2021 New York Virtual CISO Roundtable

Agenda

Agenda

8:55 AM - 9:15 AM

IANS Opening Remarks and Introductions

John Hultquist

Vice President, Intelligence Analysis

John Hultquist leads the Mandiant Threat Intelligence analysis team. Prior to the acquisition of iSIGHT Partners by FireEye, John led iSIGHT’s cyber espionage practice and was responsible for creating the cyber espionage reporting line.

He has over a decade of experience covering emerging threats in cyber espionage and hacktivism and working in senior intelligence analysis positions in the U.S. Before working in cyber security, he worked with information sharing and analysis centers and was involved in counterinsurgency operations in the U.S. Army.

Jake Williams

IANS Faculty

Jake is the Founder, President, and Principal Analyst of Rendition Infosec, an information security consultancy. He also sits on the Vulnerability Review Board at Peerlyst, a startup social networking platform exclusively for security professionals. Jake is a prolific speaker and instructor on a variety of information security topics such as reverse engineering malware, memory forensics, threat intelligence, and advanced exploit development.

9:15 AM - 10:00 AM

SolarWinds & Supply Chain Attacks: Insider Insights & Practical Next Steps

with and

The SolarWinds attack has become a new milestone for sophisticated, large-scale attacks. In this session, FireEye’s John Hultquist and IANS Faculty member Jake Williams will engage in a moderated conversation unpacking the ongoing implications of the attack. They’ll discuss:

Context around the attack: Who did it, what was the goal, how was it discovered, and what are the next shoes to drop?
Strategic impact: SolarWinds was far from the only vendor hit. What’s the latest here? MSFT’s role? FireEye and security firms’ role?
Where we go from here: Practical guidance on preparing for supply-chain hacks, managing software providers in your network, and understanding if it’s safe to assume other threat actors have compromised the same networks.

By the end of the session, the conversation will provide an insider look at the ongoing developments surrounding the incident and actionable recommendations you can bring back to your organization.

10:00 AM - 10:10 AM

Solution Provider Case Study #1

Ambassador Jonathan Scott Gration

Major General, USAF (Ret)

Ambassador Scott Gration has had a unique career as a diplomat and military leader. His diplomatic assignments have included serving as the United States (US) Ambassador to Kenya, as US Special Envoy to Sudan, and as Special Assistant to the President in the White House. Scott Gration retired as a Major General from the US Air Force after serving for thirty-two years as a fighter pilot and senior military leader.

Having spent nearly half his life in Africa and the Middle East, he has a deep and profound understanding of Kenya and East Africa, including the language and culture of each region. Scott remained in Kenya following his diplomatic assignment and served as a businessman and humanitarian for another five years. He now serves as a business consultant and pubic speaker.

Ambassador Gration recently published his unique and interesting experiences in an inspirational memoir, “Flight Path: Son of Africa to Warrior-Diplomat.” He and his wife Judy have settled in Winter Garden, Florida. They have four children and eight grandchildren.

10:10 AM - 10:55 AM

Operating Under Scrutiny: Using Forgiveness & Servant Leadership to Handle the Pressure

with

While serving as U.S. Ambassador to Kenya during the Obama Administration, retired Air Force Major General Scott Gration was brought to trial, accused of shortcomings in his role. He was forced to resign his position. He was fully acquitted of all charges, but the damage was done. This kind of adversity is familiar to CISOs, who often work knowing that, regardless of the details, they’ll be the first to take blame for data breaches. In this session, Gration will discuss how to:

Use forgiveness as a tool to let go of bitterness from being scapegoated and continue to lead effectively.
Define and prioritize the most important tasks in high-tension environments that put leaders under a microscope.
Apply servant leadership principles to build trust with your team.

The pressure associated with the CISO role isn’t going anywhere. This session offers actionable guidance on leading through that pressure.

11:00 AM - 11:10 AM

Solution Provider Case Study #2

Sounil Yu

IANS Faculty

Sounil Yu has over 30 years of hands-on experience creating, breaking and fixing computer and network systems. He is the creator of the Cyber Defense Matrix and the DIE Resiliency Framework, teaches Cybersecurity Technologies as an adjunct professor, co-chairs Art into Science: A Conference on Defense, and advises many security startups. His specialties include leading innovation programs, intern programs, and a thriving startup culture to meet emerging cybersecurity needs. He often serves as a challenge function and change agent to drive unconventional thinking and alternative approaches to hard problems in security.

11:10 AM - 11:40 AM

The DIE Triad: Building Future Resiliency Into Your Program

with

The rapid pace of digitization across industries and the rising sophistication of attackers is pushing organizations to reconsider their threat modeling practices. The DIE Triad is a radical new way to create future resiliency against increasingly sophisticated and destructive attacks. In this session, IANS Faculty member Sounil Yu will define the DIE Triad and describe how to put it into practice. He’ll cover:

Having fewer “pets,” more “cattle.” One is carefully cared for while the other is transactional.
Making less of an investment in Confidentiality, Integrity and Availability and focusing more on Distributed, Immutable, and Ephemeral (DIE).
Shifting perspective, tools, and possibly even personnel to leverage the DIE Triad in building your program.

11:40 AM - 11:50 AM

Solution Provider Case Study #3

11:50 AM - 12:00 PM

Vendor Feedback Session

Throughout the roundtable, three vendors will provide short case studies showcasing how they believe their solutions can deliver value. The feedback session is a discussion of those case studies and solutions without the vendor present. It’s an opportunity to get inside intelligence on vendors you may be considering for your environment.

Nick Mankovich

IANS Faculty

Nick is the CEO of CyberRisk Consulting, providing risk management advisory services for corporate boards and executive leadership. Trained in biological science, Nick worked extensively in R&D and has a long history of transformational leadership in R&D, product security, enterprise security and privacy, culminating in executive CISO roles in two Fortune 500 companies.

Steven Martano

The Caldwell Partners, Consultant, Cyber Security Practice

Steven Martano is a consultant in Caldwell Partners’ Cyber Security Practice. He recruits across the information security function, including CISOs, CSOs, cyber advisory board members, and cyber leaders in professional services.

Steven spent seven years at Russell Reynolds Associates, where he helped build the Cyber Security and Supply Chain functional practices, serving as a member of the global Corporate Officers practice.

Earlier in his career, Steven worked at Sikorsky Aircraft (then part of United Technologies Corporation), where he led operations and financial planning for multi-billion contracts for the U.S military and key international customers in the Middle East, Asia and South America.

In addition to his professional career, Steven serves as an editor and featured writer at Beyond the Box Score, SB Nation’s baseball analytics platform, and is a contributing columnist to FanGraphs’ The Hardball Times. He holds a BA from The Catholic University of America and a master’s degree in economics & finance from Trinity College.

12:00 PM - 12:30 PM

Career Development Panel Discussion – CISO Competencies

with and

IANS is developing a CISO Competency Framework tracking the skills and competencies CISOs need to succeed as they mature in the role, both today and over the next 36 months. During this session, IANS Faculty member Nick Mankovich and Caldwell Partners’ Steve Martano will discuss:

Highlights of the competency research.
Practical actions CISOs can take to develop new skills on the job and mature in the role.
How the marketplace values various competencies for different types of CISO roles.

The session will conclude with an open question and answer time with Mankovich and Martano.

2021 New York Virtual Facilitators

Tim Bernard

Area Vice President, IANS

Tim Bernard is the Area VP for IANS. He’s responsible for new client acquisition as well as customer success and retention in the North. Since joining IANS in 2009, Tim has played a role in growing the business from 50 customers in 2009 to over 300 to start 2020. It’s a true up-and-comer story, starting with his boyhood adoration for the perpetually woeful NY Mets, his Business Economics degree from Providence College, his unrequited love for PC’s Friar Basketball, and decade+ helping CISOs to elevate their missions. There’s never a dull moment in this industry, and he loves the challenge because the mission matters. Tim is married and has 2 kids under 10 years old. Whatever he’s doing, he would probably rather be skiing.

Web Conference

Registrants will receive a logistics email with web conference meeting information one day prior to the event.

Attendee Contact

ians@iansresearch.com

Learn More

October

5

Philadelphia, PA Virtual

Coming Soon