UK & Ireland CISO Community
Executive Summit

Please join the Summit’s Welcome Reception, an exclusive networking reception for all CISO attendees to launch the event with an evening of drinks, gourmet food stations, and plenty of peer networking at The Orangery, Holland Park, London. A hidden gem located in one of London’s most beautiful settings, situated within the grounds of Holland Park.

In today’s competitive environment, an organisation’s ability to execute successful mergers and acquisitions (M&A) has become a key differentiator. Yet the public nature of an M&A increases the potential for ransomware attacks. An organisation's ability to consolidate identity and access management (IAM) quickly during an M&A process can be a key tool in increasing the agility of an M&A and therefore reducing exposure to attacks. In this fireside chat, we will walk you through a successful M&A, where identity was quickly synchronised, leading to a secure M&A.

Join this fireside chat to discuss:

• M&A identity tales – best practices and lessons learnt
• Simplifying joiners, movers and leavers from two organisations
• Addressing Shadow IT and third-party access during an M&A

Despite the challenges posed by organisational and technological silos, the modern CISO is stepping up to the plate. Impactful digital transformation through intentional technology decisions can minimize organisational obstacles.

Join this fireside chat to discover:

• Embracing digital transformation to stay competitive and secure in today's business world
• Leveraging SASE to simplify your security architecture, level-up compliance monitoring and improve visibility
• Driving meaningful change with a holistic approach that considers not just security, but also organizational culture, processes, and people

Almost every enterprise CISO is facing headcount freezes or budget cuts, often both. But attack surfaces and software supply chains keep growing, and threats are continuously evolving, creating the perfect recipe for cybercriminals to strike. With more to defend, and with fewer resources, how do you stay ahead?

In this boardroom, we’ll all share insights and best practices to identify what you can stop doing, what you can do more of, and what you can achieve with outside help. We’ll discuss the security vulnerabilities that need to be considered across your expanded attack surface and the innovative approaches you can take to maximise your cybersecurity budget and drive up your resistance to attack.

Join this Executive Boardroom to discuss:

• How attack surfaces are evolving and the challenges it poses
• How to pinpoint the most critical flaws and prioritise what to fix and why
• What to stop doing, and what to double down on, to maximise your security budget
• The most innovative and impactful approaches to drive up your resistance to attack

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: 

Luis Arango Abello at +447736473727 or luis.arangoabello@gartner.com

APIs fuel digital transformation and are core to every SaaS, web and mobile application. As API use attacks are becoming more frequent and complex, how can CISOs ensure protection for sensitive data, applications, and customers?

Join this boardroom to discuss:

• How to gain visibility to understand exposure and risk
  
• Ways to answer the “so what” for API security, including OWASP API Top 10 impacts
  
• How security and development teams can find balance

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: 

Luis Arango Abello at +447736473727 or luis.arangoabello@gartner.com

To stay one step ahead of an ever-evolving landscape of threats, modern organisations must look outside traditional IT perimeters and embrace external defence to understand the full scope of risks they face. Join Robert Hannigan, Chairman at BlueVoyant as he shares insights from the recent BlueVoyant report on external cyber defence trends, including the perspective of threat actors, what they might look to exploit and how enterprises can defend themselves. This session will cover:

• The evolution and adaptation of attacker tactics, techniques and procedures
• How to empower CISOs to be “threat informed” and take action quickly
• Recommended remediation and mitigation advice organisations should take to protect against threats

Ransomware attacks and other cyber threats have become a key business risk and the CISO’s role in reporting this risk to the board remains a critical area of discussion. As such, risk metrics play a pivotal role in shaping the outcomes of board interactions. In this interactive session, CISOs from different organisations will present short “board pitches” covering what metrics they report to their boards, followed by an open discussion.

In this conversation, you will hear about:

• The different types of metrics CISOs use to quantify risk
• How to reduce complexity to reach successful outcomes
• Best practices to gain the board’s confidence and boost your profile

In recent years, the Sygnia Incident Response Team has handled numerous nation-state attacks that employed unique attack techniques and posed new challenges to security leaders and incident responders.

In this talk we will guide you through the anatomy of a real-world high-impact attack we recently responded to including insights into attacker TTPs and processes, as well as effective response procedures. This case study will highlight the common pitfalls and key opportunities when defending against even the most sophisticated attacks.

You will come away with:

• A deeper understanding of current attack trends
• Actionable insights into the risks and vulnerabilities exploited by attackers targeting highly complex environments
• Effective defense strategies employed by leading organisations worldwide

The adoption of cloud-native technologies by businesses has been a significant challenge for CISOs, as it requires adapting to new security risks and maintaining security in a rapidly changing environment. However, many CISOs are adapting to these challenges by implementing new strategies and technologies to secure cloud-native applications and infrastructure.

In this Executive Boardroom, we'll discuss:

• With the number of cloud threats increasing and the adoption of cloud-native technologies, what are the key challenges and risks that CISOs are facing
• The importance of correlation across the entire cloud environment to prevent attacks or minimise their impact
• What strategies are CISOs adopting to transform and secure their cloud security operation model

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: 

Luis Arango Abello at +447736473727 or luis.arangoabello@gartner.com

Companies come with different baggage and mindsets towards cybersecurity. Changing employees’ attitudes in a meaningful way is an ongoing challenge and manifests in different ways across business units. Cyber consistency is key to maintaining a resilient security posture, but one size does not fit all.

Join this Boardroom to explore different approaches to making a meaningful cultural change:

• Understanding the ‘how’ of a meaningful cultural change
• Successfully implementing a DevSecOps approach
• Maintaining a robust security culture with a distributed workforce and employee turnover

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: 

Luis Arango Abello at +447736473727 or luis.arangoabello@gartner.com

Organisations’ security awareness budgets are rising as the need threat landscape grows across an increasingly distributed workforce. But after an employee has completed their awareness training, what is the appropriate consequence for someone failing to adhere to your cybersecurity policies? Consequence management is a key component in encouraging the correct cyber behaviour and deciding how strict the consequences should be is a complex question. In this panel session, CISOs from different companies will share their consequence management frameworks, followed by a discussion.

Join this session to discuss:

• Who should have the responsibility to enforce consequences
• Different approaches to consequence management – what has been successful
• Sharing best practices and lessons learned

The browser is one of the most widely deployed applications in the enterprise and has also become one of the most strategic – yet this application was never built or designed for the enterprise, as it’s unapologetically based on consumer needs and preferences. Join this session where Uy Huynh (VP of Solution Engineering, Island.Io) will ponder what if the browser was designed for the enterprise, share a live demo and ask what could this do for security, productivity and work itself.

In this session, we will share details on:

• Creating an employee experience centered on productivity and flexibility
• Reimagining how CISOs can enable users while creating unique business value
• Reducing browser risk by improving control, governance and security

A CISO’s world is complex, challenging and often exhausting. If you’re not dealing with vulnerabilities or implementing and managing security solutions, you’re navigating governance and company-wide risk perspectives. When do CISOs get a chance to breathe and beat the fatigue?

Join this peer-led Boardroom to discuss:

• Understanding the critical role CISOs can play in stress management for themselves and their employees
• Exploring how trust and openness with your team can improve well-being and mental health
• Actionable takeaways on how to manage stress within the workplace

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: 

Luis Arango Abello at +447736473727 or luis.arangoabello@gartner.com

It’s been a long-term goal of security teams to reframe how they are viewed within the enterprise, from being seen as merely a cost centre to enablers of secure business growth. Effective third-party risk management (TPRM), when done right, can promote business growth while providing much-needed security, whether you are responding to due diligence requests or providing security approval for new vendors.

Join this session to discuss:

• Executing the right level of safeguards and security domains to accelerate business outcomes
• Increasing visibility of the vendors in use to drive efficiency and identify risks
• Creating a cultural mindset change to consider third-party risk as a necessary requirement of secure business growth

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs).

To reserve your seat, please contact: 

Luis Arango Abello at +447736473727 or luis.arangoabello@gartner.com

As cybercriminal organisations become more aggressive and prolific, they also reveal more about themselves. How can we use these insights to inform our response?

Author and Investigative Journalist, Geoff White has spent years covering tech security for some of the world’s largest media organisations. In this session, he will examine how leaks, infighting, brazenness and desperation in the cyber underworld can yield valuable insights for defenders.

In this closing keynote talk, Geoff will discuss:

• Uncovering the inner workings of the cyber underworld
• Exploring how cybercriminals are revealing their hand as they engage in illicit activities
• Evaluating what this new information on cybercrime means for CISOs and their organisations