What I Know Now
CISOs Off-the-Record 

Join Resilience on Tuesday, April 29, for an exclusive, off-the-record lunch panel during RSA with CISOs who have guided their organizations through major cyber crises — and are ready to share hard-earned leadership lessons.

ABOUT
Even the most experienced security leaders struggle to secure buy-in from boards and executives — and those pressures only intensify in the wake of a major incident. It can be difficult to earn trust and communicate the value and rationale behind cybersecurity decisions.

In this candid conversation moderated by Richard Seiersen, Chief Risk Technology Officer at Qualys, CISOs who’ve been tested at the highest levels will reflect on the challenges they faced, what surprised them most, and how those experiences reshaped their leadership, decision making, and communication.

We’ll cover:

  • Lessons learned in the moment — and in hindsight
  • How to influence culture and policy after crisis
  • Building a stronger business case for cyber resilience today

Drawing on real-world experience across critical infrastructure, finance, and technology, these panelists will share the insights they wish they’d had before it happened.

Bring your toughest questions — they’ve been there and are ready to help you prepare.

Panelists:

  • Abhishek Agarwal is currently VP and CISO at Emergent BioSolutions. He has served in various roles, such as Information Security and Risk, Device and Platform Security, Cybersecurity Operations, and Privacy. He has helped corporations recover from ransomware attacks, gained satisfactory ratings from regulatory agencies, and built a mature cybersecurity program that reflects the company's long-term growth.

  • Jaya Baloo is COO of Stealth AI and Cybersecurity Startup. She was previously the Chief Security Officer (CSO) at Rapid7 and the CISO at Avast. Before that, she held the CISO position at KPN, the largest telecommunications carrier in the Netherlands.

  • William “Bil” Harmer is currently Operating Partner and CISO at Craft Ventures. He has previously served as Chief Security Officer for GoodData, VP of Security & Global Privacy 

    Tas Jalali is the Head of Cybersecurity and IT PMO at AC Transit. He serves as Chair of the Artificial Intelligence Subcommittee at APTA and is also part of the CISO council for North American transit agencies. He has held roles at McAfee, Network Associates, Qualys, and Securenode and is the co-founder of Smashon Inc., a platform promoting health and wellness.

WHEN
Tuesday, April 29, 2025 | 12-1:30 pm
lunch provided


WHERE
Resilience Headquarters | Steps away from Moscone Center


NEXT STEPS
Due to limited seating, registration is required. Upon registration confirmation, you will receive a calendar invite and email confirmation.

Please contact Ingrid Smith, ingridsmith@cyberresilience.com, with questions.

ABOUT THE SPEAKERS

Frame 632165


Richard Seiersen [Moderator]
Chief Risk Technology Officer at Qualys  & Advisor to Resilience

Richard Seiersen is the author of two books: "How to Measure Anything in Cybersecurity Risk" and "The Metric Manifesto: Confronting Security with Data." Prior to joining Qualys as Chief Risk Technology Officer, Richard held CISO roles at Twilio, LendingClub, and GE Healthcare, and has facilitated over 400 engagements with CISOs on metrics, risk quantification, and board presentations via IANS.

DISCLAIMER
By attending this event or program, whether remote or in person, you are entering an area where photography, audio and video recording may occur. Your entry and presence, whether in person or virtually, constitutes your consent to be photographed, filmed, and/or otherwise recorded and to the release, publication, exhibition, or reproduction of any and all recorded media of your appearance, voice, and name for any purpose whatsoever in perpetuity in connection with Arceo Labs, Inc. d/b/a Resilience and its affiliates and subsidiaries (collectively referred to as “Resilience”), and its initiatives, including, by way of example only, use on websites, in social media, news and advertising.

By entering the event premises, or by joining the event remotely, you waive and release any claims you may have related to the use of recorded media of you at the event, including, without limitation, any right to inspect or approve the photo, video or audio recording of you, any claims for invasion of privacy, violation of the right of publicity, defamation, and copyright infringement or for any fees for use of such recorded media. You understand that all photography, filming and/or recording will be done in reliance on this consent. If you do not agree to the foregoing, please notify marketing@cyberresilience.com.

This programming is intended solely for informational purposes. The views and opinions expressed as part of this programming do not necessarily state or reflect those of Resilience.  It is not intended, nor can it be relied upon, to create any rights enforceable by any party in litigation with Resilience or to endorse the use of products or services provided by specific vendors. With respect to this programming, neither Resilience nor any of its employees, makes any warranty, express or implied, including the warranties of merchantability and fitness for a particular purpose, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, or represents that its use would not infringe privately owned rights. This material is not intended as a solicitation for insurance purchase.