I believe inertia is the prime enemy of most security programs, the right people are its greatest asset and relentless incrementalism is our ultimate weapon in combating cyber risk. I believe security programs should be business driven and technology ought to be subordinate to business outcomes and service improvements. To get the Why-What-How sequence right when selecting and executing initiatives, I developed the BOSITE framework. Recently, I've been thinking a lot about how to help CISOs securely shepherd their organizations’ data+AI journey… at scale. I get excited about about people, frameworks, and measurement. Omar is currently VP, Field CISO at Databricks where he gets to work with CISOs to help them securely shepherd their organizations’ data+AI journey. In the past, he was Chief Information Security Officer (CISO) of $26B Highmark Health as it grew annually by $1.5B for 9 years. Prior to Highmark Health, Omar was at Verizon Enterprise Solutions, where he had product management and marketing responsibilities for their security solutions portfolio with customers in 72 countries.To sustain the effective delivery of cyber risk mitigation at scale, I led the development and execution of 14 frameworks and 8 measurement programs. For this focus on culture change, resilience and scalability, my efforts have been profiled by: Wall Street Journal, SANS, Forrester, Gartner, NACD, Reuters, HIMSS, CSO Magazine, CMU and others. As the CISO of $26B Highmark Health, I had the privilege of leading a team of over 200 diverse cyber professionals to protect a dozen technology platforms powering hospitals, BCBS insurance, consulting, manufacturing and tech services.