Name: Attack Surface vs. Blast Radius
Start: 2022-09-16T21:50:00Z
End: 2022-09-16T21:50:13.000Z
Location: BrightTALK

2022 Automotive Supplier Cybersecurity Symposium: Afternoon Session

10:00 AM ET An Ounce of Prevention: Assessment & Threat Monitoring

In this session, Alastair Parr will highlight how interactive assessments and passive monitoring combine to provide a more proportionate, realistic, and risk-aware picture of third-party risk management. This session will also cover how to:
 - Identify the common passive monitoring insights supporting program analysis
 - Discuss the challenges of assessments requiring third-party participation
 - Outline how monitoring and assessment information can complement each other
 - Provide insights into how a program becomes continuous and proactive
 - Discuss the common outputs and risk management considerations based on the volume of results
 - Offer good practice guidance on KPI/KRI measurements for success

11:00 AM ET How the Human Factor Leaves You Vulnerable

As cyber attacks continue to escalate, it has become clear that existing efforts to train our workforces have been inadequate. Addressing security culture, risk analysis, and the associated controls continues to be on most Chief Information Security Officers (CISOs) top priority lists.

Join the roundtable discussion as they discuss how Human Risk Management (HRM) represents a revolution in how enterprises should identify, respond to, and report on human-initiated risk within their organization.

11:45 AM ET Closing Remarks: Why Security Culture Is Not Just for IT

Technology is becoming more intertwined with our daily lives, from mobile to connected home devices. And while the evolution of technology is moving at the speed of sound, cybercriminals are working just as hard to find ways to compromise technology and disrupt personal and business life. That’s why cyber security is not just for IT, It’s for everyone so we can create a safe and secure digital world for our organizations and ourselves.

2022 Automotive Supplier Cybersecurity Symposium: Mid-Morning Session

7:30 AM ET Welcome and Opening Remarks: Defense Against Radical Threats: Cyber Security Begins with You

Welcome to the 3rd Annual Cybersecurity Automotive Supplier Symposium. Cybersecurity attacks on our energy infrastructure, supply chain, and public transportation system crippled essential parts of our economy. Unfortunately, these events show no sign of slowing down, as hackers continue to take advantage of security weaknesses in companies, governments, and other organizations. The best way to defend ourselves against these dangerous cyber-attacks is to arm ourselves with information. Building strong relationships is also crucial to the long-term success of our industry.

7:40 AM ET Cyber Security Best Practices Trivia Game

Join us for an interactive live Kahoot trivia game to compete against other participants online or in-person to test your knowledge of key concepts and cyber security best practices. See how you rank on the leaderboard against other players.

8:00 AM ET CISO's Roundtable Breaches and Infiltration: What Keeps CISOs Up at Night?

Cyber Security is becoming a more prominent topic of discussion in the boardroom; and many Chief Information Security Officers (CISOs) continue to struggle with executive buy-in when it comes to privacy, data protection, and regulatory risk. Join the roundtable discussion to hear from our CISOs from Ford, GM, and Stellantis to understand a look into the most critical issues facing cyber security leaders.

9:00 AM ET Keynote Address: Tame the Threats by Building Resilience into Your Operations

Persistent threat actors coupled with hybrid work environments have shifted our collective risk posture. This session will share techniques on how to architect a trusted digital enterprise that can better weather the constant disruption.

2022 Automotive Supplier Cybersecurity Symposium: Morning Session

Computing is more pervasive and democratized than ever. Networks are always available, users are working from non-traditional locations, and more simple laptops or tablets need to access your network. How can you keep track of who and what is permitted on your network and what are they permitted to access? We know that working styles have changed dramatically. Legacy approaches to assuming that since the request is coming from within the firewall are outmoded – adversaries are everywhere. Working within a Zero Trust framework can help organizations make sure the right people and right things have access to what is necessary for their particular function.
 
This presentation will discuss the basics of Zero Trust and why it matters now in moving forward.

Zero Trust: A Look at the Basics

The convergence of IT/OT has brought to the forefront the challenges related to managing OT Network and Security assets, and the impact on operational resiliency by not having visibility/policies in place. As companies go through the digital transformation journey, it is critical to understand the landscape and impact of OT assets to drive strategies around asset management related to security life cycle maintenance. This presentation will center around the steps global companies are taking to address the challenges of OT Asset Management.

OT Security Asset Management

This presentation will explore precisely what the Internet of Things (IoT) has come to mean over the past ten years and why we love to use stuff vulnerable to cyber attacks.

Vulnerability of the Internet of Things (IoT)

Blockchain is a distributed, decentralized, public ledger. It maintains a permanent and tamper-proof record of transactional data as a decentralized database that is managed by computers belonging to a peer-to-peer (P2P) network. This presentation will cover blockchain’s key features such as Cryptography, Decentralization, Immutability & Transparency to ensure secured implementation of blockchain solutions.

Secured Blockchain Solutions

Join Stellantis cyber leaders as they discuss password philosophy and how to prevent password attacks. The best way to defend ourselves against these dangerous cyber-attacks is to arm ourselves with information.

Password Philosophy and Preventing Password Attacks

Despite impressive innovations in secure technologies and tools, the moment an employee interacts with them, the risk to an organization increases. Therefore, mitigating the cyber risks that human behavior presents to organizations continues to challenge security experts and leave businesses vulnerable. We cannot simply design and develop our way toward a silver bullet technical solution. Instead, we must focus on human behavior and increase investments in raising awareness and security training programs that demonstrate how employees can employ secure cyber practices. This transformation requires a cultural shift, one that leverages the expertise and resources of all stakeholders (public, private, civil society, etc). This presentation will outline how through cross-sector collaboration, strategic engagement, and robust investment in education, the security industry can begin to turn cybersecurity’s weakest link into its most valuable asset.

Human Cyber Risk Mitigation

With the explosion of data and digital technologies, AI is transforming the way organizations process data, make decisions, and execute actions – across the business. Expanding technology footprints, complex, interconnected ecosystems, and evolving workforce are all increasing complexities within the world of cyber. By interlocking AI technology with cyber solutions, organizations can unlock untapped potential of their security capabilities. This presentation will discuss how deep learning and neural networks are helping organizations be more resilient by enabling faster and more efficient detection of cyber-attacks.

Unlocking the potential of Cyber through Artificial Intelligence

You know you need to secure your systems and data, but where to begin, and why must it be such a high priority? This presentation will introduce the basic steps organizations need to take and give stakeholders the information they need to justify the effort and expense required.

Cyber Security 101: Know and Secure Your Environment

We’re expected to work from anywhere from any device and there are more data and applications on-premises and in the cloud built for collaboration, connected through a myriad of APIs, and with unique configuration stacks that the attack surface will only grow. Organizations must manage the tension between security and productivity. With an “assume breach” mentality, organizations must turn to the concept of measuring and reducing the “blast radius” by ensuring zero trust and useful monitoring of not just the networks, but to the target of cyber attacks: data.

Attack Surface vs. Blast Radius

Cyber Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Attack Surface vs. Blast Radius

Presented by

About this talk

Ford Motor Company