Cybersecurity Forward

In 1851, Wisconsin adopted the official state motto, “Forward,” to reflect its continuous drive to be a national leader. This drive to be the best is what Cybersecurity Forward is all about: striving to make UW–Madison, our community, and attendees leaders in cybersecurity. Whether you are a cybersecurity professional or someone wanting to learn practical, everyday cybersecurity skills, Cybersecurity Forward will deliver actionable takeaways to propel you towards a more strategic and proactive approach to cybersecurity.

July 8

Jeff Westphal, Trend Micro

"Your Modernized Application is at Risk. A Pragmatic Approach to Security Design”

DevOps enables businesses to stay agile and respond rapidly to changes in the market. This same agility can put the business at risk if security is not prioritized as the first step to cloud adoption and migration. In this session, learn how to leverage cloud-native controls and integrate security into containerized, serverless, and computer-based architectures. Only through a single integrated toolset can we increase visibility, automate threat detection, and add continuous compliance checks to achieve true application modernization.

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=ed6416619874067c1f103c8c578750d9d

July 15

Chad R. Johnson, University of Wisconsin–Stevens Point

“Analysis Techniques in Image Forgery Detection”

A common frustration in the investigative process is the authentication of digital images. It is difficult to definitively conclude that an image is legitimate for the purpose of evidence collection, subject identification, or timeline reconstruction. This presentation will provide some insight into the tools and techniques used to detect image forgery and alterations beyond mere observation by examining embedded noise, wave-forms, and lossy-format error levels. It will also cover the concept of camera ballistics used to match images to the camera used to capture it.

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e93a38b8d6db30a0817f79670a0829961

July 22

Stefan Wahe & Bob Turner, University of Wisconsin–Madison

“How Cybersecurity Prepared Me to Become a CIO”

As a cybersecurity professional, I spent 20 years guiding how information technology should be secured to support the mission of an organization. During these years, I was often told, "you have to think about how cybersecurity must balance the risk to the needs of the user community." From this, I learned how to speak in academic and business language rather than in cybersecurity terminology. In this presentation, I will share the skills I learned to talk beyond cybersecurity to achieve business decisions and broaden my career journey. Topics include:

-Creating a strategic approach

-Requesting budget

-Demonstrating value

-Building a team

-Communicating your story

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e6ae4b722ee102db5ecca42404e933698

July 29

Bob Turner & Ed Murphy, University of Wisconsin System Administration

“CISO’s Crucible”

This session is a discussion panel on the ups and downs of being an Information Security leader in Higher Education.

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=ed8ced36432a95750f44665bcbab857a3

Aug. 5

Jason Erdmann & Sean Bossinger, University of Wisconsin–Madison

“How to work remotely and securely”

What does it take to make your experience working remotely to be effective and secure? In this live session we will go over lessons that we’ve learned as IT professionals going from primarily working on campus to fully working from home during the pandemic. Major topics will include: home internet (speed and coverage), safely video conferencing, privacy considerations, hardware and software tools that you may need, securing those tools, and how to connect to other resources that you may need.

Moderated by Ellen La Luzerne

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e4b4fcb344a2740abaca1bc4d1fddf321

Aug. 12

Jonathan Mandell, Teepee

“Vendor Cyber Risk Management - CyberSecurity Turned Upside Down”

How do current vendor cyber risk management strategies focus on an insurmountable task - assessing an endless list of vendors with limited resources? Most companies struggle to perform internal risk assessments, and now they are often asked to do so across their entire vendor population. This is not effective and does not make sense. This session will provide tactical ways that companies can minimize cyber risk and fulfill vendor risk compliance requirements.

Moderated by Siggi Eckhardt

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e39845b63f2352dbf0ea7adb74a67e25e

Aug 19

Steven Ramirez, University of Louisville Health & Vu Cap

“Implementing a Successful Cyber Resiliency Program in Healthcare”

What is cyber resilience and why is it important in healthcare? The risk landscape in healthcare is continuously volatile. This session will detail how to prepare your healthcare organization for a devastating cyberattack and how the severity of the breach dictates that healthcare entities prepare a plan that runs its operations at full capacity with minimal impact on patient care.

Moderated by Matt Morton

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e97c895e58793fc87323297231d29181d

Aug. 26

Hannah Tun, OmniSOC - Indiana University

“Threat Hunting and Intelligence: Reducing time from first awareness of a threat anywhere to mitigation everywhere”

Organizations, nowadays, are more focused on arming themselves with better incident response and forensics. However, it usually takes a few months for organizations to realize there is a breach and more time to contain it, increasing financial and reputational damages. What if we start investing in threat hunting and intelligence to reduce the time taken from breach to response? This session will talk about the importance of threat hunting and threat intelligence as well as the benefits of having or outsourcing a focused detection and response team. Aggregating big data feeds from not only other similar organizations but different countries and analyzing them effectively will reduce damage and overall risk to an organization. We will also explore advantages and disadvantages between investing in proactive and reactive measures such as threat intel, hunting, auditing, and forensics.

Moderated by Dorothea Salo

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=eb3641798a885c9cd2af516ce2315f1ce

Sep. 2

[The following session replaces Dave Schroeder’s cancelled presentation on “Securing macOS and iOS”]

Mike Hemberger, Intelligence Analyst, Wisconsin Statewide Intelligence Center (WSIC)

“Your Fusion Center and You”

Cybersecurity is often described as a “team sport”, requiring the efforts of many team members to move forward. This session will discuss the Wisconsin Statewide Intelligence Center’s role in Wisconsin’s team. Mike will discuss the role of the Fusion Center, the “cyber” unit, and the trends in events reported to WSIC during 2020.

Moderated by Shannon Larson

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=ea6a9b0cc6d3666bc45dfa13459520801

Sep. 9

Dr. Annette Smith, Wisconsin Department of Public Instruction & Bill Nash, Wisconsin Department of Administration

“You Have Been Hit By a Cyber Attack: What do you do?“

What can you do if your organization is the victim of a cyber-attack? Join this interactive conversation with Bill Nash, WI Chief Information Security Officer, and Annette Smith, WI DPI Director of Instructional Services, who will share the latest statistics, best practices, and state resources that can be used if you are the victim of a cyber attack.

Moderated by Matt Morton

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e5fdf487a06a3eb11ea577457cf3a1819

Sep. 16

Heather Stratford, Stronger International Inc.

“The FitBit Economy: MicroLearning and Culture Change”

The time for effective cybersecurity education has never been more critical to the safety of many organizations, but the traditional model of cybersecurity education has become less effective. MicroLearning and new technologies will change the face of cybersecurity education delivery and effectiveness encouraging real cultural shifts. Learn about the new model for cybersecurity culture change and how to obtain it.

Moderated by Jeff Savoy

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e74750b97b8b38b2c5ceb28bcc8406246

Sep. 23

Casey Cammilleri, Sprocket Security

“Modern Penetration Testing - Common Intrusion Methods”

Learn how the modern approaches to penetration testing are discovering new-age (and old-age) problems with IT systems. Offensive testing techniques are evolving. DevOps, cloud environments, and vendor integrations have shifted our mindsets on how we discover risk and handle mitigation. Learn if your company could fall victim to the most common attacks while enjoying examples from real-word penetration tests.

Moderated by Harriet Allen

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=e618fe3e940d6f4df652b86ac9c8abac9

Sep. 30

Paul Proctor, Gartner

“Enterprise Fitness: Optimize Risk, Value and Cost in a Business Context to Prioritize Cybersecurity Investments”

This session will discuss how technology investments can be put in a business context, how technology business benefits should be measured, and how the risk of business dependencies on technology can be assessed.

Moderated by Tim Bohn

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=ec50fda9821ec4664a576468585a06349

Oct. 7

"Breaking In, Taking Action: Women of Cybersecurity"

Please join Cybersecurity Forward 2020 and the UW–Madison Women in IT (UW-WIT) on Wednesday, October 7th 2020 between Noon – 1 p.m. for an engaging panel of six women, each at various stages in their careers from UW–Madison, the University of Indiana and the Wisconsin Department of Public Instruction, where they will share their words of wisdom and highlight their individual achievements, lessons learned and the importance of promoting inclusion and diversity in the workplace as it relates to the Cybersecurity domain. Brief comments prior to the start of the panel will be provided by Bob Turner, UW-Madison CISO and Sara Tate-Pederson, IT Policy Writer and Analyst with the UW-Madison Office of Cybersecurity and current co-lead of UW-WIT.

Moderator:

Amanda Thornton, UW-Madison Atmospheric Oceanic & Space Sciences

Panelists:

• Dr. Annette Smith, Director of Instruction Technology Services at the Wisconsin Department of Public Instruction

• Amy Diestler, Cybersecurity Governance, Risk, and Compliance Manager at UW-Madison School of Medicine and Public Health

• Susan Weier, Security and Systems Analyst at UW-Madison College of Letters and Science Learning Support Services.

• Patti Havlicek, Interim Assistant Director of Governance, Risk Assessment and Compliance in UW-Madison’s Office of Cybersecurity

• Hannah Tun, Lead Security Engineer with OmniSOC at Indiana University

• Bridget Bartell, Cybersecurity Analyst, UW-Madison

On-line event link:

https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=ef1c8d50ecc79e0a52b060fbe2dfa42bb

Oct. 14

Bob Turner, University of Wisconsin–Madison

"Cybersecurity Forward: Backward and Forward"

What threads tie this year’s Cybersecurity Forward lectures together? What ideas and themes were explored? What might be in store for Cybersecurity Forward 2021 and what’s planned for Cybersecurity awareness month? Join us as we discuss the Cybersecurity Forward 2020 that was and the Cybersecurity events that are to come.

On-line event link: https://uwmadison.webex.com/uwmadison/onstage/g.php?MTID=ed2c03a188c0474c4e05e4210f33f813d