The National Institute of Standards and Technology is updating the Cybersecurity Framework to keep pace with the evolving cybersecurity risks, standards, and technology landscape.  The NIST Cybersecurity Framework, originally developed for critical infrastructure sectors, is now viewed as foundational to securing organizations of all sectors and sizes around the world.  Join this session to learn about the update process, including areas of focus, for the Cybersecurity Framework 2.0, as well as share your feedback about the use and potential improvements to the Framework. 

In 2021, the Biden administration issued the most comprehensive cybersecurity executive order in history. How is the order being enforced to protect critical infrastructure and financial services? And how fares the administration's battle against ransomware?

In this exclusive keynote, Carole House, the director of cybersecurity and secure digital innovation within the NSC, discusses:

• The state of critical infrastructure protection;
• The war on ransomware;
• Zero Trust security and the focus on identity.

It's among the critical infrastructures one thinks of first re: a cybersecurity incident. The North American power grid has been described as "the world's largest connected computer." But how does it function, and what are some of the glaring myths and surprising realities about its cybersecurity capabilities and vulnerabilities? This expert panel discusses:

• The grid's role as a critical infrastructure
• Top threats and risks
• The roles of threat intelligence, information sharing and incident response planning in grid security

After the SolarWinds attack, how can an entity ever trust that any vendor’s security incident won’t become their own next crisis? Healthcare sector entities in particular deal with a complex digital supply chain that range from critical IT vendors to suppliers of life-saving network-connected patient gear, and all the other players – known and maybe unknown – in-between. Our panel will discuss:

• Digital supply chain challenges spotlighted during COVID-19;
• Healthcare sector lessons emerging from the SolarWinds and other major vendor attacks;
• Lessons from the Urgent/11 IPnet vulnerabilities;
• Cloud vendors and change management issues;
• Vetting and trusting third-parties – including their software patches.

He co-chaired the US Cyberspace Solarium Commission, and he's been one of the nation's most informed and outspoken advocates of improving national cyber defense. In this exclusive interview, U.S. Senator Angus King (I-Maine) discusses:

• The U.S. 'State of Cybersecurity' – and what's wrong with it
• What more needs to be done to secure U.S. critical infrastructure
• The congressional appetite to tackle hot-button issues such as software security and establishing an "NTSB for cybersecurity incidents"

Ransomware – it's been in all the news this year. But what's happening between the lines? What are the stories within the stories, and how should security leaders interpret them? Former banking CISO David Pollino dissects the year's ransomware news with an eye toward:

• Critical infrastructure disruption
• How to learn from others' mistakes
• How to avoid being the next victim

Washington State was the first U.S. epicenter of the COVID-19 pandemic, and as CISO of UW Medicine Cris Ewell was supporting the first responders. How is his security organization most different today than it was a year ago? Hear his approach to:

• Work from anywhere
• Supply chain risk
• Medical device security

The 2020 presidential election was a major security challenge for the federal Cybersecurity and Infrastructure Security Agency. Yet, it was only a prelude to SolarWinds, Colonial Pipeline, Kaseya and the other major incidents of 2021. In this exclusive session, Brandon Wales, CISA's acting director, discusses:

• The fight against ransomware
• Fulfilling President Biden's cybersecurity executive order
• The role of collective defense in improving critical infrastructure security

He served on the US Cyberspace Solarium Commission, and he co-sponsored the so-called Cyber Diplomacy Act, which would create a new Bureau of International Cyberspace Policy at the State Department. U.S. Rep. Jim Langevin (D-RI) is among the most outspoken congressional leaders on cybersecurity issues, and in this exclusive session he discusses the:

• Impact of President Biden’s cybersecurity executive order
• Concerning state of critical infrastructure defense
• Appetite of the current congress to pass new cybersecurity legislation

Zero trust, supply chain security and DevSecOps. These are the three 2021 priorities for Katie Arrington, CISO for Acquisition and Sustainment within the U.S. Department of Defense. In this exclusive keynote, she details the Cybersecurity Maturity Model Certification that will forever change the relationship between government agencies and private sector suppliers.

The old risk models no longer work. Today you have employees permanently assigned to home offices, under stress, in conditions that are ripe for malicious insiders who want to cause harm, as well as well-intentioned employees who make costly mistakes. How do you mitigate your new insider risks? Join this panel for a discussion of:

• Monitoring employee behavior
• Warning signs of malicious and accidental insider threat
• Insider risk education that really works

Europol recently coordinated the disruption of the notorious Emotet botnet operation and cybercrime service. In the wake of that effort, what lessons might be applied to disrupt the ongoing damage being wrought by ransomware? And are stronger measures required, such as requiring ransom payments to be declared to authorities - or even banned - or hacking gangs’ infrastructure?

All content from Day 1 will be available on demand from 9 AM - 5 PM ET on Day 2, Wednesday, August 31st. Don’t miss the chance to log-in and consume any content you may not have had the chance to see at your own convenience.