SMi Group's 4th annual Oil & Gas Cyber Security conference
0 likes582 views
The document provides details regarding the Oil and Gas Cyber Security Conference scheduled for November 24-25, 2014, at the Marriott Regents Park Hotel in London, UK. It highlights key topics such as emerging cyber threats, incident response management, and the importance of social engineering in network protection, featuring prominent speakers from organizations like Centrica and National Grid. Additionally, there is a half-day post-conference workshop on November 26 focused on the legal aspects of cybersecurity.
SMi Group's 4th annual Oil & Gas Cyber Security conference
- 1. PLUS AN INTERACTIVE HALF-DAY POST-CONFERENCE WORKSHOP Wednesday 26th November 2014, Marriott Regents Park Hotel, London, UK www.oilandgas-cybersecurity.co.uk BOOK BY 31ST JULY AND SAVE £300 OR BOOK BY 30TH SEPTEMBER AND SAVE £100 Register online or fax your registration to +44 (0) 870 9090 712 or call +44 (0) 870 9090 711 WHY ATTEND THIS EVENT: • Hear from operators including Centrica, National Grid, ENi, Petrofac and Tullow Oil • Understand how government organisations can support efforts against attacks • Watch live demonstrations to understand where attacks are targeted • Discuss how social engineering should be the key focus in projecting your networks • What are the latest developments and technology you can use for on SCADA attacks • Recognise new, key, regulations and legislation that affects your operations NEW 2014 SPEAKERS INCLUDE Avtar Sehmbi, Head, Information Security & Risk Management, Centrica Graham Wright, Chief Information Security Officer & Head of Digital Risk, National Grid Troels Oerting, Head, European Cybercrime Centre, Europol Chris Gibson, Director, Computer Emergency Response Team (CERT) UK Mounir Kamal, Incidents Handling and Digital Forensics Manager, Q-CERT Faheem Siddiqui, Group Information Security Manager, Petrofac Alessandro Marzi, ICT Manager Security Standards & Architecture, ENi CHAIRMAN Chris Hankin, Director, Institute for Security Science and Technology, Imperial College London Martin Smith, Chairman and Founder, The Security Awareness Special Interest Group REGISTER BY 31ST JULY AND RECEIVE A £300 DISCOUNT REGISTER BY 30TH SEPTEMBER AND RECEIVE A £100 DISCOUNT SMi present their 4th annual conference on… 24th & 25th NOV 2014Marriott Regents Park Hotel, London, UK Oil and Gas Cyber Security @SMiGroupEnergy Sponsored by Legal Aspects for Cyber Security 8.30am – 12.30pm Hosted by CMS
- 2. Register online at: www.oilandgas-cybersecurity.co.uk • Alternatively Oil and Gas Cyber Security Day One | Monday 24th November 2014 8.30 Registration & Coffee 9.00 Chairman's Opening Remarks Chris Hankin, Director, Institute for Security Science and Technology, Imperial College STATE OF OIL & GAS THREATS 9.10 Emerging Cyber Threats in the Oil & Gas Industry •Today’s threat trends; - Oil and gas business - Social/Economic/Political •Motivations and attack lifecycle •Overview of recent attacks Avtar Sehmbi, Head, Information Security & Risk Management, Centrica 9.50 The Strategic Balance of Risk in The Energy Sector •Managing and the balance of risk and responsibility between Governments and the Private Sector •Finding common threads to drive and industry view to enable properly informed national strategies, policy and regulation Graham Wright, Chief Information Security Officer & Head of Digital Risk, National Grid 10.30 Morning Coffee - Visit Exhibition Stands INCIDENT RESPONSE MANAGEMENT 11.00 EU Response to the Increased Threat Towards Critical Infrastructure •The changing landscape of cybercrime versus physical crime •The rapid development of Internet of Everything and the impact, •The cybercrime threat to individuals, businesses and governments, •The consolidated response to cybercrime via EC3: prevention, protection, prosecution, governance Troels Oerting, Head, European Cybercrime Centre, Europol 11.40 ICS Security: an assessment framework •Threat landscape •From standards to a pragmatic approach •Tactical vs strategic security paths Alessandro Marzi, ICT Manager Security Standards & Architecture, ENi 12.20 Networking Lunch - Visit Exhibition Stands THREATS AND THE EMERGING TECHNOLOGIES 1.30 Innovation in Industrial Perimeter Security •Real-Time SCADA protection •Historian systems protection •NERC / CIP Compliance •Hardware based unidirectional Data Transfer •Secure remote monitoring and management Paul Charchaflian, European Sales Director, Waterfall Security Solutions 2.10 Cybersecurity and Forever Changing Goal Posts Hackers are following money trails. Oil, Grids and Banks are the prime targets. Who eventually gains? Constant elevation of security status will soon lead to ‘board fatigue’. Security budgets needs to be transformed from linear to non-linear curves for sheer sustainability. The presentation would cover the following: •Distributed - controls cost framework •Pareto rule for ICS / SCADA protection •Role of strategic alliances •Role of IT governance Faheem Siddiqui, Group Information Security Manager, Petrofac 2.50 Afternoon Tea - Visit Exhibition Stands 3.20 Cyber-attacks have evolved in the Energy sector; Have your security defenses? •Learn how to prepare for an advanced attack or breach WHEN it happens •Respond quickly and efficiently to isolate the breach and mitigate risk •Define what ‘normal’ behaviour is across users, networks, systems and applications •Improve security intelligence using existing technologies and enhance current security investments Andrew Hollister, Technical Director, EMEA, LogRhythm 4.00 Defending Networks Through Simulation and Cyber Defence Exercises •This presentation will cover the following topics, including demonstrations: •Do you know what a cyber attack looks like? •Can you defend your networks against all types of attacks? •Do your vendor tools really protect you? •The best way to test your controls, staff, procedures and strategies Emmanouil Christofis, Cyber Defence Exercises Advisor, FOCAL POINT sprl Nuri Fattah, Director, Defence Corp 5.00 Chairman's Closing Remarks and Close of Day One Sponsored by The Fox DataDiode serves to protect the integrity and availability of assets in an Industrial Control Systems (ICS) network. It provides a unique hardware-based, one-way data link that has been approved and certified by a large number of authorities. This allows you to enjoy the benefits of business integration by being able to send production data from an ICS network to an enterprise environment, while preventing all cyber attacks directed at your industrial assets. www.fox-it.com LogRhythm is the largest and fastest growing independent security intelligence company in the world. The company’s patented and award-winning Security Intelligence Platform, unifying SIEM, log management, file integrity monitoring, network and host forensics, empowers organisations to detect breaches and the most sophisticated cyber threats of today, quickly and accurately. www.logrhythm.com.
- 3. SPONSORSHIP OPPORTUNITIES SMi offer sponsorship, exhibition, advertising and branding packages, uniquely tailored to complement your company's marketing strategy. Should you wish to join the increasing number of companies benefiting from promoting their business at our conferences please call: Alia Malick, Director, on +44 (0) 207 827 6168 or email amalick@smi-online.co.uk fax your registration to +44 (0)870 9090 712 or call +44 (0)870 9090 711 Day Two | Tuesday 25th November 2014 8.30 Registration & Coffee 9.00 Chairman's Opening Remarks Martin Smith, Chairman and Founder, The Security Awareness Special Interest Group CYBER BODIES OPENING ADDRESS 9.10 The Evolving Cyber Landscape in the UK - CERT UK •Role of CERT-UK •Who and what pose a threat •CiSP - An example of government/industry partnership in action! Chris Gibson, Director, Computer Emergency Response Team (CERT) UK 9.50 Industrial Cyber Incidents Case Study •Root cause Incidents analysis •Panic Vs. Trust Incident analysis mode •From deep technical analysis to business management level •Building Trusted computing system Mounir Kamal, Incidents Handling and Digital Forensics Manager, Q-CERT 10.30 Morning Coffee - Visit Exhibition Stands 11.00 Cybersecurity 2014, Impact of the latest cyber-attacks on SCADA networks •How cyber threats evolved •Types of vulnerabilities •A business case for segmenting networks •Possible solutions •Be prepared Peter Geytenbeek, International Sales Director, FOX IT SOCIAL ENGINEERING 11.40 Looking at the Present Oil and Gas Threats and Emerging Cyber Threats in the Oil and Gas Industry •Advance threats to the oil and gas industry and developing a practical strategy to enable organisations to minimise the attack •Involving security early in the design process to guarantee resilience •Evaluating cyber security risks involved in process control systems Michael Rapley, UK Operations IT Security & Compliance, Nexen Petroleum* 12.20 Networking Lunch - Visit Exhibition Stands 1.30 The New Exploit: Emotion •Relying less on the Board to be the leaders in pushing behaviour change •Identifying with our organisational dynamics and key influencers •Understanding what really drives the change security needs can be uncomfortable – are we ready for it? •Creating and sustaining the momentum of change Spencer Summons, Head of Information Assurance and IS Governance, Tullow Oil 2.10 Combating Against the Insider Threat •Insider threat is a growing concern for all organisations that can cause severe financial and reputational damage. •In this talk, we discuss the challenges around insider threat detection. •We study the types of attack that may be conducted, the behavioural characteristics of insiders, and we discuss how detection systems could be introduced to prevent such attacks from taking place. Phil Legg Research Associate, Cyber Security Centre, Department of Computer Science, University of Oxford 2.50 Afternoon Tea - Visit Exhibition Stands 3.20 Cybercrime Is Huge and Getting Bigger - But Then Why Wouldn't It? •The market is moving online, the thieves are following. •The security industry must adapt and go there too. •Security professionals must let go of traditional methods for protecting assets and embrace the new technology. •The greatest danger we now face is our fear of change Martin Smith, Chairman and Founder, The Security Awareness Special Interest Group 4.00 Cyber Security: Risks, Regulation and Contracts - a lawyer's perspective •Risks – why is cyber security a critical issue? •Regulatory update •Supply chain & contractual issues Juan Crosby, Partner, Technology & Sourcing, CMS Cameron McKenna LLP 4.40 Chairman’s Closing Remarks and Close of Day Two Waterfall Security Solutions Ltd. is the leading provider of stronger-than-firewalls protections for industrial control networks and critical infrastructures. The company’s products are deployed in utilities and critical national infrastructures throughout North America, Europe, Asia and Israel. Waterfall’s technologies reduce the cost and complexity of compliance with NERC-CIP, NRC, NIST, CFATS and other regulations, and include support for leading industrial applications: Frost & Sullivan describe Waterfall's solutions as ensuring "optimum security for networks across user verticals" and awarded Waterfall the 2012 Network Security Award for Industrial Control Systems Entrepreneurial Company of the Year and the 2013 North America Award for Customer Value Enhancement. www.waterfall-security.com. *subject to confirmation
- 4. Workshop overview: The workshop will tackle the cyber security risks that companies are exposed to and will work through ways of reducing these risks. AIG will present the role of cyber insurance and the workshop will discuss what companies need to do in the event of a cyber-security breach incident. Why attend this workshop To learn about cyber risks, how insurance works and what you need to do in the event of an incident About the workshop host: Stephen Tester Stephen Tester is a partner at CMS Cameron McKenna. With Tom Scourfield he leads the CMS Cyber Network, which operates a 24/7 emergency breach response facility providing legal support to clients in over 35 separate jurisdictions. Independently of his workinthecyberfieldhehasabusypracticehandlingoiland gas insurance disputes and coverage issues. Jamie Bouloux At the beginning of September 2012 Jamie was made Cyber Liability Manager for Europe. He joined the team from New York where he was an Executive Liability Underwriter & Cyber Product Leader with AIG US and Canada. Prior to that Jamie worked in the AIG International home office team as a Professional Associate and helped develop the original international Cyber product and strategy. Jamie holds a B.A. in Economics and History from Franklin and Marshall College. Juan Crosby Juan is a partner in the CMS Technology & Commercial team focussing on IT issues in the Oil & Gas Sector and a leading lawyer advising on complex technology and outsourcing projects, including in relation to cyber security. He has undertaken major IT projects for many clients including super-majors and other leading oil and gas companies and has been recognised for his work by being awarded Best Advisor of the Year at the National Outsourcing Association’s 2013 UK Outsourcing Professional Awards ceremony as well as being recognised as one of Europe’s leading outsourcing advisors in the 2013 European Outsourcing Association’s “Advisor of the Year” Awards. Juan recently led negotiations on a twenty year strategic software development and licensing agreement transforming the technology underpinning the core business activities of one of the world’s largest energy companies. CMS is the 6th largest law firm in the world with 58 offices worldwide. Tom Scourfield Tom Scourfield is a partner and solicitor advocate in the Commercial Technology Group at CMS in London. He has considerable experience of the legal, practical and regulatory issues arising from cyber breach and data compromise events. He leads the CMS cyber crash team in the UK and across 32 other jurisdictions, provided 24/7 support and advice in the event of a cyber crisis event. He has worked directly with a number of corporates, as well as being the lead adviser on several insurance policies offering cyber coverage. About the workshop organisations: CMS Cameron McKenna CMS is one of the top ten largest law firms in the world by number of lawyers, with 58 offices in 32 countries. AIG American International Group, Inc. (AIG) is a global insurance company. The Company provides a range of property casualty insurance, life insurance, retirement products, mortgage insurance and other financial services to customers in more than 130 countries. It diverse offerings include products and services that help businesses and individuals protect their assets, manage risks and provide for retirement security. HALF-DAY POST-CONFERENCE WORKSHOP WEDNESDAY 26th NOVEMBER 2014 8.30am – 12.30pm Marriott Regents Park Hotel, London Legal Aspects for Cyber Security
- 5. SMi ENERGY FORWARD PLANNER 2014 JULY Big Data Analytics for E&P 9th - 10th July 2014, London, UK SEPTEMBER Telecoms for Smart Grids 22nd - 23rd September 2014, London,UK Distribution Automation Europe 29th - 30th September 2014, London, UK OCTOBER Energy from Waste 13th - 14th October 2014, London, UK Gas to Liquids 29th - 30th October 2014, London, UK NOVEMBER Project Financing in Oil and Gas 24th - 25th November 2014, London, UK FEBRUARY E&P Information and Data Management 3rd-4th February 2015, London UK Floating LNG 16th-17th February 2015, London UK Supported by
- 6. PAYMENT FAX your booking form to +44 (0) 870 9090 712 PHONE on +44 (0) 870 9090 711 POST your booking form to: Events Team, SMi Group Ltd, 2nd Floor South, Harling House, 47-51 Great Suffolk Street, London, SE1 0BS, UK OIL AND GAS CYBER SECURITY Conference: 24th & 25th November 2014, Marriott Regents Park Hotel, London, UK Workshop: 26th November, London, UK 4 WAYS TO REGISTER www.oilandgas-cybersecurity.co.uk □ Book by 31st July to receive £300 off the conference price □ Book by 30th September to receive £100 off the conference price EARLY BIRD DISCOUNT If you have any further queries please call the Events Team on tel +44 (0) 870 9090 711 or you can email them at events@smi-online.co.uk Payment: If payment is not made at the time of booking, then an invoice will be issued and must be paid immediately and prior to the start of the event. If payment has not been received then credit card details will be requested and payment taken before entry to the event. Bookings within 7 days ofeventrequirepaymentonbooking.AccesstotheDocumentPortalwillnotbegivenuntilpayment has been received. Substitutions/Name Changes: If you are unable to attend you may nominate, in writing, another delegate to take your place at any time prior to the start of the event. Two or more delegates may not ‘share’ a place at an event. Please make separate bookings for each delegate. Cancellation: If you wish to cancel your attendance at an event and you are unable to send a substitute, then we will refund/credit 50% of the due fee less a £50 administration charge, providing that cancellation is made in writing and received at least 28 days prior to the start of the event. Regretfully cancellation after this time cannot be accepted. We will however provide the conferences documentation via the Document Portal to any delegate who has paid but is unable to attend for any reason. Due to the interactive nature of the Briefings we are not normally able to provide documentation in these circumstances. We cannot accept cancellations of orders placed for Documentation or the Document Portal as these are reproduced specifically to order. If we have to cancel the event for any reason, then we will make a full refund immediately, but disclaim any further liability. Alterations: It may become necessary for us to make alterations to the content, speakers, timing, venue or date of the event compared to the advertised programme. Data Protection: The SMi Group gathers personal data in accordance with the UK Data Protection Act 1998 and we may use this to contact you by telephone, fax, post or email to tell you about other products and services. Unless you tick here □ we may also share your data with third parties offering complementary products or services. If you have any queries or want to update any of the data that we hold then please contact our Database Manager databasemanager@smi-online.co.uk or visit our website www.smi-online.co.uk/updates quoting the URN as detailed above your address on the attached letter. Unique Reference Number Our Reference LV E-052 Terms and Conditions of Booking DELEGATE DETAILS Please complete fully and clearly in capital letters. Please photocopy for additional delegates. Title: Forename: Surname: Job Title: Department/Division: Company/Organisation: Email: Company VAT Number: Address: Town/City: Post/Zip Code: Country: Direct Tel: Direct Fax: Mobile: Switchboard: Signature: Date: I agree to be bound by SMi's Terms and Conditions of Booking. ACCOUNTS DEPT Title: Forename: Surname: Email: Address (if different from above): Town/City: Post/Zip Code: Country: Direct Tel: Direct Fax: Payment must be made to SMi Group Ltd, and received before the event, by one of the following methods quoting reference E-052 and the delegate’s name. Bookings made within 7 days of the event require payment on booking, methods of payment are below. Please indicate method of payment: □ UK BACS Sort Code 300009, Account 00936418 □ Wire Transfer Lloyds TSB Bank plc, 39 Threadneedle Street, London, EC2R 8AU Swift (BIC): LOYDGB21013, Account 00936418 IBAN GB48 LOYD 3000 0900 9364 18 □ Cheque We can only accept Sterling cheques drawn on a UK bank. □ Credit Card □ Visa □ MasterCard □ American Express All credit card payments will be subject to standard credit card charges. Card No: □□□□ □□□□ □□□□ □□□□ Valid From □□/□□ Expiry Date □□/□□ CVV Number □□□□ 3 digit security on reverse of card, 4 digits for AMEX card Cardholder’s Name: Signature: Date: I agree to be bound by SMi's Terms and Conditions of Booking. Card Billing Address (If different from above): LIVE STREAMING/ON DEMAND/ DOCUMENTATION Unable to travel, but would like to watch the conference live, ask questions, participate as if you were in the room. Price Total □ Live Streaming £999.00 + VAT (UK) £1198.80 □ On demand £599.00 + VAT (UK) £718.80 (available 24 hours after the event) □ Access to the conference documentation on the Document Portal £499.00 + VAT £598.80 □ The Conference Presentations - paper copy £499.00 - £499.00 (or only £300 if ordered with the Document Portal) PAYMENT VAT VAT at 20% is charged on the attendance fees for all delegates. VAT is also charged on live Streaming, on Demand, Document portal and literature distribution for all UK customers and for those EU Customers not supplying a registration number for their own country here. ______________________________________________________________________________________________ CONFERENCE PRICES I would like to attend: (Please tick as appropriate) Fee Total □ Conference and Workshop £2298.00 +VAT £2757.60 □ Conference only £1699.00 +VAT £2038.80 □ Workshop only £599.00 +VAT £718.80 PROMOTIONAL LITERATURE DISTRIBUTION □ Distribution of your company’s promotional literature to all conference attendees £999.00 + VAT £1198.80 The conference fee includes refreshments, lunch, conference papers, and access to the Document Portal. Presentations that are available for download will be subject to distribution rights by speakers. Please note that some presentations may not be available for download. Access information for the document portal will be sent to the e-mail address provided during registration. Details are sent within 24 hours post conference. VENUE Marriott Hotel Regents Park, 128 King Henry's Road, London, NW3 3ST □ Please contact me to book my hotel Alternatively call us on +44 (0) 870 9090 711, email: hotels@smi-online.co.uk or fax +44 (0) 870 9090 712