agenda

Executive Boardroom

Risky Business: The Hidden Threat in Your Organization

Cyber security threats continue to proliferate. When combating these growing risks, most organizations place more trust in technology-based solutions than on training their employees to be more aware of the threat landscape and able to recognize cyber breach attempts.

Join Erich Kron as he explains the emerging threats, the strengths and weaknesses that users bring to an organization's security culture, and strategies to fortify your last line of defense, your users.

In this session you will learn:

• Current and emerging attack landscape
• Right and wrong approaches to changing employee behavior
• How to build a successful Security Awareness Training Program

Sponsored by:

KnowBe4, Inc

 

 

Executive Boardroom

Finding the Right Security Partner: The Difference Between MSSP and MDR

In today's world of increasing cyber threats, selecting the best security partner for your organization can be challenging. With innovative services such as Managed Detection and Response changing the way organizations respond to threats, it's important to understand the difference between traditional MSSPs and MDR providers. This presentation will focus on the realities of using MSSP technologies versus MDR and provide selection recommendation guidelines for CISOs.

Takeaways:

1. Vendors can respond to incidents proactively or reactively
2. Not all MDR vendors are the same
3. Use a proof of concept to authenticate vendor claims
4. Validate the vendors regulatory experience

Sponsored by:

eSentire

 

 

Share:

Executive Boardroom

Knowing Your Network: Tracking Your Assets in the Age of Machine-Speed Attacks

In this talk, we'll discuss how attackers have begun conducting internet-scale attacks at machine speed by leveraging new scanning technologies. Qadium will present examples of how new classes of perimeter exposures are creating new risks and data on global internet trends.

Sponsored by:

Qadium

 

 

Executive Boardroom

Making Zero Trust A Reality

Implementing a zero trust security strategy involves two bodies of work. One is preparing your applications and data for access on the public internet as well as segmenting your internal network to stop traverse attack and is often described as the companies digital transformation. The second is enabling and controlling access to those resources based on a level of trust, starting at zero, ascribed to the endpoints attempting to access them. Many organizations have made significant progress on their digital transformation, but continue to use legacy approaches to endpoint management that undermine the zero trust model. This session will examine modern approaches to establishing and continuously monitoring endpoint trust.

Sponsored by:

Lookout

 

 

Share:

Executive Boardroom

Preventing Unknown Cyberattacks Is Easier Than They Tell You

Unknown zero-day attacks have the advantage, but they have an Achilles heel. To work, they have to both evade defenses and execute in memory. Moving Target Defense nullifies their advantage by making it impossible for them to find a target to attack. This prevents them instantaneously and effortlessly.  

Morphisec is not a faster way to detect attacks or replace AV, but a way of preventing unknown attacks without waiting for them to be identified and before they get started. As a virtual patch, Morphisec eliminates the dwell time of attacks. As a 2MB deterministic prevention tool, it is "set and forget", with no impact on end users and no alerts.

Takeaways:

1. Unknown, evasive, zero-day attacks are one of cybersecurity's greatest dangers.
2. Paradoxically, they are super easy to prevent with Moving Target Defense.
3. Moving Target Defense is a potent virtual patch that reduces risk and is "set and forget".

Sponsored by:

Morphisec Inc.

 

 

Executive Boardroom

Navigating Security and Risk In a Changing IT Landscape 

Agile, DevOps, containers, microservices, the cloud are all seeing increased adoption across the enterprise. But, while there are valid business reasons to embrace these new models, there is potential risk in implementation. Is this change necessary? If so, how can this change be accommodated effectively, safely? This session will cover some common elements of the risk of change - and of not changing - and suggest approaches to minimize risk as you adopt these new technologies. 

Takeaways: 

1. The IT Landscape will continue to change leading to new processes, new technologies and new "standard" ways of doing IT business 
2. This changing Landscape will present security challenges where you will need to balance the "pain of same" vs the "pain of change"