Austin

As organizations face the growing threat of ransomware and data exfiltration, many are reevaluating their preparedness for a large-scale data loss event. The problem is that legacy backup systems, which were designed to protect against hardware failure or natural disasters, are now being targeted by cybercriminals as their first point of attack. In this session, we will discuss why traditional backup systems and cyber recovery solutions are fundamentally different capabilities. We will also explore the steps that organizations can take to prepare for and recover from a cyber-attack, including implementing a modern cyber recovery tool like Rubrik.

As security practitioners, we’re always trying to find ways to get ahead of attackers and mitigate threats before they wreak havoc in our environments. But, traditional defense-in-depth strategies rely more on reactive controls to build walls that we hope will stop attacks from being successful. However, time and again, we see news headlines proving how often and how easily these reactive approaches are defeated.

Today’s attack surface requires a different approach, focusing on preventative risk mitigation strategies that give more visibility, more context and a better mechanism to tie technical risk to business context. While reactive controls are still necessary, the more we can identify areas of risk before the attackers do and close the gaps in our defenses, the fewer attacks will take place and the more effective those reactive controls will be.

Preventative security strategies are driven by making better decisions about how, when and where to mitigate risks. In this talk, we’ll review techniques to implement within your security program that will give a better understanding of the technical and business risk across your attack surface, how to identify the areas to focus on first and ways to drive a more meaningful approach to mitigating risks before cyberattacks exploit your weaknesses.

Use of the cloud is continuously growing, not surprisingly so due to its perceived lower costs, greater agility, and ability to increase computing power with increased demand & continuously deploy new applications and software features.

Despite the appeal of cloud, there are many security risks and vulnerabilities and managing these risks has proven to be a big challenge as cyber criminals shift their tactics to cloud data and systems in responses to this increased use of the cloud. According to a CRA Business Intelligence’s September 2022 Cloud Security Survey, misconfigurations, lack of oversight, and little visibility across the organization are among their chief concerns regarding cloud deployments.

If organizations are going to successfully adopt/transition to the cloud, they must ensure security is part of their program. An effective cloud security program includes various process and technology capabilities to effectively keep up with the current threat landscape and vulnerabilities.

Derived from the past, present and future, learn about the best practices around Securing Access with Zero Trust. While many organizations have begun their journey to zero trust, the elements and opportunities are changing. In this session, we’ll review where zero trust is today, where it is going tomorrow, and how to plan for the zero trust of the future.

Organizations must take on risk to innovate and grow. Yet, InfoSec teams are struggling with talent shortages, limited budgets and an ever changing regulatory landscape.  Security and risk leaders must serve as business accelerators by tying risk to strategic business outcomes.  This session will help you see risk differently and help you be more proactive and efficient so you can confidently pursue strategies that are valuable to customers and profitable to your organization.  You’ll leave this session with a better understanding of how to convert risk to business advantage.

Today, more than any other time in history, we are digitally connected. And, with a continuous rise in mobile-related attacks, and an ever-increasing use of mobile devices to perform business tasks, protecting your organization from Mobile threats is more critical than ever. And, despite our best efforts, threats and breaches continue to increase. Join Grant Asplund for this insightful presentation to learn about the latest mobile and user protection including Check Point’s Harmony suite for securing users and access. Today’s mobile security needs to prevent the download of malicious files to mobile devices, not just from the web and email but also collaboration tools like Teams and Slack and others. Learn out how you can achieve 99.7% efficacy against zero-day threats across your entire enterprise leveraging ThreatCloud, the best threat intelligence solution in the industry.

Despite having distinct differences, data privacy and compliance are deeply intertwined with cyber security. As focus on data privacy and compliance increases, business leaders can expect to see vast changes related to how consumer data is managed, shared, and secured. Policy & laws on data privacy and compliance continue to expand and become increasingly stringent, so it is important for companies and their respective business leaders to consider these areas as they develop & evaluate their cyber security strategies. For instance, last year the SEC proposed amendments to its rules on cyber security, risk management, strategy, governance, and incident disclosure by public companies.

At a more granular level, there are various initiatives to protect specific consumer data and ensure enterprises are compliant in doing so – particularly health data and children’s personal information. The American Data Privacy and Protection Act (ADPPA) if passed could greatly impact health data beyond the scope of HIPAA by establishing a national framework to protect & preserve the privacy of consumer data collected by entities not covered by HIPAA. In an American Medical Association survey, about 75% of surveyed patients expressed concern and confusion related to the privacy of their health data and how it is handled. The ADPPA could help clear up some of this confusion by establishing clear expectations. Another critical area is the collection of personal information of children. The Children’s Online Privacy Protection Act (COPPA) helps put parents in control of how their children’s data is handled and ensures that all entities in possession of this data sustain its confidentiality, security, and integrity.

Maintaining strong data privacy and compliance practices is imperative in preventing sensitive personal data from becoming compromised. This information is extremely valuable to cyber criminals, who seek to utilize compromised data to steal others’ identities or resell such PII.

This panel will look at the latest data privacy policies and implications for what this means for business leaders in the future. Our lineup of experts will lend their insights and offer best practices relating to privacy, compliance, and identity protection.

In the face of skyrocketing cyber risk, detecting and responding to attacks is no longer enough. Organizations must take proactive steps to prevent threats before they happen, and to recover if compromised. In this session, Darktrace unveil an ambitious new approach to security, with core engines powering AI technologies to prevent, detect, respond, and ultimately heal from attacks. Together, these engines combine to strengthen organizations’ security posture in a virtuous AI feedback ‘loop,’ which provides powerful end-to-end, bespoke, and self-learning solutions unique to each organization.

As the cornerstone of today’s organizations, applications are the natural starting point for understanding cyber risk because they reflect the key business objectives, priorities, and operations. However, for many organizations, visibility into application-level risk feels nearly impossible to achieve. Intricacies related to custom apps, nested software components, complex hybrid cloud deployments and underlying infrastructure, all managed across siloed systems and security tools, can seem overwhelming.

“Pay Up, or Else”. The number of organizations who have been faced with this scenario has been steadily increasing over the past several years as ransomware attacks continue to rise — both in numbers and the size of payouts.

The clear and present danger of a ransomware attack looms large among cyber executives and business leaders as the number of vulnerabilities increases daily. According to a 2022 CRA Business Intelligence survey, nearly one in four respondents reported that their organization experienced one or more ransomware attacks in the past 12 months, and almost one out of three of these organizations said the attacker succeeded in gaining access to their systems, encrypting files, and demanding a ransom

According to this survey, many believe that the worst is yet to come and that they are at a significantly higher risk of a cyberattack than ever before – it’s not a matter of “if,” but “when.”

Preparing for the inevitable and defending against the threat of a ransomware attack requires constant evaluation and assessment, and then making the necessary adjustments.

On this panel, our lineup of industry experts will discuss the key security measures enterprises must take, going beyond backup and recovery and anti-malware/anti-virus solutions to include endpoint security, vulnerability management, Active Directory monitoring, credential protection, DNS security tools, SIEM, DLP and encryption, and cloud security software.

As cybersecurity threats continue to evolve, organizations are looking to adopt a more comprehensive and integrated approach to risk management that extends beyond traditional silos. Integrating security control systems with Risk Management (IRM) enables organizations to manage risks and test control efficacy across their entire enterprise, including the internal technological aspects of risk. This presentation will focus on the role of comprehensive continuous controls monitoring (CCM) and automation in operationalizing Risk Operations Centers (ROCs) to manage and mitigate cybersecurity risks more effectively.

In this presentation, we will cover:

• Risk Operation Centers and their benefits, including how they revolutionize cybersecurity risk management.
• How to operationalize ROCs and enhance cybersecurity risk management.
• How AI-based risk assessment can help identify potential threats and vulnerabilities by analyzing vast amounts of data and provide insights into potential threats and risks.
• The use of orchestration and automation to streamline and operationalize ROCs through Generative Artificial Intelligence.
• Use cases for how CCM is being used in ROCs to effectively manage and mitigate cybersecurity risks.
• The benefits and challenges associated with incorporating CCM into ROCs.
• Conclusion and Q&A: We will conclude with a summary of the key points discussed and leave time for Q&A.

Join CrowdStrike’s Michael Davis as he aims to demystify the complex world of Cyber Threat Intelligence (CTI) and provide a comprehensive understanding of key concepts, methodologies and practical applications. You’ll gain an understanding of today’s evolving threat landscape and how CTI can enable IT and security leaders to make better decisions to protect against today’s adversaries.