SecureWorld St. Louis 2019

Come to the Registration desk in the lobby to check-in and get your badge. SecureWorld staff will be available throughout the day if you have any questions.

Alpine Security CEO, Christian Espinosa, a bronze sponsor of SecureWorld Chicago, hosts SecureWorld Plus training session on Cyber Defense Ineffectiveness and What We Can Do About It. Attendees will be exposed to data gathered from real-world penetration tests, audits, and incident responses, bringing attention to the current state of cyber defense. Attendees will become familiar with the top 5 trending cybersecurity misconceptions and learn actionable solutions and tools to approach cyber defense and to create a more secure world. Upon completion of this 6-hour training session, attendees will be eligible to receive 12 CPE’s.

“Ransomware & cyber extortion are effective because organizations blindly implement controls without a risk-based strategy, have poor cybersecurity awareness, and have difficulty determining the validity of ‘incriminating data’ used for cyber extortion.” -Christian Espinosa

Throughout this training session, Christian Espinosa will candidly discuss the following key elements:

• Despite all the Next-Gen tools, latest products, compliance requirements, etc., breaches still happen daily. Why is this, and what can we do about it?
• Data gathered from real-world penetration tests, audits, and incident responses to focus on the current state of cyber defense.
• Motivations, breaches, and primary tactics used by attackers.
• Opportunities and solutions to address common issues such as how more organizations focus on the wrong items, how egos get in the way, how compliance doesn’t really help, how risk is rarely assessed, and how cloud migrations can actually make security worse.

During this training session, you can expect to participate in group activities and discussions. Be open to new ideas and approaches. We can learn from each other.

Meet the Trainer:
Christian Espinosa is Alpine Security’s CEO/Founder and a Cybersecurity Professor at Maryville University. He holds over 25 certifications, including the CISSP, CCISO, and PMP. Christian is a US Air Force veteran with a BS in Engineering from the US Air Force Academy and MBA from Webster University. Christian holds multiple patents on cybersecurity attack and defense. Major recent projects include penetration testing and assessments of commercial aircraft, medical device penetration testing, and numerous incident response projects. When Christian isn’t protecting us from cybercriminals, he climbs mountains, travels the world, teaches outdoor wilderness survival, and competes in Ironman triathlons.

The University of Massachusetts has developed a 6 hour SecureWorld Plus training class that instructs attendees on the best practices for designing, building, and maintaining a Cybersecurity Program based on the NIST Cybersecurity Framework. Organizations who currently use the Framework or are planning to use the Framework for their cybersecurity program will benefit from this course.

This innovative education and training program includes the following key elements:

• An introduction to the key components of the NIST Cybersecurity Framework
• How to use the Framework to support business strategy, technology strategy, and cyber-risk strategy
• An approach for adopting the framework to build and sustain secure and resilient infrastructure, secure and resilient networks, secure and resilient applications
• How to use the framework to protect critical information assets
• A Controls Factory Model that organizations use to create an Engineering Program, a Technical Program and a and Business / Management Program
• A methodology for developing a Cybersecurity Strategy, System Security Plan (SSP), Risk Assessment, Plan of Action and Milestones (POA&M) and Executive Report

The class will help individuals and organizations acquire knowledge, skills and abilities to:

• Develop a strategy to apply the NIST Cybersecurity Framework (NCSF) to their environment
• Create a comprehensive System Security Plan (SSP) based on the NIST Cybersecurity Framework
• Conduct a Risk Assessment to compare the current profile with the target profile and identify any gaps that need to be addressed
• Develop a Plan of Action and Milestones (POA&M) to mitigate the highest priority gaps
• Establish an Executive Report to measure and communicate current profile, target profile, POA&M and program plan / roles and responsibilities to remediate identified gaps
• Identify required workforce skills and develop career pathways for improving skills and experience

About the Instructor – Larry Wilson:

• Larry Wilson is the former CISO for UMass President’s Office from 2009 to 2017
• Prior to UMass, Larry developed and managed the Global Infrastructure Services (GIS) Security Program for State Street Corporation
• Larry has been teaching cybersecurity courses based on the NIST Cybersecurity Framework at SecureWorld events for the past 5 years
• Larry has conducted over 20 consulting engagements, helping organizations design and build cybersecurity programs based on the NIST Cybersecurity Framework

The program and its author have won the following industry awards:

• Security Magazine’s Most Influential People in Security, 2016
• SANS People Who Made a Difference in Cybersecurity Award, 2013
• Information Security Executive (ISE) North America Program Winner for Higher Education, 2013

This session will cover the special challenges of cybersecurity in Industrial Control Systems (ICS), the lack of available training, and how to find people to fill the void.

Smart cities harness digital technology and data to enable organizations to perform better, boost well-being and respond to local and global challenges—presenting a huge opportunity but risk as well. To become the world’s “smart nation,” a sustainable, pragmatic approach is necessary, ensuring the people, processes, and systems are secure. With predictions that three-quarters of the world’s 9 billion people will be city-dwellers by 2050, it’s vital we ensure cities provide a safe and pleasant environment that is sustainable and resilient to change.
Presentation Level:
GENERAL (InfoSec best practices, trends, solutions, etc.)

Every organization is concerned with third-party risk. No one wants to be the next Target breach. This session will examine the components of third-party risk management and give you some leading practices on how to develop a workable and sustainable process.

Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible! Booths have staff ready to answer your questions. Look for participating Dash For Prizes sponsors to be entered to win prizes.

Reboot with coffee and infused water while visiting exhibitors on the exhibitor floor.

This session is for our Advisory Council members only.

Interested in your local associations? Join (ISC)2 for their chapter meeting and guest presentation. This opportunity is open to all attendees.
Presentation:
Self-learning Artificial Intelligence, also known as Machine Learning (ML), is changing the world.  From skillfully optimizing store shelves to deftly influencing us to click on ads, ML is here to help.  35% of Amazon’s revenue is generated by its ML insightfully recommending products to you and me.  Come learn how intelligent machines make decisions, just like you or I do, but only faster and more accurately because it’s really good at math (!).

This presentation is about personal experiences over my year as an intern to an associate cybersecurity intelligence analyst. Going from a dev team, to a red team, and eventually blue team. Highlighting industry struggles as a female (first and only female of each of these teams) trying to get an entry level position and trying to close my own skill gap. Also highlighting personal struggles as well as technical struggles.

Washington University has been using Zeek (formerly called BRO) for five years now. We recently moved from using SPAN sessions monitoring just north/south traffic, to building a TAP network to monitor both north/south and east/west traffic. We will look at the tools and hardware necessary to build the TAP network and the Zeek cluster. We will also look at some of the data that Zeek produces right out of the box.

Throughout 2018 mainstream headlines highlighted cyber-attacks and security threats that included possible interference in the U.S. presidential election, worldwide malware outbreaks and the Equifax data breach. These and other high-profile events spurred greater cyber-defense investment by everyone from nation states and global corporations to individuals purchasing anti-malware solutions for personal devices. Yet even as investments increase so do threats, hacks and vulnerabilities. This session will help you understand these complex and challenging dynamics. Based on findings from Radware’s research and a global industry survey, the session will show real attack data and customer stories to paint a picture of where we are and what security professionals can do.

Join the session to learn more about:
• The threat landscape deep dive—the who, what and why of attacks
• Potential impact on your business, including associated costs of different cyber-attacks
• Critical attacks in the midst: DNS, IoT and risks lurking in the cloud
• Emerging threats and how to protect against them
• A look ahead – predictions and what to prepare for

To be successful, as an industry, we must strive to get ahead of the bad guys. Easy enough to say but how? By taking a look at the capabilities of the threats we see today we should be able to make some educated guesses on what threats of tomorrow will look like. We know the bad guys don’t follow the rules, take the path of least resistance, and don’t care who they hurt in the process. We need to start thinking like them so that we can figure out what their next step is instead of guessing/hoping.
Panelists:
Ron Winward, Radware
Daniel Conrad, One Identity
Matt Modica, BJC
Chris Schoen, Keysight/Ixia
Chris Sears, Securonix
Adam Bacia, SailPoint
Moderator: Montez Fitzpatrick, Navvis Healthcare

We’ve all heard the adage that it’s not if it happens but when you are inevitably breached… Do you have a plan? Even a framework to go off of? What do you include? Who do you include? How often should you be practicing this plan? Join our experts as they discuss incident response plans, who should be involved, best practices, and pitfalls.
Panelists:
Adam Gates, Malwarebytes
Vinny Troia, NightLion Security
David Harrier, EHI
Ronald Pipkins, Alert Logic
Moderator: Priscilla Jacks, U.S. Bank

Reboot with coffee and infused water while visiting exhibitors on the exhibitor floor.

The number of cyber startups is growing exponentially, with 4300+ cybersecurity companies worldwide including several private “unicorns”. With so many startups engaged in helping organizations achieve cybersecurity outcomes, how do organizational decision makers think about the risks involved in working with them? A panel of CXOs will share their expectations of and experiences with cybersecurity startups, including how they use solutions from startups to meet existing and emerging cybersecurity challenges.

Alpine Security CEO, Christian Espinosa, a bronze sponsor of SecureWorld Chicago, hosts SecureWorld Plus training session on Cyber Defense Ineffectiveness and What We Can Do About It. Attendees will be exposed to data gathered from real-world penetration tests, audits, and incident responses, bringing attention to the current state of cyber defense. Attendees will become familiar with the top 5 trending cybersecurity misconceptions and learn actionable solutions and tools to approach cyber defense and to create a more secure world. Upon completion of this 6-hour training session, attendees will be eligible to receive 12 CPE’s.

“Ransomware & cyber extortion are effective because organizations blindly implement controls without a risk-based strategy, have poor cybersecurity awareness, and have difficulty determining the validity of ‘incriminating data’ used for cyber extortion.” -Christian Espinosa

Throughout this training session, Christian Espinosa will candidly discuss the following key elements:

• Despite all the Next-Gen tools, latest products, compliance requirements, etc., breaches still happen daily. Why is this, and what can we do about it?
• Data gathered from real-world penetration tests, audits, and incident responses to focus on the current state of cyber defense.
• Motivations, breaches, and primary tactics used by attackers.
• Opportunities and solutions to address common issues such as how more organizations focus on the wrong items, how egos get in the way, how compliance doesn’t really help, how risk is rarely assessed, and how cloud migrations can actually make security worse.

During this training session, you can expect to participate in group activities and discussions. Be open to new ideas and approaches. We can learn from each other.

Meet the Trainer:
Christian Espinosa is Alpine Security’s CEO/Founder and a Cybersecurity Professor at Maryville University. He holds over 25 certifications, including the CISSP, CCISO, and PMP. Christian is a US Air Force veteran with a BS in Engineering from the US Air Force Academy and MBA from Webster University. Christian holds multiple patents on cybersecurity attack and defense. Major recent projects include penetration testing and assessments of commercial aircraft, medical device penetration testing, and numerous incident response projects. When Christian isn’t protecting us from cybercriminals, he climbs mountains, travels the world, teaches outdoor wilderness survival, and competes in Ironman triathlons.

The University of Massachusetts has developed a 6 hour SecureWorld Plus training class that instructs attendees on the best practices for designing, building, and maintaining a Cybersecurity Program based on the NIST Cybersecurity Framework. Organizations who currently use the Framework or are planning to use the Framework for their cybersecurity program will benefit from this course.

This innovative education and training program includes the following key elements:

• An introduction to the key components of the NIST Cybersecurity Framework
• How to use the Framework to support business strategy, technology strategy, and cyber-risk strategy
• An approach for adopting the framework to build and sustain secure and resilient infrastructure, secure and resilient networks, secure and resilient applications
• How to use the framework to protect critical information assets
• A Controls Factory Model that organizations use to create an Engineering Program, a Technical Program and a and Business / Management Program
• A methodology for developing a Cybersecurity Strategy, System Security Plan (SSP), Risk Assessment, Plan of Action and Milestones (POA&M) and Executive Report

The class will help individuals and organizations acquire knowledge, skills and abilities to:

• Develop a strategy to apply the NIST Cybersecurity Framework (NCSF) to their environment
• Create a comprehensive System Security Plan (SSP) based on the NIST Cybersecurity Framework
• Conduct a Risk Assessment to compare the current profile with the target profile and identify any gaps that need to be addressed
• Develop a Plan of Action and Milestones (POA&M) to mitigate the highest priority gaps
• Establish an Executive Report to measure and communicate current profile, target profile, POA&M and program plan / roles and responsibilities to remediate identified gaps
• Identify required workforce skills and develop career pathways for improving skills and experience

About the Instructor – Larry Wilson:

• Larry Wilson is the former CISO for UMass President’s Office from 2009 to 2017
• Prior to UMass, Larry developed and managed the Global Infrastructure Services (GIS) Security Program for State Street Corporation
• Larry has been teaching cybersecurity courses based on the NIST Cybersecurity Framework at SecureWorld events for the past 5 years
• Larry has conducted over 20 consulting engagements, helping organizations design and build cybersecurity programs based on the NIST Cybersecurity Framework

The program and its author have won the following industry awards:

• Security Magazine’s Most Influential People in Security, 2016
• SANS People Who Made a Difference in Cybersecurity Award, 2013
• Information Security Executive (ISE) North America Program Winner for Higher Education, 2013

Come to the Registration desk in the lobby to check-in and get your badge. SecureWorld staff will be available throughout the day if you have any questions.

Alpine Security CEO, Christian Espinosa, a bronze sponsor of SecureWorld Chicago, hosts SecureWorld Plus training session on Cyber Defense Ineffectiveness and What We Can Do About It. Attendees will be exposed to data gathered from real-world penetration tests, audits, and incident responses, bringing attention to the current state of cyber defense. Attendees will become familiar with the top 5 trending cybersecurity misconceptions and learn actionable solutions and tools to approach cyber defense and to create a more secure world. Upon completion of this 6-hour training session, attendees will be eligible to receive 12 CPE’s.

“Ransomware & cyber extortion are effective because organizations blindly implement controls without a risk-based strategy, have poor cybersecurity awareness, and have difficulty determining the validity of ‘incriminating data’ used for cyber extortion.” -Christian Espinosa

Throughout this training session, Christian Espinosa will candidly discuss the following key elements:

• Despite all the Next-Gen tools, latest products, compliance requirements, etc., breaches still happen daily. Why is this, and what can we do about it?
• Data gathered from real-world penetration tests, audits, and incident responses to focus on the current state of cyber defense.
• Motivations, breaches, and primary tactics used by attackers.
• Opportunities and solutions to address common issues such as how more organizations focus on the wrong items, how egos get in the way, how compliance doesn’t really help, how risk is rarely assessed, and how cloud migrations can actually make security worse.

During this training session, you can expect to participate in group activities and discussions. Be open to new ideas and approaches. We can learn from each other.

Meet the Trainer:
Christian Espinosa is Alpine Security’s CEO/Founder and a Cybersecurity Professor at Maryville University. He holds over 25 certifications, including the CISSP, CCISO, and PMP. Christian is a US Air Force veteran with a BS in Engineering from the US Air Force Academy and MBA from Webster University. Christian holds multiple patents on cybersecurity attack and defense. Major recent projects include penetration testing and assessments of commercial aircraft, medical device penetration testing, and numerous incident response projects. When Christian isn’t protecting us from cybercriminals, he climbs mountains, travels the world, teaches outdoor wilderness survival, and competes in Ironman triathlons.

The University of Massachusetts has developed a 6 hour SecureWorld Plus training class that instructs attendees on the best practices for designing, building, and maintaining a Cybersecurity Program based on the NIST Cybersecurity Framework. Organizations who currently use the Framework or are planning to use the Framework for their cybersecurity program will benefit from this course.

This innovative education and training program includes the following key elements:

• An introduction to the key components of the NIST Cybersecurity Framework
• How to use the Framework to support business strategy, technology strategy, and cyber-risk strategy
• An approach for adopting the framework to build and sustain secure and resilient infrastructure, secure and resilient networks, secure and resilient applications
• How to use the framework to protect critical information assets
• A Controls Factory Model that organizations use to create an Engineering Program, a Technical Program and a and Business / Management Program
• A methodology for developing a Cybersecurity Strategy, System Security Plan (SSP), Risk Assessment, Plan of Action and Milestones (POA&M) and Executive Report

The class will help individuals and organizations acquire knowledge, skills and abilities to:

• Develop a strategy to apply the NIST Cybersecurity Framework (NCSF) to their environment
• Create a comprehensive System Security Plan (SSP) based on the NIST Cybersecurity Framework
• Conduct a Risk Assessment to compare the current profile with the target profile and identify any gaps that need to be addressed
• Develop a Plan of Action and Milestones (POA&M) to mitigate the highest priority gaps
• Establish an Executive Report to measure and communicate current profile, target profile, POA&M and program plan / roles and responsibilities to remediate identified gaps
• Identify required workforce skills and develop career pathways for improving skills and experience

About the Instructor – Larry Wilson:

• Larry Wilson is the former CISO for UMass President’s Office from 2009 to 2017
• Prior to UMass, Larry developed and managed the Global Infrastructure Services (GIS) Security Program for State Street Corporation
• Larry has been teaching cybersecurity courses based on the NIST Cybersecurity Framework at SecureWorld events for the past 5 years
• Larry has conducted over 20 consulting engagements, helping organizations design and build cybersecurity programs based on the NIST Cybersecurity Framework

The program and its author have won the following industry awards:

• Security Magazine’s Most Influential People in Security, 2016
• SANS People Who Made a Difference in Cybersecurity Award, 2013
• Information Security Executive (ISE) North America Program Winner for Higher Education, 2013

Join InfraGard for their chapter meeting and guest presentation. This session is for InfraGard members and all attendees interested in the local association. This is also a great networking opportunity.
Presentation:
Everyone has an opinion on what certification is best and what degree is or is not essential in cybersecurity.  Alan will provide insight on cybersecurity roles, the security certifications that matter for many of these roles, what type of training is truly valued by hiring managers and what key skills matter.

GDPR and CCPA are two of the many privacy standards that are affecting organizations. How will these regulations impact your organization and where should cryptography and monitoring be used? What are some future regulation and standards around privacy and security that will impact how enterprises’ and individuals’ data may be protected?
Presentation Level:
GENERAL (InfoSec best practices, trends, solutions, etc.)

Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible! Booths have staff ready to answer your questions. Look for participating Dash For Prizes sponsors to be entered to win prizes.

Reboot with coffee and infused water while visiting exhibitors on the exhibitor floor.

Mark Gelhardt will be signing copies of his book, “My Time at The Clinton White House.”
Find him in the CyberLounge on the Exhibitor Floor at the following times:
10:15 a.m. – 12:00 p.m.
1:00-1:15 p.m.
BOOK SYNOPSIS:
Colonel Mark Gelhardt had an atypical military career that landed him in The White House next to the President of the United States, where he was responsible for the last link of communications between the President and the rest of the U.S. government. While a Lieutenant Colonel (LTC) in the Army, Mark was selected by top federal officials to be the Commander of the Data Systems Unit, as part of the White House Communications Agency. In this position, he supported the President as the Chief Information Officer (CIO) for all classified IT used by The White House. LTC Gelhardt served at the White House for over four years (1995-1999), working with President Clinton and his staff almost every day, both on the White House grounds and traveling worldwide. This gave him unfettered access to the inner workings of The White House and the Presidency. Since retiring from the Army in 2001, Mark has been asked by many people about his time at The White House. Mark has many stories about what happened behind closed doors, and proudly speaks about the outstanding support done by the fantastic military members that support the Commander-in-Chief. Mark has taken the time to chronicle his experiences about his day-to-day job at The White House, as well as some of the funny stories he picked up along the way. Please enjoy this non-political book with surprising behind-the-scenes stories. I hope they provide you with some insight to the wonderful military members that work so hard to keep you safe every day in support the of President and Commander-in-Chief.

Grow your personal influence, your leadership possibilities and move your InfoSec objectives forward (faster) by thinking differently about how you communicate. Whether your audience is the board, your team, or any part of the business, this session will help you and your communication stand out. Lead by a long-time TV reporter turned cybersecurity journalist who shares a framework for powerful communication you can implement immediately.

Do you know what an Open API is? The data shows the majority of Americans don’t. Open/ public application programming interfaces (APIs) are the engine that power Open Banking, something that has transformed banking around the world the last couple of years. It is on the radar of banks in the United States and in practice in some. Open APIs enable the exchange of customer data with other parties in a simple and secure way, facilitating rapid innovation in products and services. Countries are creating laws and regulation around this practice. This innovation and opportunity potentially carries security risk.

Interested in local associations? Join Cloud Security Alliance for their chapter meeting and guest presentation. This is open to all attendees.
Presentation:
Serverless architectures like AWS Lambda are a developer’s playground- no barriers and faster deployments. However, it can be a nightmare for security teams, often losing visibility and control. In this talk, we will explore how both teams can embrace cloud-native applications and embrace the challenge.
Presentation Level:  TECHNICAL (deeper dive including TTPs)

If one thing holds true in cybersecurity it is the fact that our adversaries are pretty smart. They are. To be fair, they only have to be right once in a while. These cyber thugs are constantly shifting their attack vectors to better infiltrate our networks. There are so many endpoints to cover that the “bad guys” can try something new all the time. They have also discovered that we do not have great cyber hygiene when it comes to training our workforce. End users continue to be the “weakest link” within an organization as we’ve learned from all the ransomware attacks and business email compromises of late. This panel will talk about the shift in attack vectors and make some predictions about what to watch out for in the not too distant future.
Panelists:
Brian Louire, Mars
Diego Maldonado Leonardo, DRS
Teri Green, The Fantas Techs
James Norberg, FCS Financial
Moderator: Tim Grace, Mueller Prost

What are you doing to keep the network safe for your employees? You’ve got your fancy next-gen firewall and some A/V. Maybe even some biometrics or 2FA thrown in for safekeeping. We also keep hearing the IAM acronym thrown around. And what is Zero Trust? What are you missing? Oh, yeah… remote workers and IoT. Wouldn’t it be cool if you had someone to ask? Now you do. This panel will go through these questions and more. Join the group discussion as we address the challenges in endpoint and network security.
Panelists:
Jon Stitzel, Ameren
Bob Brown, First Busey Bank
Gary Chan, FBISTLCAAA
Chris Pittman, Cylance
Moderator: Mike Kissel, Schnucks

Reboot with coffee and infused water while visiting exhibitors on the exhibitor floor.

Be sure to have exhibitors scan your badge for a chance to win prizes. Past prizes have included Kindles, Bose headphones, gift cards, iPads, iPods and more! *Must be present to win

Are you a technician feeling the call towards leadership? Are you just interested in learning more about leadership? Just being a good tech is no guarantee of being a good leader. There are many things that good leaders need to know that have nothing to do with technical knowledge.

Come to this session and join in a conversation about the path from the Information Security Technical role to an Information Security Leadership role. Learn the right Knowledge that will be Powerful in helping you become a great Information Security Leader!

Presentation Level:
MANAGERIAL (security and business leaders)

The security industry, much like the American workforce as a whole, is facing a crisis: job growth is outpacing traditional higher education’s output of viable, job-ready candidates, and coding bootcamps and online programs have become costly and exclusive. Employers across markets must revamp the way they recruit, hire and train tech talent in order to move the industry forward. Maria Laura Tarabillo and Ronald Williamson, along with other regional experts, will explore how looking past the barriers of conventional education opens doors for those traditionally marginalized while providing employers reliable ways to find and hire talent, thus creating an economic talent pipeline.
Presentation Level:
GENERAL (InfoSec best practices, trends, solutions, etc.)