Agenda

How can you support your end users if they are a victim of cybercrime in their personal lives? What kind of resources are available to help SMBs report cybercrime, recover, and reinforce their security? Cybercrime Support Network is the leading public-private partnership serving the victims and coordinating federal, state, and local resources.

Join Kristin Judge and James Ellis of Cybercrime Support Network as we explore the current state of cybercrime reporting and recovery, work being done on common language for cybercrime among law enforcement, and a national pilot to build a reporting and information sharing program to capture threats facing consumers and SMBs.

As businesses grow, it becomes increasingly cheaper, more convenient, and more efficient to rely on third parties to take on certain business functions. However, the security of your organization’s assets is only as strong as the weakest link in your vendor chain.
Embracing the “trust-but-verify” approach, this session offers helpful tips and areas to focus on when validating your vendors’ cybersecurity controls.
Presentation Level:
GENERAL (InfoSec best practices, trends, solutions, etc.)

Visit the Exhibitor Hall for vendor displays or connect in the Networking Lounge.

One-fifth of companies have been hit with ransomware, and yet most companies still rely on hoping they won’t be hit rather than addressing shortcomings and following best practices. The industry has said for years that “it is not if, but when you will be breached,” so let’s set some goals and follow some simple steps to at least make ourselves a less desirable target than the companies that are “giving in.” If we agree that protection is not a guarantee, then we must also accept that recovery is CRITICAL and that the work starts now.

Presentation Level:

GENERAL (InfoSec best practices, trends, solutions, etc.)

Worldwide events have accelerated cloud adoption trends. Organizational reliance on the cloud is at an all-time high. This panel will explore cloud security risks, controls, and best practices to help ensure a secure cloud computing environment. 

Visit the Exhibitor Hall for vendor displays or connect in the Networking Lounge.

As cybersecurity and privacy laws evolve, there is a growing need to stay abreast of the changing regulations and compliance obligations. This session will provide an overview of recent legal developments in Canada and best practices for addressing these regulatory changes within your organization.

We will explore:

• Recent cybersecurity and privacy legal developments in Canada
• Governance-related best practices for responding to these new developments
• Best practices for managing vendors
• Making strategic decisions regarding cyber insurance
  Presentation Level:GENERAL (InfoSec best practices, trends, solutions, etc.)

XDR is an emerging industry approach that extends EDR’s insight to a broad range of sources (endpoint, servers, network, email and more). Learn how the XDR approach takes advantage of detailed activity telemetry (not just alerts) from its sources, enabling more meaningful correlation and enabling rapid detection of subtle chains of malicious activity. Higher-fidelity correlated detections mean that alert volumes decrease, enabling faster response. See how network and email telemetry help XDR expand your coverage of MITRE’s ATT&CK frameworks, without resorting to painstaking manual correlation across security toolsets.

Advancements in technology, especially over the past decade, have resulted a significant increase in the number of connected devices worldwide. While there are plenty of conversations on cybersecurity of connected devices, they are mainly around data protection and privacy issues. The fact of the matter is, a percentage of these cyberattacks can cause physical harm to humans. Although this issue is important, it does not often get the attention it deserves.

This presentation focuses on a few cyberattack scenarios on connected devices which may pose safety risks for the user/operator,

including: medical devices, connected cars and car wash systems.

“Digital transformation” (Dx) as a buzzword may be approaching the end of its life, but the fundamental concept—continuously improving the use of technology and data to provide value to customers—is real and critical to the survival of businesses. If information security teams don’t evolve to deliver the same Dx value and benefits to our organizations, then we risk losing our “customers” to intentional circumvention or preference for shadow IT providers. Make sure your information security team provides the core Dx attributes to your organization to cultivate value, loyalty, and trust.

Join this session to learn how you can:
•  Embed security into your culture, technologies and processes
•  Empower innovation and expedite time-to-market through consistent security risk governance
•  Assess the impacts, goals and methods of likely cyber attacks and incidents
•  Align IT and security professionals with business objectives and risk tolerance
•  Prepare now for effective detection and response to reduce business impacts of incidents

Presentation level: MANAGERIAL (security and business leaders)

Visit the Exhibitor Hall for vendor displays or connect in the Networking Lounge.