How do you inspire an enterprise to change its entire cybersecurity mindset? How do help people evolve from being afraid to report a cybersecurity incident to being eager and proactive? It's called "Responsible Defense," and Katie Jenkins, EVP and CISO of Liberty Mutual Insurance, addresses it in this exclusive keynote. Beyond this cultural shift, she discusses:

• Partnering with her new CIO to support a tech strategy of "Safeguarding Business Operations"
• Dealing with the shifting threat landscape and expanded attack surface
• Addressing the talent gap by championing women, military veterans and other under-represented groups

With the rapidly changing IT infrastructure that has extended the network perimeter and expanded attack avenues, prompting attackers to try new techniques, organizations are facing different security challenges. In this session, we'll look at the changing cyber landscape, evolving security threats, and emerging attack patterns and how we can formulate a threat-informed response. 

• Understanding and defining different types of threats 
• Gaining visibility over your attack surface 
• Formulating a comprehensive strategy to address human-related security threats
• How to continuously improve your security posture with 
• Ongoing monitoring 
• Analysis of user behavior
• Automating responses to threats

Join Gary as he explores the transformative potential of Generative AI in simplifying security assessments and vulnerability management for non-techies for accelerating data analysis. Amidst the excitement, we can't help but ponder whether Gary crafted this abstract himself or if a mischievous AI is behind the curtain, potentially holding him captive in a closet. Regardless, prepare to dive into the compelling intersection of AI and third-party risk decisions, shedding light on a future where technology and human collaboration reshape the landscape.

Solution Room

1 Hour workshop Presented by the United States Secret Service

What is a Solution Room?

The Solution Room is a highly engaging and interactive conference session that aims to provide cybersecurity leaders with peer-to-peer support and subject matter expertise to tackle their most pressing challenges. Through a combination of small group discussions, expert moderators, and support from U.S. Secret Service Agents, attendees will work through the lifecycle of a Business Email Compromise (BEC) attack.

What does participation in the Solution Room look like?

To enhance your learning experience, we invite you to join one of the ten tables for this collaborative session. Each table will be moderated by a knowledgeable CyberEdBoard member, and a U.S. Secret Service Agent will be present to provide valuable insights into law enforcement partnerships during a compromise. 

To kick off the session, Tom Field, Senior Vice President of Editorial at ISMG, will set the stage with a fictitious Business Email Compromise (BEC) scenario. Each group will receive identical sets of questions and work collaboratively to find the answers. As the exercise progresses, new information will be revealed, adding unexpected twists and turns to the scenario. Through this dynamic approach, participants will be challenged to apply critical thinking skills and work as a cohesive team to effectively respond to the evolving situation. Our goal is to provide a stimulating and engaging learning experience that equips you with the skills and knowledge needed to handle real-world BEC scenarios.

Partnering with the US Secret Service 

The U.S. Secret Service brings extensive experience and expertise in investigating and preventing BEC attacks, and participants will have the unique opportunity to learn from the experts during the workshop. They will gain a deeper understanding of the anatomy of a BEC attack, including its mutations, and how to identify, disrupt, and prosecute cybercriminals involved in such schemes.

The Solution Room offers a valuable learning experience for cybersecurity leaders seeking to enhance their knowledge and skills in combating BEC attacks.

The “modern” CISO must take advantage of every opportunity to strengthen their organizations’ defenses. While many expect the economy and business activity to slow down in 2023, bad actors do not adhere to these cycles. With a potentially slower pace of business activity, CISOs have the opportunity to improve upon their existing programs and sharpen their communications to effectively translate security-speak to management decision makers. Our expert group of CISOs will share their perspectives on what lies ahead in 2023 and how to communicate budget needs and the evolving threat environment to management. They will:

• Assess the opportunities in a “down cycle” to improve existing programs
• Discuss effective communication to decision makers in management
• Decipher the biggest challenges for building and maintaining a successful security team

As cyber threats continue to multiply, companies and boards need to be proactive in managing cyber-related risk and defenders must adapt and stay relentless if they want to keep up. During this Fireside chat, Dave Wong, Vice President, Mandiant Consulting, will share new insight into how organizations navigate the increasingly complex threat landscape and also touch on some key findings in Mandiant's Cyber Security Forecast 2023.

During this 5-Minute Solution Showcase, Irina Tishelman from Sonatype will share information about their solution. Take the opportunity to ask questions and gain actionable insights to security challenges.

It's been called "bold," "a true strategy" and even "politicized." It's the new U.S. Cybersecurity Strategy released in early March, calling for new levels of critical infrastructure protection and industry accountability for software flaws. Is the ambitious strategy doable in today's political environment? Former federal CISO Grant Schneider offers his informed opinion and takes audience questions about:

• Defending critical infrastructure
• Targeting threat actors
• Liability for software flaws

This “Power” session is designed to provide insights into a critical aspect of any cybersecurity strategy – cyber insurance.  Cyber insurance, when properly deployed, can help avoid and respond to incidents, as well as reduce the financial impact of such incidents.  This session reviews hot topics in cyber insurance, and provides a road map to maximizing your insurance recovery in the event of a loss.

Key learning objectives:

• Understanding the underwriting process and how to avoid voiding your coverage; 
• Integration of your insurance resources into your cybersecurity program; 
• Avoiding pitfalls during and after an incident that could reduce your recovery.