Synopsis:

How Everyday Project Decisions Can Create Tomorrow’s Cyber Attack

Cyber risk is often treated as an IT problem. But some of the most significant cyber exposures begin inside projects that were never considered technology projects at all.

An office move. A new supplier. A construction initiative. A marketing platform. A merger. A new piece of operational equipment. A change to how customers, employees, contractors, or partners interact with the organization.

Each can introduce new vendors, data flows, identities, systems, dependencies, and points of exposure—often without anyone recognizing that the organization’s cyber risk has changed.

Through compelling real-world stories and practical examples, this session explores how ordinary project decisions can create extraordinary consequences months or even years later. Attendees will learn how project managers across every industry—not just IT—can recognize hidden cyber risk, ask better questions, and help build projects that are not only successful at launch, but resilient long after the project is complete.

Learning Outcomes:

• Learn why cyber risk can emerge from virtually any project—not just IT and technology initiatives.
• Discover how everyday decisions involving vendors, people, data, facilities, operations, and change can unintentionally increase organizational exposure.
• Discuss the common warning signs and blind spots that allow cyber risk to remain hidden during project delivery.
• Consider practical questions project managers can ask to identify risk without needing to become cybersecurity experts.
• Learn how to expand the definition of project success beyond scope, schedule, and budget to include long-term organizational resilience.
  
  

PDUs:

2.0 (Business Acumen)

Agenda:

6:30 PM - Doors Open, light refreshments and networking
7:15 PM - Presentation
8:15 PM - Q&A
8:25 PM - Closing Remarks
8:30 PM - Conclude

Registration Deadline:

Registration closes on Monday, October 5, 2026, at 5:00 p.m.

Pricing:

(Subject to HST)

Early Bird (Valid until September 22 at 11:59 PM):

PMI Toronto Members (login prior to registering): $40.00
Non-Members: $55.00

Regular Admission (September 23 onwards):

PMI Toronto Members (login prior to registering): $50.00
Non-Members: $65.00

Location:

The location is a short walk from St Patricks subway station and is easily accessible by public transit. The exact location will be provided upon registration!

Presenter:

Vince Fung

Vince Fung is the Founder and CEO of Expera Information Technology, a Canadian managed IT and cybersecurity firm he has led for nearly 30 years. With a background spanning business leadership, cybersecurity, emerging technology, and organizational transformation, Vince works with executives and boards to navigate complex risks at the intersection of technology, people, and strategy.
He holds a Bachelor of Science in Engineering and an MBA from Queen’s University and is a CISSP-certified cybersecurity leader. Vince brings a rare combination of technical depth, business acumen, and real-world executive experience to complex issues involving cyber resilience, AI adoption, governance, and emerging risk.

Vince is also the author of 101 Ways to Get Hacked and a frequent speaker on cybersecurity, AI, leadership, and the business impact of rapidly evolving technology. He has shared his insights with business and professional audiences at venues including the Harvard Club of Boston, New York City Bar Association, CPA Canada, Nasdaq, and numerous universities across Canada.

Known for making complex topics practical, provocative, and accessible, Vince challenges leaders to think differently about risk—and about the everyday decisions that can shape an organization’s future.