Artificial Intelligence & Machine Learning , Fraud Management & Cybercrime , Identity & Access Management

London Cybersecurity Summit: Building Cyber Resilience

At the annual Cybersecurity Summit: London, Information Security Media Group recently brought together top cybersecurity professionals, executives and thought leaders to find solutions to the latest threats, identity-related weaknesses and emerging risks posed by artificial intelligence technology.

See Also: Gartner Guide for Digital Forensics and Incident Response

The event included keynotes from Heather Lowrie, former CISO of the University of Manchester, and Jon Staniforth, former CISO of Royal Mail and CyberEdBoard member, who shared real-world experiences of responding to and recovering from ransomware attacks. The session gave attendees critical insights into the human and organizational impacts of these attacks and the importance of collaboration, communication and empathy during incident response. Ian Thornton-Trump, CISO of Cyjax and CyberEdBoard member who moderated the discussion, encouraged attendees to have an open dialogue on balancing the technical incident response with the softer skills needed to manage the stress and fallout.

Power and Perils of AI

Throughout the summit, AI emerged as a dominant theme. A panel discussion on AI-enhanced cyberthreats explored how cybercriminals are using AI to develop more sophisticated attack methods, such as automated phishing and AI-driven malware. Industry experts, including Nathan Swain, CISO at Binance; Max Kington, CISO of global markets at BNP Paribas; and Surinder Lall, senior vice president of global information security risk management at Paramount and CyberEdBoard member, provided shared how organizations can mitigate new AI-fueled risks by enhancing their AI threat detection capabilities and refining their incident response protocols.

But AI poses both challenges and opportunities for defenders offering capabilities such as predictive resilience to safeguard critical business operations attacks. The message from the panelists was clear: Cybersecurity strategies must evolve with AI.

Securing Identities in a Connected World

Another major focus of the summit was identity compromise, which continues to be a core vulnerability in today's highly connected ecosystems.

"The security experts on our 'Hackers Don't Hack In, They Log In' panel described why identity compromise attacks have been intensifying and what to do about it," said Mathew Schwartz, executive editor of DataBreachToday and Europe at ISMG. "With so many ransomware attacks beginning with low-tech compromises such as social engineering of employees and help desks, getting actionable steps from front-line CISOs for locking down identities and privileges is more important than ever."

This session, led by Thornton-Trump; James Maude, field CTO at BeyondTrust; and Victor Murineanu, information security manager of Chelsea Football Club, reinforced the importance of integrating identity and access management tools with security functions to effectively control and monitor access to critical systems.

In the discussion on cross-channel resilience, speakers provided a detailed analysis of the key EU regulations shaping the cybersecurity landscape, including NIS2, DORA and the AI Act. The panel, led by experts from various industries, examined the challenges that U.K. organizations face in the wake of Brexit. They emphasized the need for cross-border compliance strategies. Practical insights on aligning with these evolving regulations were shared, providing attendees with a road map to navigate the complex post-Brexit regulatory environment.

"The ISMG London Summit was a resounding success, offering attendees an engaging and highly educational experience with the latest insights into regulatory developments and cybersecurity practices," said Anna Delaney, director of productions at ISMG. "The Solution Room on cyber deception was an eye-opening experience, as we explored the growing threats posed by deepfakes and advanced social engineering tactics. Participants had to overcome the challenges of verifying authenticity in today's landscape, where deception tactics are evolving faster than ever."

Key Takeaways

• Identity-based attacks, particularly those involving compromised credentials, are becoming a major entry point for cyber incidents.
• Organizations must enhance verification processes to mitigate the risks of costly mistakes, particularly in the face of evolving threats such as deepfakes and advanced social engineering tactics.
• Businesses need to establish stronger partnerships with law enforcement, as many organizations face challenges in reporting and managing cyber incidents effectively.

Join us at ISMG's Cybersecurity Summit: Canada East on Sep. 26, 2024. Discover cutting-edge strategies and insights from industry experts to safeguard your organization against evolving cyberthreats.