Benelux

Amsterdam

November 14, 2024

Click on the Fast Link buttons to learn more

Agenda

Venue

Partners

Limited to 150
BIO C-Suites

Register

WHY YOU SHOULD JOIN
OUR CONFERENCE

Focus:

• Global and Benelux Security Trends For 2025

• Negotiation in Ransomware - To Pay or Not to Pay

• Shadow IT - Outside CISO’s Visibility

• Cloud Security Challenges - From Digitalization To Misconfiguration

• Artificial Intelligence in Cybersecurity Practise

Expert Speakers
0 +
Delegates
0 +
Minutes Of Networking
0 +

Keynotes

Jelena Zelenović Matone

CISO at European Investment Bank, Member of World Economic Forum and founding board member and first president of Women4Cyber & Woman Cyber Force
CISO of the year award for 2019, Luxembourg. The Global Cyber Sentinel Award Winner 2020 for immense contribution to cybersecurity domain globally. CISO of the year Europe 2021. Versatile and innovative professional with emphasis on cyber security risk management, policies and procedures creation, IT/IS security, IT Operations, audit, risk mitigation, business process improvement and IT governance. Proven results in building internal and external client relationships, even at government levels for best cybersecurity practices, and driving growth in competitive and ever-changing markets. Proactive in assessing and responding to market and consumer trends. Highly effective at identifying and implementing business process improvements while safeguarding and adding to controls. Skilled at communicating effectively with clients, senior management and colleagues.

Filip Nowak

Global Head of Cyber Defence Ferrero
Filip Nowak's extensive expertise and MBA qualification uniquely position him as an exceptional speaker for the Supply Chain discourse. His substantial experience in Procurement and Supply Chain Management reflects a deep grasp of the complexities and challenges inherent in this domain. With a strategic outlook, he excels in optimizing supply chain operations, offering insights into bolstering resilience, managing risks, and fostering collaborative ties throughout the supply chain network. Filip's profound knowledge holds the potential to provide illuminating viewpoints, empowering businesses to navigate the intricacies of contemporary supply chain landscapes with confidence and competence.

Zsolt Fabian

Group Cybersecurity Lead Byborg Enterprises
Zsolt is a seasoned cybersecurity professional with a career spanning over 15 years. As a Group Cybersecurity Lead, Zsolt has built robust security programs and assembled high-performing teams for some of the world's Top 100 high-traffic websites, technology companies and payment systems. With a dedication to cybersecurity he has significantly contributed to making the digital world a more secure space for everyone. Known for a strategic, data-driven approach, Zsolt's expertise in risk management and incident response has been instrumental in mitigating security threats for businesses of all sizes.

Erik Frambach

CISO Pensioenfonds Rail & Openbaar Vervoer
Making IT work for the business has always been my motto. After I left university with a MSc in biology I put this motto into practice by developing "e-learning software" for the Open University. My interest then shifted towards network architecture and technology, and the Internet and its applications. Information security soon became my specialty. Certifications: CISSP, CISM, ISO 27001 Lead Auditor, CIPP/E. Next stop: CCISO or CCSP. I've participated in many projects involving information security, identity & access management, and IT governance & compliance. Working with businesses both big and small, local and multi-national, profit and non-profit, public and military, loosely managed and tightly regulated, has taught me what works and what doesn't work under specific conditions. My strength lies in applying this expertise and experience to selecting and implementing suitable solutions, in tune with the business.

Edward Asiedu

Senior Principal Security
DataBee by Comcast Technologies Solutions

Edward Asiedu is Senior Principal Security Strategist for Comcast Technology Solutions’ DataBee™ business in EMEA. Edward joined DataBee from Splunk, where he spent nearly seven years in professional services consulting and sales engineering for cybersecurity solutions. He has deep technical expertise and experience working with public and private sector security leaders, advising on both strategy and implementation. 

Alain De Maght

CISO
SPF Interieur - FOD Binnenlandse Zaken

IT Director and consultant, 20+ y - international expertise in IT & Data Governance / Enterprise Architecture & Business processes. Willing to join a business/IT transformation team, share knowledge and orchestrate execution with peers. Ensure measurable achievements.

Continuous learner : GDPR, blockchain,... Strives at highlighting and implementing improvement opportunities.

Member of IT Executive Circle, IT Security Boardroom, CIONET, CIO Club, BELTUG, ISACA, IAPP, DPO circle and Cercle de Lorraine.

US and Europe certified private pilot (airplane) - Ground instructor.

Lyzia van Iterson

Cybersecurity Leader
LKQ Europe

Lyzia is a seasoned expert shaping the cybersecurity landscape. Her dynamic insights, as showcased in her works, demonstrate her commitment to fostering digital resilience. With a diverse background and extensive knowledge, she is a driving force in addressing emerging threats and empowering organizations to navigate complex security challenges.

Juan Diego Nocua Gualdron

CISO
Doctors Without Borders Netherlands

Experienced Information Technology Coordinator with a history of working in the non-profit organization management industry. Strong operations professional skilled in ISO 27001, NIST, PHP, IT Infrastructure Management, Information Security Awareness, and Network.

Sümeyra Arda Çirpili

Cyber Security Project Manager
Rabobank

Sümeyra Arda Çirpili is an experienced professional specializing in cybersecurity and digital forensics. She currently serves as a Cybersecurity Specialist at STM, where she focuses on enhancing digital security frameworks and mitigating cyber threats. Sümeyra holds a Master's degree in Cybersecurity from Gebze Technical University and has a robust background in computer engineering. She is dedicated to advancing her expertise in threat intelligence, incident response, and forensic analysis, contributing significantly to the field through her work and continuous learning.

Dr. Martijn Dekker

Global CISO
ABN AMRO BANK

As top executive and Chief Information Security Officer at ABN AMRO Bank, Martijn has more than 25 years of experience of driving the security strategy of the organisation. Next to that, he has been teaching and supervising master students for over 10 years at Dutch universities. Since early 2020, he is visiting professor Information Security at the University of Amsterdam, conducting research in the field of information security governance, decision making, security automation and information theory.

 

Next to his executive- and academic roles, he is member of the advisory board and chair of the ICT subcommittee of CBS (Statistics Netherlands) and member of several advisory boards.

As an experienced leader in cybersecurity, Martijn also enjoys presenting keynotes, lectures and training.

Arnaud Wiehe

Director Information Security
FedEx

Arnaud Wiehe is an author, speaker, consultant, and thought leader in cybersecurity. He has worked in leadership and cybersecurity roles for major global companies, including as a CISO for multiple years. He holds several prestigious cybersecurity certifications, including:

  • Certified Information Systems Security Professional (CISSP)
  • Certified Cloud Security Professional (CCSP)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Auditor (CISA)
  • Certified Fraud Examiner (CFE)

Throughout his career, Arnaud has demonstrated a strong focus on cybersecurity best practices and keeping current with emerging trends, technologies ,and innovation. He is a graduate of the Singularity University and a member of the Association of Professional Futurists. He is widely respected by his peers as an expert in cybersecurity and IT governance.

Tiago Teles

Head of Data Insights and Issue Management
ABN AMRO BANK

Tiago Teles has 15+ years of cybersecurity leadership experience. He is currently an InfoSec manager at ABN AMRO bank and a cybersecurity lecturer at TIAS Business School. His passion lies in understanding cutting edge technologies and how best to secure them. He is the author of the upcoming book “Emerging Tech, Emerging Threats” (together with author Arnaud Wiehe). He holds an MBA and the CISSP certification.

Partners

Partner With Us

Ticket Price

990 €

Have a promo code?
Get your FREE ticket !!!

Apply for The C-Suite Edition

2024

We prepared these hot topics crucial for you just in November 2024 due to the unique BeNeLux cyber landscape including: highly interconnected supply chains, dependance on third party vendors, and the region’s high adoption of multi-cloud which is  the next frontier. All these raise the need for a new cloud security operations model and the need for safeguarding your IoT ecosystems.

In addition,  increased cyber threats during the holiday season impose development of a strong cybersecurity workforce,  with you as a leader of building cyber resilience.

That is why you must stay updated on the latest trends to effectively protect your leadership position and your organization.

Agenda November 2024

08:00

Registration

08:15

Power Breakfast

Let's open the conference with a power breakfast where you will have the opportunity for the first morning networking with colleagues from different industries and a chance to make new acquaintances and exchange business cards.

08:50

Firestarter Digicert

09:00

  • An in-depth overview of the Threat Intelligence-based Ethical Red Teaming (TIBER-EU) framework, designed by the European Central Bank to enhance cyber resilience across the financial sector.
  • Ransomware Attack: A detailed analysis of a recent ransomware attack on a financial institution, demonstrating how TIBER-EU protocols can identify vulnerabilities, mitigate risks, and improve response strategies.
  • Practical recommendations and best practices derived from TIBER-EU implementation experiences, focusing on strengthening defenses, enhancing threat intelligence, and ensuring robust incident response mechanisms.

Jelena Zelenović Matone

CISO at European Investment Bank, Member of World Economic Forum and founding board member and first president of Women4Cyber & Woman Cyber Force

09:25

  • What does being a “business enabler” even mean?
  • Does the (C)ISO have the opportunity and resources to enable business?
  • Do organisational structures and perspectives need to change for business enablement by (C)ISOs?
  • Does a high-profile, customer-facing CISO look distracted from the day job?

Moderator: Edward Asiedu

Senior Principal Security Strategist
DataBee by Comcast Technologies Solutions

Jeroen Prinse

CISO
Nationaal Cyber Security Centrum
(NCSC-NL)

Jim Leseman

CISO & COO
Clear.bio

Erik Frambach

CISO
Pensioenfonds Rail & Openbaar Vervoer

Steven Furnell

Professor of Cyber Security
University of Nottingham

10:00

As organizations navigate the complexities of AI adoption, governance and compliance, and digital transformation, cloud security has become a strategic priority. The challenge is not just safeguarding data but leveraging security investments to unlock business value. In this session with Wiz, we’ll explore proven strategies for aligning cloud security with business objectives to drive ROI, operational efficiency, and innovation. Learn how advancing cloud security maturity can fuel growth, mitigate risk, and deliver a competitive edge in an increasingly digital economy.

Richard Hensen

Enterprise Solutions Engineer
Wiz

10:20

Coffee break and 1-1 meetings

10:50

Why does social engineering work and how can we prevent it? To better understand this age-old question we will delve into the mindset of social engineering attacks, exploring why they work and how we can fight back. We will share insights on using nudges to guide people towards better cybersecurity decisions and emphasise the importance of building a strong cybersecurity culture.

Key takeaways:

  • Understand the mindset and behavioural principles that make social engineering attacks so effective
  • Learn how nudges can be used to encourage better cybersecurity habits
  • Discover the importance of fostering a strong cybersecurity culture within organisations

Javvad Malik

Lead Security Awareness Advocate
KnowBe4

11:15

  1. Increasing Importance of Data Privacy;
  2. Rise of Zero-Trust Architectures and Approach;
  3. Integration of Cybersecurity and Business Strategy;
  4. Cyber Security In The Board Room;
  5. Cyber Resilience – Beyond Cyber Security;
  6. Cybersecurity Priorities in 2025

Sofia Staff Frederiksen

Head of Information Security
Apoteket AB

Jan Öhman

CISO
Polystar OSIX

Jean-Yves Mathieu

CISO
Banque Internationale à Luxembourg

11:40

  • What are some leading edge technologies the leaders on the panel are seeing? 
  • How do they balance the risk of new technologies with the benefits? 
  • Does the consolidation of technology via marketplaces or cloud hyperscalers damage access to innovative technologies?

Craig Roberts

Field CTO
Rapid7

Tiago Teles

Head of Advanced Analytics & AI
ABN AMRO BANK

Dr. Martijn Dekker

Global CISO
ABN AMRO BANK

Arnaud Wiehe

Director Information Security
FedEx

12:10

Firestarter Illumio

12:20

Lunch Break & 1-1 Meetings

13:20

Generative AI has taken the world by storm and we’ve seen this taken up in the realm of Security as well. Let’s go through some of the developments from an organisational and technical perspective on what we can do, what we can’t do, and what forces we have to deal with to leverage this technology in the current world. With real world examples and innovations we’ll also talk about guardrailing these technologies properly so they can be made fit for purpose.

Arno Van de Velde

Principal Solutions Architect
Elastic

13:45

The challenges posed by shadow IT and its impact on the visibility and control of assets are getting bigger.
• The risks associated with unauthorized IT deployments and the potential consequences for organizational security are neglected too often.
• Develop strategy for identifying and mitigating shadow IT risks as well as for enhancing the visibility and control of  your organization’s assets.
• Don’t let shadow IT compromise your organization’s security. Don’t play dead. Join us on this session to gain actionable insights into managing shadow IT and turning it to official IT. This will strengthen your overall cybersecurity posture and make you sleep well at night.

Lyzia van Iterson

Cybersecurity Leader
LKQ Europe

Jack Krul

CISO
Exact

Alain De Maght

Former CISO/DPO
at Hopitaux Iris Sud Brussels - Senior Lead implementer ISO 27001

Sümeyra Arda Çirpili

Cyber Security Project Manager
Rabobank

14:20

This presentation, Emerging Vulnerabilities Every Enterprise Should Know About, examines critical vulnerabilities in internet-connected devices and software. Attendees will learn to assess these threats, with a focus on the risks facing edge and SOHO devices and the common exposure of certain software platforms, particularly Windows. We’ll cover strategies for minimizing attack surfaces, securing the supply chain, and improving detection within attack surface management (ASM) frameworks. Join us to gain essential insights for strengthening your organization’s security posture against evolving threats.

Jonas Gyllenhamma

Senior Solutions Engineer
Censys

14:45

Firestarter Teleport

14:55

Coffee Break & 1-1 meetings

15:25

Malcolm Larri, Host of the Next IT Security conferences will provide you with the history of Next IT Security. How everything started, what is the mission statement, and as well the plans for expansion for 2025.

Malcolm Larri

Host of
Next IT Security

15:35

98% of organizations have experienced a breach via a third-party. This talk will explore the challenges of integrating and managing third-party services in today’s SaaS-dominated environment. We will discuss practical strategies for effective due diligence, overcoming false security assurances, questionnaire exchanges and fairy tales often provided by vendor documentation. We are going to look forward to how the evolving regulatory requirements are shaping this domain. The session aims to arm CISOs and business leaders with actionable insights for enhancing third-party risk management, ensuring both operational resilience and compliance.

  • Due Diligence Realities: Examine the challenges and limitations of current due diligence practices in revealing true third-party risks and the steps to enhance the process.
  • Lifecycle Management: Strategies for managing the lifecycle of third-party relationships, from onboarding to offboarding, to prevent security breaches despite vendor security assurances.

Impact of Regulations: Analyze how recent regulatory changes are reshaping organizational strategies for third-party risk management and what measures can be taken to comply.

Zsolt Fabian

Group Cybersecurity Lead
Byborg Enterprises

16:00

AI: A potential paradise alley for cybersecurity advancements, promising enhanced threat detection, automated response, and efficient risk mitigation.

The road to a dystopian future: Concerns arise regarding AI’s susceptibility to manipulation, biases, and unintended consequences, posing new security challenges.

Balancing innovation with caution: Embracing AI in cybersecurity requires careful consideration of ethical implications, regulatory frameworks, and proactive risk management strategies.

Team Blue

Jean-Yves Mathieu

CISO
Banque Internationale à Luxembourg

Team Red

Amir Vashkover

Head of Data Security
Philips

16:25

  • Leveraging Cloud Technologies: Explore the critical role of cloud technologies in digital transformation and the unique security challenges they introduce.
  • Multi-Cloud Security Strategies: Understand the security implications of adopting multi-cloud environments and discover effective strategies to safeguard them.
  • Ensuring a Secure Digital Transformation: Gain practical insights into securing your organization’s digital transformation journey, minimizing risks, and maximizing cloud benefits.

Roelof Kroon

CISO
Alfen

Alan Lucas

CISO
Homefashion Group B.V.

Amir Vashkover

Head of Data Security
Philips

Rogier Posthuma

CISO
KIWA N.V.

17:00

The Digital Operational Resilience Act is a EU regulation that financial institutions have to comply with by 17 January 2025. The ideas behind this act are sound and reasonable, but when it comes to implementation, many challenges come up. The journey of a CISO navigating an organization towards compliance is tricky. This presentation will focus on a some of these challenges, and it will offer tips & tricks to avoid potholes and bumps:

  • Scoping the project: translating DORA lingo to business processes and IT systems in a pragmatic way
  • Principle-based articles versus rule-based standards: both are part of the regulation, but they interfere with DORA’s proportionality principle
  • Oversight by regulators: it is still unknown how regulators are going to audit compliance, but some reasonable assumptions can/must be made

Erik Frambach

CISO
Pensioenfonds Rail & Openbaar Vervoer

17:20

Book singing by

Dr. Martijn Dekker

Global CISO
ABN AMRO BANK

Arnaud Wiehe

Director Information Security
FedEx

Tiago Teles

Head of Data Insights and Issue Management
ABN AMRO BANK

17:30

Official Dinner Banquet

Nordics Edition

C-Level IT Security Event

October 24, 2024

BeNeLux Edition

C-Level IT Security Event

2024

DACH Edition

C-Level IT Security Event

COMING SOON
Nordics, 24 October, 2024
Benelux, 14 November 2024