Emerging Cloud Security Threats, Paradigms & Solutions
The onset of the pandemic has thrown normalcy out of gear. There is talk of a “new normal”, which continues to be defined and remains as broad as ever. The synapse between the COVID-19 pandemic and cloud security imperatives can be addressed with a call to action that the new cyber & cloud security strategy on the anvil can address. There must be sync with these modern realities and adaptation along with the willingness to innovate for future disruptions which will in turn reinvigorate our trust and boost our digital immunity.
Join leading experts from Malaysia with domain proficiency and expertise to discuss the key issues and trends facing cloud security and cybersecurity today at this virtual Summit organized by CSA APAC & Protem Committe, CSA Malaysia Chapter on 16 December 2020.
Earn CPE Credits: To download your viewing certificate, navigate to the “Viewing History” section of your BrightTALK Account. You can find more information about this here: https://support.brighttalk.com/hc/en-us/articles/204280700-Can-I-have-a-list-of-all-the-webinars-I-ve-attended-
The onset of the pandemic has thrown normalcy out of gear. There is talk of a “new normal”, which continues to be defined and remains as broad as ever. The synapse between the COVID-19 pandemic and cloud security imperatives can be addressed with a call to action that the new cyber & cloud security strategy on the anvil can address. There must be sync with these modern realities and adaptation along with the willingness to innovate for future disruptions which will in turn reinvigorate our trust and boost our digital immunity.
Join leading experts from Malaysia with domain proficiency and expertise to discuss the key issues and trends facing cloud security and cybersecurity today at this virtual Summit organized by CSA APAC & Protem Committe, CSA Malaysia Chapter on 16 December 2020.
Earn CPE Credits: To download your viewing certificate, navigate to the “Viewing History” section of your BrightTALK Account. You can find more information about this here: https://support.brighttalk.com/hc/en-us/articles/204280700-Can-I-have-a-list-of-all-the-webinars-I-ve-attended-
Co-organized by
|
Protem Committee CSA Malaysia Chapter |
Supporting Organizations
|
|
|
CCSK Training Partner
Speakers & Panelists
Dato’ Ts. Dr. HAJI Amirudin Abdul Wahab
CEO, CyberSecurity Malaysia
|
Dato’ Ts. Dr. Haji Amirudin Abdul Wahab (“Dato’ Dr. Amir”) is currently the Chief Executive Officer (CEO) of CyberSecurity Malaysia, the agency that monitors e-sovereignty of the country. He has approximately 30 years of ICT working experience in the telecom and IT sector in the Government as well as in the semi-government and private sectors.
During Dato’ Ts. Dr. Amir’s leadership as CEO, Cybersecurity Malaysia (CSM) managed to contribute to Malaysia’s achievement in attaining top 10 ranking in the world, at International Telecom Union (ITU) Global Cyber Security Index studies and became first Malaysian to chair World Trustmark Alliance (2014-2015). Besides that, during his leadership, CSM was awarded as Best Cyber Security Innovation Award 2015 recipient by FireEye Global and won Champion Prizes at the World Summit of the Information Society (WSIS) for 2 consecutive years (2016 & 2017) and also most recently in year 2020. He was also selected to receive an ASEAN Award as the Outstanding Chief Information/Security Officer in conjunction with the 10th ASEAN CIO| CSO Summit and Awards 2014 held in Ho Chi Minh City, Vietnam on 2 December 2014. On 2 nd May 2018, he has been registered in Malaysia Board of Technologist as Professional Technologist which has allowed him to use abbreviation “Ts” before his name. |
FONG Choong Fook
Director, LE Global Services, Malaysia
|
FONG Choong Fook is a 20-year veteran in the specialised and highly-demanding arena of information security. He was the 1s t Malaysian certified by International Register of Certificated Auditors (IRCA) as ISO 27001:2005 Provisional Auditor, and also the first batch of Malaysian who obtained CISSP international certifications. In addition, he was appointed by ISC2 to administer and proctor the CISSP/SSCP examinations in Malaysian and other Southeast Asian countries since 2004 and Co-Founded ISC2 Malaysia Chapter Board Member of CREST Malaysia Chapter Member of Vistage Malaysia. Fong had recently won the IDG – 2013 ASEAN Chief Security Officer (CSO) Of The Year award as well as the Cyber Security Malaysia – 2016 Cyber Security Professional Of The Year award. When it comes to the topics about Cyber Security, Fong is sought-after international speaker known for the enthusiasm, humor, dedication and passion with experience, and coverage in national television programs, magazines, radio broadcasts, conferences and webinars. He has also consulted with, and trained multiple government and multinational clients in the Asia Pacific, Eastern Europe and Africa regions on information system security, enterprise risk matrix design, policy review, policy implementation assurance, penetration testing, technical configuration evaluation, security procedures and disaster recovery/business continuity planning. Fong has strong working relationships with various law enforcement agencies worldwide, as a trusted figure in the information security arena; he is also the distinguished guest speaker for The Federal Bureau of Investigation (FBI) INFRAGARD event, Polis Diraja Malaysia (PDRM) Info Security trainings and various industry associations, governments and law enforcement agencies on Cyber Security Topics. Fong is the author of the “ Certified Lead Forensic Examiner ” (CLFE) courseware for Professional Evaluation and Certification Board (PECB www.pecb.org, USA). The CLFE course is currently distributed worldwide by PECB in training information technology professionals in conducting computer crime investigations and digital forensic. Fong also has had experience to be called as an Expert Witness to study, assess, evaluate and testify in the court of law.
|
Ser Yoong GOH
CIO, Jewel Paymentech
|
Ser Yoong currently serves on the Board of Directors for ISACA Malaysia Chapter, a non-profit organization for IT security, governance, risk and audit professionals as the Chapter President. He is also the CIO of Jewel Paymentech, a financial risk technology company where he is responsible for the overall IT strategy and solutions roadmap of the company. Prior to that, he has held positions in Standard Chartered, PwC and British American Tobacco being a SME in the area of audit, risk and compliance.
Ser Yoong has participated in webinars, conferences and security round tables in Malaysia and also at regional level on the areas of cybersecurity, information security, IT audit and governance. He holds certifications including CISA, CISM, CGEIT, CISSP, ACA (Cloud Computing, Security). |
Dr. Hing-Yan LEE
EVP APAC, CSA
|
Hing Yan LEE is Executive Vice President, APAC at the Cloud Security Alliance (CSA). He has over 30 years of ICT working experience in both the public and private sectors. He was global director of the CSA STAR program for 6 months in 2017. Prior to that, he was Director of National Cloud Computing Office at the Infocomm Development Authority (IDA) for 9+ years, where he was responsible for the national program for, inter alia, developing the cloud ecosystem, promoting cloud adoption by government agencies and private enterprises, and building a trusted environment (which included developing the Multi-Tier Cloud Security (MTCS) standards and Cloud Outage Incident Response guidelines).
He was previously Deputy Director of National Grid Office at the Agency for Science, Technology & Research (A*STAR), Principal Scientist at the Institute for Infocomm Research, Director of Knowledge Lab and Deputy Director of Japan-Singapore Artificial Intelligence Centre at the Kent Ridge Digital Labs as well as Deputy Director at Information Technology Institute (the applied R&D arm of the National Computer Board). He oversaw and managed industry collaborations and applied R&D in machine language translation, spoken language dialogue, expert systems, knowledge discovery, data mining, data visualization, and other knowledge-driven efforts. Hing Yan co-founded two high-tech companies in 2000 and is a technology advisor to a fintech start-up. He was an adjunct associate professor at the National University of Singapore, served on the School of Digital Media & Infocomm Technology Advisory Committee at the Singapore Polytechnic, Engineering Accreditation Board team member (2014), co-chair of the National Infocomm Competency Framework Technical Committee on Cloud Computing as well as a member of the Cloud Computing Standards Coordinating Task Force of the Singapore Infocomm Standards Committee (ITSC). He was also a member of the NatSteel Corporate R&D Advisory Panel, an advisor/member to the Singapore National Archives Board, and the Australia-Singapore Joint ICT Council. Hing Yan is a Fellow and former VP of the Cloud Chapter in Singapore Computer Society. He is active in the ITSC working group on MTCS revision, and SingAREN Lightwave Internet Exchange (SLIX 2.0) Steering Committee. He has also undertaken consultancy and research reviews for the governments of Finland, Israel, Malaysia and Singapore as well as cloud service providers. He graduated from the University of Illinois at Urbana-Champaign with PhD and MS degrees in Computer Science. He previously studied at Imperial College London in the UK where he obtained a BSc (Eng.) with 1st Class Honours in Computing and MSc in Management Science. |
Victor LO
Head of CyberSecurity, Malaysia Digital Economy Corporation (MDEC)
|
Victor Lo is an experienced professional more than 20 years of information security and risk consulting experience in both enterprise information security solution and specialize on threat intelligence framework. Over the years, he has served businesses Across the region of the Asia South countries such as India, Turkey, Thailand, Vietnam, Philippines, Indonesia, Malaysia, and Singapore.
Experience dealing with vertical industry primarily in South East Asia market and including Fortune 500 companies. Victor currently attach with MDEC heading the information security industry development. His key role will be driving security as catalyst for digital transformation for the nation and promote collaboration among security industry vendors and innovation for security ecosystem. |
Soumo MUKHERJEE
Head of Strategy & Architecture,
PETRONAS |
Soumo Mukherjee is the Head of Strategy & Architecture at PETRONAS where he is the Cyber Security Lead for End User Security, Identity & Access Management, Cloud Security and M365.
With a long spanning career in Information Technology Services he has been a transformation leader, a change agent and someone who keeps challenging the status quo. He has successfully lead the implementation of a number of innovative technology solutions using emerging and state of the art technologies. He is currently looking at ways to strategize, architect and draw roadmaps for PETRONAS regarding Cyber Security. The major goal and objective is to secure PETRONAS environment, at the same time bring change to mindset and culture in respect to Cyber Security. |
Ts. Saiful Bakhtiar OSMAN
Head of ICT, Malaysian Aviation Commission (MAVCOM)
|
Being ranked as one of Top 50 Chief Information Officer (CIO50) for ASEAN in 2019 by the International Data Group (IDG), he brings with him a solid 20 years of experience in diverse industries such as Fund Management, Oil & Gas, Financial Institution and Regulatory Body.
He currently serves as the Head of ICT for MAVCOM, the economic regulator for the aviation industry. He is also a registered Professional Technologist (Ts.) under the Malaysian Act 768 which is governed by the Malaysian Board of Technologists. As an IT professional with an MBA, he has broad experience in IT Strategy, IT Security, Digital Transformation, Project Management, and IT Infrastructure Operations. He is also certified in Agile Project Management (Scrum Master), PRINCE2 project management, ISACA’s CISM, ITIL Practitioner and Intermediate (v2 & v3), Microsoft’s MCSA, IATA’s Aviation Cyber Security and IBM’s Lotus Notes. |
Sureen SUBRAMANIAM
Chairman, Protem Committee, CSA Malaysia Chapter
|
Sureendhran Subramaniam is the acting Chairman, Protem Committee for the CSA Malaysia Chapter. He has had the opportunity to work in tandem with the transformation of the IT infrastructure from the conventional Data Center to Hybrid Cloud and now an evangelist of Cloud Technologies.
Over his 18 years of experience, he had served Siemens IT Services, HPE, Dell and Microsoft to name a few. Currently, he is the Global Head of Cloud and Automation for British American Tobacco based here in Malaysia. |
Philip VICTOR
Managing Director, Welchman Keen, Malaysia
|
An award-winning cybersecurity advocate with over 26 years in the field of information technology, Philip Victor has served more than a decade in the cybersecurity domain. A recipient of the Senior Information Security Leadership Award from (ISC)2 for outstanding contribution in enhancing public-private partnerships globally, his role includes, spearheading Cyber Risk for Critical Infrastructure practice and engagement with the International Telecommunication Union (ITU) and governments. In his previous role working with the United Nations’ (UN) specialized agency, the International Telecommunication Union (ITU), Philip was instrumental in assisting governments globally in enhancing their cybersecurity posture through various initiatives and projects including National Cybersecurity Strategy, Child Online Protection, National Computer Emergency Response Team, Capacity Building and International Cooperation. He is a regular speaker at numerous international conferences, forums and seminars in cybersecurity and has published articles for publications both locally and internationally. He has also been featured and interviewed in international media as a cybersecurity expert and advocate on global issues. Philip was a former board member of Cloud Security Alliance Malaysia Chapter and currently sits on the Taylor’s University Industry Advisory Panel. He also serves on the Board of Study for the International Business School at University Technology Malaysia.
|
Time |
Activity |
Session Link |
9:00am |
Introduction Sureen SUBRAMANIAN (Chairman, Protem Committee, CSA Malaysia Chapter) Welcome Remarks Dr. Hing-Yan LEE (EVP APAC, CSA) Opening Keynote - Cloud Security Landscape: Challenges & it's Possible Solutions Dato' Dr. Haji Amirudin bin Abdul WAHAB (CEO, Cyber Security Malaysia) The topic will cover the current digital landscape whereby the population is now highly connected and due to the global Covid-19 pandemic the interconnectivity also increases exponentially. It also relates to the convergence of technologies, which adds more complexities to the cyberspace. Due to these complexities it has created a lot of concern on the risk to the users, organizations and industries. Apart from that, it has also created opportunities for unscrupulous persons to conduct illegal activities, scams, Denial of Services (DOS) and disruption of businesses online. Over the years, there were a lot of viruses and malwares that created a lot of problems and disruption not only on the personal level but also to giant corporations and nations. The presentation also includes cloud security precautionary measures on how to overcome the security and privacy challenges. Like any other digital technology, cloud computing is also vulnerable and open to cyber abuses and cyber threats which are quite rampant in some parts of the world. Another issue would be about policies governing the usage of cloud computing when the server is based abroad and could only be accessed by a few for importing of data domestically. There could be some legal ramifications on such matters. |
|
10:00 am |
Cloud Adoption - Cybersecurity Opportunity, Threats and Practices Ser Yoong GOH (President, ISACA Malaysia Chapter) The current COVID19 pandemic outbreak has arguably been a wakeup call for most organizations that faced increasing difficulties operating from the traditional on-premise model. Unknowingly, many organizations might not have been aware that they have been directly or indirectly accessing a wide variety of cloud computing services with services such as Microsoft 0365, emerging technologies such as Internet of Things (IoT) and practices such as big data analytics. As another example, Malaysia's central bank releasing of its Risk Management in Technology (RMiT) guidelines last year has arguably spurred disruption that led to more rapid digital transformation which includes the movement to the cloud within the financial services industry. Based on the guideline's recommendation, financial institutions could adopt cloud services as long as they have performed comprehensive risk assessment prior to the adoption. This presentation will deliver awareness of cloud security by covering some of the common cloud risks and potential challenges faced with cloud adoption. There will be sharing as well of appropriate security controls be it from management or assurance perspectives that organizations should consider when moving to the cloud. |
|
10:45 am |
Panel Discussion on "The Rush to Cloud Adoption - Watch Your Steps" The global pandemic and the associated lockdown in many countries have been an inflexion point in the adoption of cloud computing; we have observed increased usage and adoption. The increased usage as well as new cloud adoption during the current crisis is a positive outcome of the lockdown. The distinguished panel will offer their views and perspectives. Moderator: Dr. Hing-Yan LEE (EVP, APAC, CSA) Panelists: FONG Choong Fook (Director, LGMS) Ser Yoong GOH (President, ISACA Malaysia Chapter) Victor LO (Head, Cybersecurity, MDEC) Philip VICTOR (MD, Welchman Keen) |
|
11:45 am |
Navigating Through the Pandemic: A MAVCOM's Cloud Journey Ts. Saiful Bakhtiar OSMAN (Head of ICT, Malaysian Aviation Commission) Sharing MAVCOM’s experience on how this economic regulator for aviation industry has set the trend by being an early cloud adopter and how cloud has benefited MAVCOM in navigating through this pandemic times with ease. Also lesson learn and tips for new organizations who are planning to go on cloud. Protecting the Cloud - New Approach Soumo MUKHERJEE (Head of Strategy & Architecture - Cyber Security, Petronas) Most organization has adopted cloud computing to varying degrees within their business and adoption is rapidly increasing. However with the adoption of cloud comes the need to ensure that the organization’s cloud security strategy is capable of protecting against the top threats. Cloud provides a lot of advantages to organizations, however it also comes with its own security threats and concerns. Cloud-based infrastructure is very different from an on-premises data center and traditional security tools and strategies are not always able to secure it effectively. |