Cyber Threat 360 Roundtable

Cyber Threat 360 Roundtable

Co-hosted by

Pulse Conferences would like to thank all guests and co-facilitators who attended the Cyber Threat 360 Roundtable in London 27 September 2018

Predict, prevent, detect, respond: 360-degree benchmarking on the challenges of the cyber threat landscape

Timings at a glance:
27 September 2018 – London
Roundtable discussion – Simpson’s in the Strand – 14:00-17:00
Networking Reception – The Yacht – 17.00- 19:30

Cyber Threat Security 360 Roundtable provided the ideal peer to peer benchmarking opportunity for CISOs, CIOs and other senior risk, responder and technology professionals to examine in-depth and with combined peer group brain power, a multi-faceted approach to managing the challenges of the current and emerging cyber threat landscape.

Complimentary to attend for CISOs and similar senior cybersecurity professionals working in-house for non-vendor, non-consultancy organisations, this is a unique opportunity to connect with peers and expand your trusted professional networks to strengthen capacity.

Topics

A multi-faceted ‘360’ benchmarking exercise for CISOs to exchange experiences on what works, what doesn’t, priorities and challenges around managing cybersecurity threats and breaches.

ROUNDTABLE 1: Prediction
Know your risks, understand your attack surface, uncover weak spots

Understanding the threat landscape. How to focus on those threats that are relevant to our organisation? Is it possible to be predictive in information security? Making best use of available resources. How to justify what security improvements to focus on? How do we quantify the cost of potential breaches to fund a sustainable cybersecurity programme?

ROUNDTABLE 2: Prevention
Minimise attack surface, maximise compartmentalisation and contain breaches

Combating the most common sources of compromise – insider threats and Internet exploits. What are the potential weaknesses in modern organisations that adversaries try to exploit? Are there ways of organising and deploying enterprise systems which reduce impact and reduce time to recover?

ROUNDTABLE 3: Detection
Recognise incidents and threats, isolate and contain them

Do you have visibility beyond the preventive layer? Or the human factor in case of mistakes and unexpected behaviour? How do targeted attacks usually happen? How do you build effective breach detection and response capabilities against advanced targeted attacks?

ROUNDTABLE 4: Response
React to breaches, mitigate the damage, analyse and learn

How do you prepare for the inevitable security incident? How do you select the necessary tools, methods and practices to enable seamless response capability across the organisation? How do you respond to incidents in a way that limits damage and reduce recovery time and costs? • What is the scope, source, magnitude and management response • What data and information should be collected • Who is on the crisis team • At what stage should customers be informed?

Co-Facilitators

• Quentyn Taylor, Director of Information Security EMEA, Canon Europe
• Lee Barney, Director of Information Security, YOOX NET-A-PORTER GROUP
• Graham Edwards, DPO, Nationwide
• Chris Gibson, CISO, The Orwell Group
• Paul Pratley, Head of Investigations & Incident Response, MWR InfoSecurity
• Greg Jones, Principal Consultant & Founder, Digital Assurance, F-Secure
• Mats Palm, Director, Product Management, F-Secure
• Jani Kallio, Vice President Strategic Expansion, F-Secure

Timings – half day

14:00-14:20 Arrivals for afternoon tea and coffee
14:20-14:35 Introductions and objectives setting – co-chairs
14:35-14:50 Keynote / Case study
14:50-15:40 Roundtables 1-4 working each on a chosen 1st perspective
15:40-15:45 Short coffee break and participants rotate to chosen new table. Facilitators remain fixed to their allocated perspective
15:45-16:35 Roundtables 1-4 working each on a chosen 2nd perspective
16:35-16:55 Conclusions – each table shares back key findings to the whole group
16:55-17:00 Close of Roundtable
17:00-19:30 Networking reception – The Yacht

Structure

Two facilitators (a CISO practitioner and a senior strategist from F-Secure) will lead each table. Each of the 4 tables will focus on a given different ‘perspective’ of the cyber

threat landscape to consider. Attendees will be asked to select 2 out of the possible 4 Roundtables when they register. The CISO audience will rotate their choice of tables once. The two Co-facilitators and a note-taker will remain fixed to each table to lead and capture the key discussion points, observing The Chatham House Rule.

Shared output benefits

Notes will be taken throughout the roundtable discussions, observing the Chatham House Rule. Once all the feedback has been compiled and written up, the end-result will form the ‘Cyber threat 360 output report’, a report that will be distributed to all attendees in the weeks following the event with the combined thoughts and conclusions from the participating leading companies.

*Please note that registration for this particular event is only open to CISOs and similar senior cybersecurity practitioners currently working in-house for corporates (financial services, energy, utilities, gaming/gambling…). All online registrations are subject to final approval by Pulse Conferences.

Co-hosted by

360 degree protection – It takes a combination of the latest human expertise and continuously improving technology to comprehensively predict, prevent, detect and respond to threats.

Rest easy – F-Secure’s holistic portfolio of cyber security solutions and services will cover all of your organization’s cyber security needs. Our extensive human knowledge and insight, combined with smart software and cutting edge AI, merge into a single entity, dedicated to protecting you.

The world is becoming digitalized and connected. Due to this, cyberattacks and cyber-crime continue to be among the most critical challenges the world is facing. While the complexity and magnitude of problems increases, expertise is concentrating into a limited number of specialized security companies. For three decades, F-Secure has driven innovations in cyber security, defending tens of thousands of companies and millions of people. We are transforming from an endpoint protection company to a cyber security leader with a broader set of products and services.

F-Secure’s competitiveness is based on extensive experience in cyber security, and a unique combination of man and machine. Our extensive experience, knowledge and insight in cyber security, combined with our global intelligence network, smart software and cutting edge artificial intelligence makes us the perfect trusted cyber security partner for companies of all sizes as well as individuals. We are the proud security advisor to many of the world’s largest and most demanding organizations e.g. in the banking, automotive and airline industries as well as the military and law enforcement sector. Our expertise is continuously developed, as we take on the toughest of assignments.

As F-Secure seeks to accelerate growth, we continue to focus growth investments in corporate security. We provide best-in-class services and solutions to the mid-market, especially for customers seeking to buy prevention, detection and response as a service. We foresee the market moving towards managed endpoint security, and see especially strong growth in detection and response services. As we expand our product and service offering, we are also making it more integrated in order to offer efficient and comprehensive turn-key solutions to our customers and partners.

Summary of key drivers and benefits of the MWR InfoSecurity acquisition

• Digitalization and the rapidly increasing number of cyberattacks create significant cyber security risks for companies, driving customer demand for new types of cyber security products and services.
• One of the fastest growing market segments is detection and response solutions (EDR), and managed detection and response services (MDR). Currently, only a fraction of companies have the capabilities needed to consistently counter targeted attacks.
• F-Secure has a strong offering for detection and response solutions and services and continues to see significant business opportunities in these emerging markets. F-Secure aims to be a key player in this segment. Combining the acquired technologies with F-Secure’s existing capabilities enables the company to offer truly industry-leading detection and response solutions.
• The acquisition makes F-Secure one the few truly global technical cyber security advisors, uniquely positioning it to support both midmarket companies and large enterprises across the globe. It also makes F-Secure the largest European single source of cyber security services and detection and response solutions.
• MWR’s world-class research and experience in securing some of the most challenging and mature enterprise environments makes its threat hunting solution unique. With the acquisition F-Secure gains unparalleled insight from across its cyber security services into the attacker mindset, the challenges SOCs face, emerging TTPs, and the latest response techniques.

Today businesses are challenged by a dynamic advanced threat landscape in which attackers continuously use well-designed technology to circumvent traditional protection. Security perimeters are no longer enough to protect organizations, and developing better security capabilities on their own is out of reach for many organizations. Due to the shortage of skilled cyber security experts in-house there is a huge demand for both products and services to proactively search for newly emerging threats, detect and respond faster and especially stop future incidents. F-Secure’s combination of man and machine – an approach bolstered by F-Secure’s acquisition of MWR InfoSecurity – uniquely positions the company to support businesses to fight advanced attacks with its cyber security products and services.

The combined company has hundreds of the world’s best cyber security consultants, making F-Secure one of the few truly global technical security advisors positioned to help organizations fight today’s most sophisticated threats. Learnings from the most challenging incident investigations and from targeted attack simulations provide insights that feed directly back into product creation, ensuring the company’s detection and response solutions are constantly upgraded to meet the latest threats.

www.f-secure.com

Pulse Conferences is the connective platform for professionals working in governance, security, cyber, risk, audit, legal, compliance, privacy and investigations as well as the lines of business, executive suite and the board itself. Our purpose is to inspire and connect these leaders that form the distinct but connecting backbone of public and private sector organisations alike through ‘live’ community based face to face events – international conferences, localised roundtable discussions and training courses.

Working collaboratively as an industry stakeholder with industry stakeholders, Team Pulse develops and hosts events that respond directly to the ebb and flow of current and emerging business landscapes. We build trusted business communities. Our events are held under the Chatham House Rule.

www.pulseconferences.com

Co hosted by

Download the invite here

Who attends

Designations include

• Chief Information Security Officer / Head of Information Security/ BISO
• Director Cybersecurity / Cyber Threat Intelligence / Response/ CERT
• CIO / IT Director/ CTO
• Director Security Architecture / Infrastructure
• Director Business Innovation /
• Director Data Governance / Information Management / Risk
• Director Security / Security Operations
• Chief Operations Officer / Director Operational Risk
• Director Security Planning / Cyber Risk
• Chief Risk Officer / Compliance / Governance / Counsel
• Chief IT Auditor / Head IT Audit / Technology Risk / Assurance

Designed for core industries

• Financial Services
• Insurance
• Gaming / Gambling
• Energy
• Utilities
• Aerospace & Defence

Co-hosted by

Download invitation

Venue

Simpson’s in the Strand

100 Strand, London WC2R 0EW
www.simpsonsinthestrand.co.uk

From the Knight’s Bar to the Grand Divan, Simpson’s in the Strand’s unique culinary story is a tale of traditions upheld, undiluted by the tide of time over two centuries. Today, this exclusive restaurant offers a landmark London dining experience.

In 1828, The Grand Cigar Divan opened as a chess club and coffee house at 100 Strand where Simpson’s in the Strand today is located and chess has been woven into the fabric of the restaurants story ever since. Simpson’s was also a great favourite of Sir Arthur Conan Doyle, Charles Dickens, George Bernard Shaw, Benjamin Disraeli and William Gladstone. P.G. Wodehouse described the restaurant as a “restful temple of food”.

Close to Covent Garden, Simpson’s in the Strand will keep your heart inspired and your stomach full.

Networking reception
The Yacht London
17.00-19.00

Temple Pier, Victoria Embankment, London WC2R 2PN
www.theyachtlondon.com

After The Cyber Threat 360 Roundtable, F-Secure and Pulse Conferences welcome all guests and co-facilitators to a networking reception at The Yacht London, only a 5-10 minutes walk from Simpson in the Strand. The top Deck Terrace & Bar provides the perfect location for an open air networking event with unique opportunities to connect with peers and expand your trusted professional networks while enjoying unparalleled views of London for sunset.