CIO&CISO Denmark Roundtable

Third-Party Software & Supply Chain Security: Managing Hidden Cyber Risks

Third-party software is an integral part of modern IT ecosystems, but it also introduces significant security risks. From open-source dependencies to commercial software vendors, organizations rely on external code that may harbor vulnerabilities, backdoors, or compliance risks. High-profile breaches have demonstrated how a single weak link in the supply chain can lead to widespread disruption and data compromise.

This presentation will explore the security challenges of third-party software, including software composition analysis (SCA), vendor risk assessments, and the importance of a Software Bill of Materials (SBOM). Also discuss strategies and best practices for mitigating risks through secure procurement, continuous monitoring, and supply chain transparency

Speaker: 

Sabna Sainudeen
Director of Application Security
Carlsberg Group

Unlocking TeamViewer: A Live Demo & Real-World Use Cases

Speaker:

Casper Johansen
Account Executive
TeamViewer

Zero Trust: TeamViewer’s Approach to Cyber Security & Remote Support

Speaker:

Jan Bee
Director of Product Security
TeamViewer

Driving a Cybersecurity Agenda within The OT Space

Creating a cohesive and resilient cybersecurity agenda within IT is our métier, but many CISO’s and IT specialists are now being tasked with creating a comprehensive programme that addresses the new compliance regulations such as NIS2 and DORA. Are we ready to take this responsibility organisationally and do we have the right capabilities to deliver?

Speaker:

Matias Stuven
Director, Infrastructure & Cybersecurity
Royal Unibrew

NIS2 Compliance: Cybersecurity Strategies for Business Leaders

In today’s digital landscape, cybersecurity is a critical concern for businesses of all sizes. “NIS2 compliance: Cybersecurity strategies for business leaders” is a comprehensive event designed to equip business leaders with the knowledge and tools necessary to protect their organizations against evolving cyber threats.

Against the backdrop of NIS2 regulations have been affective October 2024 in most EU countries, attendees will benefit from a series of keynote presentations, interactive workshops, and panel discussions covering a range of topics such as risk management, incident response, regulatory compliance, and the integration of AI in cybersecurity. The event will also provide practical demonstrations of advanced security solutions and the opportunity to network with industry peers.

Participants will leave with a deeper understanding of the current threat landscape, effective strategies for mitigating risks, and actionable steps to enhance their overall cybersecurity posture against upcoming NIS2 regulations in particular. Whether you’re a seasoned IT professional or a business leader looking to fortify your company’s defenses, this event promises to deliver valuable insights and practical knowledge to help you secure your organization’s future in an increasingly digital world.

Panel Questions:

1. NIS2 Regulations:
   • What is the essence of NIS2? Are you aware of what needs to change?
   • Why does it change the way businesses approach cybersecurity?
2. Current Threat Landscape:
   • What are the most significant cybersecurity threats facing businesses today?
   • How have recent high-profile cyberattacks changed the way companies approach cybersecurity?
3. Risk Management:
   • What are the best practices for conducting a comprehensive risk assessment in a business environment?
   • How can businesses prioritize their cybersecurity investments to address the most critical vulnerabilities?
4. Incident Response:
   • What should be included in a robust incident response plan?
   • How can businesses effectively communicate with stakeholders during and after a cybersecurity breach?
5. Regulatory Compliance:
   • What are the key regulatory requirements that businesses need to be aware of in the cybersecurity space?
   • How can companies ensure they stay compliant with evolving cybersecurity regulations?
6. Cybersecurity Strategies:
   • What are the advantages and challenges of adopting a zero-trust security model?
   • How can businesses leverage AI and machine learning to enhance their cybersecurity defences?
7. Employee Training and Awareness:
   • What are the most effective methods for training employees on cybersecurity best practices?
   • How can businesses create a culture of security awareness among their staff?
8. Future Trends:
   • What emerging technologies are likely to impact the future of cybersecurity?
   • How should businesses prepare for potential cybersecurity threats posed by quantum computing?
9. Collaboration and Information Sharing:
   • How can businesses benefit from collaborating with industry peers and government agencies on cybersecurity?
   • What are the best practices for sharing threat intelligence within and across industries?
10. Third-Party Risk:
    • How can businesses effectively manage cybersecurity risks associated with third-party vendors and partners?
    • What due diligence steps should be taken before engaging with third-party service providers?
11. Post-Breach Recovery:
    • What are the critical steps in recovering from a cybersecurity breach?
    • How can businesses minimize the long-term impact of a cyberattack on their operations and reputation?

Moderator: 

Steve Benton
Independent Strategic Cyber Advisor

Panel: 

Tom John F. Jensen
Head of Privacy & Security
Semler Gruppen A/S

Neeraj Avasthi
Solution Train Engineer/ Sr. IT Director
Orsted

Thomas Møldrup Koch
Director Of Security
3shape

Thomas Zuliani
Global CISO
Arla Foods

Nicolai Storm Lund
Vice President – Digital Technology & Information Security
VELUX