Building a Cyber & AI-Ready Organization: Policies, Practices & Risk - Pamela Feld, Greg Goldberg & Jovany Gallardy - DCSG2027
Description
Name of Training: Building a Cyber & AI-Ready Organization: Policies, Practices & Risk
Trainer(s): Pamela Feld, Greg Goldberg & Jovany Gallardy
Skill Level: Beginner/Intermediate
Dates: March 6, 2027
Time: 9 am to 5 pm
Venue: TBD
Early Bird Cost: S$4,700 (Incl. GST)
Regular Cost: S$5,000 (Incl. GST)
Short Summary
As organizations rapidly adopt AI while facing growing cybersecurity threats, this practical course equips executives, IT leaders, and decision-makers to navigate AI governance, ethics, legal accountability, and regulatory expectations. Through real-world incidents, interactive scenarios, and actionable frameworks, participants will learn to strengthen policies and build defensible governance practices that reduce risk while enabling responsible innovation.
Top 3 Takeaways
- Understand accountability, risk ownership, and the legal, ethical, and security considerations that should guide organizational AI adoption.
- Learn practical approaches to developing cyber and AI policies, inventories, governance structures, and vendor evaluation practices.
- Leave with policy templates and a 90-day action plan for improving organizational cyber and AI readiness.
Course Description
This course introduces artificial intelligence and cybersecurity through real-world examples, focusing on how AI can create security, ethical, legal, and financial risks. Participants will learn to identify common AI risks and practical ways to protect their organizations and systems.
Through hands-on exercises and interactive scenarios, attendees will develop strategies to assess risks, apply safeguards, and use AI more securely and responsibly. The trainers bring management, cybersecurity, and legal perspectives to help participants strengthen policies and make more informed decisions about AI adoption and organizational oversight.
Course Outline
View full outline
Hide outline
Introduction and Course Overview
- Training goals, agenda, and expectations.
- Key concepts in management, cybersecurity, AI ethics, and governance.
- Icebreaker: participants share experiences with AI or security concerns.
Leadership and Decision-Making in Technology Environments
- Leadership's role in managing technology-driven change.
- Accountability, risk ownership, and ethical responsibility.
- Making informed decisions when adopting AI and digital systems.
- Interactive polling.
Policy and Governance Fundamentals
- Introduction to policy development.
- Creating policy and inventory structures.
- Governance frameworks for managing technology and security risks.
- Overview of cyber insurance.
Risk Management and Organizational Oversight
- Identifying operational, legal, and reputational risks.
- Roles of management, boards, and compliance teams.
- Examples of governance failures and best practices.
Case Discussion and Knowledge Check
- Guided discussion of real-world management and governance scenarios.
- Short group exercises to reinforce key concepts.
Introduction to AI Policy and Ethics
- What AI systems are and how organizations use them.
- Fairness, transparency, accountability, and human oversight.
- Why AI policy matters in real-world decision-making.
- Group discussion and breakout activity.
Managing Ethical and Security Risks in AI Systems
- Bias, misuse, automation errors, and overreliance on AI.
- How security, ethics, and governance intersect.
- Using policies to reduce risk.
- Live exercise using sample policy templates.
Practical Use Cases and Responsible AI Adoption
- AI use cases in business, government, and services.
- Evaluating vendor AI tools before adoption.
- Questions leaders and managers should ask vendors and internal teams.
Course Wrap-Up, Resources, Templates, and Next Steps
- Developing a 90-day action plan.
- Key takeaways and summary.
- Open discussion and Q&A.
- Optional proficiency exam and further learning resources.
Difficulty Level
Beginner/Intermediate. The course is accessible to participants with little or no technical background while also providing practical frameworks for those with some experience in technology, management, or security.
Suggested Prerequisites
There are no formal prerequisites. The course is designed for executives, IT leaders, and decision-makers, including participants with little to no technical background.
What Students Should Bring
A laptop with reliable internet access and the ability to access websites and online platforms and scan or upload documents as needed. Bring a pen for notes and in-class activities.
What the Trainers Will Provide
Additional course materials, resources, policy templates, and a 90-day action plan. Participants who complete the course may be eligible for an optional, discounted post-program cyber/AI policy review by the consulting team, with legal review available where permitted by conference guidelines and applicable ethics rules.
Trainer(s) Bio
Pamela Feld is the Founder and CEO of Triumph Technology Group and a national speaker on cybersecurity, AI governance, and digital transformation. She advises executives and organizations across corporate, public-sector, and regulated industries on reducing cyber risk, implementing ethical AI, and building resilient governance practices. Her experience includes work with utilities, healthcare organizations, universities, and major enterprises. She holds an IEEE Certified Assessor credential and is a graduate of UC Irvine, the Stanford Graduate Entrepreneur Program, and the UCLA MDE program.
Greg Goldberg is a litigator and General Counsel with more than 20 years of experience practicing in state and federal courts across the United States. He serves as General Counsel for the Business Technology Association, advising organizations on data security, privacy compliance, AI governance, workplace technology policies, crisis management, and regulatory matters. He is also a frequent presenter and educator on emerging legal and technology issues.
Proficiency Exam
An optional exam will use multiple-choice questions to assess understanding of core AI policy frameworks, ethical principles, and practical applications. Participants must score at least 70% to pass and earn a proficiency credential.
Registration Terms and Conditions
Trainings are refundable before January 29, 2027, minus a non-refundable processing fee of $350.
Between January 30, 2027 and February 28, 2027 partial refunds will be granted, equal to 50% of the course fee minus a processing fee of $350.
All trainings are non-refundable after Feb 28, 2027.
Training tickets may be transferred to another student. Please email us at training@defcon.org for specifics.
If a training does not reach the minimum registration requirement, it may be cancelled. In the event the training you choose is cancelled, you will be provided the option of receiving a full refund or transferring to another training (subject to availability).
Failure to attend the training without prior written notification will be considered a no-show. No refund will be given.
DEF CON Training may share student contact information, including names and emails, with the course instructor(s) to facilitate sharing of pre-work and course instructions. Instructors are required to safeguard this information and provide appropriate protection so that it is kept private. Instructors may not use student information outside the delivery of this course without the permission of the student.
By purchasing this ticket you agree to abide by the DEF CON Training Code of Conduct and the registration terms and conditions listed above.
Several breaks will be included throughout the day. Please note that food is not included.
All courses come with a certificate, contingent on attendance at 75% of course sessions. Students who pass the end-of-course evaluation will be issued a certificate of proficiency. All other students with sufficient course attendance will be issued a certificate of completion. Students are responsible for making sure their attendance is recorded at the start of the day and after returning from lunch.
