July 10-11, 2023

Location: Monterey

Join an exclusive community of C-Suite, senior executives, and accomplished VPs from the world’s leading organizations for a one-day retreat in one of California’s most beautiful places to visit: Monterey.

July 10-11, 2023

Location: Monterey

Featured Speakers

Ben Rothke
Randy Muyargas
Michael Gregson
Caroline Prieto
Zach Grieshop
Patricia Gatley

Event Agenda

Data Visibility, Compliance and Information Governance

In 2023, CISOs will prioritize adopting solutions that provide visibility into the data their organization holds, where it lives, and the risks imposed by that data. This visibility is critical for security leaders as they build programs to meet compliance requirements in a highly regulated world, and secure data in an increasingly challenging threat landscape. One of the first laws in cybersecurity is that you need to know your assets. Simply put, you can’t protect what you don’t know. Join us, as we discuss the value of data classification and information governance.

  • Moderator: Kirk Hanson, Senior Sales Engineering Managerat Splunk
  • Panelist: Greg Silberman
  • Panelist: David Kravitz, Sr. Director of Research at Spring Labs
  • Panelist: Jennifer Guerrero, Senior Counsel at Buchalter
  • Panelist: Paul Starrett, Founder at PrivacyLabs

Cyber Risk Management Will be a Top Priority for Business Leaders in 2023

When it comes to the governance and oversight of cyber risk, our system is broken. It’s no longer what it used to be fifteen years ago – we are dealing with higher stakes and fragile enterprise reputations. As a result of this, in 2023, we will see companies double down on cyber risk management. Boards will need to have a much clearer role and responsibility when it comes to the process of ensuring adequate controls and reporting cyberattacks. Cyber risk governance is not just the domain of the CISO it is now clearly a Director and Officer level concern. When it comes to cyber, plausible deniability is dead. Join us, as we discuss best practices for cyber risk.

  • Sponsor: Resecurity
  • Moderator: Christian Lees, CTO at Resecurity
  • Panelist: Zeeshan Kazmi, CISO/CIO at Zygotek, Inc.
  • Panelist: Dave Cunningham, Senior Case Manager at Alvaka Networks
  • Panelist: Laxmi Ramanath, Founder and CEO at La Meer Inc.
  • Panelist: Daniel O’Neil, CEO at PrivacyLabs

Does Compliance Stifle or Spark Innovation?

Please join us for a lively discussion about the role compliance plays in innovation. Does the need to comply with new regulations like GDPR and other data privacy laws cause businesses to choose between technological innovation and customer experience like personalization, or to find even better ways, more innovative ways to achieve business goals while protecting customers’ privacy?

  • Moderator: Michael Gregson, Business Analyst–Data Privacy at Waste Management
  • Panelist: Taylor Falls Olson
  • Panelist: Mark Willis, CISO at Bluescape Software
  • Panelist: Andre Samokish, Privacy Manager at Teladoc Health
  • Panelist: Paul Lanois, Director at Fieldfisher
  • Panelist: Rashmi V, Founder and CEO at ITASC Solutions LLC

Escalating Cyber Risk From the IT Department to the Boardroom

Despite today’s frequent headlines regarding companies falling victim to cyberattacks or suffering data breaches, cyber risk is still a relatively new threat – is it? While companies may have an idea about the potential effects on reputation and impact on the overall business, many are yet to experience one first-hand, or at least not on a high-profile scale. That means there’s still unfamiliarity around how exactly to manage the risk. Many companies are changing their approach, in some cases; cybersecurity is still departmentalized and seen as the remit of the IT team.

How do you incorporate a cybersecurity strategy into the company’s overall governance, risk, and compliance structure? What’s the best approach?

  • Sponsor: Radware
  • Moderator: Vivek Patel, Vice President, Technical Services – N. Americas at Radware
  • Panelist: Junaid Aasi, Senior Technical Security Risk Engineer at UCLA Health
  • Panelist: Eric Hibbard, Director, Product Planning – Storage Networking & Security at Samsung Semiconductor Inc.
  • Panelist: Randolph Barr, CSO at BioRender
  • Panelist: Patricia Gatley, Senior Counsel and Compliance Officer at Prometheus Laboratories Inc.
  • Panelist: Zach Grieshop, CISO at PlayOn! Sports

How to Address the Weakest Link in Cybersecurity – People

Cyber crime statistics estimated the global cost of $6 trillion in 2023. Cyber criminals continue to evolve their attacks faster than security professionals can adapt. But is the weakness with the technology in place to combat malicious actors or is it the people in the organization who continue to fall prey to the common tactics such as phishing? Every business owner, executive, and board member is now hypersensitive to the impact from cyber crime but continue to focus on tools and technology. 

Many organizations invest in cyber awareness programs to educate their employees and contractors and now are mandatory in many industries today but the number of breaches continues to increase. Therefore, the approach to improving the cybersecurity defenses must elevate to re-engineering the “DNA” of all resources – inside and out – to think cyber smart. 

This panel will discuss ideas to help materially change the conversation about cyber awareness so anyone in contact with a business is cyber vigilant.

  • Moderator: Benjamin Brink, IMAC Technician III at Milestone Technologies, Inc.
  • Panelist: Matt Hollcraft, Operating Partner – Cyber at H.I.G. Capital
  • Panelist: Jerome Prescod, Snr Program Manager Content Security at The Walt Disney Company
  • Panelist: Fred Cohen, CEO at Management Analytics

Building a Security-Aware Culture in 2023 and Beyond

Perhaps the most important step that can be taken at any organization is to ensure that it is working towards initiating and fostering a culture of awareness around cybersecurity issues. Today, it’s no longer good enough for employers or employees to simply think of cybersecurity as an issue for the IT department to take care of. In fact, developing an awareness of the threats and taking basic precautions to ensure safety should be a fundamental part of everyone’s job description in 2023!

Phishing attacks rely on “social engineering” methods to trick users into divulging valuable information or installing malware on their devices. No one needs technical skills to learn to become aware of these types of attacks and to take basic precautions to avoid falling victim. Likewise, basic security skills like the safe use of passwords and developing an understanding of two-factor authentication (2FA) should be taught across the board and continually updated. Taking basic precautions like this to foster a culture of cybersecurity-awareness should be a core element of business strategy at organizations that want to ensure they build resilience and preparedness over the coming 12 months.

  • Sponsor: Hoxhunt
  • Moderator: Joshua Foltz, CISO at NerdWallet
  • Panelist: Stephen Alford, CIO & CISO at Worldwide Environmental Products, Inc.
  • Panelist: Ben Rothke, Senior Information Security Manager at Tapad
  • Panelist: Oksana Denesiuk, Senior Manager/Product Transformation Leader at Kaiser Permanente
  • Panelist: Kimberly Quan, Senior Manager, Cyber Fusion at Juniper Networks
  • Panelist: Prabhath Karanth, Global Head of Security & Trust (CISO & CSO Scope) at Navan

Cybersecurity Training

In 2023, will we see continued advances in cybersecurity training? Humans didn’t evolve to spot dangers in the digital world. The school system doesn’t teach them defense against the dark arts of cyber-attack. It’s on us. Human risk is an organizational problem. Equipping our people with the skills to stay safe from phishing attacks is our responsibility.

Automation, adaptive learning, and artificial intelligence/machine learning can help deliver personalized training at scale. Why is that important? Because people need to participate frequently with relevant training that stays at the edge of their skill level in order to improve and stay engaged. A long, dry video followed by a punishment-based phishing simulation has been proven not to work. Fixating on failure leads to failure. Rewarding people as they acquire skills in a dynamic learning environment confers measurable improvement. This approach broadly describes gamification, whose demonstrated success is grounded in established principles of behavioral science and business and will be key to protecting organizations of all sizes in the year ahead.

  • Moderator: Jenn Behrens, Partner, EVP of Privacy & Security at KUMA LLC
  • Panelist: Bob Fabien Zinga, CO at USNR
  • Panelist: Steve Millendorf, Partner at Foley & Lardner LLP
  • Panelist: Anthony Dumas, Chief Information Security Officer at CyberElite

Insider Threats

Human error is still one of the primary reasons for the data breach. Any bad day or intentional loophole can bring down a whole organization with millions of stolen data. Report by Verizon in data breach gives strategic insights on cybersecurity trends that 34 percent of total attacks were directly or indirectly made by the employees. So make sure you create more awareness within premises to safeguard data in every way possible.

  • Moderator: Edwin Covert, Head of Cyber Risk Engineering at Bowhead Specialty
  • Panelist: Matthew Hoy, Incident Response Lead at Albertsons Companies
  • Panelist: Stacey Cameron, CEO at CyCam Strategies
  • Panelist: Robert Kirtley, Director of Cyber Security at iDiscovery Solutions
  • Panelist: Tony Zirnoon, Head of Business Development and Partnerships at WaveStrong, Inc.

Phishing Continues to Be a Problem

Phishing is one of the most common types of cyberattacks, mainly because it is often an effective technique for gaining access to an organization’s network and systems. It’s usually easier to trick an employee into handing over sensitive data (like login credentials) or running a piece of malware on a company computer than it is to accomplish these goals through other means.

As a result, phishing will continue to be a problem in 2023 and into the future as long as it remains effective. However, the changing nature of work in the wake of the COVID-19 pandemic has its impacts on phishing as well.

For example, the surge in remote work caused by the COVID-19 pandemic drove many organizations to adopt online collaboration such as Zoom, Slack, etc. The focus on email in phishing awareness training means that employees often do not consider it a threat on these platforms, and workers often believe that only legitimate users can access these platforms, which is not always true.

As a result, phishing attacks on these platforms are more likely to be effective than via email, where employees are more likely to be on their guard and companies may have anti-phishing solutions in place. Cybercriminals have noticed this, and the use of non- email collaboration platforms for phishing has become more common and is likely to continue to do so into 2023.

Join us as we discuss best practices to identify and mitigate phishing attacks.

  • Moderator: George WIlliams, Generative AI Researcher | Edge ML Startup Advisor at Ansible AI Consulting
  • Panelist: Nabil Zaki, Sr. Technical Computing Manager at Utility Trailer Manufacturing Company
  • Panelist: Randy Muyargas, Director, Information Security, Systems and Technology | Information Security Officer at Cordoba Corporation

Privacy Isn’t About Compliance – It’s About the Economy Stupid

Data is an asset, which depreciates very quickly. The need for businesses to protect their ability to collect data, and use data, is really what should drive privacy compliance.

While the law does generate risks around data use, the real risk is the simple fact that if you don’t respect the privacy rights of individuals, you will dilute, or even destroy, ongoing access to high-quality, relevant, and monetizable data.

Fundamentally, privacy programs are about how to effectively monetize data over a strategic time period without adding unnecessary “taxes” onto the data ecosystem (either for the business OR for the data subject).

  • Moderator: Katey Wood, Principal Product Marketer, Privacy and Compliance at Amazon Web Services (AWS)
  • Panelist: Caroline Prieto, Senior Director of Risk and Privacy at Guild Education
  • Panelist: Austine Ohwobete, Cybersecurity Strategizing & Litigation at CRYPTOFORENSICS TECHNOLOGIES CORPORATION
  • Panelist: Jordan MacAvoy, Founder and CEO at TalPoint

Sponsors

Event Location

Monterey Plaza
Hotel & Spa

400 Cannery Row
Monterey / CA 93940

(831) 920-6710

Register

Stay up to date with our latest news & events