Lukasz Guzdziol, CISSP, CISA, CCSK

Driving the global standard for organizational resilience in the era of Artificial Intelligence. As a Lead for the AI domain within the Cyber Resilience Capability Maturity Model (CR-CMM) - a community-driven framework guided by an international Advisory Board - I am actively shaping how global institutions govern, validate, and secure autonomous systems.

Active contributor to the Cloud Security Alliance (CSA) research initiatives focused on Artificial Intelligence. Participating in AI Controls Framework Working Group: • Contributing to the development and refinement of the AI Controls Matrix (AICM). • Collaborating with global experts to define security controls and governance for AI-integrated cloud systems.

Driving the global Security Assurance & Security Testing mandate for one of the world's largest wealth managers (~$5.7 Trillion in client assets). Providing independent assurance by integrating advanced testing methodologies & Threat-Led Penetration Testing with strategic risk oversight across complex banking ecosystems, critical infrastructure, and digital assets. Leading a paradigm shift from traditional assessments to AI-driven Continuous Assurance. Strategic Risk Oversight & Assurance: • Systemic Risk Validation: Transforming the function into a data-driven assurance engine. Engineered the Systemic Risk Database to identify root-cause patterns across the banking estate, translating technical findings into predictive analytics for Executive Boards and Risk Committees. • Scale & Resilience: Managing a hybrid team of 70+ experts, executing high-volume security assurance and testing engagements (500+ annually) across Web / Mobile Applications, Cloud and Critical Infrastructure to validate operational resilience. AI Governance & Innovation (Future-Proofing): • AI-Driven Transformation: Architecting a "Cognitive Assurance" ecosystem, based on custom AI agents to automate ~40% of the validation lifecycle (Threat Modeling, Testing, Triage), significantly reducing time-to-market for business lines. • GenAI & Digital Trust: Establishing the Global AI Assurance Framework (aligned with OWASP LLM & NIST), expanding oversight to cover novel risks like Prompt Injection and Agentic tool misuse. Operational Efficiency: • Financial Impact: Delivered multi-million annual savings by optimizing the vendor assurance model and restructuring global contracts, ensuring sustainable risk coverage.

Strategic leader within the Board of Directors for ISSA Polska, driving the growth of one of the largest and most influential chapters in Europe (>1,000 members). • Sector Unification ("One Voice"): Successfully consolidated the cybersecurity narrative across Poland’s critical sectors—uniting C-level representatives from Banking, Insurance, Telecommunications, Energy, and Public Administration to drive consistent security standards nationwide. • Global Alignment & Innovation: Championing the adoption of global best practices (NIST, ISO) and leading local initiatives aligned with the AI Alliance, ensuring Poland remains at the forefront of Responsible AI & Tech Governance. • Ecosystem Orchestration: Actively bridging the gap between technical experts and regulatory bodies, positioning ISSA as a key consultative partner for national legislative changes in cybersecurity.

Founder and Chairman of Poland’s premier cybersecurity conference, established to bridge the gap between Academic Research (Politechnika Wrocławska), Public Administration, and Global Business. • Strategic Dialogue Platform: Created a high-level forum for debating systemic risks, attracting top-tier speakers from government ministries and global financial institutions. • Knowledge Transfer: Facilitating the direct transfer of academic innovation into practical business resilience strategies. • Community Mobilization: Built a thriving ecosystem where leaders from competing industries collaborate to solve shared challenges regarding Digital Trust and Operational Resilience.

Member of an elite, invitation-only Think-Tank connecting Chief Information Security Officers (CISOs) from Poland’s most critical infrastructure providers. • Cross-Sector Intelligence: Leveraging a trusted network of executives from Heavy Industry, Critical Infrastructure, and Finance to exchange real-time threat intelligence and strategic insights. • Collective Resilience: Collaborating on systemic defense strategies that transcend individual corporate boundaries, fostering a "Security through Solidarity" approach to national cyber threats. • Executive Peer Review: engaging in high-level operational roundtables to stress-test strategies against peer benchmarks in a confidential environment.

Founder of TechRisk – pioneered the region's first major conference dedicated exclusively to Technology Risk Management, established in 2015. • First Mover Advantage: Identified a critical gap in the market early on, establishing the premier platform for professional risk discourse long before operational resilience became a global regulatory focus. • Building a Legacy: Successfully built and sustained a specialized community of experts for over a decade, setting the benchmark for risk methodologies and industry standards in the region. • Knowledge Hub: Created a unique ecosystem where risk professionals from Banking, Telco, and IT sectors exchange "war stories" and best practices, elevating the maturity of the local market.

Professional Member of the Open Worldwide Application Security Project (OWASP) Foundation, the premier global community dedicated to advancing software and application security. Engaged in the ongoing industry dialogue around secure-by-design architectures, DevSecOps maturity, and the governance of emerging technologies. Actively leveraging and promoting OWASP standards to drive strategic cyber resilience, with a strong focus on secure adoption frameworks for Generative AI and LLMs within enterprise environments.