Understanding The Importance Of Cybersecurity In Healthcare Starts Here

A Millennium Alliance team member will be available at our registration desk right outside of the session rooms to assist executives with checking in and to answer any questions that may come up throughout the duration of the Assembly.

Our executive education roundtables are 1-hour conversations moderated by an industry thought leader. During these open discussions, our attendees have the opportunity to chat about the most relevant and current topics in the industry and share their thoughts with their peers.

Key Discussion Points:

• Unpacking the most critical cybersecurity trends of 2023 & what’s in store for 2024
• How geopolitics will continue to redefine hybrid warfare
• Addressing the cybersecurity skills shortage as we enter a period of recession

Key Discussion Points:

• Why & how to conduct a risk assessment and asset management for OT systems
• How to develop and implement an incident response plan to quickly detect, respond, and recover from cyber attacks, and how to develop a business continuity plan to ensure the continued operation of critical OT systems during and after an attack
• Benefits & challenges of network segmentation & access control

Key Discussion Points:

• How to assess and manage the cybersecurity risks associated with third-party vendors and suppliers
• Why you need a vendor risk management program to ensure the security of the supply chain, and how to implement it
• Unpacking the importance of continuous monitoring and audit of vendors beyond basic compliance
• Why it’s crucial to maintain open communication and collaboration with vendors to address any cybersecurity issues

Key Discussion Points:

• How to identify the critical assets and data that need protection and prioritize the implementation of MVS measures to protect them
• Using threat modeling techniques to identify the most likely and impactful cyber threats
• Applying the results of risk assessments and threat modeling to inform the implementation of MVS measures

Key Discussion Points:

• How cybersecurity can be a business enabler that enables organizations to achieve their business goals
• Identifying the cybersecurity risks that are most relevant to your business goals and aligning your security strategy with those goals to minimize risks and support business growth
• Incorporating security into the design and development of new products, services, and business processes
• Using security innovation to create competitive advantages and new revenue streams

Key Discussion Points:

• How the convergence of physical and digital spaces is changing the nature of cybersecurity threats and challenges
• Mapping the evolving threat landscape & conducting a risk assessment that considers the interplay between physical and digital threats
• Designing a security architecture that integrates physical and digital security measures, and how to implement security solutions that provide visibility and control across both physical and digital spaces

Key Discussion Points:

• Unpacking the different types of cyberinsurance coverage, including first-party and third-party coverage, and the factors to consider when selecting coverage, such as policy limits, exclusions, and endorsements
• Best practices for conducting a risk assessment that considers the factors that insurers use to underwrite cyberinsurance policies, such as security controls, incident response plans, and cybersecurity training programs
• How to develop an incident response plan that aligns with your cyberinsurance coverage and work with insurers to manage the claims process effectively

Key Discussion Points:

• Unpacking the benefits and limitations of the different types of testing that can be used to validate a cyber response plan, including tabletop exercises, simulations, and full-scale drills
• How & why you should involve stakeholders across the organization, including IT, legal, human resources, and communications, to ensure that response plans are effective and aligned with the organization’s needs and objectives
• Why ongoing testing and validation is crucial to ensure that response plans remain effective and up-to-date & how to document test results and incorporate feedback into response plans

A casual opportunity for executives to network with their peers with the opportunity to enjoy beer, wine, signature drinks, and light appetizers.

A formal sit down event that includes a three-course dinner, followed by an address from our Keynote Speaker.

A buffet style breakfast where executives can enjoy the most important meal of the day, followed by a Keynote Panel.

Key Discussion Points:

• Unpacking the ways in which major powers such as the United States, China, and Russia use hybrid cyber warfare as a tool of geopolitical competition
• What the new era of hybrid warfare means on the macro & micro levels
• Common tactics and techniques used in hybrid cyber attacks, and how organizations can detect and mitigate them
• How governments and businesses can collaborate to develop effective strategies for responding to hybrid cyber threats

Our roundtables are 1-hour conversations led by a fellow executive or one of our C-Level technology partners. During these open discussions, our attendees have the opportunity to chat about the most relevant and current topics in the industry and share their thoughts with their peers.

Key Discussion Points:

• How social engineering attacks take advantage of human psychology, such as trust, curiosity, fear, and urgency
• Actionable steps to assess and measure your organization’s vulnerability to social engineering attacks
• Best practices for mitigating social engineering risks, such as employee awareness training, security policies, and technical controls
• Trade-offs between user experience and security measures, and how organizations can find the right balance between the two

Key Discussion Points:

• How cloud security risks differ from traditional on-premise security risks
• Unpacking the unique challenges of securing multi-cloud or hybrid environments
• Compliance requirements that organizations need to adhere to when hosting sensitive data in the cloud, including PCI DSS, HIPAA, and GDPR

Key Discussion Points:

• Unpacking the risks associated with a lack of diversity in infosec, such as groupthink, blind spots, and homogeneity
• How organizations can create a culture of belonging and psychological safety for diverse employees in infosec
• Integrating DEI considerations into your information security governance frameworks, such as risk assessments, incident response, and compliance

Our roundtables are 1-hour conversations led by a fellow executive or one of our C-Level technology partners. During these open discussions, our attendees have the opportunity to chat about the most relevant and current topics in the industry and share their thoughts with their peers.

A buffet style lunch where executives can recharge and prepare for the second half of the day.

Key Discussion Points:

• Understanding the board’s role in cybersecurity, and why it’s important for them to be informed about the organization’s cybersecurity posture
• Best practices for effective board communication on cybersecurity, such as regular reporting, incident response planning, and cybersecurity training
• Navigating the challenges and opportunities of board-cybersecurity dynamics, such as conflicting priorities, differing perspectives, and varying levels of expertise

Key Discussion Points:

• How automation can help security teams manage the growing volume and complexity of security threats and compliance requirements
• Understanding the challenges and opportunities of the human-machine interface in security operations and compliance, such as the need for human oversight, decision-making, and intervention
• Ensuring that your automated security operations and compliance workflows are consistent with industry standards and regulations, including ISO 27001, PCI DSS, and GDPR
• How automation tools and technologies can be integrated with existing security infrastructure and workflows and effectively managed and maintained over time

Key Discussion Points:

• Unpacking key trends and developments in the regulatory landscape, including new data protection regulations, increasing cybersecurity requirements, and the changing geopolitical environment
• Leveraging compliance with regulatory requirements to improve your overall information security posture and demonstrate your commitment to security to customers and stakeholders
• Effectively communicating your compliance efforts and strategies to customers and stakeholders, and leveraging compliance to build trust and confidence in your brand

Key Discussion Points:

• How organizations can identify and mitigate deep intrusion scenarios and the best practices for responding to these threats
• How to ensure that your security technologies, such as firewalls, intrusion detection systems, and endpoint protection, work together to provide comprehensive protection against deep intrusion scenarios
• Best practices for monitoring and measuring the effectiveness of your security program and continuously improving and adapting your defenses to address evolving threats

Each year, we recognize the most exceptional C-Level executives who have made their mark as a visionary in their industry and continue to innovate for the future. We close out Day 2 of the Assembly by announcing the winner and honoring all of the incredible nominees.