Registration and Morning Refreshments in the Exhibit Area

Opening Remarks

Keynote – What the H@ck is Going On

Hackers and criminals are proving to be increasingly effective at breaching corporate networks and gaining footholds. In 2024, we have already seen an incredible number of breaches / public hacks that are not just the typical ransomware attacks. Even a very large Ransomware gang was hacked themselves. The current climate of global conflicts have brought cyberattacks to the front page and into outer space, in this talk you will find out a lot more about what is going on and what to worry about.

Bryan Seeley, World Famous Cyber Security Expert, Ethical Hacker, Author, Former U.S. Marine

Networking Break in the Exhibit Area

Concurrent Sessions

The Double-Edged Sword of AI

AI is transforming cybersecurity, offering tools that can both protect and pose risks to organizations. But how do we navigate this double-edged sword? This session delves into the dual nature of AI—how it serves as a powerful force for good, enhancing security operations and fortifying defenses, while also being exploited by cybercriminals to launch sophisticated attacks. Through this dual lens, we'll explore strategies to harness AI's potential for securing your organization while staying vigilant against its misuse. Join us to gain insights into leveraging AI responsibly to create a safer digital world.

Collaborative Cyber Crisis Management

When a cyber incident occurs, a fragmented response can lead to confusion and inefficiency. This session emphasizes the importance of a unified and integrated crisis management strategy for public sector organizations. By bringing together IT, security, legal, and communications teams, attendees will learn how to build a culture of resilience that ensures swift and effective responses to cyber threats. We’ll discuss how breaking down organizational silos and fostering collaboration can enhance incident response, recovery, and continuity efforts. With insights from experts and real-world scenarios, this session will equip you with the tools to develop a comprehensive, resilient approach to cybersecurity that aligns with best practices and keeps your organization prepared for any crisis.

Aligning Procurement and Funding with the NIST 2.0 Framework

In an era of increasing cyber threats, California’s public sector must innovate its budget decisions to ensure a secure digital future for all residents. How can IT leaders identify, prioritize, and justify budget proposals that align with the latest cybersecurity standards? This session explores the integration of the NIST Cybersecurity Framework 2.0 into risk-informed budget planning, offering practical insights on leveraging service requests, grants, and creative funding. Learn how to build a strong ROI and justification for your projects while effectively managing third-party risks and service level agreements. Join us to gain actionable insights that will empower you to make informed, risk-based budget decisions that safeguard the digital future of California’s residents.

Exercising Beyond Security: Collaborating Across the Enterprise

This session is designed to spark interest and raise awareness about the importance of conducting exercises within your organization. The panel features key participants from California’s Statewide Cyberstorm, part of the most recent CISA global exercise. These experts successfully tested various aspects of their Incident Response (IR), Disaster Recovery (DR), Business Continuity Plans (BCP), and Communication Plans.

In this session, we will explore:

• How to secure buy-in from executive leadership

• Strategies for engaging operational business units

• The essential steps to building a comprehensive exercise

Join us to gain insights from seasoned professionals and enhance your organization’s readiness.

Navigating Identity and Privacy in a Connected World

In an increasingly digital world, managing identities is crucial to maintaining both security and privacy within an organization. This session will explore how effective identity management practices can help mitigate risks, including insider threats, while protecting sensitive information and respecting privacy. Attendees will learn about the importance of balancing access control with the need to safeguard against internal and external threats, as well as the role privacy plays in building trust across the organization. Whether you’re a technical expert or a business leader, this session will provide valuable insights into the strategies that can help your organization navigate these complex challenges.

Unlocking the Cyber Lexicon

Effective communication is essential to ensure that cybersecurity is prioritized across all levels of an organization, yet translating complex cyber concepts into clear, impactful messages can be challenging. This session is designed to help cybersecurity professionals convey the importance of security initiatives in a way that resonates with all stakeholders. We’ll explore strategies for framing cybersecurity as a vital part of the organization’s overall mission, emphasizing the role of a CISO as not just a technical expert, but a key business leader and steward. Learn how to effectively prioritize your time, communicate the value of cybersecurity investments, and position yourself as an integral part of the organization's success. Join us to discover how to build a culture of understanding that bridges the gap between cybersecurity and broader organizational goals.

Lunch

Bits & Bytes

Short Break

Please proceed to the concurrent sessions.

Concurrent Sessions

Guarding the Golden State’s Supply Chains

In an increasingly interconnected world, the resilience of supply chains is vital to California's public sector. How can we ensure that disruptions are minimized, and risks are effectively managed? This session will delve into proven strategies for fortifying supply chains, emphasizing risk management practices tailored to the needs of public sector technology leaders. Attendees will explore real-world examples and gain actionable insights to enhance the security and resilience of supply chains critical to the welfare of Californians. Join us to learn how to safeguard essential services and maintain the trust of the residents you serve.

SOCs as Practice

A Security Operations Center (SOC) isn’t just a physical place—it’s an integrated system of people, processes, and technology working together to secure your organization. Whether or not you have a physically defined SOC, you’re likely already performing SOC functions. This session will clarify the real role of a SOC, focusing on the holistic approach to security operations. We’ll discuss how SOCs operate, the essential components of continuous monitoring and incident response, and why every agency, regardless of size, needs to understand and implement SOC principles. Discover how to effectively manage and mature your SOC to protect Californians and maintain the trust of the residents you serve.

ISO Speed Mentoring: Unlocking California’s Genius

Are you ready to fast-track your cybersecurity expertise? Join California’s top public sector security leaders for an ISO Speed Mentoring session designed to provide you with rapid, actionable insights. In this dynamic format, you’ll engage with industry veterans, gaining firsthand knowledge on how to tackle the most pressing security challenges in the public sector. Whether you’re seeking career advice, technical tips, or strategic guidance, this session offers a rare opportunity to connect with the state’s leading security minds. Elevate your understanding and leave equipped with the tools you need to protect Californians in today’s digital landscape.

2024 Update: California's Cybersecurity Education and Workforce Development

As we move into 2024, California continues to make strides in cybersecurity education and workforce development. This session will explore the latest collaborations between key stakeholders in K-12 and Higher Education, examining how these partnerships are driving the evolution of career education pipelines. We’ll delve into the current landscape of degree programs, certificates, and digital badging, highlighting what’s new and what’s working. Additionally, the session will showcase innovative approaches like apprenticeships and other hands-on models that are proving effective in building a skilled cybersecurity workforce. Join us for an up-to-date overview of how California is preparing the next generation of cyber professionals, ensuring the state remains at the forefront of cybersecurity innovation and resilience.

Whole-of-Government Strategies for Cybersecurity

In today’s digital landscape, cyber threats demand a unified and coordinated response. This session explores how California is advancing a whole-of-government approach to cybersecurity, uniting federal, state, and local efforts to build a robust defense. Featuring insights from CISA and other key leaders, the discussion will highlight how strong intergovernmental relationships play a crucial role in bridging gaps between agencies and ensuring cohesive policies, procedures, and data strategies. By leveraging existing resources and fostering collaboration, California’s federated approach not only enhances its cybersecurity posture but also underscores the power of partnerships in protecting all Californians. Join us to learn how these combined efforts are shaping a more secure and resilient future.

Networking Break in the Exhibit Area

General Session

Networking Reception in the Exhibit Area

End of Conference

Conference times, agenda, and speakers are subject to change.