New York CISO Executive Summit

Join Keith Ferrazzi, renowned team coach and bestselling author, as he unveils the groundbreaking concepts from his latest book, "Never Lead Alone: 10 Shifts from Leadership to Teamship." In this dynamic keynote, Ferrazzi challenges traditional notions of leadership and introduces a revolutionary approach to team dynamics in today's volatile business landscape.

Drawing from two decades of proprietary research Ferrazzi will share:

• The role of the Leader in fostering Teamship
• 10 critical shifts your teams must make to achieve breakthrough performance
• Strategies and practical tools you can implement now for navigating modern challenges like hybrid work, and AI integration

Discover how to transform into a co-elevating team that drives bolder innovation, breaks down silos, and delivers exceptional results. Whether you're a C-suite executive or a team member looking to contribute more effectively, this keynote will provide you with actionable insights to revolutionize your approach to collaboration and team performance.

Keith isn't just an author -- he's someone who knows and works with CISOs and security leaders regularly. Check out some of his articles for Forbes specifically addressing how CISOs can action on some of the key principles of his work:

• When Cyber Security Breaches Are Inevitable, It's Time To Call For A New Approach
• The CISO As The Model Of Leading Without Authority
• Can The CISO Lead The Customer To Safety And Security?

Imagine a world where security engineers weren't inundated with thousands of issues/bugs across dozens of categories every day. Hardik Mehta, Head of Cyber Risk Management at Uber, and his team no longer have to just imagine that world -- they've made it their reality with Project Matterhorn — a Generative AI-powered program that is taking the number of issues from 200k+ across 21 types to just 20k across only 2 types.

In this session, Hardik will share how Project Matterhorn is leveraging GenAI to:

• Identify & resolve Uber’s critical security issues across Product and Infra
• Integrate with Uber’s engineering plans and govern Uber’s issues posture
• Reduce Uber’s operational toil around issues, exceptions and acceptances

Cybersecurity is more than just technology; it’s about managing risks in a business context. Today’s interconnected landscape broadens the risk surface, encompassing cyber threats, operational disruptions, and financial losses across all enterprise levels. CISOs are challenged with fragmented security solutions and siloed strategies, which hinder effective risk management programs. 

Join this session to discuss: 

• Developing a Risk Operations Center (ROC) to strengthen your cybersecurity risk management program
• Aggregating, scoring, and presenting risk to achieve unified visibility and action across entire attack surfaces
• Aligning the business with risk-based prioritization

Cryptography touches every corner of the digital world, and it is at risk of decryption from cybercriminals launching “harvest now, decrypt later” attacks. NIST announced three encryption algorithm standards in August 2024, which the U.S. government is pressed to adopt by 2035. Businesses must start evaluating their systems now, as a system-wide transition to quantum-safe protocols will be complex and time-consuming.

Join this session to discuss:

• The current threat landscape from cryptographically relevant quantum computing
• Understanding the NIST encryption standards and how to implement to your organizations
• Evaluating and updating security strategy to ensure future security

Generative AI is being utilized by companies and employees alike–sometimes without permission. The normalization of this emerging technology has expanded the attack surface and left many security leaders feeling anxious and uncertain. Is generative AI worth the risk, and how should it be governed in an organization?

Join this interactive roundtable to explore:

• What to expect from the threat landscape as generative AI becomes increasingly normalized
• What adopting generative AI does to your attack surface, and if you should even allow it
• How to implement governance rules that your organization will follow

Cybersecurity has always been a never-ending race, with threat actors often setting the pace. So how do we actually get ahead of such sophisticated adversaries? By changing the paradigm of security from detection and response to prediction and preemption.

Join this interactive roundtable to explore:

• Defining and moving toward a preemptive cybersecurity model
• Countering more sophisticated attacks conducted by AI and other advanced capabilities
• Observing, quantifying and communicating the ROI of cyber deterrence

Discussion Questions:

• Who is already having conversations or already implementing preemptive cybersecurity programs? What is your definition of cyber deterrence?
• Where do we start with cyber deterrence? What are the programs you’re looking at?
• How are you budgeting for these kinds of programs? What is the level of sophistication we need to have to make these effective?
• How can you empower your employees to be proactive in addressing and preventing cyberattacks?
• How do you show ROI of cyber deterrence? What are the KPIs or metrics can we use to show this?

Connect with like-minded peers in a one-on-one setting through Evanta’s Peer-to-Peer Meetings. You will be matched with peers in your community based on your shared interests and priorities.

Security and privacy are intersecting, yet distinct, disciplines that ultimately share a lot of the same goals. But true collaboration between these critical functions isn't just about policies and protocols -- it's about leveraging both perspectives to think more holistically about safeguarding data and establishing trust.

Join this session for a candid, fireside chat-style session between two local security and privacy leaders about how they approach collaborating with their respective privacy/security counterpart within their organization, each sharing how they:

• Navigate areas of shared interest and responsibility between privacy and security
• Address the constantly evolving landscape of data protection regulation
• Work cross-functionally to promote the responsible and innovative use of data across the enterprise

In the age of remote and hybrid work, employees now spend the majority of their time in the browser or in virtual meetings. The workforce is more mobile and distributed than ever before. At the same time, we are seeing an increase in cyber attacks and a higher average cost of data breaches. We must think more about protecting users right where they interface with web threats, the browser, without disrupting productivity.

Join this conversation with your peers to discuss:

• The browser's role in a business's security strategy
• Zero trust architecture
• Managing resources for cybersecurity in a time of economic uncertainty

You’ve heard it all before: the DBIR tells you people are your biggest risk, phishing simulations tell you your users fall for social engineering, and simple security measures you deploy are sometimes met with howls of protest. But what if it didn’t have to be that way?

Join this session for a fresh perspective on:

• Moving security alerts from the SOC to where users work
• Protecting end users perception of security controls
• Transforming security teams’ interactions with end users

In today's complex regulatory environment, CISOs must navigate various categories of global trust, such as demographic and ethnographic factors, which influence compliance and governance decisions. Establishing and maintaining trust requires not only defining a clear position but also providing consistent evidence to support compliance claims. How can leaders connect the dots of governance across different countries and organizations effectively to enhance compliance and operational efficiency?

Join this boardroom to discuss:

• Navigating the convergence of consumer, government, and market forces that shape global flows of data
• Aligning governance and compliance strategies to build and maintain trust
• Leveraging new technologies responsibly across geographies without sacrificing customer trust and loyalty

Third party relationships are closest and may prove to be the most tangible risks to your business, yet the whole supply chain of your business partners still pose a substantial threat. Most organizations’ vendor relationships extend to the 8th party. CISOs need to understand this web of connectedness in order to better manage and communicate enterprise risk.

Join this session to discuss:

• Gaining visibility into risk across the whole supply chain
• Strategies for effective risk management and monitoring business partners
• Overcoming resource challenges to prioritize third-party and extended supply chain risk