Forrester Research believes that 60% of security incidents this year will result from issues with third parties, with many of these risks being identified after initial onboarding. As with any cyber security incident, they are not only costly and disruptive, but can cause considerable damage to businesses reputation.

This highlights the need for organizations to act to ensure the security and integrity of their partner ecosystem. And, as these ecosystems become more diverse and dynamic, organizations must continue to innovate ways of monitoring and collaborating with these critical business partners. Join leaders from a variety of organizations and industries as they discuss their journey and the challenges, they face working with 3rd party providers.

As technology continues to advance at an unprecedented pace, cyber security leaders are faced with the daunting task of safeguarding their organizations' digital assets and infrastructure. In 2023, although it is only Summer, the impact of emerging technologies including artificial intelligence/machine learning, 5G, IoT, and quantum are significantly impacting everything connected to the internet.

The introduction of these potentially disruptive technologies has huge implications on cybersecurity. By examining the challenges and opportunities presented by these technologies, participants will gain insights into developing effective strategies to ensure robust security measures in this rapidly evolving digital age.

Join this roundtable to discuss the following points:
• How can AI and ML enhance cybersecurity practices, such as threat detection, anomaly detection, and incident response?
• What are the potential risks associated with AI and ML in cybersecurity, including adversarial attacks and biased algorithms?
• How can organizations strike a balance between leveraging AI and ML for enhanced security while addressing privacy concerns?
• How can organizations leverage the synergies between emerging technologies to strengthen their overall cybersecurity posture?
• What are the challenges in integrating AI, ML, 5G, IoT, and quantum technologies within existing cybersecurity frameworks?
• What are the ethical considerations surrounding the use of emerging technologies in cybersecurity, and how can organizations address them?

The concept of digital transformation has been with us for a decade now, and it has become the driving force behind the IT efforts of most enterprises and always involves multicloud deployments. In fact, 71% of respondents to a recent IBM survey agreed that it is “difficult to realize the full potential of a digital transformation” without a multicloud strategy. At the same time, 41% of the executives do not think their security initiatives have kept up with digital transformation.

One of the primary roadblocks to implementing a strong cloud security posture is the fact that each major public cloud platform uses a different approach and tools for protecting its infrastructure. For example, AWS, Azure and GCP do not handle basic security functions such as identity and access management (IAM), privileged access management and VPNs in the same way. There are nuances that must be considered for security measures to work properly. The professionals who understand these nuances are not easy to find. Is this where the talent crunch meets the budget crunch? There are few organizations that are not suffering from a lack of skilled security personnel, and the competition for talent is intense. Whilst corporations tighten their purse strings and talent is scarce how can cloud providers better collaborate with their customers during this challenging landscape?

Join this roundtable to discuss the following points:
• How would you describe the current state of the skills shortage in cloud security? What are the specific challenges organizations face in finding and retaining skilled professionals?
• What are the key skills and expertise required to effectively manage cloud security? Are there any emerging areas or specialized roles that are becoming increasingly critical?
• What role can automation, artificial intelligence, and machine learning play in mitigating the skills shortage? How can these technologies enhance the capabilities of security teams and streamline cloud security operations?
• Looking to the future, what trends and technologies should organizations consider when developing their cloud security strategies? How can they prepare for the evolving threat landscape and the changing skill requirements?
• In the context of the skills shortage, how can organizations effectively balance outsourcing or partnering with third-party providers while maintaining control and ensuring the security of their cloud environments?
• Are there any regulatory or compliance considerations that must be considered when addressing the skills shortage in cloud security? How can organizations meet these requirements effectively?
• During a skills shortage shared responsibility has never been more prevalent, so how can cloud providers support businesses to navigate the complexities of cloud security, foster a proactive and cooperative approach to mitigate risks effectively?

While governance, risk, and compliance were once seen as the organization's police - reacting to violations, misconduct, or other wrongdoing- that is no longer the case. Without a robust GRC framework that includes ESG, resiliency and strong cyber and compliance programs, there is a serious risk to a company’s reputation and its ability to attract and retain the best talent and customers. A well-planned GRC strategy comes with lots of benefits: improved decision-making, more optimal IT investments, elimination of silos, and reduced fragmentation among divisions and departments, to name a few.

The stakes have been raised and there are no more excuses. The uncertainties and challenges faced by organizations will only escalate with ongoing technological advancements, a volatile economic and geopolitical landscape, mounting regulations, evolving environmental and social factors, and more.

Join this roundtable to discuss the following questions:
• How can organizations establish a comprehensive GRC framework that incorporates cyber resilience as a critical component?
• What are the key elements of an effective cyber resilience strategy, and how can they be integrated into existing governance, risk, and compliance practices?
• Considering evolving environmental and social factors, how can cyber resilience efforts be aligned with environmental sustainability and corporate social responsibility goals?
• What are the potential consequences for organizations that fail to prioritize cyber resilience within their GRC practices, particularly in terms of reputation, talent acquisition, and customer trust?
• How can cyber resilience initiatives be effectively communicated to stakeholders, including the board of directors, senior management, employees, and customers?
• What role should the C-suite play in driving cyber resilience and strengthening governance, risk, and compliance practices within an organization?
• With ongoing technological advancements, how can organizations ensure that their cyber resilience strategies remain adaptable and responsive to emerging cyber threats?
• What are the challenges and opportunities associated with incorporating cyber resilience into the governance, risk, and compliance practices of multinational organizations with diverse regulatory environments?
• How can organizations effectively collaborate with external stakeholders, such as government agencies, industry associations, and cybersecurity vendors, to enhance cyber resilience and address common challenges?
• What metrics and key performance indicators (KPIs) should organizations use to measure the effectiveness of their cyber resilience efforts and the overall strength of their GRC practices?

The introduction of GDPR has highlighted concerns about keeping personal data safe, and how some tech giants have built business models based on our likes and dislikes. Anonymization/Data Masking has become a need for organizations seeking to stay compliant and those in charge of ethical monetization.

Manuel will review the impact of the various privacy laws and regulations, use cases, available technology, and the growing concern about our personal data being shared with the advent of increasingly more IoT devices and 5G/mobility.

Most security testing today is purely tactical. We find vulnerabilities and sometimes fix them. We use this process to satisfy compliance requirements and report a point-in-time status to regulators, but we rarely learn anything about our overall security posture and use that information to change our strategy and priorities. Strategic, transformational security testing is the solution to a more resilient posture in today's threat landscape.

Strategic security testing uses aggregated data from individual penetration tests to reveal the root cause of persistent weaknesses in security posture due to broken processes and overwhelmed staff. Security and IT management can use that data to invest in training and solutions that are specifically targeted at organizational deficiencies. Moreover, a strategic security testing program will track improvements in overall security posture over time so those improvements can be communicated to senior leadership and the board.