Data Breaches: Defense and Response: Chicago (Rosemont/O’Hare), Illinois
Strategies to help your organization prepare for, defend against and respond to breaches.
March 14, 2024
9:00am-5:00pm
7 CPE / 0.7 CEU / CISSP / 7 PDU Credits Awarded
Conference location: Donald E. Stephens Convention Center Rosemont (O’Hare) Illinois
Overview
It is not a matter of if, but when your organization will be breached. Against these threats, enterprises try to build higher and more secure walls around their data and networks. This seems to be a never-ending arms race, as even the most sophisticated systems may, before long, present weaknesses that malicious technology can overcome.
What You Will Learn
In this one day conference attendees will learn:
- Cyber Security & BC/DR: Recovering from Ransomware & Breaches
- Fireside Chat: Wait a minute! These Folks Have Access to Our Data, Too?
- Applying Zero Trust to Prevent and Respond to Breaches In Today’s Data Centers and Clouds
- Fireside Chat: Privacy Considerations in the Era of Data Breaches
- Aftermath of a Data Breach: Lessons Learned
- Breaches & Ransomware: How to Handle, How to Respond (Panel Discussion)
Conference Price: $299.00 per person
Each attendee will receive a certificate awarding 7 CPE credits for CISSP continuing education, in addition to 0.7 CEUs and 7 PDUs. CISSP is a registered certification mark of (ISC)², Inc.
CONFERENCE AGENDA
8:00am – 9:00am: Registration and Continental Breakfast
9:00am – 10:00am: The Breach; Risk to Consequences
Michael Neuman, Head of Information Security, VelocityEHS
How you determine whether it is an incident or a breach that may or may not involve the exposure of sensitive customer data will determine, among other things:
- Which organizations should get involved
- What actions should be taken
- How it will be resolved
- If notification is required
- Who? When? How?
How you respond will determine how you can minimize the monetary, regulatory, and reputational damages and risks to you, your enterprise, and your customers.
Neuman
10:00am – 10:30am: Refreshment Break
10:30am – 11:30am: Results of Cybersecurity Assessments – Filling the Gaps
Phillip Conrad, Senior Information Security Analyst, Purdue cyberTAP
What are some of the most common cybersecurity gaps facing organizations?
• Surprising issues among organizations
• Primary gaps found in most organizations
• Supporting organizations with CMMC readiness
• Basic process of a cybersecurity gap analysis assessment
Conrad
11:30am – 12:30pm: The Role of AI Analytics to Uplift Security Operations
Bob Hansmann, Security Products Team, Infoblox
In cybersecurity today, “AI” may be the term most used … and abused. For those trying to understand how this may impact their security stack/profile in the future, it is essential to have a grounded, real world, and near-term perspective of the potential for AI in cybersecurity. Using multiple sources of recent research data, this session will review the SOC challenges that matter, and how the current and likely future state of AI technology in cybersecurity might help. Covered topics include:
- ML vs AI: How they align, differ, and conflict.
- Chatbots and other ‘low hanging fruit’ for vendors.
- AI’s potential in triage, investigation, and response.
- The future state of SIEM, SOAR and general automation.
- Using AI to address the Top 10 challenges to SOC efficiency.
Hansmann
12:30am – 1:30pm: Lunch and Exhibit Break
1:30pm – 2:30pm: Breach Prevention – We Keep Doing the Same Things, But Expect Different Results?
Ron Zochalski,
– Cybersecurity started back in 2013… Why hasn’t Zero Trust taken off? Is it because people don’t want to change?
– Why do we continue to use the inside BS jargon no one understands then wonder why no one is listening… Sound familiar? How to understand the big picture
– Recent breach messages leaders are sending out and how to interpret them. Why is our president using TikTok? What we can do better.
– Why it is important to communicate why we do what we do and the importance of building relationships with other departments and it’s impact on your career
Zochalski
2:30pm – 3:00pm: Refreshment Break
3:00pm – 4:00pm: Strategic Defense in the Digital Age: Applying Sun Tzu’s Art of War to Cybersecurity Leadership
Randy Lee,
“In an era where cyber threats loom large over organizations of all sizes, the ancient wisdom of Sun Tzu’s “The Art of War” offers timeless strategies for understanding and combating these challenges. “Sun Tzu’s Wisdom in Cybersecurity: Mastering Self and Enemy Knowledge” is a presentation designed for executives, focusing on the intersection of classical strategy and modern cybersecurity practices. This presentation explores the top ten exploits utilized by hackers, presenting them through the lens of Sun Tzu’s core principle: the importance of knowing both oneself and one’s adversaries.”
This presentation aims to bridge the gap between technical cybersecurity challenges and strategic leadership insights.
• C-Level Executives: CEOs, CIOs, CFOs responsible for strategic security decisions.
• Corporate Leaders: VPs, directors, and senior managers involved in risk management.
• Business Strategists and Consultants: Advisors on cybersecurity best practices.
• Board Members: Those needing strategic insights on cybersecurity for governance.
• Policy Makers: Individuals shaping cybersecurity policies and regulations.
Lee
4:00pm – 5:00pm: How InfoSec Leaders & Executives are Responding to Current & Emerging Security Risks (Panel Discussion)
Moderator:
Gregg Kalman, RSM, Expel
Panelists will include:
- Jessica Boehm, IT Security Manager, Global Cyber Information Security, Gallagher
- Nic Colõn, CTO, Elsewhen MSP
- Brandon Daab, Information Security Analyst at Foundation Finance Company LLC
- Aaron Demaster, Director, Cyber Security, Gilbraltar Industries
- Thomas Freeman, Director, DFIR, & Offensive Cybersecurity, Sikich
- Danny Hetzel, Cybersecurity Engineer and Researcher, Accuray
Kalman Boehm Colõn Daab Demaster Freeman Hetzel
In this session attendees will learn from a distinguished panel of information security leaders sharing their thoughts on:
Mitigating Business Email Compromise
Responding to Ransomware
Reducing Risk to the Business in 2023
Topics covered:
How to identify leverage areas of value (reputation, regulation, revenue, resilience, and recession) for continued investment and security spending
How to assess, understand, and define security’s current and future roles in the extended enterprise
Where are security investments being made on personnel, processes, and technologies?
Exhibits
As is always the case at CAMP IT Conferences events, the talks will not include product presentations. During the continental breakfast, coffee breaks, and the luncheon break you will have the opportunity to informally meet representatives from the following sponsoring companies, who have solutions in the area of the conference.
CONFERENCE SPONSORS
