Security Strategy 2023: Cyber Security Underpins the Agile and Resilient Digital Business

Strategic, integrated approach to Zero Trust and Resiliency accelerates tangible business benefits and creates confidence among internal and external stakeholders.

In the ever-changing world of cyber threats, we want to emphasize the urgent need for forward-thinking strategies, harnessing the power of AI and machine learning. How has the cybersecurity landscape changed in the last decade? How can we transform our defenses to be not just reactive, but resiliently proactive?

Large language model chatbots are tireless and efficient in producing software code; they don't need coffee nor time off. However, AI isn’t perfect – which is not surprising, since it is based on human intelligence, which isn’t either! 

This session addresses security aspects of AI supported coding requiring human oversight and processes. Topics covered include reflections on security defects, IP and legal license aspects. 

We will also be discussing this question: how do we effectively apply similar security measures, as with human produced software code, to ensure AI + DevOps = DevSecOps?

In this presentation, Jari Puhakka, will cover the development and management of a risk management and compliance framework for data privacy and protection. He will discuss the challenges faced, successful strategies employed, and lessons learned in implementing such a framework.

He will touch upon the key responsibilities, challenges, and strategies involved in ensuring GDPR compliance within the organization and also highlight the importance of data security and offer insights into practical measures taken to protect personal data.

The CISO job comes with a responsibility. This presentation will reveal what responsibility means in Petri Koivisto’s point of view.

Zero trust is a popular theme that is widely used in the cybersecurity industry. But what exactly does this strategy entail, what are the developments and what does Zero Trust look like in the future? During this presentation, Tony Fergusson, CISO EMEA at Zscaler, will elaborate on this theme. In addition, Negative Trust (Deception) Technology will also be discussed in detail. Using Negative Trust as part of a zero trust architecture helps organizations become more resilient against advanced attacks and any kind of human-operated ransomware or supply chain threats.

Highlights of the session:

• How to mitigate risk of attacks that target Zero Trust environment
• What’s the next after Zero Trust? How do you stop insider threats?
• The benefits of Deception Technology

What does it really means to be a CISO, what skills are useful and what are the main challenges.

In this presentation, Petteri will share his lessons learned from Air Traffic Control in Finland – a typical OT environment.

This presentation focuses on the principles and practices of operational risk management, emphasising the need for organizations to build resilience in the face of uncertainty. It covers topics such as risk identification and assessment methodologies, risk mitigation strategies, business continuity planning, incident response frameworks, and the role of a robust risk culture in managing operational risks effectively.

The CISO of Ilmarinen will share the lessons he learned over the years on how to manage a supplier's information security risk at different stages of the supplier's life cycle. He will give an overview of future challenges and reflect on what and how things should be handled with the supplier.