Agenda

Login and networking

Chairman's welcome

► 2021 Cyber Threats: The View from Denmark

Thorsten Foldager Johnsen, Head of Threat Assessment, Danish Center for Cyber Security

The latest assessments of the cyber threats against Denmark, with a focus on cybercrime targeting private companies and what organisations can do.

• Cyberespionage: a threat to your company?
• Cybercrime: the development of organized cooperation between online criminals, new tools, and attack techniques.
• Cybersecurity: a decision maker’s responsibility.

► Navigating Enterprise Security in a Post-Compromise Reality

Jamie Moles, Senior Security Engineer, ExtraHop

• Every organization gets compromised - it’s how you fast you detect and respond to an incident that counts.
• This is especially important when you look at trends like the overnight move to remote work, the rise in encrypted traffic and acceleration of cloud adoption, as well as the proliferation of enterprise IoT that have expanded the attack surface and complicated the job of security professionals.
• We’ll explore those trends and the opportunity that lay ahead for security teams post-compromise to prevent an event that results in an outage or an incident from becoming a full-scale data breach.

► Collaborative approach to Digital Identity and Behavioral Biometrics to combat fraud and cybercrime

Emilio Rocchi, Senior Solutions Consultant, Lexis Nexis Risk Solutions

• Risks of the current digitalization of processes, services and solutions in all industries
• Exponential growth of fraud risks, cybercrimes and financial crimes
• The need for a holistic solution for combatting these threats of fraud and cybercrime whilst protecting the seamless customer experience
• Leverage the intelligence derived from digital identities, behaviour biometrics and behaviour analytics to tackle fraud and cybercrime.

► Protecting the supply chain from cyber threats - why international politics matters for your company

Jan Lemnitzer, Cyber Security Policy Expert, JML Cyber Policy Consulting, Department of Digitalisation, Copenhagen Business School

• We have long known how vulnerable we all are to cyber criminals and state hackers, but recent events in international politics have led to revised risk assessments by the national security community. They all point to one conclusion: something needs to be done about cyber threats, and the protection of critical infrastructure including their supply chains should be a priority.
• Regulation is coming: the Biden administration has announced action and the EU is already working on it with its draft NIS 2.0 regulation. The new draft released last December includes a new duty for providers of critical infrastructure to manage cyber security risk in their supply chains.
• But how can supply chain cyber risk be managed for hundreds of suppliers when many smaller companies lack a capable IT department? Existing methods involving questionnaires are slow and cumbersome, and require full audits for verification. New startups offering outside-in cyber security risk assessments and third-party management tools are rapidly gaining market share, but can they give us the full picture?
• Possible solutions: analysis of current efforts in EU states to set up novel cyber ratings systems for their national critical infrastructure and the parameters of a future solution to this conundrum.

► Education Seminars 1

Delegates will be able to choose from a range of topics: 

• Internet Isolation: No Surrender to Cyber Criminals, Brett Raybould, EMEA Solutions Architect, Menlo Security

• Risk, Threat, Response: Drive Complexity, Time, and Cost Out of Your Security Program, Miles Tappin, VP of EMEA at ThreatConnect

Networking break

► Financial Services in Focus: ransomware, robotic process automation and regulation 

Johan Ericsson, Head of Information Security, Entercard Group

• Current drivers for financial fraudsters: investigating rogue actors and protecting your “low-hanging fruit.” 
• Ransomware: what are the focused, sophisticated methods organised criminals are now using to get a better ROI for their efforts? How should Information Security Teams respond?
• Embracing robotic process automation and cutting-edge applications. Is it time to switch from DevOps to SecDevOps? 
• Regulatory compliance: unique challenges within the financial services, and harnessing the benefits.

► TAKEN : With a Vengeance

Thom Langford, Security Advocate, SentinelOne

"If you leave my network now that will be the end of it.  But if you don’t, I will look for it, I will find it, and I will pull that kill switch.”

In this talk you will learn:

• How to prevent you from having this conversation with cyber criminals
• Why ransomware can exploit even the smallest weakness in your security controls.
• Fundamental approaches to detect and respond to minimise and contain damage.
• How to take advantage of new services, approaches and attitudes to best curtail any ambitions you have of monologuing like a Hollywood A-lister. 

►The Value of Application Security - Getting AppSec Executive Buy In

Julian Totzek-Hallhuber, Solution Architect, Veracode

• How can you demonstrate the value of adopting or expanding your organisation’s Application Security program when there’s a growing need for all types of cybersecurity, as well as intense competition for your critical tech budget?
• Join this session to learn how to make the case for AppSec in a way that resonates with executives
• Gain an understanding for which AppSec metrics executives will care about
• Find out how to tie AppSec to corporate goals and priorities

► Changing Cyber Landscapes: The Battle of Algorithms

Mariana Pereira, Director of Email Security Products, Darktrace

• Among rapidly evolving technological advancements, the emergence of AI-enhanced malware is making cyber-attacks exponentially more dangerous and harder to identify. In the near future, we will begin to see supercharged, AI-powered cyber-attacks leveraged at scale.
• To protect against offensive AI attacks, organizations are turning to defensive cyber AI, which can identify and neutralize emerging malicious activity, no matter when, or where, it strikes. 
• In this session, we will explore the paradigm shifts in the cyber landscape and the advancements in offensive AI attack techniques and examine real-world examples of emerging threats that were stopped with Cyber AI.

► Education Seminars 2 

Delegates will be able to choose from a range of topics: 

• How Big is Your 2021 Misconfiguration Budget? Andy Young, Security Solutions Architect, KeySight Technologies 

• Next Generation Defence: Using Hackers to Beat Hackers, Justin Shaw-Gray, Sales Director, Synack Inc. & Mark Walmsley, CISO, Freshfields Bruckhaus Deringer LLP

Lunch and Networking 

► Fighting Fatigue: How an Adaptive Information Security Team Can Keep the Business Going

Jörgen Olofsson, Chief Information Security Officer, Praktikertjänst AB

• Worker fatigue, especially on the healthcare front-line, has led to an increase in human error. Whilst awareness can help, your information security team should be prepared to accept and mitigate the impact of human error to avoid adding further burden to workers.
• At the same time, working from home is here to stay for central office workers. The change in working patterns - extended working hours and the adoption of collaborative tools has impacted network traffic and increased false positives. 
• User behaviours are no longer clear and predictive. Anomalies are now the norm - what are the best strategies for ensuring your InfoSec teams are aware of the new patterns?
• Is the answer really to initiate new policies, procedures and technology? In this period, initiating change may be destined to fail. An adaptive and considerate approach to information security will enable staff to avoid additional fatigue and keep the business going.

► How to Disrupt Adversaries With Security Intelligence

Nour Fateen, Presales Manager, UKI & META, Recorded Future

• How to detect and mitigate cyberattacks at scale.
• How to defend against adversaries constantly improving their techniques and evading defences.
• How access to security intelligence empowers organisations to learn about cyberattacks proactively and take action.

► PAM: Foundational Security For Business Transformation 

Martin Boreham, Senior Solutions Engineer, BeyondTrust

• What Is Digital Transformation and why should we care about it? 
• Why automation isn’t just for the business 
• How to mitigate identity risk with Privileged Access Management (PAM)
• How can PAM enable Digital Transformation

► Education Seminars 3

Delegates will be able to choose from a range of topics:

• Smart Buildings Under Siege: How IoT brings need to Replan your InfoSec Strategy, Todd Carroll, CISO & Julia Osseland, Product Marketing Manager, CybelAngel 

• Tackling Security in Hybrid and Multi-Cloud Environments with Confidence, Joe Partlow, CTO & Ashok Sankar, Vice President of Product Marketing, ReliaQuest

Networking break

► Motivating employees to become serious about security: mission impossible?

Leena Kuusniemi, Legal Advisor and Founder, Leegal Oy

• It’s all about access management and communication
• How thorough audits can minimize human risk.
• BYOD disasters: lessons from the headlines.
• The weakest link: how to train your most reluctant employees.

Delegates will be able to choose from a range of topics:

► The skills of the CISO: what does it take to make it in security?

Fireside chat with: Andy Dyrcz, Head of Cyber Security, Linkfire

• CISOs don’t have it easy. Achieving the perfect balance of technical know-how, business acumen, risk awareness and regulatory expertise is an uphill battle.
• And once there, the role is still often misunderstood or undervalued within the business. This is further proven by the often unrealistic requirements within job adverts in the industry.
• Organizations also need to consider how to develop the necessary skills within their security team and put measures in place to nurture the future cyber workforce.
• So, what makes for a superior CISO? And what are the steps for getting there?

Or 

► Securing third-parties and the supply chain

Fireside chat with: Dimitrios Stergiou, CISO, Trustly

• Recent high-profile breaches have reminded organisations of the inherent risks involved in outsourcing services: you are at the mercy of your own vulnerabilities as well as the vulnerabilities of others down the line.
• If security vendors are now the target of sophisticated state-actor attacks, and information service providers and government agencies are being hacked by proxy, it begs the question, what hope is there for the rest of us?
• When the security of your third-parties is just as integral as your own, what are the approaches organisations need to take to ensure a comprehensive analysis of third-party security risk? And how can we guarantee that brand, reputation, and operations are not open to compromise?

Delegates will be able to choose from a range of topics:

► How to design contractual requirements regarding cyber security

Emil Bisgaard, Partner, Poul Schmith/Kammeradvokaten

• Managing cybersecurity in supplier contracts: areas to include
• Involving relevant stakeholders and senior management in the development of contracts.
• Guidance on which cybersecurity themes to consider in supplier contracts and how to implement cybersecurity in supplier contracts.

Or

► Surviving the cybersecurity revolution

Simon Brady, Managing Editor, AKJ Associates 

• Why the return to work is a dangerous moment for security
• Why DX means no more tolerance of failure at the basics
• Left-field lessons from a year of breaches
• What our Nordics research reveals about the region’s CISOs

Closing Remarks and Networking Break 

Conference Close