Andrea Craig 

Cybersecurity Principal, EY

Andrea Craig is a partner and principal in EY’s technology consulting practice. Craig specializes in cybersecurity and artificial intelligence (AI) governance, helping organizations navigate the operational and regulatory challenges of emerging technologies while unlocking their potential to accelerate innovation and deliver measurable business value. Craig works with teams to embed responsible AI practices into development workflows, reduce friction in innovation, and meet evolving customer and regulatory expectations. She advises on implementing scalable solutions that build trust in AI both internally through governance structures and externally through transparency mechanisms. At the upcoming NACD Northwest Chapter’s Navigating the Cybersecurity Landscape program, Craig will facilitate a panel discussion exploring how boards can proactively engage with the evolving cybersecurity landscape and the dual-use nature of generative AI—both as a tool for defense and a vector for risk.