Business-Focused
Healthcare organizations, businesses, and local governments are all common targets of online crime. Our programs bring business leaders from across industries together to collaborate with our students and faculty on timely solutions to cyber and national security concerns.听
Annual Events
-
Boston Conference on Cybersecurity
For six years Boston College and the Federal Bureau of Investigation have hosted the听Boston Conference on Cyber Security, a one-day event featuring compelling lectures and panel discussions from international leaders in the disciplines of emerging technologies, operations and enforcement, and real-life cyber and national security concerns.听
At a time of growing concern about the vulnerability of our nation鈥檚 information systems, this conference provides an opportunity for leaders in cybersecurity from the academic, analytic, operations, research, corporate, and law enforcement arenas to come together and coordinate their efforts, creating a more secure cyber-space.
-
Cyber Attack and Incident Response Simulation
Each Fall and Spring Semester, the Cybersecurity Program visits the IBM X-Force Cyber Range in Cambridge, Massachusetts. Table-top exercises simulate realistic cyber breaches to help students learn how to respond and recover from enterprise level incidents, manage vulnerabilities, and create proactive solutions to build a stronger security culture.
Cyber and National Security Programs Series
2023-2024
October 11, 2023
Artificial Intelligence (AI) is transforming various business sectors, particularly in cybersecurity, governance, risk management, and compliance. Cybercriminals are increasingly using AI to execute sophisticated attacks, including deepfakes, ransomware, business email compromise, and supply chain fraud, with Forbes warning of a "new era of menacing threats." IBM Security reports the average cost of a U.S. data breach at $9.48 million, highlighting the high stakes for organizations defending their data privacy in regulatory actions, lawsuits, and shareholder disputes.
In a recent webinar, we discussed AI security and privacy regulations, compliance strategies, and how a risk-based approach to cybersecurity can help companies safeguard operations, respond to breaches, and recover effectively.
Featuring
- Mike Bourque, Vice President &. CIO, ITS, Boston College
- Kevin R. Powers, Cybersecurity Program Founder & Director, Boston College
- Phil Aldrich, Chief Operating Officer,听Verterim; and BC Faculty
- Etay Maor, Senior Director, Security Strategy,听Cato Networks; and BC Faculty
- Thom Shola,听Chief Risk Officer,听Northern Bank; and BC Faculty
October 2023
贵别补迟耻谤颈苍驳:听
- Darren Mott, FBI Special Agent (ret.) - the 鈥淭he CyBUr Guy"
- Professor Kevin R. Powers, J.D., Boston College
- Professor Randall Trzeciak,听Carnegie Mellon
- Evan Rice, GuideStar
- Heath Spencer, TraitWare
March 3, 2023
Contributors dissect the recent conviction of the Uber Chief Information Security Officer.听
贵别补迟耻谤颈苍驳:听
- Matthew Rosenquist, The Cypersecurity Vault Podcast Host, and CISO, Eclipz
- Kevin Powers, J.D., Cybersecurity Program Founder and Director, Boston College
2021-2022
March 29, 2022
By 2025, it is estimated that there will be 3.5 million cybersecurity job openings, and the global cybersecurity workforce will need to grow by 145% annually to meet the rising demand for skilled talent. Meanwhile, headlines frequently report cyber-attacks involving the theft of sensitive data, intellectual property, financial information, and the disruption of business and government functions. To address the cybersecurity skills gap, many organizations are turning to managed services, though the best solution varies based on specific risks and needs.
In this webinar, we explored and differentiated the range of managed services available鈥攕uch as MSSP, MDP, SIEM, vCISO, incident response, and cloud security鈥攁nd provided practical guidance for designing a robust cybersecurity and data privacy program to protect business operations and customer data.
Featuring:
- Professor听Kevin听R. Powers, J.D., Cybersecurity Program听Founder and Director, Boston College
- Jay Pasteris,听CIO & CISO,听GreenPages Technology Solutions
- Jennifer McLarnon,听Security Consulting Senior Manager,听Accenture听(former CIO, Boston College High School)
January 25, 2022
We have seen a significant increase in cybercrime and headlines filled with attacks that have stolen digital information or caused the disruption of government, business, and supply-chain functions. It has been devastating in many regards, but we have also seen a new, unprecedented age of innovation. Venture capital funding has poured into cybersecurity companies at a record pace, helping drive the next generation of cybersecurity technologies to combat today鈥檚 threats and narrow the talent shortage gap.In our webinar, our guest expert, who invests in and advises late-stage and growth companies, will discuss the role of the VC (from 鈥渟oup to nuts鈥�) in cybersecurity and data privacy as well as various trends for 2022 and beyond.听听
贵别补迟耻谤颈苍驳:听
- John Cordo,听Principal,听NightDragon
- Professor听Kevin听R. Powers, J.D., Cybersecurity听Founder and Director, Boston College
November 16, 2021
Social engineering plays a role in the vast majority of cybercrimes, with an estimated 98% of cyberattacks launched through tactics like phishing, spear phishing, whaling, and pretexting. Headlines regularly report cyber-attacks that result in the theft of sensitive personal, healthcare, and business data or the disruption of government and corporate functions. IBM Security reports that the average cost of a U.S. data breach is $8.64 million, more than double the global average, with organizations facing even higher stakes as they defend their data protection policies in regulatory actions and lawsuits.
In this webinar, we examined social engineering attacks, focusing on threat actors, vectors, and methodologies, and provided practical insights into how these attacks unfold. Our experts offered key research, preparedness strategies, and best practices for protecting business operations and sensitive data from social engineering threats.
Featuring:
- Professor听Kevin听R. Powers, J.D., Cybersecurity听Founder and Director,听Boston College
- Karen Kukoda,听Vice President, Strategic Partnerships,听SafeGuard Cyber
- Jennifer McLarnon,听Security Consulting Senior Manager,听Accenture
- Amanda Tucker, CRCM, CAMS, CICA,听Chief Risk and Compliance Officer,听Atlantic Bay Mortgage
October 19, 2021
Headlines regularly report cyber-attacks that result in the theft of sensitive personal, healthcare, intellectual property, and business data, or the disruption of government and corporate functions. According to IBM Security, the average cost of a data breach in the U.S. is $8.64 million鈥攎ore than double the global average. For many organizations, the stakes are even higher, as they face the challenge of defending their data privacy practices in regulatory enforcement actions and lawsuits.
In this webinar, we discussed the latest security and privacy regulations, along with compliance and mitigation strategies that help U.S. companies navigate complex legal requirements. We explored how a risk-based approach to cybersecurity helps organizations respond to, mitigate, and recover from data breaches while safeguarding their bottom line.
Featuring:
- Professor Kevin R. Powers, J.D., Cybersecurity Program听Founder and Director, Boston College
- Phil Aldrich,听Director,听Enterprise Risk Management & Governance, Risk, and Compliance, Dell EMC
- Padraic O'Reilly,听Co-Founder and Chief Product Officer,听CyberSaint
September 16, 2021
Each day brings news of another ransomware attack resulting in the theft of sensitive data鈥攕uch as personal information, intellectual property, trade secrets, and financial records鈥攐r the disruption of business and government operations. Nation-states, terrorists, hacktivists, and cybercriminals are relentless, and companies are warned that it鈥檚 not a matter of "if" but "when" they鈥檒l be attacked, facing demands for millions in ransom to "maybe" restore their systems and recover stolen data. Adding to the pressure, federal and state regulators are imposing new cybersecurity requirements with hefty fines, yet offering little guidance on compliance.
In this webinar, we explored how organizations can develop an effective cyber-risk management strategy, drawing from industry best practices and lessons learned, to assess their readiness and successfully respond to, mitigate, and recover from ransomware attacks鈥攗ltimately protecting their business operations and safeguarding sensitive data.
贵别补迟耻谤颈苍驳:听
- Professor听Kevin听R. Powers, J.D., Cybersecurity Program Founder and Director, Boston College
- Doug Domin,听Supervisory Special Agent,听Criminal Cyber Squad (CY-2), Federal Bureau of Investigation (FBI), Boston Division
- Simon Taylor,听CEO & Founder,听HYCU, Inc. (Backed by Bain Capital Ventures)
2020-2021
May 12, 2021
Headlines frequently report ransomware attacks resulting in the theft of sensitive data鈥攕uch as personal information, intellectual property, trade secrets, and financial records鈥攐r the disruption of business and government functions. With threats from nation-states, terrorists, hacktivists, and cybercriminals, companies are warned it鈥檚 not a matter of "if" but "when" they will face ransomware demands for millions, with no guarantee of system recovery or data return. Meanwhile, new federal and state regulations impose strict cybersecurity requirements and heavy penalties, yet provide little guidance.
In this webinar, we discussed how organizations can develop an effective cyber-risk management strategy, using industry best practices and lessons learned, to assess their readiness and successfully respond to, mitigate, and recover from ransomware attacks鈥攑rotecting their operations and sensitive data.
Featuring:
- Professor听Kevin听R. Powers, J.D., Cybersecurity Program听Founder and Director, Boston College
- Doug Domin, Supervisory Special Agent, Federal Bureau of Investigation (FBI), Boston Division - Cyber Crime Program
- Dr. Stanley Barr, Ph.D., Senior Principal Cyber Researcher, MITRE Corporation
- J.R. Manes, Global Head of Cyber Intel & Threat Analysis Cybersecurity, HSBC Holdings PLC
April 22, 2021
Organizations are faced with unrelenting threats from Nation-states, terrorists, hacktivists, and cyber-criminals seeking to steal their digital information (e.g., sensitive PII, intellectual property, trade secrets, financial information, classified and confidential materials) or disrupt government and business functions.
What to do? In our webinar, we will discuss the current cyber-threats to organizations and our critical infrastructure, the role of the U.S. Attorney鈥檚 Office, pertinent cyber and national security laws (e.g., CFAA, CFIUS, FCPA, OFAC advisories, etc.), and how organizations can protect their sensitive data and networks from cyber-attacks, as well as successfully navigate the complex legal and regulatory landscape to avoid civil and criminal liability.
Featuring:
- Professor听Kevin听R. Powers, J.D., Cybersecurity听Program Founder and Director, Boston College
- Mackenzie Queenin, Assistant U.S. Attorney, Securities, Financial, and Cyber Fraud Unit, U.S. Attorney鈥檚 Office, District of Massachusetts
- Professor Joanna Baltes, J.D., L.L.M, Cybersecurity Program Curriculum Coordinator, Boston College (former Chief of Staff to FBI Deputy Director, former Federal Prosecutor, and former听Counsel to the Assistant U.S. Attorney General for the National Security Division)
March 25, 2021
Nation-states, terrorists, hacktivists, and cybercriminals are increasingly targeting healthcare organizations to steal sensitive patient data, intellectual property, and research, or to disrupt operations. The COVID-19 pandemic has amplified these threats, creating additional challenges due to changes in HIPAA and other healthcare compliance requirements.
In this webinar, we will discuss recent updates and proposed changes to HIPAA and other laws affecting healthcare security and privacy. We offered practical guidance for healthcare organizations to efficiently and cost-effectively comply with these regulations, and shared best practices to protect data and systems, as well as to effectively respond to, mitigate, and recover from cyber-attacks.
Featuring;听听
- Joni R. Beshansky, MPH, LP.D.,听Director,听Master of Healthcare Administration Program, Boston College
- Professor听Kevin听R. Powers, J.D., Cybersecurity Program, Founder and Director, Boston College
- Scott Lashway, Managing Partner,听Boston Office, Co-Chair,听Data Privacy & Security Practice Group, Manatt, Phelps, & Phillips, LLP
- Tim Stettheimer, Ph.D., Vice President, Education, College of Healthcare Information Management Executives (CHIME), Adjunct Professor, Boston College
February 3, 2021
Businesses today face cyber threats from nation-states, terrorists, hacktivists, and cybercriminals, along with a growing number of complex cybersecurity requirements from federal and state regulators to protect their digital information. With each new technology and trend鈥攚hether it's cloud computing, IoT, AI, remote work, or telehealth鈥攃omes the challenge of securing data and networks.
In this webinar, we returned to the fundamentals, focusing on risk management, cyber hygiene, mitigation, and resilience. We discussed how to effectively make the business case for investing in cybersecurity, including technologies, processes, and people, from the board and senior executives to business units and support staff, and how to develop robust data security and privacy programs to protect against cyber threats.
Featuring:
- Professor听Kevin听R. Powers, J.D., Cybersecurity Program听Founder and Director, Boston College
- Thom Shola,听Senior Vice President & IT Cyber Security Officer,听Global Wealth & Asset Management. John Hancock Retirement Plan Services
- Professor Joanna Baltes, J.D., L.L.M, Cyberecurity Program听Curriculum Coordinator,听Boston College, (Former Chief of Staff to FBI Deputy Director)
View the slides of this presentation in PDF.
*If you need to download the free Adobe Acrobat Reader software, you can find it听
December 2, 2020
Cities are becoming 鈥渟mart鈥� through digital transformation efforts in order to increase economic growth, enhance citizen and government engagement, improve the quality of life for citizens (e.g., transportation, public utilities, safety, equality, employment), and reduce negative environmental impact, among many other benefits.听听
In this webinar, we discussed how cities and communities can, by using IoT-enabled frameworks and other best practices, developing programs to effectively听address the cybersecurity issues faced by cities and communities looking to become 鈥渟mart.鈥�
Featuring:
- Professor听Kevin听R. Powers, J.D., Cybersecurity Program听Founder and Director, Boston College
- Bill Corrigan,听Expert Associate Partner, McKinsey & Company
View the slides of this presentation in PDF.
*If you need to download the free Adobe Acrobat Reader software, you can find it听
October 20, 2020
In our听webinar, we discussed how to develop an effective incident response plan, based on 鈥渓essons learned鈥� and industry best practices, and how to successfully respond to, mitigate, and recover from a data breach.
October 20, 2020
In this webinar, we discussed how to develop an effective incident response plan, based on 鈥渓essons learned鈥� and industry best practices, and how to successfully respond to, mitigate, and recover from a data breach.
贵别补迟耻谤颈苍驳:听
- Professor听Kevin听R. Powers, J.D., Cybersecurity听Founder and Director, Boston College
- Diana Kelley, Board of Governors Member, Women in CyberSecurity (WiCyS)(Former Microsoft Cybersecurity Field CTO and IBM Global Executive Security Advisor)
- Etay Maor,听Chief Security Officer,听IntSights
August 24, 2020
In this webinar, we discussed how cyber-criminals took advantage of consumers based on vulnerabilities posed by COVID-19.
Featuring:
- Professor Kevin R. Powers, J.D., Cybersecurity Program听Founder and Director, Boston College
- Doug Domin,听Special Agent, Criminal Cyber Squad (CY-2), Federal Bureau of Investigation (FBI), Boston Division