Application Security in a DevOps, Cloud and API World

CISO Council

November 4, 2021

Speakers

Karl Mattson Noname Security
Karl Mattson

CISO

Noname Security

CISO Council Speaker

As a future-oriented information security executive my key strength is coaching and educating cybersecurity companies on listening to and interpreting the pain-points and priorities of enterprise customers. These insights help drive effective product strategies, go-to-market strategies and ongoing customer success. Over the years, I’ve had the privilege of advising several cyber entrepreneurs who are now thriving. On the heels of their success, I was looking for a new challenge. In 2020, I had the opportunity to meet with the Noname Security team early in its platform design. Recognizing that they were on the verge of solving several challenges in securing APIs, I wanted to be a part of their exciting adventure. I joined Noname as Chief Information Security Officer, where I’m currently establishing a rigorous standard for operational and security excellence, in addition to advocating for ongoing platform changes based on our customers’ needs. ABOUT NONAME SECURITY: Noname Security ensures secure APIs at the speed of business with the most powerful, complete and easy-to-use API security platform. How do I know it works? I was their first customer! I believe in the platform and want to share it with the world. According to Gartner, APIs will be the #1 attack vector by 2022. Gateways and WAFs don’t protect against API breaches or find misconfigurations. API testing and bug bounty programs have significant gaps, leaving businesses exposed. Noname resolves API vulnerabilities across 4 key pillars, or as we call it, DART: ➤ Discover ➤ Analyze ➤ Remediate ➤ Test We’ll find and take inventory of all existing APIs, use AI-based detection to illuminate risks, block attacks in real time and run tests to ensure API integrity before production. WHAT YOU CAN EXPECT: ➤ Solid engineering underpinning a product that’s ahead of the competition ➤ Flexible deployment model with many integrations that adapt to your business ➤ Coverage of the 3 main areas needed to protect APIs: posture management, detection and response and code security What are you doing to protect your company’s digital content? Keep your company’s APIs out of the news with Noname Security. LEARN MORE: See what our customers are saying about us and find more information on our website: www.nonamesecurity.com

Jason Kaley Medline
Jason Kaley

Vice President & Chief Enterprise Architect

Medline

CISO Council Speaker

As the Vice President and Chief Enterprise Architect with twenty plus years of service at Medline Industries he has contributed to process improvement and developed integration strategies that have supported Medline’s growth to become the largest privately held manufacturer and distributor of medical supplies providing products, education, clinical programs and services across the continuum of care with offices in 20 countries

Jim Brady Fairview Health Services
Jim Brady

Vice President, Information Security & Infrastructure

Fairview Health Services

CISO Council Speaker

Fairview Health Services, is based in Minneapolis, Minnesota, and part of the M Health Fairview partnership and collaboration, consisting of Fairview, the University of Minnesota, and University of Minnesota Physicians. Prior to mHealth Fairview, Jim served the people of Los Angeles County, leading and empowering the talented IT staff within the Department of Health Services (DHS), and partnering with the dedicated leaders and staff within many of the Los Angeles County's 34 departments. As a highly successful IT executive with significant experience leading technology and security initiatives in complex academic medical center and multi-hospital healthcare settings, he strives to be a committed, transparent and strategic thinker with a track record of quality, systematic decision making, providing transformational and business-focused value in this new age of the digital economy and consumerism. A proven leader with the ability to build strong relationships, he is passionate about communicating effectively and building consensus across the organization.

Richard Rushing Motorola Mobility a Lenovo Company
Richard Rushing

CISO

Motorola Mobility a Lenovo Company

CISO Council Speaker

Mr. Richard Rushing is the Chief Information Security Officer for Motorola Mobility LLC.; Richard participates in several corporate, community, private, and government Security Council’s and working groups setting standards, policies, and solutions to current and emerging security issues. As Chief Information Security Officer for Motorola Mobility, he has led the security effort by developing an international team to tackle the emerging threats of mobile devices, targeted attacks, and cyber-crime. He organized developed and deployed practices, tools and techniques to protect the intellectual property across the worldwide enterprise. A much-in-demand international speaker on information security Richard has presented at many leading security conferences and seminars around the world.

Scot Miller Mr. Cooper
Scot Miller

CISO

Mr. Cooper

CISO Council Speaker

Scot Miller, CISSP, CISM, is the Senior Vice President and Chief Information Security Officer for Mr. Cooper Group. He serves on the Dallas CISO Board, has presented on advances in Information Security and Technology Governance at consortiums in Florida, Texas, New York, Arizona, and Connecticut, and has been quoted in national magazines and other industry symposiums. Scot built high performing Security and Operations teams from the ground up, and over the past few years, brought Mr. Cooper’s Identity Governance and Compliance teams to a new level. The supporting projects won the 2021 Cybersecurity Team of the Year and CSO50 Award from a pool of national and international candidates for innovation, agility, and meaningful impact on a business. Scot’s team is responsible for identifying, analyzing, and reducing risk for all Mr. Cooper’s Group business entities. Previous to his duty at the Mortgage Servicing institution, he was CISO for HMS (a Texas based Healthcare Information Services organization), Head of Global IT Security for Alcon Laboratories, and Chief Security Architect at MassMutual Financial Group. Scot was also the VP and CTO for the CT chapter of ISSA.

JJ Markee Baxter International Inc.
JJ Markee

CISO

Baxter International Inc.

CISO Council Speaker

JJ is the CISO at Baxter...Previously he was CISO at Kraft Heinz and held information security responsibilities at Cadbury, Pfizer and Pharmacia. He has a wide range of security experience including: - Establishing Security Policy and Governance - Developing Security Architecture - Managing Security Operations - Delivering Security Project Management. His Specialties: Security Architecture, Governance, and Operations,

Larry Whiteside Cyversity
Larry Whiteside

Co-Founder & President

Cyversity

CISO Council Speaker

Larry Whiteside Jr. is a veteran CISO, former USAF Officer, and thought leader in the Cybersecurity field. He has 25+ years’ experience in building and running cybersecurity programs, holding C Level Security executive roles in multiple industries including DoD, Federal Government, Financial Services, Healthcare, and Critical Infrastructure.

Larry currently serves as the Chief Technology Officer and Chief Security Officer at CyberClan, a full service Global Incident Response and Managed Security Services Provider for the small to medium sized business.

Larry is also the Co-Founder, President, and on the Board of Directors at the International Consortium of Minority Cybersecurity Professionals (ICMCP), a 501(c)3 non-profit association that is dedicated to increase the number of minorities and women in the cybersecurity career field through providing workforce development that includes skills assessment, training, education, mentorship, and opportunity.

Since 2009, via Whiteside Security, which he founded, Larry has advised several corporate security executives and companies across the cybersecurity industry on how to make Cyber Security a number one objective to their business. He has helped CEOs and board members of private cybersecurity companies achieve their goals in sales, marketing, and customer retention.

Larry has spoken in front of C Level leadership and Board of Directors of some of the largest private and public sector organizations in America. A thought leader in the industry with extensive experience presenting at conferences such as the Gartner Security Summit, RSA Conference, and SC World Congress, Larry has been featured in many articles relating to information security and risk management.

Larry received his Bachelor of Science degree in computer science at Huston-Tillotson University.

November 4, 2021
Council
Navigating 3rd Party Risk
Filling the Talent Void
The Greatest Fears?
Technology Supply Chain
Being Effective…. Securely
AI and ML: Using Emerging Technologies to Reinforce Security Defense Efforts
Patch Management and Endpoint Protection
Data Security: Cloud Computing, Mobility and Regulations

Attend this event

Not available on November 4, 2021?

View other dates for the CISO Council

Agenda

All times Central Standard Time (CST)

3:00 PM-4:15 PM

Application Security in a DevOps, Cloud and API World

Security teams are challenged to modernize application security practices in light of accelerating shifts to DevOps delivery models and rapid adoption of cloud-native application designs. Applications built on microservices (e.g. serverless, containers, APIs) and delivered continuously are outpacing application security teams ability to secure them. CISOs need to consider new skills, new touch points and new platforms to maintain a strong security posture in light of these trends and the speed at which they are re-shaping IT.


In Partnership With