AGENDA

Join Acuity Risk Management’s Daniel Goodwin, Business Development Manager, BSc Cyber Security, to explore the multi-dimensional impact of cyber threats, and gain insights into how businesses can thrive by understanding the holistic bottom-line implications. Key learning points will include:
1. Quantitative Risk Assessment: Learn how businesses can employ quantitative methods to assess and measure the economic consequences of cyber threats, moving beyond qualitative assessments to make data-driven decisions.
2. Data-Driven Decision Making: Discover real-world examples and case studies showcasing how organisations can leverage quantitative risk assessments to prioritise mitigation strategies, optimise resource allocation, and effectively manage cybersecurity investments.
3. Impact Analysis: Explore the multi-dimensional impact of cyber threats, from direct financial losses to the more subtle but significant costs like reputation damage and customer attrition, to gain a holistic understanding of the bottom-line consequences.

Speakers

• Daniel Goodwin, Business Development Manager for Acuity Risk Management

Ever since the first hackers bypassed software copy protection on Atari 800s and Apple II there has been an arms race back and forth between attackers and defenders; with defenders constantly raising the bar, and attackers jumping over, walking around, or simply removing the bar. With the advent of the internet and our modern connected lives this only intensified with data leaks, compromises, and ransomware a commonplace headline in today's world. This talk will lift the veil behind the evolution of computer hacking.

Speakers

• Glenn Wilkinson, Ethical Hacker

With billions of connected devices in use around the world, the Internet of Things (IoT) presents both opportunities and challenges when it comes to security. In this session, our expert speakers will explore the security implications of IoT.

Panellists will discuss the latest threats facing the IoT and explore how security teams can defend against them. Topics will include: the role of regulation in promoting IoT security; the potential for AI-powered tools to improve IoT security, and how to leverage the opportunities presented by the IoT in a safe and secure way.

Speakers

• Kristian Alsing, Senior Cyber Security and Business Resilience Executive
• Matthew Bancroft, Senior Director - Digital Trust & Security, Capgemini

Join us for an eye-opening seminar that delves into the unforeseen perils of AI when wielded by employees in the realm of cybersecurity. In an era where organisations increasingly empower their workforce with AI tools, the risks and vulnerabilities associated with this practice have become a critical concern.

Discover how seemingly innocent intentions can pave the way for insider threats to skyrocket. Uncover the unintended consequences that emerge when employees utilise AI-powered solutions without fully comprehending the potential pitfalls. Explore the dangerous implications of data leakage, unauthorised access, and how adversarial exploitation exploits the very tools meant to enhance security.

We will delve into the darker side of over-reliance on AI, as employees inadvertently become complacent and relinquish their responsibilities in safeguarding critical systems. Learn about the challenges in ascribing accountability and attributing security incidents in an AI-driven landscape.

Moreover, we will shine a spotlight on the emerging risks of social engineering exploits and privacy erosion, as AI unwittingly becomes an unwitting accomplice to cybercriminals. We'll examine the reinforcement of biases and discrimination within AI systems and the potential legal ramifications for organizations.

Finally, we'll address the vulnerabilities that AI tools introduce into the supply chain, posing a significant risk to the organisation's overall cybersecurity posture.

Join Paul Bedford, a Cyber Security specialist, as he shares his insights, real-world examples, and practical strategies to mitigate these risks effectively. Don't miss this opportunity to gain a comprehensive understanding of the hidden dangers that employees using AI pose to cybersecurity and how to safeguard your organisation against them.

Speakers

• Paul Bedford, Information Risk Management and Cyber Expert

Security leaders often seek opportunities to counter the notion that security programs are merely a cost center. This panel will illustrate how effective third party risk management (TPRM) enables business in addition to providing much-needed security, whether you are responding to due diligence requests or providing security approval for new vendors.

Three objectives and takeaways

• All appropriately implemented security domains and safeguards provide business value.


• Swiftly evaluating and approving new vendors facilitates business efficiency.


• Promptly and thoroughly responding to prospect due diligence translates into revenue.

Speakers

• Merilyne Davies, Global Director of Privacy, RX
• Tai Alad, Director, Solutions Engineering - EMEA, CyberGRX
• Daniel Garcia, Risk and Compliance, Verdantix
• Matthew Bancroft, Senior Director - Digital Trust & Security, Capgemini

Security laws and frameworks require security teams to take a risk-based approach to defending against threats, determining the “reasonable” level of security relevant to the context in which they are operating and the systems they’re trying to protect.

Determining what is “reasonable” is no easy task, sometimes requiring input from several departments and careful resource allocation. But getting this right is a crucial element of demonstrating your company’s compliance.

Every organization handles sensitive data; according to the ICO, the leading cause of data leaks remains non-cyber related errors. So while outsider threats are increasingly sophisticated, failure to prevent outbound data leaks caused by well meaning employees sees organizations vulnerable to hefty fines and reputational damage. And so, determining what is “reasonable” should see security teams identifying digital communications as one of their primary risk vectors; the amount of data we handle every day is increasing and employees must be empowered to protect it through the application of interoperable technology in addition to traditional SEG’s and security training programmes.

In this session, security experts and experienced practitioners will share their views on how to determine a baseline level of security that meets the company’s obligations and provides effective protection against inbound and outbound security attacks.

Speakers

• Susanne Bitter, Head of Regional Strategic Alliances, Cyber Security Forum Initiative
• Henry Jiang, Chief Information Security Officer, Diligent
• Luke Crosby, Deputy CISO, Ministry of Justice UK
• Adam Low, CTO, Zivver
• Samantha Humphries, Senior Director of Security Strategy, International, Exabeam

The legal and regulatory landscape of cybersecurity is constantly evolving, with new laws and regulations being introduced on a regular basis. In this session, we will explore the emerging trends and challenges in cybersecurity law and regulation and discuss the ways in which organisations can navigate this complex landscape.

Panellists will look at the most upcoming and recently passed cybersecurity laws, regulations and amendments that are likely to have a major impact on a wide range of businesses, explaining who is covered and exploring the main obligations.

This session will help you prepare and balance your organisation's cyber resources and priorities.

Moderator

• Gary Hibberd, Board Member, Yorkshire Cyber Security Cluster

Speakers

• Michael Corcione, Partner, Cybersecurity and Privacy Advisory, PKF
• Amardeep Ginday, Identity & Access Management Analyst, Vanquis Banking Group
• Marc Woolward, CTO +CISO, Varmour”
• Emma Green, Managing Partner, Cyber Data Law Solicitors