Topic 1: Why Safety cannot be delinked from Cybersecurity in OT / IT environment?
Brief: The topic will deep dive and review increasing importance and relevance of Safety and Reliability of OT and Industrial Cybersecurity relevant to Critical Infrastructure. Cybersecurity and Risk Management Professionals need to think out of box and beyond the realm of conventional Confidentiality, Integrity and Availability (CIA) triad for protecting Critical Infrastructure. In addition to CIA , the organisation needs to think safeguarding its (manufacturing) assets and equipment, people assets and process assets and not just information assets as done conventionally. This means that new norm or paradigm shift in OT / Industrial Cybesecurity arena is to protect Safety, Reliability and Productivity (SRP) of operations while making sure CIA triad is also protected. This means that Process Safety, Environmental Protection and Reliability of equipment and operations are very critical part of OT Cybersecurity landscape. The presentation will have common touch point between Safety and Security and will touch "Defence in Depth " from both Safety and Security perspective. The presentation will also cover the importance of Physical Security for the protection of critical Cyber-Physical systems of the Critical Infrastructure. The presentation will also cover Compliance regulations landscape and Standards and Best practices used for an effective and integrated approach to manage both Safety and Security. It will also cover multi-pronged approach to mitigate both Safety and Cyber risk in OT / Industrial Cybersecurity environment.
Speaker Bio: Ashit is highly experienced Cybersecurity, Risk Management, Data Privacy, EHS and Process & Functional Safety expert with experience of more than 30 years in Manufacturing, Consulting, Project Management, Compliance, Audit, Assessment & Assurance services in several Industrial Sectors including Chemicals, Petrochemicals, Oil and Gas and Energy Sectors
Topic 2: CPRA and Privacy Compliance: Surviving or Thriving?
Brief: As organizations continue to prepare for and implement processes to meet the updated CCPA, join Schellman for a detailed review of the new requirements, common privacy controls, and updates on other global privacy initiatives and frameworks.
Speaker Bio: Chris Lippert and Emily Heintz
Chris Lippert, Senior Manager and Privacy Practice Lead with Schellman, is based out of Atlanta, GA. With more than 11 years of experience in information assurance across numerous industries, regulations and frameworks, Chris developed a passion for and concentration in data privacy. He is an active member of the International Association of Privacy Professionals (IAPP), holding his Fellow of Information Privacy (FIP) designation, and advocates for privacy by design and the adequate protection of personal data in today’s business world.
Emily Heintz is a Manager with Schellman based in Fayetteville, Arkansas. She currently manages privacy assessments and certifications across the full suite of offerings, including APEC, CCPA, GDPR, ISO 27701, and Microsoft DPRs. Prior to joining Schellman in 2020, Emily worked as a Project Manager on the U.S. Privacy team at a Fortune 1 retailer focusing on designing controls to comply with the CCPA and conducting privacy reviews of emerging technology solutions. She is an active member of the northwest Arkansas chapter of the International Association of Privacy Professionals and is a Fellow of Information Privacy (FIP), holding both the CIPP/US and CIPM certifications.