Agenda

No matter how much security technology we purchase, we still face a fundamental security problem: people. This webinar will explore the different levers that social engineers and scam artists pull to make us more likely to do their bidding.

Join Javvad Malik, Security Awareness Advocate for KnowBe4, as he provides fun and engaging examples of mental manipulation in everyday life and details of sophisticated social engineering and online scams.

Key Takeaways:

• The Perception Vs. Reality Dilemma

• Understanding the OODA (Observe, Orient, Decide, Act) Loop

• How social engineers and scam artists achieve their goals by subverting OODA Loop's different components

• How we can defend ourselves and our organisations

Speaker: Javaad Malik

Security Awareness Advocate

Javvad Malik is a Security Awareness Advocate at KnowBe4, a blogger event speaker and industry commentator who is possibly best known as one of the industry’s most prolific video bloggers with his signature fresh and light-hearted perspective on security that speak to both technical and non-technical audiences alike. Prior to joining KnowBe4, he was security advocate at AlienVault. Before then, he was a Senior Analyst at 451’s Enterprise Security Practice (ESP).

Among rapidly evolving technological advancements, the emergence of AIenhanced malware is making cyber-attacks exponentially more dangerous, and harder to identify. As AI-driven attacks evolve, they will be almost indistinguishable from genuine activity, and conducted at an unprecedented speed and scale. In the face of offensive AI, only defensive AI can fight back, detecting even the most subtle indicators of attack in real time, and respond with surgical actions to neutralize threats - wherever they strike.

In this session, discover:

• How cyber-criminals are leveraging AI tools to create sophisticated cyber weapons
• What an AI-powered spoofing threat may look like, and why humans will not be able to spot
them
• Why defensive AI technologies are uniquely positioned to fight back

Speaker: Max Heinemeyer

Director of Threat Hunting

Max is a cyber security expert with over a decade of experience in the field, specializing in a wide range of areas such as Penetration Testing, Red-Teaming, SIEM and SOC consulting and hunting Advanced Persistent Threat (APT) groups. At Darktrace, Max oversees global threat hunting efforts, working with strategic customers to investigate and respond to cyber-threats. He works closely with the R&D team at Darktrace’s Cambridge UK headquarters, leading research into new AI innovations and their various defensive and offensive applications. Max’s insights are regularly featured in international media outlets such as the BBC, Forbes and WIRED. When living in Germany, he was an active member of the Chaos Computer Club. Max holds an MSc from the University of Duisburg-Essen and a BSc from the Cooperative State University Stuttgart in International Business Information Systems.

Developers are often regarded as the superhumans that know it all and can do everything. This is more than often true, however if we start blaming them for misses in the security specter of their code we are doing them wrong. It is not their fault, but more the overall way on how development is done from the architecture to the release. In this presentation I will show you how easy it is to miss security related details, that can be used by attackers to breach the victims data. If those security misses are undetected throughout your SDLC, if they make it trough your DevOps process all the way to the release then catastrophe is unavoidable. Therefore I will also show you how to spot them at the right place and time to avoid delays in your delivery schedule.

A modern digital business has no perimeter; it lives everywhere it’s customers connect and everywhere it’s employees and partners interact with it’s data and services. Whether it’s the “new normal” model of working from home, or the migration of services to cloud, your attack surface is constantly increasing & changing. Zero Trust is a strategic approach to security that eliminates that explicit trust that is currently prevalent, and instead adopts an “assume breach” mindset. In this session we discuss the approach to Zero Trust, and how Breach & Attack Simulation (BAS) gives security teams the ability to continually validate their security posture by continuously attacking their defenses.

This session covers:

• How Zero Trust Architecture solves current security challenges

• Why Zero Trust Architecture requires continual validation with Breach and Attack Simulation

• How Breach & Attack Simulation gives security teams the edge

What has the journey been like from entering the infosec industry 10 years ago to undertaking a CISO role? Stu's talk is a personal journey covering the successes and failures but more importantly the learnings from progressing through the industry.

Join Infoblox to understand what malware organisations should be aware of and what you can do to protect against it. We will be showing multiple ways companies can mitigate against it, and how Infoblox help you stay 1 step ahead of malicious actors, malware as well as keep your network running. Organisations need proven security solutions to protect cloud migrations, SDN adoption, IoT deployments and a large-scale distributed workforce that can keep pace with the rate of change the business demands.

Infoblox provides foundational layer security to reliably manage your evolving borderless hybrid-cloud network.

During the session, we will cover how to:

• improve your organisation’s security posture by using DNS as the first line of defence

• simplify management through DDI across data centre, cloud and distributed locations

• modernise distributed enterprise for secure DIA with cloud-native architecture

We all know that Agile is a thing. There are very few people left in the software or security industry that haven’t at least heard of Agile software development, and “agile transformation” is a fact of life in many organisations. We also know that Agile has a big impact on security. Some see it as bad thing, others see a great opportunity. In this talk we are going to dig a little deeper into WHY agile is even a thing, why BEING agile is different to doing agile, and what this REALLY means for cyber security and threat modeling. We’ll explore the human element, the Cynefin framework, and Wardley mapping, and finish on some practical tips to help bring focus to your threat modeling journey.

The shift to working from home and then to hybrid working have had a significant impact on security posture. But it’s not just new threats, it’s the change of “context” – who would have thought in 2019 that security awareness training should warn people about being overheard when working in the garden!? Traditional awareness, with typical quarterly or yearly content cycles, has been too slow to adapt. In this talk, ThinkCyber explore the behavioural science of helping people adapt to changing risk contexts, driving secure behaviours and empowering users to protect themselves against cyber threats that target the human user.

This talk will offer real worldexamples and ways that all organisations can apply the theories to adapt their approaches.

What is Cyber Threat Intelligence? Why should businesses and security teams care about it? Does it solve all of my problems? Join me whilst I take you on a whistle-stop tour of CTI and explore some of the reasons why it should be part of your cyber/info security strategy.

Everyone is moving to the cloud, faster than planned. Most organizations have their sights on adopting a multi and/or hybrid cloud strategy this year. Yet, 75% of cloud security breaches are expected to result from inadequate management of identities, access, and privileges by 2023 [Gartner]. So how do you protect your growing multi cloud infrastructure? AWS alone currently offers some 258 services and involves 9,286 total permissions. Remote work is adding to identities and permissions explosion -- increasing access risk. Securing and governing access is further compounded by the fact that each public cloud has its own way of managing permissions and privileges. Join Ermetic’s Or Priel, VP Product Management, for a better understanding of managing identities, permissions and privileges in AWS and Azure. We will explore: AWS IAM roles and policies and Azure RBAC Strategies for enforcing least privilege with confidence Governing access and protecting sensitive resources Mitigating multi cloud risk using automation and analytics

Mistakes are part and parcel of human nature but they don’t have to be costly and time draining. This session addresses the common issue of mistake rectification and shows MSPs how they can cover themselves against loss of information, time, revenue and reputation with IT Glue. The webinar will cover: Ensure compliance and access 30 days of documentation activity logs Identify the exact cause of documentation mistakes Rectify mistakes with deletion recovery and access to previous versions.

The session will guide you through the following features: Immutable Audit Trail and Restore Access and Version Control

Sandip Patel QC FCIArb, managing partner at Aliant, London, has been at the forefront of notable serious and organised cybercrime cases including ‘DarkMarket’, ‘the Facebook Hacker’, prosecution of members of ‘Anonymous’ for the hacking of PayPal, Visa, Sony, FBI, CIA, UK NCA, MoD etc, and ‘the boy who almost broke the Internet’.

Sandip is routinely asked to advise and assist in the creation, training, and implementation of cyber law enforcement programmes. For example, in Grenada, he devised and implemented a cybercrime training course for investigators, the A-G’s office and judges so as to give effect to new cyber legislation.

Sandip contributed to the leading textbook: Electronic Evidence, 3rd Edition, Stephen Mason

As head of Aliant’s Data Protection and Privacy Team, Sandip advises and assist organisations on data laws, privacy, protection and cyber security.

Sandip is Chairperson of the Cybercrime Practitioners’ Association.

Sandip is Chief Adviser to the OSP Cyber Academy.

Enjoy a catch up with speakers, sponsors & peers and join our entertainment from The Fanatics!

“They’re hot. They rock. They get the party started!” Highly recommended by the many clients whose events they have set off with a bang, The Fanatics are an award-winning band, and among the industry’s favourite crowd-pleasers. With a repertoire spanning funk, soul, rock & pop, with killer male and female lead vocals, The Fanatics are a party powerhouse guaranteed to rock your dancefloor.
Recent gigs include the 2019 Gymnastic World Cup, where they performed for 16,000 people at the NEC, and 2 million BBC viewers.