Speaker Bio
Paul Proctor is a VP and Distinguished Analyst, and former Chief of Research for Risk and Security at Gartner. He leads CIO research for outcome-driven metrics. His strength in connecting investment to business outcomes supports CIOs across diverse challenges including digital investment, cost optimization, measurement, board reporting, cybersecurity, M&A and risk management. Mr. Proctor advises CIOs, executives and boards to manage risk and balance the needs to protect with the needs to run their business.
Mr. Proctor's groundbreaking research in risk, value, and cost (RVC) management helps organizations prioritize and invest in the readiness of technology to support their business and mission outcomes. His work on cybersecurity as a business decision helps organizations prioritize and invest in cyber through protection level agreements (PLA) and outcome-driven metrics (ODM). This work also led to the creation of the world's first protection-level benchmark that is transforming how organizations in every industry, of every size, globally measure, report, and invest in cybersecurity. In 2016, he was appointed to the University of California Cyber Risk Advisory Board by former Secretary of Homeland Security and UC President, Janet Napolitano.
Show More
Show Less
Sessions
Monday, June 09, 2025
12:45 PM - 01:15 PM EDT
The Gartner Cybersecurity Business Value Benchmark, Second Generation
Paul Proctor,
Distinguished VP Analyst, Gartner
After two years, Gartner is enhancing the protection level benchmark with new metrics and new data. This will give existing participants new metrics to share with their executives and boards to guide cybersecurity investment. New categories include AI, cyber-physical systems, and application-level security. Also, gain insight into the future features and direction.
...
Show More
Show Less
Tuesday, June 10, 2025
12:15 PM - 12:45 PM EDT
The CISO/CIO Collaboration Playbook
Paul Proctor,
Distinguished VP Analyst, Gartner
Whether a CISO reports into IT or the CIO is a peer, CIOs play a critical role in CISO effectiveness and cybersecurity readiness. This playbook is designed to address aspects of security that fall under joint CISO/CIO responsibility and influence. Covering key topics such as the cybersecurity operating model, board engagement, balancing security with IT operations, and investing in security to support business growth, this playbook is a must-have for all CISOs and the CIOs they work with.
...
Show More
Show Less
Tuesday, June 10, 2025
03:30 PM - 04:00 PM EDT
The Real Cost of Cybersecurity
Paul Proctor,
Distinguished VP Analyst, Gartner
Cybersecurity costs are not fully captured in the security budget. The real cost includes the comprehensive expenses required to deliver cybersecurity, encompassing capital and operational expenses across both IT and security, and business friction. This session will explain how to embrace this new perspective and develop a more complete understanding of security costs to better inform cybersecurity investment decisions.
...
Show More
Show Less
Wednesday, June 11, 2025
10:15 AM - 11:15 AM EDT
CISO Circle: Leadership Exchange: The CISO/CIO Collaboration Playbook
Paul Proctor,
Distinguished VP Analyst, Gartner
Whether a CISO reports into IT or the CIO is a peer, CIOs play a critical role in CISO effectiveness and cybersecurity readiness. This playbook is designed to address aspects of security that fall under joint CISO/CIO responsibility and influence. Covering key topics such as the cybersecurity operating model, board engagement, balancing security with IT operations, and investing in security to support business growth, this playbook is a must-have for all CISOs and the CIOs they work with.
...
Show More
Show Less
Wednesday, June 11, 2025
02:45 PM - 03:15 PM EDT
Measuring the Efficacy of Your GenAI Risk Management Efforts
Paul Proctor,
Distinguished VP Analyst, Gartner
Whether you like it or not, your organization is likely using GenAI. The question is how you respond and contribute to ensuring the business is not exposed to unnecessary risks due to immature GenAI implementation and risk management processes. Join the session to see how an outcome-driven approach can help your business stakeholders make optimized cybersecurity risk management decisions and maximize their investments.
...
Show More
Show Less