Agenda

Registration and Networking Break 

Chairman's Welcome

► Perception vs Reality in cybersecurity

Ignacio González Ubierna, Deputy Director, NCC-ES de INCIBE

► Strengthening Threat Detection and Simplifying Investigations with Corelight

Eric Le Doucen, Regional Manager, CoreLight & José Luis Pozo, Presales Technician, Dotforce Spain on behalf of Corelight

• How to strengthen threat detection
• Techniques for a robust threat detection
• Simplifying investigations following an attack

► Securing Smart Connected Cities

Fernando de Pablo Martín, Director General, Madrid Digital Office & José Ángel Álvarez Pérez, Head of Madrid Cybersecurity Center, CCMAD

• Building trust between citizens, companies and the city
• Mitigating risk from external suppliers (traffic lights, lighting, energy, waste management, etc)
• Cybersecurity of IoT and 5G

► Education Seminar Session 1

Delegates will be able to choose from the following education seminars:

• How to minimize data security risk and protect your business, Luis Pedroche Montes, Business Development Manager- ALSO, on behalf of ManageEngine
• Hack the brain: Social engineering innovation in 2023, Shirley Hora, Security Awareness Expert, SoSafe

Networking Break

► Technology Panel Discussion

Laura Parra, Global Director of IT Strategic Projects, Cellnex Telecom (Moderator);
Jorge Pardeiro, Head of Security Architecture, Banco Sabadell;
Enrique Cervantes Mora, CTO & CISO, Fintonic;
Ramon De La Iglesia Vidal, Global Head of Governance, Risk and Compliance (GRC), Santander Consumer Finance

• Risk on third party integrations (different integration standards, APIs, and so on)  
• Risk on Data sharing (related with the integration with the third parties, the store of sensitive Data etc)  
• Secure by Design (ZTNA, Microsegmentation, Security Awareness) to manage cyber risk

► Empower your Security Team with Exposure Management and Threat Hunting Capabilities

Fernando Meléndez, Senior Enterprise AE, Censys

Security professionals have to deal with an increasingly complex security landscape, between an uptick in ransomware attacks, a shifting geopolitical landscape, and migration to the cloud, there is a lot the security teams have to consider. All these growing challenges overburden security professionals and make organisations more vulnerable to attacks.

During the presentation, we will be answering the following questions:

• What is happening on the internet? How have security complexity, attack upticks and shifting geopolitics changed the playing field?
• How has this impacted your organisational vulnerability?
• How to make the shift from stretched to strong by equipping your team with better exposure management and threat hunting capabilities

► Education Seminar Session 2

Delegates will be able to choose from the following education seminars:

• Hacktivist Operations Funding, Juan Odriozola, Country Manager Spain & Portugal, KELA
• Perception vs Reality: A Data-Driven Look at Open Source Risk Management, Fernando Faelli, Regional Director (Iberia), Sonatype

Lunch and Networking Break 

► Moving forward cybersecurity regulations: NIS2 and DORA

Ramon De La Iglesia Vidal, Global Head of Governance, Risk and Compliance (GRC), Santander Consumer Finance

• European Regulatory Framework, roadmap and dates
• Time context and scope of the regulation, who is affected?
• Similarities and differences between the regulatory framework
• Pillars of the regulations
• The easiest and the most difficult, a risk approach

► Prepare for Tomorrow's Threats, Today: A change in approach

Samuel Marin, Sales Director, SentinelOne

• Knowing your cyber enemy (KYCE) is half the battle won, the current approach to cybersecurity is like going to a Gunfight with a Sword in hand
• The attackers are increasingly using AI to launch attacks, collaborating with each other and the defenders are still using the manual approaches
• This presentation will talk about the change in approach such as 'Think Like an Attacker, Act Like a Defender', 'Bring your Security Forces Together' and 'People centric to Technology Centric approach'

► Empowering Internal Assurance through tech

Iván E. Yemez, Senior Implementation Consultant, OneTrust

How can we meet the needs of our stakeholders? It's a question that every assurance function grapples with whenever a new regulation is announced. In a dynamic and demanding environment, it can be challenging to address everything promptly and effectively, particularly with limited resources. The role of emerging technologies becomes paramount in the process of identifying, assessing, documenting, mitigating, and reporting an organisation's risks.

• In this session, we will delve into emerging trends and successful case studies highlighting the application of technology in risk management
• Join us as we explore the transformative power of technology in navigating the ever-evolving landscape of risk management."

► The New Old OT Scenario and Cybersecurity Risks

Javier Sánchez Salas, CISO, ENGIE España

• Defining a Scenario and a Framework
• Overcoming difficulties in deploying classic Cybersecurity measures>The benefits of being threat-led
• OT Cybersecurity best stakeholders

Networking Break

► CISO Panel Discussion

Jesús Mérida Sanabria, CISO, Iberia (Moderator);
José Ángel Álvarez Pérez, Head of Madrid Cybersecurity Center, CCMAD;
Rafa Tenorio, CISO, Iberdrola;
Jesús Valverde Romero, Head of Information Technology & Cybersecurity, ISEMAREN;
Ramon Ortiz, Security Manager, Mediaset

• Integrating cybersecurity into wider enterprise risk management frameworks
• Becoming a more strategic partner to the business?
• Building resilience against third-party security threats
• Web 3.0 and the next generation of the internet: securing new technologies and services

► Bypassing Multi-Factor Authentication (MFA) via Phishing Techniques

Raj Sandhu, Ethical Hacker, Contracted to World Health Organisation;
Manit Sahib, Ethical Hacker, Contracted to Global Fund

• Introduction to MFA Bypass Phishing Techniques
• Live Demonstration of MFA Bypass Attack
• Countermeasures and Best Practices
• Conclusion of Demo and Presentation

Conference Close