NTSC Northeast CISO Policy Roundtable 2026

National Technology Security Coalition

Northeast Regional
Policy Roundtable

"The value is the room: senior peers bringing real-world experience, sharing what is working, and pressure-testing what comes next."

Wednesday, September 23 | Boston, MA

12:30 PM – 5:30 PM ET

Agenda Outcomes

Insight, Alignment & Action

Chatham House Rules Apply — Limited to 60 Seats

Insight

Improve the signal on what is changing, what matters most, and what requires attention now versus later.

Alignment

Compare approaches across industry and government, challenge assumptions, and build a clearer view of where leaders, boards, and policymakers need to align.

Action

Identify a small number of concrete priorities the NTSC community can advance through policy engagement and stronger public-private collaboration.

Who Should Attend

Join members of the National Technology Security Coalition Board and a select group of CISOs, Chief Risk Officers, senior technology executives, and policymakers for the NTSC Northeast Regional Policy Roundtable.

Distinguished Discussion Leaders

Juliette Kayyem

Professor

Harvard Kennedy School

Hover for bio

Juliette Kayyem is an internationally recognized expert in national security, crisis management, disaster preparedness, and organizational resilience. She is the Belfer Senior Lecturer in International Security at Harvard Kennedy School and Faculty Director of the Homeland Security Project at Harvard’s Belfer Center.
Kayyem previously served in the Obama administration as Assistant Secretary for Intergovernmental Affairs at the U.S. Department of Homeland Security and as Massachusetts’ Homeland Security Advisor under Governor Deval Patrick. She is also CNN’s Senior National Security Analyst, a contributing writer for The Atlantic, and the author or editor of six books, including The Devil Never Sleeps: Learning to Live in an Age of Disasters.
A 2013 Pulitzer Prize finalist for editorial writing, Kayyem brings decades of experience in national security, homeland security, and crisis management. She is a graduate of Harvard College and Harvard Law School and was the first Arab American to serve as a state head of homeland security.

Emilian Papadopoulos

President

Good Harbor

Hover for bio

Emilian Papadopoulos is a cybersecurity and technology risk leader with more than 15 years of experience advising senior executives on emerging technologies, cyber threats, and enterprise risk. As President of Good Harbor, he advises boards, CEOs, and CISOs across a wide range of industries and also serves as Executive Director of the Media ISAO, focused on strengthening the resilience of news media organizations. Emilian serves on the boards of RedSeal and the bipartisan nonprofit Partnership for a Secure America and is an advisor to the National Technology Security Coalition. He previously taught cybersecurity at Georgetown University and is a graduate of the University of Toronto and Harvard Kennedy School, where he served as elected chair of the global Alumni Board.

Chris Sullivan

Executive Director

NTSC

Hover for bio

Chris Sullivan is the Executive Director of the National Technology Security Coalition (NTSC), a non-profit, non-partisan organization advancing the national dialogue on technology security. With more than 20 years of experience as a CEO, CTO, CISO, and board advisor, Chris brings deep expertise at the intersection of AI, cybersecurity, business strategy, and risk. A Certified Artificial Intelligence Governance Professional (AIGP), he has advised executives and boards on responsible AI governance, emerging technologies, transformation, and regulation, while helping organizations turn innovation into measurable business value. His experience includes scaling technology startups, leading AI-focused R&D initiatives, guiding Fortune 100 companies, managing 14 M&A integrations, securing deployments across leading pharmaceutical companies, and building cross-sector partnerships with the FBI through InfraGard.

Gearoid Terry

Product Area Lead, Enterprise Cybersecurity

Fidelity

Hover for bio

Gearoid Terry is a forward-thinking cybersecurity and technology executive serving as a vice-president of enterprise security at Fidelity Investments, where he focuses on navigating the complex, evolving digital threat landscape. With deep expertise in modern enterprise defense, cloud security strategies, and threat intelligence integration, he champions a proactive approach to protecting digital assets against next-generation risks. Beyond his core security leadership, he frequently represents Fidelity Ireland across key industry technology initiatives, cybersecurity forums, and corporate responsibility programs, advocating for secure and sustainable digital innovation.

Jason Witty

EVP, CISO

Fidelity

Hover for bio

Jason Witty is Executive Vice President and Chief Information Security Officer at Fidelity Investments, bringing more than two decades of experience leading cybersecurity, technology controls, risk management, and resilience programs for major financial institutions. Before joining Fidelity, he served as Chief Security Officer at USAA and held senior security leadership roles at JPMorgan Chase, U.S. Bancorp, Bank of America, LaSalle Bank, The Options Clearing Corporation, and Aon. A certified Information Systems Security Management Professional and award-winning CISO, Jason has been recognized by I.S.E. North America, ISSA Chicago, AITP, and Information Security Magazine and is a frequent keynote speaker at leading cybersecurity conferences. Throughout his career, he has led global security teams, supported dozens of acquisition-related network integrations, established secure e-commerce environments, and advanced collaboration across the financial services and cybersecurity communities.

Chris Wysopal

Chief Security Evangelist

Veracode

Hover for bio

Chris Wysopal is a pioneering cybersecurity leader, researcher, and co-founder of Veracode, where he served as Chief Technology Officer for 18 years and now serves as Chief Security Evangelist. A former member of the influential hacker collective L0pht, he testified before the U.S. Senate in 1998 about critical internet security vulnerabilities, co-created the password-auditing tool L0phtCrack, and helped establish the coordinated vulnerability disclosure practices still used across the industry today. He later led security research and development at @stake and Symantec, worked with Microsoft to integrate security into its software development lifecycle, and co-authored The Art of Software Security Testing. Chris has testified before both the Senate and House, served on the Black Hat Review Board since 2012, and received numerous industry honors, including recognition from InfoWorld, eWeek, and CyberScoop. His current work focuses on application security, secure software development, AI-generated code, vulnerability disclosure, and software liability.

Wednesday, September 23

Roundtable Agenda

Detailed Session Titles Forthcoming

12:30 PM

Registration & Networking

Check-in and opening networking session.

1:00 PM

Welcome & Introductions

1:15 PM

AI 2030: Decisions Before Certainty

Jason Witty & Gearoid Terry

As AI capabilities evolve toward 2030, security leaders and policymakers are making consequential decisions without knowing precisely where the technology will lead. Jason Witty, EVP and CISO of Fidelity Investments, and Gearoid Terry, a senior Fidelity cybersecurity leader, will share how they are thinking about what comes next—including world models—and the choices leaders face along the way.

The conversation will focus on which signals matter, what requires action now, what demands preparation, and where leaders should preserve flexibility.

Takeaway: A strategic framework for making security and policy decisions today while preparing for an uncertain AI future.

2:15 PM

The Velocity Trap: Governing Software Risk in the Age of AI

Fireside Chat: Chris Wysopal & Chris Sullivan

AI is increasing the volume and velocity of software without a corresponding improvement in security—expanding the enterprise attack surface while legacy technology debt continues to compound.

Drawing on his experience as a Veracode co-founder, L0pht alumnus, security researcher, and congressional witness, Chris Wysopal will examine how vulnerability risk is changing—and what remains stubbornly familiar.

This fireside chat will explore how CISOs can govern risk across the software lifecycle, demand meaningful evidence of security, and build resilience without slowing innovation.

3:15 PM

Break

3:30 PM

RESILIENCE THROUGH CRISIS: LESSONS FROM NATIONAL AND HOMELAND SECURITY

Fireside Chat: Juliette Kayyem & Emilian Papadopoulos

Cybersecurity and AI risk management strategies are often built around preventing disruption. But sophisticated attacks, technology failures, geopolitical shocks, and cascading disruptions make some degree of disruption inevitable. The defining leadership challenge therefore is not simply prevent all incidents, but being able to continue operating, to adapt under pressure, and to recover with public trust intact.

Juliette Kayyem, former DHS Assistant Secretary and author of The Devil Never Sleeps, will join Emilian Papadopoulos, President of Good Harbor, for a discussion about leading through consequential events, and how to prepare for them.

Drawing on lessons from national security, crisis management, and organizational resilience, they will examine how leaders can prepare for disruption, establish decision authority before a crisis, manage cascading dependencies, communicate amid uncertainty, and turn recovery into a source of future strength.

Takeaway: A leadership framework for maintaining critical operations, making consequential decisions, and accelerating recovery through disruption.

4:30 PM

Closing Remarks

4:45 PM

Book Signing

5:00 PM

Roundtable Concludes & Dinner

Join us as we head to dinner for evening networking.

The Executive Cohort

This is a small, closed-door working session for leaders managing the intersection of cyber risk, business, geopolitics, and public policy. The discussion will focus on how to manage today’s issues across the short, medium, and long term—including AI and quantum readiness, geopolitical and supply-chain risk, vulnerability management, Quality by Design, safe harbor, open-source sustainability, and cyber reporting.

Request to Attend

Registration is strictly limited to Fortune 1000 CISOs and Federal Policy Makers.

Dress Code: Business Casual

Initializing Secure Registration Form...