Security Strategy 2023: Cyber Security Underpins the Agile and Resilient Digital Business

To effectively defend against today’s increasingly sophisticated cyberattacks, security operations teams need a fresh approach. This session will outline how Google Cloud is thinking about modern threat detection, investigation, and response. We’ll outline how organizations can combine reactive and proactive techniques, gain context into threat actor activity, and leverage AI as a force multiplier to keep themselves safer.

Insider threat is rapidly becoming the new buzzword in the security world. In the era of remote work and technological tools for every problem, how do we manage a much more human risk?

In this session, Sunette Runhaar from Uber will explore what drives individuals to become insider threats and the different risks posed by malicious and unintentional insider threats. 

We’ll discuss how organizations can spot and build resilience against insider threats, balancing trust, control, and technology in their approach.

In this presentation, Tanium’s Chief Security Advisor, Zac Warren, will discuss what key programs every organization needs in order to be ready for the forthcoming new regulations in cybersecurity. 

In this presentation, Jukka will share TomTom's remarkable journey to achieving ISO27001 certification in record time, while scaling their security program to cover 80% of the organization within one year. You will learn practical lessons for accelerating your own ISO certification journey and sustaining long-term effectiveness.

Jukka will provide the following interesting insights:

• Quantify the business benefits of ISO certification - including improved customer trust, reduced cyber risk exposure, better insurance rates, meeting supply chain requirements, etc. This shows why it's worth the effort for IT leaders.
• Discuss the cultural shift required within IT to achieve certification - moving from a reactive to proactive security posture, aligning KPIs with security goals, getting buy-in from the entire organization. This helps CIOs and CISOs lead such a change. 
• Highlight the need for senior management support - not just financial resources but commitment of time, visibility and emphasis on security metrics. IT leaders need top management backing to drive security transformations.
• Explain the phased approach TomTom took - initial scope, then scaling up. This provides a blueprint for CIOs and CISOs to implement an incremental journey within their own organizations.
• Share tips for building a structured ISMS - policies, processes, roles, responsibilities, controls. IT leaders can apply these lessons to get started or improve their current security management system.
• Discuss key technology enablers used - things like automation, logging/monitoring, network segmentation. This gives insights into practical tools that helped accelerate TomTom's progress.
• Emphasize that certification is not a one-time fix - a mature ISMS requires constantly updating to meet changing security and compliance needs. ISO is an ongoing journey that IT leaders must adapt to.

With Generative AI developments taking the world by storm, it poses all sorts of interesting ethical questions and presents some novel legal challenges for companies that are developing or using these tools, its users and regulators that are grappling with reigning in the risks associated with AI.

This session outlines some of the legal issues that may arise with the use of AI and the state of play of AI specific regulations that are being developed within Europe.