Data Connectors is proud to host the Detroit Virtual Cybersecurity Summit.

Public Cloud Security Challenges- Why they’re different and how to overcome them

Public cloud security can seem like a massive undertaking. Organizations are being bombarded with news stories related to data breaches and other public cloud security issues. Many organizations are either choosing to wait or facing common challenges as they enter the world of public cloud. In this talk I will cover some of the common security concerns that exist when moving to the public cloud and how they can be overcome.

Speaker’s Bio:

Sarah Elie is a Cloud Security Architect with Check Point, the leading cyber security vendor for over 25 years. She has over 2 decades experience in IT and has specialized in cybersecurity for the last 16 years. With roles in engineering, architecture and senior management, Sarah has been responsible for the security of many large corporations in the financial, healthcare and government industries. In her current role with Check Point she acts as an advisor for cloud security. Developing real world solutions for some of the toughest security problems facing businesses today.

Real talk on ransomware

We all know what ransomware is – we know the stats, we’ve seen the headlines, we’re all in the mindset of “if, not when.” With all the fear, uncertainty and doubt constantly bombarding IT professionals, Arcserve dives into the realities of ransomware attacks and the real impacts on organizations. Join us for a unique perspective on how organizations can prepare for and defend against ransomware attacks.

Speaker’s Bio:

Stacey Budd has been working with Arcserve solutions since 2007 and joined the company as a Presales Consultant back in 2014. Prior to that, he worked for TechData as a System Engineer supporting several IT products including Arcserve. He also served in the United States Air Force as a Nuclear Weapons Specialist.

When he isn’t educating the world about Arcserve Unified Data Protection, you can often find him fishing. Or Kayaking. Or preferably fishing while kayaking in the warm Florida sun.

How to counter data theft by eliminating the insider threat

Insider threats are among the top IT security risks organizations today must brace for. Conventional security measures typically focus on external attacks, but do not provide protection against attacks from potential internal perpetrators. Simon Cuthbert, responsible for International Business Development at tenfold, will demonstrate why you must never underestimate the threat from within and how you can use identity and access management to minimize the risk of insider threats in your company.

Speaker’s Bio:

Simon is a 30 year veteran of the Cyber-Security industry. Having worked over the years with cutting edge security companies such as Content Technologies, CA, Varonis and AEP Networks, Simon has an understanding of a broad range of security issues that companies and society face each day from Hackers and Cyber-Criminals. Spending a lot time researching, speaking to some of those people that create attacks and working with cutting edge technology Vendors Simon is always on the lookout for where the next threat vector is coming from and how best to counter it.

Continuous Vulnerability Management: Striving for a 14 Day SLA

The importance of having a continuous vulnerability management process as part of an overall security program such as that provided by the CIS controls framework.

Speaker’s Bio:

Chris Goettl is the Director of Product Management for security products at Ivanti. Chris has over 15 years of experience working in IT, where he supports and implements security solutions for Ivanti customers and guides the security strategy and vision for Ivanti security products. He is also a security evangelist speaking at security events globally where he gives guidance around modern cyber threats and how to combat them effectively. Chris hosts a monthly webinar focusing on Patch Tuesday and security vulnerabilities, and frequently blogs about security topics. You can find bylines and commentary from Chris in notable security news sources like SC Magazine, Redmond Magazine, ComputerWorld, ThreatPost, Help Net Security, and more.

Managing Digital Risk in Transformative Times

Digital transformation is not only changing how companies think about business. It is changing how we think about risk. We need to *act* on risk, not worry about it. We need to start and end with the basics. In this session we review several key areas of digital risk management to target as you are challenged to be a key contributor in your company’s digital journey.

Speaker’s Bio:

Ben Smith is Field Chief Technology Officer (Field CTO – US) with RSA, a Dell Technologies business. With 25 years’ experience in the information security, networking and telecommunications industries, he regularly consults on RSA’s security and risk management solutions. His prior employers include UUNET, CSC, and the US Government, along with several technology-oriented startups. He holds industry certifications in information security (CISSP), risk management (CRISC), and privacy (CIPT), and has presented on RSA’s behalf internationally at cybersecurity events sponsored by Gartner, FS-ISAC, SANS, IANS, CERT/SEI, RSAC, ISSA, (ISC)2, ISACA, Infosecurity, IIA, RMA, BSides, ASIS, InfraGard, HTCIA, SecureWorld, MWCA, ICI and other organizations.

Cybersecurity Evolved

Organizations here in the US face a pretty immense challenge when it comes to cybersecurity. Doing more of the same is clearly not the answer. Instead we need to evolve our approach and move to cybersecurity as a system Active adversaries combine advanced attack techniques with interactive, hands-on hacking to increase their rate of success. They paralyze organizations and leaving them hostage to crippling ransoms.

Just as threats have evolved, so has cybersecurity. In the past you just needed to stop an individual threat. And this led to the cybersecurity approach where we had point products to stop individual, point attacks. Today we now have to disrupt the whole attack chain. Which means we have to evolve from point security products to cybersecurity as a system.
Moving to cybersecurity as a system can help with evolving threats.

Speaker’s Bio:

Mike Balatzis has been in the IT industry for 20 years. Experienced Cybersecurity expert, Microsoft enterprise solutions, including Azure and AWS Cloud Infrastructure. Focused on customer relationships, customer productivity, and most importantly helping create secure networks. Passionate about tackling security challenges with clarity and confidence

A Centralized Identity Strategy Using Standards Helps Minimize Threats. 

Modern architectures continue to become more distributed and fractured.  How can developers can continue to develop and build what they understand without having to become identity experts?  How can they do that and ensure that their applications remain secure? A centralized, standards based identity management system can provide a system that is easy to interact with without requiring expertise or a reduced security footprint.

Speaker’s Bio:

Carlos Mostek is a Principal Solution Architect for Auth0. Carlos has more than 20 years experience working in software development and security. He loves challenging problems and enjoys dealing with the complexities of identity management. Previous to his time at Auth0, he held engineering and leadership roles at Cray, Thomson Reuters, and BAE Systems. He has a Masters in Software Engineering and undergrad degree in Aerospace Engineering. Identity isn’t rocket science, but it could be! For fun Carlos likes to juggle fire and play soccer, generally not at the same time.

Why is the cybersecurity market shifting to endpoint detection and response platforms?

During the past ten years there has been a gradual shift in technology from traditional antivirus solutions to endpoint detection and response platforms. Why do so many customers remain on traditional antivirus platforms and why hasn’t the EDR market grown faster? What are some questions I can ask when evaluating EDR vendors? I’ll use my background and history in the cybersecurity industry to answer these questions and more.

Speaker’s Bio:

Chris Crediford has over twenty years of networking and security experience. From the Internet boom at Alteon Websystems to his current role as a Regional Sales Engineer on the Advanced Endpoint team at Fortinet. He provides an in-depth knowledge of traditional cybersecurity architectures as well as industry disruptive endpoint detection and response platforms.

Developing Your Identity Strategy

Remember when identity management meant creating new accounts and resetting user’s passwords? Over the years, digital identity has evolved into much, MUCH more. Your identity program now includes not just identity management, but also access management, privilege management, and even customer identity management, all of this falling under the umbrella of identity governance. More importantly, identity has shifted from being a basic operations function to the cornerstone for business enablement and digital transformation. In this presentation, Jerod walks you through key considerations when developing your identity strategy to help you improve the current state of your program while building a solid foundation for the future of your identity program.

Speaker’s Bio:

By day, Jerod Brennen (@slandail) is a storyteller, teacher, speaker, advisor, and security architect.

By night, he’s a husband, father, writer, filmmaker, martial artist, musician, and gamer. It’s fair to say that he’s earned every gray hair in his beard, having spent his career fulfilling infosec roles in consulting, higher education, retail, and public utilities.

Jerod loves to share what he’s learned over the years every chance he gets: at local and regional professional meetings, at larger conferences, and online via blogs and podcasts. He has published multiple online information security courses with Pluralsight and LinkedIn Learning, and he also teaches courses in person, both domestically and internationally.

At the end of the day, Jerod just wants to help folks get one step closer to doing what they want to do securely

Stop Staring at the Screen – Use Decision Automation to Propel Security Operations

As the number and complexity of cyber-attacks continues to escalate, it is clear that historical approaches to security operations are no longer enough. Enterprises must embrace innovation to drive secure value to their organization with automation. The latest buzzword in the security lexicon, automation has been hailed as the key to fundamentally alter how we manage, analyze and execute.

There is no automation without data.

Nowhere is this truer than in security operations. The foundation of detection and response initiatives, volumes of granular sensor data are analyzed by teams of security analysts to lower the chance that an attacker will slip through the cracks. Yet, there are still plenty of big hurdles to clear.

In this session, Tom Ryan, solutions architect at Respond Software, will introduce Robotic Decision Automation and how it is being applied to security operations centers with amazing results. Participants will learn from real customer examples on this industry-leading approach to security automation.

Speaker’s Bio:

Thomas is an expert in application security, red teaming and penetration testing, and general data security and privacy issues, with nearly twenty years of hands-on experience in the field at companies like Hewlett Packard and Micro Focus. He was a founding Board Member in the New York City chapter of OWASP, and has long been a well-known public advocate for stronger application security. His social-media based research project, dubbed the “Robin Sage Experiment,” demonstrated the dangers—and widespread prevalence—of information oversharing online today, and received media coverage and international attention. Thomas is passionate about how adversarial perspectives and red teaming exercises can help organizations build stronger cyber defenses, and designs attack and defend training curricula for top universities and cybersecurity certificate programs.

How’s Your Cloud Posture

Something that either gets overlooked quite often or is a last thought is how close are you architecting your cloud infrastructure to the cloud providers best practice model?

While cloud computing brings an increase in automation; security, compliance, and operations teams now require greater visibility of all the moving parts across their infrastructure and platforms. This increase in complexity can result in cloud-related security incidents due to misconfigurations. What’s more, it can leave DevOps and cloud security teams with a trail of unmanaged risk across multi-cloud environments, in addition to performance, compliance, and visibility concerns. This creates the perfect storm to impact the business’ reputation and bottom line.

What should a Cloud Security Posture Management solution do for you?

Speaker’s Bio:

I joined Trend Micro as a Sales Engineer in Oct. 2018, after having worked at CDW for 6 years in a dedicated role as a Trend Micro Product Specialist. I cover the Great Lakes Region with a focus on both Wisconsin and Chicago-land customers to ensure Trend Micro solutions match customer design and system requirements.

New section content