Multiple regulations are hitting critical infrastructure companies and financial services firms, NIS2 and DORA respectfully. We will highlight some of the more difficult areas of the legislation and the areas of concern that have been brought up across several previous DORA talks and the current state of those areas. It will also be interactive allowing for Q&A with the audience during the talk.

This talk explores Taurus' transformation from a fintech pioneer to a fortified, DORA-compliant organization. As a regulated fintech operating within Switzerland's financial sector and serving EU and global markets, Taurus has proactively navigated the evolving regulatory landscape surrounding digital assets. A key focus will be on how we’ve prepared for potential changes in the final form of the Digital Operational Resilience Act (DORA), while integrating its requirements with other regulatory frameworks we, and potentially you, encounter. We'll discuss how we’ve built flexibility into our compliance framework to ensure adaptability in operational resilience, cybersecurity, and risk management. Additionally, we’ll share the challenges faced along the way and offer pragmatic approaches to overcoming them.

Unser Vortrag beleuchtet die zunehmenden Bedrohungen der IT-Sicherheit anhand aktueller, realer Cyberangriffe. Wir zeigen die teils kreativen Wege, wie Hacker in Unternehmensnetzwerke eindringen, wobei sie, u.a. gestützt von AI, menschliche Schwächen ausnutzen. Dabei erläutern wir die wichtigsten Schwachstellen, die Unternehmen anfällig machen, und diskutieren praxisorientierte Lösungsansätze, um Ihre IT-Infrastruktur und Mitarbeitenden gegen zukünftige Angriffe abzusichern.

In this presentation, we will break down the often-complex world of cybersecurity compliance into simple, meaningful terms for non-technical managers. Explaining what these requirements really mean, why they are potentially crucial for the organization, and the importance of allocating budget to meet these standards. By highlighting real-world examples and practical implications, we aim to demonstrate how compliance not only protects the company but also enhances its reputation and operational efficiency. Additionally, we will discuss why communicating these needs effectively is one of the key challenges faced by cybersecurity managers today.

Security Audits are a proven and effective method for improving the security posture of Open Source Projects. The Open Source Technology Improvement Fund, Inc (ostif.org) has been a trusted partner for facilitating and managing security audits for critical open source projects since 2020, helping critical FOSS projects mature and improve. The lecture will focus on OSTIF’s background, processes, and share case studies of successful engagements.

Die Einhaltung von Vorschriften (Compliance) erfordert einen erheblichen Aufwand an Zeit und Ressourcen. Bevor die Unternehmensleitung beschließt, Mittel für diese Bemühungen freizugeben, möchte sie daher in der Regel einen operativen Mehrwert sehen, der über die Vermeidung von Risiken hinausgeht. Seit 2017 bietet TPO Solutions Software und Beratungsdienstleistungen für Unternehmen in Belgien, Luxemburg und anderen europäischen Ländern an, um die Einhaltung der DSGVO (GDPR) in einer Weise zu gewährleisten, die die Sicherheit personenbezogener Daten, das Asset Management, das Lieferantenmanagement und die Datennutzung optimiert. Der Vortrag wird sich auf die Schnittstellen zwischen DSGVO, NIS2 und DORA konzentrieren und Potentiale für Synergien und nützliche Kooperation aufzeigen.