Agenda

Login and Networking

Chairman's Welcome

► Information security ecosystem - Secure digitization with structure

Sebastian Dännart, Deputy Head of Security and Information Security Officer, Papierfabrik Louisenthal GmbH

• How do I bring order to the jungle of security measures?
• Security by Design also in digitization - who are my stakeholders?
• Standard architectures as anchors in digitization

► Reduced risk and improved user experience for Customer Identity Access Management

Mathias Schollmeyer, CISSP, Principal Solutions Consultant, LexisNexis Risk Solutions Group

• Create an improved, frictionless user experience
• Control your own risk appetite
• Increase threat detection capabilities
• Replace traditional possession factors with passive authentication

► The Enemy within.

Abdelkader Cornelius, Threat Intelligence Analyst, Recorded Future

Cybercrime services of all kinds are available on multiple Dark Web forums and social media channels. But did you know that you can also buy details of insiders with daily access to your critical infrastructure? In this presentations:

• get an insight into current offers from malicious insiders
• learn what it costs to buy or gain access through a dissatisfied employee
• understand which are the most  affected industries
• learn how you can track this kind of threat and be notified in real time

► Cybersecurity in an Automotive World

Peter Morton, Senior Cybersecurity Engineer, Mclaren Automotive

• In-vehicle networks and their security risks: outline of a typical in-vehicle network topology.
• Assessing the attack surface of a typical modern vehicle.
• Examples of vehicle hacks.
• How to improve vehicle security.
• Incoming regulation and legislation.

► Education Seminar Session 1

Delegates will be able to choose from the following education seminars:

• Effective security: Least Privilege as an important part of your PAM strategy - Mohamed Ibbich, Senior Technology Consultant, BeyondTrust
• Internet Isolation: No Surrender to Cyber Criminals - Brett Raybould, EMEA Solutions Architect, Menlo Security

Refreshments and networking

► How to build your IT Security Taskforce

Dr. Enrico Fontan, Head of IT Operation, Repower

• How to leverage the IT skills inside the company to create an Incident Response team
• Understanding IT Security as Mindset
• Developing the necessary IT skillset for a perfect team
• Building a skillset as a team effort

► Check Point HARMONY is revolutionizing the protection of users, devices and access

Yves Jonczyk, Harmony Sales Expert, Check Point

• Significantly more employees work from home and need to be protected right there
• Attackers are adapting to the situation and targeting remote endpoints
• IT departments are looking for consolidation and simplification due to increased complexity
• Outlook for SASE, ZTNA and Contextualized Access in VPN-less infrastructures

► Ransomware in Focus: How AI Stays One Step Ahead of Attackers

Paul Fischoeder, Cyber Security Account Director, Darktrace

• Ransomware Trends and Impact
• Examples of sophisticated and expensive ransomware attacks
• How self-learning AI helps companies of all industries to fight back

► A Peek into the E-Crime Ecosystem

Jörg Schauff, Strategic Threat Intelligence Advisor, CrowdStrike

• Services in the Deep- and Darkweb
• The value chain of the criminal ecosystem
• Enhanced ransomware activities
• The value of Threat Intelligence for security teams

► Education Seminar Session 2

Delegates will be able to choose from the following education seminars:

• Attack on Smart Buildings: How IoT means that you have to re-plan your IT security strategy - Abdullah Kartal, Account Executive, CybelAngel
• Tackling Security in Hybrid and Multi-Cloud Environments with Confidence - Joe Partlow, CTO & Ashok Sankar, Vice President of Product Marketing, ReliaQuest

Lunch and networking break

► How to successfully rob a bank!

Kashif Husain, VP, Information Security Officer, Nomura Bank

• The majority of crimes in our industry are initiated with cyber-attacks on people - however, our people can also be our most valuable assets
• Walkthrough of multiple "bank robbery" scenarios to focus on a real event from 2016, where $1 billion were at stake being stolen from a bank
• How human vigilance can counteract human error

► Presentation: SUNBURST - Chronology of a digital nightmare

Matthias Canisius, Regional Director DACH, SentinelOne 

• What is known about one of the most effective cyberattacks in recent years?
• How could it go undetected for so long despite the widespread use of Threat Intelligence and EPP / EDR solutions?
• How can companies protect themselves effectively against such attacks?

► Selling Breaches: The Transfer of Network Access on Criminal Forums

Paul Prudhomme, Head of Threat Intelligence Advisory, IntSights

• Means by which criminals transfer network access to criminal buyers, such as VPNs, web shells, or RDP credentials;
• Typical use cases for transferring network access to other criminals, particularly the deployment of ransomware;
• Examples of targets of and prices for network access on sale on criminal forums; and
• Discussion of why criminals often sell their access to third parties, rather than monetizing it themselves.

Refreshments & networking

►Stories from the Front lines: Negotiating with a Ransomware Criminal 

Moty Cristal, CEO, NEST, and Gal Messinger, Global Head of Security, Signify

• Mistakes are an essential element in managing any human crisis, let alone in ransomware and cyber extortion incidents
• Based on years of operational experience in cyber crises, and using a variety of real life examples, this session will present the common mistakes made during ransomware crises and how to prevent them
• Hear first hand experiences in successfully negotiating with ransomware criminals 

► Engineering for Resilience: Cybersecurity in Infrastructure

Johannes Braams, Senior Cybersecurity Advisor, Royal Haskoning DHV

• What is a complex system?
• How complex is a tunnel system?
• Resilience in the lifecycle of assets.
• Various approaches to designing and operating complex systems.
• Risk analysis in the light of IEC 62443.
• Mitigating measures.

► Why You’re Not Making Enough Mistakes

Bruno Kalhøj, former Head of Division, Security & Safety, European Central Bank

• Research shows that people in a High Performing Culture learn more effectively from their mistakes than from their successes
• What are the practical steps involved in moving from a culture of blame to one of trust and transparency?
• Case study from a central bank

Closing Remarks

Refreshments and networking

Conference Close