IDC Denmark Security Conference 360 degree Security for Real Commercial Impact

In-Person Event | Copenhagen | 29. september 2022

Oversigt

Den 29. september 2022 afholder vi vores årlige IDC IT Security konference i Industriens Hus i København.

Efter 2 år med et digitalt set-up er vi superbegejstret for endelig at kunne skabe rammerne for en fysisk konference, hvor der udover en lang række spændende og inspirerende præsentationer bliver rig mulighed for at mødes og netværke med de øvrige deltagere, it-partnere og IDC-repræsentanter.

Der er tre hovedtemaer, som virksomheder holder ekstra tæt øje med: Tillid, modstandsdygtighed og datasuverænitet.

Tillid spiller en vigtig rolle for virksomheder, hvor sikkerhed og integritet er en afgørende målefaktor. CISO's rolle har udviklet sig til at være organisationens leder af tillidsundersøgelsen.
Modstandsdygtighed er også afgørende for at modstå uventede forstyrrelser (fx pandemi, forsyningsmangel, inflation, ekstremt vejr, massive cyber-angreb).
Datasuverænitet er især vigtig her i Europa, hvor vi har lokale og EU-regler. Vi har derfor en løbende diskussion og et fokus, der kredser om digital suverænitet.

Disse tre temaer er med til at påvirke virksomheders produkter og services inden for sikkerhed, og har en væsentlig betydning for den kommercielle og strukturelle udvikling af platforme, produkter og services – som f.eks. Security-as-a-Service.

360-graders sikkerhed er blevet en nødvendighed med flere lag af sikkerhed, som giver den absolut bedste beskyttelse. På specifikke områder identificerer IDC; Identity, Managed Security Services, OT/IT Convergence, Security-as-a-Service, Zero Trust og Cloud Security som centrale elementer i den overordnede strategi.

Der er ligeledes en stigende interesse for at måle og reducere risici samt skabe tillidsmålinger for it-partnere og tredjeparter, og vi forventer derfor ny europæisk lovgivning om tredjepartssikkerhed og risikorevision.

Deltag og få masser af ny viden og inspiration!

Tilmeld dig og deltag på IDC IT Security konference i København den 29. september 2022. Vi lover, at det bliver en dag med fuld fokus på inspiration, vidensdeling og networking.

Tilmeld dig her!

Program

Download program

Tid	Event & Taler
8:30 9:00	Registrering & morgenmad
9:00 9:05	Velkommen ved IDC Camilla Hove Toft Conference Director
9:05 9:30	IDC keynote: 360 degree Security for Real Commercial Impact Joel Stradling Research Director, European Security, IDC
IDC’s keynote will provide insights into the top trends in IT Security and share findings from our latest research. Three main areas are currently demanding businesses attention: Resilience, Trust, and Data Sovereignty. These impact business strategy, in turn driving security vendors to develop their portfolios portfolio and delivery models, with material impact on the commercial and structural evolution of platforms, products, and services – such as with Security-as-a-Service. We see that 360-degree security has become a necessity with a multi-layered approach offering the best protection. IDC identifies Detection and Response, Identity, Managed Security Services, IT/OT convergence, Security-as-a-Service, Zero Trust, and Cloud security as key pillars underpinning a comprehensive strategy. Finally, there is growing attention to managing risk and implementing trust frameworks for supply chain partners and third parties.
9:30 9:50	Detecting and stopping breaches – tooling and techniques to address skills shortages Mikkel Planck Senior Cybersecurity Specialist, CrowdStrike
Every senior manager will recognize the struggles of hiring the right people, in a job market where security professionals are a resource in high demand, and supply is severely constrained. With employees increasingly working from home and abroad, the ability to respond to adversaries becomes even more complicated and time critical. Tooling, automation and services are key to getting ahead of attackers and stop breaches, and in this session we discuss how technologies help to address skills shortages in a proactive manner.
9:50 10:10	Hvorfor bliver vores sikkerhedsproblemer værre? Hvad kan der gøres... Niels Zimmer Poulsen Head of Security Engineering, Check Point Software Technologies
Med Cyber-trusler, der eksisterer inden for og uden for sikkerhedsperimeteren, er det blevet afgørende at anvende en Zero Trust-sikkerhedstilgang for at holde forretningsdata beskyttet, hvor som helst. Vores praktiske, holistiske tilgang til Zero Trust-implementering giver dig mulighed for at undgå kompleksiteter og risici med en enkelt konsolideret Zero Trust-sikkerhedsarkitektur
10:10 10:30	Udfordringer med at bruge cloud-løsninger Henning Mortensen CISO/CPO og Formand for Rådet for Digital Sikkerhed, Brødrene A & O Johansen A/S
Efter Schrems II-dommer og anbefalingerne fra de europæiske datatilsyn er det blevet meget vanskeligt at bruge cloud-løsninger til at behandle personoplysninger. I dette indlæg vil Henning gennemgå udfordringerne og nogle af de aktuelle compliance-udfordringer vi står overfor. Desuden vil nogle af de mulige løsningsscenarier vi kan se frem imod blive gennemgået.
10:30 11:00	Kaffepause & networking
11:00 11:20	Præsentationer Spor
Session #1.1 11:00 - 11:20 How does operationalizing Cyber Threat Intelligence help your organization fight cyber threats by anticipation? Fabien Dombard Security Industry Advisor, SEKOIA.IO How does operationalizing Cyber Threat Intelligence help your organization fight cyber threats by anticipation? Over the past few years, many organizations have acquired threat detection technologies, and launched Cyber Threat Intelligence (CTI) programs to counter cyber-threats before any impact on their IT system. According to ESG research, 58% of organizations have had a CTI program in place for at least two years, but many firms still struggle to operationalize threat intelligence in an efficient manner. One of the biggest problems we are facing is the multiplicity of CTI feeds and technologies, from multiple vendors, leading to a disorganized intelligence and ultimately to an increase of the volume of security alerts. The second biggest challenge is the CTI integration into existing security process, product and infrastructure, in order to really enhance by anticipation the detection capabilities. To improve CTI operations the cyber security community, need to operationalize it thanks to new threat intelligence technologies that collect massive volumes of data with a central data management. That also include advanced analytics tools (able to be customized), and an integrated architecture to have the CTI at the heart of the cyber security stack. Session #2.1 11:00 - 11:20 Debunking Common Myths About XDR António Vasconcelos Technology Strategist, SentinelOne Debunking Common Myths About XDR There has been a tremendous buzz across the cybersecurity community about the emerging technology known as XDR (eXtended Detection & Response). Unfortunately for the practitioner, there has yet to be a single definition widely accepted by both analysts and vendors perporting to be knowledgeable on the subject. What is XDR and why should I consider the technology in my enterprise security stack? What should I expect from vendors who claim to have built the perfect mousetrap? What is reality, and what is just hype? This session is intended to walk the audience through some generally accepted value statements associated with XDR while attempting to debunk a few common myths that continue to muddy the the water for security teams. Session #1.1 11:00 - 11:20 How does operationalizing Cyber Threat Intelligence help your organization fight cyber threats by anticipation? 11:00 - 11:20 How does operationalizing Cyber Threat Intelligence help your organization fight cyber threats by anticipation? Over the past few years, many organizations have acquired threat detection technologies, and launched Cyber Threat Intelligence (CTI) programs to counter cyber-threats before any impact on their IT system. According to ESG research, 58% of organizations have had a CTI program in place for at least two years, but many firms still struggle to operationalize threat intelligence in an efficient manner. One of the biggest problems we are facing is the multiplicity of CTI feeds and technologies, from multiple vendors, leading to a disorganized intelligence and ultimately to an increase of the volume of security alerts. The second biggest challenge is the CTI integration into existing security process, product and infrastructure, in order to really enhance by anticipation the detection capabilities. To improve CTI operations the cyber security community, need to operationalize it thanks to new threat intelligence technologies that collect massive volumes of data with a central data management. That also include advanced analytics tools (able to be customized), and an integrated architecture to have the CTI at the heart of the cyber security stack. Fabien Dombard Security Industry Advisor, SEKOIA.IO Session #2.1 11:00 - 11:20 Debunking Common Myths About XDR 11:00 - 11:20 Debunking Common Myths About XDR There has been a tremendous buzz across the cybersecurity community about the emerging technology known as XDR (eXtended Detection & Response). Unfortunately for the practitioner, there has yet to be a single definition widely accepted by both analysts and vendors perporting to be knowledgeable on the subject. What is XDR and why should I consider the technology in my enterprise security stack? What should I expect from vendors who claim to have built the perfect mousetrap? What is reality, and what is just hype? This session is intended to walk the audience through some generally accepted value statements associated with XDR while attempting to debunk a few common myths that continue to muddy the the water for security teams. António Vasconcelos Technology Strategist, SentinelOne
11:25 11:45	Presentations Spor
Session #1.2 11:25 - 11:45 What DevSecOps can learn from Elon Musk Joseph Bernie Solutions Engineer, Sonatype What DevSecOps can learn from Elon Musk Nowadays, digitalisation and software are increasingly important competitive factors for companies. Software development has to become faster and more scalable, and must rely on open source more than ever. At the same time, quality and security cannot be neglected. Next-generation cyber attacks actively targeting open source software projects have increased 430% year-over-year. Most recently, the Dependency Confusion attack and the Log4j vulnerability made headlines. Are these practices for balancing speed, quality and security new? Not at all. Join our session to discover the parallels between DevSecOps and space, and pick up some of Elon Musk’s best practices for your DevSecOps journey. Session #2.2 11:25 - 11:45 Simplify your hybrid cloud networking & security Ari Thor Gudmannsson Specialist Architect - Networking & Security - EMEA, Nutanix Simplify your hybrid cloud networking & security Join this presentation to learn how Nutanix is able to simplify your networking and security across all clouds and help protect your business from threats. Learn why it's important to not only remove complexity, increase efficiency, enable cloud-native use cases, and cut costs, but also ensure you’re well-prepared for increasingly sophisticated cyber threats. Session #1.2 11:25 - 11:45 What DevSecOps can learn from Elon Musk 11:25 - 11:45 What DevSecOps can learn from Elon Musk Nowadays, digitalisation and software are increasingly important competitive factors for companies. Software development has to become faster and more scalable, and must rely on open source more than ever. At the same time, quality and security cannot be neglected. Next-generation cyber attacks actively targeting open source software projects have increased 430% year-over-year. Most recently, the Dependency Confusion attack and the Log4j vulnerability made headlines. Are these practices for balancing speed, quality and security new? Not at all. Join our session to discover the parallels between DevSecOps and space, and pick up some of Elon Musk’s best practices for your DevSecOps journey. Joseph Bernie Solutions Engineer, Sonatype Session #2.2 11:25 - 11:45 Simplify your hybrid cloud networking & security 11:25 - 11:45 Simplify your hybrid cloud networking & security Join this presentation to learn how Nutanix is able to simplify your networking and security across all clouds and help protect your business from threats. Learn why it's important to not only remove complexity, increase efficiency, enable cloud-native use cases, and cut costs, but also ensure you’re well-prepared for increasingly sophisticated cyber threats. Ari Thor Gudmannsson Specialist Architect - Networking & Security - EMEA, Nutanix
11:50 12:10	Præsentationer Spor
Session #1.3 11:50 - 12:10 Transform your business with Internet-native architecture Niklas Jörding Zero Trust & SASE Lead, Cloudflare Transform your business with Internet-native architecture Digital transformation means a lot of different things to different businesses however, it is best thought of as a combination of: A cultural shift in the way that employees work, a reinvention of your go to market model and changes in the way that your customers wish to interact with your business. IT has often been seen as a necessary component in the past however rarely has it been seen as a catalyst for change. Living in an ever more online first world we have been presented with a major opportunity for positive change; with applications increasingly moving to the cloud, companies re-evaluating where are their teams based and whether or not they will work in offices, and 5G and the rise of the importance of privacy, it has pushed companies to look at adopting a more efficient and simplified, secure zero trust model. Join session to learn about: How the move to an always on, cloud first platform can cause a cultural shift in your business enabled by the advantages of a modern zero trust approach, architected for where your business is growing not just where it came from. How shifting your network and security infrastructure to the cloud and consolidating it into one composable service platform can give you a major competitive advantage. Session #2.3 11:50 - 12:10 Safer with Google technology and expertise Patrik Bylund Product Sales Manager, Google Cloud Safer with Google technology and expertise Google keeps more people safe online than anyone else. This scale has required us to deliver pioneering approaches to cloud-native security, which we bring to enterprises everywhere they operate. Leveraging the unmatched scale of our data processing, novel analytics approaches with AI/ML, as well as a focus on eliminating entire classes of threats, Google brings you the tools, insight, and partnerships that can transform your security to meet the requirements of our rapidly transforming world. Session #1.3 11:50 - 12:10 Transform your business with Internet-native architecture 11:50 - 12:10 Transform your business with Internet-native architecture Digital transformation means a lot of different things to different businesses however, it is best thought of as a combination of: A cultural shift in the way that employees work, a reinvention of your go to market model and changes in the way that your customers wish to interact with your business. IT has often been seen as a necessary component in the past however rarely has it been seen as a catalyst for change. Living in an ever more online first world we have been presented with a major opportunity for positive change; with applications increasingly moving to the cloud, companies re-evaluating where are their teams based and whether or not they will work in offices, and 5G and the rise of the importance of privacy, it has pushed companies to look at adopting a more efficient and simplified, secure zero trust model. Join session to learn about: How the move to an always on, cloud first platform can cause a cultural shift in your business enabled by the advantages of a modern zero trust approach, architected for where your business is growing not just where it came from. How shifting your network and security infrastructure to the cloud and consolidating it into one composable service platform can give you a major competitive advantage. Niklas Jörding Zero Trust & SASE Lead, Cloudflare Session #2.3 11:50 - 12:10 Safer with Google technology and expertise 11:50 - 12:10 Safer with Google technology and expertise Google keeps more people safe online than anyone else. This scale has required us to deliver pioneering approaches to cloud-native security, which we bring to enterprises everywhere they operate. Leveraging the unmatched scale of our data processing, novel analytics approaches with AI/ML, as well as a focus on eliminating entire classes of threats, Google brings you the tools, insight, and partnerships that can transform your security to meet the requirements of our rapidly transforming world. Patrik Bylund Product Sales Manager, Google Cloud
12:10 13:10	Frokost & networking
13:10 13:30	Trusselslandskabet forværres – forstår og tager vi også hånd om de store påvirkninger cyberangreb kan have? Henrik Løth Thiesen Global Director Information Security & Risk Management, Vestas
I mange virksomheder er den basale sikkerhed et velkendt fænomen og tager dermed godt hånd om det udefrakommende pres på sikkerhedsforanstaltninger. Der rejser sig dog samtidigt et spørgsmål om dette er tilstrækkeligt eller om vi også har brug for at forstå og imødegå de store påvirkninger et cyberangreb kan medføre? Henrik Løth Thiesen har på tværs af flere samfundskritiske sektorer og større internationale virksomheder arbejdet med forskellige tilgang til sikkerhed. Han vil tage os igennem måder man kan håndtere dette på og dermed melde sig ind i den igangværende kamp mod de forskellige typer af ondsindede cyberaktører.
13:30 13:35	Introduktion til Fireside Chat præsentationer
13:35 13:50	Fireside chat: Intelligent network monitoring and visibility truly matters Roman Cupka Senior Principal Consultant, Progress Software Joel Stradling Research Director, European Security, IDC
Nowdays network, application and security departments are struggling with massive network communication, hidden threats and missconfigurations which allows various vectors resulting in cyber security incidents. Many times it is happening because of lack of single pane of view, right information sharing and automate workflow between these departments in daily operation. Network anomaly detection and response automation, deep network traffic analysis and data collection helps to get better insight into "what’s really going on" in our environment and provide faster MTTR in case of operational and security issues. It is also fundamental part of NIST Incident Handling procedures and helps to fullfil regulations and legislation requirements like NIS(D) in Europe. We will discuss why network visibility really matters, how it use in daily cross-departments operation and get the most of it and why we should not forget it when building a resilient security architecture.
13:50 14:05	Fireside chat: AI based cyber resilience – deployment with Zero Trust Simon Wikberg Principal Sales Engineer - Nordics & Benelux, BlackBerry Jan Horsager Research Director, IDC
Zero Trust is a verification framework that impacts the whole organization from endpoints to users whereby the balance between technology and people is vital to protect information and remain resilient. Prevention against continuous malware attacks is critical, as is the augmentation of security operations with tools that ensure visibility across the entire estate while deploying prevention-first to safeguard business continuity. We discuss new controls which overcome the ITSEC resource challenges and prove effective in the real world at scale. How can AI and ML be applied to ensure organizational cyber resilience via Zero Trust? How can MDR services be leveraged for further empowerment? We explore a sustainable cyber-future of continuous and integrated protection from malware via Zero Trust in and out of the cloud using AI’s predictive advantage to prevent attacks before they happen.
14:05 14:35	Kaffepause & networking
14:35 14:50	Fireside chat: Challenge the Rules of Security - Transform the threat surface to proactive control Pritam Pabla Head of Chrome Customer Engineers EMEA, Google Jan Horsager Research Director, IDC
With the dramatic increase in distributed workforces and the growing adoption of cloud applications, companies face unprecedented levels of IP, data, and identity sprawl beyond the enterprise firewall. Every endpoint is an entry into your business, cybercriminals have more ways to break in than ever before, and human error on the inside is a constant risk. Historically, endpoint security has been a zero-sum game—with the odds inevitably stacked against IT. But rather than protect devices, what if you could just control the security of them? In this presentation, see how Chrome OS and Chrome browser are secure by design—embedding security into every workflow to provide proactive protection for users, devices, applications, and data, wherever work happens. This is cloud-first security control in the hands of the modern businesses that will thrive moving forward.
14:50 15:05	Fireside chat: How to balance endpoint protection and productivity through zero trust? Penny Topping North West Europe CyberSecurity Sales Manager, HP Joel Stradling Research Director, European Security, IDC
15:05 15:10	Fireside chat - afrunding & take-aways
15:10 15:35	Bliv opdateret på EU’s NIS2-direktiv (Netværks- og Informationssikkerhed) Peter Lind Nielsen Managing associate, Bech-Bruun
Nu er EU’s NIS2-direktiv (Netværks- og Informationssikkerhed) lige på trapperne, og selvom der er knap to år, før det skal være implementeret i Danmark, venter der forud for mange en stor compliance opgave. NIS2 vil i modsætning til NIS1 omfatte langt flere typer af virksomheder og aktiviteter og med bl.a. fokus på leverandørkæden så vil selv virksomheder der ikke selv bliver omfattet formentlig skulle forholde sig kravene. Med hvad betyder NIS2 egentlig, hvem er omfattet, hvilke systemer og enheder er omfattet, hvad er kravene, og ikke mindst hvad kan man allerede nu tage fat på?
15:35 15:45	Afrunding og take-aways Joel Stradling Research Director, European Security, IDC Camilla Hove Toft Conference Director
15:45 16:15	Networking & EXPO
16:15 16:15	Tak for i dag!

Talere

Camilla Hove Toft

Conference Director

Joel Stradling

Research Director, European Security, IDC

Mikkel Planck

Senior Cybersecurity Specialist, CrowdStrike

Niels Zimmer Poulsen

Head of Security Engineering, Check Point Software Technologies

Henning Mortensen

CISO/CPO og Formand for Rådet for Digital Sikkerhed, Brødrene A & O Johansen A/S

Fabien Dombard

Security Industry Advisor, SEKOIA.IO

António Vasconcelos

Technology Strategist, SentinelOne

Joseph Bernie

Solutions Engineer, Sonatype

Ari Thor Gudmannsson

Specialist Architect - Networking & Security - EMEA, Nutanix

Niklas Jörding

Zero Trust & SASE Lead, Cloudflare

Vis mere

Partnere

Diamond Partner

In-Person

Diamond Partner

In-Person

Platinum Partner

In-Person

Platinum Partner

In-Person

Platinum Partner

In-Person

Platinum Partner

In-Person

Gold Partner

In-Person

Gold Partner

In-Person

Gold Partner

In-Person

Gold Partner

In-Person

Gold Partner

In-Person

Gold Partner

In-Person

Sted

Industriens Hus

Materialer

Kontakt os

Camilla Hove Toft

Konferencedirektør

Peer Jensen

Senior Sales Director, IDC Northern Europe Region, IDC Nordic

Om IDC

58 År | 1300 Analytiker | 110 Lande

International Data Corporation (IDC) er den førende globale udbyder af markedsundersøgelser, rådgivningstjenester og arrangementer på markedet for informationsteknologi, telekommunikation og forbrugerteknologi. Med mere end 1.300 analytikere over hele verden tilbyder IDC global, regional og lokal ekspertise inden for teknologi og industri muligheder og tendenser i over 110 lande. IDCs analyser og indsigt hjælper IT-fagfolk, forretningsledere og investeringssamfundet med at tage faktabaserede teknologiske beslutninger og med at nå deres centrale forretningsmæssige mål. IDC blev grundlagt i 1964 og er et helejet datterselskab af International Data Group (IDG), verdens førende medie-, data- og marketingtjenesteselskab. Vil du vide mere om IDC: www.idc.com .

IDC Denmark Security Conference 360 degree Security for Real Commercial Impact

Oversigt

Program

Registrering & morgenmad

Velkommen ved IDC

IDC keynote: 360 degree Security for Real Commercial Impact

Detecting and stopping breaches – tooling and techniques to address skills shortages

Hvorfor bliver vores sikkerhedsproblemer værre? Hvad kan der gøres...

Udfordringer med at bruge cloud-løsninger

Kaffepause & networking

Præsentationer Spor

Presentations Spor

Præsentationer Spor

Frokost & networking

Trusselslandskabet forværres – forstår og tager vi også hånd om de store påvirkninger cyberangreb kan have?

Introduktion til Fireside Chat præsentationer

Fireside chat: Intelligent network monitoring and visibility truly matters

Fireside chat: AI based cyber resilience – deployment with Zero Trust

Kaffepause & networking

Fireside chat: Challenge the Rules of Security - Transform the threat surface to proactive control

Fireside chat: How to balance endpoint protection and productivity through zero trust?

Fireside chat - afrunding & take-aways

Bliv opdateret på EU’s NIS2-direktiv (Netværks- og Informationssikkerhed)

Afrunding og take-aways

Networking & EXPO

Tak for i dag!

Talere

Partnere

Sted

Materialer

Kontakt os

Om IDC