Informed Governance

CLUSIL & ISACA.lu joint event

The first event of 2019 will be a joint event with ISACA. Join us to a stunning evening with François THILL, Director Information Security, Ministry of the Economy, Luxembourg.

Agenda

17:45 – Registration on site
18:15 – Welcome by Roland Bastin, ISACA president
18:20 – Looking back on 2018 by Jean Goetzinger, CLUSIL president
18:25 – Outlook on 2019 by Pascal Steichen, vice-president CLUSIL
18:30 – Keynote on Informed Governance by François Thill
The conference is followed by a networking cocktail.

Registration: here

Setting the scene
Quote: “On 8th May 2018, Luxembourg presented its 3rd National Cybersecurity Strategy. The challenge: to provide an environment conducive to digital development, while ensuring maximum security for all stakeholders.

Informed Governance
Technological and human failures increasingly confirm how much managers, experts and users are still unaware of ICT risks. The issue for the growth of a modern economy like Luxembourg is:  How well do we know how to tackle this situation? What do we undertake for the optimisation of existing managing methods, share and coordinate the knowledge and expertise among security key players?

Biography
After 10 years of IT experience in international banking, Francois joined the Ministry of the Economy in Luxembourg in 2001 as responsible for IT security, and is to date the Director of the department for e-commerce and information security.

Furthermore, François Thill represents Luxembourg on the management board of the European Network and Information Security Agency (ENISA) since 2003; he is member of the board of LuxTrust, chair of the board of Securitymadein.lu, member of the Luxembourg Cyber Security Board, and an alternate member of the Data Protection Authority in Luxembourg.

The conference is free of charge for ISACA and CLUSIL members, our partner associations as well as anyone interested in the topic.

Note: No-show will be invoiced 25€

When:

17/01/2019

Where:

Pâtisserie Namur, 2 rue de Bitburg, L-1273 Luxembourg-Hamm

Survey - Benchmark of Information Security Controls

The 1st edition of the only benchmark made by the experts for the experts.

Make your voice heard

Fill-in the gap with the first ever local benchmark made by experts for the experts, all sectors combined, exclusively focused on the information security controls landscape in Luxembourg and its greater region.

Take part in our 1st bench mark. Time to complete: ± 15 mins

Information security controls - 1st edition

With the support of 28 CLUSIL members, a questionnaire addressing a large spectrum of categories of information security controls have been drafted and are now disseminated towards the community to get answers.

We encourage you to fill out or forward this invitation to your company’s (Chief) Information Security Officer (C(ISO)), Responsable de la Sécurité des Systèmes d’Information (RSSI), IT Manager, or anyone who has information security within his scope of responsibilities.

5 respondents, chosen randomly, will win a one-year CLUSIL membership (see conditions at the end of the survey)

We would be pleased if you can answer the questionnaire by the 30/12/2018.

WG-BCMS - session 4

The working group dedicated to Business Continuity Management (BCMS) is addressed to all BCM managers and people interested in BCM in general.

We will continue the discussion around the topic BIA.
In addition we continue to exchange experiences, of organizing and realizing a table top exercise on DRP BCP Tests.

When

12/12/2018

Time

17:30 - 19:00

Place

Security made in Lëtzebuerg, 16 boulevard d’Avranches, L-1160 Luxembourg

Registration

before Tuesday 11 December 2018 noon by email

WG-BCMS - session 3

The working group dedicated to Business Continuity Management System (BCMS) is addressed to all BCM managers and people interested in BCM in general.

We will continue the discussion around the topic BIA.
In addition we can also propose, to exchange experiences, of organizing and realizing a table top exercise.

When

14 November 2018

Time and place

The session starts at 17:30 at Security made in Lëtzebuerg, 16 boulevard d’Avranches, L-1160 Luxembourg

Registration

before Tuesday 13 November 2018 noon by email

WG-BCMS - session 2

The working group dedicated to Business Continuity Management System (BCMS) is addressed to all BCM managers and people interested in BCM in general.

During the first session, the following was decided:

• Address questions on BIA
• Create a fictive company, to exercise the creation of DRPs/BCPs, BIA realization (final extend of scope to be defined during the next session)

When

10 October 2018

Time

The meeting will start at 17:30 till 19:00

Place

Security made in Lëtzebuerg, 16, bd d’Avranches, L-1160 Luxembourg

Registration

via email before 9 October noon

Working Group BCM - relaunch

The working group dedicated to Business Continuity Management (BCM) is addressed to all BCM managers and people interested in BCM in general.

CLUSIL is pleased to announce you once again the creation of a working group dedicated to Business Continuity Management (BCM) by Werner ANSORGE.

Goal

The goal of the working group could be among others to:

• Discuss together our general understanding of BCM, mainly of the ISO norms 22301 and 22313
• Exchange experiences and lessons learned
• How to write Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP)
• How to organise DRP and BCP tests
• How to carry out a Business Impact Analysis

With the final goal to create supporting material for all of us to ease our lives as BCM managers.
 
During the first working session, we will define together the topics of interests for the next coming months, and which deliverable we would like to create together.
 
As well, during the first working session, you can express your interest in supporting Werner as co-leader for this new working group.

When

12 September 2018

Time

The session starts at 17:30 till 19:00

Place

Security made in Lëtzebuerg, 16 bd d’Avranches, L-1160 Luxembourg

Registration

Before Tuesday 11 September 2018 noon to email

Information Security Education Day

2018 theme: Internet of Things - security challenges and opportunities

The Information Security Education Day (ISED) is a yearly one-day event co-organized by the University of Luxembourg (Computer Science and Communication Research Unit - CSC) and the Luxembourg Institute of Science and Technology (LIST), sponsored by CLUSIL.

Why an Education Day?

ISED is a yearly event aiming at providing new knowledge on a hot-topic related to security and privacy. The conference primarily targets the current and former students of the professional MSSI Master (Master en management de la sécurité des systèmes d’information).

Why is it open to all practitioners?

ISED provides an ideal forum where academics and practitioners can learn about the different facets of a key-topic, exchange and discuss ideas, and compare experiences. In this spirit, ISED seeks to be an interdisciplinary event, open to all. The speakers will bring their expertise in different areas covering the legal, technical and research-wise facets of the theme.

See more at: https://ised.uni.lu/#sthash.6Hxhu7U8.dpuf

Anti Money Laundering on Blockchain

CLUSIL & ISACA joint event

Alberto Ornaghi, Neutrino’s Chief Technology Officer (http://www.neutrino.nu/), and Giancarlo Russo, Neutrino’s Chief Executive Officer, will present How-To perform Anti Money Laundering checks and detect suspicious transactions on the bitcoin network, extending the traditional “follow the money” approach also to the dark web.

In particular, they will present how, based on advanced machine learning engines and “clustering” techniques, it is possible to monitor, analyze and track the blockchain and all bitcoin activities providing actionable compliance insight, including setting-up customized “red flag” alerts based on location (“blacklist” approach), detection of money obfuscation schemes (“mixer” and “tumbler”), and bitcoins with suspicious origin/destinations linked to darknet activities.

The techniques and tools presented are used by Law Enforcement, Compliance and Regulatory Organizations and by simple bitcoins network participants.

The presentation is addressed to both technical and non-technical audience (including Compliance, Risk and Audit professionals).

Speakers

Mr. Alberto Ornaghi and Mr. Giancarlo Russo

When

February 22, 2018, on-site registrations starting at 5.30 PM. Conference starting at 6PM

Where

Patisserie Namur, 2, rue de Bitbourg, L1273 Luxembourg

Pricing

Free event, eligible to 2 CPE credits

Supporting organisation’s website

www.neutrino.nu

Blockchain series - Installment #5

The CLUSIL series of conferences on Blockchain security aims at surveying current status of Blockchain security, focusing on sector-specific and national initiatives.

When speaking about Blockchain security, one mainly thinks of integrity and privacy issues. However, in practise, Blockchain-based solutions also face legal and operational risks. The fifth session of the conference series will cover several of these secondary risks, including legal implications for smart contracts, and security considerations for scalability solutions.

Speakers

• Hervé Hansen (Lawyer): “Smart Contracts and the Law”
• Jean Lancrenon (Head of R&D, itrust consulting): “How Blockchain scalability solutions include security”

When

November 9th, 2017

Where

Security made in Lëtzebuerg, 16 boulevard d’Avranches, L-1160 Luxembourg

Blockchain series - Installment #4

The CLUSIL series of conferences on Blockchain security aims at surveying current status of Blockchain security, focusing on sector-specific and national initiatives.

The fourth session provides an insight on two specific aspects of Blockchain. The first part focuses on the security challenges faced especially for smart contract programming and the Ethereum platform, while the second talk provides an analysis of classic cybersecurity issues (confidentiality, integrity and availability) translated to the context of the Blockchain.

Speakers

• Sergei Tikhomirov (CryptoLUX group, SnT, University of Luxembourg): “Security challenges in Ethereum smart contract programming”
• Laurent de la Vaissière (Director, Deloitte Luxembourg) and Ismaël Cissé (Senior Manager, Deloitte Luxembourg): “Blockchain: A Cybersecurity perspective”

When

September 7th, 2017

Where

SnT Campus Kirchberg, 6 Rue Richard Coudenhove-Kalergi, L-1359 Luxembourg-Kirchberg

Blockchain series - Installment #3

The CLUSIL series of conferences on Blockchain security aims at surveying current status of Blockchain security, focusing on sector-specific and national initiatives.

The third session provides an insight on the maturity of Blockchain security in real-world applications. The two talks provide lessons learned from previously encountered security incidents and focus on security challenges faced in FinTech applications.

Speakers

• Alex Kampa (Research Director at Sikoba Ltd), “Some security issues facing FinTech/blockchain projects”

• Matthieu GARIN (CLUSIF): “Blockchain: lessons learnt from recent incidents”

  When

June 15th 2017 - registration starting at 17:15, meeting starts at 17:45

Where

SnT, 29 avenue J.F. Kennedy, L-1855 Luxembourg-Kirchberg

Database Security and Big Data

A joint CLUSIL-ISACA event

CLUSIL and ISACA are honoured to invite you for a conference in the context of the new GDPR! Database Security and Big Data are an important element within data privacy. The conference will give you the opportunity to get hands-on information on database security and big data with international recognized experts. Topics that will be covered are:

Database Security

- Type of hackers in relation to databases 
- Different types of attack scenarios 
- SQL Injection attacks (from outside) 
- How to assess the security of databases 
- Auditing of databases

Big data and security

- Deploying Big Data for security 
- Big Data a potential saviour to replace existing log management systems,  
- Using Big Data techniques to analyse, and even predict, security incidents,

Speakers

• Alexander Kornbrust (founder of Red-Database-Security), “Database Security”
• Laurent Dufossé (founding partner and technical supervisor of AdbA): “Big Data and security”

When

June 7th, 2017 - conference starts at 17:30

Where

SnT, 29 avenue J.F. Kennedy, L-1855 Luxembourg-Kirchberg

Blockchain series - Installment #2

The CLUSIL series of conferences on Blockchain security aims at surveying current status of Blockchain security, focusing on sector-specific and national initiatives.

For the second event, we are pleased to welcome two speakers who have a solid background on the security and resilience of Blockchain-based applications. In their talks, they will share some of their experience by outlining the major security concerns that occur when developing such applications.

Speakers

Antoine DETANTE (Manager at InTech), “Security key points for blockchain based applications”
Frank ROESSIG (Head Financial Solutions at Telindus): “Securing BlockChain for the Application by the Financial Sector”

When

Wednesday, 5th April 2017 starting at 17:30

Where

SnT, 29 avenue J.F. Kennedy, L-1855 Luxembourg-Kirchberg

Blockchain series - Installment #1

Blockchain is nowadays considered as a key technology, particularly in Luxembourg, where many initiatives around this new paradigm are launched.

Since the FinTech ecosystem and the Blockchain are based on similar concepts, it is primarily the financial sector that is concerned. However, there exist many more applications in other domains, including the medical sector, e-voting and smart contracts. Security of Blockchain technology is an ambivalent concept: while security constitutes its main strength, it is also the primary source of mistrust that one may have of Blockchain-based applications. The CLUSIL series of conferences on Blockchain security aims at surveying current status of Blockchain security, focusing on sector-specific and national initiatives.

Speakers

• Steve MULLER (Security Researcher at itrust consulting): “Fundamentals of Blockchain security”
• Laurent KRATZ (Co-Founder at Scorechain): “Cryptocurrencies de-anonymisation, the hunt for ransomware”

When

Tuesday, 7 February 2017 starting at 17:30

Where

20 YEARS OF CLUSIL

Under the high patronage of the Vice-Prime Minister, Etienne Schneider, CLUSIL, celebrates its 20 years of existence on May 30th and 31st in Luxembourg with an international panel of speakers.

Agenda details being available on a dedicated website: https://20.clusil.lu/

A 2 days conference that will include:

SECURITYMADEIN.LU Cybersecurity Breakfast #7
“Fintech and cybersecurity”

Startup lounge

R&D efforts in cybersecurity

At the end of each day, a networking cocktail and respectively a BBQ are scheduled.

When

May 30th and 31st 2016

Where

Confiserie Namur, in Hamm.