The Future of Cybersecurity

CISO Think Tank

February 29, 2024 - San Francisco, CA

Visionaries

Stephen Chen Nucompass Mobility
Stephen Chen

CTO

Nucompass Mobility

Think Tank Speaker

Stephen Chen is an entrepreneurial technologist with a demonstrated track record of developing innovative solutions that strategically align business objectives with cutting-edge technology. His expertise spans a range of domains, including data science, software engineering, cybersecurity, and digital marketing. With a rich background encompassing defense, commercial, and nonprofit sectors, Stephen brings a diverse skill set and operational excellence to the table. His unique blend of experience instills the discipline of large organizations into startups while reintroducing the agility of startups to larger enterprises. In addition to his corporate endeavors, Stephen has garnered significant exposure in board and advisory roles, particularly in the nonprofit and educational sectors. He has served as a board member and currently holds an advisory position for Here To Serve, a nonprofit dedicated to supporting families facing childhood cancer. Stephen maintains an active involvement in local schools, exemplified by his advisory council for the cyber security program at California State University, Chico.

Shadaab Kanwal Charles Schwab
Shadaab Kanwal

MD - Digital, Data, and Analytics

Charles Schwab

Think Tank Speaker

SHADAAB KANWAL serves as MD Digital, Data, and Analytics at Charles Schwab, executing digital technology, data, AI, and advanced analytics strategies. NYSE:SCHW is a global investment and wealth management firm with >$8.5T(AUM) in client assets, 33M+ brokerage accounts, and a full range of banking and financial advisory services. As a transformational, strategically adaptable, and value driven leader. ★ Adept at creating vision to value, linking strategy to execution, and agile change management. ★ Executed >$300M+ mega programs of technology-led, business agility, and hyper-automation, with global teams of >300+ for Kaiser Permanente, UCLA Health, OhioHealth, MAYO Clinic, and UnitedHealth Group. ★ Passionate about team empowerment and carving innovative business capabilities, with customer360 design thinking, analytics engineering, and knowledge management.

Tolgay Kizilelma Dominican University of California
Tolgay Kizilelma

Director of MS in Cybersecurity Pgm

Dominican University of California

Think Tank Speaker

Tolgay Kizilelma is a business-driven IT leader with three decades of experience. He currently serves as the Director of the MS in Cybersecurity Program at Dominican University of California, Barowsky School of Business where he also teaches as an Associate Professor of Cybersecurity. As an adjunct faculty at Saint Mary’s College of California, he has been teaching various data analytics courses as part of the MSBA and Professional MBA graduate programs since 2017. As an advocate of lifelong learning, Tolgay has many industry certifications, a B.S. degree in computer engineering, an MBA, and a Ph.D. focusing on information security. He also volunteers for various non-profit organizations as a board member, and frequently participates at cybersecurity conferences as a speaker and a panelist. His contribution to the cybersecurity community was recognized with the 2022 C100 Award – Top 100 CISOs by CISOs Connect.

Steve Zalewski Levi Strauss & Co.
Steve Zalewski

Former CISO

Levi Strauss & Co.

Think Tank Speaker

Mr. Zalewski currently provides CISO, security consulting and security advisory services. These include: • International cybersecurity advisor and trainer. • Executive advisory board member for security startups, providing guidance on security market direction and product requirements. • CISO advisory board member for venture capital firms internationally. • vCISO for companies requiring temporary or part-time CISO expertise. Services also include guidance and solutions to address incident response, security program design, security assessment, security due-diligence, vendor/supplier due-diligence, security architecture review, board reporting and other key security leadership requirements. Operational experience in Healthcare, Utilities and International Retail verticals. Key Strengths: •Organizational Management •Strategic Planning & Execution •Enterprise Security Architecture/Strategy •Executive and BOD Security Governance/Reporting •Cybersecurity Incident Response •Security Risk & Compliance Management Additionally, I co-hosts the CISOSeries Defense-in-Depth Podcasts and am a frequent speaker and panel moderator at industry events.

Danielle Glassner Invest Northern Ireland
Danielle Glassner

SVP Americas

Invest Northern Ireland

Think Tank Speaker

Danielle Glassner is a highly accomplished representative of UK and Irish government with over 10 years of experience assessing various global policy initiatives. Danielle has played a key role in fostering strong economic ties between the US, UK and Ireland through her work promoting foreign direct investment and trade opportunities for economic growth. She has a strong track record of understanding the needs and interests of the US, UK and European markets resulting in successful business strategies and policy solutions. Danielle formerly served as Deputy Chief of Staff to the British Ambassador to the US during Brexit and Political Advisor to a number of US and UK elected officials. Danielle currently sits on the board of the British American Business Council and GBx.

Dennis Barnes SF Fire Credit Union
Dennis Barnes

AVP IT Infrastructure & Security

SF Fire Credit Union

Think Tank Speaker

Dennis Barnes, is a highly accomplished Information Security Officer with over 20 years of experience in IT leadership. Known for his expertise in driving enterprise IT security protection, Dennis has a proven track record of steering enterprise-wide security strategies and programs to enhance organizational security posture. He excels in translating complex technical terms into easily understandable language and is a strategic advisor to business leaders. Dennis has a history of influencing leadership buy-in on cutting-edge strategies and initiatives, and he is seasoned in solving technical security challenges, including mitigating cyber attacks. Throughout his career, Dennis has managed teams of up to 200 people and budgets of up to $75M. Holding certifications including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Project Management Professional (PMP), and ITIL, Dennis has a wide range of expertise in compliance frameworks such as ISO 27001, NERC CIP, NIST, PCI, HIPAA, and FIPs 140-2. In his most recent role as VP of Infrastructure and Security at San Francisco Fire Credit Union, Dennis oversees the management of IT infrastructure and security for the credit union, ensuring robust protection. Prior to this, as the Chief Information Security Officer at Cooper Compliance, Dennis deployed advanced security technologies and conducted security assessments to enhance customer environments and ensure compliance with NERC CIP regulations. He led the development of security policies and procedures, implemented user awareness training programs, and established key vendor relationships to drive security investments efficiently. With a strong commitment to excellence and a wealth of experience in information security leadership, Dennis continues to drive innovation and advance cybersecurity practices in the industry.

Leda M (Filler)
Leda Muller

CISPO

Stanford Univesity, R&DE

Think Tank Speaker

Leadership in Cyber Security, Information Technology, Start Ups and Non-Profits. In-depth experience driving results as a program and department leader. Adept at managing performance of teams, projects, and programs in collaboration with senior leaders and in line with organizational goals. Excel at training and mentoring users and teams, fostering relationships, and strategically solving problems. Proven ability to develop, collaborate and network with staff, faculty, end users, vendors, volunteers and donors. Strong leadership, collaboration and interpersonal skills. Solid strategic mindset—both short-term and long-range--including past creation and development of strategy to leaders. Exceptional customer relationship skills, combined with the ability to coordinate the efforts of many to meet organizational milestones and goals.

David Hahn Ballistic Ventures
David Hahn

CISO

Ballistic Ventures

Think Tank Speaker

David has a long career as a CISO and spent decades building successful cybersecurity programs at leading companies. He is the consummate connector of people and collaborator to enable business growth. His career spans industries, including financial services, where he served as Chief Security Officer of Silicon Valley Bank and as Senior Vice President and Group Information Security Officer at Wells Fargo. Hahn has also held security leadership positions for SaaS companies, including CDK Global and Intuit, and was Vice President and CISO of Hearst, one of the world’s largest and most diversified media and data companies. As CISO-in-Residence at Ballistic where he helps portfolio companies with their go to market plans and product roadmap. This also includes working with incubation start-ups. Hahn is an advisor to many cybersecurity and technology startups, helping them gain market traction and differentiate their solutions. Hahn holds an MBA from Golden Gate University and spent his undergrad time at San Jose State University.

February 29, 2024

Agenda

All times Pacific Time

8:30 AM-9:00 AM

Registration


9:00 AM-9:30 AM

Morning Networking


9:20 AM-9:30 AM

Opening Remarks


9:35 AM-10:20 AM
Panel

CISO Mastery: The Nexus of Seamless Business-Technology Harmony

In 2024, CISOs and security leaders take center stage in fostering harmony between business and technology, balancing discipline and ownership. This session emphasizes their pivotal role, introducing 'Gen AI' as a crucial topic. Gen AI explores securing AI-driven technologies responsibly and ethically. Recognizing technology as a key enabler, CISOs navigate the evolving landscape, ensuring the integrity of data, driving innovation, and challenging traditional business models. Join us to explore the multifaceted responsibilities of CISOs, shaping a secure, agile, and ethically-driven future for organizations in the dynamic landscape of 2024.

Navigating the evolving landscape between business and technology demands a strategic blend of discipline and equilibrium. Recognizing that, for many organizations, technology is the business itself, this session underscores the imperative of understanding technology as a critical enabler across all facets of the organization. From the front lines to the back office, technology serves as a potent tool for creating value by processing data, driving innovation, and challenging traditional business models.


10:25 AM-10:40 AM
Vision Voices

Unlocking the Paradox: The Evanescent Journey of Data Leaders

In the annals of human history, from the first intrepid voyagers mapping uncharted territories to today's digital adventurers navigating the vast seas of data, one question persists, data is so important , it been creating values for centuries : Why does the tenure of data leaders in organizations resemble the lifespan of mayflies? Our journey begins with a reflection on the timeless utility of data. Millennia ago, our ancestors charted paths through the unknown, laying the groundwork for exploration and discovery. Today, amidst the cacophony of technological progress, data reigns supreme. Yet, paradoxically, the tenure of modern data leaders often resembles a fleeting shadow. Let us dissect this enigma through three prisms: Ownership, Territory, and Business Initiative.

Consider the plight of the data leader entrusted solely with the custodianship of data and its management. Their tenure, akin to a shooting star, dazzles briefly before fading into obscurity. Contrast this with the data leader who stakes claim not only to data management but also to the expansive domains of data warehousing, lakehousing, or robust data platforms. Here lies the promise of longevity, a tenure stretching across the horizon of 2-3 years.But dare we dream of transcendence? Behold the data leader who not only navigates the seas of data but harnesses its power to forge tangible business initiatives. They are the architects of tomorrow, integrating data products seamlessly into the fabric of organizational growth. For them, the seat at the table transcends mere title; it becomes a nexus of innovation, where CTOs and CIOs converge.

Yet, amidst this labyrinth of challenges, one beacon shines bright - the essence of value. Does the data leader wield their influence to steer the ship of business towards uncharted territories of growth? Are they the catalysts of innovation, breathing life into stagnant waters? The litmus test lies in their grasp of Ownership, Territory, and Business Initiative.As we embark on this expedition into the heart of data leadership, let us not only understand our roles but embrace them with fervor. For in this digital odyssey, the impact we create reverberates through the annals of time, shaping the destiny of nations and the trajectory of human progress.

Join me as we unravel the paradox and unlock the secrets of data leadership - where vision meets action, and legacy transcends the ephemeral confines of time.


10:40 AM-11:00 AM

Coffee Break


11:00 AM-11:45 AM
Panel

Cyber Security Evolution of Artificial Intelligence (AI): Friend or Foe?


The potential of Artificial Intelligence (AI) is vast, as it is now being utilized across all industries. With the combination of machine learning, AI has made significant improvements in the field of cybersecurity. Automated security systems, natural language processing, face detection, and automatic threat detection are some examples of how AI is revolutionizing cybersecurity. However, AI is also being used to create intelligent malware and attacks, which can bypass the most up-to-date security protocols, making it a double-edged sword. On the positive side, AI-enabled threat detection systems have the ability to predict new attacks and immediately notify administrators in case of a data breach.


11:45 AM-12:45 PM

Lunch & Disruptor Showcase


12:45 PM-1:00 PM
Disruptor

Win the Exploitation Race: Automate Defense Against Rapid Cyber Threats

As attackers become increasingly efficient in exploiting the growing number of vulnerabilities at a rapid pace, defenders struggle to remediate quickly, leading to constant exploitation windows. This is mainly because identifying the true exploitables is challenging, and even when found, the patching processes are complex. These processes involve multiple stakeholders and software updates that may lead to business downtimes.

The situation is further complicated by the frequent emergence of new vulnerabilities, which consistently puts organizations at risk. As attackers increasingly leverage AI to accelerate their efforts, defenders who stick to legacy workflows will find themselves falling behind in this race. Defenders must change their approach by automating the processes of validating what's truly exploitable, and then implementing and automating risk reduction and mitigation at scale.

In partnership with:
Zafran

1:05 PM-1:50 PM
Panel

Data Empowerment: A Guide to Unlocking Strategic Value Safely

Security and Technology leaders are challenged to redefine their role not only as guardians of security but also as enablers of responsible and innovative data utilization. This directive emphasizes the importance of striking a balance between data protection and leveraging the full potential of organizational data assets. CISOs must collaborate with stakeholders to establish robust data governance frameworks, ensuring compliance with privacy regulations while facilitating the ethical and strategic use of data. By unlocking the value of data, CISOs contribute to the organization's competitiveness, innovation, and overall digital transformation. This session explores strategies for CISOs to harness the power of data responsibly, thereby positioning cybersecurity as an integral driver of business success in the data-driven era.


1:50 PM-2:10 PM

Networking Break


2:10 PM-2:25 PM
Disruptor

Building Cyber Fortitude: CISO Strategies for Resilient Cybersecurity

In the realm of building cyber resilience, organizations confront increased risk exposure amidst bold moves and evolving external challenges. Despite investments in technology and data, risk leaders, including CISOs, express difficulty in keeping pace with the persistent threat of cyber crises. However, in today's business landscape, discussions of digital transformation or reinvention are inseparable from considerations of cybersecurity. Looking ahead, stakeholders, from the board to frontline cybersecurity operations, pose critical questions about resiliency. This includes inquiries about the adequacy of efforts to safeguard the company and its customers in the face of cyber attacks. The focus shifts to identifying opportunities to minimize the impact on business and shareholder value through effective threat response. Embracing cybersecurity as a whole-of-business endeavor, organizations are urged to align themselves with business owners, adapting to changes in the cyber landscape and fortifying resilience against disruptions. Building confidence in the cybersecurity program becomes paramount in navigating the dynamic and challenging cyber landscape effectively.

In partnership with:
SecurityScorecard

2:30 PM-3:15 PM
Panel

In the Cloud We Trust: Elevating Cybersecurity Leadership Amidst Cloud Advancements

In the era of rapid digital transformation, the surge in cloud adoption has revolutionized business operations, demanding a heightened focus on cloud security. CISOs, as guardians of organizational cybersecurity, are at the forefront of navigating this evolution. This session explores the imperative for CISOs to advance cloud security strategies, emphasizing the need for a comprehensive understanding of cloud infrastructure, data protection, and regulatory compliance. As organizations increasingly migrate to cloud environments, CISOs play a pivotal role in orchestrating security measures that not only defend against cyber threats but also foster innovation. A proactive approach to cloud security involves staying abreast of evolving technologies, anticipating regulatory shifts, and implementing robust governance frameworks. This abstract delves into the multifaceted responsibilities of CISOs in ensuring the security, resilience, and compliance of cloud-based operations, ultimately shaping a secure and agile future for organizations in the cloud-centric landscape.


3:20 PM-3:35 PM
Vision Voices

The Hidden Link: Exploring the Impact of Cybersecurity Gaps in Nonprofits on Fortune 500 Companies

This discussion will examine the often-overlooked connection between cybersecurity vulnerabilities in nonprofit organizations and the potential repercussions for Fortune 500 companies. While nonprofits may not always be perceived as prime targets for cyberattacks, their interconnectedness with larger corporations through partnerships, supply chains, and shared data ecosystems can expose Fortune 500 companies to significant risks. Join us as we explore the implications of inadequate cybersecurity measures in nonprofits, including data breaches, reputational damage, and financial implications, and discuss strategies for enhancing cybersecurity resilience across the entire ecosystem.


3:40 PM-3:55 PM
Vision Voices

The Innovation Fatigue (TIF)

Organizations navigate growth from founding to becoming public companies. When they were small is was all about building, proving,  and acquiring the customers. As they become growth companies they focus on selling and retaining customers and when they become public companies focus shifts to sustaining the growth, customer success, and market expansion. In this session Mr.,Gali will use the RYG and SYC approach to explain how organizations can navigate these transitions, avoid fatigue and continue to innovate.

3:55 PM-4:10 PM

Closing Remarks & Raffle Giveaway


4:10 PM-5:10 PM

Cocktail Hour