Christopher Lau is the Director of Cybersecurity and IoT Risk at Advocate Health. Before his current role in healthcare, Chris spent nearly 20 years in financial services, building risk programs and leading teams in business operations, information/data governance, and operational risk. He earned his MBA from Ottawa University and holds CRISC, CISM, and CDPSE certifications. Chris was a featured speaker at the SANS ICS Security Summit in 2023 and the RSAC Conference in 2025.