5th Annual Cybersecurity Summit

_

_

_

_

_

_

_

What do you get when you mix social media platforms, AI tools, virtual reality and deep fake technology together?? A growing BIG headache for people, businesses, and cyber security teams. Fake digital images and phishing emails have become much harder to identifty when they look and feel like they are coming from you or some other reputable source. Are you prepared to respond if someone steals your identify, your organizations identity, your image, your logo or posts misinformation that appears to be coming directly from you or your organization? What can you do? What should you be prepared to do? Join this session to be part of the discussion about how to prepare yourself, your team, your employees and your tribe or tribal enterprise for this growing issue.

What is a "table top exercise" or "cyber game", and why are they important and something that we should support and implement at our tribe or tribal enterprise? In this session we will cover the tremendous benefits that can be acheived through executive level table top exercises as well as more technical cyber game scenarios. Actually testing your cyber policies, processes, controls and communications is absolutely critical to chances of improving your threat prevention and your ability to respond and recover to any and all threats that are presented to you. Everyone will leave this session understanding more about this subject and how they might be successfully (or more successfully) used in your own organization, and anyone wanting to take an even deeper and more hands-on technical dive can move right into our Capture The Flag (CTF) cyber game in our "Let's Get Technical" educational track immediately following this session.

_

Every tribe or tribal enterprise requires a solid cyber security program and foundation. Whether you are just establishing a cyber program or well on your way, this session is going to discuss the important functions and elements that are required to truly have a best practice cyber program. This includes adopting an industry framework along with implementation of secure policies, procedures and core cyber functions.

Ready to get your hands on some real cyber tools, have fun and work hand-in-hand with some of your technology and cyber peers from tribes across the nation? If so, this "by registration only" workshop is for you! Get ready as our CTF session sponsor opens up their CTF environment and resources to a curated afternoon of hands-on cyber challenges designed to help you learn, apply knowledge and solve real world cyber challenges. This workshop includes a proctored environment, labs and hands-on access to Red Team and Blue Team tools. Bring your own team or join a team of peers from other tribes to learn and perhaps hoist a trophy at the conclusion as most effective cyber team. Pre-registration for this session when completing your conference registration form is required to attend this session.

_

The unthinkable has happened and your operations have been compromised or damaged to the point that operations across the board are brought to a complete standstill. Now what? What happens to your employees, your customers, your data and your reputation? This session is all about discussing the importance of well prepared and tested business continuity and DR plans. Attendees will also leave with access to templates that they can reference to help them improve their own business continuity planning as well as disaster recovery.

_

Everybody seems to want AI, every vendor seems to say they have AI, and yet very few people or organizations feel like they fully understand AI or feel they are prepared for it. This session is designed to give you a more complete understanding of what AI is, what it is NOT, and what it is all about. We will also spend some time discussing the foundational policies and practical guidelines that you should have in place now as your organization and your employees look to leverage the many opportunities that AI presents.

_

_

_

_

_

Take a tour led by our host site IT department!

Led by the Steering Committee of the Tribal-ISAC (the not-for-profit national (cyber) security community that is by tribes and for tribes). This engaging and interactive session is designed to introduce you to your peers from other tribes across the nation, learn about how other tribes and tribal enterprises are tackling cybersecurity challenges and understand the value and importance of all tribes working together to protect government, gaming & hospitality, health and member services and tribal sovereignty from cybersecurity threats. Isolation and working on your own is NOT the answer to better cyber security practices and it makes your tribe and all tribe LESS safe. In this session you will learn about your peers, cyber resources available to you and why collaborating and sharing cyber information with other tribes and the Tribal-ISAC is a best practice.

_

_

You rely on third party providers which often include their products, services, software and their own company partnerships and cyber infrastructure. How do you properly and thoroughly assess if a vendor, their product, their services or their own internal practices present a risk to your tribe or tribal enterprise? You are only as secure as your weakest link, and how can you be certain that weak link is not one of your many third party providers? Join us in this session to learn more and each attendee can expect to leave with some great guidance as well as access to some great third party assessment tools.

In this session we will mix a bit of proactive threat hunting best practices, tools and techniques with some first response reactive best practices for incident response. Designed to be more technical in nature, this session will cover logs, user and network patterns, vulnerability scanning and tools and techniques that tribes can and should utilize to better protect their networks and respond quickly to threats and anomalies.

_

It can be extremely difficult to articulate or explain the successes, failures, needs, accomplishments and overall health of your cyber security team, programs and initiatives. This is where the development, use and communication of key cyber KPI's can be a game changer. The effective use of easy to understand KPI's can make it easier for your executive team to understand the organizations cyber situation, the gaps, cyber funding needs, the threat level, the size and nature of current threats and the behind the scenes accomplishments of the cyber security team. In this session you will learn about the types of KPI's that any tribal organization can use to communicate important cyber facts about the organization.

Threat actors are not the only ones that can create deception, and sometimes the best defense is adding a bit of offense. In this session we will take a look at methods that you can implement that are designed to protect your network, data and resources while increasing the speed of visibility of any potential threats or intrusions into your organization. Learn more about the creation and implemenation of honeypot decoy systems or networks and other methods that can effectively lure, trap and identify malicious actors before they can cause you any harm.

_

AI wants your data - and in order to fully benefit from AI your employees WANT AI to have access to your data. So, what does that mean when it comes to data security, data sovereignty, personal data security and protecting the crown jewels of your tribe or tribal enterprise? Is your data ready for AI, and are you prepared to trust providing access to AI with that data? How can you safely use AI to let your tribe and employees succeed when it comes to your sensitive data?

How confident are you that you understand everything that is attached to your network, when something new attaches and vulnerabilities that exist? Both active and passive scanning are core components of cyber security programs, and this session will look into best practices when it comes to gaining more visibility to what is attaching (or attempting to attach) and/or communicate across your network.

_

"Know thy data" - the 11th commandment when it comes to cyber security. You can't effectively secure what is undefined, poorly understood or unknown. Without clearly understanding the most important assets, processes and the data crown jewels of the organization - your limited cyber resources cannot be utilized as effectively as possible. Learn about effective methods of implementing reasonable data governance and data classification that can make it easier for your cyber resources to improve their cyber program with the right focus on what really matters to your tribe or tribal enterprise.

How do you REALLY know if your cloud systems or data are secure? How can you monitor your security in the cloud? In this session you can expect to hear about tools, techniques and best practices when it comes to securing your cloud hardware, cloud data and the instances or containers of your data and applications deployed to the cloud.