Some organizations have a 24x7 security operations center (SOC) with teams of dedicated analysts monitoring for threats around the clock, while some organizations are deep in the trenches of building out their security program. Whether you have a formal SOC, are in the weeds of building or optimizing your security program, the desired outcome to detect and respond to threats fast remains. 

The session will discuss:

• Best practices for an effective security program 
• 7 steps to building a successful security program with limited resources  
• How a NextGen SIEM solution is the ideal technology for building a SOC    

New strains of ransomware are leaving organizations vulnerable, and security teams often cannot respond proportionately to an attack, leading to cyber disruption across the organization.
Join Tony Jarvis, Darktrace’s Director of Enterprise Security (APJ), as he unpacks some of today’s most advanced ransomware threats. Learn how Self-Learning AI understands the organization to reveal every stage of a ransomware attack – and takes targeted, autonomous action to stop the threat in its tracks.

This presentation will discuss:

• Recent ransomware threat trends, including double extortion and RDP attacks
• How "Autonomous Response" takes action to contain an emerging attack, even when security teams are out of office
• Real-world examples of ransomware detected– including a zero-day witnessed recently

Security leaders say that an effective cyber crisis management is primarily a proactive approach to building enterprise resiliency. The strategy to make the resiliency align with the security, data protection, and tools with business priorities and enterprise risks. Do you agree that security teams need to build better resonance with regulations, frameworks, standards, controls, and threats for effective cyber crisis management? How do you build an empathy, alignment, trust, and collaborative environment and integrate with people, process, and technology to prepare for the crisis?  

The session will discuss:  

• How to build an advanced cyber defense against anticipatory attacks
• What kind of tools and technologies can be used in preparing for your defenses
• How do CISOs orchestrate the cyber crisis management plan 

Almost all CISOs across regions have a single most significant challenge of getting the necessary funding to support their cybersecurity programs. Are security leaders creating value for business and part of technology innovation? Is the CTO function aligned with security in driving innovation? Meeting the Expectations. Where is the Disconnect? 

The session discusses how to get a CTO and the CISO on a common goal to facilitate the continued success of their organization. Where is the disconnect?

As CISOs, we play key bridging roles between corporate leadership at the very senior levels, and the security organisation.  We need to be able to see the bigger picture and link that to the everyday realities of security and other IS professionals that are the engine room of the enterprise.  It is a very delicate balancing act.  How then, do we maintain this balance and ensure we do not get lost in the details and yet be able to maintain the integrity of the profession?  This calls for a paradigm shift in how we manage technology related business risk.  We need to evolve a strategic value risk model that provides business value and enables optimization of risk profile, maximization of risk posture, improves agility and maximisation of the efficiencies of key controls across the enterprise. 

The session will discuss:  

• Could security professionals define, maintain, and deliver an effective security strategy? If yes, how?  
• Is there a way to harmonize risk management and security strategies, as well as security operations, into a unified value management strategy?  
•  Could security drive value creation and protection of created value? If yes, how?  

When striking a deal in person or with  a third-party, we often ask for a documented agreement that can assist in maintaining confidentiality, integrity, and availability of the systems and infrastructure. The biggest challenge for CISOs today is to establish security when the machines are talking to each other and also in a siloed environment, especially because of the relentless surge in cyberattacks against the systems and networks.

The session will discuss how to establish and maintain security when communication is happening over the network and:  

• Bridging the network security gaps
• Use of the right technologies and tools to establish security
• Mechanics of maintaining the network Security-Use case scenario

We typically think of supply chain attacks as stealthy attacks on hardware components, such as malware on laptops and network devices. However, it can also be an attack on one of your service providers which can lead to an easy compromise. Keeping a watchful eye on suppliers' security status – always knowing the risks they bring in – is an essential part of building resilience and response . 

The session will discuss: 

• How to respond to software-associated supply chain attacks?
•  Intersection of DevOps and security 
• Security by design approach to secure software applications and evaluating the third-party products 

The need for enhanced business agility and secure remote access to support digital transformation has led to adopting the secure access service edge, or SASE, model among enterprises, the phrase coined by Gartner in 2019.  
Some say CISOs now don't have to procure individual discrete security solutions and tie them into the network security layer; instead, they can source from one logical place using the SASE security model. What kind of changes do you need to bring in the operational procedures to take advantage of the centralized control that SASE drives?  

The session will discuss:  

• Factors to consider in the SASE adoption;  
• Is SASE a rip and replace approach; how to leverage existing security investment
• The biggest roadblock in implementing SASE