ISSA-LA Security Summit 2024

Cultivating a robust cybersecurity workforce requires a multifaceted approach with a diverse set of skills. Organizations can invest in hiring candidates from various verticals and markets to enhance their security programs.

Additionally, bringing in fostering a culture of knowledge sharing and collaboration can bridge skills gaps and ensure a resilient cybersecurity team.

• How can we create a culture of continuous learning and knowledge sharing within our cybersecurity team?
• What training and certification programs would be most beneficial in addressing specific skills gaps within our team?
• Are there mentorship opportunities or collaborative initiatives that can help empower existing talent and enhance our overall cybersecurity workforce?

In today's rapidly evolving cyber landscape, the gap between company boards and Chief Information Security Officers (CISOs) is more pronounced than ever. Boards focus on strategic growth, risk management, and financial performance, while CISOs prioritize safeguarding digital assets, ensuring compliance, and mitigating cybersecurity threats. These differing perspectives create communication challenges and misaligned priorities that can leave organizations vulnerable. This presentation explores the root causes of this disconnect, including differing risk appetites, communication styles, and objectives. It will offer actionable strategies to bridge the divide, foster mutual understanding, and align cybersecurity with overall business goals, ensuring both parties can work synergistically for the organization's success.

A critical analysis of key events and trends that have led to the current state, exploring how commercialization, mass surveillance and the rise of big data analytics have contributed to the erosion of digital privacy & security.

The once clear-cut world of cybersecurity is now a complex maze of data breaches and privacy regulation that has caused a surge in litigation and enforcement.
 
The culprit? Data and information.
 
The Economist declared that the world’s most valuable resource is not oil but data. Data can be used for marketing and advertising, medical care, banking and finance, hospitality, product development, and anywhere business intelligence and the delivery of products and services are needed.
 
However, as businesses develop ways to monetize this data, CISOs and leaders are under tremendous pressure to protect sensitive data from misuse and theft. What data is collected, stored and secured, used, and disposed of is currently under scrutiny by regulators, governments, and litigators.
 
This presentation will explore the alarming shift from the server room to the courtroom as we face the new adversaries of the digital age - regulators and litigators. We'll delve into the challenges of litigation response in DFIR, the intricacies of e-discovery, and the current regulatory landscape. We'll also enable you with the latest strategies and skills that CISOs must adopt to survive in the courtroom. Join us for a journey through the changing legal terrain for CISOs and leadership, where the threats moved from hackers in hoodies to those in suits and ties.

A case study providing an example of the kinds of analysis that goes into responding to a phishing email. This example includes very in-depth technical analysis of the email, its attachment, and the websites the victim would interact with, in order to show the kinds of digital forensics and online investigation skills employed by a SOC Analyst responding to a targeted phishing campaign.