PRINCIPAL CONSULTANT | ENVISTA CONSULTING LTD. & SIG CHAIR FOR EMEA REGION | IIBA CYBER SPECIAL INTEREST GROUP
Mark Cross
Mark Cross is founder and chair of the IIBA’s global Cybersecurity Special Interest Group and North Yorkshire Chapter Lead for the Yorkshire Cybersecurity Cluster. He runs Envista Consulting, a cybersecurity-focused business analysis training and consulting practice based in York in England. Mark is an advocate for neurodiversity and a regular speaker at international conferences on the interrelationships between the delivery of essential transformation and the protection of organisational security. For this work, he was awarded the title of Business Analyst of the Year 2025 at the IRM Business Analysis Conference. He holds multiple advanced accreditations in business analysis and cybersecurity from the IIBA, ISC2, the British Computer Society, and the Chartered Institute of Information Security.
Presentation: Business Analysis at the Frontier of Cybersecurity
Business analysts have always stood at the front line of value delivery and technological change, but now we face a new challenge. As our organisations embrace innovation and transformation through the adoption of cloud and next-generation services that are enhanced with AI, we need to find a balance between the realisation of the benefits that these radically new capabilities can offer, while also managing the risk from completely new, and barely understood threats arising both from within our organisations and from around the world. This issue has never been as urgent as it is today, but it is also still within our abilities to manage.
In this talk, our speaker will explain the essential role that business analysis will play in the next chapter of innovation where our responsibilities will evolve from being practitioners of agile and data analysis, to being guardians of responsible AI implementation. We will explore a wide range of tools and techniques that you can apply to your day-to-day work and discover new insights that will help you to ensure that your next project will not leave the door open for a major security incident.