Todd Perrault, Vice President, Client Solutions, Optiv

Join us in Seattle as we continue our return to the physical world by featuring a thought-provoking and innovative OptivCon keynote series, The Future of Cybersecurity. The inaugural keynote will be delivered by Todd Perrault, Vice President, Client Solutions. Join Todd as he discusses how to craft and hone a future-built mindset that will enable you and your organization to evolve to meet whatever any future may bring.

John Ayers, Vice President, Advanced Detection & Response, Office of the CTO, Optiv

Marty McDonald, Sr. Demand & Delivery Manager, Optiv

Extended Detect and Respond, XDR, was coined by Palo Alto Networks in 2018 and has continued to morph as the market is defined. The market is being defined in two categories today, Open and Native. The goal of XDR is to unify a variety of technologies (e.g. SIEM/SOAR/Threat Intel/End Point/etc.) to bring clarity to SOCs, out of the chaos of the existing tool stacks. We will explore what XDR is and isn’t, how this could impact your security spend and how SIEM may still play a role in the SOC. During this session we will discuss the differences between Open and Native platforms and the impact each architecture will have on your organization, as well as how XDR can improve your protection, detection capabilities, productivity, and lower ownership costs and how SIEM plays into the different strategies.

Grant Asplund, Growth Technologies Evangelist, Check Point

In this presentation we’ll review several of the key highlights and trends discussed in the Cyber Security Report. The data clearly shows what we’ve been doing hasn’t been working. On the contrary, attacks and the subsequent costs are continuing to rise. I’ll provide a cursory overview of how we got here and what we can do to truly impact and reverse the trends.

Katie Pelton, Sr. Advisory Consultant, OCM – CP&I, Optiv

As the pace of digital transformation accelerates, technology continues to bring together users, applications, and data. As these connections grow, there is a rise in vulnerability, complexity of threats, and effort required to prove compliance. While the focus often revolves around technology, it is equally important to factor in the people and business processes that are affected by these changes. In today’s data-driven world, it is imperative to take a new approach to IAM strategy and program governance – one that embraces and continuously integrates organizational change management into all aspects of plan, build, and run.

Rene Aguero, Global Director for Security Strategists, Splunk

The economics of attacks heavily favor the attackers. 0 day vulnerabilities and malware kits are coming with support and SLAs similar to legitimate software vendors. It is becoming increasingly difficult to stop even lower budget attacks because of this. International/Nation state cyberespionage and cyberwarfare fuels the fire of hactivists and cybercriminals by allowing the former bleeding edge tools and techniques to make their way down the chain once they are no longer deemed effective at the government level. Financial institutions were the first business sector to suffer persistent attacks because of the ease of monetization of the data that could be bought and sold on the black market. Large retail sectors quickly followed due to the prevalence and ease of access to credit card data that can quickly be turned into cash. Healthcare targets are next on the cybercriminals lists. Healthcare organizations have not been held to the same data security standards as financial institutions and payment card vendors, but their data is harder to change (SSN, healthcare data). This data can be used to spearfish, perform tax fraud and successfully execute identity theft. All of these events validate the increasing need for advances threat detection systems and ultimately faster and better forensics. Signature based AV is dead. Symantec has said so. Sandboxing can be circumvented with advanced malware that detects whether it is running within a VM. Polymorphic malware and exploits that run at the kernel level are almost impossible to stop. All of the data gathered breaches lead to better spear phishing attacks to the harvesting passwords. These passwords would allow legitimate access to data in networks and in the cloud. Password and stolen credential attacks are not only difficult to detect but also difficult to investigate. Attackers are starting to mine this data that will ultimately be used in future attacks. Forensics tools that focus on user cred entials, stolen passwords and lateral movement make it easier to uncover threat actor movements within a network and the extent of the breach. Despite all of the threats heading our way, this is not a moment for despair. This is a time for action. Building security response teams, bringing on security response services and using tools that limit the extent of breaches and attacks are critical to our success. Offensive security is the best method to ensure that defensive countermeasures are working effectively. This session will explore automated and manual techniques used by hunters focusing on being able to search vast amounts of data quickly as well as leveraging machine learning and data science to help tip the scales back in our favor.

Rommy Hijazi, Senior Manager - CDX, Optiv

Sean Tufts, Practice Director, Product Security - ICS & IOT, Optiv

Investments in Connected Worker capabilities are have grown from $400B in 2015 to $600B in 2020 and expected to double by 2025, alongside a massive increase in connected devices IoT from 7B in 2018 to 27B in 2019 with an estimation of 40B by 2025. By 2021 AI augmentation will create $2.9T worth of business value with 20% CAGR focusing on Decision Support and Automation, Agents (bots), and Smart Products. In 2020 enterprise spending on Cloud infrastructure surpassed data centers by 25%. Not surprising, considering 70% of F-500 CIOs and CTOs say that 60% or more of their organization's infrastructure and applications will be in the cloud in 2 years. Alongside the digital transformation ambition of the business, new risks are introduced. However, cybersecurity can play a key part in becoming a key enabler unlocking billion-dollar use cases. We will present and holistic approach to identifying the business needs, assess the desired state vs the organization’s maturity, define an actionable transformation roadmap, and implement differentiated capabilities that will accelerate the speed to value, through a collection of case studies.

Aubrey Turner, Executive Advisor, Ping Identity

Conflict often arises between security and convenience and compromises have to be made. Marketing wants to make it as easy as possible for customers to reach products and services while security is tasked with protecting assets and often throws up barriers. This not only creates friction between departments with opposing objectives, but the friction might ultimately find its way to the end-users. So is it possible to have zero trust while providing zero friction for end-users without compromises and how do organizations ultimately bridge the gap to create frictionless user experiences?

Jim Bundy, Practice Director, Risk Management & Transformation, Optiv

Mark Modisette, Engineering Fellow, Optiv

Daily we see reports of new data breaches and ransomware attacks that have significant impact to the companies and even our economy. Yet these companies that are being attacked have spent significant time and monies to secure their data and networks. This presentation will guide attendees through a typical security journey starting with an ad-hoc security program through gaining compliance to regulatory standards such as PCI DSS, HIPAA or NIST. We will then look at the process of moving from a compliance-driven security program to a risk management program aligned with business operations and goals. We will also review risk automation opportunities and use cases. This presentation will focus on providing the attendees meaningful and actionable recommendations to help guide them through their security journey and building a business-aligned risk management program. This presentation will discuss Risk Management, 3rd party Risk Management, Integrated Compliance, Risk Automation, Cyber Resilience, Cloud Security, Risk Reporting and Business Alignment.

Dustin Anders, Global Vice President of Systems Engineering, Illumio

Zero Trust has got to be one of the most talked about themes in cyber security. While the term means different things to different people, there are two things that can be agreed on: it’s a journey worth taking and microsegmentation is a key pillar of that journey. The next question always is how do you get started? Regardless of the sophistication of ransomware, the end goal is always the same: get in through a vulnerability and move laterally through your network. Join this presentation as we help peel back the layers to provide you simple steps to protect yourself from these threats that include: • Gaining visibility to where you are the most vulnerable • Closing risky ports • Leveraging tools you already have in place without adding layers of complexity While the journey can seem intimidating, we’ll help you realize that it doesn’t take a team of 100 or a PhD to deploy zero trust microsegmentation that will protect your organization and keep ransomware at bay.

Mike Volk, Senior Manager, Threat Management, Optiv

Just a few years ago Cyber Insurance was a novel, inexpensive and optional coverage. Fast forward to today, cyber insurance now being added as a requirement in many client and vendor contracts and is hard to envision operating a business in without having this critical coverage in place. The complex cyber threat and regulatory landscape helped Cyber Insurance develop and mature quickly into a reliable backstop for modern risks, but the same environment is causing significant volatility in the market at a time when cyber insurance is needed most. The purpose of this session is to take a look at the purpose of cyber insurance, examine the forces shaping its development and discuss where cyber insurance it is headed. We will also look at cyber insurance in the broader context of cyber threat management and provide tips to maximize the value of your policy.

Shawn Taylor, Vice President, Threat Defense, ForeScout

Vedere Labs, the threat research team from Forescout Technologies, has been closely monitoring the cyber activities associated with the war raging in Ukraine. This session will discuss Vedere Labs threat intelligence, and the threat hunting capabilities of Forescout Frontline specifically focused on the current threat landscape posed by Russian adversaries.

Jerry Chapman, Engineering Fellow, Optiv

Over the span of weeks in 2020, Zero Trust went from being a marketing buzzword to the best strategy for securing the non-perimeter from all unknown users, devices and applications seeking access. Yet nearly two years later, there is still confusion about what Zero Trust maturity looks like and even the actual definition of Zero Trust. Join our Zero Trust expert who will be answering three primary questions: What are the stages of Zero Trust maturity – and where are you? What are the most common – and effective – strategies for embracing Zero Trust? Where should you invest to expand your Zero Trust footprint in 2022?

Mike Farley, Practice Lead – Identity Protection, CrowdStrike

Attacks against critical and enterprise infrastructure have escalated dramatically. As a result, numerous recommendations and executive mandates have recently been issued by various agencies as a patchwork of technical requirements. Nearly all of these efforts include one common solution to modern security breaches like ransomware – Zero Trust. In this session, we will break down the key elements of Zero Trust and how this improves the cyber insurability of those organizations electing for insurance.

Rich Eicher, Cyber Resilience Architect, Specialty Engineering, Rubrik

How Cyber Resilient data protection keeps data safe Corporate data is under attack. Ransomware is now a multi-billion dollar industry with no signs of slowing down. Just watching the evening news, it is clear that organizations are not ready for this new reality and oftentimes are stuck paying millions just to get their data safely back. With security teams now mandated to build solutions to this problem, the industry is being flooded with new tools and technologies focused on keeping the bad guys out. But building bigger and more walls isn’t enough. The data itself must be protected in a way that keeps it secure from outside attack while also being monitored to ensure it is 100% safe to recover. In this session, we will discuss the ever-evolving threat of ransomware and how to create a holistic cyber resiliency posture. Learn how Optiv and Rubrik go beyond simple recovery to provide intelligent insights and a revolutionized approach to zero trust data management, dynamic threat detection, granular recovery, and compliance.

Steve VanDyke, Senior Threat Researcher, Exabeam

Focusing your organizations threat hunting based off IOCs will only get you so far. IOCs and attack techniques can change, but if you know what normal is in your organization you have a much better chance of finding the outliers and possible malicious activity.

Peter Scheffler, Senior Solution Architect, F5

Gartner defined Web Application and API Protection (WAAP) as the evolution of the web application firewall market (WAF), expanding WAF capabilities to four core features: WAF, DDoS protection, bot management and API protection. WAAP development started with cloud-delivered WAF services that were easier to deploy, and from the start bundled WAF with DDoS protection. F5 has been a major player in this space for more than a decade, enjoying varying positions in the Gartner Magic Quadrant, including the elusive "Top Right Quadrant". Recently the market has shifted towards 'aaS' - as a Service - solutions for many of these functions. We are no stranger to offering these functions in the formats our customers demand...on-prem, in-cloud, self-managed as a service and fully managed as a service. Join us as we walk through strategies to help fortify your organizational assets against emerging threats; reduce the number of point solutions and centralize security policy enforcement across distributed environments; deploy consistent policies across your entire estate of apps regardless of where they’re hosted and learn about many more benefits a WAAP solution can provide.

Michael Lutomski, Global Spaceflight Entrepreneur, former executive, and speaker

When a rocket takes off, when a spacecraft returns to earth barreling through the atmosphere at 25 times the speed of sound, there’s no way to guarantee 100% safety for the crew or 100% reliability of the vehicle. After 65 years, spaceflight remains a high-risk endeavor. Spaceflight is still in its early years, still evolving and growing against a backdrop of an everchanging and technologically evolving world. Likewise cyber security is essential to our ensuring reliability and security of our economy, banking systems, and even our national security. Information and the infrastructure that carries and stores this information is at the foundation of our society. How do you control all these risks? Is there an allowable threshold for failures? What is safe enough, what is reliable enough? Mr. Lutomski will discuss approaches used by the both government and commercial space industries, how risk management processes are implemented, and how critical risks are communicated to key decision makers. He will discuss fundamental approaches that are common to all industries and lessons learned from his nearly 40 years in the human spaceflight.