Jim Love, CIO ITWC

Nick Aleks, Senior Director of Security, Wealthsimple, Author of Black Hat GraphQL & DEFCON Toronto Co-Founder

These are short presentations that provide a valuable and practical glimpse into some of the most innovative and powerful security tools, processes, techniques and research. They are the TED talk of Cyber Security done in 5 minutes.

Leading security experts explain the important trends and new threats they are seeing now and in the near future so you can make better decisions about how you allocate your resources to protect your data.

Panelists:
John del Grande, VP Business Solutions, Ecclisiastical Insurance
Rushmi Hasham, Director, Accelerated Cybersecurity Training Programs, Rogers Cybersercure Catalyst, Toronto Metropolitan University

Our panel will walk you through the key elements of prevent and damage mitigation including discussion of the role, value and limitations of cyber insurance.

Panelists:
Greg Markell,President & CEO, RIDGE CANADA
Maryam Asgariazad, Director, Information Security, Alterna Savings

In this session you will hear not just how to make the case for greater investment this quarter, but ensure your executive buy-in to ongoing vigilance and the resources you need to keep the organization secure.

Horace Wright, Senior Manager, Unit Risk & IT Transformation – I&O & Security Assets, National Bank of Canada
Azim Boblai, CISO, Toronto Community Housing

Sponsored by Okta
Test your knowledge with some fun trivia

This session will explore how to put together a team – who needs to be involved and how to prep them so that if a breach happens you are ready to fight back right away.

Many employees unintentionally become vectors for security attacks, others might purposely seek to damage your business by stealing, leaking or corrupting your data.  Simply having and policing a robust policy won’t fix this issue and in this session we will explore how to build a more security aware workforce,  including the use of gamification.

Rhonda Bunn, Chief Information Security Officer, Government of Ontario

AI is regarded by some as a potential saviour. It promises to solve some of the critical challenges – lack of resources, ability to detect and respond to attacks in a split second and being able to cope with the sheer volume of threats that attack us daily. 

The day will conclude with a wide-ranging discussion among three leading CISO’s.  They will discuss the route they took to the role, the skills they see as critical now and in the future, how they work with other C-Suite executives, and share what keeps them up at night and what makes them leap out of bed in the morning as they think about the world of threat and opportunity they face every day.

Panelists:
Kevin Dreyer, CISO, Maple Reinders
Samer Adi, CISO, Greenshield Canada
Rachel Guinto, Vice President, Cybersecurity, First West Credit Union

Jim Love, CIO, ITWC

The second day of this event will consist of a series of concurrent special workshop sessions.  We are currently curating streams specifically for students, small businesses, and non-IT business leaders among others.

Currently under development we look forward to announcing a compelling selection of practical sessions that will help you better protect your company’s vital information assets.  

Plenary sessions in development for this day include:

Building on the concluding conversation of the first day, we will be joined by a leading CISO who will take a deep dive into the day-to-day challenges of the role and what it is they see as being the critical factors for success.

John Pinard, Vice President, IT Operations, Infrastructure & Cybersecurity, DUCA Financial Services Credit Union Ltd.

Privacy and security legislation is constantly changing. Keeping up to date is a challenge. 

Protecting the privacy of employees and customers complicates the security landscape – adding risks of non-compliance, and increasing the monetary and reputational costs when something goes wrong.  

This session will provide an update on privacy regulation, an exploration of how privacy and security can best work with one another and leave you with a checklist of things you have to know and do to ensure that you reduce the risks to your organization.  Discussion will include developments in the US and Canada

Wendy Hulton, Partner, Dickinson Wright

DevSecOps has promised software maintenance and development with security “built in” versus “bolted on.”  While the principles are sound the results have been “uneven” and sometimes disappointing. 

Do we need to rethink or just modify our approach?  Join us for this lively discussion.

Governance is not about committee meetings and dull droning discussions about policies no one will read. It’s an action oriented approach that is essential to protecting your organization. Yet many organizations struggle to make it work.

Looping back to the discussion that opened the event on the emerging threat environment, we will conclude the event with a wide ranging discussion of next steps – a call to action as it were, where assemble experts to recommend simple, practical tasks you can take on now to be better prepared in the future

On the first day we discussed the critical issue of securing the financial investment security needs to be effective.  But that is only the first step in building the function – and regardless of the budget you have the challenge of optimizing your efforts to ensure you build or sustain the function.  Topics for discussion will include:

• To outsource or not to outsource?
• Assessing technology investments
• Recruitment and retention in tough talent markets