IN-PERSON

Seattle CISO Executive Summit

December 11, 2019 | Grand Hyatt Seattle

December 11, 2019
Grand Hyatt Seattle

Governing Body Agenda Location Partners Contact

Governing Body Co-Chairs

Brian Abrahamson

Pacific Northwest National Laboratory
CIO

Anja Canfield-Budde

University of Washington
Associate Vice President, Information Management

Darren Challey

Amazon
CISO, Amazon Fulfillment & Operations

Dave Estlick

Starbucks Coffee Company
CISO

Chuck Markarian

PACCAR Inc
CISO

Agenda

CISO AGENDA CIO AGENDA

December 10, 2019

afternoon

December 11, 2019

morning mid-afternoon afternoon

6:00pm - 8:30pm Governing Body Welcome Reception

Governing Body Welcome Reception

Governing Body members host this dinner to launch the event with an evening of peer networking.Please join us at the SkyLine at the Space Needle for a stunning view of the city while networking with colleagues.

7:30am - 8:15am Registration & Breakfast

8:15am - 8:25am Opening Comments

8:30am - 9:00am Keynote

Female Focus — Closing the Gender Gap in IT and Security

Jonathan Sposato

Chairman & Co-Founder

Geekwire

What does gender equality bring to the business? Jonathan Sposato has discovered working with women leads to extraordinary products and profits. Businesses in all sectors can benefit when women are staffed on leadership teams. In this inspiring keynote session, you will learn implementable solutions that ensure women thrive within the organization.

Join Jonathan Sposato as he shares:

Issues that affect gender equality in the workplace
How to create gender equality and build representation for women
How as an executive you can foster an inclusive workplace

9:00am - 9:20am Networking Break

9:20am - 10:10am CISO Featured Session

Digital Risk Explosion — Managing Risk in a Hyper-Outsourcing World

Neal Roylance

Director of Operations

RiskRecon

Digital transformation has dramatically transformed the enterprise risk surface, automating a vast array of processes while outsourcing a vast array of systems and services. Through this frenetic reshaping, few organizations truly understand the nature of their new risk reality and how to successfully manage it.

In this interactive discussion we will:

Explore the true nature of the enterprise cyber risk surface
Discuss threats and regulations driving organizations to better manage their extended enterprise
Share insights on how to better manage third-party risk (hint: good data!)

9:20am - 10:10am CISO Executive Boardroom

Cyber-Risk Management — New Approaches for Reducing Your Cyber-Exposure

Will Longman

CISO

Blue Origin

Phillip Hayes

Manager, Cloud Security

Tenable

Jim Gibson

Director, IT Security

Weyerhaeuser

When it comes to reducing cyber exposure, overcoming vulnerability overload is critical. Find out how to improve your vulnerability management efforts so you can close your cyber exposure gap and focus on what matters most to your business.

During this peer discussion, you will explore how to:

Translate raw vulnerability and threat intelligence data into business insights
Benchmark your organization’s cyber exposure to guide decision making
Use threat intelligence to move the most dangerous vulnerabilities up your priority list

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISOs executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

10:10am - 10:30am Networking Break

10:30am - 11:20am CIO & CISO Featured Session

CIO-CISO Collaboration — True Peers and Partners

Lily Ley

CIO & VP

PACCAR Inc

Chuck Markarian

CISO

PACCAR Inc

Dave Estlick

CISO

Starbucks Coffee Company

The CIO-CISO partnerships are built on trust and thrive when leaders invest in each other throughout the organization. PACCAR’s CIO Lily Ley and CISO Chuck Markarian will share how they collaborate in different business sectors, but share in their goal to move business initiatives forward.

In this session, they will share how:

Separate but united forces play off each other’s strengths
Security is represented as a holistic element of the organization
Partnerships generate improved visibility for everyone

10:30am - 11:20am CISO Featured Session

AI – Marketing Hype vs. Reality

Keith Rayle

Strategist

Fortinet, Inc.

Join Keith Rayle from Fortinet for a brief history and workings of artificial intelligence (AI), to include current and future phases of AI deployment for solving problems. This discussion will examine the use of AI in security tools implementations.

Join this session to learn:

Strategies for deploying AI-based solutions
Cybercriminal uses of AI and what to expect from future attacks
Management potential using AI-based architectures

10:30am - 11:20am CISO Executive Boardroom

Zero-Trust is a Journey, Not a Destination

John Criddle

Director of Infrastructure & Security

Lithia Motors Inc,

Wolf Goerlich

Advisory CISO

Duo Security

Dennis Tomlin

CISO

Multnomah County Oregon

One of the inherent problems for CISOs is how too many things run way too openly with too many default connections. This significant issue has led some to adopt a Zero-Trust model to simplify security holistically. In other words, Zero-Trust centers on the belief that organizations should not automatically trust anything inside or outside its perimeters and instead must verify anything and everything trying to connect to its systems before granting access.

In this interactive session, learn from your peers:

How to use and leverage technologies that you already have as you lay down a Zero-Trust architecture
How ‘defense in depth’ security models have become too complex for some on this journey
Discuss cloud migration and mobile journeys as it relates to a Zero Trust

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISO executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

11:20am - 11:45am Networking Break

11:45am - 12:30pm Lunch & Comments

Lunch & Interactive Discussion

In this networking lunch you have the opportunity to have relevant and topical conversations with your peers. The below questions are a guideline for you to start your table conversations.

Digital transformation

How do you define digital transformation?
Transform or optimize? Are you changing your business model or are you optimizing your current business model with digital?

Security operations

How have you decided what to outsource and keep internally?
How have you developed effective principles and procedures for a security operations center?
What best practices have you identified in evaluating incidents in the environment?

Delivering business value

How do you help the business make better decisions and reduce friction for major change initiatives?

Communicating risk

Which metrics will help you craft a compelling story that inspires action?

Talent and developing leaders

What is your greatest challenge related to developing and retaining your top talent?
As a leader, how are you supporting growth amongst your top talent?
How do you keep people motivated and continuously redirecting and retooling themselves?

12:30pm - 1:00pm Keynote

Transforming Agility & Security in a Cloud World

Jay Chaudhry

CEO, Chairman & Founder

Zscaler, Inc.

The cloud and mobility are powerful enablers of digital transformation, but many IT organizations are grappling with legacy architectures and processes that haven't evolved in over 30 years. When apps lived in the data center, it made sense to invest in building a 'hub-and-spoke' network and to protect that network by employing a 'castle-and-moat' security model. But agility demands from both internal and external stakeholders in the new world of SaaS, cloud and mobility requires organizations to evolve their network and security architectures.

1:00pm - 1:20pm Networking Break

1:20pm - 2:10pm CISO Featured Session

Security Awareness – How to Change Your Culture through a Security Champions Program

Michael Wodka

Senior Principal, Advisory

Gartner

Security organizations consistently struggle with communicating the importance of a culture that is security-aware. Michael Wodka will share how to leverage a security champions program to improve employee awareness efforts and mitigate business exposure to employee risks.

In this session you’ll learn how to:

Avoid the common pitfalls in employee awareness efforts
Manage your security culture and improve employee behaviors
Build a security championships program

1:20pm - 2:10pm CISO Executive Boardroom

Implementing Cloud Security

Julie Ellis

VP, Information Security Architecture

The Walt Disney Company

Gary Gooden

CISO

Seattle Children's

JR Tietsort

CISO

Darktrace

The speed and flexibility of the cloud provide numerous benefits to businesses, but also pose unique security challenges. The cloud creates new vulnerabilities, blind spots, and threat vectors. As businesses look to advance their cloud strategy, it is critical that security is part of these conversations from day one.

In this session you’ll uncover how to:

Review the threats and challenges of a cloud business
Enhance cloud performance and security
Integrate cloud security into your broader security strategy

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to ClSOs executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

2:10pm - 2:30pm Networking Break

2:30pm - 3:20pm CISO Executive Boardroom

Third Party Risk Management – Working Through Thick and Thin

Ronald Jimerson

CISO

Port of Seattle

Sean Murphy

SVP, CISO

Boeing Employees' Credit Union

Many companies have strong dependencies upon third party providers of equipment, software or services. Effective management of these relationships are critical enablers for many business processes. Understanding these complex interrelationships and implementing effective control mechanisms is increasingly becoming imperative and often falls within the responsibilities of the information security team.

Join this interactive session to discuss questions that must be answered:

How do your most critical business processes have dependencies upon third parties
What should be within the legal agreements
How can these agreements be validated and enforced in practice
If your requirements indicate third party support, do you need to also have support agreements
What dependencies have your third parties taken upon other parties
Can you maintain these important relationships to be mutually beneficial for both parties

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CISO executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

3:20pm - 3:40pm Networking Break

3:40pm - 3:50pm Closing Comments

3:50pm - 4:30pm Keynote

Women in Leadership — Making an Impact

Kelli Burns

VP & CISO

Symetra

Tanya Hannah

CIO

King County, WA

Dawn Mendenhall

Divisional CIO

Portland General Electric Company

Jennifer Steinman

CIO

Univar Solutions

Deena Pierott

Founding Member

Black Women STEM 2.0

Together, this panel of senior IT and security leaders reflect on their distinguished careers, offer insights from their journeys, share learnings and how they want to impact the future within their industries.

In this session they’ll discuss:

How they've handled and overcame unconscious bias
What they are doing to mentor and encourage other female leaders
What steps should leaders take to give more women and minorities a voice in leadership

4:30pm - 5:00pm Closing Reception & Prize Drawing

7:30am - 8:15am Registration & Breakfast

8:15am - 8:25am Opening Comments

8:30am - 9:00am Keynote

Female Focus — Closing the Gender Gap in IT and Security

Jonathan Sposato

Chairman & Co-Founder

Geekwire

Join Jonathan Sposato as he shares:

Issues that affect gender equality in the workplace
How to create gender equality and build representation for women
How as an executive you can foster an inclusive workplace

9:00am - 9:20am Networking Break

9:20am - 10:10am CIO Featured Session

Building a Strong Case for IT as a Business Driver

Saad Bashir

CTO

City of Seattle

Lutz Beck

CIO

Daimler Trucks North America

Jim Phelps

Director of Enterprise Architecture & Strategy

University of Washington

CIOs must sharpen their leadership and communication skills, particularly when it comes to addressing the needs and expectations of the organization. As the CIO’s role expands from a sole focus on technology to being true business partners leading innovation efforts, they must be laser-focused on the strategy behind it all.

Our panel of CIOs will share how:

How to successfully push business strategies and manage priorities
How IT can become a revenue-generator
How to convince leadership of the indispensable value of IT

9:20am - 10:10am CIO Executive Boardroom

Managing Data Governance and Regulations

John Rodgers

Vice President & Information Officer

Kaiser Permanente

Lisa Wernli

EVP & CIO

Car Toys, Inc. and Wireless Advocates

A data-driven organization must have clearly defined governance and business alignment if there is any hope of imbuing their information with meaning. How does a business use data to drive insights while driving success?

In this interactive conversation, you’ll explore:

The definition of data and what technologies are available
What alignments can be made between IT and the business
How the insights drive your organization – customers and industry

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CIOs executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

10:10am - 10:30am Networking Break

10:30am - 11:20am CIO & CISO Featured Session

CIO-CISO Collaboration — True Peers and Partners

Lily Ley

CIO & VP

PACCAR Inc

Chuck Markarian

CISO

PACCAR Inc

Dave Estlick

CISO

Starbucks Coffee Company

In this session, they will share how:

Separate but united forces play off each other’s strengths
Security is represented as a holistic element of the organization
Partnerships generate improved visibility for everyone

10:30am - 11:20am CIO Executive Boardroom

Understanding the Business – Give and Take

Charu Jain

VP & CIO

Alaska Air Group, Inc.

James Weaver

CIO

State of Washington

Today’s digitization wave puts IT under pressure to be more disruptive. While the demand for apps is exploding, many organizations struggle to fulfill business needs. Communication has become the central point of determining the relationship from the business to IT.

This roundtable will explore:

Lessons learned in business and IT alignment, talent scarcity and rapid application delivery
How to translate the business needs into an IT value delivery proposition
The evolution of agile thinking and approach

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CIOs executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

11:20am - 11:45am Networking Break

11:45am - 12:30pm Lunch & Comments

Lunch & Interactive Discussion

In this networking lunch you have the opportunity to have relevant and topical conversations with your peers. The below questions are a guideline for you to start your table conversations.

Digital transformation

How do you define digital transformation?
Transform or optimize? Are you changing your business model or are you optimizing your current business model with digital?

Security operations

How have you decided what to outsource and keep internally?
How have you developed effective principles and procedures for a security operations center?
What best practices have you identified in evaluating incidents in the environment?

Delivering business value

How do you help the business make better decisions and reduce friction for major change initiatives?

Communicating risk

Which metrics will help you craft a compelling story that inspires action?

Talent and developing leaders

What is your greatest challenge related to developing and retaining your top talent?
As a leader, how are you supporting growth amongst your top talent?
How do you keep people motivated and continuously redirecting and retooling themselves?

12:30pm - 1:00pm Keynote

Transforming Agility & Security in a Cloud World

Jay Chaudhry

CEO, Chairman & Founder

Zscaler, Inc.

1:00pm - 1:20pm Networking Break

1:20pm - 2:10pm CIO Featured Session

Right-Sizing Risk: How to Talk to the Board About Cybersecurity

John Matthews

CIO

ExtraHop

As enterprises grow increasingly reliant on technology for every aspect of operations, CISOs have found themselves in a completely new operations center: the boardroom. Headline-grabbing breaches can draw a lot of attention from business stakeholders and board members, but staying focused on the likely scenarios offers the best protection. In this session Costlow will share strategies for discussing security and technology priorities at the board level.

Put risk in perspective and focus on your plan for recovery
Understand the gaps in your program and come with a plan to fill them
Focus on business risk/reward by mapping core security priorities to business objectives
Create a roadmap to “Yes” by prioritizing business performance without sacrificing security

1:20pm - 2:10pm CIO Executive Boardroom

Reaching Customers in the Digital Environment

Laurent Rotival

SVP, Strategic Technology Solutions & CIO

Cambia Health Solutions

B.J. Moore

Executive Vice President & CIO

Providence St. Joseph Health

As the CIO of your company you are at the epicenter of the digital transformation. You have a vital role in steering your business towards new opportunities arising from new technologies, while also addressing the challenges in your market caused by the digital disruptions.

We will discuss:

How the creation of a customer-centric organization is impacting the role of the CIO
The alignment of (new) technologies, processes and people
Establishing end-to-end platforms integrating back-end and front-end applications

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CIO executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

2:10pm - 2:30pm Networking Break

2:30pm - 3:20pm CIO Featured Session

Building a Strategic Partnership

B.J. Moore

Executive Vice President & CIO

Providence St. Joseph Health

How to build a strategic partnership with a tech company? B.J. Moore will share Providence St. Joseph Health IT strategic pillars and how these help frame strategic relationships with key tech industry players

In this session you’ll hear how:

Strategic partnerships with your vendors can lead to increased productivity for both organizations
Modernizing IT can impact the long term success of the organization
As a CIO you can accelerate innovation and build for the future

2:30pm - 3:20pm CIO Executive Boardroom

RPA – Automation’s Golden Age

Tamara Barr

VP IS/CIO

Continental Mills, Inc.

Ravi Waran

VP & CIO

Clearwater Paper Corporation

Toss out the manual on redundancies in the business process; RPA is automating its way to greater efficiencies and a brighter bottom line. This CIO session is a mix of RPA advocates, early adopters and outside observers — joining forces to learn from each other and explore:

How peers have deployed RPA— what has worked and what needs work
How to measure the return on investment for automated processes
How automation is being successfully deployed across the enterprise
How to overcome human barriers — such as employee engagement and leadership buy-in — to realize the full potential of RPA

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 attendees (seating priority is given to CIOs executives). To reserve your seat, please contact Chanelle Lawrence at 971 978 5049 or chanelle.lawrence@evanta.com.

3:20pm - 3:40pm Networking Break

3:40pm - 3:50pm Closing Comments

3:50pm - 4:30pm Keynote

Women in Leadership — Making an Impact

Kelli Burns

VP & CISO

Symetra

Tanya Hannah

CIO

King County, WA

Dawn Mendenhall

Divisional CIO

Portland General Electric Company

Jennifer Steinman

CIO

Univar Solutions

Deena Pierott

Founding Member

Black Women STEM 2.0

In this session they’ll discuss:

How they've handled and overcame unconscious bias
What they are doing to mentor and encourage other female leaders
What steps should leaders take to give more women and minorities a voice in leadership

4:30pm - 5:00pm Closing Reception & Prize Drawing