NTCA Conference Program

NTCA 2021 CYBERSECURITY SUMMIT
at a
GLANCE
WEDNESDAY
OCTOBER 13
1:30 p.m.–4:00 p.m.
Preconference Workshops
2:00 p.m.–4:00 p.m.
Cybersecurity: The Real World
Brought to you by CyberESI,
Telcom Insurance Group
and Womble Bond Dickinson
5:00 p.m.–6:00 p.m.
CyberShare Member Reception
THURSDAY
OCTOBER 14
7:00 a.m.–8:00 a.m.
Continental Breakfast
8:00 a.m.–Noon
Opening General Session
8:00 a.m.–9:00 a.m.
The Isle of Tortuga —
but on the Internet
Dan Tentler, Founder and Chief
Technical Officer, Phobos Group
9:00 a.m.–9:45 a.m.
State of Ransomware 2021
9:45 a.m.–10:15 a.m.
Break
10:15 a.m.–11:00 a.m.
Ransomware Incident Response and
Restoration
THURSDAY
OCTOBER 14 CONT.
11:00 a.m.–Noon
Ransomware Cyber Insurance
Noon–1:30 p.m.
Lunch
1:30 p.m.–2:10 p.m.
Breakout Sessions
Level 1: A Beginner’s Guide to
Comprehensive Cybersecurity
Planning
Level 2: Keeping the Cloud
Protected from the Storm
2:20 p.m.–3:00 p.m.
Breakout Sessions
Level 1: Cybersecurity for the
Non-Technical Team Member
Level 2: Making an Effective
Security Operation Center
3:00 p.m.–3:30 p.m.
Break
3:30 p.m.–4:10 p.m.
Breakout Sessions
Level 1: The GM Perspective
on Cybersecurity
Level 2: Implementing Zero
Trust Networking
THURSDAY
OCTOBER 14 CONT.
4:15 p.m.–5:00 p.m.
NTCA CyberShare
Networking Discussion
5:15 p.m.–6:15 p.m.
Networking Reception
FRIDAY
OCTOBER 15
7:30 a.m.–8:30 a.m.
Continental Breakfast
8:30 a.m.–9:00 a.m.
Agency Update—What Is on
CISA’s Radar?
9:00 a.m.–9:45 a.m.
How to Create an
Organizational Defense
10:00 a.m.–10:30 a.m.
Break
10:30 a.m.–11:15 a.m.
Supply Chain Assessment
and Vulnerabilities
11:15 a.m.–Noon
Adventures of a Cyber Hero —
A CTO’s Survival Guide
Gary Berman
Details are subject to change.

www.calix.com
BE A WORK FROM HOME
WIZARD
with gigaspire blast!
The superior
solution that gives
you WiFi that works!

"Gary has put together a great show with some
great talent from the cybersecurity space. From
newbies to executives, everyone can stand to
learn from Gary's fun and often funny (but
serious) show highlighting the unsung heroes in
cybersecurity".
Join our mission to shine the light on
the UNSUNG CYBER HEROES who
toil in anonymity to keep us safe and
Defend the Digital Universe!
Meet members of The Cyber Hero
Network who participate in highlevel,
thought leadership Cyber Hero
Adventures Shows, Micro Think
Tanks and other B2B activities...
"What a pleasure professionally to work with Gary
Berman and Cyber Heroes! I've participated in
several sessions he's hosted and produced and am
pleased with the high caliber of the discussion he
stimulates and end product he creates. Gary invites
(and gets) some pretty high-powered people".
"Gary‛s show is highly relevant, informative
and entertaining. His questions are always on
point and his guests offer helpful insights to
those of us in critical infrastructure. (You‛re
a great host, Gary.)".
"Gary Berman is a marketing genius. With humor
and aplomb he takes complex subjects and makes
them accessible to everyone. He has been the
pied piper for cyber security for several years
now and his show is followed by thousands. I was
honored to be featured myself and encouraged
anyone who is invited to participate".
www.cyberheroescomics.com

AFTE:R BUILDING Hl5 COMPANY THROUGH TE:N Yl':AR5 OF BLOOD, 5WE:AT ANO TE:AR5,
1,-NTRl':PRl':Nl':UR L.ARRY JON!,-5 51GN5 A 01':AL WITH A LARGE: GLOBAL 5TRATl':GIC PARTNl':R.

PP!oNE:DWIT
PORT OF MY Q
TH!o LOV!o OF
MUNCHKINS/
lo HARD WO
D D!oDICATION
lo IN THIS R
AST T!oN YioA
!oM8ARKING

RE:VE:NUE: WAS UP AND THINGS
WE:RE: GOING GRE:AT UNTIL ONf;.
DAY ON THf:. BASKf:.TBAL.L. COURT...
UNFORTUNATE:LY,
THAT'S NOT THE:
BAD NE:WS.
THE: SCAN ALSO
TURNE:D-UP SE:VE:RAL
BLOOD CLOTS THAT COULD
BE: LIFE:-THRE:ATE:NING IF
WE: DON'T Sf;!, TO THE:M
RIGHT AWAY.

OON'T WORRY
ABOUT ANYTHING L.ARRY •
.JUST GE:T BE:TTE:R 500N.
I'LL. LOOK AFTE:R THE:
COMPANY AS IF IT
WE:RE: MINE:.
THl5 15 .JAY AT
HE:LIX ME:OIA. I GOT
AN ANONYMOUS CALL
ALLE:GING FRAUD IN
YOUR COMPANY.
PLE:A5E: RE:FUNO MY
RE:TAINE:R UNTIL YOU
5E:TTLE: ALL THIS.
2]

LAvV Fl RM
This letter serves to inform you that my firm has been
----ietained by Lighthouse Imaging in a matter that is of grave
rn to your company. Please call m
· est
WHY ARE, THE,
PHONE,5 5UDDE,NL Y 51Lf;NT
f;XCE,PT FOR ALL THE,51,
COMPLAINTS?
WJ,10 MADE, THE,51,
CALL5 ALLE,GING
FRAUD?

C ftorl o new romponY,
wnile still on poyroll
C {opy inte!lertuol roperty files
(indurling presentot1ons/
g !Jownloorl rlient list
C {o/1 clients ononymous/y,
o//eging frourl
!! Reseorrl otl,er woys to /Juilt!
new rompony on tneir dime

Y LAWYE:R IN515
5HE: RE:AD ANY AG
BE:FORE: I 51GN IT
IT WITH ME:
OH MR J
WHAT WOULD
ABOUT ANY OF
HAVE: MY D

... CLOSE; THE; DOORS
TO HIS CORPORATE;
OFFICE;S AND ...
FROM SPORT
UST CONFIRME;D TH
f; THE; CONTRACTS
IPLE: TIME:S ...
1vlarket C
es 2
onsultants
R SE:VE:RAL YE:ARS WHILE: 1-ARRY ATTE:MPTS TO RE:BUILD
1-E;PHONf; CAl-1-S ARE; RE;DIRE;CTf;D, FILf;S Rf;GULARLY
COMPLE:TE:LY FROM HIS COMPUTE:RS. INTRUSIONS INTO

! HOPE, THAT
AND YOUR FAMI
5
-EoNTEoR THEo MARKEoTING FIEoLD ...
[fl[jJ
Rachael Stephen Darra Max
Rich Barnes Argente Burgess
Shannon
Chen
Dr Logan
Kingston
T 5EoVEoRAL. OF Hl5 FORMEoR Eo
T 15 l-lN -

AFTE:R ANALYZING THE:
DE:TAIL5 OF THE:5E: COMPUTE:R AND
PHONE: 5CRE:E:N 5HOT5, IT LOOKS LIKE:
OH, WOW!
YOU ARE: UNDE:R A HE:AVILY ORCHE:5- FE:E:L5 GRE:AT TO HAVE:
TRATE:D CYBE:R ATTACK.
50MWNE: IN YOUR 5HOE:5
----E::=:::\ THINK THAT IT MAKE:5 5E:N5E:.
WHAT 00 WE: 00 NE:XT?
Hae
HE: ATTE:ND5 CONHRE:NCE:5, Ll5-
TE:N5 TO COUNTLE:55 PODCA5T5,
RE:AD5 RE:5E:ARCH RE:PORT5 AND ...
! SPOKE:
E: DISTRICT A
E:Y, BUT HE:R 0
WILLING
LE:ARN E:VE:RYTHING HE: COU
WORLD OF HACKING TO HE:LP
N ONION, BE:GIN5 TO
WHAT 15 HAPPE:NING.
! SURE: HAD
TO WIPE: A LOT OF
EGG OFF MY FACE
TO STAND UP AT
THE: MIC .•.
HE: ALSO RE:CE:IVE:5 INCRE:DIBLE: ADVICE: AND SUPPORT
FROM THE: GOOD FOLKS IN CYBE:R5E:CURITY.

5UP!:R AG!:NT K HAS ALWAYS HAD A
PASSION FOR LAW l:NFORC!:Ml:NT.
HIS GRANDFATH!:R AND FATH!:R W!:Rl: HIGHLY Rl:SP!:CT!:D
Sl:NIOR LAW !:NFORC!:Ml:NT OFFICIALS. 5UP!:R AG!:NT K
Al.WAYS WANTE:O TO FOLLOW IN TH!:IR FOOTST!:PS.
AN
BU
LARRY ANO 5UP!:R AG!:NT K Bl:COM!:
FAST FRl!:NDS WITH A UNIFl!:D MISSION:
TO PROT!:CT AND Dl:Fl:ND OTH!:RS
FROM TH!: l:)(Pl:Rll:NC!:5 TH!:Y HAD/

SUPER AGENT K AND I..ARRY ARE INVITED
TO A CYBERSECURl1Y CONFERENCE
HOSTED AT THE NEXT GEN INSTITUTE.
----
LOWS YOU TO SEE V
55ES OF HACKERS AN
IMINALS AS THEY ARE
"REAL" WORLD.

0
0 0
0

'
MMON CLA55 Of HACK, AND THE:
D WORK TIRE:LE:55LY TO PROTE:CT
BRING DOWN THE: PE:RPE:TRATOR5.
0
---
Re: Donation to Love Your Heart Foundation
CEO Jeremy Diamond
CFO Harald Jonah
SUBJECT: Good Morning!
WATCH OUT fOR
fAKE:/5POOfE:D
E:MAIL ADDRE:55E:5!
E:!lt
Yes, I am.
Hello Harry, are you in the office right now?
0
I'm at an event playing golf with some other
CEOs and need you to wire $SOK right away for
this fundraiser.
www.hartfoundation.org

LE; Of OTHE;
IVE;S KNOW A
AMOND'S HEcA
DITION, RIGH
Mark De l ete Compose Inspector
WIRE TRANSFER INSTRUCTIONS
Personal • Leads
art Foundat on
'og•
Folders
CEO Jeremy Diamond
CFO Harald Jonah
Fill out and transfer the funds as soon as possible. I want to announce my
contribution during lunch. Very important to do it before lunch.
CFO Harald Jonah
CEO Jeremy Diamond
What's the nature of this fundraiser?
CEO Jeremy Diamond
CFO Harald Jonah
All the information is included in my previous message. I need you to transfer
the funds as soon as possible.
BE; CAREcfUL WHAT YOU PUT ONLINE;
BEcCAUSE; IT MAY BE; USE;D AGAINST
YOU AND IT WILL BE; "PUBLIC AND PE;R• ,
MANEcNT" ACCORDING TO RICHARD
GUE;RRY, FOUNDEcR Of THE; INSTITUTE;
FOR REcSPONSIBLE; ONLINE; AND CE;LL·
PHONE; COMMUNICATIONS.
n. CFO Harald Jonah
o CEO Jeremy Diamond
I'm on it!

5T E:MAILE:D M
CTING ME: TO
IF1Y-THOU5AND
TO THl5 FUND
OUR HE:ART, NO
T5 OR PACE:

Yf;S, I'VE:
CHE:CKE:D THE:M OUT.
THE:Y HAVE: A SOCIAL
ME:DIA PRE:SE:NCf; AND
SUCH, ALL GOOD/
I COMPLE:TE:D THE:
FORM AND SIGNW THE:
PAPE:RWORK. I AUTHO·
RIZE: YOU TO E:XE:CUTf;
THIS RIGHT AWAY!
WE:LL, THE:
YOUR SIGN
LL SE:E:MS

,,.
Compost"
Re: Donation to Love Your Heart Foundation
rom: Abigail Arnold, Accounting
C§!JIJ CFO Harald Jonah, CEO Jeremy Diamond
0
Subject: Task Completed
Per your instructions and
authorization in regards to Mr
Diamond's request. Herc ,••...-,.,....
confirmation number.
.,,n,
M•Tofoldff .•
TO Ameritrade Wire Tram ,.
,.,,,
From: account no: ********
To: account: **********7521 ,....
RONmo
CrutoO

AFTE:R 5WAL
CFO HARAL
"

DR G IMME:DIATE:LY FINDS THE: RE:D FLAG:
A WE:LL-Dl5GUl5E:D FAKE: E:MAIL ADDRE:55. 50
APPARE:NT TO THOSE: IN·THE:·KNOW, WHO LOOK A
1-ITTLE: DE:E:PE:R, AT THE: ACTUAL E:MAIL ADDRE:55.
/
Compose
Re: Donation to Love Your Heart Foundation
F,om, EOJo,omy Di•mo,_
SUBJE l
Jeremy Diaffi"ond
jeremydiamond8298@aol.com
Hello ,
FAKE: l>MAIL ADDRE:55!
I Add to contacts
Emails
'
THING HE:'LL
0 VO RIGHT N
CONTACT TH
N BANK AND
E:ZE: ON THO
HE:IVE:5 WO
E: TO WITHDRA
ONE:Y BUT THE: CO
50 WON'T BE: ABLE:
E:R THE: FUNDS UNT
15 50LVE:D, MAYBE: I
AR5 OR MANY YE:AR
UNLE:55 ...

!oMAIL
5T ABOUT
L 5!o!o If W!o
IT!o5 BAC

CEO Jeremy Diamond
Abigail Arnold
Additional Funds for Love Your Heart Foundation
A
□
Hello Mr. Diamond,
I hope your morning on the links has refilled your tanks. Jane showed up this morning with a
new perfume, whew! My allergies are on code red! But I digress ...
Per your request, I wire-transferred $50,000 to account number 92-6937739. As I was doing
that, I stumbled on your memorandum regarding doubling the amount of donations to heart
disease research charities as a company policy for the new year.
Our protocol dictates that you "sign off" on our secure website by entering pin [xz19I0] to
authorize the extra $SOK. I'm providing the details here for your convenience, since I know
you're at the event and might not have it handy.
Arrow Bank
Acct No: 6070255747179
Routing: 092707912
u/n: TheSquarePointGroup (case sensitive)
p/w: playsD3ADtH3Pr1 nt3rD03S
If you have any trouble entering the code, try lower case first then all caps. If you still have
trouble, email or call me and I will assist you. Once that's done, Abigail will wire-transfer the
extra funds.
Let me know if you need anything else. See you bright and early.
-Harald
WE:!.!., I'VE: P
THE: CYBE:R 8
15Tl.f;5 TO 8!:
CK THE: PE:
ME:ANWHII.E: ... DR G 15
5HING TOUCHE:5 ON A
Y-RE:Al.15TIC-I.OOKING f

PH!5H!NG !5 THE: MOST COMMON TYPE: OF ONl.!NI:- SCAM. !T RE:FE:RS
TO ANY ATTACK BY WHICH FRAUDSTERS IMPE:R50NATE: A I.E:GITIMATE:
COMPANY ANO ATTEMPT TO STE:At. PE:R50NAI. INFORMATION OR I.OGIN
CRWE:NTIAI.S. THOSE: E:MAII.S FRE:QUE:NTI.Y USE: THRE:ATS ANO A SE:NSE:
OF URGE:NCY TO SCARE: USE:RS INTO DOING THE: ATTACKE:RS' BIDDING.
!N SPE:AR PHISHING SCAMS, FRAUDSTE:RS CUSTOMIZE:
THE:IR ATTACK E:MAII.S WITH THE: TARGE:T'S NAME:, POSITION,
COMPANY, WORK PHONE: NUMBE:R AND OTHER INFORMATION
IN AN ATTE:MPT TO TRICK THE: RE:CIPIE:NT INTO BE:I.IE:VING
THAT THE:Y HAVE: A CONNECTION WITH THE: SE:NDE:R.

_:_::.
THf:. CYBf:.RHf:.RO "UNMA5K5" THf:. PHl5Hf:.R BY DRAINING
Hf:.R Mf:.MORY 8ANK5 AND COl.t.f:.CTING DATA THAT Wit.I.
PO51TIVf:.t.Y IDf:.NTIFY Hf:.R IN THf:. Rf:.At. WORLD/
CYBf:.RHf:.ROf:.5 ARf:. A8t.f:.
f:.CT AND MAKf:. AN ARRf:.5T/
THf:. CYBf:.RHf:.ROf:.5' WORK Nf:.Vf:.R 5TOP5/
TUNf:. IN FOR THf:. Nf:.XT 155Uf:. OF THf:.
CY8ERHERO A0VENTUREG!

IVAN STEALS '!'OUR NAME, DATE
OF BIRTH, SOCIAL SECURIH
NUMBER, DRIVER 1 S LICENSE
NUMBER, BAN1' ACCOUNT AND
CREDIT CARD NUMBERS, PIN
NUMBERS, ELECTRONIC
SIGNATURES, FINGERPRINTS,
AND PASSWORDS... ALL IN AN
EFFORT TO BECOME '(OU!
Ar LEAST FOR THE
PURPOSES OF STEALING
'!'OUR MONE'!' AND
APPL 'l'ING FOR LOANS
CREDIT CARDS IN
'(ou'LL HPICALL'I'
A VARIEH OF
• RUMMAGING
GARBAGE FOR
PERSONAL DOCUMENTS
AND PHONES.
• STEALING '!'OUR
CREDIT CARDS,
CARDS, PASSPORTS AND
TO1'ENS.
• UUESSING COMMON
QUESTIONS SUCH AS:
MAIL TO OBTAIN
IDENTIFICATION
AUTHENTICATION
11:NOWLEDGE
1 1 MOTHER 1 S MAIDEN
NAME?", 11 FIRST CAR
MODEL?" OR
1 1
1FIRST PET S NAME?"
• S1'IMMING
INFORMATION FROM
CREDIT CARDS USING HAND-HELD CARD READERS.
• I-IAC1'ING CO
BASES TO OBTAIN
LARGE QUANTITIES.
• BRUTE-FORCE
WORDS.
• BROWSING
SITES FOR PER-
8'1' USERS.
• DIVERTING
IN ORDER TO
TION AND CRE­
CARDS, BILLING
STATEMENTS, OR
NEW ACCOUNTS
MENTS OPENED
THIEVES IN THE
•USING 1 CONTACTLESS 1
CREDIT CARD READERS TO
ACQUIRE DATA WIRELESSL 'I'.
• DISCREETL 'I' WATCHING OR
HEARING OTHERS PROVIDING VALU­
ABLE PERSONAL INFORMATION
(SHOULDER-SURFING).
• STEALING PERSONAL INFORMA­
TION FROM COMPUTERS USING
BREACHES IN BROWSER SECURI­
MALWARE SUCH ASTRO.JAN
1'E'l'STRO1'E LOGGING PRO-
PUTER NETWOR1'S AND DATA­
PERSONAL DATA, OFTEN IN
ATTAC1'ING WEAi( PASS­
SOCIAL NETWOR1'ING
SONAL DETAILS PUBLISHED
VICTIMS 1
EMAIL OR MAIL
OBTAIN PERSONAL INFORMA­
DENTIALS SUCH AS CREDIT
AND BANl

0
0
0
1Ji1o
o
I)
0
@]

LAl212'( IS A "12E

The small broadband provider ISAC
EFFICIENT. AFFORDABLE. EFFECTIVE.
CyberShare provides education and awareness of cybersecurity risk
management practices and empowers you to take action.
Relevant information
The alerts and news are
compiled specifically for
small broadband providers.
Access to experts
Hear from government and
industry experts you may not
have access to otherwise.
Efficient and time saving
Access critical information
compiled from public and
nonpublic sources and tailored
to your needs. Participants
avoid spending hours each day
combing sources.
Peer-to-peer sharing and
networking
Develop relationships across
the country and securely
share information.
Affordable
CyberShare costs a fraction
of what you would spend for
larger cyberthreat products
but offers more targeted
information. Members also may
earn a discount on their cyber
insurance policy.
Illustrates commitment to
cybersecurity
Show your customers and
policymakers that you prioritize
cybersecurity.
Training tools
Access the SecurityScorecard
Cybersecurity Risk Ratings and
CyberESI training module to use
for companywide cybersecurity
training.
CyberShare, launched in 2019, was recently recognized as an Information
Sharing and Analysis Center (ISAC), which establishes the program as
THE ISAC for the small broadband community.
90%
of participants say the program
adds value for their company
86%
would recommend the program
to peers and other small
network operators
I was extremely happy with CyberShare —
The Small Broadband Provider ISAC
program’s communications regarding
the exploitation of SolarWinds Orion
Platform. Their operations manager
provided timely, relevant and actionable
information throughout the day, including
an invitation to a Cybersecurity and
Infrastructure Security Agency (CISA)
meeting, which I attended. Solid return
on investment for joining CyberShare.
93%
KURT FILES
of participants say the program
enhances their situational
awareness about cyberthreats
Director of IT, Home Telecom
(Moncks Corner, SC)
Learn more about how CyberShare can benefit your business by visiting www.cyber-share.org.