ISSA-CHICAGO's 15th Annual SECURE XV Cruise
ISSA-CHICAGO'S 15TH ANNUAL
SECURE XV CRUISE
JUNE 15, 2023
Sponsorship & Volunteer Opportunities available
email: communications@issa-chicago.org
Educational & Networking Sunset Security Cruise
Aboard the Odyssey at Navy Pier
Early Bird Ends May 28th! SAVE $50! Register today!
WALKUP REGISTRATION - MEMBER $175 & NON-MEMBERS $225 - PLAN AHEAD REGISTER NOW!
SECURE XV SPEAKERS
SPEAKER #1 – Fran Malloy, Cybersecurity Technical Lead, IBM
Title: Breach Use Case
Description: Hear about a candid firsthand experience of managing a highly public breach. Fran will share how he led this retail organization through their breach, response, and legal proceedings from discovery, through forensics investigations, announcement and class action lawsuit. You will hear lessons learned and a few key actions you can implement to equip yourself with the foresight and confidence needed during a breach.
Bio: Fran Malloy is a Principal Security Technical Leader in the IBM Security division. Fran comes from a large outdoor apparel retailer where he served as the Director of IT Operations, Support and Risk Management. In that role, he was responsible for security, endpoints, service desk, change/problem management, and operations. His security responsibilities included all audits, security policies, architecture and operations (SIEM monitoring, vendor reviews, web security testing, and user provisioning). He has held several positions, including directing teams in network, storage and server engineering, database and applications. Previously, Fran worked for IBM in the marketing and chip manufacturing divisions and National Steel Corporation in the engineering division. Fran has an electrical engineering degree from the University of Notre Dame and an MBA in Finance from the University of Pittsburgh. In 2015, he obtained his CISSP certification.
SPEAKER #2 - Wolfgang Goerlich, Advisory CISO, Duo Security/Cisco and world-renowned cyber security authority. An IANS Faculty Member, More on Wolf is on his web site here: https://wgoerlich.com/
Title: Conducting a Pre-Mortem on the Next Zero Trust Breach
Description: Imagine it is 2028, five years into the organization's Zero Trust transformation. People like it, usability has improved. Defensibility is better, too, with a number of attacks having been stopped over the past couple years. But then, in 2028, a call comes in. There’s been a security breach. What happened!? Join this session for a pre-mortem on how breaches will look under a Zero Trust architecture.
Bio: Wolf is a cybersecurity strategist and an active part of the Michigan security community. He co-founded the OWASP Detroit chapter and organizes the annual Converge and BSides Detroit conferences. Wolfgang has held roles such as Vice President of Security Consulting, Security Officer and Vice President of Technology Services. Wolf’s past speaking engagements have included:
Podcasts: Down the Rabbit hole, We Hack Purple, The Application Security Podcast, Imposter Syndrome Network, IDentity Now, Hacker History Podcast, CyberWire Daily, SiliconANGLE TV, etc.
Conferences: RSA Conference, CypherCon, CircleCityCon, GrrCon, BlueRidgeCon, CodeMash, ConFoo, Source Boston, ISC(2)-Detroit, StrirTrek, Great Lakes Infragard, BSides of Cleveland, DFW, Caymans, Charleston, Detroit, etc.
SPEAKER #3 – Shafia Zubair, Director Supply Chain Cybersecurity Risk Mgmt. & WiCyS President
Title: Supply Chain Cybersecurity Risk Management - A Pragmatic Approach
Description: In a rapidly evolving technology landscape and regulatory environment there is no single standard that enumerates the requirements for cybersecurity of the complex supply chains. This presentation will cover the unique challenges of securing the highly interconnected third-party software and cyber-physical products and the growing list of supply chain cybersecurity regulatory requirements. Managing supply chain cybersecurity risks requires strong partnerships between product development teams and a comprehensive supplier management framework. Goal of this talk is to address the building blocks of a pragmatic Supply Chain Cybersecurity Risk Management (SCCRM) strategy to accelerate organizational cybersecurity risk management maturity.
Bio: Shafia is the Director, Supply Chain Cybersecurity Risk Management at Johnson Controls International (JCI). Prior to JCI, Shafia has held roles of Information Security Manager at Morningstar and Director of Network Services Product Management at UBS. She is the President of Women in Cybersecurity (WiCyS) Chicago Affiliate and volunteers as a coach/mentor for the FIRST robotics leagues. Shafia has a Master’s in Electrical Engineering from Texas A&M University and MBA in Management and Finance from Tulane University. She also holds industry certifications such as Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).
SPEAKER #4 - BRANDON REID, Field CTO, Mimecast
Title: State of Email Security
Description: For years, CISOs fought to get their boards to take cybersecurity more seriously. Mimecast’s 7th annual State of Email Security (SOES) 2023 report found that as cyber threats have multiplied, the business community has become increasingly sensitive to the danger and is demonstrating a greater willingness to confront it. Takeaways are:
Key findings from the State of Email Security 2023
How today's CISOs can capture their board's attention on cyber risk
Best practices to mitigate cyber risk with next-gen technology
BIO: Brandon Reid has been in the Information Technology field for 15 years. He has spent the last five years advising Mimecast’s largest customers on how to secure their email attack surface. His experience and expertise include email-borne threat detection and response, Awareness Training, Brand Protection, DMARC Compliance and API Integration threat detection and response, Awareness Training, Brand Protection, DMARC Compliance and API Integration.
Location
Odyssey at Navy Pier, 60611