Registration, Badge Collection & Refreshments

45min

Welcome & Introduction

Tyron McGurgan, Chief Executive Officer, Focus Network

5min

Tyron McGurgan

Tyron McGurgan is an accomplished entrepreneur, media specialist, and events professional with over 17 years of experience in the industry. He is [...]

Master of Ceremonies

Andrew Milroy, Chief Research Advisor, Focus Network

5min

Andrew Milroy

Andrew Milroy is Focus Network’s Chief Research Advisor. He is a well-known technology thought leader and speaker in the APAC region. He has [...]

Opening Keynote Presentation – Cybersecurity Modernisation with A Threat-Informed Defence

The traditional network infrastructure model of centralised corporate data centres secured by on-premises network perimeters does not work today. Data that once resided in data centres is now in the cloud, on SaaS applications, and on endpoints. This presentation will focus on the need for companies to transform and modernise their approach to cybersecurity, and adapt to the constantly changing threat landscape. Key takeaways will include, the benefits of a threat informed defence and the how to secure assets that sit outside the traditional network perimeter.

20min

Keynote Panel Discussion – Mitigating Ransomware Risk

Panellists:

Francis Yeow, Country Information Security Officer, Parkway Hospitals Singapore Pte Ltd

Sandeep Kohli, Managing Director & CISO APAC, State Street

Leonard Ong, Regional Information Security Officer, Intercontinental & China, GE Healthcare

Moderator: coming soon

Recently, we have seen a series of devastating ransomware attacks which have included attacks on critical infrastructure. We’ve also seen an increase in attacks on soft targets such as schools and hospitals.

Key discussion points in this panel will include, the reasons why the threat from ransomware is increasing and the best ways to mitigate ransomware risk.

30min

Francis Yeow

Francis Yeow is currently Head of Information Security and Country Information Security Officer at Parkway Hospitals Singapore. He has more than [...]

Sandeep Kohli

Sandeep is the Managing Director and APAC CISO at State Street. He has over 20 years of diverse experience in assisting large financial [...]

Leonard Ong

Leonard has over 22 years of experience in Information, Cyber and Corporate Security gained in telecommunication, enterprise, banking, [...]

Keynote Presentation – Adopting A Zero-Trust Approach To Cybersecurity

A zero-trust approach requires a change of focus for organisations. It requires an assumption that breaches will occur as organisations evaluate current and desired cybersecurity posture, aligned with risk appetite.

This presentation will explain how to adopt a zero-trust approach and how it can be aligned with cybersecurity policies. Key takeaways will include an understanding of how to take a zero-trust approach and the benefits of zero-trust.

20min

Networking Break

20min

Roundtable Discussion 1 – Reducing Risk With Modern Identity Management.

As digital transformation accelerates, more data and applications are being pushed out to devices and remote users. Companies need to focus on who is accessing corporate resources, from where and why. They need to understand what their data is being used for and be able to identify vulnerabilities rapidly. Improved visibility of user behaviour is critical to reduce the threats from adversaries as well as from insiders.

Key discussion points include, enabling business with IAM and managing access efficiently.

30min

Roundtable Discussion 2 – Modernising Cyber Operations With AI And ML

SOCs are becoming overwhelmed with alerts, many of which are false positives. The modern SOC needs to fully leverage automation and AI to detect and respond to threats in the most efficient way. This roundtable with discuss how and why today’s SOCs are overwhelmed and how automating SOCs and using AI are essential.

Key discussion points will include, managing the growing number of false positives and using AI and ML to detect and respond to threats.

30min

Roundtable Discussion 3 – Policy As Code And Application Security

As companies start to embrace DevSecOps, developers will increasingly act as policy enforcers by building policy into code. Security by design will become more common as security programs align with DevOps to provide the automation required to secure complex technology environments. Developers will start to see baking security into code, not as an inconvenience, but as a critical part of creating new applications rapidly.

Key discussion points will include best practices in DevSecOps and embedding cybersecurity policies into code.

30min

Roundtable Discussion 4 – Reducing Complexity With A Cybersecurity Mesh

Companies are struggling with increased cybersecurity complexity as they wrestle with a growing number of cybersecurity tools, typically operating independently of each other. A new approach is required where controls are integrated and policy is consistent.

This roundtable will discuss how a cybersecurity mesh can enable the centralised control of policies and the scaling of controls. It will also discuss how a cybersecurity mesh can offer greater flexibility and reliability.

30min

Roundtable Discussion 5 – Reducing Risk With Modern Identity Management

As digital transformation accelerates, more data and applications are being pushed out to devices and remote users. Companies need to focus on who is accessing corporate resources, from where and why. They need to understand what their data is being used for and be able to identify vulnerabilities rapidly. Improved visibility of user behaviour is critical to reduce the threats from adversaries as well as from insiders.

Key discussion points include, enabling business with IAM and managing access efficiently.

30min

Roundtable Discussion 6 – Modernising Cyber Operations With AI And ML

SOCs are becoming overwhelmed with alerts, many of which are false positives. The modern SOC needs to fully leverage automation and AI to detect and respond to threats in the most efficient way. This roundtable with discuss how and why today’s SOCs are overwhelmed and how automating SOCs and using AI are essential.

Key discussion points will include, managing the growing number of false positives and using AI and ML to detect and respond to threats.

30min

Roundtable Discussion 7 – Policy As Code And Application Security

As companies start to embrace DevSecOps, developers will increasingly act as policy enforcers by building policy into code. Security by design will become more common as security programs align with DevOps to provide the automation required to secure complex technology environments. Developers will start to see baking security into code, not as an inconvenience, but as a critical part of creating new applications rapidly.

Key discussion points will include best practices in DevSecOps and embedding cybersecurity policies into code.

30min

Roundtable Discussion 8 – Reducing Complexity With A Cybersecurity Mesh

Companies are struggling with increased cybersecurity complexity as they wrestle with a growing number of cybersecurity tools, typically operating independently of each other. A new approach is required where controls are integrated and policy is consistent. This roundtable will discuss how a cybersecurity mesh can enable the centralised control of policies and the scaling of controls. It will also discuss how a cybersecurity mesh can offer greater flexibility and reliability.

30min

Speaking Presentation – Chain Of Vulnerabilities – Detecting and Responding To Supply Chain Threats.

Veronica Tan, Director, Safer Cyberspace, Cyber Security Agency of Singapore

20min

Veronica Tan

Veronica is driving the Safer Cyberspace portfolio in the Cyber Security Agency of Singapore (CSA). Her areas of work include leveraging [...]

Speaking Presentation

Speaker and synopsis coming soon

20min

Speaking Presentation – The New Threat Landscape: The Cyber Physical World

Kelvin Wong, Assistant Director, Government Technology Agency

Attacks on critical infrastructure have highlighted the vulnerabilities that emerge as operational technology converges with information technology. Greater digitalisation of the physical world combined with edge computing and new IoT technologies are accelerating the pace of this convergence.

This presentation will discuss the blending of information technology with operational technology and the new threats that this brings, particularly with reference to critical infrastructure. Key takeaways will include an explanation of the types of vulnerabilities that operational technology presents and the best practices in mitigating the risk of attacks on operational technology.

20min

Kelvin Wong

Kelvin Wong has been leading cybersecurity for Smart Nation Sensor Platform programme in GovTech for the past 5 years, specialising in IoT [...]

Networking Lunch

40min

Keynote Presentation

20min

Speaking Session 1: Active Response as Your Enterprise’s Default Defence Posture

Mac Esmilla, Chief Information Security Officer, World Vision International

30min

Mac Esmilla

Mac is based in Singapore and currently serves as Global CISO at World Vision International (WVI). As Global CISO at WVI, Mac is leads the [...]

Speaking Session 2: Shared Responsibility In The Cloud

Confusion remains around the segregation of responsibilities for cloud security. This leads to unnecessary vulnerabilities and potentially devastating attacks. Key discussion point in this roundtable are the elements of cybersecurity that are typically addressed by cloud service providers and the elements which must be managed by the customer.

30min

Networking Break

15min

Speaking Presentation – Enforcing Policy Control With A Secure Service Edge (SSE) Platform.

Yuezhong Bao,  Group CISO, Lazada

The Secure Access Service Edge (SASE) approach to cybersecurity has given way to SSE. SSE accommodates changing working patterns and wider cloud usage.

Key takeaways from this presentation will include the importance of SSE platforms as remote working and cloud usage become more widespread and the importance of integrating multiple cloud cybersecurity services in the cloud.

20min

Yuezhong Bao

Currently Group CISO and DPO of Lazada Group, previously CISO of Coupang, Inc., and ex-Amazon & Microsoft. having worked across multiple [...]

Keynote Panel Discussion – Becoming The Hunter Instead Of The Hunted With Threat Intelligence, AI and Automation

Panellists:

Audrey Teoh, Group CISO, SingPost

Boris Hajduk, CISO, Gojek + Tokopedia

Yogesh Madaan, Head Information & Cyber Security, Bukalapak

Manan Leo Qureshi, BISO/APAC Security Lead, Yum! Brands

Moderator: coming soon

Organisations need to take a forward-leaning proactive approach to cybersecurity. They need to minimise attacks by identifying them and responding to them before any damage is caused. Threat hunting requires the use of automation and AI to be effective. It also needs access to the best sources of threat intelligence.

This panel will discuss best practices in threat hunting and how companies can become the hunters instead of being the hunted.

30min

Audrey Teoh

A Certified Chief Information Security Officer (CCISO) with more than 17 years of professional experience in Information Security. An advocate [...]

Boris Hajduk

Boris Hajduk is CISO at GoTo: Gojek + Tokopedia, where the security team is responsible for securing 2% of Indonesia's GDP and hundreds of [...]

Yogesh Madaan

Yogesh is the Head Information and Cyber Security/CISO at Bukalapak. He is a seasoned technology leader with 18+ years of experience in [...]

Manan Leo Qureshi

  Manan is a Multi-Industry Risk-Security & Resilience Executive & Practitioner, FinTech & RegTech Mentor with 19 years of [...]

Closing Keynote Presentation: Building Resilience With Defence-In-Depth

Cezary Piekarski, Global Head, Cyber Security, Information & Cyber Security, Standard Chartered

No company can eliminate all breaches. Instead, companies can focus on mitigating risk by minimising the damage and breach can cause. Increasingly, companies are implementing multiple layers of controls.

Key takeaways from this presentation will be the need for multiple complementary controls to manage risk and how a defence in depth approach can be implemented.

20min

Cezary Piekarski

Cezary heads the Cyber Security function and is a member of the global CISO leadership team for Standard Chartered Bank. He is responsible for IT [...]

Closing Remarks From The Chair And End Of The Forum

Andrew Milroy, Chief Research Advisory, Focus Network

5min

Andrew Milroy

Andrew Milroy is Focus Network’s Chief Research Advisor. He is a well-known technology thought leader and speaker in the APAC region. He has [...]

Networking Drinks

60min