ICRMC SPEAKER

Jack Jones

Co-founder and Executive VP, Research & Development, Risklens
and Creator of Factor Analysis of Information Risk (FAIR)

Jack Jones has worked in technology, information security, and risk management for over thirty years.  He has ten years of experience as a CISO with three different companies, including five years at a Fortune 100 financial services company.  His work there was recognized in 2006 when he received the ISSA Excellence in the Field of Security Practices award at that year’s RSA conference.  In 2012 Jack was honored with the CSO Compass award for leadership in risk management.  Jack is an active member in ISACA, serving on the task force that created the RiskIT framework and leading the CRISC certification development.  He is also an adjunct professor at Carnegie Mellon University, where he teaches risk measurement and management in the CRO and CISO programs.  He is also the creator of the “Factor Analysis of Information Risk” (FAIR) framework adopted by the Open Group as an international standard.  Currently, Jack is the EVP Research and Development of RiskLens, Inc., and Chairman of the FAIR Institute, a non-profit organization dedicated to evolving risk management practices.  He has also co-authored a book on FAIR entitled “Measuring and Managing Information Risk, a FAIR Approach” which was inducted into the Cyber Security Canon in 2016.