The Cybersecurity Workshop combines insights from experts with hands-on simulations to equip members of the Audit and Risk Committees to better understand cyber risk preparedness and to take practical steps ensuring the bank is ready to respond. With individual directors and officers identifying cyber risk as a top issue, workshop participants spend time addressing potential scenarios and developing response plans to execute should a hack, breach or attack occur.

This workshop provides the opportunity to work with a bank operations expert, a Chief Information Security Officer, a bank cybersecurity expert and a lawyer specializing in banking litigation to understand a holistic view of cybersecurity and compliance matters essential for banking executives and boards. Experts guide participants through a series of realistic scenarios associated with a significant cyber event. Participants will gain a better understanding of the committee’s role in ensuring the bank is prepared to respond to a real-world cyber attack and breach, as well as actionable materials to improve the bank’s ability to respond quickly and effectively. The Cybersecurity Workshop is limited to 60 participants.

AGENDA | MONDAY, JUNE 11 | Sponsored by: DefenseStorm, Inc.

9:30 a.m. – 10:00 a.m.
Registration + Breakfast

10:00 a.m. – 10:05 a.m.
Welcome
Mika Moser, President, Bank Director

10:05 a.m. – 10:35 a.m.
Bank Cyber Safety and Soundness:  An Introduction to Cyber Risk and Incident Response
John F. Friedemann
, Managing Partner, Friedemann Goldberg LLP
Alex Hernandez
, Vice President, DefenseStorm, Inc.
Bob Thibodeaux, Chief Information Security Officer, DefenseStorm, Inc.
This session provides an overview of cyber risk from the point of view of the bank board and discusses the inter-relationship of cybersecurity and cyber compliance.  This content lays the groundwork for the day’s real-world simulations and for discussions around “preparing for” and “responding to” a cyber attack and breach, while outlining the importance of having a well-defined Incident Response Plan.

10:35 a.m. – 11:15 a.m.
Cyber Incident Tabletop Exercise – Part One
Attendees break into groups of fictitious banks and assume various management roles for their assigned bank.  Each group will receive a current “state of affairs” for cybersecurity and cyber compliance on their bank, and experts will work with each team on Part One of a real-world simulation. Participants discuss responses within their group, as well as with the broader group.  All will gain key takeaways for ensuring preparedness, as well as the critical steps needed during the initial uncovering of a significant cyber incident.

11:15 a.m. – 11:30 a.m.
Refreshment Break

11:30 a.m. – 12:30 p.m.
Cyber Incident Tabletop Exercise – Part Two
The simulation continues with the second chapter of a real-world simulation. Participants uncover more information to factor into the decisions they need to make to ensure the bank and its customers are protected. The bank groups discuss and share their findings and decisions with the broader group.

12:30 p.m. – 1:30 p.m.
Networking Lunch

1:30 p.m. – 2:15 p.m.
Cyber Incident Tabletop Exercise – Part Three
The final chapter of the simulation plays out with participants learning that they must execute a broader response beyond just the bank and required notification channels. Minimizing risk and longer-term fallout are key considerations. Participants can expect a healthy discussion around handling external requests for information as the simulation comes to its final conclusion.

2:15 p.m. – 3:00 p.m.
Peer Collaboration
Participants join together with their peers to discuss the information provided, the lessons learned during the simulation and what their own bank’s expectations should be around cybersecurity, cyber compliance and preparing for a real cyber event.

3:00 p.m. – 3:15 p.m.
Refreshment Break

3:15 p.m. – 4:00 p.m.
Best Practices and Takeaways
John F. Friedemann
, Managing Partner, Friedemann Goldberg LLP
Alex Hernandez, Vice President, DefenseStorm, Inc.
Bob Thibodeaux, Chief Information Security Officer, DefenseStorm, Inc.
Our experts reconvene to provide best practices for cybersecurity, cyber compliance and incident response plans. A summary of the lessons from the simulation will be covered as well as actionable details that participants can take back with them to improve practices within their banks.

4:00 p.m. – 4:45 p.m.
Cybersecurity Panel
John F. Friedemann
, Managing Partner, Friedemann Goldberg LLP
Alex Hernandez
, Vice President, DefenseStorm, Inc.
Joe Martony, Chief Risk Officer, Los Alamos National Bank
Bob Thibodeaux, Chief Information Security Officer, DefenseStorm, Inc.
Moderated by: Mika Moser, President, Bank Director
Panelists and workshop attendees participate in an interactive discussion, moderated by Bank Director’s President, Mika Moser. Participants are free to ask questions related to their specific situations and receive expert advice during this session.

4:45 p.m. – 6:00 p.m.
Networking Peer + Guest Reception
Sponsored by: Mazars USA LLP

For more information and to register, please email or call our events department at [email protected] or (877) 397-7595.