CCI held a grand X International Congress of Industrial Cyber Security in Latin America. Quito (Ecuador) on May 30 and 31

May 30 and 31, 2018
As a fundamental part of its activity, the Industrial Cybersecurity Center (CCI) will hold its X International Congress of Industrial Cybersecurity, in Latin America, as one of the reference events for the Ibero-American market, and as a point of meeting and exchange of knowledge , experiences and relationships of all the actors involved in this field.
With the participation of national and international experts who will share knowledge and experiences of great value.
In this congress will be represented all the actors, industrial manufacturers, cybersecurity, engineering, consultants, integrators, end users and operators of critical infrastructures that will meet in Quito to discuss their different perceptions of the reality that today is Cybersecurity Industrial.

Agenda

Schedule

  • 30/05/2018
    Welcome and Presentation of the Congress
    José Valiente ( CCI, Director )

    José Valiente is Director and Head of Coordination and Communication of the Industrial Cybersecurity Center. Specialist in Technological and Security consulting. He has more than 20 years of experience working in large consultancies, where he has developed his professional career both in the field of information technology and in the industrial automation sector. He has participated in more than a dozen publications on industrial cybersecurity, as well as in multiple congresses, events and courses specialized in cybersecurity. Currently, he has multiple certifications in solutions for security and IT manufacturers, as well as the professional certifications CISM of ISACA and Global Industrial Cyber Security Professional (GICS) of GIAC.

  • 30/05/2018
    State of Industrial Cybersecurity in Ecuador
    Fernando Guerrero ( CCI, Coordinator of Ecuador )
    Systems and computer engineer. With a Master of Science in Germany, in the branch of Computational Engineering and a Master of Arts, in Spain, in the branch of Strategic Management and Innovation Management.
    Fernando has worked for more than 14 years in the electrical sector, always in the branch of Cybersecurity. With extensive knowledge in control systems, real-time systems, information systems with their own infrastructure and in the cloud.
    He has received recognition for professional merit from the EC Council (2015 – C | CISO Of the year) and Cybersecurity Excellence Awards (2017 – Cybersecurity professional of the year).
    He is a person dedicated to study and research. He has several certifications and safety training to his credit. Being the first C | CISO of Ecuador, he has leveraged several projects in the electric sector of his country. He has also received training in operations cybersecurity, information security for SMEs, ISO27000 and NERC-CIP. He speaks 4 languages ​​and is an active member of Mensa International.
  • 30/05/2018
    Panel debate: Evolution of Industrial Cyber Security in Latin America, the United States and Europe
    CCI coordinators ( The voice, of the industry )

    The general coordinators of CCI, Patrick Miller, of the United States, Claudio Caracciolo, of Latin America, Miguel García-Menéndez, of Europe will debate on the situation of Industrial Cybersecurity in each of the regions of the world.

  • 30/05/2018
    Why Industrial Cybersecurity plays a key role in National Security
    Samuel Linares ( iHackLabs, Partner )
    Samuel Linares is Partner at iHackLabs, Independent Evaluator of the European Commission, CIIP Expert at ENISA (European Network and Information Security Agency), member of ISACA Global Cybersecurity Task Force and Executive Steering Committee of GICSP certification (Global Industrial Cyber ​​Security Professional).
    With more than two decades of multinational experience in the management and management of multicultural projects, security and systems integration, he has been the main promoter of the concept of “Industrial Cybersecurity” in the Spanish-speaking world, and is recognized as an expert in this globally, participating as project director, chairman, speaker and professor in more than 30 countries around the world. Samuel is the founder and former director of the Industrial Cybersecurity Center (CCI) and was the Senior Lead Technologist of Industrial Cybersecurity at Booz Allen Hamilton for the past 3 years.
    Samuel has numerous certifications in the field of cybersecurity, such as GICSP (Global Industrial Cyber ​​Security Professional), CRISC (Certified in Risk and Information Systems Control), CGEIT (Certified in Governance of Enterprise IT), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), GIAC Systems and Network Auditor (GSNA), GIAC Assessing Wireless Networks (GAWN), ISO 27001 or ISO 22301 Lead Auditor, as well as other specific from different manufacturers in the market, and he holds a Diploma in Management Informatics from the University of Oviedo and a University Expert in Data Protection from the Real Escorial University Center Maria Cristina and Davara & Davara.
  • 30/05/2018
    Cybersecurity, the foundation for a successful digital transformation
    Homero Endara ( Baker Hughes, a GE Company Digital Solutions, Product Line Leader )

    Homero Endara is a member of the Baker Hughes, a GE Company Digital Solutions – Controls leadership team.  He has the role of Oil & Gas Product Line Leader for Control Solutions based in Houston, TX.

    Homero brings more than 19 years of GE experience. Previous to his current role, Homero held the position of senior global product manager for GE Power & Water where he led a global team of product application engineers focused on growing a GE Water & Process Technologies product line.

    Other past roles include senior global product marketing manager at GE Water & Process Technologies and senior global industry manager at GE’s former Plastics business. Homero joined GE through the Technical Leadership Program where he progressed through several engineering positions before moving into sales, marketing and product management. Outside of GE, Homero held the role of commercial development manager at Arkema, formerly part of leading global oil and gas company Total.

    Homero holds a cum laude bachelor of science degree in Chemical Engineering and a Master of Science in Administration from the University of Massachusetts, Amherst. Homero is a member of the Society of Petroleum Engineers, American Petroleum Institute and has served on the Plastics Engineers’ Board of Directors in Chicago and Philadelphia.

  • 30/05/2018
    Security Convergence: Combining Forces
    Patrick Miller ( Archer Security Group, Manager Partner )

    Patrick Miller is one of 20 Forbes cyber policy experts to follow on Twitter and one of the 50 smart grid pioneers of smart grid in 2015. Today he is a trusted independent advisor dedicated to the protection and defense of critical infrastructure throughout the world. He is currently a managing partner of Archer Energy Solutions, as well as founder, director and president emeritus of EnergySec, a 501 (c) (3) nonprofit focused on the exchange of information, situational awareness and staff development of security for the energy industry. Patrick’s experience extends to the Government, Telecommunications, Financial and Vertical Energy Services, within the key positions with the regulatory bodies, the owners of useful assets and private consulting companies.

  • 30/05/2018
    Cybersecurity in the connected world
    Claudio Caracciolo ( Telefónica - Eleven Paths, Chief Security Ambassador )

    General Coordinator of LATAM of CCI. Specialist Consultant in Information Security with international certifications. Professor of Forensic Computing at the Higher Institute of Public Security (ISSP). Member of associations related to the environment such as: ISSA International, OWASP, Usuaria, Argentina Cibersegura, Member of the academic committee of Segurinfo from 2007 to the present. Speaker in a large number of national and international events and instructor on topics related to Ethical Hacking, Defense Methodologies, Platform Harder, Web Security, Anti-Forensic Techniques.

  • 31/05/2018
    Consequences of high-impact cyber-incidents in an industrial plant. Practical example
    José Valiente ( CCI, Director )

    José Valiente is Director and Head of Coordination and Communication of the Industrial Cybersecurity Center. Specialist in Technological and Security consulting. He has more than 20 years of experience working in large consultancies, where he has developed his professional career both in the field of information technology and in the industrial automation sector. He has participated in more than a dozen publications on industrial cybersecurity, as well as in multiple congresses, events and courses specialized in cybersecurity. Currently, he has multiple certifications in solutions for security and IT manufacturers, as well as the professional certifications CISM of ISACA and Global Industrial Cyber Security Professional (GICS) of GIAC.

  • 31/05/2018
    Anatomy of the Stuxnet attack and the lessons learned for a SOC OT and CSIRT OT
    Marcelo Erazo ( Grupo Radical, Security Arquitect )

    CSSA Certified SCADA Security Architect, Certificate in online training pedagogical model, MBA in Marketing and Sales at the European Graduate Institute, Certified Engineer at SCADAGuardian of the company NOZOMI NETWORKS, 14 years of experience, has been speaker at multiple security conferences in countries such as Ecuador, Peru, Bolivia, Costa Rica, Panama and Colombia. His cybersecurity articles have been published in specialized journals in Ecuador and Peru. He has won professional awards such as the award for “Best Presale Engineer of Ecuador” awarded in 2013 by McAfee.

  • 31/05/2018
    ICS Threat Landscape in 2017
    Kirill Kruglov ( Kaspersky Lab, Senior research developer, Critical Infrastructure Threat Analysis team )

    Kirill Kruglov has joined Kaspersky Lab in October 2009 taking position of Malware analyst. In 2011 he shifted to Whitelisting and Cloud research team as a Senior Whitelist Analyst where he was responsible for research on information security technologies and products. Since 2014 Kirill working in Critical Infrastructure Defense department as a Senior research developer. In his role, he is responsible for managing researches on Industrial Control Systems Security technologies and cyber-threats.

  • 31/05/2018
    Industrial cyber-resilience: business continuity, response to incidents and Red Team exercises
    Enrique Domínguez ( Innotec (Grupo Entelgy), Strategy director )

    Enrique Domínguez, engineer in Computer Science from the University of Zaragoza and MBA from ESADE. He currently leads the practice He has developed his career in the field of consulting, specializing in cybersecurity management in international areas and business continuity, leading reference projects in major entities and IBEX35 in Spain, Turkey or the United States. He is professionally certified as CISSP by (ISC) 2, CISM and CISA by ISACA and ISO 27001 Lead Auditor by BSI.

  • 31/05/2018
    Practical approach to the protection of Critical Infrastructures
    Ernesto Landa ( COGA / CCI, CISO )
    Systems Engineer Titled by the University of Lima (Peru) with more than 10 years of experience in Information Technology and Telecommunications in the Energy Sector and Hydrocarbons. Specialist in Information Security and Cybersecurity in Critical Infrastructures, is an active member of the Industrial Cybersecurity Committee of the Regional Association of Companies in the Oil, Gas and Biofuels Sector of Latin America and the Caribbean (ARPEL). He is an ISO 27001: 20013 Auditor accredited by The International Register of Certified Auditors (IRCA), and holds international certifications such as Project Manager Professional (PMI), ISO 27001: 2013 Internal Auditor and ISMS ISO27001: 2013 Implementer.
    He currently leads the Information Security Area of Compañía Operadora de Gas el Amazonas (COGA), a company specialized in the management, operation and maintenance of infrastructures in the energy sector.
  • 31/05/2018
    Panel debate: Successes and failures in the protection of industrial control systems
    Mangers cybersecurity ( The voice, of the industry )

    In this panel, several industrial cybersecurity managers in sectors such as energy, engineering, food and transport will share some of their experiences in the management of technological risks in the operation of industrial plants.

Ponentes

Speakers

  • Claudio Caracciolo
    Coordinador general
    LATAM, CCI

    General Coordinator of LATAM of CCI. Specialist Consultant in Information Security with international certifications. Professor of Forensic Computing at the Higher Institute of Public Security (ISSP). Member of associations related to the environment such as: ISSA International, OWASP, Usuaria, Argentina Cibersegura, Member of the academic committee of Segurinfo from 2007 to the present. Speaker in a large number of national and international events and instructor on topics related to Ethical Hacking, Defense Methodologies, Platform Harder, Web Security, Anti-Forensic Techniques.

  • Enrique Domínguez
    Strategic Director
    Innotec, Grupo Entelgy

    Enrique Domínguez is a Computer Engineer from the University of Zaragoza and MBA from ESADE. He currently leads the practice He has developed his career in the field of consulting, specializing in cybersecurity management in international areas and business continuity, leading reference projects in major entities and IBEX35 in Spain, Turkey or the United States. He is professionally certified as CISSP by (ISC) 2, CISM and CISA by ISACA and ISO 27001 Lead Auditor by BSI.

  • Homero Endara
    Product Line Leader
    Baker Hughes, a GE Company Digital Solutions

    Homero Endara is a member of the Baker Hughes, a GE Company Digital Solutions – Controls leadership team.  He has the role of Oil & Gas Product Line Leader for Control Solutions based in Houston, TX.

    Homero brings more than 19 years of GE experience. Previous to his current role, Homero held the position of senior global product manager for GE Power & Water where he led a global team of product application engineers focused on growing a GE Water & Process Technologies product line.

    Other past roles include senior global product marketing manager at GE Water & Process Technologies and senior global industry manager at GE’s former Plastics business. Homero joined GE through the Technical Leadership Program where he progressed through several engineering positions before moving into sales, marketing and product management. Outside of GE, Homero held the role of commercial development manager at Arkema, formerly part of leading global oil and gas company Total.

    Homero holds a cum laude bachelor of science degree in Chemical Engineering and a Master of Science in Administration from the University of Massachusetts, Amherst. Homero is a member of the Society of Petroleum Engineers, American Petroleum Institute and has served on the Plastics Engineers’ Board of Directors in Chicago and Philadelphia.

  • Marcelo Erazo
    Security Arquitect
    Grupo Radical

    CSSA Certified SCADA Security Architect, Certificate in online training pedagogical model, MBA in Marketing and Sales at the European Graduate Institute, Certified Engineer at SCADAGuardian of the company NOZOMI NETWORKS, 14 years of experience, has been speaker at multiple security conferences in countries such as Ecuador, Peru, Bolivia, Costa Rica, Panama and Colombia. His cybersecurity articles have been published in specialized journals in Ecuador and Peru. He has won professional awards such as the award for “Best Presale Engineer of Ecuador” awarded in 2013 by McAfee.

  • Fernando Guerrero
    Coordinador de Ecuador
    CCI
    Systems and computer engineer. With a Master of Science in Germany, in the branch of Computational Engineering and a Master of Arts, in Spain, in the branch of Strategic Management and Innovation Management.
    Fernando has worked for more than 14 years in the electrical sector, always in the branch of Cybersecurity. With extensive knowledge in control systems, real-time systems, information systems with their own infrastructure and in the cloud.
    He has received recognition for professional merit from the EC Council (2015 – C | CISO Of the year) and Cybersecurity Excellence Awards (2017 – Cybersecurity professional of the year).
    He is a person dedicated to study and research. He has several certifications and safety training to his credit. Being the first C | CISO of Ecuador, he has leveraged several projects in the electric sector of his country. He has also received training in operations cybersecurity, information security for SMEs, ISO27000 and NERC-CIP. He speaks 4 languages ​​and is an active member of Mensa International.
  • Ernesto Landa
    CISO
    COGA
    Systems Engineer Titled by the University of Lima (Peru) with more than 10 years of experience in Information Technology and Telecommunications in the Energy Sector and Hydrocarbons. Specialist in Information Security and Cybersecurity in Critical Infrastructures, is an active member of the Industrial Cybersecurity Committee of the Regional Association of Companies in the Oil, Gas and Biofuels Sector of Latin America and the Caribbean (ARPEL). He is an ISO 27001: 20013 Auditor accredited by The International Register of Certified Auditors (IRCA), and holds international certifications such as Project Manager Professional (PMI), ISO 27001: 2013 Internal Auditor and ISMS ISO27001: 2013 Implementer.
    He currently leads the Information Security Area of Compañía Operadora de Gas el Amazonas (COGA), a company specialized in the management, operation and maintenance of infrastructures in the energy sector.
  • Samuel Linares
    Partner
    iHackLabs
    Samuel Linares is Partner at iHackLabs, Independent Evaluator of the European Commission, CIIP Expert at ENISA (European Network and Information Security Agency), member of ISACA Global Cybersecurity Task Force and Executive Steering Committee of GICSP certification (Global Industrial Cyber ​​Security Professional).
    With more than two decades of multinational experience in the management and management of multicultural projects, security and systems integration, he has been the main promoter of the concept of “Industrial Cybersecurity” in the Spanish-speaking world, and is recognized as an expert in this globally, participating as project director, chairman, speaker and professor in more than 30 countries around the world. Samuel is the founder and former director of the Industrial Cybersecurity Center (CCI) and was the Senior Lead Technologist of Industrial Cybersecurity at Booz Allen Hamilton for the past 3 years.
    Samuel has numerous certifications in the field of cybersecurity, such as GICSP (Global Industrial Cyber ​​Security Professional), CRISC (Certified in Risk and Information Systems Control), CGEIT (Certified in Governance of Enterprise IT), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), GIAC Systems and Network Auditor (GSNA), GIAC Assessing Wireless Networks (GAWN), ISO 27001 or ISO 22301 Lead Auditor, as well as other specific from different manufacturers in the market, and he holds a Diploma in Management Informatics from the University of Oviedo and a University Expert in Data Protection from the Real Escorial University Center Maria Cristina and Davara & Davara.
    Samuel shares his activity habitually in his twitter account @infosecmanblog.
  • Patrick Miller
    Managing Partner / Coordinador de Estados Unidos
    Archer / CCI

    Patrick Miller is one of 20 Forbes cyber policy experts to follow on Twitter and one of the 50 smart grid pioneers of smart grid in 2015. Today he is a trusted independent advisor dedicated to the protection and defense of critical infrastructure throughout the world. He is currently a managing partner of Archer Energy Solutions, as well as founder, director and president emeritus of EnergySec, a 501 (c) (3) nonprofit focused on the exchange of information, situational awareness and staff development of security for the energy industry. Patrick’s experience extends to the Government, Telecommunications, Financial and Vertical Energy Services, within the key positions with the regulatory bodies, the owners of useful assets and private consulting companies.

  • José Valiente
    Director
    CCI

    José Valiente is Director and Head of Coordination and Communication of the Industrial Cybersecurity Center. Specialist in Technological and Security consulting. He has more than 20 years of experience working in large consultancies, where he has developed his professional career both in the field of information technology and in the industrial automation sector. He has participated in more than a dozen publications on industrial cybersecurity, as well as in multiple congresses, events and courses specialized in cybersecurity. Currently, he has multiple certifications in solutions for security and IT manufacturers, as well as the professional certifications CISM of ISACA and Global Industrial Cyber Security Professional (GICS) of GIAC.

Talleres

Main Host

  • May 29
    8:30 a.m. to 5:00 p.m.: Workshop on Practical Management of Industrial Cybersecurity
    The aim of this workshop is to provide the professionals of industrial organizations, engineering, IT integrators and OT with the necessary knowledge to carry out a diagnosis in terms of Cybersecurity of an industrial organization, identifying the main security breaches, as well as establishing a risk analysis and treatment plan to manage technological risks at levels of excellence.
    This workshop provides a practical guide for those responsible for managing the risks of Industrial Cybersecurity.
    Addressed to:
    Responsible for risk management of industrial cybersecurity, responsible for business continuity, responsible for information security, responsible for operational safety and responsible for industrial computing.
    Reasons to attend:
    Learn how to assess the risk of cybersecurity in an industrial organization.
    Share with other professionals the important aspects that should be considered in order to evolve risk management to levels of excellence.
    Learn to establish a cybersecurity treatment plan in an industrial automation environment.
    Main points of the workshop:
    Understand the best approach to diagnosis and risk assessment as a fundamental part of the cybersecurity process in an industry environment.
    Identify and correctly evaluate the cybersecurity capabilities of an industrial organization and how to establish a treatment plan.
    Cost of the workshop 300 US $
    Limited places 18 places

    Teacher: José Valiente (CCI)

Patrocinadores

Sponsors

Gold

May 30 and 31, 2018
Hotel NH COLLECTION ROYAL QUITO, Cordero 444 y Avenida 12 de Octubre, Quito 170517, Ecuador