7:30AM - 8:00AM
Registration and Information
8:00 AM - 10:00 AM
10:00 AM - 10:45 AM
Gartner Opening Keynote: Leadership Repositioning: Defense to Offense
Tina Nunno, Distinguished VP Analyst, GartnerAs a
security leader, are you playing defense or offense? Do you as a
leader set the terms of engagement, or are they too often set by others? This session will
explore how security leaders can ensure they lead from an offensive position, to deliver the
best results for themselves and for their enterprises.
10:45 AM - 7:30 PM
Explore the Exhibit Showcase
Visit the Exhibit Showcase to explore leading technology and service
providers to help solve your mission-critical priorities. Engage with leading solution
providers through private meetings, compare solutions and formulate your provider
shortlists. Connect with your peer community to exchange ideas over coffee or dessert and
attend a theater session to learn from Gartner experts and experience technology in action.
11:00 AM - 11:20 AM
Insights from the Magic Quadrant and Critical Capabilities for Privileged Access Management
Michael Kelley, Sr Director Analyst, GartnerThrough a
selection of relevant Gartner insights and complementary
methodologies, we will provide insight into latest updates in the privileged access
management market.
Market Guide for Data Loss Prevention
Andrew Bales, Assoc Principal Analyst, GartnerThe DLP
market is mature yet it is struggling with some major disruptions
from the vendors side. Gartner is also seeing a shift from enterprise to integrated DLP
vendors. This session will give clients an overview of DLP market trends and their impact on
data security strategies
11:30 AM - 12:00 PM
Strategic Architecture Roadmap to Composable Future of Applications
The fundamentals of composable business are rooted in the best practices
of today’s leaders. In this session, learn the essentials of composable enterprise
architecture. Discover how you are already on the path to the composable future of
applications, and learn how to make that path more consistent, efficient and safe.
How to Achieve Success in Data Loss Prevention
Zaira Pirzada, Principal, Advisory, GartnerSecurity and
risk management leaders are prone to buying a DLP tool
before identifying risks, governance requirements and the ground that is necessary to
operate DLP successfully. The objective of this session is to teach SRM leaders the
preliminary steps necessary to implement DLP as a program and a process. These steps will
yield success upon tool selection, implementation and maintenance.
Leadership Vision for Security and Risk Management 2022
Jay Heiser, VP Analyst, GartnerThe challenges to security
and risk management programs range from
governmental/political intervention to digital business adoption to the impact of
organizational culture of running a business. Security and Risk Management (SRM) leaders
must develop a coherent program based on a clear vision and strategy. This presentation will
address:
-What are the major trends affecting the security and risk management
leader?
-What are the top challenges affecting the security and risk management
leader?
-What actions and best practices should the security and risk management leader
initiate?
Outcome-Driven Metrics Optimize Cybersecurity Risk, Value and Cost
Paul Proctor, Distinguished VP Analyst,
GartnerOutcome-driven metrics are operational, cost and business-benefit metrics
based on the value proposition of our controls. Risk and security professionals can use ODM
to optimize risk, value and cost in a business contexts. The direct line of sight to
protection levels enable an organization to answer the key questions: how much security do
we want? And how much are we willing to spend for that protection?
Introduction to the Cybersecurity Mesh Architecture
Patrick Hevesi, VP Analyst, GartnerWith many IT assets
now outside traditional enterprise perimeters, IT
leaders must rethink security. Enter the cybersecurity mesh architecture, a composable and
scalable approach to extend security controls to distributed assets by decoupling policy
enforcement from the assets being protected.
The State of Network Security in the Work from Anywhere Era
John Watts, Sr Director, Analyst, GartnerLast year
work-from-home became the new normal. Coupled with the rapid
adoption of SaaS applications such as Microsoft’s O365, Salesforce and others, organizations
are no longer able to secure end users and devices with inflexible network security
architectures. In this session, we will highlight the forces that shape network security
today. We will also discuss SASE, the future of network security in the cloud.
Emerging Technologies in Security and Risk Management
Nat Smith, Sr Director Analyst, GartnerThis session will
highlight some of the most critical emerging
technologies in security and risk management and some of the key trends driving such
innovation.
CISO Circle Exclusive: Who’s In Charge: Creating an Effective Activation and Execution
Crisis Management Team
Roberta Witty, VP Analyst, GartnerCOVID-19 presented huge
coordination and management challenges to
organizations that were not prepared to tackle such a significant crisis. There were even
such challenges in organizations that had a BCM program. COVID-19 proved that an
all-enterprise response is required to crisis events. This session will present best
practices for creating your crisis management team so that you have a well-coordinated
response to employees and customers.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
12:00 PM - 3:00 PM
Attendee Lunch
Exhibit Showcase Dessert Reception
Join us for dessert on the Exhibit Showcase. Speak to product experts,
experience the newest technologies and services and get the answers you need from
knowledgeable technology providers.
12:30 PM - 1:00 PM
Beyond Tools: Optimizing Security Architecture Through Business Architecture Techniques
Michael Wodka, Director, Advisory, GartnerSecurity
architecture is often perceived as a series of technical
diagrams and control frameworks to model how the organization is managing security-related
risk. However, these artifacts only tell part of the story. This session will explore how to
leverage business architecture techniques, such as capability modeling and value-stream
mapping, to holistically analyze your security architecture.
Could Insider Risk Management Have Saved Julius Ceaser? (Et tu, Brute?)
In this presentation, we will use the story of Julius Caesar as a framing
device to see how an effective insider risk management program could have saved his life;
and how we can implement these learning into our organization to mitigate modern insider
risks. Ultimately we will walk away with a strong understanding of what components are
available for an insider risk management program, and their individual and cohesive,
strengths and weaknesses.
Facing New Threats — Cyber-Physical Systems
Katell Thielemann, VP Analyst, GartnerAn overview of
current and emerging threats specific to cyber-physical
systems born either if OT/IT convergence or IoT, IIoT, or Smart "X" efforts.
Five Critical Components of Phishing Prevention, Detection and Response
Mario de Boer, VP Analyst, GartnerPhishing is a key
technique that is used in most widespread and targeted
attacks. The scale and sophistication of phishing have reached levels that cannot be dealt
with by a single product. Join this session to see examples of advanced phishing attacks,
and the five most critical components of any email security architecture.
MSSP and SMB Enterprises — Top 3 Vendor Requirements to Unlock Opportunities in Underserved
Markets
Mark Wah, Sr Director Analyst, GartnerSmall and midsize
enterprises do not have IT security budgets to afford a
large diverse security product landscape. Managed security services providers (MSSPs) helped
bridge the gap but not all security products are meeting the unique requirements of MSSPs.
These top 3 MSSP requirements will help grow the reach to underserved markets in small and
midsize enterprises and increase revenue.
Outlook for Security Monitoring and Operations 2021
Anna Belak, Director Analyst, GartnerSecurity operations
are rapidly evolving to keep up with threat
landscape. Tools leveraged by security professionals include automation, advanced analytics
and machine learning. This session will address key issues: (1) What threats and trends are
affecting security operations? (2) What defines best-in-class security operations of 2021?
(3) What is the outlook for security monitoring and operations for the years ahead?
Resetting Executive Engagement, Business Context and the How We Invest in Security
Paul Proctor, Distinguished VP Analyst, GartnerWhat is
the right amount of security? How much should we be spending? How
can this all be put in a business context? How do I satisfy the regulators? And how do we
create a safer world? Learn about the latest approaches in solving these previously
unsolvable problems.
Four Ways to Hack Your Cybersecurity Culture
Christopher Mixter, VP, Advisory, GartnerInnovation — or
at least the desire to innovate — is on the rise among
corporate and public sector clients alike. But while desirable, morphing from your existing
culture into an innovative one is hard especially while trying to manage cyber risk in your
organization. Most who try, fail. This presentation aims to provide attendees with tactical
advice on how to get started, with four culture hacks.
Solution Provider Sessions
1:30 PM - 3:00 PM
CISO Circle Exclusive Workshop: Everything I know About Meeting Politics I Learned from a
17th Century Japanese Sword Master
Leigh McMullen, Distinguished VP Analyst, GartnerIn this
session, you will learn to recognize and counter more than a
dozen forms of resistance that commonly occur in meetings, as well as techniques to handle
more advanced political situations such as malevolent actors, as well as the essential tools
of persuasion. All of this wrapped in a fun and entertaining exploration of the wisdom of
one of Japan's greatest swordsmen.
Please Note: based on availability and eligibility you may
sign-up for this session via
Conference Navigator after you register for this conference.
Workshop: Secure SDLC (DevSecOps)
Mark Horvath, Sr Director Analyst, GartnerWe hear a lot
about DevSecOps and other secure software development
lifecycle techniques, but what does this mean for your organization? In this workshop, we
share and walk through the Gartner DevSecOps framework for mapping security activities,
tools and cultural elements on to your software development program. These techniques work
for Waterfall, Agile, DevOps, "Wagile" and many other development styles.
Please Note: based
on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
2:30 PM - 3:00 PM
Garbage In, Garbage Forever — Top 5 Blockchain Security Threats
Just because blockchain data is cryptographically secured, doesn't mean
the data is legitimate. We review the blockchain technology stack and its main security
vulnerabilities.
a) What are the top 5 blockchain security threats?
b) What security
technologies and processes should be used to mitigate these threats?
Introducing the Gartner OT Security Framework
Organizations need to ensure their Operational Technology (OT) has a
framework of People, Process and Technology to increase or at least maintain their OT
security posture. Fully aligning to standards like the IEC62443 is for many smaller
organizations not feasible. Security & Risk Management Leaders can use these OT Security
controls to address the risks in their OT environment.
Top Security Trends for 2021
Zaira Pirzada, Principal, Advisory, Gartner“Top trends”
highlight shifts in the security ecosystem that aren't
widely recognized, but are likely to have potential for disruption. This presentation will
describe the significant trends in security and how organizations are taking advantage of
these trends. Key issues include: Top technological improvements in the security product
landscape; Trends in creating a top notch security organization; and long-term trends that
will influence security strategy
Cybersecurity Mesh Deep Dive: Architecture
Patrick Hevesi, VP Analyst, GartnerThis session will
continue on from Introduction to the Cybersecury Mesh
Concept and dive deep into how to build the cybersecurity mesh architecture (CSMA). We will
discuss the evolution of best-of-breed to the new CSMA along with pros and cons of each
approach. Finally, we will discuss the vendor landscape from larger security vendors with
full stacks to open source/distributed CSM solutions.
How to Select a Web Application and API Protection Solution
John Watts, Sr Director, Analyst, GartnerWeb application
and api protection (WAAP) is the evolution of web
application firewall, including WAF, DDoS protection, bot management and API security. The
market offering is growing quickly, primarily in the form of cloud services.
This session
will guide attendees to:
1. Understand the WAAP market
2. Select the best
architecture
3. Evaluate and compare WAAP offering
How Traditional Security Vendors Could Convince CSPs to Ride Their Dead Horses
CSPs have stopped being the 10X or 100X guys that transform your business
and help you to become as good as they are. Instead they have started to emulated or adopt
almost any legacy control there is. This session tells SRM leaders how this could happen and
how they still can achieve 10X or 100X through making the right choices.
Neurodiversity in Security and Risk Management Practices
Neurodiverse individuals bring a unique perspective to the workspace and
a skill set that can drive significant competitive advantage. However, entering into a new
workplace and team can be particularly challenging and stressful for individuals with
neurodiversity. This session covers how to create a neurodiverse welcome environment
illustrated with case studies in the field.
API Security Strategy to Identify and Protect APIs
William Dupre, Sr Director Analyst, GartnerOrganizations
are increasingly using cloud-native technology and adopting
microservices architecture patterns as they integrate or build enterprise applications. The
end result is a sprawling landscape of web APIs that practitioners must secure. In this
session, you'll learn about security best practices for discovery, mediation and protection
of web APIs.
2:30 PM - 3:15 PM
Roundtable: Security Vendors that Midsize Enterprises Love
Patrick Long, Principal Analyst, GartnerJoin this
discussion on security vendors that midsize enterprises love.
Midsize enterprises are defined as organizations between $50 million and $1 billion in
annual revenue and fewer than 1,000 employees. This session is a good fit for you if your
organization has between five and 50 people in IT and an IT budget between $5 million and
$30 million.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Ask the Expert: SASE
Lawrence Orans, VP Analyst, GartnerVendors are flooding
the "airwaves" with marketing claims about SASE.
Feeling overwhelmed? In this session, we'll answer your SASE questions in an interactive
format.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
3:30 PM - 4:00 PM
Solution Provider Sessions
4:30 PM - 5:00 PM
How to Write and Communicate Effective Security Policies
Michael Wodka, Director, Advisory, GartnerA good security
policy is not meant to be a puzzle that end-users must
solve. This session will teach you how to apply effective policy writing principles to all
of your end-user policies, and how to actually get people to read it.
Outlook for Data Security 2021
Ramon Krikken, Distinguished VP Analyst, GartnerThis
session covers current trends and emerging topics in the area of
data security. From databases to cloud applications, threats are rapidly evolving and
countermeasures slowly follow. Planning a data-centric roadmap for security governance and
security architecture is a critical component of any security and risk management program.
Where Does the Security Review Fit in a Procurement Process — How to Make It Effective
Yanni Karalis, VP Analyst, GartnerSecurity and risk
leaders are concerned with making sure they assess all
risks associated with the purchase of a new solution/service. However, they are often
challenged in streamlining the process with sourcing and procurement leaders. In this
session, we will present the challenges and the approaches taken by different organizations
to improve engagement, guidelines and effectiveness of procurement processes.
5 Critical Steps in the Vendor’s SASE Roadmap
Nat Smith, Sr Director Analyst, GartnerSASE is one of the
fastest growing security markets, but what do you need
to know to win in this market? This session examines current buyer needs and reasons for
their preferences. It will outline 5 steps vendors need to embrace to succeed in this market
long term.
How to Establish a Modern SOC
Organizations strive to centralize their security operations functions
partially or entirely into a SOC to increase their efficiency and maturity. This session
presents a structured approach to plan, establish and efficiently operate a modern SOC.
Trends in Midsize Enterprise Security and Risk Management
Patrick Long, Principal Analyst, GartnerMidsize
enterprise (MSE) IT leaders face significant security challenges
when trying to deliver IT services with small IT teams (usually fewer than 30 people) and
limited IT budgets (usually less than $20 million). Join us for a discussion of the top
trends that MSE IT leaders responsible for security and risk management should prioritize to
stay current and proactive in protecting the organization and managing risk effectively.
The Machines Are Here! From RPA, Zero Trust Access, to Devices and Apps — The Rise of
Machine Identity Management
David Mahdi, VP Analyst, GartnerWe've all heard the
saying, identity is the new perimeter. But for who,
humans? Well that is what the market has been focused on. Machine identity has been left
aside, yet machines are all around us. From our mobile devices, IoT, RPA to applications and
software, all require identities. Machine identity management is a top security trend that
you need to know about!
4:30 PM - 5:15 PM
Ask the Expert: Can We Build a SOC on a Budget?
This Ask the Expert session will be focused on security operations
centers (SOCs). From building, to outsourcing, to operating and evolving, this session will
address all attendees' questions on SOC.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Roundtable: Best Practices in Assessing Third-Party Security and Risk
Joanne Spencer, Sr Director Analyst, GartnerSecurity and
risk leaders struggle to effectively assess third-party
(including IT vendor) security and risk, leading to unknown risks or security breaches. This
roundtable provides you with the opportunity to participate in a facilitated discussion with
your peers regarding the most effective assessment practices used today.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
4:30 PM - 6:00 PM
Workshop: Building Risk, Value, and Cost Charts for Cybersecurity
Paul Proctor, Distinguished VP Analyst, GartnerYour
executives only care about risk, value, and cost. Why would you
speak to them about anything else? This workshop will walk through the steps of identifying
business processes and outcomes, aligning supporting technology stacks, and creating
outcome-driven metrics to put cybersecurity in a business context.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Workshop: Turn Lessons Learned From Recent Supply Chain Attacks Into an Action Plan
Paul Webber, Sr Director Analyst, GartnerGartner experts
have compiled the key learnings from recent supply chain
attacks. We will examine both familiar and novel techniques the attackers used to carry out
massive scale attacks and stay undetected for up to six months. Attendees will learn how to
better identify and respond to these and similar exploits and take away an actionable plan
for their own organization.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
5:05 PM - 5:25 PM
Magic Quadrant and Critical Capabilities for Unified Endpoint Management
Chris Silva, VP Analyst, GartnerUnified endpoint
management — bringing together enterprise mobile and
nonmobile platform management and security — is one of the hottest topics in enterprise IT.
The vendor landscape is changing quickly. We present the 2018 Magic Quadrant and Critical
Capabilities in this session.
Market Guide for Mobile Threat Defense
Dionisio Zumerle, VP Analyst, GartnerMobile threat
defense (MTD) products counter malicious threats on iOS and
Android devices to strengthen mobile security posture and overall security hygiene. This
session will present the market dynamics, main vendors and use cases for MTD.
1. What is
mobile threat defense?
2. What does the market for MTD look like?
3. How are the main
vendors differentiating?
5:30 PM - 6:00 PM
Outlook for Privacy, 2022
The future of privacy, is now. Amid an unprecedented set of innovations,
driven by a global move to maturing privacy and data protection legislation, consumers'
demand for active protection of privacy continues. Looking for minimum compliance leads to
risk and opportunity oversight. This session deals with upcoming challenges in privacy, the
global state of the landscape, and the tools for a mature, value-creating privacy program.
Solving the Challenges of Modern Remote Access
Rob Smith, Sr Director Analyst, GartnerThis session will
cover best practices to enable users' access to
corporate resources, for both times of crisis and under normal circumstances. We will
examine why always-on VPN is often the wrong choice while determining what is the right one
such as ZTNA, CASB, with the evolution to SASE.
Cloud Security 201: The Art and Science of Cloud Security
Patrick Hevesi, VP Analyst, GartnerCome learn about the
beauty of the cloud while applying the right
"science" to securing your multiple cloud services. We will discuss the journey to the cloud
and how security tools like CASB, CSPM, CWPP, SMP, SSPM, SASE and CSMA all work together to
build a unified cloud security strategy work of art.
Cloud-Native Security Operations – What Customer Security Operation Centers Are Looking for?
Mark Wah, Sr Director Analyst, GartnerThe Security
Operations Center has been powered by products like SIEM,
SOAR, NDR, and EDR. Cloud-native security operations bring additional use cases to the SOC
like ephemeral workloads and a deeper relationship between software-defined elements. How
should SOCs adapt to these new use cases? How can innovations within cloud security help
address the visibility gap and make a difference in security operations?
Digital in Name Only Makes Business Vulnerable. Sustainable Digital Business; A Win-Win
Solution
An alternative view on how to create value with security through
diversity, equity and inclusion. The current security, control focused, approach is often
seen as a burden, a cost driver. The real issue, business going digital in name only, is
often overseen. SRM leaders must include new stakeholders in their organization to build
win-win sustainable digital solutions that bring new business opportunities AND security.
6:00 PM - 7:30 PM
Exhibit Showcase Evening Reception
Attendees are invited to join us for the Exhibit Showcase Evening
Reception to network, relax and unwind after the day’s sessions.
7:00 AM - 9:00 AM
7:00 AM - 7:00 PM
Registration and Information
Registration and Information hours for the day.
9:45 AM - 7:00 PM
Explore the Exhibit Showcase
Visit the Exhibit Showcase to explore leading technology and service
providers to help solve your mission-critical priorities. Engage with leading solution
providers through private meetings, compare solutions and formulate your provider
shortlists. Connect with your peer community to exchange ideas over coffee or dessert and
attend a theater session to learn from Gartner experts and experience technology in action.
10:00 AM - 10:20 AM
BCMP Market Guide — How Software Can Help Mature Business Continuity Management
David Gregory, Sr Director Analyst, GartnerThis session
will discuss how a BCMP software solution can help to
create, develop and mature a business continuity management program.
Magic Quadrant for Endpoint Protection Platform
Chris Silva, VP Analyst, GartnerThe pandemic has once
again highlighted the importance of a robust
endpoint security capability. With the market evolving, merging, and expanding, it is an
imperative to use the most appropriate vendor or technology to meet its current and future
objectives. This session will help the security and risk management leaders understanding
the direction and approaches that the vendors take in the market.
10:15 AM - 11:00 AM
CISO Circle Exclusive Panel: Build Unicorn Teams or Hire for Talent? Navigating the Future
of the Security Organization
Disruptive forces continue to generate high demand for cyber-security
professionals. Executives must rethink their cyber-security organization, as they face a
challenging labor market and an extended ecosystem of risks. This session will host a panel
of exclusive CISOs to discuss organizational transformation by leveraging these new
challenges.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
10:30 AM - 11:00 AM
Best Practices in Communicating the Business Value of Cybersecurity
Tom Scholtz, Distinguished VP Analyst, GartnerThere are
multiple approaches for communicating the business value of
cybersecurity and none of them offer a single "best" way. All are relevant to different
contexts. This presentation will discuss the characteristics of common approaches such as
RO(S)I, price-performance analysis, outcome-driven approach, etc., and provide guidance on
how to select the appropriate approach based on context.
CMMC and DFARS 101 — What Your Peers Are Saying/Doing
If your company does any work for the department of defense anywhere in
the world, security should now be central to your organization's competitive strategy. Hear
what your peers are saying and doing to get ready.
Managing Open Source Software Risks in DevSecOps Environments
Dale Gardner, Sr Director Analyst, GartnerThere are
millions of open-source software projects in the world. Which
ones are in your software? And what security and legal risks do they pose? Getting control
requires both process changes and automation, and in this session, we'll examine the
structural changes you should consider, along with the tools that can help.
The State of Artificial Intelligence in Security and Risk Management
Jay Heiser, VP Analyst, GartnerThis session covers why
everyone speaks about how artificial intelligence
might solve security and risk management challenges, but struggle when asked to provide a
concrete example. It will show examples of what we call AI today.
New Market Opportunities Arising From Enterprise Assets Exposure
Business transformation initiatives are pushing an increasing number of
enterprise assets and their potential vulnerabilities to be exposed to the internet. This is
driving the emergence of a number of stand-alone markets providing asset and vulnerability
assessment. This session will discuss the current trend and discuss potential evolution
toward a better integrated set of capabilities.
Outlook for Cloud Security 2021
Neil MacDonald, Distinguished VP Analyst,
GartnerInformation security is frequently cited as a top obstacle to the
adoption of cloud computing, yet improved security is cited as a top driver for adoption of
cloud computing. This session will explore the current and future state of cloud security
spanning infrastructure, platform and software as a service offerings, including hybrid
cloud security and emerging distributed cloud and edge computing security issues.
Preparing for the Inevitable: Building Your Ransomware Defense Structure
Jon Amato, Sr Director Analyst, GartnerRansomware attacks
continue to increase globally and the criminals
responsible for those attacks have become increasingly sophisticated in their methods. In
this session, we will examine the life cycle of a ransomware attack and discuss the defense
techniques your organization should use to protect themselves against this threat.
10:30 AM - 11:15 AM
Ask the Expert: Managing External Identities Through CIAM
Michael Kelley, Sr Director Analyst, GartnerCustomer
Identity and Access Management (CIAM) is key to enabling your
digital transformation and the foundation of your customers' digital experiences. This
session gives you an opportunity to ask questions about CIAM features, vendors and best
practices. Attendees should come prepared to ask questions about IAM for external identities
(including customers, partners, patients and citizens).
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Roundtable: Metrics that Matter for Midsize Enterprise Security
Patrick Long, Principal Analyst, GartnerMany midsize
enterprise security teams are having trouble defining what
security metrics they should be tracking. What metrics actually drive outcomes? Are your
metrics targeting the correct audience? Are your outsourced security services providing you
the right metrics? Join us for this MSE-specific session to help get rid of the noise and
find what works best for your organization.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Ask the Expert: Privacy and the Supply Chain; What to Mind With Your Service Providers
An increasing number of modern privacy regulations worldwide put strict
demands on how data is handled, and by whom, or even where. How do you select and control
service providers? What if they suddenly announce a profound change in policy, like WhatsApp
did for sharing data with Facebook? Not to mention numerous countries who want data to be
nationally processed. Ask the Expert all you want to know in this area. End users only, come
prepared with questions.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
11:30 AM - 12:00 PM
Solution Provider Sessions
12:00 PM - 3:00 PM
Attendee Lunch
Exhibit Showcase Dessert Reception
Join us for dessert on the Exhibit Showcase. Speak to product experts,
experience the newest technologies and services and get the answers you need from
knowledgeable technology providers.
12:30 PM - 1:00 PM
Best Practices in Managing Cybersecurity in Federated Organizations
Jeffrey Wheatman, VP Analyst, GartnerImplementing
cybersecurity in a federated environment is challenging.
Stakeholders have different goals, maturity and risk appetites. SRM leaders must implement a
program that accounts for variance and helps balance risk and opportunity. (1) what are the
unique challenges of federated environments? (2) What does governance look like? (3) What
are the practical implications of federated security?
Outlook for Application Security 2021
Mark Horvath, Sr Director Analyst, Gartner2020 was a year
of change and few things have been impacted more than
application security! Trends to new technology, new platforms and new tools have all been
accelerated, achieving several years worth of growth in a short time. In this session we
cover the current state of application security and explore some of the current, fast-moving
trends.
Successful Data Security Governance Must Focus on Balancing Risks and Business Outcomes
Data security projects can create negative business impacts without
support from the business leaders. It is critical to use data security governance in
cooperation with a business sponsor to focus on business outcomes while managing achievable
levels of risk mitigation.
The Economics of Cybersecurity
Tom Scholtz, Distinguished VP Analyst, Gartner
Richard Hunter, Distinguished VP Analyst, Gartner
Jonathan Care, Sr Director Analyst, Gartner
Brian Lowans, Sr Director Analyst, GartnerCybersecurity entails making
tough financial decisions about balancing
digital opportunity against cyber risk. Viewing this conundrum through an economic or
financial science lens can help you make better informed decisions. This presentation
introduces new models for cost optimization, financial-based risk assessment and
articulating the value of security.
Gain a Critical Advantage Over Cyber-Crimes Through Diversity, Equity and Inclusion
Stephanie Stoudt-Hansen, VP Analyst, GartnerWorkplace and
supplier diversity is at the forefront of organizations’
minds. Beyond the ethical and moral benefits, DEI can protect against an increasingly broad
range of cyber-attacks. We will discuss the business case for DEI, how to develop a one-page
DEI strategy and how to grow your employee and supplier diverse base.
Vulnerability Management — What is Working and What is Not
Mitchell Schneider, Principal Analyst,
GartnerVulnerability management is still not a standard practice for many
organizations, even though it should be a foundational practice of good security hygiene.
This can be a bigger issue for resource-challenged organizations. This session will help
participants understand what has worked and not worked for their peers, across people,
processes and technologies, when implementing a vulnerability management program.
Where is the Digital Risk Protection Market Headed?
This is a vendor-focused session that will cover how Gartner defines
digital risk protection, who the key providers are today, and where the market is headed in
terms of key capabilities, expanding buyer personas, and the adjacent technology spaces.
Working From Home: Security From Home to the Enterprise
Thomas Lintemuth, Sr Director Analyst,
GartnerOrganizations of all types are having to allow work from home, some for
the first time. Find out how enterprise controls, cloud controls and the home office
controls come together to secure the remote user experience.
Prioritizing Investment in a Cyber Security Program
Pierre Gourdon, Leadership Partner, GartnerWith an
ever-changing threat environment, CISO's are challenged to
effectively allocate resources and plan for future investment. This session will explore how
CISOs can establish priorities in their security programs to better align their program
investments and initiatives to business risk mitigation.
12:30 PM - 2:00 PM
Workshop: Experiences from Implementing Mobile Identity for a Remote Workforce
Chris Silva, VP Analyst, GartnerThis workshop discusses
real-world experiences on solving the challenges
associated with identifying users and devices in a mobile landscape. It also discusses the
convergence of mobility management and identity management technologies and the implications
this poses to the digital workplace.
Key issues addressed:
Do I need to implement
mobile identity? If so, how?
What are the best practices in deploying it?
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
12:30 PM - 3:30 PM
CISO Circle Exclusive Research Discussion: The Roadmap to CISO Effectiveness
Christopher Mixter, VP, Advisory, GartnerIn the last few
years, CISOs have been thrust into the ranks of the
c-suite as cybersecurity rises in priority for organizations. CISOs struggle to understand
what success now looks like and what they need to do to attain it. As a consequence, 60%
admit they rarely disconnect from work; 22% are available to their company 24/7. To what
end? It's time for CISOs to take a step back and start making hard choices about how to
pursue their value proposition.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
1:30 PM - 2:00 PM
Outlook for Endpoint and Mobile Security
Patrick Hevesi, VP Analyst, GartnerEndpoints continue to
multiply and connect from anywhere. Security teams
have had to scramble and protect both managed and now more unmanaged devices than ever. This
session will discuss the trends of attack, new hardware and software security solutions, and
how to build a strong defense on the device, in the enterprise and the cloud to protect the
endpoints.
The Multigenerational Workforce in Security
Zaira Pirzada, Principal, Advisory, GartnerBaby boomers,
Gen Xers, millennials and Gen Zers comprise your security
function. Do you really understand their different behaviors and expectations? This is a
must for security leadership, so that they can create an IT and security culture that
leverages strengths and confronts weaknesses so to uncover opportunities and overcome
threats into our collaborative future. Change starts with people.
Top Trends in Privacy
Dive into the three top trends in privacy and privacy tech. What are
leading organizations focused on, what are the best capabilities to develop and what should
you expect from your tech. We'll cover use cases, vendors and cost — enough to provide you
with clear next steps to take to your teams.
Automate Enterprise's Security Posture Assessment With Breach and Attack Simulation
Mitchell Schneider, Principal Analyst, GartnerEnterprises
increasingly face difficult purchase decisions choices and
need to prioritize. Breach and attack simulation (BAS) tools promise to safely and
automatically test the enterprises' security controls and attack surface. This session will
explain :
- how breach and attack simulation work
- what to expect from the
technology
- How to evaluate and select providers
Share Your Data Without Giving It Up: The Rise of Commercial Multiparty Computing
Mark Horvath, Sr Director Analyst, GartnerHomomorphic
encryption and multiparty computing are entering the market
with a variety of vendors and technologies, but how much of it is real and how much is
hyperbole? Can data really be shared with competitors and partners without worrying about
losing control? What are the benefits, costs and, more importantly, what are the limits of
todays MPC commercial technologies.
Integrated Risk Management — Emerging Market Trends
Integrated risk management (IRM) technology is uniquely suited to address
the myriad of risks arising from the current crisis and future COVID-19 recovery. IRM
technology product leaders will need to develop IRM capabilities that are capable of
addressing the IRM market insights outlined in this presentation.
Treat Cybersecurity as a Business Decision
Paul Proctor, Distinguished VP Analyst, GartnerMany
current approaches to cybersecurity are falling short of their
promise to deliver including risk appetite statements, quantification and throwing money at
the problem. Treating cybersecurity as a business decision puts it in a business context and
engages business decision makers to choose how much protection they want, and how much they
want to spend.
1:30 PM - 2:15 PM
Roundtable: Ransomware Defense on a Tight Budget, Minimize Attack Surface, Maximize
Resilience
Paul Webber, Sr Director Analyst, GartnerPreventing
Ransomware is no longer possible, especially with the advent
of targeted and human-operated campaigns. Have limited resources? Ask our experts how it is
possible to improve all three – processes, tools and training – without blowing the budget.
Identify quick wins and strategic initiatives you can action in your own organizations and
avoid being the next victim.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Roundtable: Secure Access Service Edge (SASE)
Lawrence Orans, VP Analyst, GartnerShare your SASE
journey with your peers in this roundtable. Learn from
each other as you discuss your success stories and your setbacks on the road to SASE.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
2:30 PM - 3:00 PM
Solution Provider Sessions
3:30 PM - 4:00 PM
Use Behavioral Economics to Influence Security Culture and Decisions
Tom Scholtz, Distinguished VP Analyst, GartnerThis
presentation will share how behavioral economics can help security
and risk leaders understand how to influence user behavior and improve security culture.
Outlook for Cyber and IT Risk
72% Board of Directors would change organizational structure to achieve
business model agility during the COVID-19 crisis and its aftermath. CIOs, CISO, IT risk
leaders and digital innovation champions are witnessing unforeseen changes that have
cascading impacts on managing exposures. This session walks through emerging solutions and
adjustments in digital environments.
The End of Encryption: Using Crypto-Agility to Survive and Thrive in the Coming Storm
Mark Horvath, Sr Director Analyst, GartnerThe retirement
of the RSA and ECC algorithms in the next few years will
be a seismic shift in data security we have not seen in a generation. This session covers
not just the retirement of these and other algorithms impacted by quantum computing, but
will show you how to take advantage of Quantum Safe algorithms to open new business
opportunities for your organization.
How and Where to Get Started With Automation in Security Operations
Automation has gone mainstream. Leaders responsible for security
operations need to understand the current art of the possible when applying automation in
their teams and functions. This session will cover the current state of automation in
security operations, how to organize around implementing and sustaining automation, and
future opportunities.
How to Achieve Practical SASE Implementations This Year
Lawrence Orans, VP Analyst, GartnerVendors are adopting
the term SASE to encompass their cloud security
offerings, but not all SASE vendors are equal. Security and risk management leaders can take
steps now to adopt the SASE framework and prepare for the future. This session will:
-
Clearly define the SASE framework
- Address the strategy for SASE framework adoption
-
Provide practical steps to implement SASE frameworks this year
Vulnerability Management 101: Prioritization
Patrick Long, Principal Analyst, GartnerOrganizations of
all sizes are still approaching vulnerability management
from a critical- and high-vulnerability first perspective, leading to wasted resources and
no intentional reduction of risk. Stop boiling the ocean and start prioritizing to make the
most out of your vulnerability management program!
Taming the Legal Beast - What Every CISO Should Know About Vendor Risks and Agile Cloud
Contracting
Stephanie Stoudt-Hansen, VP Analyst, GartnerCloud
contracting requires due diligence from pre-contract vetting to
monitoring ongoing activities. We will explore creating cloud security guidelines,
proactively addressing Procurement and Legal’s concerns and what you can do if you are
unable to address security risks in the contract and ongoing vendor risk management
3:30 PM - 4:15 PM
Roundtable: Zero Trust Networking
Lawrence Orans, VP Analyst, GartnerShare your zero trust
journey with your peers in this roundtable. Learn
from each other as you discuss your success stories and your setbacks on the road to a zero
trust network.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Roundtable: Defining Resilience
Facilitated session to obtain participant input on how they are defining
"resilience" within their organization and how they plan to implement and measure. Potential
abstract: Resilience seems to be a new buzzword in 2020 that isn't really new. Come join
this interactive session with your peers to hear how others define, implement, and measure
resilience.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
4:10 PM - 4:30 PM
Magic Quadrants for Secure Web Gateways and Cloud Access Security Brokers
John Watts, Sr Director, Analyst, GartnerThis session
will review the evolution of the Magic Quadrants for SWG and
CASB through 2020 and provide a deeper dive into the vendors' strengths and cautions. In
addition, attendees will discover how the SASE framework trend is influencing these market
futures as vendors expand beyond core features to address more use cases.
Market Guide for Electronic Signature
Tricia Phillips, Sr Director Analyst, GartnerElectronic
signature adoption has accelerated in the context of remote
working and digital transformation, with business process requirements driving solution
selection. In this session, we will discuss the solution landscape for electronic signature
and some best practices for defining use-case focused requirements with an eye on security,
legal, compliance and business requirements.
The 2021 Application Security Testing Magic Quadrant: State of the Market
Dale Gardner, Sr Director Analyst, GartnerApplication
security testing has undergone a profound evolution in the
post-COVID-19 world, with a drive toward new work styles, new requirements and push toward
new technologies. We will recap the changes over the last year and discuss what new security
models mean for application testing, and how vendors have risen to that challenge.
4:45 PM - 5:30 PM
Gartner Keynote: How to Tell Your Story Like a Pro
Leigh McMullen, Distinguished VP Analyst, GartnerWhether
it's in the board room or the big stage at an event like this,
having great story is just part of the equation. This session is about how to tell your
story. How to structure it for different audiences and different formats, and how to make
sure your message sticks!
5:30 PM - 7:00 PM
Exhibit Showcase Evening Reception
Attendees are invited to join us for the Exhibit Showcase Evening
Reception to network, relax and unwind after the day’s sessions.
7:00 AM - 09:00 AM
7:00 AM - 5:00 PM
Registration and Information
Registration and Information hours for the day.
9:00 AM - 9:45 AM
Guest Keynote: The Future Of Cyberwar: Defending Your Organization In The Fifth Battleground
Tarah Wheeler, Strategic Technical Security Leader,
Business is now on the frontlines of cyberwarfare. More than just the
threat of hackers, companies have to worry about how nation-state conflicts might affect
them—from cyberespionage groups out to steal their intellectual property, to targeted
attacks aimed at shutting down critical nation infrastructures. For example, in 2017,
theWannaCry attacks shut down computers in more than 80 NHS organizations throughout
England, resulting in over 20,000 appointments cancelled, 600 GP surgeries forced to return
to pen and paper, and 5 hospitals that resorted to diverting ambulances because they were
unable to handle their emergency case load. Incidences like this, as well as Denmark’s
NotPetya attack—at the time dubbed the “Most Devastating Cyberattack in History” by
WIRED—have cost companies billions of dollars, as they become the collateral victims in
state conflict.
So, how do you prioritize your information security budget when
you’re no longer only concerned about hackers, but about nation-state attacks as well? In
this talk, Tarah Wheeler—newly appointed the US/UK Fulbright Scholar in Cyber Security—shows
leaders and organizations how to develop an effective threat model and understand their
lines of defense. As cyberattacks from foreign governments continue to increase, it’s
imperative that businesses learn how to defend themselves, take proactive action, and
recognize their larger place in the world’s growing, complex technical ecosystem. This talk
helps them do just that.
9:45 AM - 3:00 PM
Explore the Exhibit Showcase
Visit the Exhibit Showcase to explore leading technology and service
providers to help solve your mission-critical priorities. Engage with leading solution
providers through private meetings, compare solutions and formulate your provider
shortlists. Connect with your peer community to exchange ideas over coffee or dessert and
attend a theater session to learn from Gartner experts and experience technology in action.
10:00 AM - 10:20 AM
2021 Market Guide for Security Awareness Computer-Based Training
William Candrick, Director Analyst, GartnerThe security
awareness computer-based training market continues to evolve
as incumbents strengthen and expand their offerings and as new players continue to join this
already contested market. Join this session to know how the market is shifting, how emerging
trends are shaping solution offerings, and how to make security awareness capabilities to
reduce the insider-threat for your organization.
Magic Quadrant for Access Management
Michael Kelley, Sr Director Analyst, GartnerThis session
will present the Magic Quadrant and Critical Capabilities
for Access Management market, 2020.
10:30 AM - 11:00 AM
What's in Your Software? Defending Against Software Supply Chain Attacks
Dale Gardner, Sr Director Analyst, GartnerSoftware supply
chain attacks aren't new -- but the increasing impact and
involvement of more sophisticated attackers reveal a high-risk attack vector. Eliminating
attacks is difficult, but security leaders can undertake a variety of actions to help manage
the risk, and prevent their organizations from becoming unwitting pawns in an attack.
Digital Business Requires a Delicately Balanced Risk Culture
William Candrick, Director Analyst, GartnerTo succeed at
digital business, organizations need to make sure their
leaders and employees make bold and innovative choices while simultaneously protecting their
business outcomes. The culture of the organization — specifically as it relates to
risk-taking — is a significant yet underutilized driver. This session will cover how to
build a risk culture that powers your digital future.
Outlook for Security Talent, Careers, and People 2021
Michael Wodka, Director, Advisory, GartnerAre you
struggling to hire security talent amidst the challenges of the
pandemic, remote work, and diversity considerations? Do you know which emerging security
roles and skills you will need to succeed in the digital age? The information security
profession is projected to grow 31% between 2019 and 2029. Be prepared by learning new
strategies to recruit, develop, and retain top security talent.
Here Come the XDR Disruptors: What is Next in Extended Detection and Response
Paul Webber, Sr Director Analyst, GartnerXDR is still a
relatively new category but already it is gaining traction
as more vendors announce new XDR platforms and customers weigh up the advantages of each.
But who are the real innovators and what disruptive technologies will they bring to bear?
Discover the differentiating features and capabilities that we can look forward to and how
will these make a difference in 2021 and beyond.
Practical Attacks on Machine Learning
In this session, we introduce an example machine learning application. We
execute real attacks on the example application to illustrate different attack techniques on
general ML/AI applications. For each of the attacks, we provide advice for mitigations.
End-User Becomes Provider: Are You Ready for a Product Security Officer
As more organizations embrace digital transformation and struggle to
secure productization, the emerging role of the Product Security Officer (PSO) is taking
shape. This session will example the role of PSO and who owns security for digital products.
The Path to Unified Endpoint Security (UES)
Rob Smith, Sr Director Analyst, GartnerEPP, EDR, and even
MTD are merging into a single console for both policy
management and remediation. Is this the best choice to protect endpoints? Or should
individual solutions still be chosen? This session will examine the pros and cons of a UES
strategy as well as how it is useful for VPN, ZTNA and SASE deployments.
How Is Your Cybersecurity Program Working for You?
Organizations across multiple sectors have made Cybersecurity a
board-level priority. CISOs, CIOs, CTOs and CROs are putting in a tremendous amount of
effort and investment to manage organization, IT, and cybersecurity risks, and operate an
effective and efficient cybersecurity program. However, the BIG question that remains is how
is that cybersecurity program working for you?
10:30 AM - 11:15 AM
Ask the Expert: Insider Risk: Protection from the Risk Within
Organizations commonly focus a large portion of their security strategy,
time and budget around potential outside cyber threats. However, insider threats also pose
significant risk. Defending against these threats should not be overlooked. Attendees will
learn about insider risk scenarios, indicators of compromise and mechanisms to mitigate this
risk.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Ask the Expert: Use a Data Risk Assessment to Focus Actions on the Growing Data Security and
Privacy Risks
A data risk assessment is critical to review the growing risks associated
with privacy laws, data breaches and deployments across multi-cloud architectures. Use this
session to discuss emerging best practices.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Ask the Expert: Death of the Humble Cookie: All Your Questions Answered
Third-Party Cookies (TPCs) transparently support much of what we do on
the internet, they facilitate site functionality, enable tracking and underpin the adtech
ecosystem, which pays for a free web to the tune of US$75 per user per year. TPCs are
basically being deprecated as the larger browser platforms will default to "disable." This
will impact your organization in many ways. At the very least you will need to work with
your vendors to transition to a cookie-less way of doing business. But most organizations
will have to pivot away from an implicit cookie-based model towards an explicit
consent-based model to survive in the digital space. This is your opportunity to learn how
this change will impact your organization, ask your questions and walk away with a clear
plan.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
11:30 AM - 12:00 PM
Solution Provider Sessions
12:00 PM - 3:00 PM
Attendee Lunch
Exhibit Showcase Dessert Reception
Join us for dessert on the Exhibit Showcase. Speak to product experts,
experience the newest technologies and services and get the answers you need from
knowledgeable technology providers.
12:30 PM - 1:00 PM
Where Should I Implement AI in My Security Products, for Vendors
Nat Smith, Sr Director Analyst, GartnerAI might be the
solution to every product challenge you have or it might
be just a buzzword that every other vendor throws around. What is real? What are buyers
demanding? Where are my competitors likely to implement their own AI? This session will
explore AI trends and research predicting future waves of AI innovation.
Application Security Practices for Modern DevSecOps
William Dupre, Sr Director Analyst, GartnerOrganizations
have embraced agile development methodologies and DevOps
practices, and technical professionals must find ways to integrate application security into
this world.
1) What are the ways to modernize secure design practices like threat
modeling?
2) How can we perform continuous security testing as part of CI/CD?
3) How
do you effectively leverage security controls external to code?
How to Select and Procure Incident Response and Breach Response Services
Incident response services are a critical element for an organizations'
incident response capability. This session will cover what incident response and breach
response services, and how to procure them.
CISO Circle Exclusive: Cyber Judgment: Navigating the Era of Distributed Decision Making
Christopher Mixter, VP, Advisory, GartnerSecurity and
risk management leaders can no longer directly facilitate
most risk decisions. SRM leaders must expand their focus to improving cyber judgment across
the enterprise to help decision makers make informed information risk decisions without
their direct involvement. This session will offer practical, fact-based guidance on how to
develop cyber judgement within your organization.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
How to Better Prepare and Respond for 2021's Threat Landscape
John Watts, Sr Director, Analyst, GartnerThe threat
landscape is a moving target. Attack campaigns might hit
multiple organizations, but each enterprise should analyze its own threat landscape.
Security and risk management leaders should gain baseline knowledge on how the threat
landscape evolves:
1. IT Security and real-world become more intertwined
2.
Traditional attacks still outpace existing defenses
3. The “silver bullet” mindset
damages enterprises’ security program
Privacy Enhancing Computation for Analytics, BI, and Post-Schrems II Cloud Adoption
Can we use personal data for analytics purposes, and business
intelligence? Can we share personal data with others? Is it even possible to use public
cloud services in the time of maturing data protection and privacy laws? Likely the answer
to all is 'yes, but'. Privacy-enhancing computation techniques may be able to help. This
session deals with the 'how to approach' aspects.
Tutorial: How to Create a Business-Aligned Cybersecurity Strategy
Jeffrey Wheatman, VP Analyst, GartnerEveryone knows how
important strategic planning is for success and yet it
is an immense challenge for pretty much everyone. Join us to learn about a simple approach
to telling a simple story linking security program activities to business goals and drives
better decisions.
1. What makes a good strategy?
2. What kind of narratives
work?
3. What does a sample strategy look like?
The Characteristics of a Defensible, Risk-Based Cybersecurity Program
Tom Scholtz, Distinguished VP Analyst, GartnerCISO’s have
a duty to ensure that the enterprise has an effective
cybersecurity security program that can prove to all stakeholders (i.e., shareholders,
regulators, customers, suppliers and employees) that it is doing all that can be reasonably
expected to protect the digital resources against cyber risk. This presentation analyses the
characteristics of a defensible program.
1:30 PM - 2:00 PM
Building Incident Response Scenarios for Insider Threats
This session will cover different types of insider threat scenarios, and
how you should incorporate these scenarios in your incident response plan and processes. We
will define insider threat personas, how to begin building scenarios for these personas, and
discuss some best practices for success.
Face Value: Biometric Authentication Risks and Opportunities
Tricia Phillips, Sr Director Analyst, GartnerEveryone has
inherent physical and behavioral traits that can provide a
uniquely personal basis for authentication in place of passwords or tokens. These biometric
methods can transform authentication user experience across a multitude of channels. But how
can you effectively mitigate privacy concerns, presentation attacks and other risks? And
what value will biometrics add to continuous adaptive trust (CAT) strategies?
DE&I for CISOs: Look Within & Look Around for the Opportunities Beyond Your Security
Posture
Zaira Pirzada, Principal, Advisory, GartnerIt's no
secret: DE&I initiatives in the Security workforce is dismal.
This is already proving detrimental to many organizations. The greatest change agents to fix
this problem are C-Suite leaders themselves. CIOs and CISOs must take greater notice, as
STEM careers starve for diversity, equity, and inclusion. This presentation will provide
actionable guidance to CISOs and CIOs on how to change course by looking intentionally
within to uncover unconscious biases, and by looking around to uncover blatant gaps in
DE&I initiatives within their workforce. The goal is to foster change that will benefit
the enterprise in the long-run.
Secure Your Backup Data Against Ransomware Threats
Michael Hoeck, Sr Director Analyst, GartnerRansomware
taking aim at backup solutions to prevent recovery could have
significant consequences. IT leaders must ensure that best practices are followed to ensure
backup copies are protected and ready for recovery in timeframes that meet recovery
objectives.
The Top Cybersecurity Predictions for 2021-2022
Sam Olyaei, Director Analyst, GartnerEvery year, Gartner
produces impactful predictions across all practices.
This presentation will compile the top predictions prepared by our cybersecurity experts for
the year 2021-2022. Security and risk management leaders should monitor these trends to be
successful in the digital era especially as most recognize that global change could
potentially be one crisis away.
Top Lessons Learned From the SolarWinds Attack
Peter Firstbrook, VP Analyst, GartnerThe SolarWinds
supply chain attackers utilized the most advanced tool
tactics and techniques to achieve their goals. Security and risk management leaders should
understand how the attackers were able to evade detection to improve their defenses. This
session will explore:
What was different about the SolarWinds attack?
What can you do
to improve your defensive posture?
What is the future of supply chain attacks?
Outlook for Organizational Resilience
Roberta Witty, VP Analyst, GartnerThis session highlights
the importance of organizational resilience as a
strategic imperative in the wake of the COVID-19 pandemic, the changing threat landscape and
the pace of digital innovation.
Assessing and Managing Metrics for Your BC/DRM Programs
This session will outline the types of metrics organizations can use to
assess the performance and effectiveness of their business continuity and/or disaster
recovery program.
Defining and Quantifying Risk
Roseann Larson, Leadership Partner, GartnerDiscuss the
risk quantification journey, lessons learned, and risk
appetite statements.
1:30 PM - 2:15 PM
Roundtable: Drowning Out the Noise – Avoiding Compliance-Driven Security Agendas
William Candrick, Director Analyst, GartnerAcross
industry sectors, organizations are being directed to implement –
and, in some cases, comply – with a range of new or strengthened government cybersecurity
regulations. A key challenge for SRM leaders is being able to –sensitively and sensibly –
shape and influence the discussion at senior levels and avoid being sucked into a
compliance-driven security agenda. Join this interactive, invitation-only roundtable session
with your peers to discuss strategies for delivering an effective cybersecurity program and
at the same time meet regulatory cybersecurity obligations.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Roundtable: Five Cultural Elements for Successful DevSecOps
Dale Gardner, Sr Director Analyst, GartnerMoving from
DevOps (or any development style) to a security-focused SDLC
is more than just buying some tools and hoping for the best. In this session, we will share
some of the most effective ways we've seen in speaking with thousands of clients to get
security into a development culture without massive resistance.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
Ask the Expert: A Privacy Impact Assessment Does Not Have to Be a Pain!
Bernard Woo, Sr Director Analyst, GartnerA privacy impact
assessment, or PIA, is a key tool for identifying and
managing privacy risks. As privacy regulations continue to increase in number and mature in
content, a PIA is an indispensable tool in your risk management toolbox. Join this session
to learn about PIAs, and the pitfalls to avoid as well as smart practices to adopt.
Please Note: based on availability and eligibility you may sign-up for this session via
Conference Navigator after you register for this conference.
2:30 PM - 3:00 PM
Solution Provider Sessions
3:30 PM - 4:00 PM
Transformational Data Security Strategies
The building block model for data security has lead to stagnation.
Security and risk management leaders must follow four rules of data security strategy
formation to enable simpler and consistent data security because this opens up the
transformational character of data that organizations have been dreaming of ever since the
advent of Big Data.
Enabling Cloud Native DevSecOps
Dionisio Zumerle, VP Analyst, GartnerWith cloud native
applications, the lines between infrastructure and
applications are increasingly blurry, while with DevOps development and operations are also
increasingly overlapping. Using data from a recent Gartner survey, this session will present
recommendations to arrange people, process and technologies to protect application assets
without slowing down the CI/CD pipeline.
It's Time to Embrace New Collar Workers in Cybersecurity
Patrick Long, Principal Analyst, GartnerNew Collar
Workers are individuals who develop the technical and soft
skills needed to work in tech jobs through non-traditional education paths and they are
hand-made for cybersecurity. Learn how to identify, nurture and capitalize on this growing
talent pool to keep your enterprise secure!
How to use MITRE ATT&CK to Improve Threat Detection Capabilities
Implementing strong security monitoring requires an effective threat
detection strategy. This research shows technical professionals focused on security how to
leverage the vast knowledge base of tactics, techniques and procedures (TTP’s) within the
Mitre ATT&CK framework to create effective threat detections.
The Evolution of the CISO Role — What's Next?
Sam Olyaei, Director Analyst, GartnerIn a world of change
and uncertainty, some are (again) predicting the
demise of the centralized CISO role. However, more likely is another functional
responsibility split driven by digitalization. Some CISOs will take these “business
executive” roles, while others will continue in IT-oriented and operational tasks. What type
of CISO are you? Where will you excel? What's next for the role?
When Disaster Strikes, Don't Be Caught Unprepared But Have Your Incident Response Ready
Roberta Witty, VP Analyst, GartnerIncreasingly, security
incidents happen without warning and remain
undetected for an extended period. When responding to such an active threat, it is vital
that the time between the initial detection and the full mitigation is as short as possible.
Security & Risk management Leaders must be prepared for the inevitable by having a
proper security incident response process.
Data Protection in Office 365 Security Deep Dive
Protecting sensitive data in Office365 is crucial for most of the
organizations. However, clients are often not sure what data protection capabilities they
are getting with their license or by just upgrading to an add-on what advance capabilities
they may get. This session will help clients to know more about Office365 data protection
capabilities including DLP, data classification, rights management and lot more.
4:05 PM - 4:25 PM
Vendor Risk Management Solutions to Automate and Provide Oversight Over Risk and Security
Joanne Spencer, Sr Director Analyst, GartnerSecurity and
risk managers struggle to identify and evaluate the best
solutions to effectively manage and monitor third party risks — with many vendors promoting
their product as the silver bullet of VRM. In this session, we will provide clarity
regarding what type of solutions are available, the typical use cases and which vendors
perform what capabilities.
4:30 PM - 5:00 PM
Accelerate Your IAM Using DevOps and Agile Approaches
David Mahdi, VP Analyst, GartnerIAM adoption has
traditionally been seen as a monolithic and waterfall
style of deployment activity. These characteristics are changing as the needs of the
business preclude extended investment and adoption. Learn how organizations have used DevOps
and agile approaches to improve alignment with their business requirements and practices.
Stop Treating Security Like Magic and Security People Like Wizards
Michael Kelley, Sr Director Analyst, GartnerRefocus
corporate security initiatives and efforts — from a futile effort
to prevent breaches to accepting the inevitability of breaches. We will define how to learn
from normal accident theory to build a culture of resilience, capable of reducing or
eliminating business impacts from security breaches. This culture is built on
characteristics and disciplines which we will define in actionable terms.
Top 5 Priorities for Managing AI Risk Within Gartner’s MOST Framework
We present Gartner's MOST framework for managing AI risk and a roadmap on
the top five priorities within. MOST covers model operations, security and trustworthiness
for AI.
a) What are the various components of an AI risk management program?
b)
Who should manage our AI risk management program?
c) What are the top five priorities for
AI risk management and what existing tools can help us?
Best Practices for Securing Cloud-Native Applications Built on Containers and Kubernetes
Neil MacDonald, Distinguished VP Analyst,
GartnerCloud-native applications are not inherently unsecure, but are being
deployed insecurely, driven by developers and with a need for agility in service development
and deployment. Security and risk management leaders must address container and Kubernetes
security issues around vulnerabilities, visibility, compromise and compliance.
Plotting Your Path to a SASE Architecture
Richard Bartley, Sr Director Analyst, GartnerMoving to
SASE aims to simplify orchestration of network and security
capabilities to help connect users in multiple contextual situations with internal
organization applications and cloud services. How do you start with your SASE approach? This
session presents some common kickoff points and steps to evolve toward SASE.
ZTNA vs. VPN — The Battle for Remote Access Is On
Thomas Lintemuth, Sr Director Analyst, GartnerRemote
access is a previously "nice to have" service that has become
business critical. VPN is the old school technology for remote access, while ZTNA is all the
vendors talk about. We will review the strengths and weaknesses of each. You may be
surprised which one comes out on top.
