ISSA-LA 2024 CISO Forum

Sign in to get your badge

Navigating the world of generative artificial intelligence, understanding the intersection of AI, human risk, and cybersecurity has never been more critical. This presentation offers a non-technical overview tailored for decision-makers, cybersecurity professionals and those new to  AI.
 
Topics:

• Introductions
• Demystifying Generative Artificial Intelligence
• Prompt Engineering
• Top AI User Risks
• AI Policy and Regulations
• Conclusion / Questions

Choose One of Four Discussion Groups

Building Information Security Program in Age of GenAI
The advent of Generative AI has ushered in a new era of technological advancement, revolutionizing industries and reshaping our digital landscape. However, this transformative power also presents unprecedented challenges for information security. As AI-driven threats become increasingly sophisticated, organizations must adapt their security strategies to safeguard their valuable assets. This round table will delve into the critical aspects of building a robust information security program in the age of GenAI, exploring the unique risks, best practices, and emerging technologies that organizations.

CrowdStrike and the Worldwide Outage
CrowdStrike’s errant update caused outages on an estimated 8.5 million Windows computers, and cost companies an estimated $5.4 billion. If you are a current customer, are you planning to continue using it? If not a current customer, would you still consider it?

Transparency in Cybersecurity and Leadership
The ‘Transparency’ Myth doesn’t need to apply to Cybersecurity, or does it? Are transparent cybersecurity operations and leadership decisions a security risk? This roundtable will delve into the importance, challenges, and best practices of transparency in Cybersecurity Operations and Leadership. We will explore whether transparency builds trust, increases regulatory compliance, and how it can help Incident Response. We will also discuss transparency risks concerning data protection, reputational damage, and how transparency efforts can turn into a resource pit.

In today's digital age, organizations face unprecedented cyber threats that necessitate robust cybersecurity measures. A critical component of any cybersecurity strategy is the assessment of program maturity, which serves as a compass guiding organizations towards resilience and preparedness. This presentation explores the essential aspects of cybersecurity program maturity assessment, answering the questions of why, what, how, and when.

The presentation begins by elucidating the fundamental question of why cybersecurity program maturity assessment is crucial in today's landscape. It underscores the imperative for organizations to understand their current cybersecurity posture, identify vulnerabilities, and proactively mitigate risks to safeguard sensitive data and maintain operational continuity.

Moving on to the what, the presentation delves into the key components and objectives of cybersecurity program maturity assessment. It highlights the multifaceted nature of cybersecurity maturity, encompassing governance, risk management, compliance, incident response, and technological capabilities. By comprehensively evaluating these facets, organizations gain insights into strengths, weaknesses, and areas for improvement.

Transitioning to the how, the presentation outlines practical methodologies and frameworks for conducting cybersecurity program maturity assessments. It discusses the importance of leveraging industry standards such as FFIEC CAT and CRI Profile. Emphasis is placed on the need for a systematic and holistic assessment process involving stakeholder engagement, data collection, analysis, and reporting.

Finally, addressing the question of when, the presentation emphasizes the importance of timing and frequency in cybersecurity program maturity assessment. It advocates for regular assessments to adapt to evolving threats, organizational changes, and technological advancements. By integrating assessments into the organizational cybersecurity lifecycle, organizations can ensure continuous improvement and resilience against emerging cyber risks.

In conclusion, the presentation encapsulates the journey of cybersecurity program maturity assessment, from understanding the why to implementing the how and determining the when. It underscores the transformative role of assessments in enhancing cybersecurity resilience, fostering a proactive security culture, and enabling organizations to stay ahead in an ever-changing threat landscape.

Join this distinguished group of Cybersecurity Leaders as they share their knowledge and experiences gained over several years working in our ever-changing field.

4:25pm PDT

4:45pm PDT

5:35pm PDT

6:20pm PDT

6:30pm PDT