Six leaders were honored with this year’s FAIR Institute Awards for truly “managing risk at the speed of the business,” the theme of the 2024 FAIR Conference - and for educating peers about the benefits of FAIR, the standard for analyzing cyber risk in business terms.
This year, the FAIR Institute also honored Jack Jones, the author of FAIR and Chairman Emeritus of the Institute with a lifetime achievement award, saying “the award recognizes his enormous contribution to the cybersecurity community and, by extension, modern digital enterprises by establishing the global standard for cyber risk quantification that transformed cyber risk management into a true business science.”
Most recently, Jack introduced FAIR-CAM, the FAIR Controls Analytics Model, a breakthrough extension to the FAIR standard that:
- Enables empirical measurement of cybersecurity controls efficacy and value
- Accounts for individual control functionality as well as systemic effects
- More effectively leverages cybersecurity telemetry
Here are the 2024 FAIR Institute Awards winners, announced at the FAIR Conference:
Business Innovator Award
Winner: Mark Tomallo, SVP, Chief Information Security Officer, Victoria’s Secret & Company
This award “honors cybersecurity executives who have successfully applied FAIR™ principles to drive innovation in how their businesses make risk-informed decisions and balance innovation, security and cost. It recognizes forward-thinking leaders who disrupt the status quo by leveraging new insights gained through advanced risk analytics.”
Mark co-chairs the Institute’s Retail Industry Research Board. He told us about his FAIR journey in retail a few years ago - watch the video.
The finalists were Scott Dresen, SVP & CISO, Corewell Health; and Chris Hauser, CISO, Amica Mutual Insurance.
FAIR Champion Award
Winner Michelle Griffith, VP, Security Governance, Risk & Compliance, IHG Hotels & Resorts
The FAIR Champion Award “honors leaders at the forefront of their organization's FAIR initiative who get data owners on board, stakeholders to help improve analysis, and decision-makers to adopt resulting analytics integral to their strategies, decision-making processes, and operating rhythms.”
Michelle told us about the IHG FAIR program at our 2024 RSA Conference Event. Learn more in this blog post: IHG Shares Its Story of Scaling FAIR.
Finalists were Zach Cossairt, Integrated Risk Program Senior Manager, Equinix; Erin Macuga, Information Security Risk Manager, Thrivent Financial; and Cameron Michelis, Senior Director of Security Risk and Controls Management, ADP.
FAIR Ambassador Award
- North America Winner: Mike Radigan, Cyber Risk Advisor, Cisco. Mike presented on Refining the “R” in GRC at FAIRCON22.
- Asia-Pacific Winner: Denny Wan, Chair, Reasonable Security Institute. Denny presented at FAIRCON24 on third party risk analysis with FAIR.
- Europe Winner: Robert Moore, Vice President Technology Risk, Mastercard. Rob spoke on overcoming FAIR skepticism at FAIRCON23.
The FAIR Ambassador Award “recognizes a member's work bringing FAIR knowledge and the FAIR Institute to a new geography or expanding the Institute community in a specific region.”
The FAIR Ambassador Award finalists were Elise Janho, Cyber Risk Services Consultant, Deloitte Canada (North America); Prometheus Yang, Overseas Security Advisory Council, Taiwan Council (Asia-Pacific); and Pierre Olodo, Senior Lead Cyber Risk, Richemont (Europe).
A special thanks to four members of the FAIR Institute Board of Directors for reviewing the nominations and choosing the award winners: John Sapp, CISO, Texas Mutual; Jonathan Baker, Director & Co-founder, Center for Threat-Informed Defense, MITRE Engenuity; Omar Khawaja, Field CISO, Databricks; and Nick Sanna, President & Founder, FAIR Institute.
Get your free Individual Membership to the FAIR Institute, enjoy discounted tickets to the FAIR Conference and more events during the year. Sign up now!
