San Francisco CISO Executive Summit

December 7, 2021 | InterContinental San Francisco

December 7, 2021
InterContinental San Francisco

REGISTER NOW

Collaborate with your peers

Get together with San Francisco's top CISOs to tackle shared business challenges and critical priorities facing your role today. Participate in this one-day, local program with peer-driven topics and interactive discussions with your true C-level peers.

Join your peers to discuss the most critical issues impacting CISOs today:

Accelerating security to match the pace of digital business initiatives

Managing the risk created from a landscape of new core technologies

Achieving sustainability for the CISO role without compromising outcomes

San Francisco CISO Governing Body


The Governing Body Co-Chairs shape the summit agenda, ensuring that all content is driven by CISOs, for CISOs.

Co-Chairs

Yassir Abousselham

Splunk
CISO

Selim Aissi

ICE Mortgage Technology
CISO

Krishnan Chellakarai

Gilead Sciences
Head of Information Security & Data Privacy (CISO)

Cassie Crossley

Schneider Electric Systems Usa Inc
Director, Product & Systems Cybersecurity

Devin Ertel

Blackhawk Network
CISO

Al Ghous

ServiceMax
CSO and Head of Security

Jeff Trudeau

Chime
CISO

What to Expect

Interactive Sessions

Hear from CISO practitioners and thought leaders on how they're solving critical challenges impacting your role today in Keynote sessions, and join smaller, interactive discussions with your peers in Breakout and Boardroom sessions.

Community Networking

Make new connections and catch up with old friends in casual conversations during dedicated time for networking designed to better acquaint you with your San Francisco CISO community.

Peer-to-Peer Meetings

Connect with like-minded peers in a private, one-on-one setting through Evanta's Peer-to-Peer Meetings. You will be matched with peers in your community based on your shared interests and priorities.

Agenda


December 6, 2021

6:00pm - 8:30pm  Governing Body Welcome Reception

Governing Body Welcome Reception

Exclusive to Governing Body members and select guests, this dinner is a can’t-miss opportunity to connect with your peers prior to tomorrow’s Executive Summit. Please join your colleagues for an evening of good food, wine, and lively networking.

December 7, 2021 - morning

7:30am - 8:15am  Registration & Breakfast

8:15am - 8:30am  Opening Comments

8:30am - 9:00am  Keynote

Stress and the CISO — Practical Strategies to Mitigate Burnout

Sheila Hamilton headshot

Sheila Hamilton

Mental Health Thought Leader and Author of "All the Things We Never Knew"

Guest Speaker

Today’s CISOs face daunting challenges. It is a balance between fighting off increasingly sophisticated attacks, managing scarce resources, and working with stakeholders that often don't understand the inevitability of a breach. Since there continues to be a knowledge gap about the criticality of the CISO’s role, it is no surprise that they’re experiencing stress and burnout at unprecedented rates. How can CISOs make their careers sustainable and maintain a sense of well-being?

Join this keynote to explore:

  • How to recognize the signs and symptoms of toxic stress and burnout.
  • How to remain engaged, energized, and focused during turbulent times
  • Methods to reduce stress at work and how to not let the stress overlap into personal lives
  • Mindfulness strategies that can help alleviate burnout
  • How to model work-life balance for Gen y and Gen z

9:00am - 9:15am  Break

9:15am - 10:00am  Breakout Session

A New Message for Automating Security Operations

John Jacobs headshot

John Jacobs

Field CISO

Fortinet

Each new system adds another stream of log and event information. These tributaries join the main river, often only to be viewed and processed by the same overburdened security operations staff recovering from the last application installation.

In this session, you’ll discuss:

  • New tools to help automate your security operations
  • Reducing the burden of repetitive tasks to free your staff to up-level their skillsets
  • Applying intelligent machine learning in easy-to-use functions

9:15am - 10:00am  Breakout Session

Pen Test Your Board Pitch — An Interactive Exercise

 Pitching to the board is a skill that must be mastered. CISOs are tasked to use visuals, communicate business value and synthesize complex information in a way that makes sense. Join this interactive session to identify the holes in your board pitch—and improve them for the next time you’re in the hot seat.

In this interactive session, you will work in a group to:

  • Create and deliver a board pitch
  • Receive real-time feedback on your pitch
  • Learn best practices and strategies for communicating with your board

9:15am - 10:00am  Executive Boardroom

Executive Boardroom hosted by Cloudflare

Joe Sullivan headshot

Joe Sullivan

SVP, Chief Security Officer

Cloudflare

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact your event Program Manager, Greg.Winterrowd@evanta.com

9:15am - 10:00am  Executive Boardroom

Enabling the Business as a CISO

As business leaders, CISOs also need to position themselves as business enablers. It is important to strategize and stay one step ahead to ensure the business cannot just stay secure, but grow effectively.

Come together with your peers to discuss:

  • Tactics for enabling your business whether you are B2B, B2C or B2B2C
  • Building a sales enablement playbook to use for your prospective clients
  • Ways to gain confidence, trust and transparency with your clients

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact your event Program Manager.

10:00am - 10:30am  Networking Break

10:30am - 11:15am  Breakout Session

Breakout Session hosted by Ermetic

Details coming soon!

10:30am - 11:15am  Executive Boardroom

The Art of Managing and Securing Workloads in the Cloud

Jon Anderson headshot

Jon Anderson

Director of Systems Engineering

SentinelOne

Although most organizations do an exceptional job of layering different technologies to secure their data, breaches continue to occur. So what's going wrong and how can you identify these blindspots? In many instances, the point of failure can be tracked to the user and their endpoint. In today’s changing landscape, CISO must demand a tight hold on the endpoints.

In this session, you can learn about:

  • What are the major Endpoint management capabilities you can implement
  • How you can combat the complex challenges of managing workloads in the new era
  • Ways you can continuously monitor endpoint metrics and manage system health

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact your event Program Manager, Greg.Winterrowd@evanta.com.

10:30am - 11:15am  Executive Boardroom

What Matters Most for Your Security Operations

Peter Silberman headshot

Peter Silberman

CTO

Expel

Since cybercriminals never rest, a sound SOC - staffed by the right people using the right tools in the right way - should be a key part of your cyber defense strategy. Whether your security operations program is completely in-house, outsourced, or operating in a hybrid model you’ll want to measure its effectiveness. How do you think about measuring efficacy and how do these metrics feedback into your program to increase operational maturity over time?

In this session you will discuss:

  • Volume and trend metrics that speak to effectiveness; what does good look like?
  • How does automation come into play and how do you monitor what the robots are doing?
  • What impact does this have on hiring and ongoing job satisfaction?

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact your event Program Manager, Greg.Winterrowd@evanta.com

11:15am - 11:25am  Break

December 7, 2021 - mid-afternoon

11:25am - 12:40pm  Peer-to-Peer Meetings

Peer-to-Peer Meetings

Connect with like-minded peers in a one-on-one setting through Evanta’s Peer-to-Peer Meetings. You will be matched with peers in your community based on your shared interests and priorities.

11:45am - 1:15pm  Lunch Service

12:40pm - 1:00pm  Break

1:00pm - 1:05pm  Lunch Comments

1:35pm - 1:50pm  Break

December 7, 2021 - afternoon

1:50pm - 2:35pm  Breakout Session

Next Gen Innovation Offense — Uniting DevSecOps

Mike Hansen headshot

Mike Hansen

SVP Engineering

Sonatype

This is NOT your typical security conversation. We won’t be talking about how to play better "perimeter defense" at the end of your software supply chain. Instead, we will be talking about how to play better digital “innovation offense” as next-generation software supply chain attacks become more sinister with bad actors actively injecting malicious code into open source projects that feed the global software supply chain.

Join us to discuss:

  • The prevalence of software supply chain attacks with real-world examples such as dependency confusion and how to continuously identify and remediate open source risk, without slowing down innovation
  • Ways to integrate security guardrails directly within your DevOps pipeline
  • The importance of uniting developers, security, and operations on the same team

1:50pm - 2:35pm  Executive Boardroom

Executive Boardroom hosted by Armis

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact your event Program Manager, Greg.Winterrowd@evanta.com.

1:50pm - 2:35pm  Executive Boardroom

Strengthening Your IAM Strategy

Moving beyond outdated tech and into a world of efficient, seamless access isn’t impossible. Fine-tuning IAM strategies is an important goal of CISOs across the country.

In this boardroom, you’ll discuss with your peers:

  • How to tailor an IAM strategy with limited resources
  • When to rely on legacy technology versus investing in new technology
  • What training is needed to strengthen your IAM program

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to C-level executives). To reserve your seat, please contact your event Program Manager.

2:35pm - 3:05pm  Networking Break

3:05pm - 3:50pm  Breakout Session

Featured Session hosted by Crowdstrike

Steve McMahon headshot

Steve McMahon

CIO & VP, Operations

CrowdStrike

Details coming soon!

3:05pm - 3:50pm  Executive Boardroom

Keys to Steadfast Security Awareness

Cybercriminals and nation-state hackers are brazenly exploiting human vulnerabilities, and no one is immune to security slip-ups. Recent high-profile incidents all resulted from social engineering techniques that successfully deceived employees. The CISO must instill discipline, responsibility and buy-in across a huge swath of users – no easy task.

Join this session to discuss:

  • How today’s society informs security awareness training needs and objectives
  • Training techniques that work at scale and resonate with audiences
  • Strategies to measure success and hold users accountable

3:05pm - 3:50pm  Executive Boardroom

Taking a Strategic Approach to Third-Party Risk

For many businesses, third-party vendors have become an important source of strategic advantage and business value. Yet outsourcing is not without its risks. As these external partnerships become increasingly complex, the need for a new strategic approach to vendor risk management is clear.

Join this session to discuss:

  • Ways to partner across the c-suite on third-party risk efforts
  • New approaches for managing third, fourth, and even fifth-party partners
  • Strategies that will help you make the best choices for your organization

3:50pm - 4:05pm  Networking Break

4:05pm - 4:10pm  Closing Comments

4:10pm - 4:40pm  Keynote

Bridging the Gap — Communicating Risk to the Business

Krishnan Chellakarai headshot

Krishnan Chellakarai

Head of Information Security & Data Privacy (CISO)

Gilead Sciences

Sujeet Bambawale headshot

Sujeet Bambawale

CISO

7-Eleven

When CISOs talk about risk, they need to move outside of the scope of information security and focus more on how risk applies to the business. If you don't make the shift, you may miss important priorities that can have a negative impact on business outcomes, in addition to your security posture.

In this keynote session, discover how you can:

  • Bridge the leadership communication gap to have more effective conversations with your business partners
  • Reprogram the role of the CISO to create moments of awareness that will embed security throughout the organization
  • Explain the balance of communicating both qualitative and quantitative risk

4:40pm - 5:10pm  Closing Reception & Prize Drawing

REGISTER

Returning to in-person conferences


We are excited to welcome you back, in person, to Evanta gatherings.

As previously shared, Evanta will hold in-person programs only in locations that meet our stringent health and safety criteria to help ensure the well-being of our participants, partners, and our associates. These criteria include adhering to government, venue, and health agency guidelines, in addition to taking all practical safety precautions onsite.

Please note that our onsite planning will continue to evolve, and all measures are subject to change to ensure the best and safest possible experience. Please refer to our COVID-19 Health and Safety Protocols for up-to-date local guidelines.

Location


Venue & Accommodation

InterContinental San Francisco

Your Community Partners


CISO Thought Leader
Key Partners
Program Partners

San Francisco CISO Program Manager


For inquiries related to this event, please reach out to your dedicated program contact.

Greg Winterrowd

Senior Program Manager

971-717-6628

greg.winterrowd@evanta.com