Board of Director retreat presentation on transforming cybersecurity programs from a fear of failure to a sophisticated culture embracing failure at the operations level. This is meant for a verbal deep dive, so the work plans are excluded as these are done interactively. The focus to transform an organization is to develop beyond controlled failure (penetration testing) to a robust chaotic, multi-level failure posture. This must address compliance and privacy debt. Leaders leverage AI, machine learning, threat intelligence to achieve these benefits. Upside is higher performance on the financial metrics and those found around culture.

1. FAILING FORWARD
BEING THE BEST, OUR CYBER STRATEGY
Senior Executive - Board of Director's Retreat Deck
By James DeLuccia
sanitized for release 11/14/2016

2. ResearchandPresentationbyJamesDeLucciaIV
20 YR CYBER SECURITY VETERAN
3 START-UPS
6 YEARS BIG 4 PUBLIC ACCOUNTING
2 ISSUED PATENTS
2X AUTHOR
350+ PUBLISHED ARTICLES & RESEARCH
JAMES DELUCCIA IV
CYBER STRATEGIST & TECHNOLOGY ENTHUSIAST

3. ResearchandPresentationbyJamesDeLucciaIV
WHY AREN’T WE FAILING

4. Fail Fast allows:
▸ Rapid improvements
▸ Business agility
▸ Highest satisfied
employees
▸ Lower turnover
▸ Best financial market
performance*
ResearchandPresentationbyJamesDeLucciaIV
VALUE OF FAILING FAST
▸ A proven high
performer practice
that has won
accolades from
leadership to
software
development.

5. ResearchandPresentationbyJamesDeLucciaIV
A RANDOM WALK
AGENDA AND TOPICS WE’LL EXPLORE
▸ Fear
▸ Cyber Security
▸ Paralysis Analysis
▸ Broken Culture
▸ Anti-Patterns
▸ Growth Potential
▸ Achieving leadership

6. ResearchandPresentationbyJamesDeLucciaIV
DON’T FEAR
FAILURE - BUT
ANTICIPATE AND
BENEFIT FROM IT

7. ResearchandPresentationbyJamesDeLucciaIV
WHAT IS FEAR?
hesitation, lack of action, irrationality…
[CLIENT] - BOARD OF DIRECTOR'S RETREAT DECK

8. ResearchandPresentationbyJamesDeLucciaIV
WHY DO WE NEED TO FAIL?
The way we improve; identify opportunities,
blindspots, weaknesses, and more.
[CLIENT] - BOARD OF DIRECTOR'S RETREAT DECK

9. ResearchandPresentationbyJamesDeLucciaIV
HOW DO WE NEED TO FAIL?
Randomly, chaotically, without boundary, and a high
transmission of information to support improvement.
[CLIENT] - BOARD OF DIRECTOR'S RETREAT DECK

10. ResearchandPresentationbyJamesDeLucciaIV
WHO FAILS WELL, AND WHAT
CAN WE LEARN FROM IT?
Babies, and?
[CLIENT] - BOARD OF DIRECTOR'S RETREAT DECK

11. ResearchandPresentationbyJamesDeLucciaIV
WHY AREN’T WE FAILING
(ALLOWING OURSELVES TO FAIL
AND IMPROVE)?

12. ResearchandPresentationbyJamesDeLucciaIV
WHY AREN’T WE FAILING?
▸ Failures = material weakness?
▸ Failures = data breach?
▸ Failures = bad news cycle?
▸ Failures = poor customer experience?
▸ Failures = pager duty at 3am on Sunday
▸ Media shaming… being fired …
TO TRANSFORM THE BUSINESS WE MUST CHANGE THESE STATES

13. ResearchandPresentationbyJamesDeLucciaIV
[CLIENT] - BOARD OF DIRECTOR'S RETREAT DECK
STRATEGIES TO TRANSFORM THE ORGANIZATION..
▸ Culture - first and foremost set foundation to allow
for learning
▸ Technology - Equip organization to operate with
failures as an option (capitalizing on today’s ability
to auto-scale; hot-hot; load balance; etc.)
▸ Practices - alignment and establishment from
across audit to operations and within management

14. ResearchandPresentationbyJamesDeLucciaIV
DEFINE THE
FUTURE STATE:
AN OPERATIONAL ENVIRONMENT
THAT SUPPORTS FAILURES
A LEARNING ENVIRONMENT WITH
FEEDBACK AND SELF-CORRECTING
FUNCTIONS (TECH AND TEAMS)
MITIGATIONS ARCHITECTED THAT
PERMIT FAILURES
ONGOING, CHAOTIC, AUTONOMOUS,
MACHINE AI LINKED, FAILURE
EVENTS
Group Activity

15. ResearchandPresentationbyJamesDeLucciaIV
LET’S BEGIN
WITH THE WORK
PLANS…
PRINCIPLES OF HIGH
FAILURE:
Group Activity

16. ResearchandPresentationbyJamesDeLucciaIV
Don’t allow the fear of failure to
suck the learning potential from
our organization.
Let’s unlock our potential
ResearchandPresentationbyJamesDeLucciaIV

17. HAVE A GREAT DAY
NEXT STEPS & QUESTIONS…
Research and Presentation by James DeLuccia IV