John Goodman is Senior Vice President at the Cyber Risk Institute (CRI), where he leads the development of the CRI Profile, a cybersecurity control standard based on the NIST Cybersecurity Framework. Prior to CRI, John was Vice President of IT Management and Controls and Deputy CIO at PenFed Credit Union, overseeing technology governance, risk management, and cybersecurity compliance. He has held leadership roles in IT and security at webMethods and Qwest Communications, with expertise in technology architecture, application development, and strategy. He holds a Bachelor of Science in Computer Science and Psychology from the University of Maryland and lives in Fairfax, Virginia. 

David White is President and Co-founder at Axio — a company with an innovative methodology and software that provides companies with actionable visibility to their cyber risk. David leads key cybersecurity initiatives for Axio in the energy, water, healthcare, federal, and other critical infrastructure sectors. He co-developed Axio’s cyber risk management process and continues to refine its assessment, risk modeling, and insurance analysis components. He is an expert in cybersecurity frameworks and maturity models, cyber risk quantification, and cyber insurance. David is also faculty for Navigator, an executive education program for cyber leaders in collaboration with ISTARI and the University of Cambridge Judge Business School.