Businesses that use industrial control systems, such as the oil & gas industry, have the same cybersecurity exposures that are found in non-industrial businesses: theft of intellectual property, exposure of customer and employee information, exposure of financial information, etc. However, these businesses have the added exposures associated with the industrial control systems used in the manufacturing or production processes. These include safety and health of the company’s workers, safety and health of the public near the industrial installations, impact on the environment, regulatory compliance, and more. As a result, cyber-attacks and other IT security issues have become a top industry concern.

The presentation will focus on discussing:

• The unique risks;
• Associated impacts on organizations, employees and customers;
• High-level solutions for protection.

Publicly listed companies are meant to recognize contingent liabilities, which are liabilities that may be incurred depending on the outcome of an uncertain future event, on their balance sheets. Cyber incidents are increasingly probable and known to impose costs and losses on businesses. Boards, regulators, insurers and investors are increasingly asking what these contingent liabilities might amount to following a series of high-profile cyber incidents in recent years (e.g., the Yahoo!/Verizon merger). Yet many companies still do not make contingent liability provisions for cyber incidents. This session will examine methods to estimate the financial impact of various classes of security incidents and introduce attendees to a framework for estimating the contingent liabilities that their companies might face in the future.

Sponsored by Sonatype

Business email compromise (BEC) attacks that impersonate executives and business partners to trick employees comprise the biggest cyberthreat organizations face today. This is not news. But what may come as a surprise is that the vast majority of BEC attacks are preventable. This session will review why email spoofing works, the role social media plays in social engineering, current BEC trends and attack methods, and advances in technology that are being used to identify and block BEC attacks before they hit the inbox.

We often hear about the Dark Web and how criminals use it to commit criminal activity. This session will dive deeper into how the Dark Web operates and how fraudsters hide their identify and buy/sell illicit good and services with anonymity.  The following topics will be covered:

• See how the Dark Web works
• Understand how fraudsters operate on the Dark Web
• What organizations can do to protect their data from being bought/sold on the Dark Web