Cyber Risk Series To be or not to be: Patch is the Question

From on-premises devices and applications across every endpoint, cloud, and container, Security and IT teams are looking for real-world insights and expert perspectives on the newest attack surface management strategies successfully keeping threat actors at bay.

Wednesday, July 26, 2023

Virtual

Featured Speakers

Jonathan Trull
CISO & SVP Security Solution Architecture, Qualys

Mike Orosz
CISO, Vertiv

Ryan Barrett

Ryan Barrett
CISO, Intermedia

Shailesh Athalye
Senior Vice President, Product Management, Qualys

Kunal Modasiya
VP, Product Management, Attack Surface Management & AppSec, Qualys

Jon Oltsik
Distinguished Analyst and Fellow, Enterprise Strategy Group

Art Thompson
CIO, City of Detroit

Corey Smith

Corey Smith
Sr. Director Solutions Architecture, Qualys

Connect with fresh perspectives on your expanding attack surface

With increased adoption of cloud, Internet of Things (IoT), and a continually growing remote workforce, it's harder than ever for security teams to correlate their externally visible and internally managed assets and govern compromises that occur because of undiscovered, unmanaged, or poorly managed IT assets.

Don't miss this unique opportunity to connect with effective strategies to see and protect your external attack surface from every angle.

Topics

Keynotes

Get inspired to shield your organization's external, internet-facing assets from advanced threats with an all star line-up of Keynote Speakers who will sharing valuable insights, best practices and alternative viewpoints on strengthening your security posture in 2023 and beyond.

Innovation Sessions

Simplifying your security posture and protecting every externally exposed IT asset across your evolving attack surface can seem like a daunting proposition to many cybersecurity practitioners. Be sure to tune into this unique opportunity to see the latest Qualys innovations that are revolutionizing cybersecurity risk management and making it easier to safeguard re-cloud sources through a single pane of glass.

Partner Sessions

Don't miss your opportunity to learn, share, and exchange ideas with members of the Qualys partner community across a wide range of pivotal topics designed to help small and mid-sized businesses stay ahead of cybercriminals.

Hands-on Sessions

What's the best way to maximize visibility across your entire attack surface? Is your Mean Time to Remediation (MTTR) faster than your attackers? Find out at this fast-paced, ask-me-anything, hands-on session where you'll get direct, on-the-spot advice from highly experienced Qualys experts.

10:00 AM PT

Keynotes

Navigating Risk in an Era of Expanding Attack Surfaces

Jonathan Trull

CISO, Qualys

Join us as we delve into the pressing issue of growing attack surfaces and the need for organizations to address the associated risks. In an era of digitalization, cloud adoption, and interconnected systems, the entry points for threat actors are multiplying, and attackers are more adept at swiftly exploiting organizations defenses. Discover how security leaders can go beyond traditional methods to manage and reduce risk.

10:30 AM PT

Keynotes

Attack Surface Management Matters

Jon Oltsik

Sr. Principal Analyst & Fellow, Enterprise Strategy Group

Attack Surface Management (ASM) has gained attention over the past few years, driven by digital transformation initiatives, cloud computing adoption, a remote workforce, and a dangerous threat landscape. Despite this attention, there’s still confusion about what ASM is, why it matters, and how organizations should approach it. In this session, Jon will help security professionals answer these questions and share trends and insights from ESG research.

11:00 AM PT

Keynotes

Defining the Attack Surface: A CISO's Perspective

Jonathan Trull

CISO, Qualys

Ryan Barrett

CISO, Intermedia

Join us for an insightful discussion featuring Qualys CISO, Jonathan Trull, and Intermedia CISO, Ryan Barrett. Together, they will explore the challenges posed by the expanding attack surface and provide valuable insights and strategies to safeguard your organization's digital assets in. Don't miss this opportunity to enhance your security defenses.

11:30 AM PT - TRACK 1

Keynotes

The CISO Maturity Model: Building a Cyber Strategy that Aligns with Corporate Risk Goals

Mike Orosz

Global VP & Information and Product Security, Vertiv

Today, CISOs are more central to an organization's strategy than ever. Attackers have grown more sophisticated, breaches have become more expensive, and the attack surfaces organizations must defend have expanded.

The average Chief Information Security Officer (CISO) now assumes a heightened position, as they are responsible for shaping, validating, and communicating the risk exposure of their entire organization to the senior executives and board of directors. However, considering this expanded role, have the tools accessible to most CISOs adapted to their increased level of responsibility? What are the most critical considerations when building a cyber risk management strategy to meet the demands of an anxious boardroom? Lastly, can success be measured in a way that supports the CISOs cyber risk evolution?

Join Mike Orosz, the Global Chief Information and Product Security Officer of Vertiv, as he answers these questions and more. In this 30-minute keynote, Mike will share what methods and metrics have made Vertiv's cyber risk strategy scale to secure a business with operations in more than 130 countries.

11:30 PM PT - TRACK 2

Keynotes

Attack Surface Management with an Attacke's and Defende's View

Kunal Modasiya

VP, Product Management, Attack Surface Management & AppSec, Qualys

Gain crucial insights into building a successful Attack Surface Management (ASM) project to safeguard your internet-exposed assets from cyber attackers. Through impactful use cases, learn about the key elements and strategies that will help fortify your security defenses.

12:00 PM PT

Keynotes

Fireside Chat: ASM & the Zero-Trust Connection

Art Thompson

CIO, City of Detroit

Bill Reed

Marketing Expert, Qualys

Explore the challenges and risks organizations face in adopting Zero Trust policies without proper asset visibility. Bill and Art will share best practices and learn how external attack surface management is crucial for effective Zero Trust strategies.

12:30 PM PT

Innovation Pavilion

Preview: Latest Qualys Innovations

Shailesh Athalye

SVP Product Management, Qualys

Qualys will share a sneak peek of our upcoming technology offerings which will help organizations further reduce cyber risk across their enterprise.

1:00 PM PT

Hands-on Session

Wrapup and Free EASM Report Offer

Corey Smith

Sr. Director Solutions Architecture, Qualys

Preview of the EASM report and a unique opportunity to sign up for a free report, including a 1:1 readout session with a Qualys expert.

The opinions expressed by the guest speakers are their own and do not necessarily reflect the views of Qualys.

Tap into expert cyber risk insights every quarter!

Missed our first-ever Cyber Risk Summit on April 25th, 2023?

Watch full recordings of every session.

Lavish Jhamb

Lavish Jhamb

Sr. Product Manager, Compliance Solutions, Qualys

Qualys
Lavish Jhamb is Solution Architect for Compliance Solutions at Qualys, focused on building security solutions such as 'Custom Assessment and Response' and 'File Integrity Monitoring' and helping customers assess and improve their security and compliance posture. He has over 7 years of experience working on security solutions, regulatory standards, and cyber security frameworks, with thorough understanding of operating systems. Lavish holds a bachelor's degree in computer engineering from the Kurukshetra University Institute of Engineering and Technology and a Post Graduate Diploma in IT Infrastructure, Systems and Security from CDAC Pune.
Shailesh Athalye

Shailesh Athalye

Senior Vice President, Product Management, Qualys

Qualys
As Senior Vice President of Product Management, Shailesh leads the product management team and drives the Qualys product vision helping customers assess and improve their IT, security and compliance posture. Since joining Qualys in 2012, he has worked in various security and compliance roles driving innovative solutions, including remote endpoint protection, endpoint detection and response, and SaaS security. In addition, Shailesh headed engineering, research and product management for Qualys Policy Compliance and File Integrity Monitoring, where he helped customers go beyond compliance to drive their IT GRC objectives. Before Qualys, he focused on security research for Symantec ESM and Compliance solutions. Shailesh holds a master’s in computer applications (MCA) from the Vishwakarma Institute of Technology and has various security certifications including CISA, CRISC, CISM. He is also a regular speaker at industry conferences.
Sumedh Thakar

Sumedh Thakar

President and CEO, Qualys

Qualys
As President and CEO, Sumedh leads the company’s vision, strategic direction and implementation. He joined Qualys in 2003 in engineering and grew within the company, taking various leadership roles focused on helping Qualys deliver on its platform vision. From 2014 to 2021, he served as Qualys’ Chief Product Officer, where he oversaw all things product, including engineering, development, product management, cloud operations, DevOps, and customer support. A product fanatic and engineer at heart, he is a driving force behind expanding the platform from Vulnerability Management into broader areas of security and compliance, helping customers consolidate their security stack. This includes the rollout of the game-changing VMDR (Vulnerability Management, Detection and Response) that continually detects and prevents risk to their systems, Multi-Vector EDR, which focuses on protecting endpoints as well as Container Security, Compliance and Web Application Security solutions. Sumedh was also instrumental in the build-up of multiple Qualys sites resulting in a global 24x7 follow-the-sun product team.
Jonathan Trull

Jonathan Trull

CISO & SVP Security Solution Architecture, Qualys

Qualys
Jonathan Trull is a longtime security practitioner and CISO & SVP Security Solution Architecture with over 18 years of experience in the cybersecurity industry and is currently the Senior Vice President of Customer Solutions Architecture and Engineering at Qualys. His career has spanned operational CISO and infosec roles with the State of Colorado, Qualys, Optiv, and Microsoft. While at Microsoft, Jonathan led the Microsoft Detection and Response Team (DART) whose mission was to respond to cyber security incidents around the globe ranging from cyber espionage initiated by nation-state actors to ransomware attacks and included the investigation of and response to the NOBELIUM threat actor campaign which leveraged the SolarWinds supply chain. Jonathan also serves as an advisor to several security startups and venture capital firms and supports the broader security community through his work with the Cloud Security Alliance, Center for Internet Security, and IANS. He is also an adjunct faculty member at Carnegie Mellon University where he mentors and coaches those attending the CISO Executive Education Program. Jonathan is a frequent speaker at industry conferences such as BlackHat, RSA, and SANS and holds several industry certifications including the CISSP, OSCP, CCSP, and GCFA. Jonathan is a veteran of the U.S. Navy finishing his career as a Lieutenant Commander supporting the Information Warfare Domain.
Kunal Modasiya

Kunal Modasiya

Senior Vice President, Product Management, Qualys

Qualys
Kunal is currently VP of Product Management for the CyberSecurity Asset Attack Surface Management (CAASM), Web App and API Security product line at Qualys HQ in Foster City, CA. He is Qualys boomerang. He worked at Qualys for 3 years and incubated the XDR product line from inception. Kunal has spent 15+ years working at startups, and big and mid-size companies in cybersecurity, networking, and application security in both product and engineering roles at Juniper Networks, Extreme Networks, Sun Microsystems and Infinera. Prior to re-joining Qualys, Kunal was heading products at Israeli startup in API security and bot management AppSec space.
Matt Crane

Matt Crane

Senior Manager, Schellman

Matt Crane is a Senior Manager at Schellman, where he excels in project management and client relations while overseeing assessments against various PCI Standards. With a primary focus on PCI DSS Compliance for organizations spanning diverse industries, Matt leverages a decade of expertise in information security services. Prior to joining Schellman in July 2017, Matt held key positions in both the private and public sectors, specializing in PCI and NIST assessments, as well as intelligence analysis. His extensive background includes leading PCI engagements, performing risk assessments, and general consulting services for merchants and service providers across multiple industry verticals. With an exceptional track record and a profound understanding of the industry, Matt Crane is a valuable asset to Schellman, ensuring clients receive unparalleled guidance in achieving their compliance goals. Matt holds a BBA in Information Security and Assurance as well as several industry certifications including CISSP, CISA, CRISC, QSA
Avani Desai

Avani Desai

CEO, Schellman

Avani Desai is a Partner and Chief Executive Officer at Schellman, the largest niche CPA firm in the world that focuses on technology and security assessments. She also sits on the board of Cogent Bank, a Florida based community bank, as a Director and the head of the Technology Committee. Avani started her career working at a Big 4 accounting firm (KPMG) for over 10 years, where she led a team and oversaw IT Risk Management and Privacy across national service-lines. In addition, Avani managed the development of internal and external privacy programs and related practices, leveraging her deep knowledge with healthcare and emerging technologies, such as blockchain, cloud computing, artificial intelligence, internet of things, and virtualization. Now at Schellman, Avani has been focusing on growth strategies, strategic client and market development, industry analysis, and new services for the last seven years. She has been featured in Forbes, CIO.com, and the Wall Street Journal, and is a sought-after speaker as a voice on a variety of emerging topics, including security, privacy, information security, future technology trends, and the expansion of young women involved in technology. In 2017, Avani, a crypto enthusiast, launched MyCryptoAlert, an app that provides a mobile solution for the alert and portfolio problems crypto investors face and a tool to buy and sell coins on arbitrage. Also passionate about strategic philanthropy, Avani sits on the board of Arnold Palmer Medical Center, Philanos, Audit Committee chairwoman at the Central Florida Foundation, and is the co-chair of 100 Women Strong, a female-only venture capitalist based giving circle that focuses on solving community-based problems specific to women and children by using data analytics and big data. Avani is also an avid runner, always looking to sign up for the next Disney marathon. With all that being said, Avani still considers her greatest accomplishment to be personal rather than professional—she is the proud mother to her 10-year-old son, Sahil, 7 year old daughter, Sareena, and newborn son, Hastin.
Terry Barber

Terry Barber

Information Security Manager - Security Analytics, American Express Global Business Travel

Terry hails from Santa Cruz California originally and began his career in Information Technology at Mighty Net, Inc. (founding company for Creditreport.com) as CTO – Director of Systems and Security while attending California State University Northridge. There he was responsible for all Infrastructure, networking, and security. In 2007, Terry took a Director of IT position at Protocol and left the company as Director of US IT Operations when they were acquired by Expert Global Solutions. At EGS he ventured back into Information Security role full-time and worked alongside his CISO as the two man team responsible for achieving PCI compliance across the Enterprise. In 2015 he transitioned to American Express Global Business Travel as an Information Security Manager. Today his responsibilities include Cyber Security Metrics, Managing the Vulnerability management platforms including Qualys and several other Information Security platforms at GBT.
Jon Oltsik

Jon Oltsik

Distinguished Analyst and Fellow, Enterprise Strategy Group

Jon Oltsik is a distinguished analyst, fellow, and the founder of the firm’s cybersecurity service. With over 35 years of technology industry experience, Jon is widely recognized as an expert in all aspects of cybersecurity and is often called upon to help customers understand a CISO's perspective and strategies. Jon focuses on areas such as cyber-risk management, security operations, and all things related to CISOs.
Art Thompson

Art Thompson

CIO, City of Detroit

Art Thompson is the Chief Information Officer (CIO) for the City of Detroit, Department of Innovation and Technology (DoIT). Prior to this appointment, he served as the Director of Public Safety and Cyber Security for DoIT. Thompson is a graduate of Eastern Michigan University with a degree in Supply Chain Management. He has more than 12 years of technical experience with the public safety environment and managing public safety personnel. His technical skills include radio and desktop installation, as well as software and hardware maintenance. His responsibilities included, but were not limited to, managing Desktop Support, Mobility Support, Network Administration and Cyber Security Teams all of which he confidently championed. Thompson began his career with DoIT as the Manager for Mobility Support. His accomplishments as Manager further revealed his advanced technical skills and managerial abilities, which lead to his promotion to Director. After serving nearly three (3) years as Director, he further excelled in management and in handling budgetary issues. His vision, dedication, motivation and commitment to the City of Detroit ultimately lead to his appointed as CIO.
Mike Orosz

Mike Orosz

Global Chief Information and Product Security Officer, Vertiv

Mike Orosz is Global Chief Information and Product Security Officer at Vertiv accountable for all aspects of global information and product security. He was previously Sr. Director Global Cyber and Physical Security at Citrix and Global compliance Officer for Citi. Mike also served in the US Army focusing on Intelligence, Security and Analytics. He holds a master's degree in information sciences, cybersecurity from PennState University.
Travis Smith

Travis Smith

Vice President, Threat Research Unit, Qualys

Travis is the Vice President of Malware Threat Research at Qualys. He has spent the past 15 years in the security industry with a focus on digital forensics and incident response. He holds a wide array of certifications ranging from GIAC Certified Penetration Tester to the CISSP, as well as an MBA with a concentration in information security. Travis has presented his research at conferences worldwide at venues such as BlackHat, RSA, and SecTor.