Black Hat Executive Summit

Today's security professionals are not only wrestling with external threats – they're faced with internal challenges that range from compliance to risk management to uneducated upper management. In this session, we offer an analysis of several recent surveys conducted by Black Hat and Dark Reading that offer some insight on the attitudes and concerns of today's IT security managers, and how those concerns influence their decisions about enterprise defense.

DevOps demonstrated to IT practitioners that combining development best practices with operational guidelines can yield faster results and better software. DevSecOps enables IT to incorporate security protocols into the process, saving time, money, and headaches as security is implemented and tested iteratively during development. Jimmy Sanders from Netflix presents examples of companies succeeding at DevSecOps and discuss the challenges of retrofitting existing development processes, training staff, and bridging on-premise vs. cloud-based approaches. We'll also discuss the realities of the time, costs, and skills involved in setting up DevSecOps and keeping it running smoothly.

A panel of CISOs will discuss today's most pressing issues that are top-of-mind for security executives. The speakers will take a hard look at what’s important, what’s hype, and where you should be focusing your energy and resources as it relates to the business.

As the CISO for Maersk Line, last year Andy experienced probably the most disruptive cyber-attack in history. Now, as a researcher with a leading cyber-security organisation, he draws on his experience and that of over 400 global organisations to pose the question - what have we learnt? In the era of the cyber weapon Andy will discuss the implications of the NotPetya attack and suggest practical steps to improve resilience. Are you ready?

For a business, there are a lot of advantages to utilizing red team engagements, especially when the team is internal. However, this approach is expensive in terms of analyst time and potential risk that is inherent from working on production systems. While that may be the nature of the red team beast, there are aspects of those engagements that can be carried over into a theoretical engagement. In this talk, Adam Schoeman will cover not only how a table-top or theoretical red team engagement can be a logical stepping stone from an internal pentesting team, but how it can be just as valuable to the business as a hands-on exercise. This talk will highlight which items to focus on, how to navigate common pitfalls, and how to evolve when you've nailed it and want to kick it up a notch.

As hackers become more sophisticated, the skills shortage and the lack of diversity within the cybersecurity sector become even more apparent. Whether we’re talking about gender, competency or background, the current trend of recruiting from within small pools means the current workforce is not robust enough to deal with current threats - let alone future ones. Join best-selling author, and 20-year cyber security veteran Jane Frankland to understand the issues caused by a lack of diversity and how we, as an industry, can overcome it. Key takeaways include:

• Understand why the skills shortage has evolved and its impact on leaders and society
• Learn how to overcome the skills shortage problem through better leadership, security integration and stakeholder collaboration
• Discover what data on the cybersecurity industry and more standardised job functions across the sector which will help with career progression and training

Daniel Cuthbert, a member of the Black Hat Review Board, will provide a review of the hottest topics being covered during the Black Hat Briefings to give summit attendees a leg up on what to attend and what to look for during the conference. This conversation will set the premise for audience conversation and offer a framework for post-event action items for attendees.

Worldwide security expert Mikko Hypponen will close the day with a summary on where we are coming from and where we are going. What will be the biggest trends in 2019 for both offense and defense?