CSA Philippines Virtual Summit 2020
11 November 2020
The Big Shift to the Cloud: Cloud Security in the Time of Covid -19
The onset of the pandemic has thrown normalcy out of gear. There is talk of a “new normal”, which continues to be defined and remains as broad as ever. The synapse between the COVID-19 pandemic and cloud security imperatives can be addressed with a call to action that the new cyber & cloud security strategy on the anvil can address. There must be sync with these modern realities and adaptation along with the willingness to innovate for future disruptions which will in turn reinvigorate our trust and boost our digital immunity.
Join leading experts from Philippines with domain proficiency and expertise to discuss the key issues and trends facing cloud security and cybersecurity today at this virtual Summit organized by CSA APAC & CSA Philippines Chapter on 11 November 2020.
Earn CPE Credits: To download your viewing certificate, navigate to the “Viewing History” section of your BrightTALK Account. You can find more information about this here: https://support.brighttalk.com/hc/en-us/articles/204280700-Can-I-have-a-list-of-all-the-webinars-I-ve-attended-
The Big Shift to the Cloud: Cloud Security in the Time of Covid -19
The onset of the pandemic has thrown normalcy out of gear. There is talk of a “new normal”, which continues to be defined and remains as broad as ever. The synapse between the COVID-19 pandemic and cloud security imperatives can be addressed with a call to action that the new cyber & cloud security strategy on the anvil can address. There must be sync with these modern realities and adaptation along with the willingness to innovate for future disruptions which will in turn reinvigorate our trust and boost our digital immunity.
Join leading experts from Philippines with domain proficiency and expertise to discuss the key issues and trends facing cloud security and cybersecurity today at this virtual Summit organized by CSA APAC & CSA Philippines Chapter on 11 November 2020.
Earn CPE Credits: To download your viewing certificate, navigate to the “Viewing History” section of your BrightTALK Account. You can find more information about this here: https://support.brighttalk.com/hc/en-us/articles/204280700-Can-I-have-a-list-of-all-the-webinars-I-ve-attended-
Co-organized by
|
|
Supporting Organization
Timothy GRANCE
Senior Computer Scientist, NIST
|
Timothy Grance is a senior computer scientist in the Information Technology Laboratory at National Institute of Standards & Technology in Gaithersburg, MD. He has held a variety of positions at NIST including Group Manager, Systems & Network Security and Program Manager for Cyber & Network Security. He has led a broad portfolio of projects including high profile projects such as NIST Hash Competition, Cloud Computing, Security Content Automation Protocol (SCAP), Protocol Security (DNS, BGP, IPv6), Combinatorial Testing, and the National Vulnerability Database. He is presently a senior researcher advertising on various projects in cloud computing, mobile devices/applications, big data, and internet of things. He has extensive public and private experience in accounting, law enforcement, and computer security. He has written on diverse topics including cloud computing, incident handling, privacy, metrics, contingency planning, forensics and identity management. He was named in 2003 to the Fed 100 by Federal Computer Week as one of the most influential people in Information Technology for the U.S. Government. He is also is a two-time recipient of the highest award from the U.S. Department of Commerce - a Gold Medal, from the Secretary of Commerce. Reference: https://www.nist.gov/publications/nist-definition-cloud-computing
|
Gonz GONZALES
Director, Information Technology Security, JG Summit Holdings, Inc
|
Gonz Gonzales is the Vice President for Governance of the Cloud Security Alliance Philippine Chapter. He has more than two decades in the field of IT and has been in cybersecurity since 2003. Gonz's professional focus is on information risk management and security architecture. He possesses several certifications in information security and data privacy and is a member of various related professional organizations. Gonz is currently Chief Information Security Officer of a Philippine conglomerate.
|
Dr. Hing-Yan LEE
EVP APAC, CSA
|
Hing Yan LEE is Executive Vice President, APAC at the Cloud Security Alliance (CSA). He has over 30 years of ICT working experience in both the public and private sectors. He was global director of the CSA STAR program for 6 months in 2017. Prior to that, he was Director of National Cloud Computing Office at the Infocomm Development Authority (IDA) for 9+ years, where he was responsible for the national program for, inter alia, developing the cloud ecosystem, promoting cloud adoption by government agencies and private enterprises, and building a trusted environment (which included developing the Multi-Tier Cloud Security (MTCS) standards and Cloud Outage Incident Response guidelines).
He was previously Deputy Director of National Grid Office at the Agency for Science, Technology & Research (A*STAR), Principal Scientist at the Institute for Infocomm Research, Director of Knowledge Lab and Deputy Director of Japan-Singapore Artificial Intelligence Centre at the Kent Ridge Digital Labs as well as Deputy Director at Information Technology Institute (the applied R&D arm of the National Computer Board). He oversaw and managed industry collaborations and applied R&D in machine language translation, spoken language dialogue, expert systems, knowledge discovery, data mining, data visualization, and other knowledge-driven efforts. Hing Yan co-founded two high-tech companies in 2000 and is a technology advisor to a fintech start-up. He was an adjunct associate professor at the National University of Singapore, served on the School of Digital Media & Infocomm Technology Advisory Committee at the Singapore Polytechnic, Engineering Accreditation Board team member (2014), co-chair of the National Infocomm Competency Framework Technical Committee on Cloud Computing as well as a member of the Cloud Computing Standards Coordinating Task Force of the Singapore Infocomm Standards Committee (ITSC). He was also a member of the NatSteel Corporate R&D Advisory Panel, an advisor/member to the Singapore National Archives Board, and the Australia-Singapore Joint ICT Council. Hing Yan is a Fellow and former VP of the Cloud Chapter in Singapore Computer Society. He is active in the ITSC working group on MTCS revision, and SingAREN Lightwave Internet Exchange (SLIX 2.0) Steering Committee. He has also undertaken consultancy and research reviews for the governments of Finland, Israel, Malaysia and Singapore as well as cloud service providers. He graduated from the University of Illinois at Urbana-Champaign with PhD and MS degrees in Computer Science. He previously studied at Imperial College London in the UK where he obtained a BSc (Eng.) with 1st Class Honours in Computing and MSc in Management Science. |
Mark MISTAL
CIO, Inspiro
|
Mark Mistal is currently the Chief Information Officer for Inspiro, responsible for the strategy and direction of Inspiro’s digital innovations, technology and security of its infrastructure. An IT Executive with 20+ years in Information Technology, Cybersecurity, IT Risk Management & Compliance, and Telecommunications for both the private industry and the US Military. He had possessed several industry certifications such as CISSP, CEH, CAP, ISSEP, GCIA, Security+, Lean Six Sigma, and was a former ISC2 CISSP instructor. He was a Senior IT Executive at Philippine based Business Processing Outsource (BPO) - SPi CRM, and SPi Global. A graduate of the United States Military Academy at West Point, New York, and received a CIO certificate from the National Defense University at Washington DC. Mark retired as a Lieutenant Colonel after having served in the US Army & US Army Reserves with previous roles such as Deputy Chief for Partner Operations at US Cyber Command, CTO for the Army Reserve Cyber Group, and as a Communications Officer in North Carolina, Okinawa, and Haiti.
|
Johanna MORTEL
Advisory Board Member, CSA Philippines Chapter
|
Hanna is one of the cloud computing evangelists in the Philippines. She firmly believes in the value that cloud computing can bring to businesses, government agencies and even individuals towards modernisation and digital transformation of her country and made it her objective to share it to as many as possible. In her 10 years in the cloud computing space, she was able to educate, guide and help hundreds of enterprises in their journey to digital transformation and specifically the use of cloud computing services as a business enabler.
|
Isa OJEDA
VP - Compliance Risk Management Officer, Multinational Bank
|
Isa Ojeda is an audit, risk and information security management professional with more than 15 years of hands-on experience, mostly in the banking industry.
She is currently a VP & Compliance Risk Management Officer for a multinational bank. She previously served as AVP-Head of Governance Audit of Union Bank of the Philippines, Head of Security and Compliance of Transcom (Asia). Earlier in her career, she was an IT Risk Manager for Macquarie, IT Auditor deployed at a regional development bank and IT Compliance Manager for a local bank. Ms. Ojeda is a long-time volunteer for an international professional association, ISACA, to help promote continuing education and qualification credentials. She is currently serving as president of ISACA Manila. She was recently awarded as one of the top women in Security by Philippine Women in Cyber Alliance. She is a Certified Internal Auditor, Certified Information Systems Auditor, Certified in Risk and Information Systems Control, Certified Information Security Manager, and Certified Payment-Card Industry Security Auditor. Ms. Ojeda is a graduate of Ateneo de Manila University with a bachelor’s degree in Management Economics. She holds post graduate diploma in Computer Science from De La Salle University. |
Ricson Singson QUE
VP for Education, CSA Philippines Chapter
|
Ricson Singson Que is the VP for Education of Cloud Security Alliance - Philippines Chapter. He spent his twenty-three years in various IT capabilities from different industries. He is currently occupied in projects involving transformation, analytics & mobile platform, and IT security. His consultancy engagements focuses on digital transformation, culture hacks, data privacy, and cybersecurity. He is also a dedicated educator who teaches in the RVR-College of Business in De La Salle University and College of Saint Benilde-School of Professional and Continuing Education (SPaCE). Ricson serves as a board member for a coaching & mentoring organization and a social enterprise while being an active member of Cloud Security Alliance (CSA), Information Systems Audit and Control Association (ISACA), Information Security Officers Group (ISOG), National Association of Data Protection Officers of the Philippines (NADPOP), and Philippine eLearning Society (PeLS).
|
Johnny SY
Information and Education Technology Consultant, Sterling Paper Group
|
Johnny is a seasoned ICT professional, having been in the industry for closed to 30 years. His last full employment was with the ABS-CBN Corporation, serving as CIO and was instrumental in the development of the TVPlus Digibox, as part of the transition to digital terrestrial broadcasting. Today, he serves as adviser to several start-ups and as industry-adviser to two Technology Business Incubators (TBI's) -- AnimoLabs of De La Salle University and UPSCALE (UP Sustaining Collaboration in Advanced Learning Environment) Innovation Hub of the University of the Philippines. He continues to offer consulting services in the areas of ICT Strategy and Education Technology.
|
Paula Nones RAMOS
Threat and Vulnerability Manager,
Royal Carribean |
Paula Nones-Ramos is the Threat and Vulnerability Manager of an International Cruise Line. Paula has performed technical security during her previous engagement with Cocal-cola and SilverSky. She graduated with a Master's Degree in Information Technology from Asia Pacific College. She currently holds certifications in CISSP, GSLC, GCIH, GMON. Her current projects involve vulnerability management, scanning, and sign-offs for the enterprise system migration to the cloud. In her free time, Paula tends to her plants and plays online games.
|
Leonardo SACAMOS
President, CSA Philippines Chapter
|
Leonardo Sacamos Jr is an Information Technology Executive with more than 30 years technical and management experience across all areas of information technology applied in the utility, real estate, mining, construction, solar energy, manufacturing, and logistics industries.
He is currently the Global Director for Information Technology Infrastructure for a global international container terminal management operator with its headquarters in the Philippines. He previously held Senior IT Executive and technical positions at Sunpower, CEMEX, Fort Bonifacio Development Corporation, and the Manila Electric Company. He had international executive stints in Spain, Egypt, and Australia. Mr. Sacamos is a volunteer for CSA Philippines Chapter and is currently its President. He has volunteered to serve in this association to help promote and uplift the qualifications of IT security and cloud professionals in the Philippines. Mr. Sacamos is a graduate of Ateneo de Manila University with a bachelor's degree in Computer Science. He completed an International Management Program at the Instituto Panamericano de Alta Direccion de Empresa (IPADE) in Florida, USA and Mexico City. |
Reggie TAMAYO
Head for IT Management, Bureau of Treasury, Philippines
|
In his role, Reggie Tamayo is in charge of managing the Bureau’s computer network and operations. A registered Mechanical Engineer and IT practitioner for over 30 years with expertise in IT management, Network Infra and DC Operations, systems design and implementations and government processes and
information systems. Has been in charge of the IT organization and Network and DC operations of the Bureau of the Treasury for over 9 years. He has been instrumental in the automation of the Bureau’s information systems such as the National Government Accounting system and its disbursement and revenue collections subsystems and other equally important processes that are critical to the day-to-day operations of the National Treasury to efficiently manage the funds of the Philippine Government. Was selected as one of the recipient of the 2015 ASEAN CIO AWARDS and was honored as one of the most outstanding Chief Information Officers in 2015 by IDG ASEAN. A first in the National Government for his contribution in transforming the Bureau’s IT environment as one of the best IT facility in the entire government. |
Carlos T TENGKIAT
CISO & Head of Information Security Governance Department, Rizal Commercial Banking Corporation
|
Carlos is currently the Chief Information Security Officer and Head of the Information Security Governance Department of Rizal Commercial Banking Corporation (RCBC). He is primarily responsible for implementing and managing the Bank’s information security program to ensure RCBC’s security posture meets the challenge of the current times.
Prior to joining RCBC, Carlos was already a seasoned information security (InfoSec) and financial technology (FinTech) professional with over 24 years’ experience in the fields of information technology (IT), payment card industry, and financial services. He was the Information Security Officer of Bastion Payments Systems Corporation (BPS) and held other posts such as Chief Operating Officer and Head of Special Projects. While working for BPS, Carlos was primarily involved in the development of the company’s payment system infrastructure. During his stint with BPS, Carlos was also the lead in ensuring the company’s attainment of a PCI DSS certification in 2006. Carlos is truly passionate with his craft. Other than InfoSec and FinTech, he possesses a strong understanding and deep appreciation of the various domains of IT such as systems architecture, software engineering, network design, implementation and operations, IT security, IT governance and risk management. |
Ryan TY
Chairman, CSA Philippines Chapter
|
Ryan has been in the IT and Infosec industry for more than 16 years. He is currently the Chairman of Cloud Security Alliance (CSA) Philippines Chapter, a global non-profit organization focusing on research, best practices, and education on Cloud and Emerging Technologies.
He has previously worked with well renowned Cybersecurity companies such as Trend Micro and McAfee on both technical and managerial levels, and is currently the Country Manager of Qualys in the Philippines. He has also conducted training, consulting, and pentesting services to local and foreign companies. |
Time |
Activity |
Session Link |
9:00 am |
Introduction Ryan TY (Chairman, CSA Philippines Chapter) Welcome Remarks & Opening Keynote - Navigating Troubled Waters Dr. Hing-Yan LEE (EVP, CSA APAC) Timothy GRANCE (Senior Computer Scientist, NIST) In this presentation, Tim will share the changes in telework practices & NIST’s response to those changes. He will also provide an update to NIST SP 800-46 and recommendations and resources for enterprise telework planning and implementation. |
|
10:00 am |
Securing the Big Shift to the Cloud Isa OJEDA (VP - Compliance Risk Management Officer, Multinational Bank) The debate on Cloud adoption is over. The pandemic has accelerated the migration of Philippine local enterprises to the cloud. The current table discussions during business meetings is how to move forward on the cloud. Major discussions circle around the cloud models, cloud security, and change management. Rethinking the Cloud Security strategy is now the main agenda of Philippine CISOs. The cloud threats are evolving fast! How will the Philippines secure the Big Shift to the Cloud? |
|
10:45 am |
Panel Discussion - "Cloud Security Against the Top Threats in Cloud" The pandemic has accelerated the digital transformation initiatives of many organizations in the Philippines. Local companies jumped to the cloud with survival response as the prime consideration. Join our fellow CISOs and CIOs in this panel discussion on the business impact of the top threats on the Cloud. We will also discuss on the cloud-security-first mindset and how CSA can help the Philippine industries in their cloud security journey. Moderator: Ricson Singson QUE, (VP for Education, CSA Philippines Chapter) Panelists:
|
|
11:30 am |
Panel Discussion - "Best Practices in Selecting Cloud Services" The pandemic accelerated the digital transformation initiatives of many organizations in the Philippines. Local companies jumped to the cloud with survival response as the prime consideration. Join our fellow CISOs and CIOs in this panel discussion on the best practices in selecting cloud services and how Cloud Control Matrix (CCM), CSA's Security, Trust & Assurance Registry Program (CSA STAR) are useful tools for selecting cloud services. Moderator: Johanna MORTEL (Advisory Board Member, CSA Philippines Chapter) Panelists:
Closing Remarks Leonardo SACAMOS (President, CSA Philippines Chapter) |