NTSC Northeast CISO Policy Roundtable 2026

National Technology Security Coalition

Northeast Regional
Policy Roundtable

"The value is the room: senior peers bringing real-world experience, sharing what is working, and pressure-testing what comes next."

Wednesday, September 23 | Boston, MA

12:30 PM – 5:30 PM ET

Agenda Outcomes

Insight, Alignment & Action

Chatham House Rules Apply — Limited to 60 Seats

Insight

Improve the signal on what is changing, what matters most, and what requires attention now versus later.

Alignment

Compare approaches across industry and government, challenge assumptions, and build a clearer view of where leaders, boards, and policymakers need to align.

Action

Identify a small number of concrete priorities the NTSC community can advance through policy engagement and stronger public-private collaboration.

Who Should Attend

Join members of the National Technology Security Coalition Board and a select group of CISOs, Chief Risk Officers, senior technology executives, and policymakers for the NTSC Northeast Regional Policy Roundtable.

Distinguished Discussion Leaders

Charles Clancy, Ph.D.

CTO, SVP Technology & Engineering

MITRE

Hover for bio

Charles Clancy is MITRE’s Chief Technology Officer and Senior Vice President for Technology and Engineering, where he leads technology strategy, research and development, and technical capabilities across MITRE’s federally funded research and development centers. A recognized expert in cybersecurity, communications, and emerging technology, Clancy previously served as a professor and research center executive at Virginia Tech and began his career at the National Security Agency. He is an IEEE Fellow and helped establish the Post-Quantum Cryptography Coalition (PQCC), focused on accelerating adoption of post-quantum standards and advancing crypto-agility. -->

Juliette Kayyem

Professor

Harvard Kennedy School

Hover for bio

Juliette Kayyem is an internationally recognized expert in national security, crisis management, disaster preparedness, and organizational resilience. She is the Belfer Senior Lecturer in International Security at Harvard Kennedy School and Faculty Director of the Homeland Security Project at Harvard’s Belfer Center.

Kayyem previously served in the Obama administration as Assistant Secretary for Intergovernmental Affairs at the U.S. Department of Homeland Security and as Massachusetts’ Homeland Security Advisor under Governor Deval Patrick. She is also CNN’s Senior National Security Analyst, a contributing writer for The Atlantic, and the author or editor of six books, including The Devil Never Sleeps.

Emilian Papadopoulos

President

Good Harbor

Hover for bio

Emilian Papadopoulos is a cybersecurity and technology risk leader with more than 15 years of experience advising senior executives on emerging technologies, cyber threats, and enterprise risk. As President of Good Harbor, he advises boards, CEOs, and CISOs across a wide range of industries and also serves as Executive Director of the Media ISAO, focused on strengthening the resilience of news media organizations. Emilian serves on the boards of RedSeal and the bipartisan nonprofit Partnership for a Secure America and is an advisor to the National Technology Security Coalition. He previously taught cybersecurity at Georgetown University and is a graduate of the University of Toronto and Harvard Kennedy School, where he served as elected chair of the global Alumni Board.

Chris Sullivan

Executive Director

NTSC

Hover for bio

Chris Sullivan is the Executive Director of the National Technology Security Coalition (NTSC), a non-profit, non-partisan organization advancing the national dialogue on technology security. With more than 20 years of experience as a CEO, CTO, CISO, and board advisor, Chris brings deep expertise at the intersection of AI, cybersecurity, business strategy, and risk. A Certified Artificial Intelligence Governance Professional (AIGP), he has advised executives and boards on responsible AI governance, emerging technologies, transformation, and regulation, while helping organizations turn innovation into measurable business value. His experience includes scaling technology startups, leading AI-focused R&D initiatives, guiding Fortune 100 companies, managing 14 M&A integrations, securing deployments across leading pharmaceutical companies, and building cross-sector partnerships with the FBI through InfraGard.

Gearoid Terry

Product Area Lead, Enterprise Cybersecurity

Fidelity

Hover for bio

Gearoid Terry is a forward-thinking cybersecurity and technology executive serving as a vice-president of enterprise security at Fidelity Investments, where he focuses on navigating the complex, evolving digital threat landscape. With deep expertise in modern enterprise defense, cloud security strategies, and threat intelligence integration, he champions a proactive approach to protecting digital assets against next-generation risks. Beyond his core security leadership, he frequently represents Fidelity Ireland across key industry technology initiatives, cybersecurity forums, and corporate responsibility programs, advocating for secure and sustainable digital innovation.

Jason Witty

EVP, CISO

Fidelity

Hover for bio

Jason Witty is Executive Vice President and Chief Information Security Officer at Fidelity Investments, bringing more than two decades of experience leading cybersecurity, technology controls, risk management, and resilience programs for major financial institutions. Before joining Fidelity, he served as Chief Security Officer at USAA and held senior security leadership roles at JPMorgan Chase, U.S. Bancorp, Bank of America, LaSalle Bank, The Options Clearing Corporation, and Aon. A certified Information Systems Security Management Professional and award-winning CISO, Jason has been recognized by I.S.E. North America, ISSA Chicago, AITP, and Information Security Magazine and is a frequent keynote speaker at leading cybersecurity conferences. Throughout his career, he has led global security teams, supported dozens of acquisition-related network integrations, established secure e-commerce environments, and advanced collaboration across the financial services and cybersecurity communities.

Chris Wysopal

Chief Security Evangelist

Veracode

Hover for bio

Chris Wysopal is a pioneering cybersecurity leader, researcher, and co-founder of Veracode, where he served as Chief Technology Officer for 18 years and now serves as Chief Security Evangelist. A former member of the influential hacker collective L0pht, he testified before the U.S. Senate in 1998 about critical internet security vulnerabilities, co-created the password-auditing tool L0phtCrack, and helped establish the coordinated vulnerability disclosure practices still used across the industry today. He later led security research and development at @stake and Symantec, worked with Microsoft to integrate security into its software development lifecycle, and co-authored The Art of Software Security Testing. Chris has testified before both the Senate and House, served on the Black Hat Review Board since 2012, and received numerous industry honors, including recognition from InfoWorld, eWeek, and CyberScoop. His current work focuses on application security, secure software development, AI-generated code, vulnerability disclosure, and software liability.

Wednesday, September 23

Roundtable Agenda

Detailed Session Titles Forthcoming

12:30 PM

Registration & Networking

Check-in and opening networking session.

1:00 PM

Welcome & Introductions

1:15 PM

38 MONTHS: The world cybersecurity will be protecting in 2030

Jason Witty & Gearoid Terry

In this forward-looking keynote, Jason Witty examines the technologies reshaping cybersecurity by 2030, including AI agents, world models, autonomous research systems, biological computing, synthetic identities, and quantum computing. Focusing exclusively on technologies that already exist or are actively being deployed, the session explores how trust, governance, and identity become central security challenges in an era where autonomous systems operate at machine speed. Attendees will leave with a practical framework for understanding the security profession's next major transformation.

Takeaway: A strategic framework for making security and policy decisions today while preparing for an uncertain AI future.

2:15 PM

The Velocity Trap: Governing Software Risk in the Age of AI

Fireside Chat: Chris Wysopal & Chris Sullivan

AI is increasing the volume and velocity of software without a corresponding improvement in security—expanding the enterprise attack surface while legacy technology debt continues to compound.

Drawing on his experience as a Veracode co-founder, L0pht alumnus, security researcher, and congressional witness, Chris Wysopal will examine how vulnerability risk is changing—and what remains stubbornly familiar.

This fireside chat will explore how CISOs can govern risk across the software lifecycle, demand meaningful evidence of security, and build resilience without slowing innovation.

3:05 PM

Break

3:20 PM

Quantum and the Board: Making the Case for Action

Charles Clancy, Ph.D.

Quantum presents a difficult leadership challenge: the timing is uncertain, but preparing the enterprise for post-quantum cryptography could take years. Charles Clancy will lead a practical discussion on how CISOs should frame quantum risk for the board—what leaders need to understand now, how to communicate uncertainty without creating unnecessary alarm, and how to think about investment, sequencing, and readiness. The discussion will focus on turning a complex technology issue into a clear enterprise risk conversation and answering the questions boards are likely to ask: Why now? How much is enough? And what should we be doing today?

Takeaway: A practical framework for building board understanding and gaining support for an appropriately sized quantum-readiness program.

3:40 PM

RESILIENCE THROUGH CRISIS: LESSONS FROM NATIONAL AND HOMELAND SECURITY

Fireside Chat: Juliette Kayyem & Emilian Papadopoulos

Cybersecurity and AI risk management strategies are often built around preventing disruption. But sophisticated attacks, technology failures, geopolitical shocks, and cascading disruptions make some degree of disruption inevitable. The defining leadership challenge therefore is not simply prevent all incidents, but being able to continue operating, to adapt under pressure, and to recover with public trust intact.

Juliette Kayyem, Professor at Harvard Kennedy School, former DHS Assistant Secretary and author of The Devil Never Sleeps: Learning to Live in an Age of Disasters, will join Emilian Papadopoulos, President of Good Harbor, for a discussion about leading through consequential events, and how to prepare for them.

Drawing on lessons from national security, crisis management, and organizational resilience, they will examine how leaders can prepare for disruption, establish decision authority before a crisis, manage cascading dependencies, communicate amid uncertainty, and turn recovery into a source of future strength.

Takeaway: A leadership framework for maintaining critical operations, making consequential decisions, and accelerating recovery through disruption.

4:30 PM

Closing Remarks

4:45 PM

Book Signing

5:00 PM

Roundtable Concludes & Dinner

Join us as we head to dinner for evening networking.

The Executive Cohort

This is a small, closed-door working session for leaders managing the intersection of cyber risk, business, geopolitics, and public policy. The discussion will focus on how to manage today’s issues across the short, medium, and long term—including AI and quantum readiness, geopolitical and supply-chain risk, vulnerability management, Quality by Design, safe harbor, open-source sustainability, and cyber reporting.

Request to Attend

Registration is strictly limited to Fortune 1000 CISOs and Federal Policy Makers.

Dress Code: Business Casual

Initializing Secure Registration Form...