San Francisco CISO Community
Executive Summit

As cyber threats become more sophisticated and pervasive, enterprises need to adopt an agile approach to network and security that promotes innovation and mitigates risk. AI/ML and zero trust are the key enablers of this transformation, offering visibility, control, and automation across users, workloads, IoT/OT devices, and business partners.

In this session, you will learn:

• How AI will be used to fight AI and how generative AI will contribute to increased numbers of ransomware attacks
• How the growth of zero trust segmentation will happen in parallel with the rise of firewall-free enterprises, and Zero Trust SD-WAN will begin to replace traditional SD-WAN
• How AI/ML add defensive and analytics capabilities that drive IT and business success

 In the past 12 months, 87% of F1000 businesses were affected by significant cyber incidents as a result of a third-party. And yet, most rely on ‘snapshot in time’ questionnaires. While necessary, snapshots are insufficient by themselves, and must be augmented with continuous monitoring in support of ongoing security operations. This requires a different approach, that includes external threat detection capabilities by using AI across Public Data.

Join this session to learn about:

• The Public Data opportunity: collect, process, alert across multiple languages / modalities
• Real-time external threat detection on a rapidly evolving threat landscape
• The most advanced AI techniques for automating the collection, processing, delivery, and initial analysis of millions of public data sources

Vendor selection, pre-partner due diligence and trusted implementation are merely the beginning of a healthy third-party management culture. With those pieces in place, the real work (like battling for constant visibility and enforcing your requirements) begins. You’ll need to prepare.  

Gather and discuss how CISOs have successfully:

• Vetted new and prospective third-parties
• Monitored their network of existing third-parties
• Upleveled and asserted their security requirements and expectations

Economic trends have tightened purse strings everywhere, leaving CISOs and security leaders to demonstrate ROI and defend their budgets. But ROI is notoriously tough to quantify when the primary return for security investment is reduction in risk. As a result, bridging the gap between security investments and actual business impact can be easier said than done, particularly if your cybersecurity spend doesn’t clearly map to organizational goals.

Join this session to discuss:

• Identifying the right metrics for quantifying security ROI and business impact        
• Positioning security as a business enabler, rather than a cost center
• Aligning security investments to organizational goals

As more and more organizations adopt a Zero Trust architecture (ZTA), many initiatives overlook the increased prevalence of API-based access to sensitive application functionality and data. As CISOs move forward in their ZTA journey, how can they extend these principles to their API strategy to ensure security from the network layer to the application layer?

Join this session to discuss:

• Breaking the kill chain by stopping infection vectors and protecting against lateral movement
• Shielding sensitive data and limiting how APIs interact with data
• Increasing real-time visibility across the business to mitigate threats

Connect with like-minded peers in a one-on-one setting through Evanta’s Peer-to-Peer Meetings. You will be matched with peers in your community based on your shared interests and priorities.

 Generative AI is being utilized by companies and employees alike–sometimes without permission. The normalization of this emerging technology has expanded the attack surface and left many security leaders feeling anxious and uncertain. Is generative AI worth the risk, and how should it be governed in an organization?

Join Elastic’s CISO, Mandy Andress, to explore:

• What to expect from the threat landscape as generative AI becomes increasingly normalized
• What adopting generative AI does to your attack surface, and if you should even allow it
• How to implement governance rules that your organization will follow

Identity Governance and Administration (IGA) has been a cornerstone of compliance programs for decades. Despite this history, the reality of IGA rarely matches the customers’ initial expectations and the needs of the business. Increasingly, customers are demanding that IGA tools not only “check the box” for auditors, but also drive forward Least Privilege to secure their organization in today’s landscape of cyber threats.

Join this interactive roundtable session to discuss:

• Explore current practices, tools, and effectiveness of IGA programs
• Evaluate the extent to which IGA goes beyond compliance to bolster security posture
• Identify the critical gaps that may limit the effectiveness of an IGA program

CISOs are now tasked with managing an expanded set of security teams. Now, often managing Development, Application Security and Data Science, the CISO still needs to empower their Security Operations teams to embrace new IT disciplines. 

Join your C-level peers for a private conversation on:

• Managing new security disciplines 
• Quickly and securely maturing your software supply chain 
• Doing it all with consideration to formalized development and delivery pipelines

Attackers are not breaking in – they are logging in. Exploiting weak passwords, phishing credentials, navigating privileged access, and session hijacking is a threat actor's easiest way to infiltrate your organization, often leading to compromising your resources and applications.

Join this session and learn how, when done right, identity can be:

• Your organization’s first line of defense
• The backbone of your security strategy
• The leverage you need in putting a stop to breaches

Data protection, confident compliance, enhanced stakeholder trust, and effective risk mitigation - all are possible when security and privacy executives are working in harmony. 

Listen as CPO Leslie Stevens and CISO David Tugwell, both of Agilent Technologies, break down how they: 

• Divide and conquer the often blended security-privacy workload 
• Adjust and redevelop their partnership as the scope of their roles demands 
• Regularly watch the benefits of their teamwork accumulate

Governing Body members host this dinner for attendees to close out the event with an evening of peer networking.