EVENTCISO Chicago Summit | October 30, 2019 | Convene - 16 West Adams Street - Chicago, IL, USA
agenda
Download Agenda (PDF)↓ Agenda Key
Keynote Presentation
Visionary speaker presents to entire audience on key issues, challenges and business opportunities
Keynote Presentations give attending delegates the opportunity to hear from leading voices in the industry. These presentations feature relevant topics and issues aligned with the speaker's experience and expertise, selected by the speaker in concert with the summit's Content Committee." title="Keynote Presentations give attending delegates the opportunity to hear from leading voices in the industry. These presentations feature relevant topics and issues aligned with the speaker's experience and expertise, selected by the speaker in concert with the summit's Content Committee.
Executive Visions
Panel moderated by Master of Ceremonies and headed by four executives discussing critical business topics
Executive Visions sessions are panel discussions that enable in-depth exchanges on critical business topics. Led by a moderator, these sessions encourage attending executives to address industry challenges and gain insight through interaction with expert panel members." title="Executive Visions sessions are panel discussions that enable in-depth exchanges on critical business topics. Led by a moderator, these sessions encourage attending executives to address industry challenges and gain insight through interaction with expert panel members.
Thought Leadership
Solution provider-led session giving high-level overview of opportunities
Led by an executive from the vendor community, Thought Leadership sessions provide comprehensive overviews of current business concerns, offering strategies and solutions for success. This is a unique opportunity to access the perspective of a leading member of the vendor community." title="Led by an executive from the vendor community, Thought Leadership sessions provide comprehensive overviews of current business concerns, offering strategies and solutions for success. This is a unique opportunity to access the perspective of a leading member of the vendor community.
Think Tank
End user-led session in boardroom style, focusing on best practices
Think Tanks are interactive sessions that place delegates in lively discussion and debate. Sessions admit only 15-20 participants at a time to ensure an intimate environment in which delegates can engage each other and have their voices heard." title="Think Tanks are interactive sessions that place delegates in lively discussion and debate. Sessions admit only 15-20 participants at a time to ensure an intimate environment in which delegates can engage each other and have their voices heard.
Roundtable
Interactive session led by a moderator, focused on industry issue
Led by an industry analyst, expert or a member of the vendor community, Roundtables are open-forum sessions with strategic guidance. Attending delegates gather to collaborate on common issues and challenges within a format that allows them to get things done." title="Led by an industry analyst, expert or a member of the vendor community, Roundtables are open-forum sessions with strategic guidance. Attending delegates gather to collaborate on common issues and challenges within a format that allows them to get things done.
Case Study
Overview of recent project successes and failures
Case Studies allow attending executives to hear compelling stories about implementations and projects, emphasizing best practices and lessons learned. Presentations are immediately followed by Q&A sessions." title="Case Studies allow attending executives to hear compelling stories about implementations and projects, emphasizing best practices and lessons learned. Presentations are immediately followed by Q&A sessions.
Focus Group
Discussion of business drivers within a particular industry area
Focus Groups allow executives to discuss business drivers within particular industry areas. These sessions allow attendees to isolate specific issues and work through them. Presentations last 15-20 minutes and are followed by Q&A sessions." title="Focus Groups allow executives to discuss business drivers within particular industry areas. These sessions allow attendees to isolate specific issues and work through them. Presentations last 15-20 minutes and are followed by Q&A sessions.
Analyst Q&A Session 
Moderator-led coverage of the latest industry research
Q&A sessions cover the latest industry research, allowing attendees to gain insight on topics of interest through questions directed to a leading industry analyst." title="Q&A sessions cover the latest industry research, allowing attendees to gain insight on topics of interest through questions directed to a leading industry analyst.
Vendor Showcase
Several brief, pointed overviews of the newest solutions and services
Taking the form of three 10-minute elevator pitches by attending vendors, these sessions provide a concise and pointed overview of the latest solutions and services aligned with attendee needs and preferences." title="Taking the form of three 10-minute elevator pitches by attending vendors, these sessions provide a concise and pointed overview of the latest solutions and services aligned with attendee needs and preferences.
Executive Exchange
Pre-determined, one-on-one interaction revolving around solutions of interest
Executive Exchanges offer one-on-one interaction between executives and vendors. This is an opportunity for both parties to make key business contacts, ask direct questions and get the answers they need. Session content is prearranged and based on mutual interest." title="Executive Exchanges offer one-on-one interaction between executives and vendors. This is an opportunity for both parties to make key business contacts, ask direct questions and get the answers they need. Session content is prearranged and based on mutual interest.
Open Forum Luncheon
Informal discussions on pre-determined topics
Led by a moderator, Open Forum Luncheons offer attendees informal, yet focused discussions on current industry topics and trends over lunch." title="Led by a moderator, Open Forum Luncheons offer attendees informal, yet focused discussions on current industry topics and trends over lunch.
Networking Session
Unique activities at once relaxing, enjoyable and productive
Networking opportunities take various unique forms, merging enjoyable and relaxing activities with an environment conducive to in-depth conversation. These gatherings allow attendees to wind down between sessions and one-on-one meetings, while still furthering discussions and being productive." title="Networking opportunities take various unique forms, merging enjoyable and relaxing activities with an environment conducive to in-depth conversation. These gatherings allow attendees to wind down between sessions and one-on-one meetings, while still furthering discussions and being productive.
Wednesday, October 30, 2019 - CISO Chicago Summit
8:00 am - 8:45 am
Registration & Networking Breakfast
8:45 am - 8:55 am
Welcome Address & Opening Remarks 
Presented by:
Steve Weber, Former Senior Director, Global Information Security, OptumRX
8:55 am - 9:25 am
Keynote Presentation
All Eyes on You
Security breaches are the most intimidating threats for CISOs and security executives. Because of that, upper level management, shareholders and even consumers are focusing now more than ever on the security department. With that, CISOs need to see this as an opportunity to work closely with business stakeholders to incorporate cybersecurity strategy with their organization's business initiatives. This is an ideal opportunity to address skill shortages and increase professional development of the internal security workforce.
Takeaways:
- How the CISO's role has changed
- The latest security threats and how they can positively impact your team
- How to measures your teams shortcomings and areas for improvement
9:30 am - 10:00 am
Keynote Presentation
Case Studies in Digital Transformation: Learnings Along the Journey
We will explore key learnings from various industries and verticals on the good, the bad and the ugly of digital transformation. We will have an opportunity to not only be exposed to successful use cases, but also ask the hard questions behind those successes.
Takeaways:
- One of the best ways to learn is to hear the stories of success (and failure) from companies similar to yours
- Asking questions of HOW the journey unfolded are just as important as the end result
10:05 am - 10:30 am
Executive Exchange
Think Tank
Regulations Mean Change
More complex regulations, such as the General Data Protection Regulation (GDPR), have came into play due to the rise of data breaches forces. As data today is viewed as a such an asset, it is also a tremendous liability. Understanding that, organizations has to consider both while they implement technologies that will both innovative their business, but also be cost effective.
Takeaways:
- Understand the latest regulations, such as GDPR
- How to tell business stakeholders that data protection can be a key differentiator for your organization
- The steps needed to take to be regulatory compliant
10:30 am - 10:40 am
Morning Networking Coffee Break
10:45 am - 11:10 am
Executive Exchange
Thought Leadership
From the Front Lines: 5 Best Practices for Application Defense in Depth
Everyone knows applications are the lifeblood of the enterprise, but as the threats multiply and come at an ever-faster rate, protecting those applications becomes a massive challenge. Layer in the issues associated with moving applications to the cloud, using open source code, implementing rapid release cycles, and being forced to use legacy apps when the development team is long gone, and it's easy to see that application security can be a thankless, endless job.
Layered security, or defense-in-depth, is an admirable goal. The problem is, how do you achieve it? We've been on the front lines for years, finding what works and what doesn't. In the process we have distilled five best practices that will help enterprises of any size tackle the thorny problem of application security in a dynamic world where change is the only constant.
A combination of defenses at the edge, in the network and inside the applications themselves forms the core of the best practices. Layered on top are two additional practices that make all the difference: full real-time visibility with analytics, to help beleaguered security analysts quickly distinguish real threats from noise and take action based on full context; and a consumption model that allow the enterprise to quickly, easily and cost-effectively move protections to where they will do the most good. The result? Vastly improved application security, effective remediation, and a DevSecOps model that works.
Sponsored by:
MobileIron 
11:15 am - 11:40 am
Executive Exchange
Think Tank
The Solution for Your Legacy System's Security: The Cloud
Over the lifespan of an organization, CIOs/CISOs have developed and implemented technologies that have been key to the organization's success. However, CISOs and their security teams today find themselves stuck ensuring that legacy systems are secure. The solution is cloud-delivered security products that are more agile with the ability to implement new detection methods and services faster than on-site solutions.
While cloud security is an ideal solution, it is important to know that using the cloud is more than moving legacy management servers to the cloud.
Takeaways:
- Review the status of legacy system security
- What cloud solutions are the best fit for their business
- What are the main needs in regards to system's scale, data telemetry, staff growth, machine learning, API-based access, and more
11:45 am - 12:10 pm
Executive Exchange
Thought Leadership
Machines Are Friends Not Foes: Cognitive Computing Accelerates the Journey
Popular movies, books and television shows typically position advanced technology as a threat to humanity and all we hold dear. Yet cognitive computing technologies such as Artificial Intelligence (AI), Machine Learning (ML), Natural Language Processing and Augmented Reality (AR) are helping CIOs and CISOs make better decisions faster. We will discuss how cognitive computing can help us navigate the acceleration of activity and decisions that we are experiencing on our digital transformation journeys.
Takeaways:
- New cognitive computing technologies can be unnerving and difficult to trust
- Used properly, cognitive computing technologies such as AI, ML and AR can provide data to humans in such a way to enable us to better prioritize the decisions we must make and make those decisions more effectively
Sponsored by:
12:15 pm - 12:40 pm
Executive Exchange
Executive Boardroom 
Navigating Security & Risk in a Changing IT Landscape
Agile, DevOps, containers, microservices and the cloud are all seeing increased adoption across the enterprise. But, while there are valid business reasons to embrace these new models, there is potential risk in implementation. Is this change necessary? If so, how can this change be accommodated effectively, safely? This session will cover some common elements of the risk of change - and of not changing - and suggest approaches to minimize risk as you adopt these new technologies.
Takeaways:
- The IT Landscape will continue to change leading to new processes, new technologies and new "standard" ways of doing IT business
- This changing Landscape will present security challenges where you will need to balance the "pain of same" vs the "pain of change"
Sponsored by:
Vectra AI, Inc
Executive Boardroom
Driving Digital Transformation: Proactive Path vs. Reactive Response
Shakespeare wrote that we should be afraid of greatness as "some are born great, some achieve greatness and some have greatness thrust upon them". This is true today as well for CIOs and CISOs. Digital transformation will happen, the only question being will the CIO drive it or will it be thrust upon them. We will discuss how to be a proactive voice in driving your company's digital transformation journey instead of waiting and responding to the voice of others.
Takeaways:
- Digital transformation is happening with or without our actions
- The most successful CISOs will drive this transformation from a proactive point of view instead of reacting to internal and external voices
12:40 pm - 1:50 pm
Working Lunch & Panel
The Revitalizing Change in the Role of the CISO
A CISO's role, goals and objectives have drastically changed over the years as most CISOs supervise teams and units beyond their IT's security. Because of these changes in responsibilities, a CISO's success is measured in greater business metrics. As a result, the role of a CISO has become both more attractive and more demanding.
Takeaways:
- What are the significant changes regarding the role of the CISO
- How to keep up with the changing requirements
- How to properly measure a CISO's success
Moderated by:
Steve Weber, Former Senior Director, Global Information Security, OptumRX
1:55 pm - 2:20 pm
Executive Exchange
Thought Leadership
Can Technology Alone Prevent Phishing Attacks & Breaches?
In a world where we are talking about trusting self-driving cars, will we totally trust self "threat assessing and action taking" cybersecurity systems? Is technology enough? What is the human role in both preventing and responding to attacks?
Takeaways:
- Employees continue to be one of the leading, if not the leading, entry point for security breaches
- Training about cyber-attack approaches such as Phishing is important but using technology can help employees more consistently identify outside forces attempting to harm your company
Sponsored by:
Imperva
2:25 pm - 2:50 pm
Executive Exchange
Think Tank
Machine Learning Is Here to Help, Not Replace
Over the next few years, machine learning (ML) will be a regular security practice and will offset skills and staffing shortfalls. Today though, ML is better at addressing smaller, more specific problems. Technology leaders have to understand that humans and machines complement each other and work better together than alone, as ML can assist humans in addressing uncertainty by presenting relevant information.
Takeaways:
- Discuss the ways machine learning can assist teams and organizations
- How to make the right machine learning choices for your organization
- The future of machine learning
2:55 pm - 3:20 pm
Executive Exchange
Executive Boardroom
The Importance of Engaging CISOs in Digital Transformation
The digital transformation challenge is significant for all, but CIOs need to understand the importance of engaging their CISO as well. Capturing IoT data from capital assets is a challenge on its own; however, many also struggle with the workforce's preference for entrenched processes as well as the executive team's expertise for managing physical assets, which is contrasted by their discomfort with digital transformation.
Sponsored by:
Perception Point
3:20 pm - 3:30 pm
Afternoon Networking Coffee Break
3:35 pm - 4:00 pm
Executive Exchange
Think Tank
The Geopolitical Landscape's Effects on Organizations
The recent U.S. government bans against Russian-based security products and Chinese smartphones are the latest results of suspicion and distrust of competing world powers. Organizations working with government entities must be aware of the geopolitical stipulations regarding their business relationships. Even with the geopolitical landscape, the buying decisions of security products are still based on trust in the supplier. It is important for CISOs and security leaders to incorporate geopolitical risk in all business-critical software, hardware and services purchasing decisions - even if that means considering local alternatives.
Takeaways:
- Review the geopolitical landscape and how it has effected industries and organizations
- What to be aware of with your buying decisions
- What to anticipate and prepare for in the coming years
4:05 pm - 4:30 pm
Executive Exchange
Think Tank
Becoming More Decentralized
Today, increased centralization has put the power and trust into the hands of the few big players. This, of course, raises many security concerns. The risk of disruptions and undesirable outcomes increases as centralization opens the door to exclusive possession or control of commodities and services. As a result, technologies like Blockchain implemented to create decentralized alternatives as they move computing resources away from centralized servers.
Takeaways:
- Evaluating the risks of centralization on availability, confidentiality and resiliency
- Exploring decentralized technologies like Blockchain and edge computing that offer visibility as well as enhanced security for your organization
- Understand the fact or fictionalization of developing AI strategies and the cause for concern for decentralized AI models
4:35 pm - 5:00 pm
Executive Exchange
Innovation Partner Showcase
A brief, but compelling review of three new innovative technologies supporting digital transformation.
Sponsored by:
Expel
5:00 pm - 5:15 pm
What's the Next Stop On the Transformation Journey?
Our Governing Board will summarize the learnings from the day and discuss the path forward for building an ongoing community of CISOs where common issues can be addressed and success stories can be shared.
Takeaways:
- Building an ongoing community with your peers can be an invaluable resource for tackling the digital transformation projects ahead of you
- Sharing stories of success (and failures) is not reserved to a one-day CISO Summit, but should be shared on a regular basis with your peers
Presented by:
Steve Weber, Former Senior Director, Global Information Security, OptumRX
5:15 pm - 6:30 pm