With a long experience as a naval officer, a ship commander, director of information systems for the French Ministry of Defense,, and now a vision of private companies valuable for all CISOs, we will put into perspective several key themes, such as hacking back and the questions it raises in terms of the geopolitics of cyber-warfare, the security of vital organizations (CNIs) in their digital transformation, cyber-resilience planning and what the military approach can teach us. Finally, we will conclude with the problems and solutions regarding data sovereignty.

The world pandemic has led to new principles for cybersecurity leadership. With an increasing attack surface due to hybrid work, digitization and the move to the cloud, perimeter-based approaches to security are obsolete. Leadership and better corporate governance are two parts of the same journey to achieve Cyber Resilience via Zero Trust. We will be discussing these issues with Georges de Moura, Head of Industry Solutions-Cyber Resilience at the World Economic Forum. During the discussion we will cover the following topics: 

• What are the key principles of Cyber Resilience in a Post Pandemic World ? 
• What is the role of cybersecurity Leadership in creating a culture of cyber-security for the enterprise? 
• How do we use Zero Trust approaches to boost resilience, and what is the role of Leadership here? 
• Outside our own organization, how do we ensure the cybersecurity of our supply chains? 
• How can Cybersecurity leaders enable boards to understand cybersecurity risk in a business context?

Being compliant is one of the key challenges for CISOs on a daily basis. Rules and regulations are constantly changing, but what are the best practices and software solutions that can allow you to navigate without constantly reinventing the wheel ? To ensure the security of their sensitive information, organisations can rely on the ISO/IEC 27000 family of standards, but how without additional resources can they achieve compliance with this standard?

The Zero Trust concept aspires to eliminate persistent trust, and enforce continuous authentication, least privilege, and micro-segmentation. This approach reduces the attack surface and minimizes threats, helping to protect against simple malware attacks to advanced persistent threats.
However, for most companies today, the path to achieving 100% Zero-Trust throughout their organization is far from clear.

The time to detect, triage and remediate and attack is currently too long. By containing the spread of an attack you can reduce the time taken to stop an attack and prevent a cyber disaster. In this session we will explore how to contain a ransomware attack and protect key assets. 

What are the breaches/incidents that got the attention of security leaders in Europe and France in 2021? And what are their defensive priorities as they enter 2022? Paul McKay, Principal Analyst at Forrester, tackles these questions and more in an exclusive briefing. He discusses:

• Risks to consider with expanded cloud migration
• How to embrace zero trust
• Questions security leaders need to ask and answer heading into a new year

While ransomware has crippled hospitals in recent years, the security of our healthcare systems has been in the news, particularly with the challefnges posed by their digital transformation, the proliferation of connected healthcare objects (IoMTs) and, above all, the sensitivity of the healthcare data processed. The role of the CISO in hospitals has become more and more key, leading to increasing challenges and needs, in particular that of convincing executive boards of their security approach. We will have a deeper look at these topics during the session with the CISO of Hopitaux Iris Sud in Belgium.

The CISO is an increasingly key role in modern organizations, reconciling the needs of a wide range of stakeholders to secure data and systems, ensuring their availability, security and integrity. Different organizations have different approaches, from hands-on technocrats to administrative maestros orchestrating their tech talent.  But some skills, personal characteristics, and approaches are constant and fundamental to excel as a CISO. These include a deep understanding of the needs of the business; leading security culture within the organization, including recruitment, understanding and management of the security team; identification, validation and deployment of appropriate security solutions; strategic planning for incident response, remediation, and ongoing resilience; and ability to communicate technological issues and requirements to the board in a business context.  

We will be discussing these requirements with Yohann Bauzil, CISO at Airbus OneWeb Satellites. We will cover the following points:

• What is the primary role of a CISO (Vs Cyber Security Director) ?
• Should a CISO be more of a technocrat or an orchestrator? 
• Where do you start your mission? 
• How do you establish a security culture in the organization, and within the security team? 
• What should be the priorities of a CISO at a strategic level? 
• "Internal organization", how does the CISO report to the structure? 
• Self-assessment via diagnostics and maturity analysis, a must? 
• How should a CISO deal with the board of directors - what should you communicate?
  

Drawing on a military career from destroyer command to French cyber defense command, through war school and cybersecurity education, Nicolas Malbec's comprehensive approach puts into perspective the management of risk, unknown and unavoidable component, the military's best practices for preparing for crisis management, but most importantly, the place of the human in cyber security, from preparation, through the governing bodies, to the training of tomorrow's cybersecurity talents. (Even though he is still on active duty, his words are his own and not those of the institution).

Purdue University professor Gene Spafford – "Spaf," as he's known – is renowned globally as a cybersecurity educator and hall of fame thought-leader. In this exclusive session, he raises probing questions about the seismic shifts brought about by digital transformation, including:

• How has cybersecurity education changed – for the better and for the worse?
• Is the 'work from anywhere' model sustainable – and even beneficial?
• Are we just seeing the tip of the iceberg for supply chain disruption?

A hall-of-fame cryptographer renowned for his work developing the SSL protocol when he was chief scientist at Netscape in the 1990s, Taher Elgamal now serves as CTO, Security, at Salesforce. With that being said, he has some strong feelings about our continued dependency on passwords to access sensitive systems. 

"Passwords must be eliminated," he says, and in this exclusive session he explains not just why, but how. Elgamal also discusses:

• The state of the art re: passwordless authentication
• Concerns about the evolving threat landscape
• CISO priorities as we head into 2022

When we talk about cybersecurity risk management, we often focus on technology. But what about our people and the more the silent, dangerous risk to them - that being "burnout" - something we may not always be able to see, but left unmanaged, can create serious problems for our workforce. How are mental health challenges manifesting in the workplace today? How are they not being addressed – and what’s at risk?

This expert panel will share insights and strategies, including:

• How stress and burnout are emerging in the workplace today; 
• Breaking down the stigma associated with mental health challenges;
• How organizations can protect the wellbeing of their people in a strategic way. 
  

Claire Le Gal has been with Mastercard for 25 years, and in that time she has seen revolutionary changes in payments, technology – and fraud schemes.

In this exclusive session, Le Gal, Mastercard's Senior Vice President, Fraud Intelligence, Strategy & Cyber Products, discusses: The payments technology evolution, Fraud trends – the sophistication and the speed, How Mastercard is rolling out new products specifically to help small to midsized enterprises to bridge their fraud and cybersecurity resource gaps.