IT Security Insights 2024 HYBRID

Key takeaways:

• How can you work strategically to reduce security risks? 
• In addition to the threats that all organizations face, source protection poses major challenges to media companies - what demands does it place on the organization and on the security products? 
• How can organizations effectively collaborate and integrate their physical, personnel and cyber security strategies to protect against different types of security threats and what are the most common challenges in such integration?

Generative AI is a powerful new technology with the potential to both improve and degrade our cybersecurity posture. It can be used to generate synthetic data for training and testing cybersecurity systems, identify weaknesses in cybersecurity systems, and automate cybersecurity tasks. However, it can also be used to create new and more sophisticated cyberattacks, automate cyberattacks, and create deepfakes that could be used to spread misinformation and propaganda. In this presentation, we will share real-world uses cases on how generative AI and associated tools can be used by organisations of different form and shape to defend themselves against evolving cyber threats, but also for businesses to be aware of the shortfalls of such technologies when it comes to cyber defence.

Key takeaways:

• How can generative AI be used to defend against evolving cybersecurity threats?
• What are some examples of generative AI-powered cybersecurity solutions?
• What are the potential risks and concerns of using generative AI for cybersecurity?

It is estimated globally that a business fall victim to ransomware every 40 seconds on average, and surveys show that IT-staff and managers feel increasingly alone in their struggle to prevent that from affecting their organization. With a cybersecurity market filled with over 11 000 products and solutions according to recent estimations, it is not surprising that we feel increasingly overwhelmed. In this presentation we will discuss what we have seen working on the frontlines supporting organizations during critical incidents, what security strategies work best, how can organizations best prepare for the worst, and what does it truly mean to be incident ready?

The cybersecurity workforce gap has increased, and the shortage is predicted to be a growing problem well into 2025. Companies need to search for strategies to build effective cybersecurity teams as well as to retain employees and help them to grow. Attracting a diverse workforce and providing learning plans and more upskilling opportunities are some of these strategies. By doing so, a positive culture and mindset are promoted, which supports business continuity and strengthens cyber defences. 

Key takeaways:

• Is there a shortage of cyber security professionals, why?
• Succeeding with a diverse security workforce
• Security is a critical skill for all workforce, to ensure our workforce, culture, and ways of working enable a secured delivery of products and services to the customers, and for protecting the company assets.
• The security skill learning plans should be continuously evolving, and more upskilling opportunities should be added over time. Different skill levels and different formats of training.

The Purposeful Advisory Wrangling using LLMs, or PAWL Patrol Framework, is a self-buildable solution for businesses to integrate Gen AI and Retrieval Augmented Generation in their cybersecurity defenses. This session offers an introduction to Gen AI for cybersecurity defense, highlighting its practical applications through diverse use cases.

Key takeawys:

• What are the technical intricacies behind integrating Large Language Models into cybersecurity tools?
• How can businesses tap into a Slack API for integration to transform daily communications into threat monitoring channels with Gen AI?
• How does this Gen AI framework provide dynamic advisories on emerging threats, especially considering geopolitical situations?
• How does integrating a company's policy library streamline the intricate compliance landscape, ensuring adherence to evolving regulations?
• What strategies does Retrieval Augmented Generation employ to discern email authenticity, reducing the impact of sophisticated phishing campaigns?
• How does can developers identify insecure code with PAWL Patrol to elevate code security and foster proactive defense strategies?

Breakout sessions give you an opportunity to be updated on are variety of technology solutions that will be showcased during the conference. Join 1 of the 3 morning sessions of your own choice ready with pertinent questions on the topic to be discussed. Breakout sessions last for 30 Minutes and are open to all participants.

Key takeaways:

• Are You Prepared for the True AD Disaster? 
• Why protecting Identities is so Important. 
• Disaster Recovery success relies on meticulous planning, especially for crucial components like Microsoft AD. Identify triggering events, accelerate with strategic planning, and enhance with backups and communication protocols. 
• Regular testing and adaptability ensure a resilient IT system

Round Table Discussions are designed to give event participants an opportunity to exchange ideas and experiences on some of the hot topics in the security market place in a more intimate setting. The discussions will last for 45 minutes after which the delegates with swap tables to a new table of their own choice for further discussions lasting another 45 minutes. Discussions are open to all participants at the conference.

Privacy-by-design, one of the principles of the EU GDPR, is a concept for embedding privacy and data protection into products from the design phase rather than retroactively. It is meant to be a proactive measure to risk management where privacy related risks, both to data subjects and to companies, are anticipated beforehand and prevention mechanisms are built-in from the beginning. Privacy-by-Design is often talked about in terms of what it is rather than how it could be implemented and this makes it challenging to companies to adopt. In this session, we will be discussing privacy-by-design from a practical perspective and we will be sharing some of our experiences in building privacy in our products and processes from the ground-up.

Key Takeaways:

• What challenges are there with implementing privacy-by-design?
• Should privacy-by-design be an end goal or a way of living/working?
• What tools or mechanisms could be utilized to achieve privacy-by-design?

Exploring the ammendments of the EU payments framework

Key takeaways:

"What role does artificial intelligence play in industrial cyber security (OT)? In this roundtable discussion, we delve into the topics of AI-enabled defense mechanisms, attack tools and vectors, AI regulatory support and challanges, and how government agencies can best help."

Key takeaways:

• Automation in SOC
• Integrity
• Sustainability Social

The digitization of society continues at a rapid pace, but security issuesoften end up in the shadows. The gap between new functionality andsecurity is widening, creating major risks. At the same time, Sweden isin second place in the world in terms of innovativeness. How can we usethis innovative ability to create a more secure Sweden?

Traditional methods for one-off and manual certification are not scalable to millions of heterogeneous IoT devices. This is particularly important when regular software updates are necessary, which may break the certificate seal. It is therefore inevitable that automated, lightweight, and cost-effective initial- and re- certification techniques should be available for modern IoT devices. This talk will present such an automated re-certification solution for IoT and its integration with state-of-the-art standardized security solutions for IoT devices.

Key takeaways:

• What is the current state of IoT security?
• How can we be able to update billions of IoT and at the same time keeping them certified?