<p>Throughout the roundtable, three solution providers will provide a rundown of how they deliver value. The feedback session is a discussion of the solution providers without the vendor present. It&rsquo;s an opportunity to get inside intelligence on vendors you may be considering for your environment.</p>

Vendor Feedback Session

Solution Provider Case Study

Solution Provider Case Study #2

<p>During this session, CISOs participating in the event will be split into break-out groups and given discussion prompts on operational challenges they may be facing. It&rsquo;s a time to ask questions and share solutions with peers. </p>

Peer-to-Peer Discussion Session

Panel Discussion/Workshop

<p>DevSecOps is a prime example of the kind of long-term initiative that security teams get stuck in. The blend of cultural, operational and technical changes are enough to leave orgs mired in long project cycles that stifle value potential. In this session, IANS Faculty member George Gerchow will provide a deep dive into the underlying technical pitfalls that hold DevSecOps programs back and offer guidance on how CISOs can give their teams a boost to overcome these issues. He&rsquo;ll talk about:<br /></p><ul type="disc"><li>Common DevSecOps pitfalls and how to avoid them.</li><li>How to turn your DevSecOps group into a collaborator instead of a blocker.</li><li>Ways to navigate the underlying political and cultural challenges that frequently hold DevSecOps initiatives back.</li></ul>

Overcome the DevSecOps Pitfalls Holding Your Program Back

<p>As Sumo Logic's CSO and SVP of IT, George Gerchow brings over 20 years of information technology and systems management expertise to the application of IT processes and disciplines. His background includes the security, compliance, and cloud computing disciplines. Mr. Gerchow has years of practical experience in building agile security, compliance and, IT teams in rapid development organizations. These insights make him a highly regarded speaker, and invited panelist on topics including, cloud secure architecture design, compliance and operational security. George has been on the bleeding edge of public cloud security, privacy and modernizing IT systems since being a co-founder of the VMware Center for Policy &amp; Compliance. He is a Faculty Member for <a rel="noreferrer noopener" target="_blank" href="[f669d9a7-009d-4d83-ddaa-000000000002]2CFAB8BA-3C3D-440F-AC51-75AE8FD0D8A6">IANS</a>&nbsp; - <a rel="noreferrer noopener" target="_blank" href="[f669d9a7-009d-4d83-ddaa-000000000002]2CFAB8BA-3C3D-440F-AC51-75AE8FD0D8A6">Institute of Applied Network Security&nbsp;</a> and sits on several industry advisory boards. Mr. Gerchow is also a known philanthropist and CEO of a nonprofit corporation, <a href="https://www.xfoundationx.org/" target="_blank" rel="noreferrer noopener">XFoundation</a>.</p>

<div>The new SEC breach disclosure rules represent a continuation of a trend of increased liability risk for CISOs. This panel discussion is designed to provide hands-on guidance on how you can manage liability risk for yourself and your business. It will cover topics including:</div><ul><li>How orgs are thinking about D&amp;O insurance/indemnity for CISOs and how to negotiate for what you need during hiring or retention conversations.</li><li>The liability issues boards are concerned about and ways CISOs can inform the board to maintain sufficient visibility into risk.</li><li>How to refine board and executive communication tactics to better bring those audiences into key conversations around incident materiality and disclosure.</li></ul>

Managing Liability in Light of the SEC Rules

<p></p><p>As a member of Artico's cybersecurity team, Steve is an expert in security executive compensation. He leads strategic partnerships and initiatives including Artico’s annual CISO Compensation &amp; Budget survey.<br></p><p>Steven spent seven years at Russell Reynolds Associates, where he helped build the Cyber Security and Supply Chain functional practices, serving as a member of the global Corporate Officers practice.</p><p>Earlier in his career, Steven worked at Sikorsky Aircraft (then part of United Technologies Corporation), where he led operations and financial planning for multi-billion contracts for the U.S military and key international customers in the Middle East, Asia and South America.<br></p><p>In addition to his professional career, Steven serves as an editor and featured writer at Beyond the Box Score, SB Nation’s baseball analytics platform, and is a contributing columnist to FanGraphs’ The Hardball Times. He holds a BA from The Catholic University of America and a master’s degree in economics &amp; finance from Trinity College.</p><p></p>

<p>Lee Kim specializes in cybersecurity, data privacy, governance, compliance, and generative artificial intelligence. Her insights are informed by her scientific training, creative pursuits, and diverse professional background. She presents before a wide
    range of domestic and international audiences. She has significant experience with the media and has been featured on the Canadian Broadcasting Corporation (live and pre-recorded interviews), radio shows, and podcasts. She also has significant experience
    working in the public policy realm, including with Congressional staffers and various governmental agencies around the world.</p><p>By way of background, Lee is an AV preeminent peer review rated attorney (a distinction that only 10% of all attorneys have earned according to Martindale-Hubbell). (Note, however, that while Lee is an attorney, she does not provide legal services through
    IANS.) Additionally, prior to law school, Lee worked as a database, system, and web administrator at a major university, software company, and a major academic medical center. </p><p>Lee is currently serving as an analyst with the US Department of Homeland Security Analytic Exchange Program. Over the years, her teams’ research topics have included phishing, healthcare cybersecurity, patient safety, and maritime and port cybersecurity.
    </p><p>Lee serves as a Director of InfraGard Northern Capital Region, Vice Chair of the Policy Committee of the American Bar Association Health Law Section, and National Visiting Committee member of the National Cybersecurity Training and Education Center. She
    also serves on the Nominating Committee for (ISC)<sup>2</sup>. Previously, Lee served with the (ISC)<sup>2</sup> Government Advisory Council Executive Writers Bureau.</p><p><span style="text-decoration: underline">Please note</span>: The advice that Lee Kim provides through IANS is not legal advice and is not intended to be relied on as such. There is no attorney-client relationship.</p>

<p>The CISO role is being elevated within organizations. In response, CISOs must build their executive skillsets to better collaborate with the C-Suite, handle board meetings and connect infosec with key business objectives. This session will help CISOs on that journey through guidance from IANS Faculty member and executive coach, Russell Eubanks. Russell will tap into his experience to discuss:</p><ul><li>Specific skills that are most important for CISOs as they work within the C-Suite.</li><li>Cross-functional projects to take on or lead that can help you develop those skills.</li><li>How to develop networks and build alliances</li></ul>

Lessons From Infosec Executive Coaches

Russell is the founder and CEO of Security Ever After and helps companies who lost their CISO reduce their cybersecurity risk. He is the former CIO and CISO of the Federal Reserve Bank of Atlanta and is a Principal Instructor and Author with the SANS
Institute.
<br><br>Russell has developed information security programs from the ground up and also led extensive cybersecurity teams. Russell actively seeks opportunities to add value to organizations and measurably increase their overall security posture

Solution Provider Case Study #3

Solution Provider Case Study #1

Join us for the closing remarks and the chance to network with your peers! Drinks will be served.

Closing Remarks & Networking Reception

Lunch

<p>During this time attendees are encouraged to join the Forum Tabletop Break that provides an opportunity to connect with solution providers and explore emerging technologies. Stretch your legs and network with your peers over snacks and coffee.</p>

Morning Break

Registration & Breakfast

CISO Roundtable Opening Remarks and Introductions

Afternoon Break

<div>Emerging tech including generative AI models is heating up the security space. But to confront emerging issues, a security shop needs strong muscle groups and mechanisms in place. So, this talk will bring us back to the essentials. From managing IAM and validating permissions, to the "shift left" and security-as-code that cloud computing enables, we want you to walk away from this talk more ready to work on the way that your security team operates and automates.</div>

IANS Welcome & Keynote: Eat Your (Security) Veggies!

<p>Merritt (Twitter: @MerrittBaer) is Field CISO at Lacework, a cloud security unicorn. Merritt provides technical security guidance to Lacework’s customer executives. She is also instrumental in the security industry: speaking, talking and advising companies on security at scale, and she helps to inform Lacework product roadmaps with customer and threat landscape feedback.</p><p>Previously, Merritt served in the Office of the CISO at Amazon Web Services, as part of a small elite team that formed a Deputy CISO. She provided technical cloud security guidance to AWS’ largest customers, like the Fortune 100, on security as a bottom line proposition. She also helped build strategic initiatives for how AWS secures itself, running on AWS, and how AWS externalizes security services.</p>



<div><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">ChatGPT and open source AI tools have pushed the technology into the mainstream, opening a Pandora&rsquo;s Box of potential security concerns. In this session, we&rsquo;ll zoom in on the enterprise risk side of this conversation, focusing on the real security threats these tools present and the risks associated with using AI in internal and customer-facing products. IANS Faculty member Sounil Yu will cover:</span><br /></div><ul><li>What&rsquo;s real and what&rsquo;s hype: How to assess and address the threats that could materially impact your business.</li><li>When and how to participate in product development conversations involving AI tools.</li><li>How to educate the C-Suite and board to ensure a consistent governance approach in your organization.</li></ul>

Mainstream AI Is Here: What Should We Do About It

<p>Sounil Yu has over 30 years of hands-on experience creating, breaking and fixing computer
and network systems. He is the creator of the Cyber Defense Matrix and the DIE Resiliency
Framework, teaches Cybersecurity Technologies as an adjunct professor, co-chairs Art into
Science: A Conference on Defense, and advises many security startups. His specialties
include leading innovation programs, intern programs, and a thriving startup culture to
meet emerging cybersecurity needs. He often serves as a challenge function and change
agent to drive unconventional thinking and alternative approaches to hard problems in
security.
</p>

<p>Visibility is critical in helping CISOs prioritize effectively and manage resources across their teams. However, most security teams are overwhelmed by a constant influx of alerts that are overwhelming on their own, but especially problematic as teams look for ways to automate repeatable tasks and keep up with growing scope. This session will provide actionable guidance on improving your alert management capabilities to better prioritize activities, covering key topics including:&nbsp;</p><ul type="disc"><li>How to get visibility into the alerts that matter so you can make decisions faster and with greater accuracy.</li><li>Turning alert data into meaningful actions to reduce the likelihood of bad days and equip your team to remediate known bads more efficiently.</li><li>Using automation and AI to improve filter accuracy and ensure proper documentation.</li></ul>

You've Got Alerts and Findings; So What? Practical Steps to Security Response, at Scale

2023 Boston CISO Roundtable Agenda

2023 CISO Roundtables

a13e2160-4385-49af-8378-332206e680e2,e6f66081-257d-41fa-8a15-03bdaa66f657

Attendee Contact

<p><span style="background-color: rgba(0, 0, 0, 0); color: inherit; font-family: inherit; font-size: inherit; text-align: inherit; text-transform: inherit; white-space: inherit; word-spacing: normal">The IANS CISO Roundtable is an opportunity to engage with your peers and tap into the expertise of IANS Faculty members and leading subject matter experts in the industry. The event contains sessions on a mix of topics designed to strengthen a CISO’s executive skills.</span></p><p><span style="background-color: rgba(0, 0, 0, 0); color: inherit; font-family: inherit; font-size: inherit; text-align: inherit; text-transform: inherit; white-space: inherit; word-spacing: normal"></span><span style="background-color: rgba(0, 0, 0, 0); color: inherit; font-family: inherit; font-size: inherit; text-align: inherit; text-transform: inherit; white-space: inherit; word-spacing: normal">CISO Roundtables are community-driven events. But this isn’t community purely for socialization or networking. It is an opportunity to talk through your challenges, get advice and benchmark with other CISOs through interactive content and peer-to-peer discussions. Join a Roundtable for a chance to participate in the IANS community and the insights it has to offer.</span></p><div><div><br></div><div><a href="https://www.iansresearch.com/what-we-do/events/roundtables/details/2023/04/4/2023-ciso-roundtables/23-ciso-minneapolis-philadelphia#career"><div></div></a></div></div><div>&nbsp;</div><p>&nbsp;</p>

General Information

Register Now

This one-day roundtable is designed exclusively for CISOs and senior level information security executives to learn and share insights in a confidential setting.

CISO Roundtable

The IANS CISO Roundtable is an opportunity to engage with your peers and tap into the expertise of IANS Faculty members and leading subject matter experts in the industry.

2023 Boston CISO Roundtable

Boston Convention and Exhibition Center 415 Summer St, Boston, MA 02210

Hotel: Aloft Boston Seaport

Professional Development

Executive Competencies

Live Online Training

Online Training Library

Compensation & Budget

Take the Survey

Reports

Survey Visualization Tool

Executive Communications

Incident Command Center

Resource Center

Events

Forums

CISO Roundtables

Symposiums

Webinars

Vendor Assessment Community

Who We Are

About Us

Our Story

Careers

Contact Us

What We Do

InfoSec-Specific Executive Development for CISOs and Aspiring Security Leaders.

Live Faculty-led instruction and interactive labs to build you and your team"s InfoSec skills.

2023 Boston

CISO Roundtable

Contact us at:

Contact us at: