What's the difference between gaining agreement for your strategy and objectives, versus gaining consensus? What does it mean to your end user if security is done for them, but managing security risk is done with them, and how do you get them to pay attention?
Join Patrice Bordron, CISO for Community Health Systems, as he shares more than two decades worth of experience building visions and earning program engagement by storytelling through the point of the audience's view.

Collaboration between public and private sectors is not new but in the evolving world of cybercrime and data manipulation, law enforcement can—and should—play a critical role in preventing criminal activity. This partnership is more imperative today. And it needs to be supported not only by business executives, but also driven by the C-suite and the board.
Public and private sector organizations each must leverage all available resources, and partnerships need to be a strategic part of commitment. Of course, private organizations continue to ensure the development and advancement of their capabilities by maximizing use of next-generation technologies and techniques. At the same time, it’s vital to adopt a “culture of collaboration” both inside organizations and with third parties.

Struggling to defend your organization against cyber attacks? Wondering how to prioritize limited resources?
A study by the Marsh McLennan Cyber Risk Analytics Center found that poor performance in many BitSight analytics is strongly correlated with the likelihood of experiencing a cybersecurity incident. Join BitSight’s Jacob Olcott to learn:
•The 14 BitSight analytics that correlated to cybersecurity incidents
•Recommendations to improve your cybersecurity program to avoid an incident

While governance, risk, and compliance were once seen as the organization's police - reacting to violations, misconduct, or other wrongdoing- that is no longer the case. Without a robust GRC framework that includes ESG, resiliency and strong cyber and compliance programs, there is a serious risk to a company’s reputation and its ability to attract and retain the best talent and customers. A well-planned GRC strategy comes with lots of benefits: improved decision-making, more optimal IT investments, elimination of silos, and reduced fragmentation among divisions and departments, to name a few.
The stakes have been raised and there are no more excuses. The uncertainties and challenges faced by organizations will only escalate with ongoing technological advancements, a volatile economic and geopolitical landscape, mounting regulations, evolving environmental and social factors, and more.

Join this roundtable to discuss the following questions:
•The massive experiment with remote work puts sensitive company data at risk. How are you managing this from a GRC perspective?
•To manage regulatory compliance risks and mitigate the threat of data breaches, how can DPOs and legal leaders create successful cross-departmental alliances and efficient workflows?
•As cyber-attacks become more devastating, what are some ideas you must minimize risk within the organization?
•How has Environmental/Social/Governance (ESG) affected your GRC strategy?
•What can companies do to strengthen resilience and become future-ready, while also keeping in mind GRC policies?
•Has your organization done any work in breaking the siloes between risk, audit, compliance, and security teams to reduce redundancies and inconsistencies?
•What ideas do you have to move from the traditional and reactive approach to risk management, to one that is initiative-taking, tech- driven, and resilient?

Cybersecurity transformation and success is not so much about the technology, but about the people behind it. In a world where 90% of cyber-attacks utilize social engineering to exploit human weakness and bring about errors in judgment, it makes sense that beefing up the security skills of computer users would decrease cybercriminal success. Secure behavior can be taught yet many organizations still struggle with getting everyone to understand their responsibility for security. The disconnect between expectations of the security team and the actual implementation is where we see things fall through the cracks.
Unshielded home networks, untrained employees, and absence of cybersecurity culture will pose a serious threat to organizations unless they take proper precautions.2023 will be the year that organizations seek to solve this problem and place more departmental emphasis on implementing security best practices.

Join this roundtable to discuss the following questions:
•Who is responsible for driving a cybersecurity culture?
•What are the biggest challenges when it comes to leadership, and redefining strategy & cultural mindset?
•Helping people understand the “why” behind security is a vital building block of creating a security mindset. How can this be successfully carried out across large organizations?
•What are the latest best practices in the human aspects of security?
•What is the general trend regarding democratization, employee trust and customer centricity, and what implications does this have for the risk of cyber?

Cybercrime is more pervasive than ever. If you add up the monetary impact of all cybercrimes in 2020, the total is more than $6 Trillion. According to Gartner, organizations have become far more vulnerable to cyberthreats because digital information and technology are now so heavily integrated into day-to-day work. But the attacks themselves, which target both information and critical infrastructure, are also becoming far more sophisticated.
Security leaders are increasingly having to consider the speed of business, people being able to do business beyond boundaries, and how they can enable the business rather than just protect it. A key and growing foundation for increased agility and collaboration is the cloud and the need to consider how cloud security innovation drives innovation in general.

Join this roundtable to discuss the following questions:
•How is the migration to cloud providing new innovation opportunities for the business that need to be navigated and enabled by security?
•What does the current cloud security innovation ecosystem look like and where do security leaders need to show more leadership?
•How has the constantly evolving cyber security regulatory scope affected your deployment of the cloud? What are some of the cloud compliance challenges you are working through?
•Securing the cloud can be challenging, especially in complex, multi-cloud environments. What are some of the biggest challenges that organizations face when attempting to secure their cloud workloads?
•Has the Great Resignation and lack of qualified staff affected your cloud deployment? How are you working through this?
•Cloud environments differ significantly from on-prem infrastructure, which means that traditional security tools and approaches do not always work effectively in the cloud. How has this affected your security strategy?
•How can organizations work to secure their infrastructure when collaborating with vendors and third-party risk?

The most valuable asset of modern companies is information - confidential information of your customers, sensitive business data, research work, pre-launch information etc.
Protecting this data and its sanctity is of utmost importance today. That is why it is imperative to build a healthy culture of cyber security in your organization. Employees must be sensitized about the importance of good cybersecurity practices and their individual roles and responsibilities in keeping themselves and the business safe. In this digital age, the weakest links in cybersecurity systems are those using them. Without a proper security culture, you can’t move a step forward. So what should you do and how should you go about building this good cybersecurity culture for your company? Can a data-driven approach to security culture drive greater insight and more meaningful security culture change programs?
During this keynote we hear from Sajed Naseem, CISO at New Jersey Courts.

As we enter 2023, what is the current state of the threat landscape? What are the latest malicious TTP’s and how can we defend against them?
This year’s IBM Security X-Force Threat Intelligence Index presents an uncomfortable truth: as businesses, institutions and governments continue to adapt to a fast-changing global market—including hybrid and cloud-based work environments—threat actors remain adept at exploiting such shifts.
Join IBM Security to hear the latest insights from the newly released X-Force Threat Intelligence Index, including findings from thousands of real-life incident response engagements, top attack types and pathways to compromise observed, and recommendations to strengthen your security posture.

Rapidly emerging technologies, such as AI and machine learning, are poised to radically transform industries across the board, but this double-edged sword also brings with it unique security risks. Couple this with recent geopolitical events and lingering economic uncertainty, and the security industry is in a critical position to stay alert and combat increasing threats.
Advanced capabilities are not only being used by technology experts to provide a safe, secure and enjoyable consumer experience. Criminals are also using these cutting-edge technologies to scale their operations, automate their attacks to reduce the cost of their adversary activity, and develop new control bypass capabilities. By sidestepping cybersecurity in a rush to digitalize, organizations, employees and their customers are left exposed.
Meanwhile, geopolitical situations particularly the Russian invasion of Ukraine have acted as a game changer for the global cyber domain. While we still observe an increase of the number of threats, we also see a wider range of vectors emerge such as zero-day exploits and AI-enabled disinformation and deepfakes. As a result, more malicious and widespread attacks emerge having more damaging impact. How can the security industry prepare for these challenges?

Organizations are rapidly realizing the benefits of a diverse workforce. Despite their best efforts to attract a range of talent, many CISOs and other IT security leaders are concerned that they are failing to meet even their basic staffing goals. Why? In this panel session, we will explore best practices that will attract and retain the right candidates.

In the US, 50% fewer candidates are available today as compared to two years ago in the cyber field. Globally, an estimated 3.5 million cybersecurity jobs went unfulfilled in 2021.
Cybersecurity and the areas within are still relatively new academically alongside the threats and strategies for managing them are ever-changing. As such, even the most experienced cyber talent still requires up to date training and cross-upskilling. Preparing entry level through to seasonal cyber talent requires organizations to understand skill gaps and how to move employees through cybersecurity upskilling quickly.
During this keynote we hear from Renata Spinks at US Marine Corps. Renata, is the Assistant IT Director/Deputy CIO of Information, Command, Control, Communications, and Computers (IC4) at Headquarters Marine Corps with a dual role as the Senior Information Security Officer for the Marine Corps.