On TikTok, a few seconds of authentic and creative expression can turn into a viral trend or much more, moving from the digital world into the physical world and selling out pastas, cheeses, or even books. In this fast-moving environment, security not only touches every part of our business and community, but also deals with a threat landscape that is constantly shifting. In implementing new security controls and sharing privacy resources across the company, TikTok's security team must work rapidly and cross-functionally to anticipate threats and resolve issues. The platform relies on a diversity of skills and experiences within its security organization to guide solutions with real-world impact. However, we know that security is a team sport, and that's why we're focused on building a company-wide culture of security, and working to educate our global community with practical tips to always #BeCyberSmart.

The last couple of years saw the largest and most rapid work transformation in history. This transformation has accelerated the adoption of the cloud and has resulted in more data moving to the cloud. The risk of data breaches has also increased. How can you unify your security, cloud and data teams to more effectively identify, prevent and respond to threats to data? And how can you confidently answer the question “Is my data really secure?”
In the cloud, the data attack surface continues to expand as data stores proliferate to include analytical, relational, graph, document and object stores. Sensitive data at rest and in transit must be protected. It’s not enough to secure the data. Access must also be secured, especially with a distributed and diverse IT workforce. According to the Verizon Data Breach Incident Report 2022, 70% of data breaches are a result of exploitation of access.
It is crucial to build a strategy that secures your organization’s data in the cloud, shifting from a infrastructure-centric approach to a data-centric approach. So how can we secure sensitive data in the cloud while ensuring business applications are not interrupted, user experience is not affected and legitimate access to data is always allowed?
It all starts with unifying or aligning your security, cloud and data and teams. Within this panel discussion we will be exploring this concept as well as how to leverage your infrastructure to best secure your organization’s data.

Most data created today is unstructured. Typical enterprises have little administrative control over the inventory, accessibility, and organization of its unstructured data. The control gap creates an undesirable situation. The solution, FileFlex Enterprise, enables organizations to quickly safeguard data with a new method called Zero Trust Data Access (ZTDA). Learn how to protect data without regard for enterprise perimeters; save time and expense by not having to move or duplicate data to leverage FileFlex Enterprise's ZTDA capabilities.

According to Gartner, spending on public cloud services will grow by 21.7% and hit $482 billion in 2022. This means as organizations mull new hybrid workplaces, reliance on cloud infrastructure will gain momentum.
Spreading operations across more than one cloud enables organizations to choose from a variety of cloud services to cut costs, improve operations and improve scalability. However, operating complex environments across multiple platforms requires a comprehensive strategy to handle connectivity, applications, data and security.
The constant growth of technologies, strategies and new vendors poses an additional challenge for cloud security. During this roundtable we will explore core concepts of cloud security, from people and processes to the technologies at each of the layers needed to ensure your cloud security strategy keeps up with the pace of change.

In this roundtable we will explore:
•What are some of the challenges you are facing with data protection in multi-cloud environments? •How can executives successfully manage different built-in security controls, tools, and regulations?
•In-depth expertise in each cloud environment is essential which grows more difficult as the number of environments grows. How can security leaders ensure the consistent and necessary access to Cloud Skills?
•50% of organizations have difficulty with understanding how security solutions work together. What are your top priorities for achieving successful integration?
•When faced with the difficulty of a shared responsibility model and reliance on vendor-controlled infrastructure, how does your organization achieve visibility and control in multi-cloud environments?

Many companies are now looking to implement stronger security strategies to align with future company goals, better customer experience, and keep ahead of cyber threats. With cyberattacks on the rise, organizations should never automatically trust anything inside or outside their network. In fact, 90%+ of incidents occur due to a failure in process and/or the human element (Verizon).
Remote working, sharing of data to suppliers, and interlinking networks all add exposure to your networks. More exposure increases the opportunity for security breaches. Leading organizations are adopting a Zero Trust approach which continuously verifies users & devices to ensure access and privilege is granted only when it is needed. The framework dictates that only authenticated and authorized users can access applications and data. At the same time, it protects those applications and users from advanced threats on the internet.
A study by IBM in 2021 found that the average cost of a data breach was USD 1.76 million less at organizations with a mature zero trust approach, compared to organizations without zero trust. So, how do you get there? How do you implement a step-by-step strategy for your business to gain security across your whole network?
Join this roundtable to discuss challenges, and opportunities in adopting a zero-trust approach to identity security, and best practices moving forward to stay ahead of future threats, protect your business and enable growth.

In this roundtable we will explore:
•With the rise in cyber threats, how have you structured your security infrastructure and how are you currently monitoring & defending against cyber threats? What key challenges are you facing?
•Where are you on your Zero Trust journey? How are you balancing privacy, protection and security with the availability of resources?
•Are you able to identify all points of access across all users (employees, customers, and third parties) and identify any gaps within those access points? Are you verifying anything and everything trying to connect to your systems before granting access?
•Internal company culture around security has been named previously as a challenge when introducing zero trust. Is this a challenge that resonate with you? How have you set out to work around company culture with zero trust?
•Does your organization have a requirement to support both managed and unmanaged devices, given the shift to remote work?
•What are some of the challenges you are facing with governance and data security, both on-prem and in the cloud? What steps have you taken, or are looking to take, to overcome these?
•Are you planning on implementing Zero Trust type strategy for machine/non-human identities and access?
•What are your top priorities moving forward to adopt a zero-trust approach to identity security?

According to a Gartner study, By 2026, at least 50% of C-Level executives will have performance requirements related to cybersecurity risk built into their employment contracts. In a world where 90% of cyber-attacks utilize social engineering to exploit human weakness and bring about errors in judgment, it makes sense that beefing up the security skills of computer users would decrease cybercriminal success. Secure behavior can be taught yet many organizations still struggle with getting everyone to understand their responsibility for security.
This has executives who are tasked with managing cyber risk asking themselves – how can we get people to care more about cybersecurity?

In this roundtable we will explore:
•What are the biggest challenges when it comes to leadership, and redefining strategy & cultural mindset?
•Helping people understand the “why” behind security is a vital building block of creating a security mindset. How can this be successfully carried out across large organizations?
•What are the latest best practices in the human aspects of security?
•What is the general trend with regards to democratization, employee trust and customer centricity and what implications does this have for the risk of cyber?

Join Mark Odom, CISO, at Jefferson Health to hear first hand the successes of a Neuro Diversity Talent Program to close that ever challenging talent gap. We will also hear how Mark is using predicitive analytics, pushing their program to drive 50% of responses to cyber threats in the next 2 years.

Secureworks Incident Response (IR) engagements reveals trends about threats and threat actor behaviors which will be reviewed in this session. Over the past 18 months, Secureworks incident responders assisted in the containment and remediation of over 450 security incidents. Visibility of these real-world incidents provides Secureworks Counter Threat Unit™ (CTU) researchers with insight into emerging threats and developing trends. Organizations can use these insights when considering key challenges for new cloud or hybrid environments; how Zero Trust plays a role in securing it; and how you prepare your team members to operate in this new environment.

Malware, device mismanagement, device misconfiguration – all major issues with a company’s IoT, and all falling at the feet of the CISO. But how best to manage the cyber hygiene of the company?
The lack of industry foresight gives little-to-no time to develop a strategical defense plan against unfamiliar threats in growing IoT ecosystems, as well as those we are already accustomed to. The major roll-out of 5G only accelerates the need for improved security in 2022. Escalated cyber-attacks can come as distributed-denial-of-services and these devices being hacked can be used as an entry point to a corporate network.
Vishal will draw on a careers worth of experience, that has lead him to become CTO & CIO of Lexmark – with all CISO and security personnel reporting to him.

Organizations are responding to record numbers of third-party data breaches, and supply chain disruptions due to continued pandemic shutdowns, and even the war in Ukraine. The key to minimizing the risk of third-party breaches is to implement a comprehensive and efficient third-party security risk management (TPSRM) process. This panel will discuss the increasing challenges surrounding third-party security as well as ways to efficiently and effectively manage the TPSRM process.

Gartner® says that cyber risk is the #2 concern for the Board of Directors,but 63 percent of boards lack the confidence that their company is properly secured. Instilling confidence in the security team and their initiatives with the board starts with knowing how to have the right conversations and using a common language to communicate program performance. Join Senior Product Manager Viet Tran for this interactive session to learn how to easily communicate assurance with the board, along with tips and tricks for using BitSight for Security Performance Management to facilitate discussions.