Think Tank
The Future of Cybersecurity

CISO Think Tank

Date

July 13, 2023

Location

Los Angeles, CA

Community

CIO / CISO
Your Vision is our mission

Agenda

July 13, 2023
All times Pacific Time
9:30 AM-10:00 AM
Registration
10:00 AM-10:45 AM
Morning Networking
10:45 AM-10:50 AM
Opening Remarks
10:50 AM-11:35 AM
Vision Keynote Panel
Bridging the Gap Between IT and the Business

Bridging the gap between business and technology is not easy and requires discipline and balance between technology, people, and the business. For so many organizations today, technology is the business. Technology needs to be understood as a critical enabler in every part of the organization from the front line to the back office. It creates new value by crunching data to deliver new insights, it spurs innovation, and it disrupts traditional business models.

For business and technology leaders alike, new actions and behavioral changes can help their organizations make this shift. CIOs must take responsibility for problems, they should convey that when technology fails, many people typically share responsibility.

11:40 AM-11:55 AM
Disruptor
You Can't Manage Risk If You Don't Know Where You're Vulnerable

The only way to get honest, accurate, and relevant knowledge of where you're most ripe for exploitation is by taking an attacker’s perspective and routinely attacking your own respective environments like they would. Then, once you're finished with your discovery, fix what matters most, and consequentially, verify those fix actions are operational by attacking yourself again. Learn why this is one of the absolute best ways to improve your security posture. Best thing is, you can do this in an automated fashion quite easily with the right approach that is safe, affordable, and very reliable.

Panelists
Snehal Antani Horizon3.ai
Snehal Antani

CEO

Horizon3.ai

Together with:

Horizon3.ai
12:00 PM-1:00 PM
Lunch & Networking
1:00 PM-1:45 PM
Panel
AI-Driven Transformation: Ensuring Security and Scalable Growth in the Digital Era

The digital era has ushered in a new wave of opportunities and challenges, with AI emerging as a driving force behind transformative business strategies. Join our in-person panel to explore how CIOs and CISOs can orchestrate AI-driven transformations while safeguarding their organizations against evolving threats. Discover proven approaches for integrating AI into strategic decision-making processes, fostering a secure AI ecosystem alongside existing technologies, and optimizing operational efficiency to achieve scalable growth. Gain valuable insights from industry leaders on leveraging AI for competitive advantage and creating a resilient business environment in the face of growing cybersecurity risks.

Chair
Panelists
Paul Valente VISO Trust

Speaker

Paul Valente

CEO and Co-Founder

VISO Trust

Paul Valente is the current CEO & Co-Founder of VISO Trust. He was also the former CISO and built successful security teams and programs at ASAPP, LendingClub, and Restoration Hardware. Paul's third-party risk management programs have been vetted by hundreds of Fortune 1000 companies and his teams have vetted thousands of third parties.
Simon L Linwood UCR Health & UCR School of Medicine

Speaker

Simon Linwood

CIO

UCR Health & UCR School of Medicine

Dr. Lin is focused on improving patient care...currently as the CIO and CMIO at UCR and UCR School of Medicine. Previously Dr Lin served as Segment Chief Information Officer - Research & Innovation at Nationwide Childrens Hospital. A growth-oriented CIO. Named 2018 Innovator of the Year by CHIME. National thought leader on digital transformation. 20 years of experience. Acknowledged for providing vision and leadership in IT to drive business growth in large, complex and highly distributed environments. _______________________________________________ His Specialties include: Digital Transformation, Data-driven Innovation, Change Management, Process re-engineering, Data Science, Data Lake, Artificial Intelligence, NLP, Design Thinking, and User Experience.
Jennifer Krolikowski Space Systems Command
Jennifer Krolikowski

CIO

Space Systems Command

Peter Dentico Omnicom Group

Speaker

Peter Dentico

MD Global Information Security

Omnicom Group

Passionate and innovative Information Security leader. Continuous learner and pragmatic strategist, always seeking to balance security with practicality and business process.

Together with:

VISO Trust
1:50 PM-2:35 PM
Panel
Social Engineering: New in 2023

Social engineering attacks are a growing concern for businesses and individuals alike, as cybercriminals continue to use advanced techniques to trick people into divulging sensitive information or performing actions that can lead to data breaches. In 2023, these attacks are expected to become even more sophisticated, making it increasingly challenging for individuals and businesses to identify and prevent them. To protect themselves, individuals and businesses must be vigilant and aware of these tactics. They must also implement comprehensive security measures, such as security awareness training, anti-phishing software, two-factor authentication, and access controls. Additionally, businesses must establish policies and procedures for responding to social engineering attacks, including incident response plans, data backup and recovery, and regular security assessments. By taking these proactive steps, businesses and individuals can better protect themselves from the risks associated with social engineering attacks in 2023 and beyond.

Chair
Feroz Merchhiya City of Santa Monica
Feroz Merchhiya

CIO & CISO

City of Santa Monica

I am an accomplished business and technology executive with a broad range of experience in enterprise technology. My vast experience in business applications and enterprise systems has enabled me to adapt to diverse and dynamic environments — the ability to form motivated teams that overcome complex challenges. Strong background in driving programs and services, I strive to manage technology initiatives effectively by orchestrating the contribution of diverse groups across the enterprise. I am experienced in establishing a technology governance mechanism, a realizable value proposition that should demonstrate capability enhancement at a reduced cost and risk. I subscribe to an integrated portfolio management approach looking at Infrastructure rationalization roadmaps aligned to application consolidations, Process standardization, and efficiency improvement strategies. Specialties: CRM/CEM/MDM: Siebel, Oracle CRM, Microsoft CRM, RightNow, Peoplesoft, Pivotal, Salesforce.com, SAP, Guidewire, Oracle WebCenter ECM, Portal ERP: Oracle, MS Dynamics-Great Plains, Lawson, SAP, Ariba HCMS: Oracle, Peoplesoft, Workday, Callidus CWS: Beeline BI: OBIEE, SAP Business Objects QA: HP ALM-Quality Center, Jira IT Governance, Demand and Delivery Management, Project and Portfolio Management HP PPM, Clarity, IT Strategy, Cloud Computing, Strategic Planning Six Sigma, Lean, Process Excellence, TPS Marketing Automation: Siebel Marketing, Eloqua, Aprimo SAP SRC, Hyperion, GRC Enterprise Risk Management, Cybersecurity, Incident Response, Information Security EMC, NetApp, Cisco, VMware, Cloud (Public, Private, and Hybrid) Mobility(MDM), Delphix AWS, Azure, Oracle, and GCP
Panelists
Eugene Kovshilovsky CarLotz Inc
Eugene Kovshilovsky

CTO

CarLotz Inc

Elisa Evans Cunningham Metrolink

Speaker

Elisa Evans Cunningham

CTO

Metrolink

Highly accomplished innovative Technology Executive with proven record of driving business strategy utilizing technological solutions, product creation and ERP application delivery. Transformative visionary specializing in collaborating with C-level executives, elected officials, senior business management and business users to exceed business goals and objectives. Executive leader responsible for business-driven technology transformation, digital platform creation, product development, cross-functional team leadership, and technology innovation. Demonstrated ability to lead large scale projects. Experienced in gas and Utilities, Aerospace and Defense, Financial, Manufacturing, Transportation, Logistics, Marketing, Construction and Healthcare.
Jenson Crawford Eastman Kodak Company

Speaker

Jenson Crawford

VP, Software Engineering

Eastman Kodak Company

As a highly experienced software executive, I build, coach, and mentor local and global level teams of engineers to deliver great software that solves client and company challenges while adding business value. I practice servant leadership, so I work predominantly as a facilitator and process innovator so that the teams reporting to me have everything they need to be successful in their role. A big part of this includes improving pathways of communication across the business spectrum whose professions often have very different vocabularies. During my managerial experience, I have handled the financial aspects from department budgets and tracking investment costs per project, to handling capitalization of software development costs and R&D tax credits.
2:35 PM-2:55 PM
Networking Break
3:00 PM-3:15 PM
Disruptor
Treat Your Data Like It’s Currency

You’ve heard that “data is the new oil”. More accurately, “data is your currency”. It gives you the ability to conduct business. Mismanage it and there can be serious consequences. Lose it and you lose your business. 

With your “bills” spread across your environment, managing and protecting the “money” can be a monumental task. $100s, $50s, $20s, $10s, $5s, and lots of $1s are strewn about. Knowing where your most valuable bills are is foundational to any data security process. This session will examine the impact of placing appropriate controls to protect your most important business asset: your data.

Together with:

Cohesity AWS
3:20 PM-4:05 PM
Panel
Cloud Vulnerabilities

Cloud computing services have become a cornerstone of modern business operations, providing organizations with the agility and scalability needed to thrive in the digital age. However, in 2023, the threat of cloud vulnerabilities will continue to grow as more companies adopt cloud services. Cybercriminals are constantly finding new ways to exploit vulnerabilities in cloud infrastructure, which can result in data breaches, unauthorized access, and financial losses. To mitigate the risks of cloud-related security incidents, businesses must prioritize implementing robust security measures such as multi-factor authentication, encryption, and regular penetration testing. Additionally, businesses must develop comprehensive incident response plans that take into account the unique challenges of cloud-based attacks. By taking these steps, businesses can protect themselves and their customers from the growing threat of cloud vulnerabilities in the digital age.

Chair
Panelists
Al Silipigni City National Bank
Al Silipigni

SVP Risk Management

City National Bank

Nathan Dean Universal Music Group
Nathan Dean

Director, Application Services, Global Technology

Universal Music Group

Mark Corlew UCLA Anderson School of Management
Mark Corlew

Director IT Security

UCLA Anderson School of Management

Ray Austad Farmers Insurance

Speaker

Ray Austad

Head of Operational Risk Management

Farmers Insurance

Ray Austad began his IT and Information Security career in Higher Education and Non-Profit, and pivoted over to financial enterprise after 18 years. Commencing his career with Zurich Farmers Insurance’s Group Information Security as a Business Information Security Officer. In 2014 he joined the Farmers Insurance Group Business Unit to lead Cloud and Application Security, Vulnerability Management, and Incident Response. In 2020 Ray took a different view of Cybersecurity and risks to business by moving over to Farmers Risk Management team. As Director Information Security and Risk Management, the next chapter started with being able to evaluate the organization with a new and intriguing lens. The first quarter was allocated to learning more about Enterprise Risk Management and adjusting to a role of business assurance, opposed to operational execution. The second quarter changed the organization and our personal lives with the pandemic, and provided new, unforeseen challenges. However this offered new opportunities to calculate organization and supplier risks, and view business resiliency differently. Heading into the third quarter, the focus will be on continued improvements with information security risk baselines, collaboration with our operational and business partners to monitor pandemic impacts, and evaluate new and emerging risks.
4:05 PM-4:20 PM
Disruptor
Can SASE and Zero Trust Live Up to the Hype?

Building trust and reliance across technology and security teams is key to defending the enterprise.  As security stacks incorporate Security Service Edge (SSE) to sustain the SASE journey, the partnership between CIOs, CISOs, and their teams is more important than ever.

Join us to learn about:

  • Best practices for IT and security collaboration
  • Communicating the importance of SSE to your CEO and Board

Together with:

Netskope
4:25 PM-4:35 PM
Closing Remarks & Raffle Giveaway
4:35 PM-5:35 PM
Cocktail Hour
Don't take our word for it

Together With

Don’t take our word for it

Heard In The Room