Event Schedule

Times for this Event are in Eastern Time (EDT/EST)

The Conference will be open from 8AM to 6PM.

• DAY ONE
• Welcome / Introductions
• Beyond SolarWinds: Supply Chain & Third-Party Risk Management for 2021 12:10 pm

  Even before SolarWinds Orion Code Compromise, Supply Chain Attacks were up over 400% in 2020. As 2021 rolls on, this attack vector has received tremendous attention. Along with third-party risk in general, partner organizations and software systems with unfettered, privileged, deep access to infrastructure create “a perfect storm” threat for modern cyber executives.  

  In this session we will discuss these challenges in detail, as well as the multiple approaches to identify the best means of using supply chains while keeping the third-party risks at a minimum.

  Click to Expand

  Collapse This Item

• Disrupting Lateral Movement by Securing Active Directory 12:40 pm

  Presented by Attivo Networks

  Organizations continue to build their security stacks, yet advanced threats and insiders continue to breach networks and extract valuable data. A common tactic among most of these Ransomware and Advanced Threat Actors today involves leveraging Active Directory. AD contains all of the information that an attacker needs to successfully move laterally and accomplish their mission. 

  In this session, Tom Atkins will explore a new method for securing Active Directory that can (for the first time) actually prevent an attacker from progressing laterally through your enterprise network.

  Some key highlights include:

  • How Threat Actors use AD to accomplish their goals
  • Why Monitoring Active Directory is not enough
  • What simple tools you can deploy to dramatically improve your security posture by better securing AD

  Click to Expand

  Panel Participants:

  Tom Atkins

  Tom Atkins

  Regional VP at Attivo

  Collapse This Item

• Managing the Insider Threat 1:05 pm

  Presented by Auth0

  An adversary who attacks an organization from within can prove fatal to the business and is generally impervious to conventional defenses. Social science research has been used to explain why traditional methods fail against these trusted betrayers. Every company must identify and utilize new management techniques, increase security, and revise workplace strategies for categorizing and defeating insider threats.

  There are key players in positions to either effectively support or undermine the insider threats. Leadership style can make a difference in the way an institution recognizes and identifies these threats from rethinking background investigations to recognizing deception and using lawful disruption. Most importantly, organizations must circumvent these predators before they jeopardize the workplace and sabotage business operations.

  Click to Expand

  Collapse This Item

• Expert Panel Discussion: When Your DR Strategy Is a PR (Pandemic Recovery) Strategy 1:45 pm

  When Your DR Strategy Is a PR (Pandemic Recovery) Strategy

  Disaster Recovery is an area of security planning that aims to protect an organization from the effects of significant negative events. Having a disaster recovery strategy in place enables an organization to quickly resume it’s critical functions following a disruption. The goal of disaster recovery is for a business to continue operating as close to normal as possible. Covid-19 put organizations at risk and disaster recovery plans were essential to help sustain business operations. How did Covid-19 impact your business functions and do you believe your organization was prepared for such a pandemic?

  Click to Expand

  Collapse This Item

• Rise of Secure Access Service Edge (SASE) 2:20 pm

  Presented by Bitglass

  Secure access service edge has quickly emerged as a hot topic in cybersecurity, but what exactly does it mean and why should organizations care? As cloud migration, BYOD adoption, and remote work have skyrocketed in prevalence, it has become increasingly apparent that organizations need to think differently about security. While legacy tools like firewalls are no longer equipped to handle the modern IT ecosystem, SASE platforms like Bitglass are built for this exact moment.

  In this presentation, you will learn: 

  • The core components of a SASE platform like Bitglass.
  • The functionality you need to secure cloud, web, and remote access use cases.
  • Architectural considerations you should keep in mind when comparing SASE vendors

  Click to Expand

  Panel Participants:

  Jonathan Andresen

  Jonathan Andresen

  Senior Director at BitGlass

  Collapse This Item

• Securing the Modern API Ecosystem 2:45 pm

  Presented by Noname Security

  APIs are central to digital transformation. Public cloud adoption, modern application architectures, and cloud-native designs capitalize on APIs as a foundational building block. Meanwhile, Gartner predicts that APIs will become the most frequently targeted attack vector by 2022.Attendees of this presentation will learn modern API strategies for security and risk management, including how to perform:

  • API discovery and inventory management
  • continuous vulnerability identification and testing
  • runtime prevention and detection

  Importantly, we will focus on orchestration across business, technology, and security teams to empower API-centric business and technology strategies with a shared, complete picture of API risks from code to production.

  Click to Expand

  Panel Participants:

  Karl Mattson

  Karl Mattson

  CISO at Noname Security

  Collapse This Item

• Moving Beyond Password to Delight & Secure Users 3:30 pm

  Presented by Okta

  Passwords have been a constant throughout the internet era. As we’ve moved from desktops to smartphones, from on-premises infrastructure to cloud services, we’ve all relied on passwords to access and safeguard our data and resources across the applications we use on a daily basis.

  But in this new digital age where data breaches are rampant, passwords are no longer good enough. Not only are they insecure, they are expensive and offer a poor user experience. Fortunately, there’s a better way to protect your applications and stop account takeover incidents.

  In this session, we’ll discuss the benefits of passwordless authentication and explain how eliminating the password can help improve user experience, admin visibility and control, and scalability. We’ll also walk through key considerations and first steps as you embark on your passwordless journey.

  Click to Expand

  Panel Participants:

  Michael Patterson

  Michael Patterson

  Solutions Engineer at Okta

  Collapse This Item

• Subject Matter Expert Session - More Details To Come 3:55 pm

  Presented by Fluid Attacks

  Session Details Coming Soon

  Click to Expand

  Collapse This Item

• CISO RoundTable 4:20 pm

  Submit your bio for consideration to participate on our CISO RoundTable

  to [email protected] or fill out our Call for Speakers form here.

  Click to Expand

  Panel Participants:

  Kevin Morrison

  Kevin Morrison

  Managing Director & CISO at Alaska Airlines

  Kevin Gowen

  Kevin Gowen

  CISO at Synovus Bank

  Dean Mallis

  Dean Mallis

  CISO at MARTA (Metropolitan Atlanta Rapid Transit Authority)

  Collapse This Item

• Day One Closing & Happy Hour Kick-Off
• Happy Hour Reception
• DAY TWO
• Breakfast Briefing
• Welcome / Introductions
• Compliance & Automation in Cybersecurity 9:25 am

  Managing compliance needs as a continuous, organizational process (as opposed to a reactive response), amid the ever-increasing myriad of industry regulations and legislation has become a full time job for most CISOs. Automation – including artificial intelligence and machine learning will help, and are perhaps more critical than ever. As CRPA comes into play and brings the US closer to GDPR, there are also a number of touchpoints where the CDO and CISO interplay will be crucial over the coming months. 

  In this session, we will discuss the current issues with regard to compliance, monitoring, and reporting. Policy decisions and regulations that have kept CISOs busy of late, and what we can expect more of in 2021 will also be addressed.

  Click to Expand

  Collapse This Item

• Operational Technology (OT) & Industrial Control Systems (ICS): Cybersecurity Concerns 9:55 am

  Presented by TigerGraph

  Since the Stuxnet worm was first discovered back in 2010, attacks related to SCADA systems have been of concern. While manufacturing and utility organizations tend to talk about them more, there are wide implications across the cybersecurity landscape that touch on ICS and OT systems of all kinds. 

  In this session we will talk about why these types of attacks represent a primary concern, and what state-of-the-art looks like in terms of building protections.

  Click to Expand

  Collapse This Item

• Expert Panel Discussion: Will the Real Zero Trust Please Stand Up? 10:35 am

  Will the Real Zero Trust Please Stand Up?

  Beyond the potential, beyond the hype, zero trust is a strategy that organizations of all sectors and sizes are employing today. It is a complex concept that unifies many different facets of cybersecurity. Even the most seasoned cybersecurity professionals can be overwhelmed when attempting to take on Zero Trust architectures. As efforts now shift to the long-term strategic view of the ‘new normal’, organizations are questioning how they will ensure business resiliency in 2021 and act more quickly against new and evolving cyber threats.

  Our experts will discuss the various aspects of a zero trust approach including users, identity management, access, and network configuration concepts.

  Click to Expand

  Collapse This Item

• The Last Line of Defense: Data Protection 11:05 am

  Presented by Pure Storage

  With the growth of Ransomware and cybercrime, Data protection is experiencing a resurgence. Organizations are quickly having to modernize their data protection architecture and strategies to meet not only these demands but also the demand that digital transformation is placing upon them; current approaches are designed around a backup centric approach, whereas a new approach centered around restore and getting organizations back up and running as quickly as possible are critical. Join this session to learn about the latest innovations in the data protection space and how they can be implemented to provide a restore centric approach and provide a true last line of defense.

  Click to Expand

  Panel Participants:

  David Huskisson

  David Huskisson

  Rapid Restore Solutions Director at Pure Storage

  Collapse This Item

• What CISOs Get Wrong About Connected Device Product Security (And Why It Could Cost You) 11:30 am

  Presented by Finite State

  With billions of connected devices powering up every year, crowded markets have created unique challenges and opportunities for device manufacturers. In this environment, competitive differentiation is key. As attackers move away from application layer attacks, connected devices are now the ultimate low-hanging fruit to offer unauthorized access to critical IT and OT networks. 

  Breaches in product security will have unprecedented impacts on device manufacturers and owners. According to Gartner, cyber-physical attacks resulting in fatal casualties will cost over $50B by 2023. Even the White House is taking note, with a new Cybersecurity EO that will add new requirements for secure software. 

  In this presentation by Finite State, we’ll take a close look at how product security breaches occur, and how the financial impact of these breaches have tangible permanent effects on industry competitors. Learn proactive approaches to product security that are being adopted by some of the world’s largest device manufacturers, as well as how to ensure that your product security strategies generate value for your customers and shareholders.

  Click to Expand

  Panel Participants:

  Jeanette Sherman

  Jeanette Sherman

  Sr. Director Product Development at Finite State

  Collapse This Item

• Demo Sessions / Lunch Break
• Keynote 12:50 pm

   Session Details Coming Soon

  Click to Expand

  Collapse This Item

• Ransomware Decoded: Understanding & Preventing Modern Ransomware Attacks 1:40 pm

  Presented by Cybereason

  Learn how to become fearless in the face of modern ransomware attacks. Next-gen ransomware has evolved to better evade standard defenses and targeted attacks stand a high chance of success against underprepared environments, making a behavior-based approach to prevention, detection, and response required for success.

  Join our session to understand how to deploy fearless ransomware protection to detect the preliminary stages of a ransomware attack, fully analyze the scope and scale of the operation, and prevent the execution of the malicious ransomware payload to mitigate future cyber risk.

  WHY SHOULD I ATTEND?

  – Learn about the latest ransomware trends

  – Dissect discoveries from Cybereason’s Nocturnus team

  – Become empowered to defend against ransomware

  Click to Expand

  Panel Participants:

  Maggie MacAlpine

  Maggie MacAlpine

  Security Strategist at Cybereason

  Collapse This Item

• Subject Matter Expert Session - Attackers Go Mobile in the Face of a Global Pandemic 2:20 pm

  Presented by Lookout

  The pandemic has changed everything- the way we live, the way we work and the way we protect what’s important to us. The most impactful change to enterprises was the transition to hybrid work and how it shifted the threat landscape for mobile attacks. 

  Everyone relies on their mobile devices to connect to enterprise infrastructure, making both personal and corporate assets susceptible to sophisticated threat actors. In response to heightened security measures, threat actors are getting creative; perpetuating the cat-and-mouse game between attackers and their targets. 

  In this session, we’ll look at how the mobile threat landscape has shifted over the course of the transition toward widespread hybrid work, how some of the most successful attackers have manipulated unsuspecting users into compromising their devices and discuss solutions for mitigating these attacks.

  Click to Expand

  Panel Participants:

  Kristina Balaam

  Kristina Balaam

  Senior Security Intelligence Researcher at Lookout

  Collapse This Item

• Keynote: Waking up Boards and Executive Leadership 3:10 pm

  Waking up Boards and Executive Leadership Teams to the Reality of Cybersecurity.

  Organizations today can no longer engage in digital transactions or ecommerce serving their employees, customers, or partners without understanding the global cybersecurity landscape or the state of their internal security program. Cybersecurity risks are growing at an alarming rate across all industries, profit and nonprofit. Boards and Executive Leadership Teams can no longer act as if they are not a target of bad actors or that their organization is not important enough for bad actors to target them.

  Click to Expand

  Panel Participants:

  Derek Johnson

  Derek Johnson

  Infragard Board Member

  Collapse This Item

• Conference Final Closing Session