A practical session on annual requirements, third party risk in the age of AI, and what real readiness looks like, featuring a peer conversation with an executive who manages this risk firsthand.

Cybersecurity oversight is no longer something an organization can simply assert. Boards, regulators, and other key stakeholders increasingly expect proof: documented processes, tested plans, and evidence that holds up under scrutiny.

Join Johnson Lambert for a practical hour on what independent verification actually requires. We’ll cover the annual requirements shaping cyber programs today, how third party risk management is being tested by the rise of AI embedded in vendor tools, and what a resilience and business continuity plan needs to include to satisfy a board or regulator. The session closes with a candid conversation with a peer executive who manages cyber risk at a public accounting firm, on what it actually takes to stay ahead of these demands with finite time and resources.

What you’ll learn:

• The annual cybersecurity requirements and verification expectations that apply to organizations like yours
• How third party risk management and AI governance expectations are evolving, and what that means for existing vendor oversight
• What a resilience and business continuity plan needs to include to demonstrate readiness
• A firsthand perspective from an executive who owns cyber risk and manages the same pressures discussed in this session

This session is ideal for:

General Counsel (GC), Chief Operating Officer (COO), Chief Internal Audit (CIA), CFOs, CIOs, entrepreneurs and other growth-focused leaders