SafeBreach Validate

Welcome & Keynote – Demystifying Your Defenses – State of Continuous Security Validation

• Guy Bejerano; CEO & Co-Founder, SafeBreach
• Mark Ehr, 451 Research

In late 2022, SafeBreach commissioned S&P Global Market Intelligence to conduct a research project surveying 400 highly qualified security practitioners across the United States and Europe. The goal was to understand respondents’ biggest security challenges, the level of adoption and maturity of the continuous security validation (CSV) tools they use to address those challenges, and the business outcomes they achieved.

During this session, we will dive into the findings that indicated that while organizations continue spending more on security every year, they remain plagued by the burden of increasing compliance requirements, escalating costs and risks associated with the ever-expanding attack surface, and unrelenting malware/ransomware attacks. Additionally, in the face of economic headwinds, security professionals are looking to reduce business risk and prove to executive stakeholders that their security budgets are being spent prudently and effectively to protect their organizations.

• Sherry Ryan, Former CISO; Juniper Networks
• Patrick Benoit, CISO; Brinks
• Mick Brons, Manager, Cyber Security Assurance; Southern Company

Overseeing cybersecurity risk is a crucial and ever-expanding role for board directors, and it remains a top priority on their agendas. Unfortunately, many boards have failed to fully comprehend the severity of cybersecurity risks, resulting in large-scale breaches with costly and devastating outcomes. According to a recent study, as much as 85% of board members believe that IT and security executives need to enhance their reporting to the board to help them better grasp the extent of the risks involved.

During this session, our panel will discuss ways to communicate risk and your cyber security strategy to stakeholders simply. We’ll also discuss how to:

• Communicate the ways adversaries think
• Put data in everyone’s hands
• Optimize investment based on business-risk

Attacking Your Way to Accurate Answers: What the Previous Years’ Attacks Can Tell Us & How to Efficiently Test Against the Latest One

• Tomer Bar, SafeBreach

It’s no secret that the attack surface is increasing and the best defense is one that’s matched to the most relevant risks. Through proactive and reactive research, The SafeBreach Labs team helps customers discover their most critical threats and security gaps by building the industry’s most current and complete playbook of attacks.
In this session, SafeBreach Director of Research Tomer Bar will share how attacks are conducted, which APT group have been the most active, and what risks they pose to enterprises. Tomer will also:

• Discuss how to leverage recent vulnerabilities to gain accurate insights
• Preview new research the team is working on and ways to easily access the most recent updates
• Share insight into recent CVEs the team has uncovered and how they impact your organization

• Zac Fletcher, CISO; SCI
• Joshua Myers, Director of Security Operations Center & Incident Response; Confidential
• Mick Brons, Manager, Cyber Security Assurance; Southern Company 

In a recent survey conducted by S&P Market Intelligence, 94% of respondents expect to spend more on security. Yet, their teams only access 50% of their tools, and they don’t feel they are resilient to an attack. So with all of this buying, what’s really happening?

During this session, our panel will share their insights and experience on how to maximize your current security solutions, identify false promises from vendors, and improve your overall cybersecurity posture by optimizing what you have. We’ll discuss ways to:

• Evaluate if you have the correct defenses deployed
• Determine if your potential new purchases stand up to vendor promises
• Hold your vendors accountable.

During this session one of our clients from an FSI will walk you through how they reduced dwell time for discovering unknown problems in the alert pipeline. Specifically through validating:

• Security tools
• SIEM logs
• Ticketing processes

• Yves-Laurent Sivuilu, Director, Cortex Systems Engineering; Palo Alto Networks

• Koby Bar, SafeBreach

The mandate for security teams is clear—to defend their organizations against cyber threats. What’s less clear is exactly how they can effectively understand and share the impact of a security program that often utilizes dozens of different controls, tools, and reports. CISOs and executives need one simple way to communicate with stakeholders that cuts through the jargon and avoids getting lost in the technical details.
During this session, we will discuss how you can distill your attack simulation results about security control performance into a high-level snapshot of a security program’s efficacy to:

• Quantify Security Posture with a Clear Score
• Track Improvements & Identify Performance Gaps
• Analyze Attacks & Optimize Remediation Efforts

• Frank Duff, Chief Innovation Officer; Tidal Cyber

• Jenn Huff, Experian

As enterprise adopt new technologies to increase business efficiencies and drive new business, they are now operating with new applications, devices, and infrastructure. This not only increases their attack surface, but also the level of risk to their company and customers. As traditional scanning and testing technologies struggle in a multi-cloud world, many enterprises are looking for new solutions, but many are not sure where to start.

During this session we will hear from a SafeBreach client who will share their own experiences with Cloud and share how you can cut through the noise and simplify the testing of cloud controls.

• Koby Bar, SafeBreach

• Dr. Joyce Hunter, ICIT
• Beth-Anne Bygum, Acxiom
• Andrzej Cetnarski, Cyber Nation Central
• Moderator: Avishai Avivi, SafeBreach 

We all know staying compliant with legislation and regulation is a must. However, with modernization and the volatile market, keeping up with the constantly evolving legal and regulatory requirements can take time and effort for any enterprise.

During this panel, we’ll explore the strategies that security teams need to stay updated with the growing governance and reporting requirements. We’ll also discuss the latest industry consolidation trends and how to navigate them confidently.