Half Moon Bay / Summit CISO

Registration Opens / Breakfast

Opening Remarks & Panel Discussion

Building modern security teams that scale with infrastructure

Cloud and DevOps have made deploying new infrastructure and applications faster and easier.
Organizations can now deploy code dozens of times within a week as opposed to months. With
this, most classical approaches to securing and monitoring infrastructure don’t work. Security
teams need to evolve with DevOps in a way that is more aligned with modern engineering
principles such as CI/CD and everything-as-code. While it may seem that only cloud-first tech
companies were embracing this modern security approach, even F500 companies are now
making the jump. During this roundtable discussion, we’d like to inspire security leaders to
explore:

● What methodologies do they use to encourage their team to embrace these principles
● What tips and techniques have helped accelerate this approach
● How do they tackle burnouts among security team members and improve retention
● What are their favorite modern security tools and why

Keynote

Overcoming Ransomware Threats from your Vendor Ecosystem

Ransomware attacks have become mainstream news due to their catchy name, high-profile targets, and most importantly, their devastating impact. Organizations of all shapes and sizes have fallen victim to ransomware events, leaving security teams scrambling to react to the threats rather than proactively taking measures to shore up their defenses.

In this presentation, Kelly White, founder of RiskRecon, a Mastercard Company, will take attendees through exclusive research findings that showcase the cybersecurity posture of firms who have been impacted by ransomware attacks pre and post-event, as well as an examination of where these firms were vulnerable to such threats in the first place.

Join our session to learn: continued areas of vulnerability in firms previously hit by ransomware, the correlation of ransomware attacks to key cybersecurity practices, and what lessons can be learned from ransomware attacks and how they can be applied to your third-party risk management program.

Keynote

Evolving Security Strategy Without Slowing App Delivery

Organizations are rapidly adopting cloud services and migrating workloads to cloud environments. Development and release processes have had to change as part of this technology shift, and so too must cloud security approaches. Securing cloud environments and cloud-native architectures requires significant revamps to security strategy. Managing access rights, finding and fixing vulnerabilities, and detecting runtime threats are all still foundational, but effective techniques have evolved.

Learn how the largest financial services, media and software companies address cloud security. Gain insight into the common security challenges and pragmatic techniques to manage cloud risk without slowing down application delivery. Understand the importance of risk-based prioritization of security findings to support shift-left approaches and modernizing threat detection and response for cloud. Suresh Vasudevan, Sysdig CEO, will share our customers’ best practices for securing containers, Kubernetes and cloud services.

Mingle Break

Panel

360 View on Cybersecurity

Lunch

Keynote

Elevating Security for a Hyper-Connected World

Digital assets are enabling new revenue and growth opportunities, and accelerating transformation across industries. CISOs must ensure the security and continuity of business, however, they are being met with an ever-expanding attack surface at a time when the volume of attacks and the threat of ransomware is increasingly driving news cycles and board-level concerns.

Attendees of this keynote will leave with the insights needed to:

· Identify unseen security risks by gaining complete visibility in a rapidly expanding attack surface
· Get ahead of exposure by prioritizing high impact vulnerabilities and threats
· Secure the assets, recover unnecessary CapEx and OpEx and free staff for priority initiatives

Panel Discussion

Automating the Complexity Out of the Cloud

Today, a new generation of cloud native security automation platforms are entering the market that allow security teams to quickly build and deploy automated workflows at the same pace as their DevOps and developer peers.

Existing of security automation, orchestration, and response tools (SOAR), while powerful, require significant overhead to implement properly. If used at all, they are often only deployed the most complex or routinized processes, which can still take months before providing value. 

The new generation of platforms can be deployed, configured, and operational within hours. Because they are cloud native, issues can be routed wherever the owner needs them and fixes can be orchestrated across virtually any other app—creating the agile security posture needed to respond to risks in the cloud.

In this panel, experts from [different industries and company sizes] will: 

• Discuss the challenges they face in understanding the risk landscape of their cloud environments
• Share the strategies they have developed for contextualizing these risks, and the processes to manage them
• Explore the potential use cases for the emerging generation of automation platforms, and different models for deploying and managing automated workflows, including no-code development

Keynote

The Race to Privacy in 2023

Privacy is ever evolving and affecting the way organizations manage data. With a bevy of new laws going into effect in 2023 and potential federal legislation finally conceivable, organizations will be met with new obligations, provoking widespread changes to privacy practices for US companies. Data mapping of structured & unstructured data, assessments, an increase in authorized agents, and employment data being brought into scope are significantly increasing the scope of CISO responsibilities. During this keynote, Truyo president Dan Clarke will examine the privacy landscape both in the US and internationally and outline the essential roadmap to compliance in 2023 for US companies.

Mingle Break

Round Tables

1. Unblock Your Cloud Transformation or Business Growth Initiatives with Confidential Computing

2. A Global Shift Left in API Security

3. Preventing cloud data exposures, breaches, and compliance issues with modern data security

4. Remote working cybersecurity risks

5. ZTNA: It’s not just an over-hyped buzzword that everyone will forget!

6. Turning Down the Volume on Account Takeover Attacks

7. Hacking the SEC into DEVOPS

Closing Remarks

Networking Cocktail Hour