With the rise in emerging technologies such as Artificial Intelligence (AI), Internet-of-Things (IoT) and Blockchain, cyber threats are getting more sophisticated and frequent. A traditional cybersecurity strategy is no longer sufficient to secure an enterprise’s assets. The challenge is heightened with the shortage of cybersecurity professionals, limited budget in cyber defence, data privacy, cybersecurity law, compliance and the emergence of innovative technologies such as cloud and big data. Get insights on what other obstacles organisations will potentially encounter and what will the cyberspace look like in 2025.

Enterprise is realising breaches are inevitable, leading to the rise of the zero-trust discussion. Yet considering the why, what and how is something less well known. Applying critical starting points in the application of Zero-Trust is core to successfully improving the security of crown jewel applications inside your data centre and cloud environments.

The acceleration of digitalisation and mobility has led to more complex network environments and increased enterprise usage of endpoint devices. Cloud adoption is also on the rise. Consequently, more resources are needed to manage and ensure the security of enterprise networks.

Are the attack surfaces bigger now? Are our assets secure enough when we use public or hybrid cloud models?

In this track, speakers will focus on network security, how strong endpoint security is essential in preventing malware from bypassing the perimeter security and introducing outside threats into the environment. We will also share on how enterprises can drive digitalisation with better security, simplified IT and efficient IT spending.

---

1:30pm	Flipping the Cyberdefense Equation Back in Our Favour Far too often, the cybersecurity industry focuses too heavily on all the advantages attackers have. We’ve all heard the saying: “Defenders have to be right 100% of the time while attackers only have to be right once.” Well, what if we could flip that equation? As defenders, we have the home field advantage, so why does it seem like we are consistently losing? In order to shift this model and tip the scales back in our favor, we need to be thinking about “Disruption in Depth” rather than just “Defense in Depth.” We need to be making attackers’ lives significantly harder. Attackers make mistakes all the time. Let’s make them have to be 100% right all the time instead of us. Matthew Bennett Vice President & Managing Director, Asia Pacific & Japan, Carbon Black
2:00pm	New Challenges Introduced by The Enterprise Cloud Transformation, and Understand What Role Zscaler Can Play It is proven that cloud transformation increases enterprise business agility and productivity, but at the same time introduces many new challenges to enterprise traditional network and security infrastructure. This session is to highlight those challenges, and share what role Zscaler can play to facilitate the transformation. Jones Leung SE Manager, Zscaler
2:30pm	Transforming Security through Cloud The cloud is changing how we do business, making work more intuitive, connected, open, and collaborative. That change has also rippled across SaaS, IaaS, and the web, presenting a suite of new security challenges. Most security solutions, however, are still architected to address perimeter-based and on-premises security challenges. In this session, we will share industry case studies on how being “data-centric and in the cloud” can drive velocity and scale in your security programs. Nicholas Tay Regional Director, ASEAN/GCR/KR, Netskope
3:00pm	Cortex XDR: Break Detection & Response Silos to Stop Sophisticated Attacks Sam Bryce-Johnson Systems Engineer Specialist, Palo Alto Networks

The depletion of organisational resources and outdated security architectures are inadequate to handle today’s threats. Consequently, these security loopholes are now the prime targets for cyber attacks. This has led to a substantial rise in demand for experts with extensive experience using tools and techniques that rival the ingenuity of today’s advanced attackers.

This track will focus on advanced technologies as well as consulting services. Speakers will place focus on how advanced technologies can help detect anomalous activities, analyse user behaviours and respond to cyber attacks. Security experts will also be on hand to provide consultation on how attendees can transform their security capabilities.

---

1:30pm	How Cyber Security Ratings bring Visibility, Scalability and Collaborations to your Vendor Risk Management Program? We see evidence of a growing attack surface as more organizations outsource critical business functions to business partners and vendors. A recent survey found that 57% of organizations in the Asia Pacific region reported a substantial increase in the risk posed to them from third party relationships due to increased reliance and dependence on these third parties. The management of these third-party risks become a big challenge to these organizations. In this area, Bitsight brings visibility, scalability and collaborations for organizations to management their vendor risks more effectively and efficiently. For more information, please visit www.bitsight.com. Carla Morss Managing Director of Sales, APAC, BitSight Technologies
2:00pm	Transforming Your Data Protection Strategy: A Cloud-Native and Unified Game Plan Organizations are creating and storing more data than ever, often across multiple locations. Neither reality will reverse trend, especially as more worldwide regulations require longer storage times. The challenge, then, lies not only in keeping track of all the information an enterprise produces but also in backing it up efficiently, archiving it and having it readily recoverable in case of a disaster. Along with that comes the question of whether to store more than one copy of the same data – an expensive and time-consuming proposition. Many organizations still think they have little choice, and the continue to duplicate data, often in whole-file form. This hogs bandwidth, consumes resources and valuable employee time, and drives up costs. In this session, Patrick will share how Druva has been helping organizations globally overcome these challenges. Druva delivers data protection and management for the cloud era. Druva Cloud Platform is built on AWS and offered as-a-Service; delivering globally accessible, infinitely scalable and completely autonomous enterprise data resiliency. Customers drive down costs by over 50 percent by freeing themselves from the burden of unnecessary hardware, capacity planning, and software management. Patrick Lam Regional Director – GCR & ASEAN, Druva
2:30pm	Red teaming: Benefits to business can be profound impact The number of attacks are increasing. With the changing threat landscapes, red teaming plays an important role as it helps organisations to identify gaps and weaknesses while accessing your sensitive systems and data. It is backed by our world-renowned research team, who has access to billions of security events, multiple threat database feeds and years of cumulative experience discovering zero-day vulnerabilities. Through simulating real attacks such as Advanced Persistent Threats (APTs) and ransomware-based threats, favourable learning outcomes will benefit enterprises to enhance its offensive capability. Kevin Tran Director, Asia Pacific & Japan, Trustwave SpiderLabs
3:00pm	Mitigating Cybersecurity Risk through Implementation of Cybersecurity Management System William Wong Assessment Manager, Hong Kong Quality Assurance Agency

[12:30pm - 4:00pm]

Today’s highly-evolved threat landscape calls for higher levels of readiness. Besides being equipped with security technologies, the ability of your team (both IT and non-IT) to communicate and work cohesively under pressure during a gruelling security incident is key to your success in identifying, mitigating and responding to cyber threats.

In this session, Singtel Cybersecurity Institute (CSI), with Control Risks and Finsbury, will train corporate function heads and C-suites via a table-top exercise. With a scenario role-play, participants can understand how corporate function heads need to work together, strategically and operationally, to respond to cyber crises.

[1:30pm - 3:30pm]

Digitalisation has increased the amount of personal data being shared. Consequently, enterprises, especially those in the travel and hospitality sectors are subject to greater risks and more vulnerabilities than ever before, given the amount of such data they handle every day. How can enterprises minimise security loopholes or human vulnerabilities that could open their organisations to data breaches, and ensure they can respond when a data breach occurs?

In this session tailored for the travel and hospitality sectors, cybersecurity experts from Trustwave will share their thoughts on recent data breach incidents; deep dive into the preventative and proactive approaches needed to protect organisational data and assets in different stages and; have a consultative discussion based on attendees’ security architectures.