Nobody in your company decided to take this risk.

Why this matters to your company

None of these came from a decision anyone made. Your team moved fast, which is what you hired them to do.

All four end the same way. Somebody outside your company asks you to account for it, and the answer has to come from you.

Your support tool tells a customer something you never approved.

Someone pastes a client contract into a public tool to check a clause.

An agent with access to your systems does something nobody asked it to.

A buyer's questionnaire asks who signed off on all of this.

What you get

Three things you will be able to answer afterwards

Who is in the room

Who answers for it when a tool your company bought causes the loss.

What your vendor contract actually says about that, and what it leaves out.

How to answer a buyer, an auditor or a regulator asking who approved what.

María

Lobato

Dual qualified, Spain and England & Wales · 20 years in data protection

María B.

McReddie

15 years in corporate law and cross border compliance

Kayne

McGladrey

Independent vCISO · IEEE Senior Member · author of Cyber Risk is a Myth

What most companies assume, and what tends to happen

The vendor built the tool, so the vendor carries the risk.

The company that switched it on is the one asked to explain it.

Our contract with them covers this.

The contract was written to protect the side that wrote it.

Someone reviews the output, so there is oversight.

A reviewer who cannot say no is not oversight.

Nobody has asked us about any of this.

Buyers are already asking, in writing, before they sign.

Who is teaching this

People who do this for a living

Twenty years advising international organisations on privacy, data protection and cybersecurity.

Dual qualified, Spain and England & Wales
Named in the DPO 200
Powerful Women in IP
International keynote speake

Lexavy

Fifteen years in corporate law, mergers and acquisitions, and cross border regulatory compliance.

International corporate and M&A practice
Master in Digital Law, AI and Blockchain
Cross border regulatory work

Lexavy

Twenty five years of experience advising organisations on security strategy and how risk is actually carried within a business.

IEEE Senior Member
Author of Cyber Risk is a Myth
Virtual CISO to multiple organisations

Independent vCISO

María

Lobato

María B.

McReddie

Kayne

McGladrey

What it costs

Nobody chose to carry this. Somebody is going to be asked to, and that part is not optional.

60+

Years of combined legal and security experience in the room

60

Minutes, with time for questions from the room

Free

Free to attend, and no product demo

Thursday 17

September 2026

5:00 PM BST · 1:00 PM ET · 10:00 AM PT