Watch Now

Examiners' bar for what counts as "adequate" keeps moving: Ransomware resilience, third-party and AI risk, incident reporting timelines, board oversight: what passed last cycle can draw a finding this one.

In this live panel, four security leaders from highly regulated organizations compare notes on what they're seeing in real exams right now. Together they'll cover where examiner focus has shifted, what documentation and evidence actually satisfies an examiner, and how lean teams keep compliance work from swallowing the security program.

Key takeaways:

• Where examiner attention has shifted over the last 12 to 18 months, and the topics that now draw the most questions (third-party risk, AI use, resilience testing, board reporting).
• How to translate a risk-based security program into evidence an examiner accepts, without building a second program just for the exam.
• What separates a finding from a clean report on the same control: how the panelists document, prove, and talk about their work.
• Practical ways to prepare the board and executive team for the questions examiners will ask them directly.
• How small and mid-sized teams prioritize when regulator demands outpace headcount and budget.

On-Demand Webinar. Available Now.