Is it safe...to be online today and tomorrow?

The global media attention for cybersecurity incidents has an impact on the role of executive management about information security, much more than most executives are willing to admit. Consumers are holding organisations responsible whenever there is a cybersecurity incident that compromises their information and investors are holding organisations responsible when there is a cybersecurity incident because of the financial losses that occur and the devaluation of the organisation on the market.

Can any executive honestly claim cybersecurity is not their responsibility? Unfortunately, still too many executives completely delegate the cybersecurity responsibility to IT since they are convinced it contains too many technical elements.

This presentation explains how to create a secure climate by embracing technology and change. Executives will learn how to view cybersecurity no longer as an IT expense, but as a critical success factor to long term success.

This is done by showing to executive management and CIOs the top 3 internal and external threats on cybersecurity, but also the top 3 cyber resilience solutions for organisations today. Expect actual examples, a related movie, but also practical tools and references to help focus on the essentials in cybersecurity.

Handling privacy breaches the smart way

A constantly changing legal and regulatory environment is the “new normal” for privacy. The EU GDPR had a significant global impact since 2018 and inspired many other countries to renew their data protection regulations. The California Consumer Privacy Act (CCPA) went into effect in 2020. In addition, the global health crisis created concerns around new and emerging uses of personal data such as contact-tracing apps, telemedicine and network thermometers.

As the complexity of privacy regulations increases, so does the responsibility for organizations to manage personal data and ensure their security and privacy teams are aligned to respond to potential privacy breaches. Data breaches are a constant threat for all organizations, and no matter how many policies, strategies or defenses there are, sooner or later a skilled attacker will be able to compromise them.

In this presentation, Marc shows the importance of having a strong privacy practice including having robust policies, processes and tools in place to help manage data privacy and breach notification requirements. Employees should be regularly informed via training about basic privacy practices. HR, legal, compliance, security and IT are some of the teams affected by privacy and need to participate. In short, privacy is a team sport, and so are privacy breaches.

The presentation shows which 5 steps need to be followed when a data breach occurs and mentions 10 appropriate technical and organisational measures to avoid possible data breaches.

How to design rock-solid security

This presentation shows the urgency to adopt a proactive, pragmatic and strategic approach that considers security threats and risks from the start and not as an afterthought in the design and development of products and services in such a way as to minimise flaws that could compromise security which is called security by design perspective. This can make the difference between those who fail and those who thrive.

Marc addresses security by design and shows its importance in IT development projects because as a system is developed, it becomes harder and more expensive to add security afterwards.

Marc provides a proper explanation of a rock-solid security architecture model with a focus on integration with risk management, IT and business systems. Security by design techniques, benefits, principles and requirements are illustrated with lots of examples focusing on preventing security incidents rather than repairing the issue and restoring systems after a company has been hit by a security incident.

Marc summarizes the responsibilities for the security controls, security configuration, the automation of security baselines, and the end-user audit of security controls for infrastructure, operating systems, services, and applications. Finally, he shows how security by design is all about enabling trust in systems, designs and data so that organizations can take on more risk, lead change and innovate with confidence.

Keynotes for Every Audience

Request more information