What's the single most important component of an effective cyber-security program? Here's a hint: It has nothing to do with technology. Dave Grady, Senior Client Partner from Verizon's Security Solutions group, will discuss the importance of stakeholder engagement in cyber-security. Drawing on his 10 years as a security program manager and a previous 15-year career as an internal communications manager, Grady will explore how better communication between security teams and the business lines, executives and customers they support can make for a more effective security program. Better still, effective stakeholder engagement can reduce security-practitioner burnout and contribute to their professional growth.

Today 86% of organizations are in the process of building or already have an existing system in place to prevent/defend against insider attacks; if this statistic proves anything it is that more and more business are coming to terms with the hostilities of our world. Expected or unexpected, an employee with access to company-wide systems, no matter their intentions is a great threat to any organization. An employee with malicious intentions is dangerous, but according to a recent IBM survey, 95% of all breaches involved someone making a mistake. The Insider Threat panel at the Cyber Security Summit will show you how your organization is at risk, as well as showing you innovative & necessary steps to take in order to prevent attacks and increasing your defense systems.

Any means access to enterprise apps and resources is the new normal, as is news on advanced threats and massive data breaches. While perimeter controls are not going away, the mantra of Zero Trust dictates a verify before trust approach to safeguard access. As companies continue to migrate to the cloud, organizations are considering per-application access using a software defined perimeter (SDP) architecture. SDP offers simple and secure endpoint to application authentication with stateful access compliance. While the death of firewalls and VPNs has been grossly exaggerated, how, when and where should organizations take advantage of this extended mode of secure access?

This session will explore:

• Hybrid IT trends ushering new Secure Access challenges
• Key tenets of Zero Trust applied to Secure Access
• SDP capabilities, use cases and considerations
• Reference architecture for dual-mode VPN and SDP

With enterprises more targeted by malicious attacks than ever before, IT needs to ensure they are using the right tools to keep their company's data secure. In this session, attendees will learn about the many differentiating features of Chromebooks around security, and what really helps Chromebooks stand out from the pack.

For many organizations they are looking at over half of their IT spending being related to cloud, whether infrastructure, services or other tools in the near future. As a CISO, this movement to the cloud can fill you with dread. Furthermore, one of the risks corporate boards understand best is third party risk, and now your entire network is in someone else’s hands. This transition is the subject of a lot of concern and a lot of mixed signals. It doesn’t have to be that way though, especially as moving to the cloud can be a security improvement, if managed appropriately. This panel will talk about the security issues CISO’s and IT leaders need to be aware of as they move further and further over to the cloud, what best practices and services they should consider or utilize, and how they can fully leverage the cloud resources to bring their organization to the next level of security.

The greatest asset to a business in the modern economy is data, but it’s true value is only recognized by entrusting people to work with and manipulate the data to drive value. The balance between securing data and enabling people is an ongoing challenge for most organizations today stuck writing policies and handling exceptions. To unlock the business potential of people interacting with data, we must move towards an adaptive security approach that deals in terms of risk rather than one-size-fits-all policies.

Organizations process and store huge volumes of sensitive information that belong to their customers and employees – from financial information to medical records to personal identifiers, like social security numbers and birthdates. Inadequate controls in IAM processes and technology can lead to breach, involuntary exposure of this data, and non-compliance issues.

But you cannot correct what you don't know, so the first step in any IAM program is assessment.

IDMWORKS CEO & Chief Strategist, Todd Rossin, will address the most common questions around IAM Assessments & Roadmaps - Why Should We Assess? What Should We Assess? and When Should We Reassess?

A common phrase in information security is: “It is a matter of when you will be breached, not if.” As the headlines provide real-life examples from Marriot, to Equifax, to FedEx, this seems more true than ever before. But what should you do to prepare, respond and recover from it? What tools and tactics will make it easier to detect a breach (either as it happens or after the fact), what do you say to key stake holders about what is happening and how do you pivot from “How did this happen” to “How can we make sure it doesn’t happen again”. Few things in IT can be as high visibility and high stakes as a breach and this panel will equip the audience with what they need to know to better handle when a breach happens.

With an estimated annual cost of €45.3 billion in lost revenues, counterfeit and non-standard devices pose a real threat to business, consumers, and regulators. Our research shows that highly convincing counterfeit devices can be an attack vector in their own right. Pre-installed malware and automatic download and execution of malicious code compromises data security and puts user's data in jeopardy. This talk and live demo will show how serious this growing threat is, the wide range of potential security impacts and propose some methods to counter it.