Managing Digital Resilience: Thinking Like an Adversary to Ensure the Survival of Your Business

As today’s enterprises face potential targeting from criminals, competitors, and politically motivated threat actors, a broad range of attack methods are in play. One commonality to all these actors is their likely targeting of humans as the weakest link in the organization’s security. Executives present an attractive target for adversaries due to their public profile and a role widely acknowledged to result in one being time reduced. Furthermore, executives are perceived by potential adversaries as having access to desirable business information, such as customer data, employee data, and financial data, as well as the ability to move money and data on behalf of the organization. For these reasons, executives face a higher risk of being used as an attack vector against the company. This talk covers tactics, techniques, and procedures across the physical, social and cyber landscapes to mitigate the elevated and ever-changing personal risk of individuals due to their prominence, wealth, occupation, reputation, travel destinations, or other factors.

Learning Objectives:
1. Explain why people are vulnerable and how cyber attackers are actively exploiting these vulnerabilities
2. Design and implement key metrics to measure the impact of each stage of your digital resilience program, to include measuring compliance, behaviors, and culture
3. Identify, measure, and prioritize your human risks
4. Characterize the culture of your organization and determine the most effective communication methods and training modalities for that culture
5. Align your cybersecurity culture to your organization’s strategy, including how to leverage different security frameworks and maturity models

There are no prerequisites required for this course. 1.0 CPE credit will be given.