Description
Join CRI CEO & President Josh Magri and Ostrich Cyber-Risk Co-Founder & CRO Greg Spicer for a discussion on how the CRI Profile supports smarter business decision-making through Cyber Risk Quantification (CRQ). This session will also include a brief demonstration by the Ostrich team showing how they have integrated the CRI Profile into their offerings.
Meet Your Speakers
Josh Magri, Chief Executive Officer & President @ Cyber Risk Institute
Joshua Magri is the Founder and CEO of the Cyber Risk Institute. The Cyber Risk Institute’s mission is to advance cybersecurity by creating (and updating) a common framework for cyber security and resilience assessment: The Profile.
Previously, Josh served as Senior Vice President and Counsel for Regulation and Developing Technologies at Bank Policy Institute (BPI)/BITS, where he was the principal architect and co-lead of the FSSCC Cybersecurity Profile initiative. Additionally, in this role, he oversaw regulatory, advocacy, and policy efforts on issues related to cybersecurity, data security and privacy, financial technology (“FinTech”), and developing technologies.
Prior to joining BPI, Josh was the Associate Vice President at the Internet Security Alliance, a multi-sector cybersecurity trade association, where he co-authored the National Association of Corporate Directors’ (NACD) “Cyber-Risk Oversight Handbook.” He also helped develop cybersecurity policy that was largely incorporated into Presidential Executive Order 13636 – Improving Critical Infrastructure Cybersecurity.
Before moving to the Washington area, Josh was a prosecutor in the Bronx County District Attorney’s Office. Tenured in both the Appeals and Rackets Bureaus, he handled felony and misdemeanor investigations, prosecutions, and appeals.
Josh graduated Boston College with a B.A. in Economics and earned a J.D. from Boston College Law School. Following law school, he clerked for the Honorable Fernande Duffly at the Massachusetts Appeals Court.
Greg Spicer, Co-Founder & CRO @ Ostrich Cyber-Risk
Greg Spicer, Co-Founder & CRO of Ostrich Cyber-Risk, is a seasoned cybersecurity leader with a wealth of experience. He has played a pivotal role in helping organizations across finance, insurance, manufacturing, and healthcare sectors navigate their cybersecurity challenges. Greg's expertise lies in implementing robust cybersecurity risk programs, where he conducts in-depth analysis to identify significant cyber risks, assess their financial implications, and develop effective risk reduction strategies. His systematic approach also involves creating actionable reporting metrics, enabling cybersecurity teams to effectively communicate cyber risks to company executives and the board.
Greg is a thought leader in Cyber Risk Management and Cyber Risk Quantification (CRQ), speaking internationally for the FAIR Institute, The Open Group, ISSA, ISACA, ILTA, and other cybersecurity events nationwide. Prior to his role at Ostrich Cyber-Risk, Greg served as the Chief Revenue Officer (CRO) of Braintrace, a Salt Lake City-based MDR provider, until its successful acquisition by Sophos in July 2021.

