When: November 4, 2026 [1300-1630]
Where: Virtual (via Teams) & In Person at Frontier RTP [800 Park Offices Drive, RTP]
CPEs: Upto 3
Registration: Teams Registration
Session I Beyond the Tools: The Fundamentals of Effective Security [1300-1430]
Technology alone doesn't create a secure organization. This session explores the foundational practices that create a resilient security program with a practical look at how to use people, processes, and technology to create an effective security program aligned with organizational risk. Jen will also share tips for investing in your career growth and how to move from an individual contributor or first line manager to a cybersecurity leader.
Speaker: Jennifer Fix, DCISO, State of North Carolina
Jen Fix is a cybersecurity and risk management executive specializing in leading highly effective security teams and directing comprehensive enterprise security initiatives. Jen firmly believes that the key to an effective strategy lies in fostering a culture of security awareness, promoting transparency, mitigating risks, and balancing those risks based on business needs and objectives.
With certifications in Risk and Information Systems Control™ (CRISC) and Business Relationship Management Professional (BRMP®), Jen brings extensive expertise in these areas. She is deeply passionate about mentoring and supporting early career IT and cyber professionals, finding great satisfaction in watching them grow and succeed. Jen currently serves as the Deputy State Chief Information Security Officer (DSCISO) for the State of North Carolina. Prior to joining the state, she worked in the private sector where she held various IT positions in her 25+ year career.
Session II - Performing a Cybersecurity Assessment: Leveraging the NIST Cybersecurity Framework (CSF) and the NIST AI Risk Management Framework (AI RMF) [1445-1615]
The NIST Cybersecurity Framework (CSF) and the NIST AI Risk Management Framework (AI RMF) share many foundational principles, including the need to establish a trusted control environment, develop a thorough understanding of your technical ecosystem, and align security controls with business processes. Both frameworks demand accurate scoping, disciplined governance, and the effective implementation of many overlapping technical controls. Cybersecurity risks were already daunting enough, but now Artificial Intelligence is adding an additional layer of risks by reshaping how organizations deliver their products and services. When controlled and used ethically AI can automate tasks, increase productivity, solve complex problems, improve profitability, and provide many more benefits. However, if left uncontrolled or used by nefarious parties, such as cybercriminals, it will lead to harmful outcomes. This session will dive into the challenges we are facing, the nature and structure of these two important frameworks, plus best practices and the latest practitioner tips for implementing and leveraging them.
Speaker: Stephen Head, Director, Sikich
As the National Director for the Cyber Risk Center of Expertise at Jefferson Wells, Stephen has broad-based experience in cyber risk, regulatory compliance, IT governance and aligning controls with multiple standards and frameworks. He is the author of the internationally recognized Internal Auditing Manual and Practical IT Auditing, both published by Thomson Reuters. He served as International Chair of the ISACA Standards Board and as a Director on the ISACA International Board, was a Commissioner on the AICPA National Accreditation Commission, and served on the AICPA Information Technology Executive Committee at the National level. Stephen has spoken at numerous national and international events, including Techno Security East, the IIA International Conference and the Association of Certified Fraud Examiners (ACFE) Annual Global Conference. He is a CPA, CISSP, CISM, CDPSE, QSA, PCIP, CMA, CFE, CISA, CGEIT, CRISC, CBCP, CMMC RPA, MCSE, CHP, CHSS, CITP, CGMA, CPCU, and holds an MBA from Wake Forest University.