How CISOs Manage Supply Chain Risk
Managing the scope and complexity of third-party relationships can be a highly manual, time-consuming task for many security teams, and even after this effort effectively mitigating supply chain vulnerabilities remains one of the greatest threats to an organization’s security. In this panel discussion, security leaders share current approaches, challenges, and best practices to improve their supply chain strategy.
Join for insights on:
- Improving visibility of third- and fourth-party security practices
- Adjusting your risk classifications after the discovery of security weaknesses
- Strategizing the scope of efforts to remediate third-party vulnerabilities
Speakers
Parham Eftekhari is a business executive specializing in cyber and national security. He currently serves as Executive Vice President, CISO Communities at CyberRisk Alliance, leading its CISO services platform which consists of the Cybersecurity Collaborative and Cybersecurity Collaboration Forum. Parham also serves as the chairman of the Institute for Critical Infrastructure Technology (ICIT), the nation’s leading cybersecurity think tank, which he founded in 2014. Other leadership roles during his more than 15 years in this sector include co-founder and Vice President of research at the Government Technology Research Alliance, founder of the world’s first webcam cover manufacturer CamPatch, and Advisory Board member at the Ready Rock Institute. Parham has developed and authored multiple research publications, regularly engages with the media, and has addressed forums ranging from Congress, TED, RSA, and C-SPAN. In 2017, Parham was recognized by (ISC)2 for his contributions to the field of cybersecurity with the Most Valuable Industry Partner – Government Information Security Leadership Award.
Krista Arndt is the Chief Information Security Officer (CISO) at United Musculoskeletal Partners. As the CISO, Krista is responsible for the safety and security of all UMP and its practices’ patients and employees. Krista accomplishes this by ensuring continued maturation and providing strategic direction for UMP’s information security program in alignment with the business objectives. Additionally, Krista provides oversight of the security program’s day to day operational effectiveness. In her previous roles, Krista assisted with developing and leading security programs in crypto, finance, and the Department of Defense.
Krista is an active member of ISACA, Infragard’s Philadelphia Chapter, serves on Neumann University’s Business Advisory Council and is Marketing Committee chair for Women in Cybersecurity-Delaware Valley Affiliate. Through this service, Krista’s mission is to give back to her community by providing mentorship and support for aspiring cybersecurity professionals, especially for women who wish to enter the field.
When off the clock, Krista takes her affinity for overcoming challenges to the garage and the race track, where she enjoys building and improving her own race car, competing as a driver in national drag racing events with her family, and using her racing as a forum to advocate for neurodiversity awareness and inclusion.
Paul Valente is the CEO & Co-Founder of VISO TRUST. He is also a former CISO and built successful security teams and programs at several companies including LendingClub, Restoration Hardware, and ASAPP. Paul’s security and risk programs have been vetted by hundreds of Fortune 1000 companies and his leadership and expertise has transformed the TPRM programs of forward-thinking companies around the world.
Sponsors
