Image: Khalil Jackson spoke on the panel "Resetting Cyber Risk in the Age of AI" at the 2025 FAIR Conference
The FAIR Institute Board has been enriched by the addition of Khalil Jackson, Global Head of Cybersecurity Operations and Defense at The Bank of New York Mellon Corp. (BNY) who until recently played a critical role in securing the global financial system as CISO of the Federal Reserve Bank of New York.
I sat down with Khalil for a quick update on his background with FAIR and thoughts for development of the cyber risk quantification movement.
>>Watch the Meet a Member Interview with Khalil Jackson.
Some highlights of our conversation:
On Finding FAIR
In his time in the private sector, “a lot of people were trying to find a way to better quantify risk but the tooling, the capabilities and the standards were always too general. FAIR provided a methodology and a much more precise way of quantifying risk.”
"Placing Bets” with FAIR
In cybersecurity, “we have to place bets. I always say that cybersecurity professionals are fighting people from the future. In order to place bets, you need to understand what your risk landscape is. Cyber risk quantification offers clarity and consistency.”
Communicating to the Board
“Every board of directors is going to be different, based on the sector you're in and the population of the board. In my time at the New York Fed, I had a pretty wide range of skillsets from people who are amazing bankers to highly technical PhD’s and people who are familiar with how global markets work.” Figuring out which members would respond to what information was critical. Khalil found a happy medium in “visual storytelling and the language of value–what it meant when we actually had a risk that was significant.”
Communicating to Regulators
“Having a narrative that is consistent and explainable allows you to have the confidence and ability to govern risk but also gives you a lot more clarity on what to ask of those bodies for decision support.”
Hear insights from Khalil on FAIR for risk management for AI, supply chain, cyber insurance and more - watch the video now.
More on FAIRCON25 - The FAIR Institute's 10th Annual FAIR Conference
