Information Security Leaders vForum 2022

• What is Critical Data
• What is the lifecycle of Critical Data
• Where does Critical Data Live
• How to Identify Critical Data
• Risks to Critical Data
• Managing the Security of Critical Data

Speaker: Joe Marroquin, CISO, Encompass Digital Media

Vulnerability management is not glamorous, but it is one of the best ways to be proactive in securing your organization. The problem lies in the volume of vulnerabilities that come to light each year. In fact, Gartner estimates that in the past decade an average of 8,000 new vulnerabilities were disclosed each year. There is good news however. Of that number only a small percentage are exploited in the wild, and fewer still pose any level of risk to your organization – but how do you determine what is critical, and what can be ignored?

In this presentation, we will be:

• Walking through strategies to efficiently sort through mountains of data and determine which vulnerabilities pose actual risk to your organization.
  
• Create targeted returns to better highlight industry specific vulnerability risk.
• Demonstrate a data driven approach to better understand the tactics, techniques, and procedures of would-be attackers to enable teams to take proactive steps in their security programs.

Speaker: Nate Foster, Threat Intelligence Consultant, Recorded Future

Presented by: Recorded Future

APIs are now at the core of modern business, yet we continue to see how “bad” APIs lead to business disruptions, fraud, and theft of critical business and sensitive data. While it is easy to perform after-the-fact API autopsies to understand where it all went wrong, we seem to lack guidelines on how to build and operate “good” APIs. This session will cover the aspects of what a “good” API looks like throughout the API lifecycle, including testing, management, operations, security, and non-functional requirements.

Moderator: Hamlet Khodaverdian, Vice President, Americas, LMNTRIX

Your security team manages risks that affect business units and functions across your entire organization. Security is threaded through every aspect of your business, and your decisions have never mattered more. On a daily basis, you make decisions that affect day-to-day operations, data and system security, executive-level strategy and direction and quite possibly, the future success of your organization. Security leaders straddle the lines of executive, strategic, and tactical decision making, and must be experts at navigating all three of these levels. We’re wearing many hats, often switching between them from meeting to meeting, and it’s imperative that we can effectively communicate and drive decisions that improve and mature our security efforts across the board.

This session will explore ways to enhance engagement with technical teams, business units and executives alike, while still maturing your security program to be more efficient and effective at managing and mitigating risk. Concepts and topics covered will include:

• The 3 levels of decision making you must navigate on a daily basis and how they impact the rest of the organization
• Applying meaningful metrics to demonstrate value to executives and mature program operations for optimal effectiveness
• Finding program gaps where remediation efforts or SLA compliance is lagging, and taking steps to help affected teams improve and succeed
• How Tenable helps to improve operational efficiency, address threats and vulnerabilities faster, and demonstrate tangible business value at all levels of the organization

Speaker: Nathan Wenzler, Chief Security Strategist, Tenable