During this keynote, attendees will learn about the importance of agility in building cybersecurity resilience. The speaker will emphasize the need to move beyond the traditional approach of managing cybersecurity risk based solely on probability and impact. Instead, we will explore the concept of agility and how it can help organizations to build resilient cybersecurity strategies.

According to (ISC)2’s annual Cybersecurity Workforce Study, found a worldwide gap of 3.4 million cybersecurity workers. 70% of those surveyed also said they think their organization’s security team is understaffed and decreasing its effectiveness.
As cyberattacks grow increasingly sophisticated and threat landscapes expand, it has become even more important for organizations get creative in their approach to attract and retain talent. In this panel session we will explore best practices that will attract and retain the right candidate.

•Why are many CISO’s and their IT leaders struggling to meet basic staffing goals despite their best efforts?
•How can we leverage automation when it comes to current employees’ burnout and repetitive tasks?
•How can organisations successfully support new talent entrance without advanced degrees and develop non-traditional cyber degree paths?
•How can organisations improve diversity and inclusion to address the skills gap?

As we move into a cloud native, devops-driven world where agility is key, some of the best security teams are finding it’s time to shed our reputation of being “The Department of No” to break down barriers and embrace change. In this talk, Neil presents some practical approaches for reducing friction and increasing collaboration in DevSecOps while still keeping in mind our commitment to governance, risk, and compliance.

According to Gartner, By the end of 2023, modern data privacy laws will cover the personal information of 75% of the world's population.
The world of data is both changed and changing, driven by accelerated digital transformation. By 2025, 463 exabytes of data will be generated each day [Raconteur]. Despite obvious opportunities this level of data can bring, the growing emphasis on data privacy laws is driving the conversations businesses and governments are having about achieving a ""privacy-first approach"" to information security.
The scope of these laws means that businesses will manage multiple data protection laws in various jurisdictions and customers will want to know what kind of data you collect from them and how it is used; consequently, putting brand perception and trust at risk every time a confidentiality is broken.
The changing compliance landscape being led by privacy, not only puts company reputation at risks but can also create huge workloads and cost for companies, contributing to an estimated global annual cost of cybercrime of €5.5 trillion by 2021 as highlighted by the Cyber Resilience Act proposal by the European Commission.
To remain agile, businesses will need to focus on automation of your data privacy management systems by adopting privacy-enhancing technologies and promoting the awareness of cyber hygiene, privacy and data protection.

•How can we empower our businesses to remain agile in this changing compliance landscape?
•How can we reduce the complexity and risk attached to our data?
•How can we truly focus on delivering next generation data privacy management system?

The shift to the cloud continues to accelerate at an unprecedented pace, and many organisations across the EU continue to prioritise the use and adoption of cloud-based offerings when looking to procure new technologies. According to Gartner, more than half of enterprise IT spending in key market segments will shift to cloud by 2025.
While this is leading to increased efficiency and productivity, the rapid adoption of cloud has also led to an increase in cloud-related security incidents. The 2022 IBM Cost of a Data Breach Report found that 45% of breaches occurred in cloud environments, with an average cost in the millions. This is bringing new security concerns, fuelled in many cases by the lack of clarity in the responsibilities of implementing and maintaining security, when it comes to cloud deployments.
While organizations today are leveraging public cloud resources as part of their digital transformation journey, this intensified need for cloud security has put an emphasis for a strategic shift to hybrid cloud environments that span private data centres and public clouds.
As security leaders embrace cloud and move towards optimising their approach, new challenges arise when balancing productivity levels, cost and security. Maximizing business value in the cloud cannot be achieved without ensuring that applications continuously perform, and that they do so at the lowest cost.

•How can IT leaders leverage automation to simultaneously assure application performance and minimize cost?
•How can be strike balance between innovation and security while leveraging interconnected cloud technologies
•How can be reduce complexities in deploying the best cloud security practices in multi cloud environment?
•How can IT leaders successfully overcome the lack of clarity in the responsibilities of implementing and maintaining security, when it comes to cloud deployments?

According to Verizon’s 2022 Data Breaches Investigations Report, 82% of data breaches involved a human element. This includes incidents in which employees expose information directly or by making a mistake that enables cyber criminals to access the organization’s systems.
Digitization, cloud adoption, artificial intelligence (AI) and Machine Learning (ML)... where to start? Naturally, organizations are utilizing AI and automation in their fight against cyber-attacks to minimize human involvement.
However, while automation and AI can increase operational effectiveness and offload repetitive actions, retaining the human factor has advantages that cannot be overlooked. Unlike AI solutions, people are capable of abstract thought, which is crucial when it comes to tackling cyber-attacks.
We must recognize that people are both the best response in cyber-attacks, and the weakest link in cyber security chains. This calls for a blended cybersecurity strategy that integrates human skills with automation and focuses on closing the human gap through successful cyber security culture.

During this round table we will explore:
•Who is responsible for driving a cybersecurity culture?
•What are the biggest challenges when it comes to strategy & cultural mindset?
•How can we leverage diversity to enhance sybersecurity?
•Helping people understand the “why” behind security is a vital building block of creating a security mindset. How can this be successfully carried out across large organizations?
•What are the latest best practices in the human aspects of security?
•Does your workplace culture encourage employees to come forward when they see or do something unusual?
•How IT leaders can successfully leverage their most precious resource-humans-to take the lead on their cybersecurity strategy?
•How can IT leaders can limit human error by giving the users a process that not only works with them but, most importantly, for them?

Helping senior business leaders to make better-informed business decisions in the face of inherent uncertainties — i.e., risks — is the pinnacle of what security professionals do, in our dual roles as subject-matter experts and trusted advisors.
And yet, most of us currently struggle to do this effectively. The approaches we commonly use to communicate with senior leadership teams about risk are mostly useless for this purpose, and in some cases they’re worse than useless.
Recently, I asked ChatGPT a couple of questions in this area. In this session, I’ll share what it said — and why it only confirms our present reality.

Most security testing today is purely tactical- we find vulnerabilities and sometimes fix them. We use this process to satisfy compliance requirements and report point-in-time status to regulators, but we rarely learn anything about our overall security posture and use that information to change our strategy and priorities. Strategic, transformational security testing is the solution.
Strategic security testing uses aggregated data from individual penetration tests to reveal the root cause of persistent weaknesses in security posture due to broken processes and overwhelmed staff. Security and IT management can use that data to invest in training and solutions that are specifically targeted at organizational deficiencies. Moreover, a strategic security testing program will track improvements in overall security posture over time so those improvements can be communicated to senior leadership and the board.

Forrester Research believes that 60% of security incidents this year will result from issues with third parties, with many of these risks being identified after initial onboarding. As with any cyber security incident, they are not only costly and disruptive, but can cause significant damage to businesses reputation.
This continues to highlight the need for organisations to take action to ensure the security and integrity of their partner ecosystem. And, as these ecosystems become more diverse and dynamic, organisations must continue to innovate way of monitoring and collaborating with these critical business partners. Join leaders from a variety of organizations and industries as they discuss their journey and the challenges, they face working with 3rd party providers.

•How can IT leaders streamline upfront due diligence to focus on critical risks?
•How can organisations create relationship controls to compel compliance?
•The importance of developing a robust framework that includes a responsive and resilient risk management operations capability.
•How third-party risk management programs need to have a well -defined and thought- through strategy, supported by a clearly articulated risk appetite.
•Establishing business-driven methods for ongoing risk management
•How can organisations leverage Structured data, analytics, and automation to revolutionaries their risk management approaches?
•How can organisations use a data-centred approach to reduce their dependency on static, inefficient questionnaires?

As technology continues to evolve, so does the need for advanced security measures. With the increasing adoption of cloud computing, businesses are facing new security challenges that require innovative solutions. Artificial Intelligence (AI) is one such solution that has gained significant attention in recent years. We will explore the role of AI in cloud security and how it can help businesses protect their data and systems from cyber threats.”