It has been said that we operate in five domains — air, land, sea, outer space and cyberspace. Cyberwar, defined as digital attacks in cyberspace from a lone individual, terrorist group, or nation-state, has been called ‘the new face of warfare.’ In reality, isn’t this new dimension of warfare really an old and familiar battleground whose lines were drawn more than 30 years ago? An untamed digital-fabric frontier which led to the evolution of today’s cyber warrior — the information security professional.

Join Roy Mellinger, VP and CISO of WellPoint as he provides an historical perspective of this digital battleground and the evolution of information security as a profession.

The security industry has demonstrated an enduring resiliency and ability to innovate that has made IT safe enough to transform the world. But today we face harsh realities. Never have we witnessed so many high-profile cyberattacks than in the past year and never have the attacks been as targeted. So, what do we do now? Just as our adversaries have taken advantage of the sheer speed and availability of information on the Internet, we must do the same. In this session, Dave Martin will share how we can unearth the wealth of intelligence buried within those very same infrastructures and how CISOs can use that intelligence to our advantage. Martin will discuss how we must change our conventional approach to security to an intelligence-driven approach in order to continue building a trusted digital world.

It is now clear that mobile technologies are not only here to stay, they are the future of business. Information security leaders are no longer concerned with ‘if’ an organization will want to embrace these technologies, rather whether or not they will be involved with the strategy to ensure the risks are known and the appropriate controls are in place.

Enabling mobility while maintaining security, in any corporate environment, can be challenging. In a conservative, risk-averse organization such as Humana, it can be downright daunting, yet Chuck Deaton and his team have done just that. Join Deaton to learn how Humana has developed a secure mobile and BYOD strategy that is keeping its employees, consumers and regulators happy.

A CISO’s work is never done, it would seem. As if securely managing the growing demand for mobile devices; securing a quickly evaporating network perimeter; cultivating a culture of security throughout the enterprise; and safeguarding against competitor, nation-state, and for-profit APT weren’t enough, information security leaders are becoming increasingly concerned about their future talent pool. Perhaps the University of Cincinnati’s CISO, Kevin McLaughlin can help.

In addition to his role as CISO, McLaughlin also teaches graduate courses on information security at the University of Cincinnati. McLaughlin will offer his dual insights as a CISO and one who works with the next generation of information security leaders to host an interactive Boardroom discussion focused on managing the talent pool of tomorrow.

Due to the format of the Executive Boardroom session, there are a limited number of seats available. Seating priority will be given to CISOs. To reserve your seat, please contact Scott Smejkal at 503-972-4452, or scott.smejkal@evanta.com. Sponsor participation is limited to Boardroom sponsor attendees only.

How do you eat an elephant? One bite at a time. This cross-industry panel will bring together global information security leaders to discuss the seemingly unsolvable and elephantine topic of global data privacy.

Causing nothing but frustration, issues such as corporate awareness and policy, vendor assessment, data management and a constantly changing international data-privacy landscape present information security officers with an uncountable number of moving targets, each with their own unique challenges, each presenting another hurdle to doing business globally. Join Jackie Johnson of Procter & Gamble, Brian Minick of GE and Marc Varner of McDonald’s for this interactive global data-privacy discussion as they analyze this seemingly unsolvable puzzle and attempt to define practical first steps and best practices to overcoming the beast that is global data privacy.

The bad guys are already inside your network — if they want to be. Given today’s threat landscape of countless endpoints and seemingly as many attack vectors, this is quickly becoming a new reality to many information security leaders. Whether you subscribe to this line of reasoning or not, one thing remains clear — your network is constantly under attack and CISOs must be prepared to manage a breach. Join Craig Hoffman as he shares insights into best practices for breach response preparation and management, once an event has been detected.

Session discovery topics:

• Proactive risk avoidance strategies
• Identifying the right forensic team and other vendors
• Managing the notification process to affected individuals
• Navigating the many complexities of regulatory compliance

The National Cyber Security Council is a joint association comprised of federal and private sector information security executives. Its purpose is to provide experts a private and secure forum that allows ‘white hat’ individuals with specific information of known vulnerabilities or solutions, to communicate in a ‘safe house’ without fear of retribution. Committed to encouraging full disclosure of vulnerabilities and bold innovation for defenses, The National Cyber Security Council believes that only via open, candid and even anonymous but secure communication, can we successfully counter malicious cyber-attacks in the future.

Join U.S. National Cyber Security Council Senior Advisor, Israel Martinez for a special lunch keynote presentation on the public and private impacts of cyber warfare and what the Cyber Security Council is doing to fight it.

The CIO/CISO relationship will forever be critical to a CISO’s success, but with the evolving role that information security is playing in the corporate world, more relationships are coming into play. Interfacing with other executives is a challenging, but necessary, development in the CISO role, and sustaining those relationships is key to ensuring your future success. If mastered, those relationship-management skills can also translate into greater business success. Join Jon Moore of Humana, Julie Talbot-Hubbard of The Ohio State University and moderator Steve Collignon of Cardinal Health as they share their relationships with other executives within their organization and the ways that information security and other departments are influencing one another.

How do you exponentially raise the bar for security without also exponentially impacting business processes and user productivity? This is challenging enough to start with, but when your business partners have different security demands and tolerance levels, it becomes even more difficult. Lori Anello will share the approach that the GE IT security team is taking to create such an environment using tiered security zones. By leveraging technologies such as 2-factor authentification, virtual desktops, DLP, 802.1x network access controls, traditional perimeter intrusion prevention and FWs, GE has created a cross-enterprise security environment that allows greater end-user flexibility and provides security controls that match data-sensitivity needs.

Join Anello as she discusses the challenges encountered and the lessons learned while implementing such a complex security program across the disparate GE corporations.

You are invited to join discussion leader Mike Wade and moderator Marc Benoit in this interactive, executive boardroom. We will discuss how enterprise applications, users and their devices intersect with security and productivity as well as strategies for embracing new technologies without taking on new risk.

Session discovery topics:

• Keeping your enterprise productive while defending it from a new breed of sophisticated threats
• How internal users and external threats can skirt your security using enterprise applications
• The impact of the growing popularity of SSL to enterprise security and end-user privacy
• Practical security strategies to enable technologies while combating threats

Due to the format of the Executive Boardroom session, there are a limited number of seats available. Seating priority will be given to CISOs. To reserve your seat, please contact Scott Smejkal at 503-972-4452, or scott.smejkal@evanta.com. Sponsor participation is limited to Boardroom sponsor attendees only.

When English author and philosopher Sir Francis Bacon wrote, “knowledge is power” more than 400 years ago, he likely did not have CISOs in mind. Today, however, few words ring more profoundly for information security leaders who have begun looking to their own data to strengthen their security programs. How much stronger could these programs be if they leveraged the knowledge of an entire community?

Ohio CISO David Shaw has been working with Ohio Homeland Security and MS-ISAC to develop a portal for CISOs — both public and private — to share cybersecurity information. Join Shaw as he provides insights on how this portal, and the desperately needed collaboration that it will provide, can bolster your security programs, and learn what you can do to assist in its development.