Agenda

For many organisations, COVID-19 has prompted an unexpected and sudden migration to cloud and remote technologies. But the pandemic has accelerated everything both good and bad – leading to elevated risk for organisations trying to maintain business continuity amongst changing regulations and restrictions. While 80% of employees remotely working and organisations having to provision in a matter of days and weeks, organisation still need to manage and control access to their systems so as to avoid over provisioning and the dangers that this presents to companies. In this presentation SailPoint will discuss how Identity Security is the foundation to regaining control and managing the new way of working.

Today, 94% of cyber-threats still originate in the inbox. Impersonation attacks’ are on the rise, as AI is increasingly being used to automatically generate spear-phishing emails, or ‘digital fakes’, that expertly mimic the writing style of trusted contacts and colleagues. Humans can no longer distinguish real from fake on their own – businesses are increasingly turning to AI to distinguish friend from foe and fight back with autonomous response.

Meanwhile, the emergence of AI-enhanced malware is making cyber-attacks exponentially more dangerous and harder to identify. In the near future, we will begin to see supercharged, AI-powered cyber-attacks leveraged at scale. In an era when thousands of documents can be encrypted in minutes, ‘immune system’ technology harnesses defensive AI to take action in seconds – stopping cyber-threats before damage is done. Find out how in this session and hear real-world examples of emerging threats that were stopped with defensive Cyber AI.

Mariana Pereira

Director of Email Security Products

Mariana Pereira is the Director of Email Security Products at Darktrace, with a primary focus on the capabilities of AI cyber defenses against email-borne attacks. Mariana works closely with the development, analyst, and marketing teams to advise technical and non-technical audiences on how best to augment cyber resilience within the email domain, and how to implement AI technology as a means of defense. She speaks regularly at international events, with a specialism in presenting on sophisticated, AI-powered email attacks. She holds an MBA from the University of Chicago, and speaks several languages including French, Italian and Portuguese.

I usually hear CISO/Head of Information Security complaining that members of Exec don’t understand security or provide enough budget to the Information Security division, and then I ask the following question “How do you present your proposal and findings to Members Exec?”, and they usually present a 30+ page document containing all the threats against the organising, stopped attacks, latest IDS logs, number of virus identified etc, and here is where they are badly failing!

There’s a huge misconceptions of what a CISO/Head of Information Security should really be. This is not a technical role. This is a strategic position that focuses on the strategy of execution, it focus on the growth of the business while understanding the business objectives, finance, revenue and how they can incorporate cyber security into that. Join me for this session and learn how you should speak and present to your board of directors and members of executive team.

Jean Carlos

Group Head of Information Security, Nomad Foods

An experienced Information and Cyber Security leader that has operated across public and private sector organisations globally. Currently heading Nomad Foods global Cyber Security team and responsible for directing the Cyber Security strategy and technical solutions, playing a pivotal role advising members of Exec and ensuring the business achieve its goals by leveraging Cyber Security.

With extensive experience in delivering large-scale transformational projects in highly regulated and non-regulated environments. Delivered programs on a global scale such as ISO27001, NIST, CIS Controls, PCI DSS, COBIT, TOGAF, ITIL, Cyber Essentials, DSP Toolkit, SOX, and GDPR.​

Passionate about Cyber Security delivering tangible value, developing others and is also a regular guest speaker for industry events.

Ransomware today is a big concern of all organisations, costing over £15.6B per year. Especially now, with so much of our enterprise workforce remote, ransomware has increased by over 700% last year alone. Strong ransomware protection starts with data – protecting it, monitoring it, and shielding it from attacks. While the average cost of a ransomware attack is now topping £62k, with the right approach, ransomware protection, and if needed, recovery can cost less than £3.9K, and in most cases, nothing at all. Join this informative session with Veeam as we explore how, through modern protection, organisations can provide protection, and if needed, recovery from malware and never have to worry about ransoms or extended impactful downtime again.

Michael Leworthy

Director, Product Marketing

Michael Leworthy focuses on assisting customers in unleashing their potential using the data protection solutions that Veeam offers. As a director for the segment and solutions team, he helps enterprise customers transform their business through data management, driving more effective modern data protection and practices. Previously to Veeam, Michael worked for Microsoft, leading programs that included Azure Hybrid Cloud strategy and Azure management and security solutions.

Sandip Patel QC FCIArb, managing partner at Aliant, London, has been at the forefront of notable serious and organised cybercrime cases including ‘DarkMarket’, ‘the Facebook Hacker’, prosecution of members of ‘Anonymous’ for the hacking of PayPal, Visa, Sony, FBI, CIA, UK NCA, MoD etc, and ‘the boy who almost broke the Internet’.

Sandip is routinely asked to advise and assist in the creation, training, and implementation of cyber law enforcement programmes. For example, in Grenada, he devised and implemented a cybercrime training course for investigators, the A-G’s office and judges so as to give effect to new cyber legislation.

Sandip contributed to the leading textbook: Electronic Evidence, 3rd Edition, Stephen Mason

As head of Aliant’s Data Protection and Privacy Team, Sandip advises and assist organisations on data laws, privacy, protection and cyber security.

Sandip is Chairperson of the Cybercrime Practitioners’ Association.

Sandip is Chief Adviser to the OSP Cyber Academy.

Did you know that Microsoft is a giant in cybersecurity? Trusted by 90% of Fortune 100 organisations, it collects over 8 trillion security signals a day and analyses more than 4PB of data across AWS, Azure and more with its flagship SIEM solution Azure Sentinel. Discover how its leading range of holistic and cloud-native security solutions can protect your organisation against cyber threats and keep you compliant.

We’ll show you:

- Ways to manage and reduce security complexity within your infrastructure

- Integrated tools to increase security visibility and improve threat detection

- How cloud-native approaches to security ensure compliance, reduce ‘noise’ and improve efficiency

Taking a closer look at:

- Zero trust security

- Azure Sentinel

- Microsoft Defender

With so many predictions, celebrity threats, and ransomware fiascos, it’s often forgotten that there are key fundamentals of Detection and Response that will help drive significant maturity in your organisation’s infosecurity programs. From knowing what assets and intellectual property you have, who may want it, and how attackers could access it, to what you’re doing as a business to prevent, detect, and respond to threats and breaches. Join Rapid7’s Chief Security Data Scientist, Bob Rudis and Head of Detection and Response for EMEA, Ellis Fincham as they discuss areas where businesses should be focusing their energy to effectively protect their employees and assets. They will also share a few war stories they’ve experienced when this focus lapses! What you will learn: • How to mitigate common cyber risks and challenges of cloud migration • Explosion of the edge and the impact of shifting to remote working • The implications of the growing number of applications to enable workforces and support customers • Recommendations on what to focus on given the pace of change as you migrate to the cloud

In this presentation, an experienced Recorded Future analyst outlines a high-level landscape of tactics and techniques tagged in our data sources as mapped to the MITRE ATT&CK framework over 2020. Viewers will gain familiarity with the MITRE ATT&CK framework, with particular relevance to security teams that rely on the framework to inform red and blue team exercises, penetration testing, threat hunting, and various security protocol prioritizations.

APIs are the lifeblood of modern Internet-connected services and they are becoming an increasingly popular target for cyber attacks. Daniele Molteni, Firewall Product Manager at Cloudflare, will discuss the most common security threats for API traffic and what technologies can be deployed to identify vulnerabilities and defend critical infrastructure.

Public cloud providers like AWS, Azure, and GCP enable you to deliver new products and capabilities at breakneck speeds, but how do you balance speed to market against compliance mandates and risk – do you have to choose? Join Patrick Pushor, Technical Evangelist at Orca Security, for a fast-paced session as he takes you through best practices, and pitfalls to avoid in securing public cloud infrastructure.

- 6 risks hiding inside every public cloud estate

- How to get instant-on, workload-level visibility across 100% of your AWS, Azure, and GCP assets

- The power of addressing both the control plane and data plane at once

- Pros and cons of different cloud security tools: traditional agent-based tools and scanners, CWPP (cloud workload protection platforms), and CSPM (cloud security posture management)

Patrick Pushor

Technical Evangelist

Patrick is a serial startup technologist having played early and key roles in over six startups across four countries in the past 12 years including multiple cybersecurity and fintech companies. Previously, he worked as an independent consultant focused on infrastructure and integration projects in nearly every industry from national defense to agriculture. More recently, Patrick helped define the CSPM market as an early employee at Dome9 Security and is leveraging that experience at Orca Security to revolutionize how we think about and approach cloud workload protection.

Colonel John Doody is the Author of “From Stripes to Stars” & Director of Interlocutor Services,  a company established to promote Information Assurance & Cyber Security issues nationally & internationally Prior to this John served at CESG/GCHQ for 10 years in the role of Head of Information Assurance Customer Services.

Roland Cloutier, CISO of Tik Tok

As Global Chief Security Officer of ByteDance & TikTok, Roland Cloutier brings an unprecedented understanding and knowledge of global protection and security leadership to one of the world's largest leading media, social, and online technology companies. He oversees the company’s information protection, risk, workforce protection, crisis management, & investigative-security operations worldwide.Prior to joining TikTok in 2020, he was previously Chief Security Officer (CSO) at payroll-services firm ADP. Cloutier spent about 10 years at ADP, & before that served as CSO at data-storage vendor EMC (now owned by Dell). Also, he has over a decade of experience serving the USAF, & US Depts. of Defense, & Veterans Affairs. He is also the author of business book “Becoming a Global Chief Security Executive Officer,” published in 2015.

Many important Global Cyber issues will be covered in a wide-ranging live Q & A between Roland & Col. John Doody.

Bogged down by alert overload and manual processes, most security operations teams are unable to detect and respond to threats at the speed of business. This session will examine the main challenges facing security teams and what can be done to reduce response times using a combination of people, processes and tools.

Colonel John Doody is the Author of new book “From Stripes to Stars” & Director of Interlocutor Services,  a company established to promote Information Assurance & Cyber Security issues nationally & internationally Prior to this John served at CESG/GCHQ for 10 years in the role of Head of Information Assurance Customer Services.

Robert Hannigan currently serves as a senior executive of Blue Voyant, a US-based cyber security services company, & as an adviser to a number of international companies. He was the Director of GCHQ & stepped down at the end of April 2017 to pursue a career in private sector cyber security & academia.

This encounter, between ex-Senior GCHQ Executives should be fascinating, as they discuss the cyber threats facing the world in 2021.