Solution Provider Case Study

Solution Provider Case Study #3

<p>During this time attendees are encouraged to join the Forum Tabletop Break that provides an opportunity to connect with solution providers and explore emerging technologies. Stretch your legs and network with your peers over snacks and coffee.</p>

Morning Break

<div><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">Insurance complexity is a growing challenge for CISOs. Cyber insurance premiums have skyrocketed and the conditions around what gets covered, when and how have become onerous for security executives to unravel. Throw in the CISO&rsquo;s growing executive role and potential need for liability protection &ndash; whether through D&amp;O insurance, an umbrella policy or similar &ndash; and there&rsquo;s a great deal to consider.</span><br /></div><div>&nbsp;</div><div>In this session, IANS Faculty member Shamla Naidoo will bring participants behind the insurance curtain by interviewing underwriters and providing an in-depth look at what they are considering as they develop policies.</div>

Looking Behind the Cyber Insurance Curtain

<p>Shamla is the Head of Cloud Strategy and Innovation at Netskope and a former Managing Partner and Global CISO at IBM. She is a Board Director at both QBE and Stonebridge Acquisition Capital&nbsp;and a Board Member at ReferencePoint. Shamla’s experience spans 38+ years in a variety of sectors and 6&nbsp;continents, making her an expert in cross-cultural collaboration and working across industries. She is recognized as a leader in applying security to enable priorities of the business. Her background also includes authoring and teaching several courses for the University of Illinois Chicago School of Law in technology,&nbsp;security, and privacy law. Shamla coaches professionals on leadership, board communication and how to&nbsp;align security with strategic business initiatives.&nbsp;</p>

<p>Serene Davis brings a 20-year career at the forefront of technology and cyber insurance. With 17 years at a leading cyber insurer, she underwrote middle-market and large-risk business, led the West Region, and drove national and global strategy from her leadership position. Serene now spearheads QBE's cyber proposition as the Global Head of Cyber.</p>

<p>Todd is a Senior Vice President in QBE’s Specialty Lines where he leads the Financial Lines Claim and Aviation Claim units. He is a licensed attorney with over 20 years of experience leading specialty claim organizations, first at CNA Financial from 2002 to 2013, and then at Berkshire Hathaway Specialty Insurance from 2013 to 2020 before taking his current role at QBE in November 2020. Prior to his career in insurance, Todd was an attorney in private practice in New York City and a prosecutor in the Manhattan District Attorney’s Office. He received his B.A. from the University of Arizona and his law degree from Georgetown University.&nbsp;</p><p></p>

<p>The CISO role is being elevated within organizations. In response, CISOs must build their executive skillsets to better collaborate with the C-Suite, handle board meetings and connect infosec with key business objectives. This session will help CISOs on that journey through guidance from IANS Faculty member and executive coach, Russell Eubanks. Russell will tap into his experience to discuss:</p><ul><li>Specific skills that are most important for CISOs as they work within the C-Suite.</li><li>Cross-functional projects to take on or lead that can help you develop those skills.</li><li>How to develop networks and build alliances</li></ul>

Lessons From Infosec Executive Coaches

Russell is the founder and CEO of Security Ever After and helps companies who lost their CISO reduce their cybersecurity risk. He is the former CIO and CISO of the Federal Reserve Bank of Atlanta and is a Principal Instructor and Author with the SANS
Institute.
<br><br>Russell has developed information security programs from the ground up and also led extensive cybersecurity teams. Russell actively seeks opportunities to add value to organizations and measurably increase their overall security posture

Afternoon Break

Registration & Breakfast

CISO Roundtable Opening Remarks and Introductions

Lunch

The capabilities of adversaries continues to advance and focus on gaining access to corporate infrastructure and cloud in order to hit objectives. Ransomware and nation states make up the two most prominent adversaries with advanced capabilities. This talk will dive into what we are seeing from adversaries and the capabilities of them as well as understanding what we need to focus on as an industry to improve our defenses to stay more modern with the focus of attackers today. Adversaries are focusing heavily on capabilities, tooling, research, and partnerships to be as effective as they can &ndash; our ability to defend has to shift and move with these trends as well as look at the future in how we best protect our organizations and information.

IANS Welcome & Keynote: Modern Adversaries Require Modern Defenses

<p>Dave is the Founder and Owner of TrustedSec, an information security consulting firm, and Binary Defense, a Managed Security Service Provider (MSSP) that detects attackers early to prevent large-scale invasions. In addition to creating several widely
    popular open-source tools, including 'The Social-Engineer Toolkit' (SET), PenTesters Framework (PTF), and Artillery. David has also released security advisories, including zero-days, with a focus on security research. </p><br><p>Prior to his work in the private sector, Dave served in the United States Marine Corps (USMC), focusing on cyber warfare and forensics analysis activities, including two tours to Iraq. He also served on the board of directors for (ISC)2, which is one
    of the largest security collectives and offers certifications such as the CISSP.
</p>

<div><p>The new SEC breach disclosure rules represent a continuation of a trend of increased liability risk for CISOs. This panel discussion is designed to provide hands-on guidance on how you can manage liability risk for yourself and your business. It will cover topics including:</p><ul><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">How orgs are thinking about D&amp;O insurance/indemnity for CISOs and how to negotiate for what you need during hiring or retention conversations.</span></li><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;"></span>The liability issues boards are concerned about and ways CISOs can inform the board to maintain sufficient visibility into risk.</li><li>How to refine board and executive communication tactics to better bring those audiences into key conversations around incident materiality and disclosure.</li></ul></div>

Managing Liability in Light of the SEC Rules

<p>Steve is a partner in Artico Search’s cybersecurity practice. He is an expert in security executive recruiting and compensation focused on recruiting best-in-class CISOs and their teams across various industries. he leads strategic partnerships
and initiatives including Artico’s annual CISO compensation &amp; budget survey conducted in collaboration with IANS. <br><br>Prior to Artico, Steve served in Caldwell Partner's cybersecurity practice and at Russell Reynolds associates.</p>

<p>Lee Kim specializes in cybersecurity, data privacy, governance, compliance, and generative artificial intelligence. Her insights are informed by her scientific training, creative pursuits, and diverse professional background. She presents before a wide
    range of domestic and international audiences. She has significant experience with the media and has been featured on the Canadian Broadcasting Corporation (live and pre-recorded interviews), radio shows, and podcasts. She also has significant experience
    working in the public policy realm, including with Congressional staffers and various governmental agencies around the world.</p><p>By way of background, Lee is an AV preeminent peer review rated attorney (a distinction that only 10% of all attorneys have earned according to Martindale-Hubbell). (Note, however, that while Lee is an attorney, she does not provide legal services through
    IANS.) Additionally, prior to law school, Lee worked as a database, system, and web administrator at a major university, software company, and a major academic medical center. </p><p>Lee is currently serving as an analyst with the US Department of Homeland Security Analytic Exchange Program. Over the years, her teams’ research topics have included phishing, healthcare cybersecurity, patient safety, and maritime and port cybersecurity.
    </p><p>Lee serves as a Director of InfraGard Northern Capital Region, Vice Chair of the Policy Committee of the American Bar Association Health Law Section, and National Visiting Committee member of the National Cybersecurity Training and Education Center. She
    also serves on the Nominating Committee for (ISC)<sup>2</sup>. Previously, Lee served with the (ISC)<sup>2</sup> Government Advisory Council Executive Writers Bureau.</p><p><span style="text-decoration: underline">Please note</span>: The advice that Lee Kim provides through IANS is not legal advice and is not intended to be relied on as such. There is no attorney-client relationship.</p>

<p>Brian is an experienced senior executive and board advisor with over 30 years of experience in global assignments. He provides advice to directors and officers as a Principal with The CAP Group – a boutique advisory firm he founded in 2017. He is an early-stage investor in cybersecurity and artificial intelligence firms, providing guidance as both advisor and board member. His expertise is informed by his executive leadership roles with premier firms. Prior to founding CAP, Brian was Accenture’s Global Managing Director responsible for Cybersecurity Strategy, focused on clients with critical infrastructure portfolios. He was also a Managing Director (Partner) with KPMG, focused on technology risk identification and mitigation. Previously, he was the global technology executive responsible for all technology of Marathon Oil, a Fortune-40 integrated oil company.</p>



<p>During this session, CISOs participating in the event will be split into break-out groups and given discussion prompts on operational challenges they may be facing. It&rsquo;s a time to ask questions and share solutions with peers. </p>

Peer-to-Peer Discussion Session

Solution Provider Case Study #2

Closing Remarks

<div>Zero Trust initiatives demand strategic leadership to guide them through complex, often multi-year efforts that can easily lose support from the business. CISOs must filter through the vendor hype and lead their teams to develop a cohesive, manageable path to a zero trust configuration that aligns with security and business goals. In this session, IANS Faculty member Jennifer Minella will lead a workshop guiding on how to:</div><ul><li>Define a governance structure that aligns zero trust initiatives to business goals</li><li>Implement zero trust in the three main areas: server-to-server, cloud identity and services, end users to on-prem and cloud</li><li>Move from isolated projects to a formalized strategy</li></ul>

Create a Realistic Roadmap for Zero Trust

<p>Author of “Wireless Security Architecture”, “Low Tech Hacking” and other titles, Jennifer (JJ) Minella has been named as a Top 10 Power Player in cyber security by SC Magazine. As an advisor to more than 50 Fortune-rated companies and hundreds of others, JJ brings a uniquely energetic approach to cyber security, blending deep technical experience with strategic guidance. Her ability to connect with audiences and articulate technical concepts in simple terms has taken her all over the world. She is also the creator of the Mindfulness-Based Leadership for Infosec workshop series. Jennifer is the founder and principal advisor of Viszen Security, offering technical strategy and coaching solutions to CXOs and practitioners.</p>

Solution Provider Case Study #1

<div><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;"></span></div>In this session, IANS Faculty member Wolf Goerlich will lead a guided discussion to talk through real-world methods CISOs are using to tackle the mounting challenges in the PAM space.

PAM’s Evolution: How CISOs Are Adapting In a Changing Segment

<p>Wolf is an Advisory CISO of Duo Security, the leading provider of 
unified access security and multi-factor authentication delivered 
through the cloud. He has held senior management roles in IT and IT 
security in the financial services and healthcare verticals.
    In addition, Wolf has held senior leadership roles in consulting 
firms specializing in identity and access management, governance risk 
and compliance, and security programs. Wolf advises clients primarily in
 risk management, incident response, business
    continuity, and secure development.</p>

<div><p><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">In this workshop, IANS Faculty member Russell Eubanks will lead a hands-on discussion around strategies CISOs can employ to keep their teams engaged and efficient through change. He&rsquo;ll cover:</span></p><ul><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;"></span><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">Establishing a cohesive culture capable of providing a stable backdrop that smooths the path to change.</span></li><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;"></span>Aligning changes to broad organizational goals to keep your teams focused and help them prioritize.</li><li>How to ensure you model this behavior for the teams you are privileged to lead.</li></ul></div>

How Can a CISO Drive Culture Change?

<p>Throughout the roundtable, three solution providers will provide a rundown of how they deliver value. The feedback session is a discussion of the solution providers without the vendor present. It&rsquo;s an opportunity to get inside intelligence on vendors you may be considering for your environment.</p>

Vendor Feedback Session

2023 Chicago CISO Roundtable Agenda

2023 CISO Roundtables

Attendee Contact

<p>&nbsp;</p><div><p>The IANS CISO Roundtable is an opportunity to engage with your peers and tap into the expertise of IANS Faculty members and leading subject matter experts in the industry. The event contains sessions on a mix of topics designed to strengthen a CISO’s executive skills.</p><p>CISO Roundtables are community-driven events. But this isn’t community purely for socialization or networking. It is an opportunity to talk through your challenges, get advice and benchmark with other CISOs through interactive content and peer-to-peer discussions. Join a Roundtable for a chance to participate in the IANS community and the insights it has to offer.</p><div><br></div><div><a href="https://www.iansresearch.com/what-we-do/events/roundtables/details/2023/04/4/2023-ciso-roundtables/23-ciso-minneapolis-philadelphia#career"><div></div></a></div></div><div>&nbsp;</div><p>&nbsp;</p>

General Information

Register Now

This one-day roundtable is designed exclusively for CISOs and senior level information security executives to learn and share insights in a confidential setting.

CISO Roundtable

The IANS CISO Roundtable is an opportunity to engage with your peers and tap into the expertise of IANS Faculty members and leading subject matter experts in the industry.

2023 Chicago CISO Roundtable

Radisson Blu Aqua Hotel, 221 N Columbus Drive Chicago, IL 60601 United States

Professional Development

Executive Competencies

Live Online Training

Online Training Library

Compensation & Budget

Take the Survey

Reports

Survey Visualization Tool

Executive Communications

Incident Command Center

Resource Center

Events

Forums

CISO Roundtables

Symposiums

Webinars

Vendor Assessment Community

Who We Are

About Us

Our Story

Careers

Contact Us

What We Do

InfoSec-Specific Executive Development for CISOs and Aspiring Security Leaders.

Live Faculty-led instruction and interactive labs to build you and your team"s InfoSec skills.

2023 Chicago

CISO Roundtable

Contact us at:

Contact us at: