Agenda

Login and Networking 

Chairman's Welcome

► Leadership in Security 

For CISOs, an increase in the rate of large-scale attacks may have one prominent hidden benefit: their boards are now taking digital risk very very seriously. With cyber risk now considered one of the key risks a business should be wary of, how should cybersecurity professionals display leadership? How is talent sourced and retained? How do we bridge the gap between security and 'the business'?

• Kaj Paananen, Head of PSIRT, Hitachi Energy
• Jeevan Singh, Head Cyber Security, Nokia Technologies
• Harri Hautala, RISO, Handelsbanken

► Building Cybersecurity Immunity to Ransomware with PAM 

James Maude, Lead Cyber Security Researcher, BeyondTrust

• Explore ransomware attacks and how you can protect your environment by making it inhospitable to them
• Learn 6 things to know about Ransomware
• Takeaway realistic security practices you can implement to protect against ransomware 
• Understand the role of PAM (privileged access management) in mitigating the risks of ransomware and other cyber threats with a powerful, blended defense 

► Ransomware in Focus: How AI Surgically Contains the Threat 

Mariana Pereira, Director of Email Security, Darktrace

• In the immediate aftermath of a ransomware attack, executives too often face a difficult dilemma: either pay a ransom, or shut down critical systems and services. In today’s increasingly complex digital ecosystems, the collateral damage that ensues from ransomware attacks can be broad-ranging and destructive, with organizations taking days, weeks, or even months to recover.  
• Join this presentation to learn how Self-Learning AI is helping thousands of organizations fight back against ransomware. We’ll discuss: 
• The impact of ‘double-extortion’ ransomware and ‘ransomware-as-a-service’ 
• Real-world examples of ransomware detected by Self-Learning AI 
• How self-learning AI responds proportionately to ransomware, thanks to its deep understanding of an organization’s pattern of life 

►Digital Identity and Implications on Security 

Geir Arild Engh-Hellesvik, CISO, Vy

• Analysing Digital identity systems and risk 
• Focusing on customer journey and experience 
• Vy's experience with digital identity and considerations to make when designing and choosing solutions

► Education Seminar Session 1 

Delegates will be able to choose from the following sessions:

• Ransomware: Tactics, Techniques and Detection, Sally Vincent, Senior Threat Research Engineer, LogRhythm
• Leveraging IAM for Effective and Efficient Threat Mitigation, Lonnie Benavides, Head of Infrastructure and Application Security, OneLogin

Networking Break 

►Learning from experience: building best practice incident response 

Goran Radosavljevic, Head of Disaster Recovery, A.P. Moller – Maersk

• Identifying the flaws in existing incident response plans and processes
• Adapting to an evolving threatscape, including nation-state actors
• Are IR and cybersecurity teams too siloed? Breaking down the barriers.

► Q2 Malware Trends: Ransomware, Targeting of Linux Systems, and Botnet Evolution

Nour Fateen, Senior Manager of Sales Engineering, Recorded Future 

• Join our quarterly series in analysing trends in malware use, distribution, and development. 
• Find out how Insikt Group uses the Recorded Future® Platform to examine major trends to malware impacting desktop systems and mobile devices.
• Discover the tactics, techniques, and procedures (TTPs) that had a major effect on technology. 
• Learn how threat hunters and security operations centre (SOC) teams can strengthen their security posture by prioritising hunting techniques and detection methods based on this research and data.

►How AI based ‘Threat Detection & Response’ finds Ransomware

Kristofer Berg, Regional Sales Manager, Vectra

• How prepared is your organisation to detect and respond to a ransomware attack
• What approaches other organisations are taking to stop ransomware gangs
• How to detect and respond to Ransomware before it impacts you

►Trusted Computing and its Application in Preventing ECrime

Dr. Ian Oliver, Technical Staff (Cybersecurity), Nokia Bell Labs

• The shift from malware to Supply chain attacks in the domain of ‘nation state actors’. 
• How effective is TPM 2.0 in addressing these attacks.
• Higher level services and integrating technology into IoT, Edge Cloud and communications.
• Case studies from safety critical domains such as medical and railway systems. 

► Education Seminar Session 2

Delegates will be able to choose from the following sessions:

• Breaking the Chain: Hindering the Ransomware Killchain, Todd Carroll, CISO, CybelAngel
• How to protect your data from creation to sharing, Nick Hogg, Director, Technical Training, HelpSystems

Networking Break 

►Security is Business

Dennie Karlsson, Group CISO, Dustin

• The reach and purpose of governance and compliance frameworks
• Security and risk models
• Changing perspective on how to present security risks

► Selling Breaches - the transfer of network access on criminal forums

Paul Prudhomme, Head of Threat Intelligence Advisory, IntSights

• The sale and purchase of unauthorized access to compromised enterprise networks have become significant enablers for criminal cyber attacks, particularly ransomware infections.
• Some criminals specialize in network compromises and sell the access that they have obtained to third parties, rather than exploiting the networks themselves.
• By the same token, many criminals that exploit compromised networks, particularly ransomware operators, do not compromise those networks themselves but instead buy their access from other attackers.
• These exchanges on underground criminal websites enable specialized criminals with complementary skills and resources to maximize the severity and impact of the underground criminal ecosystem and the criminal kill chain.
• This specific variety of criminal market offerings is less well-known than others, such as the sale of compromised bank cards from retail & hospitality breaches.

► Critical Infrastructure Protection by OPSWAT-Live Demo

George Chereches, Sales Engineer Team Lead, EMEA, OPSWAT

• Secure files transfer in critical Infrastructure
• Breach Prevention with Multiscanning
• Cybersecurity Compliance
• Digital Perimeter Control with Automated Device Blocking
• Secure File Transfer with Automated Media Blocking

► Education Seminar Session 3

Delegates will be able to choose from the following sessions:

• An Alert Has Fired, Now What?, Alex Kirk, Global Principal, Corelight
• Cisco SecureX + Kenna Security: Radical Simplification in the New Era of Cybersecurity, Stephen Roostan, VP EMEA, Kenna Security

Networking Break 

►Securing your products and your people while keeping them motivated

Connie McIntosh, Head of Security Assurance, Ericsson

• Analysing security threats in the product development lifecycle
• How to improve security issues faced 
• Motivating and securing your staff in the current threat landscape 

►Two Cases for Measuring Cyber Risk Appetite 

Simon Collins, Director, Head of Cybersecurity, Allianz Global Investors & Brian Cooke, CISO, Permanent TSB

• Join this session to hear two alternative approaches to measuring cyber risk appetite. 
• One approach will focus on the sophistication of the attackers, the other will be based on key risk indicators.
• Both approaches will be explored, followed by a discussion of the strengths and challenges of each.

►Why Maintaining an On-Prem Paradigm in the Cloud Will Not Work

Luke Hebbes, Head of Risk and Cybersecurity, HSBC

• Banks used to be about the safe storage of your money and valuables, with physical safes and cash. Now the vast majority of transactions are electronic and banks (and other FS companies) are primarily technology companies. This was a different approach and requires a different mindset.
• The technology doesn’t isn’t the same and the models don’t work: addressing the switch from on-prem to the cloud.  
• Rapid adoption of SaaS and cloud can cause issues with unstructured data. How do you provide Data Integrity and full lifecycle data management in the cloud and prove it to the regulators/auditors?
• What in your threat model that indicates managing your own keys for a SaaS system is significantly reducing your risk?
• Addressing issues that appear when moving from a  quarterly release cycle to cloud  technologies and agile development with multiple intra-day releases.

Chairman's Closing Remarks 

Networking Break 

Conference Close