Five by Five: Governance, Risk and Compliance

Five presenters with five slides and five minutes will each share their ideas and insights on cybersecurity topics, focusing on cyber leadership, GRC and emerging technologies. Join us for these rapid-fire sessions and a chance to pose your questions in a moderated Q&A session. PENETRATION TESTING INTERNAL AND THIRD-PARTY RISK: THE ETHICAL DIMENSION Speaker: Kathleen Mullin, vCISO/Consultant This presentation will examine penetration testing best practices as well as the potential adverse impacts of unethical behavior in penetration testing. SAQ CHANGES IN PCI DSS V4.0 Speaker: Robert Rudloff, Partner, Cyber Security Services, Rubin Brown This presentation will provide a high-level overview of the changes coming with PCI DSS v4.0 and cover SAQs, discussing when each is applicable. PRESENTING CYBERSECURITY RISKS TO THE BOARD Speaker: Radhika Bajpal, Senior Program Manager, Google This presentation will explain the expectations of the board in regard to an organization’s risk posture and provide a data-driven, business-focused working model that CISOs/CROs can use as toolkit. STRONGER TOGETHER: BUILDING A COLLABORATIVE RISK-AWARE CYBERSECURITY CULTURE FOR A SAFER WORLD IN INDUSTRIAL CONTROL SYSTEMS Speaker: Karen Macdougall, Information Technology Specialist, Broward County Aviation Department The consequences of a cyber attack on ICS infrastructure can be devastating, disrupting power grids, water treatment facilities, and other critical systems, causing significant economic and social damage. Get an overview on how to develop effective risk management strategies to identify and mitigate system vulnerabilities. Learn how collaborating across sectors can enhance our collective cybersecurity readiness. SIMPLIFY YOUR COMPLIANCE WITH THE NIST CSF Speaker: Kelly Hood, EVP & Cybersecurity Engineer, Optic Cyber Solutions Leverage the NIST Cybersecurity Framework to streamline your compliance requirements and manage your business risk. This presentation will provide tips for managing your requirements and simplifying your processes based on lessons learned from industry.