The Business Analyst’s Role in Managing Cyber Risk
Oct. 15, 2026 7:00 p.m. - 8:00 p.m.
Event with IIBA Toronto
Join Yomi Abiru
Date: Thursday, Oct 15, 2025
Time: 7:00 PM-8:00 PM Eastern Time (ET)
Location: Online
Time: 7:00 PM-8:00 PM Eastern Time (ET)
Location: Online
Attend Free! - registration required
Zoom Link
https://us06web.zoom.us/j/84440329562?pwd=tpqE0hewirAXREGEl5UnkyCV440zNz.1&jst=2
ID: 844 4032 9562
Passcode: 8fkFf7
ID: 844 4032 9562
Passcode: 8fkFf7
Event Description
As organizations accelerate digital transformation, cloud adoption, AI use, and third-party integrations, cybersecurity decisions are increasingly being made well before a security team becomes involved.
Business Analysts are often at the centre of these decisions. They help define requirements, understand business processes, map data flows, evaluate solutions, and connect business stakeholders with technology teams. Yet cybersecurity and privacy requirements can sometimes be introduced only after major design decisions have already been made.
Secure by Design: The Business Analyst’s Role in Managing Cyber Risk explores how BAs can help shift security earlier in the delivery lifecycle. The session examines where cyber risks commonly emerge during requirements gathering and solution design, how to identify security-relevant requirements, and the questions BAs should ask around sensitive data, identity and access, third parties, integrations, cloud services, and AI.
Rather than turning Business Analysts into cybersecurity specialists, the goal is to equip them with a practical security mindset that helps them recognize risk, engage the right stakeholders earlier, and contribute to more secure business outcomes.
Key Learnings
- Recognize where cybersecurity and privacy risks can emerge during requirements gathering and solution design.
- Identify common security considerations involving data, identity and access, integrations, third parties, cloud services, and AI.
- Incorporate appropriate cybersecurity considerations into business and non-functional requirements.
- Ask practical security questions during stakeholder discussions and vendor or solution evaluations.
- Understand when and how to engage cybersecurity specialists during the delivery lifecycle.
- Apply a security-by-design mindset without needing deep technical security expertise.
Key Takeaway
Business Analysts do not need to become cybersecurity experts. They need to know where cyber risk can emerge, which questions to ask, and when to bring security into the conversation.
Speaker Bio: Yomi Abiru, CISSP, CISM, CISA
Yomi Abiru, CISSP, CISM, CISA, is a cybersecurity professional with over 12 years of experience across regulatory, government, and consulting environments. His work spans the full breadth of cybersecurity, with a particular focus on secure-by-design practices, data protection, AI security and governance, and building strong cybersecurity culture.
Yomi is particularly passionate about cybersecurity in highly regulated industries, where the complexity of business operations, technology, and regulatory obligations makes a strong cybersecurity culture critical to managing risk and building organizational resilience. This session reflects that focus — helping Business Analysts become confident partners in identifying and managing cyber risk long before it reaches a security review.
He is a Gold member of ISACA and a member of ISC2, and regularly contributes to cybersecurity and professional communities through speaking engagements and knowledge-sharing sessions.