Security Summit: Getting the Edge on Cyber Threats

In October 2015, the Office of Management and Budget released its much-anticipated Cybersecurity Implementation Plan (CSIP), a multi-pronged initiative aimed at getting agencies up to speed on cybersecurity. The strategy reflects the dual realities of the cybersecurity challenge: The increasingly diverse and sophisticated nature of today’s cyber threats, and the increasingly complex nature of the federal enterprise to be protected.

A string of high-profile data breaches in the public and private sectors made it abundantly clear that the cyber threat landscape had changed. First, the distinction between external hackers and insider threats has blurred, as outside parties have proven how easily they can obtain network credentials and wreak havoc from within. Second, the attacks put agencies on notice that cybersecurity was not just a matter of defense but of resilience: Agencies needed to accept that some attacks would succeed and plan accordingly, putting a greater emphasis on risk management, continuous monitoring, and threat detection and response. The situation is all the more challenging because cloud, mobility, and related solutions are extending the federal enterprise, potentially creating more openings for proliferating cyber threats.

This event will provide attendees with insights into emerging tools and techniques for developing a comprehensive cybersecurity and improving their cyber resilience. Potential topics to be addressed include:

• Best practices in risk assessment and management
• Continuous monitoring and mitigation strategies
• Advanced applications of identity and access management
• Vulnerability/penetration testing
• Integrated mobile security
• The convergence of cyber and physical systems
• Next-generation fraud management