Summit XII 2022 CISO Forum

CISO at ISSQUARED, Inc.

The discussion will take participants into the world of Zero Trust full of excitement along with perils and conundrums. There is no shortage of vendors trying to sell Zero Trust. Can we really buy Zero Trust? Is there more to the story? The path to Zero Trust is a lot more complex than just buying a product. Join the discussion to unravel the mystery of Zero Trust!

Legendary Entertainment

What is and is not included in policies, what needs to be monetized beyond records, and why am I having to pay a premium for someone else’s failures; where is my safe driver discount?

Senior Cybersecurity Strategist at VMWare; Former CISO at Microsoft

Recent events have brought professional ethics in the spotlight for cybersecurity leadership.  They also highlight a significant contributor to distress and mental health issues among cybersecurity practitioners – moral injury.  Moral injury occurs in one of three ways: acts of omission, acts of commission, or acts of betrayal from someone in a higher position of authority.  It affects front line health care providers, military personnel, and  teachers among others.  Today we’ll focus on the phenomenon of moral injury in cybersecurity leadership – the reality of having to navigate between a growing threat landscape and business leader’s reluctance to address risks in the way the cyber team feels is appropriate. We have a number of case studies: Solarwinds,  T-Mobile, Equifax, and Twitter.  We’ll examine the equations involved in determining a path forward – whether it be whistleblower, resignation, being a team player or some combination of the two and tee up the discussion, “Did Mudge Do the Right Thing?”

AT&T – DIRECTV

Evolution of technology and availability of abundant technology options have enabled business and consumers to have more options for smart decision, better usage of resources, ease of communication and interaction, moving faster with more offerings and choices, and flexibility. Many companies have embraced technology transformation in cloud, data lake, mobile, AI, machine learning, IoT, robust APIs, and 3rd party services. Business leaders will continue to demand business to move faster, cheaper and smarter. However, transformation brings risks from unforeseen channels and more exposure points from a security point of view. Join us as we discuss topics and share strategy, ideas, challenges and lessons learned from other security leaders.

What Is Your Company’s Strategy on Technology Transformation, Innovation, Adoption, and Implementation?

What is your security program’s role in technology decisions?

Do you have adequate security resources, tools and expertise to manage technology decisions and security reviews?

Examples: public cloud and security tools in cloud, IoT testing, vulnerability mgt, SaaS, mobile apps and devices, data lakes and scanning of data, registration of all technology, 3rd party technology in usage, onboarding new technology, 3rd Party APIs, SSO and MFA enablement, rogue SaaS usage, etc.

What are your current challenges and pain points related to technology transformation and adoption?

What are your viewpoints on ideal technology maturity stage in your company and how security should be partnering during the technology transformation phases?

What are your top security concerns related to technology?