domain experts and next generation voices into governance, and why advisory boards may not always be the best way to access external insight. He reflects on trustee remuneration, generational diversity and the need for boards to move beyond traditional meeting formats. A highly practical episode for board members, chairs, chief executives, trustees, philanthropists and social entrepreneurs who want to strengthen governance and make better decisions. Patrick's executive experience includes 26 years in a variety of investment and management roles with 3i Group plc where, until 2012, he was Communications Director, a member of its Operating committee and Chairman of its Operational Risk forum. Visit our Knowledge Hub at Lidji.org for information on 350+ case studies and interviews with remarkable leaders in philanthropy, sustainability and social entrepreneurship.
This bonus episode expands on the themes discussed in Episode 4 by taking a closer look at the practical safety challenges facing data center operators and EHS professionals. The conversation highlights how rapidly changing technologies are reshaping the data center environment. From AI-driven computing infrastructure and evolving cooling requirements to the widespread use of lithium-ion batteries, organisations must continually reassess risks and adapt operational controls. While many hazards are familiar, the scale and speed of technological change require safety professionals to remain agile and closely connected to operational teams. The discussion also highlights the growing use of technology to improve safety outcomes, including battery monitoring systems, video-based ergonomics assessments, and procedural compliance monitoring. A key theme throughout the episode is organisational complexity. Data centers often involve multiple stakeholders, including property owners, tenants, contractors, and end users, creating challenges around accountability, communication, and risk ownership. Success depends on strong collaboration, clear governance structures, and open communication between all parties involved. Looking ahead, the future of data center safety will require continuous learning, close collaboration between safety and environmental professionals, and a proactive approach to understanding emerging technologies. As data centers continue to grow in scale and importance, maintaining safe and resilient operations will become increasingly critical.
The Institute of Internal Auditors Presents: All Things Internal Audit In this special episode of All Things Internal Audit, Anthony Pugliese sits down with IIA Global Board Chair Stacey Schabel to discuss her leadership theme for the year: Risk-Focused, Future-Ready. Drawing on more than 25 years of experience in audit and risk leadership, Schabel shares her vision for helping internal auditors navigate an increasingly complex risk environment shaped by AI, cyber threats, geopolitical uncertainty, and rapid technological change. The conversation explores the evolving role of internal audit, the importance of developing future-ready skills, and what success looks like for the profession in the year ahead. HOST: Anthony Pugliese, CIA, CPA President and CEO, The IIA GUEST: Stacey Schabel, CIA, CPA Senior Vice President and Global Head of Operational Risk, Reinsurance Group of America Chair, The IIA Global Board of Directors KEY POINTS: Introduction and Stacey Schabel's Background [00:00:00-00:02:08] Risk-Focused, Future-Ready: The Theme for the Year [00:02:08-00:02:57] How the Risk Landscape Is Changing [00:02:57-00:03:41] What It Means to Be Risk-Focused and Future-Ready [00:03:41-00:04:52] Opportunities and Challenges for the Profession [00:04:52-00:07:13] Advice for Emerging Internal Audit Leaders [00:07:13-00:08:16] Staying Curious and Understanding Risk [00:08:16-00:09:24] Embracing Technology, AI, and Mentorship [00:09:24-00:10:16] Building Influence Through Trust and Credibility [00:10:16-00:10:45] What Success Would Look Like as Global Board Chair [00:10:45-00:12:14] Advancing AI Readiness and Integrated Assurance [00:12:14-00:12:43] Inspiring the Next Generation of Internal Auditors [00:12:43-00:13:30] Ensuring Every Voice Is Heard Across the Profession [00:13:30-00:15:00] Final Thoughts [00:15:00-00:15:21] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Leadership Profile: Stacey L. Schabel Global Internal Audit Standards Vision 2035 AI Knowledge Center Three Lines Model The Institute of Internal Auditors Leadership Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Welcome to another Book Club edition! In this episode, host Kimberley Cole sits down with Penny Cagan, industry veteran, academic at Columbia and NYU, and author of Managing Operational Risk in a Changing World. From navigating the "heady days" of Basel II in the immediate aftermath of Nick Leeson's Barings debacle to building the world's first operational risk database, Penny has spent her career gently exploding conventional thinking. She joins us to discuss why change initiatives fail when you only convince the C-suite, why the second line of defence needs to stop acting like an armchair referee, and how treating AI agents like messy human employees is the key to modern governance. Shownotes 02:06 – The Nick Leeson Effect & Defining Operational Risk 04:14 – The RCSA Overhaul: A Painful Lesson in Bottom-Up Trust 08:10 – The Quantitative Love Affair vs. Old-Fashioned Management 11:04 – Peddling FIRST: Building the Industry's First Risk Database 17:48 – The Changing World: Reshaping the Operating Model 29:09 – Agentic AI: Why Robots Need an Employee Handbook
Episode 3 of Rethinking EHS, Season 3 focuses on the transformation of risk management in a rapidly changing global environment. The discussion highlights how modern risks now spread faster than ever through interconnected supply chains, social media, workforce pressures, and geopolitical instability. The episode also explores how organisations are using leading indicators, management systems, and predictive approaches to identify operational risks earlier, while integrating EHS considerations into due diligence, procurement, sustainability, and organisational change processes. Ultimately, the episode underscores that resilience depends on organisations proactively understanding risk, improving communication, and embedding risk management into every level of business decision-making. Rethinking EHS is brought to you by the Inogen Alliance. Inogen Alliance is a global network of 70+ companies providing environment, health, safety, and sustainability services, working together to provide one point of contact to guide multinational organizations to meet their global commitments locally. Visit inogenalliance.com to learn more. *** Guest quotes: Alizabeth Smith: “The risk they hadn't controlled, the risk they hadn't looked at, was cultural.” Alizabeth Smith: “If you don't deal with communication and consistency, people start believing the program will change in six months anyway.” *** Timestamps: 00:00:00 – Introduction to cultural risk management 00:00:33 – Case study: when strong systems still failed 00:01:25 – Identifying cultural breakdowns and lack of trust 00:02:46 – Communication silos in large organisations 00:03:55 – Building a global risk register and consistent controls 00:05:00 – Why onboarding and training often fall short 00:06:09 – Wearables, micro-training, and new approaches to engagement 00:07:27 – Executive incentives and unintended reporting behaviours 00:09:39 – Leading indicators versus lagging indicators 00:11:44 – Case study: transforming culture in a global manufacturing company 00:15:04 – Developing future EHS leadership internally 00:15:51 – Closing reflections Sponsor Copy Rethinking EHS is brought to you by the Inogen Alliance. Inogen Alliance is a global network of 70+ companies providing environment, health, safety, and sustainability services, working together to provide one point of contact to guide multinational organizations to meet their global commitments locally. Visit inogenalliance.com to learn more. Produced by Madcontent.co.nz *** Links https://Inogenalliance.com/resources https://Inogenalliance.com/podcast Keith on LinkedIn: https://www.linkedin.com/in/keith-knoke-27587a7 Alizabeth on LinkedIn: https://www.linkedin.com/in/alizabeth-aramowicz-smith-61618615/ Chris on LinkedIn: https://www.linkedin.com/in/chris-trim-51637831/
Cyber and Operational Risk in the Quantum Era: Financial Stability amid Escalating Geopolitical ConflictThis panel took place at the 2026 International Monetary Fund and World Bank Group Spring Meetings.Financial stability is under fire as geopolitics and cyber risk collide. As global tensions intensify and technological capabilities accelerate, financial institutions face a rapidly evolving threat landscape where cyber operations, financial crime, and state-sponsored actors are increasingly intertwined. From ransomware campaigns and sanctions evasion to sophisticated cyber intrusions targeting critical infrastructure, adversaries are exploiting digital systems and global financial networks in new and complex ways.As these threats continue to evolve, the quantum horizon introduces an additional layer of strategic risk. This executive panel will examine how advances in quantum computing could reshape cyber and operational risk across the financial sector, while also considering the growing convergence between cyber-enabled crime, ransomware payments, sanctions evasion, and global illicit finance networks. Leaders from policy, finance, and technology will explore the implications of quantum-enabled decryption, the expanding links between cyber threats and illicit finance, and the operational vulnerabilities that could undermine confidence in critical financial infrastructure.The discussion focused on how institutions and regulators can strengthen resilience, enhance cross-border coordination, and prepare for a future in which emerging technologies, cyber conflict, ransomware, and financial crime increasingly intersect. The panel explored what these developments mean for international efforts to combat cyber-enabled financial crime and how global standards bodies, national authorities, and financial institutions can strengthen cooperation to protect the integrity and resilience of the international financial system.Opening Remarks:Cindy Termorshuizen, Deputy Minister of International Development, Government of CanadaPanelists:Giles Thomson, Director, Economic Crime and Sanctions, His Majesty's Treasury; Incoming President, FATFStefan Ingves, Chair, Toronto Centre; Former Governor, Sveriges RiksbankMichele Mosca, Professor, Institute for Quantum Computing, University of WaterlooModerator:Jennifer Elliott, Assistant Director, Monetary and Capital Markets, IMF; Board Member, Toronto CentreWatch the executive panel session here.Read the transcript here. Read their biographies here.
In this episode, host Kelsey Hipkin was LIVE on location at the Grey Eagle Event Centre in Calgary, AB, for AMTA's 88th Annual Conference, to introduce a very special episode.What separates the safest carriers from the rest? In this episode, recorded on the Grey Eagle Event Centre Stage, April 22, 2026, we explore what industry leaders are doing to prioritize Occupational Health and Safety (OHS), reduce workplace incidents, and maintain top safety ratings.Our panelists for this conversation are Jeff Rosnau, CEO of Whitecourt Transport; Kyle Pouliot, Director of Operations at Caneda Transport; and Matt Cook, Director, HSE & Operational Risk at Arrow Transportation Systems, with moderator Laura Lunt, Board Director at AMTA.If you have any questions for our guests from the Leading with Safety panel, sponsored by Tiger Calcium, or would like to learn more, please contact memberservices@amta.ca, and we will get you in touch with our panelists.As mentioned by Jeff, learn more about AMTA's Certificate of Recognition (COR) program on our website: https://amta.ca/cor/.As mentioned by Matt, visit our Micro-Learn library on our website: https://amta.ca/micro-learn/.If you have any questions or concerns about topics related to what was discussed in this episode, or commercial transportation and driver safety, please do not hesitate to contact our Member Services team at memberservices@amta.ca.Thank you to everyone who joined us for our 88th Annual Conference a few weeks ago. AMTA's 89th Annual Conference is already in production, and we look forward to seeing you all in Enoch, AB, at the River Cree Resort and Casino April 7-8, 2027.AMTA has secured our dates for our 2026 Safety Summits. Register now for Medicine Hat on May 14 and Whitecourt on September 30 - it's only $30!Driver and Volunteer registration is open now for AMTA's Professional Truck Driving Championship! (registration closes May 22)Please note registration for both Drivers and Volunteers goes quickly. Learn more about PTDC on our website: https://amta.ca/event/2026-professional-truck-driving-championship/.Are you interested in getting involved with the AMTA? Please contact membership@amta.ca for Membership opportunities and learn the value that AMTA can bring to you and your organization.AMTA seeks to represent our Members in all facets of the industry, but that only works if we hear from you on the issues affecting your day-to-day. We encourage everyone to reach out and share their thoughts and ideas. Please don't hesitate to contact us at memberservices@amta.ca. Do you have an idea for a future Steering Change series? Message us at marcom@amta.ca. Listeners, don't forget about the AMTA Mailbag! We want to hear from you with your industry queries. DM us with your questions, and we will answer via the AMTA Mailbag segment in future episodes or directly via our team of advisors. Join the conversation at: Web: amta.caInstagram: amta_ca/Facebook: AlbertaMotorTransportAssociationLinkedIn: alberta-motor-transport-associationThank you for taking the time to listen. We encourage you to share this episode with those in your network who would receive value from our conversation. Make sure to hit that subscribe button and have a safe day!
How do leaders stay steady in the storm of tough choices? This week, I sit down with Jack Briggs, a retired major general with a 30-year career in the military who is also a highly seasoned, for a masterclass in pressure-tested decision making.The episode debunks the myth that high-stakes choices are unique to the military or boardroom. Instead, Jack argues, “pressure is pressure,” whether the risk is reputational, operational, or personal. The discussion highlights the three traits of the best decision makers: anchoring decisions in firm principles, seeking help with humility, and making the call… decisively, not reactively.Listeners will come away with four essential questions to use in any crisis and learn why reframing “crises” into a set of solvable problems is vital for calm, effective leadership. This conversation is a must for anyone seeking practical, repeatable strategies to lead well, even when the stakes—and the anxieties—are high.What You'll Learn- Anchor your decisions in principles.- Lead with humility and build your team.- Distinguish between problems and crises.- The power of a structured decision framework.- Be decisive and own the outcome.- Focus on your sphere of influence.Podcast Timestamps03:18 Jack's origin story: from the Thunderbirds to the Air Force Academy05:37 When leadership first appeared: Boy Scouts, the leadership laboratory, and the Eagle Scout07:37 The Air Force Academy as a leadership lab: authority vs. responsibility10:42 Being the snowplow: how to delegate without abandoning accountability14:11 Leadership is a science and an art: training the recipe, then adapting it16:41 Combat to boardroom: why pressure is pressure regardless of context19:19 Defending North America: leading at continental scale21:28 The three characteristics of the best decision makers23:24 The archer analogy: principles, input, decisiveness26:45 What leaders get wrong: fighting the fight they wish they had28:06 Mob rule, Moses, and principled decision-making32:11 Crisis vs. problem: why language matters under pressure33:10 Snowstorms and problem buckets: a real-world example35:26 The four questions for high-stress decisions40:01 Checklists that work: laminate it and they will keep it43:18 Humility plus decisiveness: being disagree-able45:36 Choosing the least worst option and owning it48:35 Final thoughts: stop chasing outcomes, start leading in your three feetKEYWORDSPositive Leadership, Decision Making, Decision Making Under Pressure, Humility, Air Force Career, Military Leadership, Air Force Academy, Leadership Lab, Principles-Based Decisions, Delegating Authority, Crisis Management, Operational Risk, Financial Risk, Reputational Risk, Pressure in Leadership, Crisis vs Problem, Crisis Communication, CEO Success
Cyber and Operational Risk in the Quantum Era: Financial Stability amid Escalating Geopolitical ConflictThis panel took place at the 2026 International Monetary Fund and World Bank Group Spring Meetings.Financial stability is under fire as geopolitics and cyber risk collide. As global tensions intensify and technological capabilities accelerate, financial institutions face a rapidly evolving threat landscape where cyber operations, financial crime, and state-sponsored actors are increasingly intertwined. From ransomware campaigns and sanctions evasion to sophisticated cyber intrusions targeting critical infrastructure, adversaries are exploiting digital systems and global financial networks in new and complex ways.As these threats continue to evolve, the quantum horizon introduces an additional layer of strategic risk. This executive panel will examine how advances in quantum computing could reshape cyber and operational risk across the financial sector, while also considering the growing convergence between cyber-enabled crime, ransomware payments, sanctions evasion, and global illicit finance networks. Leaders from policy, finance, and technology will explore the implications of quantum-enabled decryption, the expanding links between cyber threats and illicit finance, and the operational vulnerabilities that could undermine confidence in critical financial infrastructure.The discussion focused on how institutions and regulators can strengthen resilience, enhance cross-border coordination, and prepare for a future in which emerging technologies, cyber conflict, ransomware, and financial crime increasingly intersect. The panel explored what these developments mean for international efforts to combat cyber-enabled financial crime and how global standards bodies, national authorities, and financial institutions can strengthen cooperation to protect the integrity and resilience of the international financial system.Opening Remarks:Cindy Termorshuizen, Deputy Minister of International Development, Government of CanadaPanelists:Giles Thomson, Director, Economic Crime and Sanctions, His Majesty's Treasury; Incoming President, FATFStefan Ingves, Chair, Toronto Centre; Former Governor, Sveriges RiksbankMichele Mosca, Professor, Institute for Quantum Computing, University of WaterlooModerator:Jennifer Elliott, Assistant Director, Monetary and Capital Markets, IMF; Board Member, Toronto CentreWatch the executive panel session here.Read the transcript here. Read their biographies here.
If your team is burned out, your operation is already bleeding.You just haven't measured the loss yet.Burnout is a system failure.Not a personal weakness.Exhausted teams make poor decisions.They communicate less effectively.They disengage quietly.And quiet disengagement is the most dangerous kind.Because the work still “gets done.”Just not well.Follow-ups get missed.Residents feel it.Turnover starts creeping.Reputation takes hits in public, fast.Leaders who ignore burnout signals pay later.Team turnover.Resident turnover.Errors.Reputational harm.And reputational harm is expensive because it spreads instantly.Here's the operator question.What should I look for before burnout turns into a staffing crisis?Missed follow-ups.Low morale.Resident complaints that nobody has the energy to solve.Team members who clock in but mentally check out.You can feel it the moment you walk the property.I've used this analogy for years.Dirty socks or apple pie.You cross the threshold and you know which one it is.Tension or warmth.Stress or stability.That smell is real, even when nobody says a word.Adjusting workload, clarity, and recovery is preventive maintenance for people.Just like your preventive maintenance schedule protects assets, recovery protects performance.Burnout is expensive in turnover.It's expensive in quality.It's expensive in craftsmanship on turns and service requests.It's expensive at the front desk where customer service becomes robotic and cold.Bonus tip.Build solutions into the system.Clear roles.Workload pacing.Psychological recovery built into the cadence of the calendar.And here's a question that should make every leader uncomfortable.When was the last time your ops review included recovery as a KPI?Call to ActionThis week, do a burnout walk. Talk to the onsite team. Look for missed follow-ups and low energy. Then adjust one workload lever and schedule one recovery block. Preventive maintenance isn't just for equipment.MultifamilyCollective Blog: https://www.multifamilycollective.comThe Daily Collective Book: https://amzn.to/3YI6BDaHosted by: https://www.multifamilymedianetwork.com
Send me a messageIf your safety metrics are improving, are your people actually safer? Or are you just getting better at measuring the wrong things?In this episode of the Resilient Supply Chain Podcast, I'm joined by John Dony, CEO and co-founder of the What Works Institute, and Mike Swain, Technical Enablement Manager at Evotix, to unpack a stubborn problem hiding in plain sight: why serious injuries and fatalities remain frustratingly hard to reduce, even as traditional safety metrics appear to improve. In a world of tighter regulation, more fragile operating models, and rising scrutiny across global supply chains, this is a resilience issue, a risk issue, and very much a leadership issue.We dig into why lagging indicators can create a false sense of control, and why better reporting can actually be a sign that the truth is finally surfacing. You'll hear how Mike saw incident reporting jump by 800% after better systems were introduced, and why that was good news, not bad. We also break down why the classic safety triangle often fails to predict serious harm, especially in complex supply chains shaped by contractors, seasonal labour, handoffs, and fragmented accountability.We also explore where AI, data, visibility, and governance genuinely add value, and where hype still outruns reality. You might be surprised to learn that one of the sharpest lines in the episode is John's view that if organisations want AI to work, they need a time machine to go back and get their data right first.
Mid-market organizations are transitioning from pilot projects to operationalizing generative AI and agentic workflows, according to a TechEYE article and Tech Isle survey cited by Dave Sobel. This shift centers on outcome-driven automation but exposes providers to new liability concerns, mainly due to fragmented, unreliable data and shadow AI usage—employees employing unauthorized tools outside official controls. The primary risk is that MSPs may be blamed for incidents where contract boundaries and technical controls do not cover browser-based generative AI use, making forensic evidence and documented enforcement essential for defending accountability. Supporting data from Tech Isle found that over 5,000 companies are pursuing structured approaches to AI-enabled growth, but face persistent issues in data trust, governance, and user fatigue. Additionally, European investment in sovereign cloud infrastructure is projected to triple between 2025 and 2027, driven by regulatory demands and concerns about U.S. data sovereignty. MSPs managing split architectures—sovereign providers for regulated data and hyperscalers for everything else—encounter API mismatches, operational complexity, and margin pressure. The recommendation is to standardize policy enforcement, identity management, and residency mapping while prioritizing audit-ready reporting and exception handling. AI-driven cyberattacks have increased, with reports from Level Blue and Check Point Research highlighting a surge in both attack volume and sophistication. Only 53% of CISOs feel prepared for AI threats, despite 45% expecting to be impacted within a year. Browser-based generative AI use introduces visibility gaps, raising the risk of negligence claims when service providers cannot demonstrate governance or forensic readiness. Reauthorization of the Cybersecurity Information Sharing Act (CISA) underscores that voluntary data sharing is inadequate, with CIRCA now requiring mandatory 72-hour incident reporting for critical infrastructure. The key takeaways for MSPs and IT leaders are to proactively define AI coverage and governance in contracts, enforce acceptable use policies, and instrument monitoring to close visibility gaps. Providers who can deliver forensic-grade telemetry, managed compliance programs, and operational readiness for incident reporting will be better positioned to defend against penalties, retain higher-value accounts, and offer meaningful differentiation. These structural challenges—fragmented control planes, increased compliance costs, and permanent risk friction—necessitate a strategic shift toward governance-led service models.Three things to know today00:00 Midmarket Shifts to Agentic AI as Europe Triples Sovereign Cloud Spending by 202706:08 Most Security Chiefs Say They're Not Ready for AI-Powered Cyberattacks Coming This Year09:46 CISA 2015 Reauthorized Through 2026; CIRCIA Mandates Expose Voluntary Sharing Failure This is the Business of Tech. Supported by: TimeZest IT Service Provider University
What if the IT industry stopped pretending everything is “fine”?In this Autonomous IT live show, Automox CEO Justin Talerico shares candid perspectives on the real state of IT as the industry heads into 2026 — where things are breaking down, why burnout is becoming an operational risk, and what actually needs to change.Topics include:-- Why many IT careers begin with curiosity and stall under constant operational pressure-- The operational risk created by manual work and hero-based infrastructure-- Why automation initiatives fail and why the root cause is rarely the tooling-- How IT leaders can rebuild trust in automation and autonomy-- What IT leaders will look back on and question about endpoint management in 2025The discussion concludes with a rapid-fire game:AI vs Human vs Hybrid, deciding where IT work belongs in 2026.This is not a product pitch.It is not a trend report.It is an honest conversation about how IT actually works today and how it needs to evolve.
www.marktreichel.comhttps://www.linkedin.com/in/mark-treichel/In this episode of With Flying Colors, Mark Treichel is joined by former NCUA senior leaders Todd Miller and Steve Farrar for a deep dive into NCUA's 2026 Supervisory Priorities Letter — and what it means in the real world for credit unions heading into the next exam cycle. Deep Dive on NCUA Priority Lett…With significant staffing reductions at the agency and a shift toward more “risk-based” supervision, the group discusses whether exam programs will truly become more tailored — or whether credit unions should expect more conservative ratings, more findings, and less dialogue.The conversation also explores what's emphasized, what's missing, and how operational realities inside NCUA may shape supervision more than policy statements.Key Topics Discussed
Rob Hughes — CISO at RSA and Champion of a Passwordless FutureNo Password Required Season 7: Episode 1 - Rob HughesRob Hughes, the CISO at RSA, has more than 25 years of experience leading security and cloud infrastructure teams. In this episode, he reflects on his unconventional career path, from co-founding the original Geek.com and serving as its Chief Technologist during the early days of the internet, to leading security and systems design at Philips Home Monitoring.Jack Clabby of Carlton Fields, P.A. and Kayley Melton welcome Rob for a wide-ranging conversation on identity, leadership, and the realities of modern cybersecurity. Rob currently leads RSA's Security and Risk Office, overseeing cybersecurity, information security governance, and risk across both RSA's products and corporate environment.Rob explains his dream for a passwordless future. He unpacks why passwords remain one of the largest sources of cyber risk, how real-world incidents and password-spraying attacks have accelerated change, and why phishing-resistant technologies like passkeys may finally be reaching a tipping point. The episode wraps with the Lifestyle Polygraph, where Rob lightens the conversation with stories about gaming with his kids, underrated horror films, and classic cars.Follow Rob on LinkedIn: https://www.linkedin.com/in/robert-hughes-816067a4/Chapters: 00:00 Introduction to No Password Required01:43 Meet Rob Hughes, CISO at RSA02:05 The Role of a CISO in a Security Company05:09 Transitioning to the CISO Role08:00 The Early Days of Geek.com12:14 Launching a Startup During the Dot Com Boom14:30 The Push for a Passwordless Future18:21 Tipping Point for Passwordless Adoption20:20 Ongoing Learning in Cybersecurity26:09 Managing Stress in High-Pressure Environments33:46 The Lifestyle Polygraph Begins34:15 Career Insights in Cybersecurity36:08 Dream Cars and Personal Preferences39:58 Underrated Horror Films41:19 Creating a Cybersecurity Monster
www.marktreichel.comhttps://www.linkedin.com/in/mark-treichel/In this special preview episode of With Flying Colors, Mark Treichel tees up an upcoming live, on-stage discussion from the Florida Q's Cruise with team members Steve Farr and Todd Miller.Just days before the cruise, NCUA released its 2026 Supervisory Priorities Letter, and as always, that letter gives us important clues about what examiners will be focused on in the year ahead — and just as importantly, what's driving examiner behavior behind the scenes.This episode serves as a primer for the deeper, post-cruise discussion, where we'll incorporate real-time feedback and questions from credit union leaders attending the cruise.
Send me a messageAI won't fix broken decisions. Capital markets are driving sustainability. And climate risk is already a safety issue.So why are EHS and sustainability still treated as separate systems?In this episode of the Resilient Supply Chain Podcast, I'm joined by Catryna Jackson, Global Environmental Health and Safety and Sustainability Advisor at Evotix, and Monique Parker, Chief Sustainability Officer at Elevra Lithium. Between them, they bring decades of frontline experience across EHS, sustainability, data, and operations. This matters now because climate disruption, regulatory pressure, and supply chain shocks are collapsing the gap between “operational risk” and “sustainability risk” whether companies are ready or not.In our conversation, you'll hear how sustainability momentum in the US has been driven less by regulation and more by investors and insurers. We break down why climate impacts like heat stress, flooding, and wildfires are no longer future scenarios but immediate safety and continuity risks. And you might be surprised to learn why throwing AI at messy ESG data only makes bad decisions faster.We also get practical. We talk about why EHS teams sit on a goldmine of data, how integrating safety and sustainability changes risk visibility at board level, and where most organisations go wrong when they try to “just start reporting”. From CSRD data overload to supply chain engagement failures, this episode cuts through the noise and focuses on decision architecture, not hype.
AI isn't going anywhere. But for small business owners, using it the wrong way can create financial blind spots, bad decisions, and long-term risk. This episode is about what happens when AI replaces judgment instead of supporting it, especially when it comes to your numbers. I'm joined by Carol Cox, founder of Speaking Your Brand and an early adopter of AI with a background in software development. We break down how small business owners can use AI to save time and reduce overwhelm without outsourcing financial leadership or losing clarity in decision-making. Carol explains: 04:39 Where AI helps small business owners and where it creates risk 07:17 How AI hallucinations lead to financial blind spots 14:21 How to use AI in operations, marketing, and revenue without losing control 28:58 What fear of AI reveals about CEO confidence and leadership If you're feeling overwhelmed by business finances, worried about making costly mistakes, or unsure how to use AI responsibly, this episode will help you make smarter decisions and protect your business financially. Featured Guest: Carol Cox, Founder and CEO of Speaking Your Brand Sources:
AI isn't going anywhere. But for small business owners, using it the wrong way can create financial blind spots, bad decisions, and long-term risk. This episode is about what happens when AI replaces judgment instead of supporting it, especially when it comes to your numbers. I'm joined by Carol Cox, founder of Speaking Your Brand and an early adopter of AI with a background in software development. We break down how small business owners can use AI to save time and reduce overwhelm without outsourcing financial leadership or losing clarity in decision-making. Carol explains: 04:39 Where AI helps small business owners and where it creates risk 07:17 How AI hallucinations lead to financial blind spots 14:21 How to use AI in operations, marketing, and revenue without losing control 28:58 What fear of AI reveals about CEO confidence and leadership If you're feeling overwhelmed by business finances, worried about making costly mistakes, or unsure how to use AI responsibly, this episode will help you make smarter decisions and protect your business financially. Featured Guest: Carol Cox, Founder and CEO of Speaking Your Brand Sources:
In this episode of AML Conversations, John Byrne sits down with Lisa Arquette, recently retired Deputy Director of Operational Risk at the FDIC, to reflect on her decades-long career in financial regulation. From the oil crisis in Texas to the 2008 financial meltdown and the evolving challenges of AML, sanctions, and fraud, Lisa shares her unique perspective on how banking has transformed—and what lies ahead. The conversation covers the Corporate Transparency Act, reputational risk, humanitarian banking access, and the implications of recent executive orders on fair banking. A must-listen for professionals navigating the intersection of compliance, policy, and innovation.
In this podcast episode, Dawn Tiura interviews Dina Ghobrial, founder and CEO of Halo AI, about her upcoming Summit session, "Operational Risk Intelligence: Designing Future-Ready Programs that Scale." Dina, along with Becky Newton of Ansys will discuss the importance of designing scalable risk programs that can adapt to rapidly evolving threats, the need for real-time data in risk management, and practical steps for procurement and compliance teams to enhance their risk assessment processes. To hear more, join us at the Global Executive Summit Omni Scottsdale Resort & Spa from October 6-8th!
In this special episode of the ORX Operational Risk Podcast, Steve Bishop (Research and Information Director, ORX) is joined by Luke Carrivick (ORX Executive Director) and Roland Kennett (Client Success Director, ORX) to share their highlights from LeadersConnect Live 2025. Recorded during the event in New York, this episode covers topics such as: The importance of communication for good operational risk management Takeaways from a Chief Risk Officer (CRO) panel Third party and an extended ecosystem Frameworks and governance For more highlights from the event, check out our blogs: Day 1: https://orx.org/blog/leadersconnect-live-2025-day-1-highlights Day 2: https://orx.org/blog/leadersconnect-live-2025-day-2-highlights About LeadersConnect Live LeadersConnect Live is our premier, in-person, invitation-only event for senior leaders from ORX member firms. It provides an opportunity for Heads of Operational Risk and Heads of Non-Financial Risk to discuss future of operational and non-financial risk (ONFR) and learn about important topics. The 2025 event took place in New York on 20-21 May. To find out more about LeadersConnect Live 2025, visit the event page: https://orx.org/events/leadersconnect-live-2025
The Great Security Debate crew recorded a live episode at the GTS Security Summit in Detroit, Michigan with special guest, Zah Gonzalvo, SVP of Financial, Climate, and Operational Risk at Banco Popular. Tune in for a great discussion on risk, risk mitigation, risk prioritisation, and risk in context. Yep, it's all about risk!Takeaways: The evolution of security has shifted from a binary perspective to a more nuanced understanding of risk management, acknowledging the need for flexibility in addressing diverse security challenges. In contemporary discussions, it is increasingly evident that security must be integrated into business strategy, highlighting the imperative for security professionals to communicate effectively with stakeholders. The role of the Chief Information Security Officer (CISO) has transcended traditional technological boundaries, necessitating a comprehensive grasp of business risk and operational efficiency. Effective risk management within organizations requires a shared responsibility model, where every employee contributes to the overall security posture, thus reinforcing the concept that security is a collective endeavor. Scenario analysis is a potent tool in risk management, enabling organizations to anticipate potential threats and understand the implications of various risk scenarios on their operations. Engaging with business units to contextualize security risks in terms of operational impact and financial implications is vital for securing necessary budgets and resources for security initiatives.
In this episode Jo Shoppee, Head of Operational Risk - Technology at ANZ Bank, shares her unexpected journey into risk management, from a teller at ANZ to technology risk specialist. Jo discusses the challenges of balancing career and family, advocating for part-time roles for senior leaders. She emphasizes the importance of compassion and understanding in risk management, particularly in the three lines of defense model. She notes the shift towards data-driven risk management and the need to stay outcome-focused. She also discusses the top risks in the financial industry, including geopolitical risks, emerging technologies, and energy security. Jo Shoppee: Jo is a commercially focused risk executive with extensive technology and finance sector experience, deep expertise in technology risk management, and a track record for building effective and trusted relationships. Jo worked extensively across Europe in her time with General Electric, and has recently returned to ANZ, where her technology career first started, where she is the head of operational risk management for the Group Technology Division. Jane Tumurbaatar: Jane is a Director at Protiviti with over 12 years' experience in professional services. She has broad expertise across first, second and third lines of defence of risk management in financial services, government, and corporate organisations. Her experience extends to risk transformation, change management and remediation. SHOW NOTES 02:14 Career Journey 05:05 Challenges and Achievements 08:39 Role of Compassion in Risk Management 11:05 Keeping Up with Technology in Risk Management 14:19 Changes in Risk Management Approaches 21:54 Leadership Style Evolution 33:41 Importance of Diversity in Decision Making Transcript and More GRC Content: https://www.riskywomen.org/2024/12/podcast-s7e8-driving-tech-innovation-in-risk-management-jo-shoppee/
Topics include: DC and profession update Talent pipeline AI trends and impacts on critical infrastructure Evolving technology trends across the profession Key technical updates Speakers: Erik Asgeirsson, President and CEO, CPA.com Lisa Simpson, VP, Firm Services, AICPA Rachel Dresen, Senior Director, Congressional & Political Affairs, AICPA Lexy Kessler, Vice Chairman, AICPA Avani Desai, CEO, Schellman Pascal Finette, Co-founder, be radical
In this episode of What's New at CFI on FinPod, we discuss operational risk management in banks, breaking down its four main dimensions: people, processes, systems, and external events. Operational risk stands apart from other risks like credit or market risk, affecting banks uniquely due to strict regulatory standards, particularly those outlined in the Basel Accord. We discuss why these risks are so significant for banks today and how failures in operational risk management often lead to high-profile fines and industry-wide consequences.Listeners will gain insights into why operational risk is one of the top challenges banks face and how our new course dives deep into real-world examples and strategies to manage these risks effectively. This episode is a must-listen for those curious about the complex landscape banks navigate, offering a clear understanding of operational risk and the tools needed to manage it.
Paul Benda, Senior Vice President of Operational Risk and Cybersecurity for the American Bankers Association, joins Megan Lynch and Tom Ackerman warning against scams targeting bank accounts. Their motto, "banks never ask that".
In this episode of the Risk Management Show poidcast, we welcome Michael Schank, a seasoned management consultant with over 25 years of experience in financial services. Michael discusses the limitations of traditional Enterprise Risk Management (ERM) programs and introduces the Process Inventory Framework, a methodology he developed to improve risk management, compliance, and strategic decision-making. Key Topics: Michael's Career Path: His journey in risk management and founding Process Inventory Advisors LLC. Why Traditional ERM Programs Fail: Blind spots, data quality issues, and confusion in operating models. The Process Inventory Framework: How it enhances risk management by integrating a detailed process inventory. Improving Data Quality in Risk Management: Addressing root causes and leveraging process taxonomy in GRC systems. Reducing Chaos and Increasing Accountability: Streamlining operations and improving risk management efficiency. Application Across Risk Types: Benefits for Operational Risk, Compliance Risk, Operational Resiliency, and Third-Party Risk Management.
About the CISO Circuit SeriesSean Martin and Michael Piacente will join forces roughly once per month to discuss everything from looking for a new job, entering the field, finding the right work/life balance, examining the risks and rewards in the role, building and supporting your team, the value of the community, relevant newsworthy items, and so much more. Join us to help us understand the role of the CISO so that we can collectively find a path to Redefining CyberSecurity. If you have a topic idea or a comment on an episode, feel free to contact Sean Martin.____________________________Guest: Michael Piacente, Managing Partner and Cofounder of Hitch PartnersOn ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/michael-piacente____________________________Host: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/sean-martin____________________________This Episode's SponsorsLevelBlue: https://itspm.ag/levelblue266f6cCoro: https://itspm.ag/coronet-30deSquareX: https://itspm.ag/sqrx-l91Britive: https://itspm.ag/britive-3fa6AppDome: https://itspm.ag/appdome-neuv___________________________Episode NotesIn the latest episode of the CISO Circuit Series on the Redefining CyberSecurity Podcast, Sean Martin and Michael Piacente join forces in Las Vegas during the Black Hat USA 2024 Conference to engage in an insightful conversation about the evolving role of the Field CISO. Sean Martin is joined by Michael Piacente, Managing Partner and Co-Founder at Hitch Partners, as they dissect the significance and responsibilities of Field CISOs in today's cybersecurity landscape.A primary focus of the episode is understanding what a Field CISO actually entails. Michael Piacente explains that the role of Field CISO varies widely across organizations, but it generally falls into two categories: customer engagement and sales enablement. Companies might hire Field CISOs to build operational risk assessments and customer relationships, or to drive the technical sales process. For instance, Field CISOs play a pivotal role in product companies by acting as trusted advisors who help communicate complex technical topics in a digestible manner to potential clients.Michael also highlights key attributes that make a Field CISO successful, such as genuine cybersecurity experience, deep technical knowledge, a reputable name in the community, and robust networking skills. Successful Field CISOs can seamlessly transition between discussing technical details and broader strategic goals with stakeholders. Their role often includes influencing product development by bringing practical insights from customers back to the engineering teams.One crucial point raised during the discussion is the integrity and trustworthiness required for a Field CISO. Sean and Michael emphasize that maintaining trust within the CISO community is paramount. Field CISOs should avoid crossing lines between promotional activities and genuine advisory roles. They assert that integrity and transparency remain foremost in these roles, as they are often looked to for unbiased, independent advice.Another topic discussed is how organizations should approach hiring for the Field CISO role. Michael Piacente points out the importance of setting clear expectations, understanding the balance between operational duties and sales enablement, and ensuring that the Field CISO is genuinely aligned with the company's mission and capable of maintaining community trust.Overall, this episode sheds light on the nuanced nature of the Field CISO role, providing valuable insights for both aspiring Field CISOs and organizations looking to hire one. As the role continues to evolve, Michael and Sean underscore the need for a thoughtful approach to defining responsibilities and fostering an environment where integrity and expertise thrive.____________________________Follow our Black Hat USA 2024 coverage: https://www.itspmagazine.com/black-hat-usa-2024-hacker-summer-camp-2024-event-coverage-in-las-vegasOn YouTube:
About the CISO Circuit SeriesSean Martin and Michael Piacente will join forces roughly once per month to discuss everything from looking for a new job, entering the field, finding the right work/life balance, examining the risks and rewards in the role, building and supporting your team, the value of the community, relevant newsworthy items, and so much more. Join us to help us understand the role of the CISO so that we can collectively find a path to Redefining CyberSecurity. If you have a topic idea or a comment on an episode, feel free to contact Sean Martin.____________________________Guest: Michael Piacente, Managing Partner and Cofounder of Hitch PartnersOn ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/michael-piacente____________________________Host: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/sean-martin____________________________This Episode's SponsorsLevelBlue: https://itspm.ag/levelblue266f6cCoro: https://itspm.ag/coronet-30deSquareX: https://itspm.ag/sqrx-l91Britive: https://itspm.ag/britive-3fa6AppDome: https://itspm.ag/appdome-neuv___________________________Episode NotesIn the latest episode of the CISO Circuit Series on the Redefining CyberSecurity Podcast, Sean Martin and Michael Piacente join forces in Las Vegas during the Black Hat USA 2024 Conference to engage in an insightful conversation about the evolving role of the Field CISO. Sean Martin is joined by Michael Piacente, Managing Partner and Co-Founder at Hitch Partners, as they dissect the significance and responsibilities of Field CISOs in today's cybersecurity landscape.A primary focus of the episode is understanding what a Field CISO actually entails. Michael Piacente explains that the role of Field CISO varies widely across organizations, but it generally falls into two categories: customer engagement and sales enablement. Companies might hire Field CISOs to build operational risk assessments and customer relationships, or to drive the technical sales process. For instance, Field CISOs play a pivotal role in product companies by acting as trusted advisors who help communicate complex technical topics in a digestible manner to potential clients.Michael also highlights key attributes that make a Field CISO successful, such as genuine cybersecurity experience, deep technical knowledge, a reputable name in the community, and robust networking skills. Successful Field CISOs can seamlessly transition between discussing technical details and broader strategic goals with stakeholders. Their role often includes influencing product development by bringing practical insights from customers back to the engineering teams.One crucial point raised during the discussion is the integrity and trustworthiness required for a Field CISO. Sean and Michael emphasize that maintaining trust within the CISO community is paramount. Field CISOs should avoid crossing lines between promotional activities and genuine advisory roles. They assert that integrity and transparency remain foremost in these roles, as they are often looked to for unbiased, independent advice.Another topic discussed is how organizations should approach hiring for the Field CISO role. Michael Piacente points out the importance of setting clear expectations, understanding the balance between operational duties and sales enablement, and ensuring that the Field CISO is genuinely aligned with the company's mission and capable of maintaining community trust.Overall, this episode sheds light on the nuanced nature of the Field CISO role, providing valuable insights for both aspiring Field CISOs and organizations looking to hire one. As the role continues to evolve, Michael and Sean underscore the need for a thoughtful approach to defining responsibilities and fostering an environment where integrity and expertise thrive.____________________________Follow our Black Hat USA 2024 coverage: https://www.itspmagazine.com/black-hat-usa-2024-hacker-summer-camp-2024-event-coverage-in-las-vegasOn YouTube:
Gadalia Montoya Weinberg O'Bryan, CEO and founder at Dapple Security is our feature interview this week, interviewed by our own Frank Victory. News from Southwest Airlines, Alterra Mountain Company, Vail Resorts, Botdoc, Crowdstrike, LogRhythm, Red Canary, Lares, Webroot and a lot more. Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com This week's news: Join the Colorado = Security Slack channel Southwest breaks with 50-year tradition and will assign seats; profit falls at Southwest, American Denver-based ski giants to host Olympics events How the Colorado, New Mexico quantum industry plan to use its federal funding Colorado company strikes AI partnership for security at car dealerships Communications outages from CrowdStrike update cancel RTD trains, shut down Colorado DMVs, hinder first responders A Comparison of AI Regulatory Frameworks Merged Exabeam and LogRhythm cut jobs, face lawsuit Halting a hospital ransomware attack - Red Canary Enhancing Organizational Communication and Culture through Purple Team Testing 7 Tips on Keeping Your Data Private When Using AI - Webroot Blog Job Openings: Pax8 - GRC Analyst City & County of Denver - CISO Lumen - Vice President, Deputy Chief Security Officer CoBank - Director, Internal Controls and Operational Risk, IT Westerra Credit Union - Director of Information Security (Hybrid - must reside in CO Meta - Security Partner - Mergers & Acquisitions (M&A) Robinhood - Enterprise Risk Manager State of Colorado - Cyber Criminal Investigator IV Fastly - Senior Manager, Security Detection and Response Motion Recruitment - GRC Analyst The Trade Desk - Sr Staff Product Manager-Data Governance & Policy Applications - Trust & Safety Upcoming Events: This Week and Next: ISSA COS - August Meeting - 8/13 ISSA Denver - August Meeting, "Incident Response" - 8/14 Let's Talk Software Security - Vulnerability Remediation:Fixing Problems or Creating New Ones? - 8/14 ISSA COS - August Mini Seminar - 8/17 Colorado = Security & Colorado CSA Summer Picnic - 8/24 ISC2 Pikes Peak - August Meeting - 8/28 Denver ISSA - AI/ML Special Interest Group - 8/28 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0
Operational Risk Issues Facing Public Entities During Freedom Of Speech
Guy Sereff, Partner at Michael Best is our feature interview this week. News from Arapahoe Community College, Guild, Katilyst, LogRhythm, Ping Identity, Red Canary and a lot more. Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com This week's news: Join the Colorado = Security Slack channel Denver Named Number One on List of Best U.S. Cities for Foodies Colorado Legislature Passes First-in-Nation Artificial Intelligence Bill Denver-area community college first to join Space Force effort to teach aerospace workers How Colorado organizations are preparing to fill quantum positions Denver tech firm Guild grew rapidly, now it is shrinking rapidly Katilyst - Out of Stealth and Ready to be Your Security Champion LogRhythm and Exabeam Announce Intent to Merge, Harnessing Collective Innovation Strengths to Lead the Future of AI-Driven Security Operations What Is Liveness Detection? How It Helps Fraud Prevention What to consider when evaluating EDR Job Openings: Pax8 - IAM Architect Bank of America - Azure - Senior Cloud Security Engineer State of CO - Senior Security Administrator (Audit) CoBank - Director, Internal Controls and Operational Risk, IT Maxar - Senior Information Security Specialist Gates Corp - Cybersecurity & DLP Specialist Quizlet - Staff Cloud Security Engineer Flexential - Manager, Security Architecture Western Union - Information Security Engineer Upcoming Events: This Week and Next: RMISC - 6/11-13 BSides Boulder - 6/14 Let's Talk Software Security - Quality Tests, Security Outcomes: Are We There Yet? - 6/20 CSA Colorado - June Meeting, "Modern AI Threats and Challenges" - 6/25 ISC2 Pikes Peak - June Meeting - 6/26 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0
Join Scott Anchin, VP of Operational Risk and Payments Policy at the ICBA, as we discuss the taskforce the ICBA has put together on check fraud. Each of the sub-groups the committee has assembled are dedicated to addressing significant topics in the fight against this type of fraud.Presented by Remedy Consulting Technology Contract Negotiation & System Assessments, T&C Improvements, and FI Strategic Planning.For more information on BankTalk:BankTalk WebsiteSubscribe to BankTalk NewsRemedy Consulting WebsiteRemedy LinkedInTo speak on the BankTalk Podcast, please email us.
In this episode Mike Yarwood, Managing Director Loss Prevention and Josh Finch, Logistics Risk Manager, sat down to discuss how customer demands can impact logistics operations - posing threats that you may not immediately consider in your risk mitigation strategy. The two consider ways in which you can make your operations safer, more secure and more sustainable. If you would like to hear more advice on supply chain security, listen to our other episodes!
Colin Walsh of Varo Bank joins Nate to discuss Scaling Varo to $1B+, The Future of Banking, & Why the Biggest Opportunity in Fintech is Financial Inclusion. In this episode we cover: Entrepreneurship, Risk-Taking and Founding a Fintech Company Financial Innovation and Customer Needs in the Industry Financial Challenges and Technology Solutions Becoming a Bank and Offering Financial Products to Consumers AI's Impact on Financial Services, Operational Risk, and Productivity Guest Links: Twitter LinkedIn Varo The hosts of The Full Ratchet are Nick Moran and Nate Pierotti of New Stack Ventures, a venture capital firm committed to investing in founders outside of the Bay Area. Want to keep up to date with The Full Ratchet? Follow us on social. You can learn more about New Stack Ventures by visiting our LinkedIn and Twitter. Are you a founder looking for your next investor? Visit our free tool VC-Rank and we'll send a list of potential investors right to your inbox!
Guest: John Sapp , VP, Information Security & CISO at Texas Mutual Insurance Company [@texasmutual]On Linkedin | https://www.linkedin.com/in/johnbsappjr/On Twitter | https://www.twitter.com/czarofcyber____________________________Host: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/sean-martin____________________________This Episode's SponsorsImperva | https://itspm.ag/imperva277117988Pentera | https://itspm.ag/penteri67a___________________________Episode NotesIn this episode of Redefining Cybersecurity, hosted by Sean Martin, listeners are invited to explore the complex landscape of cyber risk governance. John Sapp, a seasoned professional in risk management, emphasizes the importance of defining cyber risk from the perspective of various executives. The CIO, CFO, COO, and general counsel each own different aspects of risk within an organization, and understanding their perspectives is key to effective risk management.The conversation takes an intriguing turn as John introduces the concept of approaching cyber risk governance as a product. This involves understanding the desired outcomes, defining the requirements, and creating personas for different stakeholders. The aim is to develop a common pane of glass, a unified perspective through which each persona can access near real-time information to make informed decisions.John also underscores the importance of presenting information to various stakeholders, including the board and cyber insurance carriers, in a way that demonstrates the strength of the organization's cyber risk program. This approach has tangible benefits, such as a reduction in cyber insurance premiums based on the strength of the cyber risk program.The episode concludes with a discussion on the importance of collective decision-making in managing cyber risk. John emphasizes that it's not about presenting some information and giving somebody responsibility to make a decision, but rather about presenting information in different ways to all the different personas to spur a conversation so that the team can determine the best path forward.This episode is a must-listen for anyone interested in understanding how to approach cyber risk governance in a way that is both effective and efficient. It provides valuable insights into how to manage risk in an ever-evolving digital world.____________________________Watch this and other videos on ITSPmagazine's YouTube ChannelRedefining CyberSecurity Podcast with Sean Martin, CISSP playlist:
Guest: John Sapp , VP, Information Security & CISO at Texas Mutual Insurance Company [@texasmutual]On Linkedin | https://www.linkedin.com/in/johnbsappjr/On Twitter | https://www.twitter.com/czarofcyber____________________________Host: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/sean-martin____________________________This Episode's SponsorsImperva | https://itspm.ag/imperva277117988Pentera | https://itspm.ag/penteri67a___________________________Episode NotesIn this episode of Redefining Cybersecurity, hosted by Sean Martin, listeners are invited to explore the complex landscape of cyber risk governance. John Sapp, a seasoned professional in risk management, emphasizes the importance of defining cyber risk from the perspective of various executives. The CIO, CFO, COO, and general counsel each own different aspects of risk within an organization, and understanding their perspectives is key to effective risk management.The conversation takes an intriguing turn as John introduces the concept of approaching cyber risk governance as a product. This involves understanding the desired outcomes, defining the requirements, and creating personas for different stakeholders. The aim is to develop a common pane of glass, a unified perspective through which each persona can access near real-time information to make informed decisions.John also underscores the importance of presenting information to various stakeholders, including the board and cyber insurance carriers, in a way that demonstrates the strength of the organization's cyber risk program. This approach has tangible benefits, such as a reduction in cyber insurance premiums based on the strength of the cyber risk program.The episode concludes with a discussion on the importance of collective decision-making in managing cyber risk. John emphasizes that it's not about presenting some information and giving somebody responsibility to make a decision, but rather about presenting information in different ways to all the different personas to spur a conversation so that the team can determine the best path forward.This episode is a must-listen for anyone interested in understanding how to approach cyber risk governance in a way that is both effective and efficient. It provides valuable insights into how to manage risk in an ever-evolving digital world.____________________________Watch this and other videos on ITSPmagazine's YouTube ChannelRedefining CyberSecurity Podcast with Sean Martin, CISSP playlist:
While the recent US Basel Endgame proposal will affect many elements of the capital rules, it will especially impact operational risk, a new category of capital charge for most banks. Midsize and larger US banking organizations will need to develop extensive loss-event tracking and quantification systems to comply with new operational risk requirements. Smaller banking organizations, while not required to hold capital for operational risk, should consider implementing tracking systems, given the 10-year lookback requirement, and its potential applicability in acquisitions. Please join Mayer Brown partners Jeffrey Taft and Matthew Bisanz for a discussion of the proposed operational risk requirements, and the key issues that banking organizations should consider during the comment period.
FINRA's Risk Monitoring team is responsible for assessing financial, operational and business conduct risks that exist within individual member firms and across the industry. But they're also the day-to-day point of contact for firms for any questions they may have for FINRA. On today's episode, we're talking to Ornella Bergeron, Senior Vice President of Member Supervision's Risk Monitoring team, Brian Kowalski, Vice President of Diversified and Carrying & Clearing with the Risk Monitoring team, and Andrew McElduff, Vice President of Retail with Risk Monitoring learn more about the team's mandate and work and why they're such a resource for the member firms they work with.Resources mentioned in this episode:Reg Notice 22-25: FINRA Alerts Firms to Recent Trend in Small-Cap IPOsReg Notice 22-29: FINRA Alerts Firms to Increased Ransomware Risks15a-6 Chaperone Firms (from 2021 Exam and Risk Monitoring Report)Episode 90: Single Points of AccountabilityFINRA GatewayFINRA Examination and Risk Monitoring Programs
This episode features Mike Anderson leading a roundtable discussion with Ilona Simpson, Chief Information Officer EMEA at Netskope and David Fairman, Chief Information & Chief Security Officer APAC at Netskope.In this episode, Ilona and David share their predictions and resolutions for cybersecurity in 2023. You'll hear predictions about the industrial metaverse, confidential computing, quantified risk reduction plans, and convergence of priorities for security teams.-----------------“If you think about cybersecurity, we are just a subset of a broader operational risk. Operational risk actually has a much better approach or a little bit more maturity in being able to quantify operational risk in the organization. CISOs need to be able to stand toe-to-toe and be able to have a discussion at parity in regards to risk buydown for this subset of operational risk. And that's really where we are. I think as an industry, as a practice, as a profession, we need to get much smarter at figuring out how do we make this a much more quantitative conversation.” – David Fairman-----------------Episode Timestamps:*(02:47) - Prediction & Resolution: The Industrial Metaverse*(12:23) - Prediction & Resolution: Confidential Computing *(17:54) - Prediction & Resolution: Quantified Risk Reduction Plans*(25:27) - Prediction & Resolution: Convergence of Priorities as a Result of Transformation*(30:38) - Mike's Prediction: Vendor Consolidation-----------------Links:Connect with Ilona on LinkedInConnect with David on LinkedInConnect with Mike Anderson LinkedInwww.netskope.com
Denis Camilo, Risk and Compliance Director at Protiviti, talks with Lauren Munfa, Head of Americas Investment Bank C&ORC at UBS, about how much her parent management training translated to running a large compliance program. SHOW NOTES 00:51 Career Journey 03:58 Top Skills for Risk Management 08:05 The Importance of Immediate and Consistent Rewards 15:49 How to Give an Effective Command 21:26 How Root Cause Analysis Applies at Home and in the Office Transcripts and subscribe to newsletter: https://www.riskywomen.org/2022/11/podcast-s5e9-how-children-have-made-me-a-better-compliance-leader-lauren-munfa/
Kimberley Cole talks with Rupal Patel, Head of Data Insights & Risk Intelligence at Acin and Founder of Women in Risk and Control, about moving operational risk from a solely qualitative discipline to a data led one and why connection and networks are key! Show Notes 01:51 Career Journey 12:46 Biggest Risks 20:53 Women in Risk and Control 27:51 Acin & Op Risk Ahead 46:50 Rants & Revelations Transcripts and more: https://www.riskywomen.org/2022/11/podcast-s5e8-taking-control-rupal-patel/
Paul Benda, SVP, Operational Risk and Cybersecurity with the American Bankers Association joins Tom and Megan talking about #BanksNeverAskThat an Anti-Phishing campaign to empower consumers.
In this episode we have another incredible subject matter expert from Freddie Mac, Terri Merlino. We have a conversation about risk management, specifically what Freddie Mac is actively doing to create affordable credit options for home buyers, how mortgage originators can use tools to create efficiency and productivity, as well as what a culture of risk awareness looks like. Terri Merlino is Senior Vice-President & Chief Credit Officer for Freddie Mac's Single-Family Division. She leverages her broad-based knowledge of mortgage operations, sales, processing, underwriting, quality control and secondary marketing activities to substantially and positively impact Freddie Mac's mortgage credit risk management efforts, as well as our client experience. Prior to Freddie Mac Terri held the roles of Chief Credit Officer and Chief Risk Officer at New Penn Financial and spent many years at PHH Mortgage as Senior Vice-President of Credit and Operational Risk, where she was responsible for fostering a risk-aware culture through her leadership of all aspects of credit and operational risk management. Terri has served on several industry committees, including Fannie Mae's Risk Management Forum and Freddie Mac's Credit Advisory Board, and twice been named a HousingWire Women of Influence. She also holds a Bachelor of Business Administration in accounting from the University of Houston. Connect with her on LinkedIn: https://www.linkedin.com/in/terrimerlino Learn more: www.FreddieMac.com If you are enjoying the MME podcast, please take a second and LEAVE US A REVIEW, and don't forget to connect with us on social media!
Brought to you by The Ontic Center for Protective IntelligenceProduced by AJ McKeonMusic by Brian Bristow and performed by Smokin' NovasContact us at podcast@ontic.co or visit ontic.co/center for more information.
© 2020-2026 Ivy Podcast Discovery LLC
