OODAcon 2024: The Cybersecurity Dilemma – Board Expectations for Managing Cyber Risk

Panel Description

In this session, Matt Devost will moderate a discussion with Al Tarasuik, Citigroup’s Chief Information Security Officer, and Leslie Ireland, a Citigroup Board member. They will share insights on the evolving expectations for corporate directors and technology leaders as they navigate the complexities of driving value while mitigating systemic cyber risks. Attendees will gain practical lessons and best practices for balancing security, innovation, and corporate governance in an increasingly volatile threat landscape.

Moderator: Matt Devost, CEO, OODA

Al Tarasiuk, Chief Information Security Officer, Citigroup

Al is Citi’s Chief Information Security Officer. Joining Citi in 2020, Al has responsibility for protecting Citi’s information assets globally across all lines of business and functions. He leads Citi’s Cyber Security strategy and execution, Insider Threat program, and all aspects of Citi’s cyber posture, including Data Protection. Al has 38 years of experience leading cyber security and technology at large, global, and complex organizations. Prior to Citi, Al was the global Chief Security Officer at Deutsche Bank, where he was responsible for cybersecurity and corporate security. He also served as the interim Group Chief Information Officer with responsibility for group-wide technology architecture and standards, digital workplace, IT infrastructure and corporate technology. Al previously served for over 28 years in the US intelligence community in several executive leadership roles, including CIO of the US Intelligence Community, a position he was appointed to by US President Barack Obama.

Leslie Ireland, Member of the Board of Directors: Citi, Amentum, The Stimson Center

Leslie is a highly accomplished Board member and executive whose mission is to protect US economic and national security. Her background includes service as an Assistant Secretary for Intelligence and Analysis at the U.S. Department of Treasury and as a President’s Daily Intelligence briefer.

Additional OODA Loop Resources

• The Crowdstrike Incident and the Evolving Role of CISOs and Boards
• Balancing Cybersecurity Accountability with Practical Support
• Board Members Should Review Cyber Risk Disclosure Procedures Following SEC Enforcement
• Is Your Board of Directors Integrating AI Governance into its Corporate Oversight and Disclosure Efforts?
• A ChatGPT Use Case for the Board of Directors: Corporate Disclosure and Policy Assessments
• What the Board Needs to Know About Exponential Disruption, Cybersecurity, Risk Management and Strategy