Agenda

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

13:00 CET Introduction, Jose Ruiz Gualda, Program Director, ICCC, Co-founder, jtsec Beyond IT Security, Spain; Opening Welcome (P00a) Martin Schaffer, Global Head of Cybersecurity Services, SGS Group, Austria

13:05 CET Keynote: Securing the Edge: The Role of Third-Party Security Verification (P00b) Wolfgang Steinbauer, Vice-President, Head of Competence Centre Crypto and Security, NXP, Austria

13:35 CET CCDB Update (P00c) Rob Huisman, Netherlands National Communications Security Agency, Netherlands

13:50 CET CCRA Update (P00d) Colin Whorlow, Head of International Standards, National Cyber Security Centre (NCSC), United Kingdom

14:05 CET CCUF Update (P00e) Petra Manche, Product Security Certification Engineer, Cisco, United Kingdom

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

16:00 CET ISO/IEC JTC 1/SC 27/WG 3, Current Status, Roadmap and Challenges (R01a) Miguel Bañon, Convenor, ISO/IEC JTC 1/SC 27/WG 3, Spain

16:30 CET Changes in the ISO/IEC 15408 General Model (R01b) Elzbieta Andrukiewicz, KSO3C Project Manager, National Institute of Telecommunications, Poland

17:00 CET Adopting the New Evaluation Methods and Activities in ISO/IEC 15408-4 (R01c) Tony Boswell, Senior Principal Consultant, CyTAL, United Kingdom

Moderator: Dr. Michael Vogel, Principal Consultant, COO, atsec information security GmbH, Germany

17:30 CET SGS and Graz University of Technology Announcing Launch of New Cybersecurity Research Center (P01d) Martin Schaffer, Global Head of Cybersecurity Services of SGS, Germany; Stefan Mangard, Professor and Head of the Institute of Applied Information Processing and Communications at Graz University of Technology

In 2019, SGS and Graz University of Technology (TU Graz) announced the Cybersecurity Campus Graz, where SGS then located its global headquarter for Cybersecurity Services next to TU Graz’ Cybersecurity Research Team (famous for their discoveries around Meltdown and Spectre). One key milestone of growing the campus is now the launch of a new cybersecurity research center, operated by SGS and TU Graz. In the session, Martin Schaffer, Global Head of SGS Cybersecurity Services and Stefan Mangard, Professor of IT-Security of TU Graz, will disclose the name of the new research company, its vision, mission and how it will provide high value to society.

SPONSORED

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

18:00 CET FIPS vs CC: What Drives Certification Demand for HSMs? (M02a) Ignacio Dieguez, Senior Principal Security Certifications Engineer, Entrust, United Kingdom; Natalya Robert, Principal Security Certifications Engineer, Entrust, United Kingdom

18:30 CET Protection Profile for SaaS Multi-Tenant Cryptographic Isolation (M02b) Richard Tychansky, Security Architect, Identity Dynamics Corp, United States

Moderator: Nithya Rachamadugu, Senior Director, Cygnacom Solutions, United States

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

13:00 CET Track Keynote: Meeting Customer Requirements with Unified Verification Standard (M10a) Bob Xie, Cyber Security Officer, Huawei Western European Region, Director, Huawei Cyber Security Transparency Centre, Huawei, Belgium

13:30 CET Trust Model for Verticals Over 5G (M10b) Claire Loiseaux, CEO, Internet of Trust, France

14:00 CET You want what? By when?? …. Ok! (M10c) Wouter Slegers, CEO, TrustCB, Netherlands

Moderator: Ahmad Zuraimi bin Mohamad, Technical Director, Cybersecurity & Common Criteria, Securelytics, Malaysia

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

15:00 CET Reading Between the Lines, A Biometric Acceptance in Malaysia Voyage (S11a) Nur Iylia Roslan, Security Analyst, CyberSecurity Malaysia, Malaysia; Nor Zarina Zamri, CyberSecurity Malaysia, Malaysia

15:30 CET Outbreak Impact in CC (S11b) Alvaro Ortega Chamorro, Cybersecurity Lab Manager, DEKRA Testing and Certification S.A.U., Spain

16:00 CET End-to-End Side-Channel Detection Methodology (S11c) Sylvain Guilley, CTO, Secure-IC S.A.S., France

16:30 CET JHAS Rating Approach and Assessment of SW Vulnerabilities—All ITSEFs Will Become Hackers (S11d) Jasmina Omic, Product Manager Services, Riscure, Netherlands

Moderator: Brian Wood, Device Security Certification Manager, Samsung Research America, United States

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

17:30 CET NIAP Update (U12a) Mary Baish, Director, NIAP, United States

18:00 CET A Transition to New Algorithms: Encryption, Key Establishment and Entropy—the CMVP Perspective (U12b) Allen Roginsky, Mathematician, NIST, United States

18:30 CET NIAP Automation Work Update and Demo (U12c) Robert Clemons, Director, NIAP, United States

Moderator: Nithya Rachamadugu, Senior Director, Cygnacom Solutions, United States

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

13:00 CET EUCC Scheme Update (A20a) Philippe Blot, Lead Certification Expert, ENISA, France

13:30 CET State of Play and Way Forward (A20b) Aristotelis Tzafalias, Policy Officer, European Commission, Greece

14:00 CET Cryptographic Agility in Security Standards (A20c) Tomislav Nad, Head of Cryptography & System Security, SGS Digital Trust Services GmbH, Austria

Moderator: Gonzalo Erro Iribarren, Data Privacy and Cybersecurity Officer, Huawei Technologies, Spain

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

15:00 CET Strong Digital Identity as an Enabler for Adaptive Security and How It Fits into Certification (L21a) John Boggie, Director, Head of Cybersecurity Certification, NXP Semiconductors, United Kingdom; Georg Stutz, Principal Security Certification Expert, NXP Semiconductors, Germany

15:30 CET Composite Evaluations: The Way Forward for IoT Security and Compliance (L21b) Dirk-Jan Out, CEO, Brightsight, The Netherlands

16:00 CET Certifying IoT Devices: Challenges from the Real World (L21c) Raphael Spreitzer, Principal Security Expert, SGS Digital Trust Services, Austria

16:30 CET The EMVCo Security Evaluation Processes for IoT (L21d) Gary Hemmings, Member, EMVCo Security Evaluation Group, Director, MasterCard, United Kingdom

Moderator: Alicia Squires, Global Certifications Team–Manager, FIPS/Common Criteria, Cisco Systems, United States

17:00 CET Securyzr iSE: An integrated Secure Element to Easily Reach your CC Certification (P21d)

Securyzr iSE is an integrated Secure Element. It offers multiple services to the host system (ECU, IoT, iUICC, etc.) various services such as Secure Boot, Key management, etc. all along the life of the device. By delivering the Securyzr iSE to its customers, Secure-IC simplifies their certification process thank to various services such as support to FIPS and/or CC certification, re-use of certification documentation or pre-silicon evaluation.

SPONSORED

Detailed speaker bios and presentation descriptions can be found at iccconference.org. Your questions for speakers are welcomed--please enter at the Q&A tab at the bottom of the session.

17:30 CET Industrial Automation Control Systems Cybersecurity Certification – Chapter II (L22a) Georgios Theodoridis, Scientific/Technical Project Officer, European Commission, DG Joint Research Centre Greece; Jose Ruiz Gualda, Co-founder, jtsec Beyond IT Security, Spain

18:00 CET Common Criteria Vs FedRAMP (L22b) Ravi Jagannathan, Cloud Security Architect, VMware, United States

18:30 CET You, Me and FIPS 140-3: Open for Business! (L22c) Ryan Thomas, CST Laboratory Manager, Acumen Security, United States

Moderator: Petra Manche, Product Security Certification Engineer, Cisco, United Kingdom