California Cybersecurity Education Summit 2023 Banner

Overview

Cyber-attacks have increased dramatically over the last few years. The 2023 California Cybersecurity Education Summit provided an opportunity for government technology professionals to learn about the latest efforts to defend, respond and recover from cyber criminals who wish to do harm. The Summit, hosted by the California Department of Technology (CDT), the Governor’s Office of Emergency Services (CalOES), California Highway Patrol (CHP) and the California Department of Military (CalGuard), included cybersecurity leaders from state and local government throughout California.

A message from our Keynote Speaker

The California Cybersecurity Education Summit is an essential event for security professionals and educators in the public and private sectors. It is a yearly focal point in the ongoing mission to safeguard Californians against cyber threats that have the potential to disrupt daily activities and impede our ability to provide services. It is also an opportunity to introduce the cybersecurity field to, and educate, our next generation workforce. I am eagerly anticipating the opportunity to see everyone at this in-person event in 2023 to exchange ideas about the latest trends, training, and techniques to bolster our state's security. We encourage you to join CDT, CalOES, CHP, and the CA Military Department at the Cybersecurity Education Summit this October. 

– Vitaliy Panych, State Chief Information Security Officer, California Department of Technology

Speakers

Liana Bailey-Crimmins

Liana Bailey-Crimmins

State Chief Information Officer and Director, Department of Technology, State of California

Governor Gavin Newsom appointed Liana Bailey-Crimmins state CIO and director of CDT in June 2022. Director Bailey-Crimmins, who has been serving as state chief technology officer and CDT’s deputy director of the Office of Technology Services since early 2021, has more than 30 years of state government technology experience.
In these pivotal roles, she is tasked with improving technology performance as an investment in California’s future and advises the governor on the strategic management of the state’s technology resources. She provides the administration with best approaches to implement state technology-related strategic plans, policies, standards, and enterprise architecture. She is also working to close the state’s digital divide as chair of the California Broadband Council and Middle-Mile Broadband Advisory Committee.
Director Bailey-Crimmins’ public service includes executive positions as chief information security officer at the California Public Employees’ Retirement System, where she led and oversaw the team responsible for protecting the private data of nearly 2 million CalPERS members and a $400 billion investment portfolio. She also served as CalPERS’ chief health director and its chief information officer. Before joining CalPERS, she was the information technology director and CIO of California Correctional Health Care Services and project director of the California Information Technology Infrastructure Project.

More
Samitha Amarasiri

Samitha Amarasiri

Managing Partner, Optiv

As Managing Partner at Optiv, Samitha primarily focuses on Financial Services and large enterprise clients. Samitha combines his cyber experience with his knowledge of the business, technology, risk management, and regulatory requirements of Financial Services organizations.
Samitha brings over 20 years of demonstrated success at strategy, implementation, and operating cyber security programs at leading Financial Services organizations. Samitha has experience partnering with all levels of the organization from the board of directors to engineers. Samitha’s areas of focus include:
· Security program and strategy
· Third Party risk management
· Identity and Access Management
· Data protection
· Incident response and recovery
· Cyber Resiliency

More
André Benguerel

André Benguerel

Technical Consultant, Nasuni

Andre Benguerel is a California Bay Area native whose career in technology started after high school when he joined the United States Air Force. His Air Force career provided excellent training while working in very diverse, austere and highly secure environments. This provided a solid foundation for IT systems in general with a security mind-set. In 2007 he joined Riverbed Technologies and covered the Bay Area in the heydays of WAN optimization. Towards the end of his 6.5 years there he cut his teeth on file systems, storage and the early days of cloud gateways. Seeing a new market emerging for cloud-backed global file systems Andre made the jump to Nasuni early in the company’s history. 2023 marks Andre’s tenth year at Nasuni where he has seen the market and company grow and expand rapidly. Today Andre serves as a Technical Consultant covering the West Coast and Nasuni’s largest customers under the Strategic Accounts team.

More
Amie Bergin

Amie Bergin

Division of Apprenticeship Standards, Apprenticeship Expansion unit, Department of Industrial Relations, State of California

Amie has more than 20 years of experience in labor relations, human resources, and investigations across the public, private, and non-profit sectors. She has been with the Department of Industrial Relations since 2009. Throughout her career, she has worked with apprenticeship and workforce initiatives, including collective bargaining for apprentices, creating and promoting apprentice programs in collaboration with public sector labor representatives, and enforcing apprentice prevailing wage ratios and wage rates on publicly funded construction projects. She also has experience with workforce and training development for diverse and underserved populations in the non-profit sector. Amie is a Certified Mediator with extensive experience negotiating labor and employment disputes. She holds a Master of Labor Relations and Human Resources from the University of Rhode Island.

More
Phil Bertolini

Phil Bertolini

Senior Vice President, Government Technology

Phil Bertolini is a senior vice president for Government Technology, the premiere event and thought leadership content provider for state and local government technology professionals. Previously, he served as deputy county executive and CIO for Oakland County, Michigan. During his 31-year tenure, Phil built a world-class IT organization in the second-largest county in Michigan, just north of Detroit. As Oakland County CIO, he oversaw more than 150 employees serving over 1.2 million residents. In 2005, he was also promoted to deputy county executive, holding dual positions until his retirement. Phil’s efforts earned the county national attention, winning numerous awards for technology innovation and excellence. He was named Governing Magazine’s Public Official of the Year and Government Technology Magazine’s Top 25 Doers, Dreamers & Drivers. He was also honored by the President Obama White House as a Champion of Change.

More
Jerald Carter

Jerald Carter

Partner & Global Leader, ServiceNow Risk & Security Operations

Jerald Carter is a Partner and Global Leader for Wipro’s ServiceNow Security Operations and Operational Technology Practices. The Wipro team of over 100 consultants focuses on delivering workflow enabled solutions to rapidly increase visibility to threats and reduce overall cybersecurity risk. He has over 20 years of consulting experience in roles that include IT, Application Development, Governance Risk and Compliance, and Cybersecurity serving clients in State and Local Government, Financial Services, Life Sciences, Manufacturing, and Oil & Gas.

More
Keith Clement

Keith Clement

Professor, California State University Fresno

Dr. Keith Clement is Professor of Criminology at California State University, Fresno. Dr. Clement Chairs the Workforce Development/Education Subcommittee of the California Cybersecurity Task Force led by the California Governor’s Office of Emergency Services (Cal OES) and California Department of Technology. Professor Clement authored the California Cybersecurity Workforce Development and Education Strategy and Framework (2020) and implementing the California Cybersecurity Career Education Pipeline and Pathway Project (C3EP3) to prepare 50,000 cybersecurity professionals for statewide employment. He also co-authored the California Cybersecurity Essential Workforce Youth Pre-/Registered Apprentice Talent Model Framework/Strategy. He co-organized the 2020 California Cybersecurity Industry Convening Meeting (virtual) and hosted the 2022 CSU Systemwide Virtual Cybersecurity Roundtable Meeting. Professor Clement Chairs the Information Technology Subcommittee of the California Interagency Advisory Committee on Apprenticeships (IACA). In terms of previous service, Dr. Clement received a U.S. Department of Homeland Security (DHS) Early Career Scientific Leadership Award (2008).
Dr. Clement facilitates and enhances IT-Cybersecurity collaboration with industry, education/higher education, and public sector. The common purpose is developing strong partnerships and resilient cyber communities through alignment and linkage of statewide education career pipelines/pathways. Pipelines prepare all segments of the cyber talent pool, contribute significantly to California cybersecurity posture, and serve as engine for transformative and equitable economic growth.

More
John Cleveland

John Cleveland

Deputy State Chief Information Security Officer, Department of Technology, State of California

John Cleveland is California’s Deputy State Chief Information Security Officer with the California Department of Technology (CDT). 
Prior to his current position, John was manager of CDT’s Statewide Security Operations Center. His other positions included security operations chief at the Employment Development Department, chief information security officer at the Department of Child Support Services, and chief technology officer at the Contractors State License Board. He has been instrumental in his previous roles devising and implementing security operations strategies and has built security controls for some of the state’s largest benefit-based systems.
John brings over 20 years of private sector information security and technology management experience, including roles as service delivery manager for Banyan Systems, consulting manager and security practice manager at Lucent Worldwide Services, and principal consultant and owner of his own security consulting business. 
He is an Iraq war veteran with over 10 years of military service.

More
William (Chip) Crane

William (Chip) Crane

Cybersecurity Executive Advisor, IBM

William “Chip” Crane worked for a global Fortune 500 company in a deputy role reporting directly to the CISO. Prior to joining IBM, Chip was also the CIO of Park Seed Company - one of America's oldest and largest mail-order seed and plant companies founded in 1868 by a 15-year-old George W. Park. Overall he has 20 years + of IT Security leadership and technical experience. Chip now serves as the Security Technical Sales Leader for IBM Americas where he meets with CISOs and CIOs from large and small organizations throughout the U.S., Canada and Latin America.

More
Mike Driessen

Mike Driessen

Vice President, Government Technology

Mike Driessen joined Government Technology in 2021 as the VP of Subscription Services, where he is responsible for managing execution, strategy and operations for all recurring revenue services. He also oversees Navigator, a market and sales intelligence tool for private-sector SLED teams, and Techwire and Industry Insider – Texas Edition, each of which provide daily news and insights into the California and Texas GovTech markets.
Mike brings over 25 years of experience in the IT consulting and systems integration industry with firms like Accenture, Grant Thornton and Hitachi Consulting. His experience covers Sales and Marketing leadership, advising on Digital Strategies, and managing Enterprise Application alliances and implementations. He has managed large global teams and led start-ups. Mike lives in Los Angeles, although he grew up in the Midwest, and graduated from Marquette University with a BS in Mechanical Engineering and a minor in Business Administration.

More
Jon Ford

Jon Ford

Mandiant Sr. Practice Leader, SLED, Google Public Sector

Mr. Ford is 25-year veteran in cybersecurity, incident response, and intelligence led cyber operations in both government and commercial sectors. Prior to joining Mandiant, Mr. Ford served in executive leadership roles for the Federal Bureau of Investigation (FBI). Mr. Ford served as the responsible executive to the U.S. Cryptologic Centers for strategic and tactical oversight of global cyber operations and key asset protection. In these roles. Mr. Ford developed the framework used by the U.S. Government to manage risk of cyber threats supporting government and critical infrastructure capabilities receiving recognition by the White House National Security Council and the United States Congress.
Currently, Mr. Ford serves as the Senior Executive to Mandiant’s multi-lateral partnerships and Pinnacle clients. Mr. Ford leads operations, strategy and solutions for our global partners, and globally leads Mandiant’s Insider Threat risk offerings. Mr. Ford coaches’ boards and executives on how to measure and manage enterprise risk, regularly speaks at industry conferences. Mr. Ford is a member of the Geneva Dialogue on Responsible Behavior in Cyberspace and the Global Forum on Cyber Expertise. Mr. Ford is the founder of Mandiant’s
Elevate program to advance women in IT security into senior leadership and Board positions.
Mr. Ford serves as an adjunct professor teaching advanced curricula on cybersecurity and risk frameworks at St. Mary’s University. Mr. Ford is a graduate of Harvard, John F. Kennedy School on Cybersecurity Policy; a graduate of Northwestern University, Kellogg School of Business in Strategic Change Leadership; and a graduate of Carnegie Melon University’s series on Insider Threats. Mr. Ford is a certified Project Management Professional (PMP), a Certified in Risk and Information Systems Control (CRISC), a Certified Information Security Manager (CISM), a Certified Information System Security Professional (CISSP), and a Leadership Professional in Ethics and Compliance (LPEC) professional. Mr. Ford also holds several Global Information Assurance Certifications (GIAC). Mr. Ford is the recipient of the Director of National Intelligence
Certificate of Distinction and Meritorious Unit Citation.

More
Tommy Gardner

Tommy Gardner

Chief Technology Officer, HP Federal, HP Inc.

Tommy Gardner is HP’s Chief Technology Officer for HP Federal, spanning the US Federal Agencies, Higher Education, K-12 Education, State and Local government customer segments, as well as Federal Systems Integrators. His current responsibilities include technology leadership, strategic technology plans, product and technology strategies, sales force technical support, and customer and partner relationships.
Previously, Tommy has served as the Chief Technology Officer for Jacobs Engineering, Scitor, and ManTech. Earlier in his career he was a senior technical executive at Raytheon. In the U.S. Navy he served as the Deputy for Science and Technology for the Chief of Naval Research. He oversaw the Navy’s Deep Submergence Program as well as its Advanced Technology Program. He also commanded the nuclear submarine, USS San Juan (SSN 751).
Tommy’s educational background covers multiple disciplines and fields of interest including: cybersecurity, data science, blockchain, quantum information science, artificial intelligence, high performance computing and systems integration.
Tommy holds a B.S. in Mechanical Engineering from the U.S. Naval Academy, a Masters in Public Administration from Harvard University, an M.S. in Management of Technology from MIT and a Ph. D. in Energy Economics from George Washington University. He is a Professional Engineer, an ASME Fellow, and serves on the ASME Board of Governors, the ANSI Board of Directors and the U. S. Council on Competitiveness as the Co-chair of the Advanced Computer Roundtable.

More
Chance Grubb

Chance Grubb

Government Engagement Director, StateRAMP

Chance Grubb serves as the Government Engagement Director for StateRAMP. Chance possesses over 17 years of state government experience in procurement, information technology and cybersecurity. During his time at the State of Oklahoma, he oversaw several statewide programs that included establishing a vendor management program, sharing of cyber threat intelligence through the OK-ISAC and maturing a third-party security program.

More
James Herndon

James Herndon

Senior Security Consultant, e360

James (Jim) has over 20 years of consulting experience in the architecture, development, and testing of large-scale software implementations for over twenty state and county government departments, universities, and private companies. Jim has provided consulting services to more than 15 California state agencies performing Application Security Assessments on more than 200 web applications ranging from a few pages to over 600 pages of complex functionality.

More
Jeff Jennings

Jeff Jennings

SLED Practice Director, Fortinet

Jennings has over 23 years of experience in the K-20 sector, as well as 21 years of experience in the FCC E-rate program. He is an accomplished leader of sales, marketing & compliance/support teams. He brings to Fortinet extensive expertise in SLED, EDU, K-12, Education technology, funding, purchasing practices, e-rate federal funding consulting/compliance and strategic planning. He has proven to be successful in providing consultative services to local government & local education agencies (LEA’s) as well as school districts and state agencies.

More
Frank Johnson

Frank Johnson

Vice President of Federal, Lookout

Johnson is the VP of Federal at Lookout, where he is a visionary and servant leader who brings years of experience designing strategies to lead organizational development, facilitate digital transformation and build high-performing teams centered around a common vision.
Prior to joining Lookout, Johnson was the City of Baltimore’s Chief Information Officer and Chief Digital Officer. As a former “ransomware battle-tested” CIO, he is now focused on helping others in all aspects of cyber security. Providing cyber thought leadership and best practices as an Ambassador of the Cybersecurity Collaborative – a member organization for CISOs by CISOs.
Across his career, he’s been involved in a massive technological shift from the early days of PCs and servers to the digital economy of today where technology has become not just a tool, but a truly pervasive strategic enabler for competitive advantage.

More
Karl Kopper

Karl Kopper

Chief Information Security Officer, Department of Transportation (Caltrans) and Agency Information Security, California State Transportation Agency

Karl Kopper has been aggressively closing significant gaps in the Caltrans security landscape through securing additional funding and cybersecurity positions. New technologies such as Autonomous Vehicles, Vehicle to Vehicle and Vehicle to Infrastructure are sweeping across the Transportation Industry and need to be secured to provide a safe transportation environment. Karl has been working to secure these new technologies and the convergence of Information Technology (IT) and Operational Technology (OT) in alignment with the Governor’s Five Year Cal-Secure strategy.

More
Dan Lohrmann

Dan Lohrmann

Senior Fellow, Center for Digital Government

Daniel J. Lohrmann is an internationally recognized cybersecurity leader, technologist, keynote speaker and author. He led Michigan government’s cybersecurity and technology infrastructure teams from May 2002 to August 2014, including as enterprise-wide chief security officer (CSO), chief technology officer (CTO) and chief information security officer (CISO). During his distinguished career, he has served both the public and private sectors in a variety of executive leadership capacities including advising senior leaders at the White House, National Governors Association (NGA) and the U.S. Department of Homeland Security (DHS). Throughout his career he has received numerous national awards including CSO of the Year, Public Official of the Year and Computerworld Premier 100 IT Leader.

More
Joseph Maio

Joseph Maio

Information Security Officer, Natural Resources Agency, State of California

Joe Maio is an Information Security Officer and the Security Operations Manager for the California Natural Resources Agency (CNRA). Armed with a degree in Criminal Justice, with a specialization in Information Security and Cyber Forensics from CSU Sacramento, Joe brings a wealth of knowledge and expertise to his role. He is entrusted with the critical task of safeguarding the CNRA's expansive security operations, which include the protection of California's natural resources, along with ensuring the security of over 32,000 employees and their vital technologies.
Joe's career trajectory also includes serving as the Information Security Officer for the California Department of Fish and Wildlife. In this role, he not only ensured the security of the department but also lent his expertise to law enforcement in cyber investigation activities. Before that, Joe contributed to the California Department of Justice, where he played key roles in electronic discovery, cyber forensics, and investigations. His diverse skillset encompasses information security, privacy management, database administration, eDiscovery, cyber forensics, server administration, application development, and project management.
A true lover of security and information technology, Joe Maio is on a mission to safeguard California's natural resources and defend the State against the ever-evolving landscape of cyber threats. His ultimate ambition is to provide tailor-made security solutions and unwavering support to empower organizations, ensuring they can operate securely and autonomously.

More
Steve Meyer

Steve Meyer

Senior Consulting Solutions Architect, World Wide Technologies

With 20 years of cybersecurity experience, Steve Meyer has a proven track record of success in building teams and relationships, communicating vision, developing risk mitigation strategies and leading teams that respond to crises with calm confidence.
As a Senior Security Consultant with World Wide Technology, Mr. Meyer provides enablement with cybersecurity solutions for multiple teams across state and local governments, as well as both K-12 and higher education. He serves as a subject matter expert and provides guidance by leveraging knowledge across multiple practices. Understanding customers' needs and demonstrating how security products and services can strategically empower business is at the core of his practice.
Before WWT, Mr. Meyer was a 21-year civil servant with the State of Missouri, with his most recent position being CISO. While there, he was instrumental in establishing the Security Operations Center, implementing the security awareness program, developing comprehensive security strategies, and reducing operational risk.

More
Eric Nehls

Eric Nehls

Cyber Policy and Strategy Planner, Cal-CSIC, Homeland Security Division, Cal OES

Eric Nehls is a California native and life-long resident. His career in technology and strategy development grew through a unique mixture of military, industry, and government service. His military career began with four years on active duty in the Marine Corps, then a short break followed by 18 years in the Air Force Reserve soon after 9/11. He served much of his reserve commitment on active duty including an Iraq tour in 2009. For the last 14 years of his military career before he retired, he was an all-source intelligence analyst including four years active duty with U.S. Cyber Command, focused on support to strategic plans. He developed subject matter expertise in cybersecurity, cyberwarfare, and space/counterspace systems. In between military stints, he learned the information technology trade at a fortune 500 tech company and a small regional bank. With IT as a bridge, he was mentored into the information security domain at a San Francisco e-commerce management startup during the dot-com boom. After earning a B.S. in Computer Science at UC Davis, he leveraged his military experience to become a DoD IT contractor and eventually a DoD intelligence contractor and U.S. Space Command J2 plank holder. Finally, he joined California state government service as the California Cybersecurity Integration Center’s first Cyber Policy & Strategy Planner.

More
Tom Osborne

Tom Osborne

Deputy Director, Homeland Security, California Governor’s Office of Emergency Services

Deputy Director Osborne was appointed by Governor Newsom and joined the California Governor’s Office of Emergency Services (Cal OES) in November 2019. Deputy Director Osborne provides direction and oversight to the newly formed Cal OES Homeland Security Division. In this role, Deputy Director Osborne is responsible for the State Threat Assessment System (STAS), the California Cyber Security Integration Center (Cal-CSIC), and the following homeland security programs: the Governor’s Homeland Security Advisory Committee; the Governor’s Creating Safer Communities Task Force; the Governor’s Cybersecurity Task Force; Port and Maritime Security; Chemical Biological, Radiological, Nuclear and Explosive material (CBRNE) Protection and Preparedness; Event Planning Security; Critical Infrastructure Protection; Statewide School Safety; and the BioWatch System. Moreover, Deputy Director Osborne provides administrative oversight to the application of California’s homeland security grants, known as the Homeland Security Grant Program (HSGP) and Urban Area Security Initiative (UASI) — funding that totaled $197,911,000 in FY2019 and received from the U.S. Department of Homeland Security (DHS).
Prior to joining Cal OES, Deputy Director Osborne spent nearly 24 years with the Federal Bureau of Investigation (FBI) as a Special Agent, specializing in national security threat issues. Assigned to the Sacramento Field Office, his final assignment at the FBI was an executive management role as the Assistant Special Agent in Charge (ASAC) overseeing the National Security and Administrative Branches, where his responsibilities included International and Domestic Terrorism, Counterintelligence, Cyber, Critical Incident Response, Surveillance, Training, FBI National Academy, security, facilities, and oversight of all professional staff employees. Deputy Director Osborne also spent over a year in Washington, D.C. as Unit Chief of the FBI’s Counterterrorism Internet Targeting Unit.

More
Vitaliy Panych

Vitaliy Panych

Chief Information Security Officer, Department of Technology, State of California

Vitaliy Panych is the Chief Information Security Officer for the State of California at the California Department of Technology. He was appointed by Gov. Gavin Newsom in February 2021 after serving in an acting roll for nearly two years.
Before landing at CDT in 2019 as the deputy state chief information officer, he was the agency information security officer for the California Department of Corrections and Rehabilitation from 2016 through 2019. He joined the Employment Development Department in 2009 serving as its security and compliance manager. Prior to that, he was at the Franchise Tax Board in 2007, where he became a system software specialist and was later named Information security vulnerability management lead, a role he held until moving to the EDD. A veteran of government service, Vitaliy began his state career as a network engineer at the state’s Teale Data Center in 2003.
He earned bachelors’ degrees in computer science and political science from California State University at Sacramento. His professional portfolio is full of accreditations and distinctions, including several Global Information Assurance Certification (GIAC) credentials.

More
Kyle Sullivan

Kyle Sullivan

Cyber Senior Manager, Deloitte

Kyle is a Cyber Senior Manager at Deloitte and is one of the national leaders of Deloitte’s IT Asset Management service offering. Kyle has over sixteen years of experience and serves clients within Deloitte’s Government and Public Sector practice, concentrating specifically on State, Local, and Higher Education. In addition to his work in the US, Kyle spent two years in Brussels, Belgium managing Deloitte’s IT Asset Management program across Scandinavia. Kyle is currently based in Seattle, WA, where he can be found enjoying the outdoors in the PNW with his family.

More
Maria Thompson

Maria Thompson

State and Local Government Cyber Security Leader, Amazon Web Services

Maria S. Thompson is the State and Local Government Cybersecurity Lead for Amazon Web Services (AWS). In this role, she brings over 20 years of experience in information technology, strategic planning, computer network defense and risk management. Prior to her role with AWS, Maria served as North Carolina’s first State Chief Risk and Security Officer. There she was instrumental in establishing the Whole of State Approach to Cyber. This included the development and implementation of the state’s first Cyber Disruption Plan, and the Joint Cyber Task Force (JCTF). Maria also served 20 years in the United States Marine Corps and retired as the cybersecurity chief/information assurance chief for the Marine Corps. Other security roles held includes certification and accreditation (C&A) lead for the Multi-National Forces – Iraq and senior security engineer in a joint military organization and Security Operations Center lead for a federal agency.

More
Johnny Wong

Johnny Wong

Senior Director, Solutions Architecture, Veracode

Johnny Wong is the Sr. Director of Pre-sales Veracode. He oversees the Solutions Architecture teams for Public Sector, Enterprise, and Channel as well as the SA Operations team. Johnny has been in security his entire career. The first part of his career, he was focused on identity and access management. Johnny started his career as a software developer and after nearly five years of creating insecure code, he was offered an opportunity to not be a software developer and to join the world of pre-sales. He has been with Veracode for over eight years.
Johnny received a BS in Computer Engineering from Tufts University. He and his family reside in Boston and he has no plans to ever leave because of the Boston Celtics! He loves to travel specifically to find and eat at the best restaurants across the world. At this point, the only animal he hasn’t eaten are the endangered or extinct ones.

More
View Speakers

Agenda

Thursday, October 12

8:00 am Pacific

Registration and Morning Refreshments

Magnolia Room, Grand Nave Lobby and 2nd Floor Atrium

9:00 am Pacific

Opening Remarks

Camellia/Gardenia Room

Liana Bailey-Crimmins, State Chief Information Officer and Director, Department of Technology, State of California

Amy Palmer, Deputy Secretary of Communications, California Government Operations Agency

Tom Osborne, Deputy Director of Homeland Security, California Governor's Office of Emergency Services

Vitaliy Panych, State Chief Information Security Officer, Department of Technology, State of California

Major General Matthew Beevers, Adjutant General, California Military Department

9:30 am Pacific

Keynote – Keep Your Head Out of the Cyber Sand: Using Superior Communications to Get the Job Done!

Camellia/Gardenia Room

Risk can take on many forms and governments must understand how to accept it, mitigate it, or insure against it while not sticking their head in the sand to ignore it. How will you assess your cyber risks and balance them against your needs? How will you make the rational decisions needed to be successful? How will you navigate the road to recovery? This session will answer these questions with a focus on ideas that will help you engage your leaders with real-world examples.

Bryce Austin, CEO, TCE Strategy

10:30 am Pacific

Networking Break

Magnolia Room, Grand Nave Lobby and 2nd Floor Atrium

11:00 am Pacific

Concurrent Sessions

Navigating the Ransomware Landscape

3rd Floor Room

Ransomware attacks are not just headline news; they are ever-evolving security threats that require a proactive defense. What can real-life examples teach us about building resilient systems and processes? How should your organization respond to minimize damage and downtime during an attack? This session delves deeper into actual ransomware incidents, showcasing effective strategies for preparation and response.

Moderator: Phil Bertolini, Senior Vice President, Government Technology

Jon Ford, Mandiant Sr. Practice Leader, SLED, Google Public Sector

Tommy Gardner, Chief Technology Officer, HP Federal

Gurinder Bains, Deputy Chief Information Officer, Information Technology Department, City of Oakland

Frank Johnson, VP of Federal, Lookout

Zero Trust: The Present and Future

Tofanelli (2nd Floor)

In an era of sophisticated cyber threats and complex network landscapes, Zero Trust architecture has rapidly become the security standard. How does the CISA Zero Trust Network Access (ZTNA) Maturity Model serve as a blueprint for implementing a robust security strategy? What emerging threats make this approach more crucial than ever? This session will provide an in-depth look at the CISA ZTNA Maturity Model, while also discussing its practical applications in today's remote work and cloud-centric realities.

Moderator: Mike Driessen, Vice President, Government Technology

Mario Garcia, Supervisory Cybersecurity Advisor, CISA

William (Chip) Crane, Cybersecurity Executive Advisor, IBM

Lou Norman, Multi-Domain Security Architect, Cisco

Third Party Risk Management

Carr (2nd Floor)

Third-party vendors can be the weakest link in your cybersecurity chain, making effective risk management essential. How can state RAMP and third-party certifications assure you're working with secure vendors? Besides SOC-2 Type 2, what other benchmarks should be recognized? In this session, we'll demystify the complexities of third-party risk management and introduce you to effective strategies and standard contract language.

Moderator: Glenn Herdrich, Information Security Manager, County of Sacramento

Samitha Amarasiri, Managing Partner, Optiv

Chance Grubb, Government Engagement Director, StateRAMP

Building and Maintaining the Cyber Workforce

Bataglieri (2nd Floor)

Attracting and retaining skilled cybersecurity professionals is a pressing challenge, amplified by the fast-evolving threat landscape. How can organizations leverage internships and early engagement programs to cultivate talent? What role do mentoring and targeted recruiting play in building a strong cybersecurity workforce? This session offers a 360-degree view of workforce development strategies, from early-stage involvement to long-term retention.

Corey Bruins, Conference Director of California Programs and Events, Government Technology

Amie Bergin, Division of Apprenticeship Standards, Apprenticeship Expansion unit, Department of Industrial Relations, State of California

Steve Meyer, Senior Consulting Solutions Architect, World Wide Technologies

Blueprint for Cybersecurity: Harmonizing with State and Federal Strategies

Bondi (2nd Floor)

Navigating the development of a cybersecurity strategy can be complex, especially when aligning it with both state-level guidelines like Cal Secure and federal initiatives such as those from CISA. How do you weave these components into your strategy? What role does workforce and education play in enhancing cybersecurity readiness? And where do you start if you're building a strategy from scratch? This panel will delve into the intricacies of crafting effective cybersecurity strategies in harmony with state and federal guidelines.

Moderator: John Cleveland, Deputy State Chief Information Security Officer, Department of Technology, State of California

Courtney Gleason, Manager, Cyber Security Services, Strategy and Governance, State and Local Government, KPMG

Jeff Jennings, Senior SLED Practice Director, Fortinet

Karl Kopper, Chief Information Security Officer, Department of Transportation (Caltrans) and Agency Information Security, California State Transportation Agency

Eric Nehls, Cyber Policy and Strategy Planner, Cal-CSIC, Homeland Security Division, Cal OES

12:00 pm Pacific

Lunch & Learn – Navigating the Cybersecurity Support Landscape

Camellia/Gardenia Room

Maximize the resources available to you with insights from the California Department of Technology and Cal-CSIC. What state and federal programs are designed to support your cybersecurity initiatives? How can you tap into grants, training, and other forms of assistance? In this Lunch and Learn, you'll get an overview of key resources available to public sector entities, helping you bolster your cybersecurity posture.

Korey Fesliyan, MTOT, Department of Corrections and Rehabilitation, State of California

Jacob Hebb, Senior Incident Responder – Cyber Operations, Cal-CSIC, Homeland Security Division, Cal OES, State of California

Doug Novak, Security Operations Center (SOC) Manager, Office of Information Security, California Department of Technology

Maria Lipana, Cyber Threat Intelligence Branch Chief, California Cybersecurity Integration Center (Cal-CSIC), Homeland Security Division, California Governor’s Office of Emergency Services (Cal OES)

12:30 pm Pacific

Featured Speaker – Navigating Your Cyber Future: Next-Gen Threats, Strategies & Tech

Camellia/Gardenia Room

The Center for Digital Government works tirelessly to analyze the current and future state of cybersecurity. How will governments stay ahead of cyber-attackers? Are the emerging threats just too much? What are the new approaches to addressing cyber challenges? This session will tackle these issues by having the CDG present an update on key issues and trends facing government cybersecurity leaders today.

Dan Lohrmann, Senior Fellow, Center for Digital Government

1:15 pm Pacific

Break

1:25 pm Pacific

Concurrent Sessions

Maximizing AI's Role in Cyber Defense

3rd Floor Room

While Artificial Intelligence can present as a potential risk vector, it is also increasingly becoming a cornerstone in cybersecurity strategies. Do you have a role for AI in your security program? This session will delve into how AI can enhance threat detection, streamline incident response, and improve data analytics, highlighting practical examples and best practices for leveraging AI as a powerful tool in your cybersecurity arsenal.

Moderator: Vitaliy Panych, State Chief Information Security Officer, Department of Technology, State of California

Maria Thompson, State and Local Government Cyber Security Leader, Amazon Web Services

Johnny Wong, Senior Director, Solutions Architecture, Veracode

Securing Your Digital Assets: From Hardware to Data

Tofanelli (2nd Floor)

Asset management goes beyond just hardware and software; it also encompasses data as a critical organizational asset. How can you master your attack surface, including hardware, software, and identities, while also establishing robust data governance frameworks? What does compliance look like when treating data as an asset? This comprehensive session will cover the A to Z of asset management, integrating elements of data governance and compliance.

Moderator: Joseph Maio, Information Security Officer, Natural Resources Agency, State of California

André Benguerel, Technical Consultant, Nasuni

David Lask, Chief Information Security Officer, Department of Forestry and Fire Protection (CAL FIRE), State of California

Kyle Sullivan, Cyber Senior Manager, Deloitte

Risk Mitigation in Infrastructure as Code

Carr (2nd Floor)

Infrastructure as Code has revolutionized IT management, but how do you ensure it's secure? What role do DevSecOps and SecDevOps play in risk mitigation? How can these methodologies be integrated into your software development lifecycle? This session will explore how to infuse security into your Infrastructure as Code practices, offering valuable insights to improve your security posture.

Moderator: Mike Driessen, Vice President, Government Technology

Jerald Carter, Partner & Global Leader, ServiceNow Risk & Security Operations

Guillaume Dubuc, Staff Cloud Solutions Architect, VMware

Web App Vulnerabilities: Scanner Blind Spots & DevSecOps Implications

Bondi (2nd Floor)

In this presentation, 17-year web application penetration tester Jim Herndon will give examples of catastrophic web application vulnerabilities and why they were missed by scanners. He'll also review scanner types and why we seem to expect too much from web application scanners. This will be followed by a discussion of DevOps and DevSecOps, and why we can't lose the human touch in all of the automation. Mr. Herndon will close out with some Ideas on how we can deal with the rapid deployment paradigm of DevOps.

James Herndon, Senior Security Consultant, e360

2023 Update: California's Cybersecurity Education and Workforce Development

Bataglieri (2nd Floor)

Cybersecurity education and workforce development in California have seen notable advancements over the past year. What new collaborations have emerged among major stakeholders and key partners in K-12 and Higher Education? How have career education pipelines evolved, and what is the current status of degree programs, certificates, and digital badging? Additionally, what innovative models have been adopted for effective cybersecurity workforce development, such as apprenticeships? This session will offer an updated overview of the current landscape, focusing on recent developments and innovations in cybersecurity education and workforce development across California.

Moderator: Keith Clement, Professor, California State University Fresno

Erle Hall, Education Programs Consultant, Department of Education, State of California

Markus Geissler, Professor, Computer Information Science, Cosumnes River College

2:25 pm Pacific

Networking Break

Magnolia Room, Grand Nave Lobby and 2nd Floor Atrium

2:45 pm Pacific

General Session – Navigating the AI Paradox in Cybersecurity

Camellia/Gardenia Room

Artificial Intelligence is reshaping the cybersecurity landscape, offering innovative protective measures but also introducing complex ethical and policy questions. This session will delve into how organizations can responsibly integrate AI technologies into their cybersecurity frameworks, touching on governance and risk management aspects, as well as how the State is planning to navigate these evolving challenges. Join us for a nuanced discussion that aims to equip cybersecurity leaders with the insights needed to balance innovation with security.

Joseph Conti, Managing Director, and Ethical & Trustworthy AI Thought Leader, Deloitte

William (Chip) Crane, Cybersecurity Executive Advisor, IBM

3:45 pm Pacific

Networking Reception

Magnolia Room and Grand Nave Lobby

Network with your colleagues and discuss technology solutions with the event exhibitors.

4:30 pm Pacific

End of Conference

Conference times, agenda, and speakers are subject to change.

Sheraton Grand Sacramento

1230 J Street
Sacramento, CA 95814
(916) 447-1700

Get Directions To
Sheraton Grand Sacramento

Advisory Board

Government Representatives

Russell Atterberry
Undersecretary
CalVet
State of California

Andrew Bell
Information Security Officer
Military Department
State of California

Thys Bohr
Supervisor
CalVet
State of California

Brenda Bridges Cruz
Deputy Director, Special Projects
Department of Technology
State of California

Brent Carter
Assistant Chief
California Highway Patrol
State of California

Jennifer Chan
Chief Information Officer
California State Lottery
State of California

Brian Colt
Information Security Officer
Department of Corrections and Rehabilitation
State of California

Tonya D. Digiorno
Director of Information Technology
County of El Dorado

Jun Dai
Associate Professor
California State University

Faith DeuPree
Information Security Officer
Department of Finance
State of California

Jeremy Espiritu
Cybersecurity Training Coordinator
Office of Emergency Services
State of California

MARIO Garcia
Supervisory Cybersecurity Advisor
Cybersecurity and Infrastructure Security Agency
Department of Homeland Security

Pam Greeley
Information Security Officer
Highway Patrol
State of California

Ruth Green
Chief Information Security Officer
Judicial Council
State of California

Marc Hanson
Network Engineer
State of California

Amar Hariharan
Chief Information Officer
Department of Food and Agriculture
State of California

Richard Harmonson
Agency Chief Information Security Officer
Natural Resources Agency
State of California

Glenn Herdrich
Information Security Manager
County of Sacramento

Justyn Howard
Deputy Secretary, Fiscal Policy and Administration
State of California

Lloyd Indig
Chief Information Security Officer
Office of General Counsel, Department of Justice
State of California

Jose Jaramillo
Agency Risk Officer
Labor & Workforce Development Agency
State of California

Jared Johnson
Deputy State CIO & Chief Deputy Director
California Department of Technology
State of California

Marcie Kahbody
Agency Chief Information Officer
Transportation Agency
State of California

Ken Kojima
Agency Information Security Officer
Department of Corrections & Rehabilitation
State of California

Sofia Lim
Chief Executive
State of California

Mikael Magnuson
Cybersecurity Manager
California National Guard
State of California

Joseph Maio
Information Security Officer
Natural Resources Agency
State of California

Isaiah Mall
Chief Information Officer
CalVet
State of California

Mike Marshall
Chief Information Security Officer
Environmental Protection Agency
State of California

Robert Mayorga
Chief Security Officer
Franchise Tax Board
State of California

Eric Nehls
Cyber Policy and Strategy Planner
Office of Emergency Services
State of California

Tom Osborne
Deputy Director of Homeland Security
Office of Emergency Services
State of California

Vitaliy Panych
State Chief Information Security Officer
Department of Technology
State of California

Sandra Peterson
Cal-CSIC Project Manager
Office of Emergency Services
State of California

Aman Prasad
Partner integration Planner
Cal-CSIC
State of California

Michele Robinson
Chief Information Officer
California Department of Technology
State of California

Darice Trafton
Agency Information Security Officer
Business, Consumer Services and Housing Agency
State of California

Industry Representatives

Sejla Begic
Managing Director, Client Relationships Executive
Deloitte

Alyssa Beltramo
Account Executive
Lookout

Chuck Blaskoski
Client Executive
World Wide Technology

Herman Chao
Senior Account Executive
Amazon Web Services

Gary Christofferson
Director
Solution Engineering
VMware

Braden Connolly
Account Executive
Nasuni

Alan Franzenburg
Technical Consultant
HP Inc.

Ron Hamilton
Chief Information Security Officer
e360

Ewa Hoyt
Principal, Technology Sales Leader
IBM

Bruce Kuska
Cybersecurity Specialist
Cisco

John Norkey
Account Executive
Veracode

Shane Rogers
Senior Client Manager
Optiv

Vishal Verma
Director
KPMG LLP

Pat Vitalone
Director
Product Marketing, NGFW & FEX
Fortinet

Bret Waugh
Public Sector Account Manager
Google LLC

Pete White
Senior Advisory Solution Consultant, Security
ServiceNow

Made Possible by Our Corporate Sponsors

Registration Information / Contact Us

Contact Information

2024 Sponsorship opportunities are available. For more information, contact:

Heather Earney
Government Technology
Phone: (916) 932-1339
E-mail: heather.earney@erepublic.com

Venue

Sheraton Grand Sacramento

1230 J Street
Sacramento, CA 95814
(916) 447-1700