top of page

Cyber Risk Governance
Category Description here


AI Vendor Assessment Toolkit
The ACSC continues to develop and refine the attached toolkit with member input. This document is meant to help you think about how your traditional 3rd party assessment processes may need to be updated to address novel or complex AI risks.


AI Security Autonomy Framework
Working with AI Security and Risk experts from MIT Lincoln Laboratory , the ACSC developed this AI Security Automation Framework with feedback from its membership and other industry thought-leaders. This document is meant to help members work through the maturity of AI security and how much is being entrusted to automation.


Applying the NIST Cyber Security Framework (CSF) to AI
ACSC's AI Co-Chairs Mark Maybury, Lockheed Martin and Marc Zissman, MIT Lincoln Laboratory presented an overview of how one might apply the five functions of the NIST Cyber Security Framework to AI capabilities at the Annual Member Conference. Their presentation framed the future of AI security and risks.


Terms of Art(ificial Intelligence)
ACSC's AI Co-Chairs Mark Maybury, Lockheed Martin and Marc Zissman, MIT Lincoln Laboratory presented the following AI definitions at the Annual Member Conference to align all participants with a common lexicon for the day's discussions. Their presentation which framed the future of AI security and risks.


GenAI Threats to Confidentiality, Integrity and Availability
ACSC's AI Co-Chairs Mark Maybury, Lockheed Martin and Marc Zissman, MIT Lincoln Laboratory presented the following description of the threats to Generative AI aligned to the CIA - Confidentiality, Integrity and Availability - framework during their presentation which framed the future of AI security and risks.


Develop Your Quantum Strategy
Quantum computing is no longer a distant horizon topic for security leaders, it’s an active planning priority. As organizations prepare for a world where today’s encryption may no longer be sufficient, the Advanced Cyber Security Center (ACSC) is closing the year with a focused discussion on what it takes to build a practical quantum strategy. On December 9, ACSC members will join a special Zoom session featuring Ray Harishankar , IBM Fellow and leader of IBM Quantum Safe. Ra


The Future for AI Risk and Security (2025–2030)
Presented by Mark Maybury, VP of Commercialization, Lockheed Martin, and Marc Zissman, Associate Head, Cyber Security and Information Sciences Division, MIT Lincoln Laboratory AI is no longer a future technology—it’s embedded in the core of modern enterprise. The next challenge isn’t adoption, but assurance: how do we secure intelligent systems that can think, act, and make decisions at machine speed? At the ACSC 15th Annual Member Conference on November 6, two of the field’s


Winning the Competition for Trusted AI: What Members Will Learn at the ACSC 15th Annual Member Conference
This Thursday, November 6, the Advanced Cyber Security Center (ACSC) will host its 15th Annual Member Conference at the Federal Reserve Bank of Boston, a full day of keynotes, panels, and interactive working sessions designed to help members tackle one of the most urgent challenges of our time: building trusted AI systems. A Focus on Action and Application on AI and Security This year’s conference theme - Winning the Competition for Trusted AI: A Risk and Security Agenda -


Why Every Organization Should Revisit Insider Risk Programs
The most damaging security incidents rarely start with an external threat. They start with an insider — sometimes malicious, often careless — who already has access. The results can be catastrophic. Google’s self-driving car unit lost 9.7 gigabytes of intellectual property when a lead engineer walked out with 14,000 files on a removable device. Boeing spent $17 million remediating a breach caused by an employee who emailed sensitive data to his spouse for help formatting a sp


7 Indicators of a Mature Cyber Risk Governance Program
1. A cross-functional, C-Suite-led cybersecurity executive council oversees the following elements of risk governance and resilience,...
bottom of page
