SOG-IS View on the Cybersecurity Act, Bernd Kowalski, Chairman, SOG-IS, Germany
Cloud Candidate Scheme Recommendations by CSP CERT Working Group, The European Cloud Service Provider Certification Working Group
Update on DG Connect Operations, Aristotelis Tzafalias, Policy Officer, Cybersecurity and Digital Privacy, European Commission, Belgium
Security Needs to be Consistent—The Role of Process in the Cybersecurity Act, David Martin, Head of International Assurance, NCSC, United Kingdom
Overview of Current and Future NIAP and US Government Certification Initiatives, Mary Baish, Director, NIAP, United States
Update on ENISA Operations and CSA Implementation, Slawomir Górniak, Security Tools and Architecture Expert, ENISA, Greece
BSI View on the EU Cybersecurity Act, BSI, Germany
ECSO’s Outlook on the EU Cybersecurity Act, Roberto Cascella, Senior Policy Manager, ECSO, Belgium
The EU-SEC Framework, Lefteris Skoutaris, Research Analyst, Cloud Security Alliance, Greece
Conference Keynote Presentation, Despina Spanou, Director for Digital Society, Trust and Cybersecurity, Management Board Member of ENISA, European Commission, Belgium
Join the Global Forum on the Changing Future of Cross-Border Certification
The 2019 International Conference on the EU Cybersecurity Act has been developed to help standards community prepare for the evolution of risk-based frameworks meant to address market fragmentation in the EU. The EU Cybersecurity Act, now in the early stages of development, will eventually create a wide-ranging, independent European body of cybersecurity regulation as part of the “single digital market” goal. This landmark regulatory mandate will have a wide-ranging effect on the international standards community—now is the time to begin planning for and participating in ongoing changes.
A Survey of Current Frameworks and Candidate Schemes
The Cybersecurity Act will establish a European cybersecurity certification framework for ICT products, services and processes. Current schemes may be incorporated into this new framework, or may need to evolve to the fit the regulatory changes. The Conference will cover the potential effect on current schemes and regulatory mandates like Common Criteria, eIDAS, Payment Services Directive 2, GDPR, ISO 27001, and EU standards for cryptographic modules. The conference will also cover the effect on current private schemes like GSMA, GlobalPlatform, EMVCo, PCI PTS, PCI SPoC, Eurosmart, Felica, Mifare, and OWASP and will discuss the new potential candidate schemes for key industry verticals such as IoT, cloud, communications, payments, automotive, and more.
Two Days to Cover a Shifting Regulatory Landscape
The conference will take place in Brussels on November 18-19, starting with a plenary keynote session then breaking into 4 separate tracks covering technology and certification issues, customer requirements, policy, and market issues.
Early Registration Discounts Are in Effect. Reserve Your Seat Today.
Who Should Attend
Conference topics will be of interest to the entire standards community, including Certification Bodies, Evaluation Laboratories, Researchers, Evaluators, Policy Makers, Product Developers, Sellers and Buyers interested in the specification, development, evaluation, and certification of IT security. The Cybersecurity Act will also affect organizations beyond the EU, including government schemes, testing laboratories, product developers, and technology companies in North America and Asia.
Conference Speakers
Roland Atoui
Managing Director, Red Alert Labs/EUROSMART, FranceMary Baish
Director, NIAP, United StatesBoris Balacheff
HP Fellow & VP, Chief Technologist for Security Research and Innovation, HP Labs, FranceMiguel Bañon
Global Technology Leader for Cybersecurity, Epoche and Espri (a DEKRA company), SpainMarkus Bartsch
Business Development, TUViT, GermanyJohn Boggie
Director Head of Certification, NXP Semiconductors UK, United KingdomTony Boswell
Senior Principal Consultant, DNV GL Technical Assurance Laboratory, United KingdomStefano Bracco
Knowledge Manager, European Union Agency for the Cooperation of Energy Regulators, ItalyRoberto Cascella
Senior Policy Manager, ECSO, BelgiumMartin Chapman
Senior Director, Standards Strategy and Policy EMEA, Oracle, IrelandSonia Compans
Technical Officer, ETSI, FranceWilly Fabritius
Global Portfolio Champion for Information Resiliency, BSI Group, United StatesMaria Fravventura
Security Evaluator, Brightsight, NetherlandsSaurabh Ghelani
EMEA Strategic Trust Leader, Google Cloud, SwitzerlandSławomir Górniak
Expert in Security Tools and Architecture, ENISA, PolandChris Gow
Director, EU Public Policy, Government Affairs, Cisco Systems, BelgiumGabor Hornyak
CTO, CCLab, HungaryAyman Khalil
COO & Managing Partner, Red Alert Labs, FranceBernd Kowalski
Head of Department, Federal Office for Information Security, GermanyHelmut Kurth
Chief Scientist and Common Criteria Lab Director, atsec information security, GermanyAurelien Leteinturier
Head of Security Products and Services Approval Unit, ANSSI, FranceDr. Claire Loiseaux
CEO and Founder, Internet of Trust, FranceDavid Martin
Head of International Assurance, NCSC, United KingdomRachel Menda-Shabat
Director of Security Solution Certification Division, ISCI WG sub-chair, Winbond, IsraelThomas Niessen
Managing Director of the Kompetenznetzwerk Trusted Cloud, German Ministry of Economics and Energy, GermanyWilliam Ochs
EMEA Cloud Certification Lead, Cisco, United StatesJasmina Omic
Product Manager Services, Riscure, NetherlandsDirk-Jan Out
CEO, Brightsight, NetherlandsJose Alejandro Rivas Vidal
Security Lab Manager, Applus+ Laboratories, SpainRaymond Romero
Board of Governors of the Federal Reserve Systems, United StatesLefteris Skoutaris
Research Analyst, Cloud Security Alliance, GreeceWouter Slegers
CEO, TrustCB, NetherlandsDespina Spanou
Director, Digital Society, Trust and Cybersecurity, European Commission, CyprusGeorg Stütz
Principal Security Certification Expert, NXP Semiconductors, AustriaJavier Tallón
CoFounder and COO, jtsec Beyond IT Security SL, SpainPaul Theron
Advisor & Cyb’Air Research Chair, Thales, FranceLachlan Turner
Director Consulting, Lightship Security, CanadaAristotelis Tzafalias
Policy Officer, Cybersecurity and Digital Privacy, European Commission, Belgium
Location
In Europe’s Political and Cultural Capital
The conference is conveniently located in Central Brussels—steps away from the Gare Centrale and many of the top attractions in the city, including: Galeries Royales Saint-Hubert, a gorgeous glass roofed arcade with specialised boutiques, cafés and a theatre; Place du Grand Sablon, one of the oldest neighborhoods of Brussels with two lovely squares, a neo-gothic church and many old streets and houses with art galleries, pastry shops, cafés, and a weekend antiques market; and Rue Antoine Dansaert, home to fine jewellers and edgy European fashion boutiques.
Conference Tracks
Industry Alignment: Efforts by the international technical community to align frameworks with government standards while responding to the needs of the market.
Industrial Strategies: An analysis of current voluntary certification standards for industrial automation and energy, and potential transitions to mandatory international certification.
IoT Challenges: A survey of the large, fast-growing certification landscape for connected devices and the cost, performance, and power constraints that necessitate security compromises.
Public Policy: Updates from public schemes and associations on the development of standards in response to evolving security risks across multiple sectors.
Cloud and GDPR Frameworks: A look at cloud scheme initiatives and efforts to leverage existing certifications in the transition to frameworks that align with international regulations such as GDPR.
Outlook/Opportunities: Updates on leading government initiatives for global certification and perspectives on the business benefits of security evaluations.
Standards for Success: Review of standardization efforts under various national frameworks (a key factor for CSA success) and the limitations of standards in a real-world environment.
Innovations in Assurance: Best practices for maintaining certification in the face of new cybersecurity regulations, expanding product lines, and frequent product updates.
The Conference Starts In
JOIN OUR EMAIL LIST: GET CONFERENCE UPDATES
Twitter Feed
Related Event
The Eighth Annual International Cryptographic Module Conference
April 28- May 1, 2020, Hyatt Regency Bethesda, Maryland, USA, www.icmconference.org
The leading annual event for global expertise in commercial cryptography.