Building Cyber Resilience in the Age of AI
From Emerging Threats and AI Risk to Advanced Resilience Testing
In today’s rapidly evolving digital world, cybersecurity leaders are no longer defending against only traditional threats. They are navigating an entirely new reality shaped by AI-driven attacks, sophisticated social engineering, evolving regulations, and increasingly complex business risks. Building resilience is no longer optional — it is a strategic business imperative.
This immersive workshop takes participants on a practical journey from understanding today’s global threat landscape to building and strengthening a modern cybersecurity program designed for resilience in the age of AI. Through insights drawn from leading industry intelligence reports, real-world attack trends, governance frameworks, and advanced resilience strategies, attendees will learn how to align cybersecurity initiatives with business priorities while preparing organizations to respond, recover, and adapt under pressure.
Participants will explore how to design risk-based cybersecurity programs, integrate AI governance and emerging regulatory expectations, and address modern AI-enhanced threats using practical frameworks
The workshop also dives into resilience testing strategies, including tabletop exercises, vishing and smishing simulations, purple teaming, and advanced cyber attack simulations that help organizations validate readiness before a real crisis occurs.
The experience culminates in a hands-on cyber crisis simulation designed specifically for leaders, challenging participants to make strategic decisions in a fast-moving, high-pressure incident scenario.
This session is designed for cybersecurity leaders, risk professionals, governance practitioners, auditors, and executives who want to move beyond compliance-driven security and build resilient, intelligence-driven cybersecurity programs capable of thriving in today’s AI-powered threat landscape
Workshop Outline
Phase 1: Understanding the Current Threat Environment
-
Industry lens- Major threat trends from leading industry reports:
-
Verizon DBIR, CrowdStrike Global Threat Report, Mandiant M-Trends, IBM Cost of a Data Breach, etc
-
Minimum Viable Business
Phase 2: Govern - Cyber Resilience in the Age of AI
-
How AI changes the enterprise attack surface
-
AI governance and accountability
-
Identifying and assessing AI risks
-
AI use cases, assets, data and dependencies
-
Governance, risk and regulatory frameworks:
-
NIST AI RMF | CSA AI Controls Matrix | FAIR-AIR | MIT AI Risk Repository | EU AI Act
-
Integrating AI governance into the existing cybersecurity program
Phase 3: Defend & Test - AI-Enhanced Threats and Resilience Testing
AI- enhanced and AI-specific attacks:
-
AI-enhanced phishing, vishing, and smishing
-
Deepfakes and impersonation
-
Automated reconnaissance and exploitation
-
Prompt injection and indirect prompt injection
-
RAG and data poisoning
-
Memory poisoning
-
Sensitive data disclosure and exfiltration
-
Agent and tool abuse
-
Excessive agency and privilege
-
AI supply-chain risks
-
MITRE ATLAS and OWASP guidance
Architecting a Cyber Resilience Testing program:
-
Security readiness assessments
-
Tabletop exercises
-
Phishing, vishing and smishing simulations
-
Adversary emulation
-
Purple teaming
-
Red teaming
-
AI red teaming
-
Advanced attack simulations
-
Turning testing results into improvements to the cybersecurity program
Phase 4: A Cyber Crisis Simulation for Leaders-Hands-On
___________________________________
At a Glance
Date: October 14, 2026
Time: 9 am - 5 pm
CPE: Participants can earn up to 8 CPE Credits in Information Technology.
Delivery Format: Virtual, via Zoom.
**The link to access the virtual event via Zoom will be provided in your registration confirmation email. **
We strongly encourage students to turn on their video cameras during the sessions.
Fees:
*Early Bird Discount: Those who register by September 30, 2026, save $50 off the price of the workshop.
- ISACA Members: $300
- Non-Members: $400
- Students and In-Transition: $100
**Groups of six or more receive a 15% discount on registration for the workshop.
We look forward to seeing you at the workshop!
__________________________________________
Instructor Bio: Ramona Ratiu | LinkedIn
Ramona Ratiu is a global cyber resilience leader with over 15 years of experience advancing governance, risk, compliance, and resilience strategies across complex international organizations. She leads the Cyber Resilience Testing Program at Zurich Insurance Group, spearheading transformative initiatives that strengthen enterprise readiness against evolving cyber and AI-driven threats.
Recognized for building impactful cross-border collaborations, Ramona has developed and supported international programs across regions including Africa, Asia, Europe, and North America, helping organizations and communities strengthen cybersecurity capabilities, resilience strategies, leadership development, and responsible AI adoption. Her work spans partnerships with global professional communities, educational institutions, and innovation-driven initiatives designed to empower the next generation of cyber leaders.
A strategic advisor and innovation catalyst, Ramona serves as Executive Advisor for Global Partnerships & Innovation Strategies at ISACA Chicago Chapter and represents the United States as an Ambassador to the Global Council for Responsible AI. She also serves on multiple advisory boards, providing strategic guidance on cybersecurity, resilience, governance, innovation, and emerging technologies.
As an adjunct professor at DePaul University, Ramona equips future leaders with practical insight into today’s rapidly evolving cyber risk and resilience landscape.
An internationally recognized speaker, Ramona has delivered presentations, workshops, and keynote sessions in more than 25 countries across multiple continents, inspiring audiences to lead with resilience, innovation, and confidence in the age of AI.
Among numerous international accolades recognizing her leadership and impact, Ramona is the recipient of the ISACA Technology for Humanity Award and the ISACA Inspirational Leadership Award for advancing cybersecurity careers, empowering women, and amplifying underrepresented voices in technology.
Through bold thinking, collaboration, and advocacy, she inspires organizations and leaders to build resilience by design and shape a more secure and responsible digital future.
__________________________________________
Instructor 2: Sushila Nair | LinkedIn
Sushila Nair is the CEO of Cybernetic LLC and former Vice President of Capgemini’s North American Cybersecurity practice, where she played a crucial role in driving secure digital transformation on a global scale. With over 30 years of experience in computing infrastructure, business, and security risk analysis, Sushila has established herself as a leading authority in the cybersecurity domain. Her career highlights include serving as Vice President responsible for global security offers at NTT DATA Services, a decade of leading her own IT and cybersecurity company across major UK cities, and serving as a Chief Information Security Officer (CISO) and trusted advisor to boards, where she honed her expertise in protecting organizations from evolving digital threats. Recognized through the top cybersecurity leader award by Security Magazine and Cyber Magazine, Sushila’s influence in the industry is undeniable.
An esteemed thought leader, Sushila has shared her insights on prestigious platforms such as RSA Conference and ISACA’s global events as well as National Public Radio in the USA. Her active participation in ISACA’s global emerging trends working group and her leadership as President of ISACA’s Greater Washington, D.C. Chapter underscore her dedication to advancing the field of cybersecurity. In 2024, her commitment to nurturing the next generation of cybersecurity professionals and promoting diversity in the industry was honored with the prestigious ISACA Technology for Humanity Award, followed by the Inspirational Leadership Award in 2025.
__________________________________________