CISO Sydney schedule

In this 10-minute networking session, the goal is to connect with three new people. Let the questions on the screen spark your conversation. Enjoy the opportunity to expand your network!

• Discuss the rapidly evolving landscape of cybersecurity threats and their profound impact on business success.
• Highlight the transformational power of aligning technology risk with your core business strategy, creating a strong defence against emerging threats.
• Explore the complexities of managing enterprise-scale cybersecurity risks, including third-party and supply chain vulnerabilities.
• Emphasise the importance of building and nurturing a resilient workforce, equipped to tackle the evolving challenges of the digital age.

This session will guide you through the stages of the DevSecOps transformation journey, illustrating the benefits of autonomous DevSecOps in enhancing efficiency, security, and scalability while addressing the challenges that come with it. Discover how to navigate the path towards a self-sustaining security framework that is ready for the future.

Creating our own cybersecurity unicorns is possible when we shift the lens we see them through. By taking transferable skills, valuable professional background, and the right attitude into account, we can bridge the cybersecurity talent gap. In this session, we will explore how to encourage non-cybersecurity executives to break into cyber roles with confidence. 

• Strategies to protect data from poisoning and manipulation, disclosure of sensitive information, and bias and discrimination issues
• Mitigating adversarial prompts and risks for generative AI systems
• Preventing systemic vulnerabilities such as DoS attacks and overreliance and misuse of AI

• Why AD is such a target
• How you can increase operational resilience of this mission critical identity system by
• Mitigating attacks against your AD
• Significantly reducing its recovery time objective (RTO)

• An overview of new security regulations and standards affecting Australian businesses
• Complying with SOCI, SoNS, CPS 234, CPG 234, CPG 235, and other standards such as ISO27001, AESCSF, NIST and Essential 8
• Insights into the current proposed legislation NIS 2.0 and DORA, which have been said to be the GDPR for Information Security
• Strategies to balance the benefits against the cost-impact of compliance based on the enterprise’s risk appetite 

Panellists:

Nathan Lewis, Head of Cyber, Technology and Data Risk, Newcastle Permanent

Gaurav Vikash, Head of Security and Risk, APAC, Axon Enterprise

Sebastian Tymoszuk, CISO, Autosports Group

Umair Zia, Head of Cyber Security, Sydney Local Health District

Credentials, API tokens, certificates, keys. All these secrets are growing at a rapid rate as we work towards building least privilege patterns. This proliferation introduces significant challenges for visibility, lifecycle, and user experience, and poses significant risk when they fall into the hands of bad actors. During this session, we will look at the necessary shifts that you need to make to keep your secrets safe.

• Understanding the risks and implications of AI and how it will change our threat landscape
• Influencing and guiding the business to make strategic investment decisions
• How cyber leaders are successfully governing the use of AI
• How can AI be used in cyber defence?

In recent years, with the increasing activity and exploitation of organisations; governments have started to see the importance of Information Security.

To address this governments have been implementing legislation and regulations around Information Security, to ensure that critical systems and infrastructure are protected.

Europe last year released their versions which will come into effect in 2024 and 2025, that looks to address Information Security in Europe.

These new directives and regulations could have implications and impacts, for any business working with EU organisations.

Panellists:

Jihad Zein, Global Head of GRC, Technology, Toll Group

Matthew Duckworth, Director, IT Risk and Security, MetLife Australia

Leron Zinatullin, CISO, Linkly 

• Developing risk assessment strategies with the emerging risks and threat landscape in mind
• Conducting gap analysis to identify where resilience can be improved
• Analysing metrics for visibility of the effectiveness of your cyber programs
• Selecting the best maturity model for your organisation and creating an advancement plan

• Strategies to increase awareness of AI risks to senior management and the board to support informed business decisions
• How can cyber leaders collaborate with regulatory bodies to create effective AI security standards and guidelines
• Overview of the ISO/IEC CD 27090 guidance and ASD’s Guidelines for Secure AI System Development – where to from here

Panellists:

Nathan Lewis, Head of Cyber, Technology and Data Risk, Newcastle Permanent

Pearse Courtney, Cyber Project Manager, AEMO

David Soldani, SVP Next Generation Advanced Research, Rakuten Mobile 

During this session, we’ll explore how compliance management platform can help you take the manual work out of your security and compliance process and replaces it with continuous automation

• Integrate offensive security teams into a proactive risk management strategy to prioritise and address critical vulnerabilities.
• Foster a culture of continuous improvement within teams to stay agile and responsive to evolving threats.
• Align offensive security efforts with organisational risk reduction goals, ensuring they support broader security objectives.
• Apply offensive security skills beyond traditional penetration testing to identify emerging threats and reinforce the organisation's overall risk posture

In today's digital landscape, managing your attack surface and prioritizing vulnerabilities are crucial for robust cybersecurity. Join us for a 20-minute session where we'll explore effective strategies to identify, assess, and mitigate potential threats. Learn how to streamline your vulnerability management process and allocate resources efficiently to safeguard your organization against cyberattacks.

• Effective ways to influence boards and senior management on how security is aligned with the business goals
• Engaging the Steering Committee: How to get cross-functional representatives to be security cheerleaders
• The power of joining forces to assess risks, implement security controls, and ensure tech infrastructure is compliant to regulations

Moderator:

Madhuri Nandi, Head of Security, Till Payments

Panellists:

Vasyl Nair, Group CEO, Mine Super

Christopher Johnson, Group Head of Technology, Charter Hall

Saleshni Sharma, Regional CISO, Berkley

Nick Stanton, Head of Technology Risk, Tyro

As we explore leveraging threat intelligence, machine learning, and AI for proactive protection, learn how consolidating vendors and platforms simplifies operations while enhancing visibility and efficiency.

Join us to unlock new strategies for bolstering cybersecurity resilience and how you can revolutionise your cybersecurity strategy.

• Getting buy-in from the board and steering committee
• Deciding on the most suitable techniques to implement a successful program
• How to ensure internal stakeholders understand the objectives and needs of security controls
• Defining metrics and adopting assurance frameworks
• Uplifting your program’s maturity by focusing on continuous improvement

• What are the key challenges organisations face when implementing identity access management?
• What are your recommendations to navigate these challenges?
• What does a successful approach look like?
• How can IAM help safeguard organisations upgrading business operations, modernising aging infrastructure, and protecting network perimeters, and scaling up?

Effective ways to educate – engaging diverse people with cybersecurity and online safety

People centric – adopting an in-person tone and using real-life examples of how a cyberattack can impact everyone’s lives

Relevant – what’s in it for them and why they should care

Providing resources – setting clear expectations and providing resources

 

Moderator:

Lisa Dethridge, Research Fellow, RMIT University

Panellists:

Hani Arab, CIO, Seymour Whyte

River Nygryn, CISO, HammondCare

Naveen Sharma, Head of Information Security, Superloop

Cyber-attacks are getting more regular and sophisticated, often they go undetected. Improving security posture is an ever-growing priority; however, as organizations continue to struggle with remediation, this gives adversaries more opportunities to exploit not just vulnerabilities but also identity-related issues and misconfigurations. Join this session to learn how organizations mature their security posture by looking at their environment through the lens of an attacker, giving them a common language for discussing, and prioritising measurable risk reduction.

• Importance of human factor to cyber security and why most cyber awareness efforts fail
• Tailoring security awareness programs to address cyber risks and business priorities
• Strategies to influence behaviour and create a cyber-safe culture

Panellists:

Oliver Sebastian, Director, Information Technology, Landcom

Bradley Busch, Non-Executive Director, Shire Christian School

Sophia Barbour, Cyber Awareness and Intelligence Lead, Commonwealth Superannuation Corporation

Due to the constant evolution of our internal networks and in the face of an unforgiving threat landscape, Security Operations teams are constantly looking at new ways to enhance their visibility to better anticipate cyber threats. This session will explore the importance of how clarity of goals, visibility of your attack surface, and cyber threat intelligence can be helpful in better focusing your cyber security defences.

Cybersecurity can seem like an unrewarding career. Preventing breaches depends on a variety of factors, including the company's risk-appetite, senior management buy-in and adequate budgets. If the company is not hacked, whether you have a robust and mature cyber strategy or just luck, you're just doing your job. But if it is does, the cyber team often gets the blame. It's essential for CISOs to ensure their teams are motivated and engaged. During this interview, we will review KPIs and discuss successful ways to ensure the wellbeing of the team and prevent burnout.

Interviewer:

Chirag Joshi, Founder & CISO, 7 Rules Cyber

Interviewee:

Jan Zeilinga, CISO, James Cook University

• Uncover what lies ahead - a brief guide outlining key initiatives, strategic imperatives and the challenges that CISOs must navigate
• Deepen your understanding of the vision of the 2023-2030 Australian Cyber Security Strategy to empower you with actionable strategies to craft a path to success
• Learn about the key challenges and success factors identified for the strategy, including the need for long-term commitment, flexibility, and alignment with global allies

Cloud and AI are empowering organisations to meet their business goals quickly and effectively, however, also presents a tectonic shift for cyber security teams. Today, CISO’s are forced to enable the adoption of Cloud and AI use cases at the speed of dev, requiring new operating models to continue to protect their environments and eliminate critical risks. Join this session to learn how you can enable your team to build faster in the cloud, ensuring security, Dev and DevOps can work together in a self-service model built for the scale and speed of your cloud and AI developments.

• Exploring the importance of security architecture
• Several misconceptions about what security architects do
• 3 important jobs of security architect and how they differ
• Making it easy and fast for business

Designing a cybersecurity operating model with people, processes, and technology at the core of your strategy is key. How to factor in the business strategy into the operating model, and how to take your business requirements as part of that process. During this session, we’ll explore strategies to:

• Build a well-developed program that supports and is tailored to the organisation’s needs
• Create a well-designed program with cooperation and support from stakeholders and management
• Develop effective metrics and KPIs for program design, implementation, and management performance assessment

Secrets such as APIs, tokens, valid and stolen credentials act as keys to unlock protected resources. They are the leading threat vector for data exposures and breaches of enterprise SaaS applications. In this session, learn the anatomy of a SaaS breach and best practices to build a viable SaaS threat model.

Dive into a comprehensive exploration of strategic security planning amid the dynamic landscape of cyber threats. This session will discuss a useful framework of to-do’s for formulating a robust and future-oriented security strategies. By asking the right questions, we'll uncover critical insights and approaches that help your organisation anticipate and mitigate risk, thereby securing a more resilient future in an era of growing uncertainty.

• Identifying and mitigating API bugs and vulnerabilities
• The importance of doing API threat modelling early in the development process
• Addressing API-related compliance concerns and keeping up with changing security requirements
• Can AI improve Zero Trust of APIs?

• How security is changing and how to ideally address it
• The shift-left reality and how the solution didn't work
• The cost implications of a wrong security workflow
• How to make DevSecOps work, strategically 

Moderator:

Pablo Reys, Associate Director, DevSecOps National & Cyber Security, Optus

Panellists:

Chris Grisdale, Head of Information Security, hipages Group

Jess Thomas, Assistant Director Cyber Security Outreach, National Office of Cyber Security, Department of Home Affairs

Sam Mackay, Chief Information Security Officer, Department of Customer Service

• How to leverage GRC as a strategic framework to drive continuous improvement in your cyber security capabilities and overall resilience
• Successful practices to advanced techniques for aligning GRC initiatives with your business objectives and key risk indicators to maximise the impact of your cyber investments
• Sharing practical approaches to navigating the challenges of implementing cyber into GRC strategy

Moderator:

Lisa Dethridge, Research Fellow, RMIT University

Panellists:

Madhuri Nandi, Head of Security, Till Payments

Siddharth Rajanna, Head of Cyber Security, Bingo Industries

River Nygryn, CISO, HammondCare

Peter Brooks, Head of IT, Billbergia

• What are the key challenges organisations face when implementing identity access management?
• What are your recommendations to navigate these challenges?
• What does a successful approach look like
• How can IAM help safeguard organisations upgrading business operations, modernising aging infrastructure, and protecting network perimeters, and scaling up?

Moderator:

Paul dos Santos, Group Head of Information Security, SG Fleet AU

Panellists:

Sebastian Tymoszuk, CISO, Autosports Group

Ilya Polyakov, Head of Identity Management, NSW Department of Planning, housing and Infrastructure

Enrico Conte, CISO, IMB Bank

• Importance of having a team who’s well-prepared and well-rehearsed during incidents to go through crisis
• Reactive Incident response vs Proactive Incident response – how well organisation manage that and how well those tasks are defined and segregated among defensive teams
• How much can we trust AI in the incident response capability? What place do AI and automation have in incident response – is it possible to embed it to a place where you can trust them?
• Taking the communication component seriously – strategies to prepare and prevent reputational losses because of cyber incidents

Moderator:

Edwin Kwan, Head of Cyber Security 

Panellists:

Siddharth Rajanna, Head of Cyber Security, Bingo Industries

Jayden Le, Global Head of IT & Security, Zoomo

Simona Dimovski, Technology & Security Expert

In the ever-evolving landscape of cybersecurity, the path to leadership is often as unpredictable as the threats we face. In this presentation, we’ll explore successful ways to becoming an effective leader in a critical domain. Attendees will gain a deeper understanding of the strategic and operational adjustments required, the importance of rapid learning and adaptation, and the value of leveraging diverse experiences to build a resilient security posture.

Ransomware strategies because of the growing threat and potentially devastating consequences of attacks. With ransomware incidents increasing in frequency and cost, businesses aim to protect their valuable data, maintain operational continuity, avoid financial losses, and safeguard their reputation by implementing comprehensive prevention, detection, and response measures

Join us as we'll dissect a real-life cybersecurity breach, revealing the vulnerabilities exploited and the cascading consequences. We'll explore the attacker's methods, the organisation's response, and the aftermath. Most importantly, we'll extract crucial lessons to fortify our defenses and create a more resilient cybersecurity posture for the future.