SPVA Panel Session: What's Threatening PCI DSS?

The California Consumer Privacy Act goes into effect January 1, 2020. If you are a for-profit company operating in the state of California, you need to have the right processes in place to support CCPA privacy requirements – or face stiff penalties. Are you ready?

Attend this CPE accredited webinar to understand what is required by the CCPA, what you need to do now to prepare, how it relates to the rest of your compliance program, and what other privacy laws are on the horizon.

You’ll learn:

- What types of companies are affected by CCPA
- How CCPA compares to GDPR
- How technology can help you comply with privacy laws

What's new in data privacy and security? Discover how the compliance landscape is changing in 2020 and what organizations are doing - or should be doing - to prepare.

Join this panel of experts for an interactive Q&A session to learn more about what's coming up on the horizon in 2020 regarding data privacy and security, and the steps you can take today.

Viewers will learn more about:
- Data regulations and deadline dates to be aware of
- Privacy in the cloud
- How to build trust through privacy
- Recommendations for 2020
- The CCPA checklist

Speakers:
- Dr. Christopher Pierson, CEO & Founder, BLACKCLOAK
- Shahrokh Shahidzadeh, CEO, Acceptto
- Michelle Drolet, CEO, Towerwall

This Q&A panel is part of National Cyber Security Awareness Month.
#CyberAware #BeCyberSmart

With identity theft and account takeover on the rise, it’s increasingly difficult for businesses to trust that someone is who they claim to be online.

Join this exclusive interactive 1-2-1 interview where Robert Prigge, President, Jumio will share the latest identity verification and authentication trends and how you can leverage the power of biometrics, AI and the latest technologies to quickly verify the digital identities of new customers and existing users. Some questions to be tackled;

What types of cybersecurity threats are on the rise? Any surprising stats?

Is account takeover becoming a real threat in the financial services space?

How will eKYC evolve over the next few years?

How to balance the trade-off between customer experience and fraud detection?

Are the new breed of challenger banks a threat to high street banks? If so why?

Register today and do not miss out on the opportunity to have your questions answered in this interactive question and answer session.

The Fifth Money Laundering Directive (5AMLD) - Can AML and identity verification processes be streamlined to deliver a better user experience?

This session will give you insights into the digital identity, authentication and verification landscape. You will also learn how you can increase the return on investment in your digital transformation by reducing online application abandonment rates and improving conversion rates.

Robert Prigge, President, Jumio & Tony Fish, Founder, AMF Ventures

Cyber-attacks have cost the financial services industry more than any other sector, especially due to the extremely sensitive data and assets that they are gatekeeping.

Join this panel to learn:
-What is the current state of the cybersecurity in financial services?
-Why is cybersecurity more of a business risk than a technology issue?
-Best practices for detecting and preventing threats

Robert Prigge, President, Jumio
Tony Fish, Founder, AMF Ventures
Steven Holt, Practice Lead - EMEIA FS Cybersecurity, EY
Cheri McGuire, Group Chief Information Security Officer, Standard Chartered Bank

The interplay of Humans and Machines in AI-based Automation

Machine learning systems are now routinely performing complex tasks at unparalleled levels of performance across a wide range of applications. However, mission-critical applications such as those in financial services have a minimum tolerance for errors and error correction. Resultantly, the design of machine learning-based systems for such applications requires unprecedented levels of oversight and adaptability.

An optimal system has the right level of interplay between humans and machines. Onfido employs a large number of machine learning models to deliver scalable, secure and frictionless identity verification for their clients, whilst giving clients accurate data they need to remain KYC compliant—so ensuring their models deliver real-world results is business-critical. In this interview we talk with Mohan Mahadevan, VP of Research at Onfido, to learn about how the constraints on these applications, the tradeoffs in an optimal system, and what the future looks like.

Mohan Mahadevan, VP of Research, Onfido
Tony Fish, Founder, AMF Ventures


About Mohan

Mohan is an expert in computer vision, machine learning, AI, data and model interpretability, previously leading research efforts at Amazon as Head of Computer Vision and Machine Learning for Robotic Applications. He has over 15 patents in areas spanning optical architectures, algorithms, system design, automation, robotics and packaging technologies. As Onfido’s VP of Research he leads Onfido’s team of specialist machine learning engineers and is focused on ensuring their systems work both in the lab and the real world.

The California Consumer Privacy Act (CCPA) is going into effect on January 1, 2020, making it America’s first-ever state data privacy law. It is also the most far-reaching privacy regulation in the U.S. to date.

Join this panel of experts for an interactive Q&A session to learn more about what businesses need to do to prepare for CCPA. Attendees will also learn about the CCPA checklist, as well as dive into:
- GDPR vs. CCPA
- Which organizations need to plan for CCPA compliance
- What to do to avoid the risk of fines
- How to develop a strategy and start implementing tools to achieve compliance
- More privacy legislation on the horizon

Speakers:
- Guy Cohen, Strategy and Policy Lead, Privitar
- Lisa Hawke, VP Security and Compliance, Everlaw
- Joanne Furtsch, Director, Deputy Data Governance Officer, TrustArc
- Laura Koulet, Vice President, Head of Legal & Privacy, Tapad

Consumer demand is driving the corporate IT environment. Business demands for IT are changing rapidly — so too are the demands on IAM — resulting in the requirement to adopt emerging technologies (e.g., mobile and cloud computing, data loss prevention, and social media) earlier and more quickly. Scalability is critical for any business that wants to catalyze short- and long-term success. A flexible workflow for identity verification can help organizations of all sizes with limited time, resources, and funding to focus their efforts on initiatives that support positive growth. While your business might be conducting background checks today, it could have different verification needs in the future to ease onboarding friction, prevent data breaches, and demonstrate regulatory compliance.

It’s important to begin laying the groundwork now for a more sophisticated and intricate verification program so you can be proactive, not reactive, but what does a scalability strategy look like? In this CPE accredited panel webinar our experts will address how to create identity and credential verification workflows that can scale with your organization as it grows, including how to:

- Gain a better understanding of the digital identity landscape,
- Ensure accuracy of both data sources and verification records,
- Centralize verification of multiple data sources into a unified platform,
- Evaluate new developments like biometrics, AI, and blockchain, and how they can impact identity and data management,
- Save money in the long-term by laying the groundwork for adaptable online verification workflows,
- Adapt and respond to new regulations.

Join us for this webinar that will demonstrate how your organization can adopt best practices for vulnerability management, threat intelligence and cyber risk management that previously had been beyond your means. For various reasons - tight budgets, lack of skills or resources, or a focus on other priorities - most companies perform vulnerability, threat and risk management in a very tactical way. Join Troy Vennon, Director of Security Innovation at the Columbus Collaboratory, for this session outlining how the combination of cloud-based vulnerability management, threat analysis and risk assessment, bundled with expert reporting and guidance for your specific IT environment, will cost-effectively transform your security operations from the tactical to the strategic.

Join us for this webinar presenting the benefits of networking with your industry peers to share intelligence about threats and vulnerabilities. In today's environment where the threats seem to intensify, it's critical to know who to trust. During this session, Troy Vennon, Director of Security Innovation at the Columbus Collaboratory, will outline the benefits of an Information Sharing and Analysis Organization (ISAO), explain how you can benefit from joining an ISAO even if you're already part of an ISAC, and provide an example of how collaboration around cyber threat data can enable your organization to efficiently identify and neutralize the most prolific and potentially harmful threats out there.

The PCI Dream Team is back for another interactive Q&A session.

With hundreds of different requirements, the various Payment Card Industry (PCI) standards can be overwhelming. While the PCI Security Standards Council has provided lots of answers, the devil is often in the details.

Our panelists are some of the top PCI QSA’s in the country, with decades of combined PCI and card processing experiences. They’ve seen it all: the good, bad and ugly; and lived to tell the tale.

Join Ben Rothke, David Mundhenk, Arthur Cooper, and Jeff Hall for an interactive Q&A session, and get answers to your most vexing PCI questions. No PCI question is out of bounds.

Speakers:
- Ben Rothke, Senior Information Security Specialist at Tapad
- David Mundhenk, Senior Security Consultant at Herjavec Group
- Jeff Hall, Senior Consultant with Online Business Systems
- Arthur Cooper "Coop", Senior Security Consultant at NuArx

Organizations are evolving beyond the traditional, reactive approach to privacy and data security to thinking proactively. Are we closer to a Privacy-and-Security-by-Design reality?

Join this panel of experts to get the answer to all of your privacy, security and compliance questions. Viewers can learn more about:
- Effects of GDPR: One year later
- How businesses are preparing for CCPA
- Best practices for achieving and maintaining compliance
- How to bake privacy and security into your processes
- What to expect in the next 12 months

Speakers:
Joseph Carson, Chief Security Scientist, Thycotic (Moderator)
Debra Farber, Independent Privacy & Security Advisor
Nathan Wenzler, Senior Director, Cybersecurity, Moss Adams
James Chappell, Co-Founder & Chief Innovation Officer, Digital Shadows

The current state of vendor risk management (VRM) is bleak. More than half of all information security breaches are caused by third-party vendors, and according to Deloitte 83% of today’s business leaders lack confidence in third party VRM processes. Given the growing complexities in accurately collecting and screening third-party data and the need for deeper due diligence, automation is key to a successful risk program. However, many corporations haven’t adopted automation in their third-party risk management programs.

The lack of automation adoption can be traced to a few core reasons. Disparate systems, out-of-date data, and inconsistent policies can all stifle a company’s ability to modernize their third-party risk management program, and companies often suffer from more than one of these. When applied effectively, automation can not only help prevent these roadblocks; it can also drive the efficiencies procurement and compliance leaders are looking for. Join this CPE accredited panel webinar as our expert panel address some key steps to automating third-party risk management, including how to:

-Manage an up-to-date vendor master to create one source of truth across the entire corporation,
-Leverage automation and machine learning to standardize data governance,
-Drive efficiencies and reduces costs, while ensuring the highest accuracy in your third-party risk management program.