Megan McMicking

About Megan McMicking

Megan is a Senior Associate in KPMG’s Trusted AI practice out of the New York office. Her focus has centered on navigating the complexities of securing emerging technologies, including AI, IoT, Cloud, Operational Technology, and Medical Devices, against new security threats. Engaging with a diverse set of clients spanning financial services, hospitals, oil and gas, telecom, life sciences and government agencies, she has taken the lead in helping her clients navigate the complex risks that emerging technology brings to organizations, and helping them establish and mature their security and AI governance programs. Megan\'s work has been focused on establishing Responsible AI governance programs tailored to the unique needs of each client. Collaborating directly with C-Suite executives, Legal, Privacy, Data Scientists, and internal stakeholders to pinpoint gaps in their programs to address industry-based emerging threat vectors and regulations. This includes crafting AI policies, developing AI risk and control frameworks, and implementing robust AI risk governance programs, along with supporting materials to ensure effective program execution.

Experience

1. Senior Associate- Trusted Ai

   KPMG US

   Oct 2022 — Present · New York, NY, US

   Led multiple projects to establish AI security governance programs, key contributions include- Established core principles and tenets for Responsible AI governance - Developed customized AI risk and control matrixes based off of NIST AI RMF, EU AI Act, NIST 800-53, MITRE ATT & K, and MITRE ATLAS, aligned to responsible AI core principles-Established metrics to track compliance with controls within the AI risk and control matrix- Drafted policies to support AI security governance program, inclusive of: AI policy, Acceptable Use Policy, and sourcing and sales template to respond to customer requests around AI posture - Created an AI risk assessment process with supplemental risk management artifacts: AI intake form, AI risk questionnaire, data provenance template, and third-party questionnaire - Led training sessions on how to conduct risk assessments for AI models - Conducted an analysis of internally developed models to identify and address control gaps- Managed multiple cyber maturity assessments (CMAs) across product, medical device, operational technology (OT), and IT security programs to identify gaps within their security protocols and provide strategic roadmaps to achieve their target maturity- Created an OT targeted Ransomware Awareness training program specifically tailored to nuances of OT site team members. Led the ideation and creation of the branding, communications, and key themes for ransomware campaign materials specific to the client’s OT Facilities. Produced OT Cyber Security training videos, digital and print media guides, and customized posters designed for OT employees. As a result of these efforts, there was an increase in OT cyber security awareness by +25%.

Education

• University of Southern California

  Bachelor of Science (B.S.) , Industrial Systems Engineering. Minor in Applied Computer Security