In this keynote, we explore the vital role of individuals in safeguarding our digital landscape. As cyber threats continue to evolve, technology alone cannot provide fool proof protection. It is the human firewall that becomes paramount.

During this session we will hear from Chris Lockery, CISO, Help at Home and learn how organizations can foster a cybersecurity culture that empowers employees to become the first line of defense. Uncover strategies to cultivate awareness, develop best practices, and build resilience in the face of ever-evolving threats.

Organizations are rapidly realizing the benefits of a diverse workforce. Despite their best efforts to attract a range of talent, many CISOs and other IT security leaders are concerned that they are failing to meet even their basic staffing goals. Why? In this panel session, we will explore best practices that will attract and retain the right candidates.

As technology continues to advance at an unprecedented pace, cyber security leaders are faced with the daunting task of safeguarding their organizations' digital assets and infrastructure. In 2023, although it is only Summer, the impact of emerging technologies including artificial intelligence/machine learning, 5G, IoT, and quantum are significantly impacting everything connected to the internet.

The introduction of these potentially disruptive technologies has huge implications on cybersecurity. By examining the challenges and opportunities presented by these technologies, participants will gain insights into developing effective strategies to ensure robust security measures in this rapidly evolving digital age.

Join this roundtable to discuss the following points:
• How can AI and ML enhance cybersecurity practices, such as threat detection, anomaly detection, and incident response?
• What are the potential risks associated with AI and ML in cybersecurity, including adversarial attacks and biased algorithms?
• How can organizations strike a balance between leveraging AI and ML for enhanced security while addressing privacy concerns?
• How can organizations leverage the synergies between emerging technologies to strengthen their overall cybersecurity posture?
• What are the challenges in integrating AI, ML, 5G, IoT, and quantum technologies within existing cybersecurity frameworks?
• What are the ethical considerations surrounding the use of emerging technologies in cybersecurity, and how can organizations address them?

The concept of digital transformation has been with us for a decade now, and it has become the driving force behind the IT efforts of most enterprises and always involves multicloud deployments. In fact, 71% of respondents to a recent IBM survey agreed that it is “difficult to realize the full potential of a digital transformation” without a multicloud strategy. At the same time, 41% of the executives do not think their security initiatives have kept up with digital transformation.

One of the primary roadblocks to implementing a strong cloud security posture is the fact that each major public cloud platform uses a different approach and tools for protecting its infrastructure. For example, AWS, Azure and GCP do not handle basic security functions such as identity and access management (IAM), privileged access management and VPNs in the same way. There are nuances that must be considered for security measures to work properly. The professionals who understand these nuances are not easy to find. Is this where the talent crunch meets the budget crunch? There are few organizations that are not suffering from a lack of skilled security personnel, and the competition for talent is intense. Whilst corporations tighten their purse strings and talent is scarce how can cloud providers better collaborate with their customers during this challenging landscape?

Join this roundtable to discuss the following points:
• How would you describe the current state of the skills shortage in cloud security? What are the specific challenges organizations face in finding and retaining skilled professionals?
• What are the key skills and expertise required to effectively manage cloud security? Are there any emerging areas or specialized roles that are becoming increasingly critical?
• What role can automation, artificial intelligence, and machine learning play in mitigating the skills shortage? How can these technologies enhance the capabilities of security teams and streamline cloud security operations?
• Looking to the future, what trends and technologies should organizations consider when developing their cloud security strategies? How can they prepare for the evolving threat landscape and the changing skill requirements?
• In the context of the skills shortage, how can organizations effectively balance outsourcing or partnering with third-party providers while maintaining control and ensuring the security of their cloud environments?
• Are there any regulatory or compliance considerations that must be considered when addressing the skills shortage in cloud security? How can organizations meet these requirements effectively?
• During a skills shortage shared responsibility has never been more prevalent, so how can cloud providers support businesses to navigate the complexities of cloud security, foster a proactive and cooperative approach to mitigate risks effectively?

While governance, risk, and compliance were once seen as the organization's police - reacting to violations, misconduct, or other wrongdoing- that is no longer the case. Without a robust GRC framework that includes ESG, resiliency and strong cyber and compliance programs, there is a serious risk to a company’s reputation and its ability to attract and retain the best talent and customers. A well-planned GRC strategy comes with lots of benefits: improved decision-making, more optimal IT investments, elimination of silos, and reduced fragmentation among divisions and departments, to name a few.

The stakes have been raised and there are no more excuses. The uncertainties and challenges faced by organizations will only escalate with ongoing technological advancements, a volatile economic and geopolitical landscape, mounting regulations, evolving environmental and social factors, and more.

Join this roundtable to discuss the following questions:
• How can organizations establish a comprehensive GRC framework that incorporates cyber resilience as a critical component?
• What are the key elements of an effective cyber resilience strategy, and how can they be integrated into existing governance, risk, and compliance practices?
• Considering evolving environmental and social factors, how can cyber resilience efforts be aligned with environmental sustainability and corporate social responsibility goals?
• What are the potential consequences for organizations that fail to prioritize cyber resilience within their GRC practices, particularly in terms of reputation, talent acquisition, and customer trust?
• How can cyber resilience initiatives be effectively communicated to stakeholders, including the board of directors, senior management, employees, and customers?
• What role should the C-suite play in driving cyber resilience and strengthening governance, risk, and compliance practices within an organization?
• With ongoing technological advancements, how can organizations ensure that their cyber resilience strategies remain adaptable and responsive to emerging cyber threats?
• What are the challenges and opportunities associated with incorporating cyber resilience into the governance, risk, and compliance practices of multinational organizations with diverse regulatory environments?
• How can organizations effectively collaborate with external stakeholders, such as government agencies, industry associations, and cybersecurity vendors, to enhance cyber resilience and address common challenges?
• What metrics and key performance indicators (KPIs) should organizations use to measure the effectiveness of their cyber resilience efforts and the overall strength of their GRC practices?

Gain a deeper understanding of the key traits and competencies that define exceptional security professionals and how to foster their growth within your organization.

From mentoring programs to training initiatives, explore practical approaches that can unlock the potential of security professionals and equip them with the knowledge and skills they need to navigate the ever-evolving cybersecurity landscape. Jay Wiley, Deputy CISO from M&T Bank will share success stories that highlight the transformative impact of investing in talent development.

This session is tailored to provide you with valuable tips and techniques that will empower you to strengthen your organization's overall security posture through a best in class third party risk management program.

In this highly anticipated keynote session, the esteemed Vanessa Jankowski, SVP & General Manager, TPRM at Bitsight, will unveil the strategies, tips, and techniques necessary to build or enhance A third-party cyber risk management program that allows you to keep up with a cyber landscape that is more challenging than ever, and an economic environment that is asking cybersecurity and risk leaders to do more with less.

Keynote Highlights:
• Capitalize on intelligence, automation, and community to do more with less: Apply best practices and capabilities designed to help you scale across your entire third-party portfolio while rationalizing vendor sprawl and limited budget.
• Harness the power of intelligence to scale your third-party risk management efforts: Learn how objective evidence and analytics can give you a roadmap to effective discovery and prioritization of third-party cyber risk. Stay ahead of emerging threats with real-time insights.
• Leverage the network effect for measurable risk reduction: Identify strategies to engage with third-party vendors that foster collaboration and lead to measurable risk reduction. Establish a framework for effective cybersecurity partnerships.
• Automate to scale: Identify opportunities to automate key playbooks and workflows in third party risk management to keep up with the demands of the business, the economic environment, and the cyber risk landscape.

In an era of rapid business transformation, companies across industries are bracing themselves for a wave of new and evolving privacy regulations that will redefine the landscape of data management and customer interactions. Join us to hear Davin Darnt, CISO, Louis Vuitton North America for an insightful session that explores the profound implications of these impending regulations and sheds light on the steps organizations must take to adapt, comply, and remain competitive.

Reliable and resilient digital transformation can only be achieved when it has a foundation of cybersecurity beneath it. CIOs and CTOs often transform business solutions to enable the business using tools such as artificial intelligence (AI) and Internet of Things (IoT). But with these tools comes new or increased cybersecurity and technology risks.

By sidestepping cybersecurity in a rush to digitalize, organizations, employees and their customers are left exposed. Digital transformation without cybersecurity is a recipe for disaster so how can security leaders go about deciding the most effective path forward?

Facts, Figures, and Considerations........

With the recent SEC proposal enforcing the inclusion of cybersecurity expertise on boards, a surge in demand for CISOs joining public company boards has emerged. This trend is expected to extend to private companies and non-profit organizations.

Andrew Wilder, Adjunct Professor of Cybersecurity at Washington University will delve into the implications of this proposal and explore the growing demand for CISOs in boardroom positions. Also examining the benefits that cybersecurity expertise brings to boards, including informed decision-making, robust risk management, and effective incident response capabilities. Not a session to be missed!