OBL Security & Tech Conference Brochure

In today’s uncertain world, bank security - both physical and cyber remain of utmost importance to an institution’s customers, employees and community. The Ohio Bankers League once again offers its information-packed, combined Security and Technology Conference.

This program features two tracks that can be attended individually or together. A bank may also share a seat at the program to save valuable dollars.

Security Track April 10 Tech Track April 11 & 12

WHO SHOULD ATTEND This program is designed for those who are responsible for physical security, cybersecurity, fraud, IT planning, network administration, information security and operations, as well as any others who are responsible for making technology decisions at your institution, including senior level management.

Questions?

Susan Poling Jones 614-340-7611

spoling@ohiobankersleague.com

Registration Assistance?

Megan Peiffer

mpeiffer@ohiobankersleague.com

THANK YOU TO OUR SPONSORS KEYNOTE SBS CyberSecurity Virtual Innovations

WIFI Plante Moran

PRESENTING OBL BankServices

Harbour Technology Consulting

BREAK CLASSIC Graduate School of BankingMadison

Visit www.ohiobankersleague.com or scan the QR code for registration information about the Security & Tech Conference

2024 OBL SECURITY & TECHNOLOGY CONFERENCE AGENDA SECURITY TRACK - APRIL 10

TECH TRACK DAY 1 - APRIL 11

8 – 8:30 a.m.

Registration & OBL BankServices Expo

8–8:30 a.m.

OBL BankServices Expo

8:30 – 9:30 a.m.

Welcome and Trends and Indicators Impacting Your Bank’s Security

8:30–9:45 a.m.

Welcome/Welcome Back & CyberSecurity Mindset: How to Move from Reactive to Proactive

9:30 – 9:45 a.m.

OBL BankServices Expo & Break

9:45 - 10 a.m.

OBL BankServices Expo & Break

10 – 11 a.m.

Cyber 201: Four Basic Truths of Information Security

11 – 11:15 a.m.

OBL BankServices Expo & Break

9:45 – 10:45 a.m. Trends in Organized Check Fraud: Know Your Adversary 10:45 – 11 a.m.

OBL BankServices Expo & Break

11:15 a.m. – 12 p.m. Concurrent Breakout Sessions

11 a.m. – 12 p.m. Anatomy of a Robbery

12 – 1:15 p.m.

Converse & Connect & Lunch

12 – 12:45 p.m.

1:15 – 2 p.m.

Concurrent Breakout Sessions

2 – 2:30 p.m.

OBL BankServices Expo & Break

2:30 - 4 p.m.

Regulator Panel Discussion

Lunch & OBL BankServices Expo

12:45 – 1:45 p.m. Tips to Prune and Sculpt Your Fraud Mitigation Program for Maximum Effectiveness 1:45 – 2:15 p.m.

OBL BankServices Expo & Break

2:15 – 3:45 p.m.

Security Strategies That Won’t Break the Bank

JOIN US! Thursday, April 11 4:30 - 6 pm

3:45 – 4 p.m.

OBL BankServices Expo & Break

Networking Reception - Embassy Suites

4 – 5 p.m.

Ask Me Anything Panel

Attend this casual networking reception, which includes light hors d’oeuvres and complimentary beverages.

VIRTUAL TRADE SHOW EXHIBITORS

TECH TRACK DAY 2 - APRIL 12 8–8:30 a.m.

OBL BankServices Expo

8:35 – 9:20 a.m.

Your Liability as an ISO

9:20 – 9:40 a.m.

OBL BankServices Expo

Visit with exhibitors to become aware of tools, products and resources to more effectively

9:40 – 11 a.m.

Open Forum Discussion

11 – 11:15 a.m.

OBL BankServices Expo & Break

• Aasys Group, Inc. • Bytespeed • COCC, Inc. • Community Banc Consulting • Edge One • EndeavorIT • Harbour Technology

11:15 a.m. –12:15 p.m. Unraveling the Digital Maze: Insights from Incident Response Cases

• Ideal Integrations • infotex • QSI, Inc. • SBS CyberSecurity • SEI Sphere • Virtual Innovations • Young and Associates, Inc

12:15 – 1:30 p.m.

Lunch, Prizes & Closing Keynote Session – Leading for the Future: AI in Banking

SECURITY TRACK – WEDNESDAY, APRIL 10 GENERAL SESSIONS When the Crystal Ball Shatters: Trends and Indicators Impacting Your Bank’s Security

Security Strategies That Won’t Break the Bank

Jim Rechel, Owner, The Rechel Group, Inc.

Carol Dodgen, Principal, Dodgen Security Consulting, LLC

Many business leaders find themselves confronted with difficult decisions and lament the fact that they don’t have a crystal ball to see the future. But often the signs of “what the future holds” are right in front of us. This session will provide insight into current trends and societal changes, and their impact on criminal activity and bank security. Many of the indicators predict more difficult challenges for your bank, and some of these societal changes threaten to shatter long-held principles that underpin your security strategies. Hear ideas, concepts, and information from a perspective you may not have considered.

Trends in Organized Check Fraud: Know Your Adversary Jim Rechel, Owner, The Rechel Group, Inc. Take a look inside at various national and international organized crime groups that are currently active in the Midwest. From South American Theft Groups to Homeless Check Cashing rings, to the never-ending Felony Lane Gang and more, this session will describe the patterns and the efforts that law enforcement is using to address the perils and how banks can collaborate with local, state and Federal law enforcement to stem their losses.

Security can be a hard sell. It can be expensive and its effects difficult to measure. In this session, attendees will learn costeffective techniques to maximize branch security and make your bank a less attractive target to criminals. The instructor will examine ways of supplementing necessary technology with less expensive methods of crime prevention to create a safer environment for both employees and customers. Attendees will learn how to recognize critical weaknesses and patterns of behavior that can be exploited, and methods of mitigating risk. Plus, learn how to conduct physical risk assessments to identify vulnerabilities, and the importance of an overlapping and consistent approach to physical security, policies, procedures, and training. Highlights include: • Crime Prevention Through Environmental Design • How and when to conduct assessments • Combatting problematic design features • Using landscaping to your advantage • Altering behavior by changing the environment • Thinking like a criminal • Current case studies and more

Anatomy of a Robbery: How One Bank Dealt with Being the Target of an Organized Ring Darrin Steinmann, Vice President, Director of Corporate Investigations & Bancorp Security Operations When a highly organized group of robbers targeted banks in the Columbus area, no one knew the extent of their planning and the impact it would have on bank employees and law enforcement.

This session will reveal a look inside the real time impacts of bank robbery events and lessons learned from a targeted local bank.

Tips to Prune and Sculpt Your Fraud Mitigation Program for Maximum Effectiveness Elissa Brewer, Senior Risk Management Consultant, Abrigo Advisory Services All institutions have to deal with fraud. Your fraud program should be unique to your institution. Join us for a session packed with proven suggestions for mitigating fraud at your institution. Session takeaways include: • Automated vs. manual monitoring tactics; • Current trends and how they work; • Ways to identify and mitigate fraud related to elder financial exploitation, check fraud, and more

RETURNS!

“Ask Me Anything” Panel

Join Security Track presenters for an open Q&A session to end the day, facilitated by Jim Rechel. Questions can be submitted throughout the conference or asked live during the session. The discussion also provides a unique opportunity for peer and best practices sharing.

TECH TRACK – DAY 1 – THURSDAY, APRIL11 GENERAL SESSIONS CyberSecurity Mindset: How to Move from Reactive to Proactive Jon Waldman, Chief People Officer/EVP IS Consulting/ President, SBS Institute The responsibility for managing and overseeing any organization today is massive and has evolved greatly over the last 10 years to include investments in technology and cybersecurity. The Board of Directors and senior management are held accountable to the organization’s shareholders, employees, customers, the community they serve, and (in many cases) regulators. However, while more organizations work hard to be proactive with finances and operations, oversight of technology and cybersecurity tends to yet be very reactive. Funding and resources are typically very limited until an incident occurs that jeopardizes the operations of the business. This presentation will cover the benefits of moving from a reactive to proactive cybersecurity mindset, including: • Differences between a reactive and proactive cybersecurity mindset; • Results of a proactive cybersecurity mindset; • Tactical advice for being proactive; and

CONCURRENT BREAKOUT SESSIONS 11:15 a.m. -12:00 p.m.

XDR, SOAR or SIEM? A Lot of Letters. A Lot of Value?

Paul Elder, EVP, Chief Compliance Officer, Community Bank Consulting Auditors and examiners are often recommending or requiring that the bank implement XDR, SOAR, or SIEM technology. Why? This session will discuss these technologies, their differences and what it actually means, what CAT statements and FFIEC requirements it satisfies, and more importantly, the scope of implementing this technology and how to prepare for it.

Attendees will: • Learn why a bank will be required to have it in the near future, how to prepare for implementation, and how it should be deployed.

• Find out the financial, labor and time impacts; and • Discover how XDR, SOAR, or SIEM helps the bank protect information.

• Creating a culture of cybersecurity solutions.

Cyber 201 - Four Basic Truths of Information Security Dan Hadaway, Founder, infotex In a landscape where complex risks emerge daily, revisiting the basics can help. But how? This session is not just a refresher; it’s a fresh lens on familiar principles, correlating them to four foundational truths. Operations, security, fraud, and the board – the management team – needs an understanding of technology risk that goes beyond the basic user controls we teach every year. What are the component parts of an information security system that management should know? How do we teach them? Looking at our information security program through the perspective of four basic truths will prepare us to arm our team.

IT REGULATORY PANEL This session includes need-to-know information about your next IT examination as regulators join us for presentations and dialogue. Panelists include: • Arfan Ali, IT Examiner, ODFI • Nayan Patel, Bank Information Technology Lead Expert, OCC • Panelist TBD, FDIC • Matt Tolbert, Senior Cybersecurity Specialist, Federal Reserve Bank of Cleveland

Vendor Management: Are You “Really” Managing Your Vendors or Are You Just “Checking a Box?” Colin Taggart, Cybersecurity Principal, Plante Moran Vendor management can be an overwhelming task and can unfortunately turn into a “check the box” activity that fails to address the biggest risks to banks. While regulators continue to raise the bar on vendor management requirements, management should evaluate the right types of vendors at the right time via the right means. This session will highlight best practices in vendor risk management, including evaluating SOC Reports, the pros and cons of vendor risk management tools, and building a program that provides value to management.

This session will include:.

• Key highlights when reviewing SOC reports.

• Considerations to evaluate internal developed vs. vendor tools to support vendor management.

• Advice for how IT should play a role in vendor management, but not be the overall program owner.

TECH TRACK – DAY 1 – CONTINUED CONCURRENT BREAKOUT SESSIONS 12:15 p.m. -1:00 p.m.

Is it Time to Switch to the Cloud?

Jon Waldman, Chief People Officer/EVP IS Consulting/President, SBS Institute Many businesses are moving from traditional on-premise networking architectures to cloudhosted networking solutions. From the best next-gen security controls to more flexibility around remote users and devices, the reasons for exploring cloud-hosted networks are plentiful.

Learn the pros, cons, risks and rewards of cloud-hosted environments, and what you need to know if you’re looking to shift to the cloud, including: • Today’s Cloud Computing Environments; • Pros and Cons of moving to the Cloud; • Cloud Risk Mitigations; and • Must-Have Cloud Configurations and Documentation

IT Audit & Exam Findings Adam Reynolds, Senior Staff Auditor, infotex As part of IT auditing, past IT audit and relevant examination findings are reviewed to ensure proper tracking and mitigation efforts. Over the course of the year, these findings provide an overview of common (and uncommon) recommendations we have or see to address IT deficiencies. Hear what infotex has seen in the past year to make you aware of what issues your peers are facing, as well as provide insight into areas you may want to investigate at your institution help prepare for your next IT audit or examination.

Attendees will: • See the biggest compliance issues seen as an audit firm.

• Gain an awareness of the types of recommendations that have been seen on findings.

• Leave with a better idea of the findings that may come up and how to mitigate them.

TECH TRACK – DAY 2 – FRIDAY, APRIL 12 GENERAL SESSIONS Your Liability as an ISO Tim Wolfgang, Manager, Risk Advisory Services, and Stephen Bish, Lead Cybersecurity Strategist, Schneider Downs & Co., Inc. Cybersecurity can no longer be overlooked as a core risk management domain within many organizations.

Boards are being pressed to demonstrate oversight of cybersecurity risk management programs by regulatory changes and the impact cyber events can have on a company’s financial performance, reputation and strategic plans. This session will dive into the details of why SolarWinds’ former CISO is being held personally accountable for recent breaches, what types of information boards of directors need to have put in front of them, and how attackers are already using cybersecurity governance and reporting regulations against their targets. Attendees will: • Understand the current regulatory landscape and recent events around Cybersecurity governance; • Review how the regulatory landscape is shaping new responsibilities for Corporate Boards of Directors and ISOs; and • Learn what information boards need to evaluate the adequacy of cybersecurity risk management.

Open Forum Discussion Join OBL IT Forum facilitators Jon Waldman and Dan Hadaway for a lively discussion as attendees pose questions to the instructors and fellow attendees. Diver deeper into conference topics, peer share, or bring up new topics of interest. Topics and questions may also be submitted in advance of the session.

Unraveling the Digital Maze: Insights from Incident Response Cases Tyler Hudak, Practice Lead, Incident Response, TrustedSec Jump into the stories of real-life cyber incidents during this session.

The presenter will uncover how each incident started, perform a deep dive into the investigation, what the outcome of the case was, and what could have been done to prevent the incident. Learn reallife lessons about cybersecurity, what digital forensic investigations can and cannot determine, and the mistakes to be avoided during an incident.

Leading for the Future: Artificial Intelligence in Banking Tim Shangle, VP of Treasury Sales & Digital Strategy, ChoiceOne Bank While banking has long been technology-dependent and data-intensive, new data-enabled AI technology has the capability to drive business outcomes further and faster than ever before. This demonstrative session will help you better understand the evolving landscape of opportunities and how to strategically deploy and leverage technologies to remain relevant.

GENERAL INFORMATION REGISTRATION Registration prices below include all conference sessions and materials, as well as meals and reception as outlined on the program agenda.

3-DAY SECURITY & TECHNOLOGY CONFERENCE $895 $1,790

per OBL member per nonmember banker

SECURITY TRACK ONLY (APRIL 10) $395 $790

per OBL member per nonmember banker

TECH TRACK ONLY (APRIL 11 & 12) $595 $1,190

per OBL member per nonmember banker

OBL IT FORUM (INCLUDES 3-DAY SECURITY & TECHNOLOGY CONFERENCE) $1,995 $3,990

per OBL member per nonmember banker

Join the 2024 IT Forum The 2024 OBL IT Forum offers real-world scenarios and real-world solutions to common cyber issues. The program aims to give IT professionals a better understanding as to how cybersecurity fits into their information security program in order to promote confidence in their daily responsibilities and set them up as cybersecurity experts.

Membership includes the full 3-day Security & Technology Conference, as well as programs on May 30, August 20 & November 19. Contact Susan Poling Jones at 614-340-7611 for more details.

Visit www.ohiobankersleague.com or scan the QR code for registration information about the 2024 IT Forum.

CANCELLATION POLICY Cancellations received in writing at least seven business days prior to the meeting will be refunded minus a $75 processing fee. No refunds will be available after March 27. Substitutions are welcome at any time.

HOTEL ACCOMMODATIONS This program will be held at The Embassy Suites Columbus Airport, 2886 Airport Drive, Columbus, OH, 43219, Columbus, OH, 43231. To make an overnight reservation for $149/night within the OBL Room Block, call 1-800-EMBASSY and reference code “OBL” to make a reservation by end of day, Tuesday, March 26. Reservations received after March 26 will be accepted on a space or rate available basis.

Questions?

Visit www.ohiobankersleague.com or scan the QR code to the right for registration information about the Tech & Security Conference

Susan Poling Jones 614-340-7611 spoling@ohiobankersleague.com

Registration Assistance?

Megan Peiffer mpeiffer@ohiobankersleague.com