Black Hat USA · Executive Workshop
Measuring Frontier Model Impact On Exposure Management
Measure Exposure, Defend Posture, Calculate ROI
A private session for senior security executives.
Most cyber risk scores are built to alert, not to measure. That's a problem the moment your CFO and/or board asks whether the security budget is paying off, or whether you're managing risk as tightly as any other line of business.
This 45-minute working session walks through a framework for measuring exposure with rigor across vulnerability, identity, and beyond, tied directly to MITRE ATT&CK coverage and real-world loss data. You'll see how exposure connects to a number your CFO can reason about, and how that number holds up over time and across the business.
Date & Time:
Wednesday, August 5 | 10:00 - 10:45 AM
Thursday, August 6 | 10:00 - 10:45 AM
Location: W Las Vegas | Third Floor - Sienna Room B
3940 S Las Vegas Blvd W, Las Vegas, NV 89119
The Risk Operations Center Quantified: Mythos Measured & Managed
#1: Rethinking Risk Measurement
Most security programs measure activity and call it risk. This session challenges that assumption, laying the conceptual foundation for a Risk Operations Center built on measurement that is precise, quantified, and defensible.
#2: Arrival, Burndown, and Survival
How fast is exposure arriving? How quickly are you closing it? How long does it survive? These three questions, precisely measured, unlock your Average Window of Exposure and transform how you understand the scale and cost of risk in your environment.
#3: The Exposure Economics of Mythos
AI is quietly rewriting the math of cyber risk. This session puts hard numbers on what that means, using Average Window of Exposure to reveal the economic cost of your current burndown rate and making the case for hyper-prioritization and autonomous remediation as the only response that matches the pace of a modern threat.
#4: Presenting to the Board
Getting boards to act on cyber risk is one of the hardest things a security leader does. This session teaches you to translate your ROC's quantified exposure into narratives that frame investment decisions and build lasting executive confidence.
Every attendee leaves with a new way of thinking about exposure measurement and a personalized two-page ROI report built from real industry benchmarks. Follow-up briefings on your report are available on request.
