Chicago CISO Executive Summit

Kevin Novak struggled for years to gain support for implementation of cyber security controls because of a traditionally siloed approach towards responsibility for cyber protection. Diverging from the traditional approach of keeping cyber security the problem of the information security department, he’s helped his business evolve to think of information security is a fundamental, integral part of business. By establishing an environment where everyone owns risk, Novak has ensured other areas of the business understand the necessity of common ownership. Join this session to learn how to partner with leaders across the business to make security a collective effort.

How can security leaders best use metrics to paint the picture of risk for the organization? Join this interactive session where Arlan McMillan, CSO of Kirkland and Ellis, and Fawaz Rasheed, CISO of Trustmark, deliberate and discuss the merits of qualitative and quantitative metrics and the ideal use cases for each category. Throughout the session, the pair polls the audience to find consensus on how to best use metrics in the real world. 

Organizations have scrambled to meet the data protection regulations set forth by the EU, taking effect on May 25^th, 2018. Now that GDPR has taken effect, where does your organization stand – and what’s next for meeting requirements? Joe Sturonas from PKWARE shares common successes and pitfalls organizations faced on the journey to be compliant, and where security executives go from here to avoid regulators and auditors knocking at their door.

Cyber exposure is all about coverage – ensuring that you’re measuring the right things to secure the business. Equally important, defining your operational metrics creates a strategic baseline for a business discussion between the CISO, the CIO and the business, translating raw security data into a common language for communicating your security program goals and needs. Join us as we discuss how building the right approach to operational metrics enables organizations to better understand and address their cyber exposure gap to best defend the modern attack surface.

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: Tom Ward at 971-271-6883 or tom.ward@evanta.com.

In a recent survey 57% of security professionals rated their organization’s ability to operationalize threat intelligence as “below average,” while 84% of organizations indicated threat intelligence is “essential to a strong security posture.” Given the number of signals, it’s easy to get lost in a sea of noise. Security teams must be able to rapidly and effectively translate large volumes of threat information into intelligence to help detect threats. Richard Rushing discusses the concept of threat intelligence, what it means and why it’s crucial to have context to understand which signals are highest priority, why, and what actions to take.

Improved breach detection and threat response are good reasons to up level your security operations center (SOC) from basic monitoring and response to advanced analytics and threat hunting. Automation and orchestration of tedious steps and workflows can increase SOC incident capacity, focus resources, and shorten time to resolution. Effective strategies reduce false positives, blind spots, and data silos to create headroom for more proactive SOC activities — the elusive next-gen SOC. Learn ways to apply automation to the NIST 800 framework from better preparation using dynamic discovery, automated classification of critical assets, and behavioral baselining to anomaly-driven threat detection and real-time investigations.

How can an identity-aware enterprise improve your risk posture? It is estimated by 2021, organizations with complementary/integrated identity governance capabilities across applications and files will suffer 60% fewer data breaches. During this discussion, we will talk about how organizations are leveraging identity to govern access across all users, applications and data while also strengthening and maximizing their investments in existing security solutions, like SIEM, PAM and DLP.

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: Tom Ward at 971-271-6883 or tom.ward@evanta.com.

Your team discovers a potential breach. Now what? For many organizations, it means smart people go into a room and try to figure out what to do. Manual processes for responding to security incidents simply can’t keep up with attackers. Building a security response runbook while layering automation and orchestration where appropriate is emerging as the winning strategy. But how do you get started? What do you prioritize? Join ServiceNow for a discussion on best practices around adding workflows, automation and orchestration to your security incident-response plan.

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: Tom Ward at 971-271-6883 or tom.ward@evanta.com.

Automation and globalization have made industries more susceptible to security incidents and attacks. The drive for efficiency and value creates continuous development in automating processes and AI. The increased dependency on IT amplifies the chance of an attack on our data. The interest from governments and regulators in the stability of core infrastructure services across the globe shows how we are becoming increasingly aware of the threats that come with this new world. From the CEO’s perspective, Andrej Bolkovic shares his thoughts on how organizations can increase dependability and stability through security – and how, if not addressed properly, the threat is far greater than what we have seen so far.