Programme

Morning Session

7:45 AM

Arrival of Speakers and Guests

8:15 AM

Morning refreshment

Conference

8:30 AM

Topic: Cyber Incident Readiness, Response, and Recovery
Presentation by: Edna Yap | Executive Director (Cyber Risk Services)
Deloitte

Synopsis: “In Cyber, its not about if organisations will get attacked; it is when an organisation will get attacked. While necessary controls needs to be in place to protect your assets, it is equally important to be ready to respond and recover when a cyber attack takes place. In this presentation, we will share some of the best practices and case studies on cyber incident readiness, response and recovery.”

8:55 AM

Topic: The Art & Science of Deception: How our minds and thoughts can be hacked and hijacked
Presentation by: Ruth Protpakorn | Director of North South Asia Enterprise Sales
KnowBe4 (brought in by JSY Systems)

9:20 AM

Topic: Info Stealer Malwares – Improving Investigations Using Threat Intelligence
Presentation by: Kai Rong Koh | Intelligence Consultant
Recorded Future

Synopsis: “Infostealers have emerged as the preferred tool for cybercriminals due to their efficiency and profitability. These malware variants are designed to stealthily infiltrate systems and exfiltrate sensitive information such as login credentials, financial data and personal information. The stolen data is then sold on the dark web or used for further cyber attacks. In this presentation, we will be covering the different variants of Infostealers, what they capture and how threat intelligence is able to help detect and protect companies from imminent intrusions caused by Infostealer infections of employees, and remediate identity compromises before they are weaponsized against the organization.“

9:45 AM 

Topic: Huawei Storage as Your Line of Defence For Ransomware Protection
Presentation by: Nic Lim Sze Thiam | Product Solution Manager
Huawei Technologies (B) Sdn Bhd

10:10 AM

Topic: Cyber Security Assessments: demystified!
Presentation by: Ariffin Sabli | Head of Security Research
IT Protective Security Services Sdn Bhd (ITPSS)

Synopsis: “This presentation will delve into the various methods used to evaluate the security posture of an organization. It will cover topics such as vulnerability assessments, penetration testing, red team and purple team engagements. By understanding the different types of security assessments, you can make informed decisions about protecting your organization’s assets from cyber threats.“

10:35 AM

Topic: Take Command of Your Attack Surface
Presentation by: Hamizah Azmee | Account Executive, Indonesia & Brunei
DMOS Tech / Rapid7

Synopsis: “Digital infrastructure continues to evolve towards hybrid environments. But one major challenge persists for many: how do you manage a growing attack surface? While transformation brings greater flexibility and opportunity, it also comes with increased risk and a wider visibility gap. This can leave your organisation vulnerable. So how can you address this gap? In this presentation, Hamizah Azmee from Rapid7 will discuss:
● The foundations of exposure management, including:
     ○ external attack surface management,
     ○ cyber asset attack surface management, and
     ○ digital risk protection.
● The challenges of having more data to synthesise and managing complex system integrations in the face of greater budget scrutiny.
● Actions you can start taking to best prepare your organisation, including:
     ○ exploring Cyber Asset Attack Surface Management (CAASM), which should incorporate AI/ML security best practices.“

11:00 AM

Topic: Sharing on AJCCA
Presentation by: Johnny Kho | Vice Chairman
ASEAN Japan Cybersecurity Community Alliance (AJCCA)

11:25 AM

Topic: IOT: Risk and Reward
Presentation by: Dave Gurbani | Chief Executive Officer
Cybersafe

11:50 AM

Topic: Converged Identity in Zero Trust platform; a holistic approach
Presentation by: Biju Varghese | Executive Vice President
Emudhra

12:15 PM

Networking Lunch

Afternoon Session

Conference

1:30 PM

Topic: Looking Beyond Vulnerabilities: Optimizing Business Outcomes from Your Cybersecurity Strategy
Presentation by: Deepu James | Senior Security Engineer
Tenable

Synopsis: “Are we exposed, and are we at risk?” This is the critical question facing every leadership team in today’s digital world.
In a rapidly evolving landscape, where the attack surface now spans IT, OT, and cloud environments, traditional vulnerability management is no longer enough to safeguard your organization from sophisticated threats. To truly protect your assets and maximize business outcomes, it’s essential to adopt a more comprehensive approach. This session will explore the importance of identifying vulnerabilities, exposing priority gaps, and closing critical exposures through Exposure Management—a strategy that goes beyond detection to actively manage and mitigate risks. Learn how integrating this approach into your cybersecurity strategy can not only protect against attacks but also enhance ROI and drive secure, compliant innovation.“

1:55 PM

Topic: International CERT/CSIRT Collaboration
Presentation by: Adli Bin Abd Wahid | Senior Internet Security Specialist
Asia Pacific Network Information Centre (APNIC)

2:20 PM

Topic: Driving Organisation Wide Cyber Vigilance
Presentation by: Abdul Fattah | Head of Information Security Management
Bank Islam Brunei Darussalam (BIBD)

Synopsis: "It is common knowledge around the cybersecurity circle that "security is a shared responsibility". Although a straightforward phrase, the intent and the execution can leave a lot to be desired. In this presentation, Abdul Fattah walks through a multi-faceted approach for the implementation of security concepts from the front-line to the board room and beyond. The presentation will cover topics such as security awareness, risk management, and regulatory compliance, and how they contribute to the development of an information security programme.

2:45 PM

Topic: Japanese Financial Industry Cybersecurity Policy Overview
Presentation by: Keisuke Kamata | Executive Director and CTO
Financials ISAC Japan

3:10 PM

Topic: Care of Personal Data: Organisational and Technical Measures for Personal Data Protection
Presentation by: Norshahrul Nizam Bin Othman | Assistant Chief Executive, Data Protection Office & International
Authority for Info-communications Technology Industry of Brunei Darussalam (AITI)

Synopsis: “Due to the increasing prevalence of data protection and cyber threats, organisations need to strengthen their data protection measures and controls for robust and resilient ICT systems. The presentation will outline data protection practices that should be adopted by organisations in their ICT policies, systems and processes to safeguard the personal data under their care. The session will include sharing of good practices that organisations should undertake to protect personal data.“

3:35 PM

Topic: Embracing Security to Enhance Organizational Cyber Resilience
Presentation by: Yu Wei Cheng | Associate Vice President, Data & Security
DST

4:00 PM

Topic: Strengthening Cyber Vigilance and Data Sovereignty through ISO Certification: WHY?
Presentation by: Nurul Husna Hazalin | Cyber Solution Consultant
CyberSecurity Malaysia

Synopsis: “This title highlights the critical relationship between cybersecurity measures, data sovereignty, and ISO certification in a cohesive and strategic manner. It also emphasises the importance of ISO certification in bolstering cybersecurity measures, which aligns with the professional focus of CyberSecurity Malaysia certification body.“

4:25 PM

Topic: From Complexity to Simplicity: Automating Risk Management for Enhanced Cyber Resilience
Presentation by: Benyazwar Mohmd | Chief Risk & Compliance Officer 
Nexagate

Synopsis: “As cyber threats grow more complex, traditional risk management methods are becoming insufficient. “From Complexity to Simplicity: Automating Risk Management for Enhanced Cyber Resilience” explores how automation can simplify and strengthen risk management processes. This session will highlight the key benefits of automation, including real-time threat detection and improved compliance, offering practical strategies for implementing these solutions. Discover how automation can transform risk management into a powerful tool for enhancing your organization’s cybersecurity resilience.“

4:50 PM

Closing Remarks