Browse communities
Presenting a webinar?
Share this content

Critical Infrastructure, Critical Imperative

Brandon Dunlap, Brightfly (Moderator), Justic Meeas, Utilisec; Stacy Bresler, Brett Kilbourne
From the recent cyber attack targeting natural gas pipelines in North America, to a well known lack of fundamental security capabilities built into industrial control systems running our most critical infrastructure, our very way of life is susceptible to compromise. Join (ISC)2 on June 28, 2012 at 1:00pm Eastern time where we bring together a panel of experts across various critical infrastructure sectors to discuss how they are combating the threats posed by rogue attackers and concerted efforts by nation-states.
Jun 28 2012
58 mins
Critical Infrastructure, Critical Imperative
cybersecurity
More from this community:

Cloud Computing

Webinars and videos

  • Live and recorded (2728)
  • Upcoming (82)
  • Date
  • Rating
  • Views
  • Perchè i Server? La Protezione dei sistemi critici
    La sicurezza dei server è un asset fondamentale per abilitare il business. Non solo per le informazioni che gestiscono ma anche per i servizi per i quali sono configurati. Pianificarne la sicurezza e la conformità è l’unico strumento per per ridurre il rischio in caso di attacco
    In questo webcast approfondiremo i vantaggi delle soluzione end point protection ed anche di server hardening
    Partecipa a questo webcast per pianificare al meglio la tua politica di Cyber Security.
    Read more >
  • Join Amazon Web Services for the sixth in our series of webinars, 'Journey Through the AWS Cloud'. This complimentary webinar discusses the use of AWS as a storage and archive platform.

    A wide range of assets can be cost effectively held in highly durable storage systems within the AWS cloud, for global distribution, long term storage or cold archive. Learn about a range of use cases for the Amazon Simple Storage Service (S3) beyond simple object storage, and how Amazon Glacier can revolutionise long term archive economics and technology.
    Read more >
  • CA Technologies is committed to helping you make Here's a quick look at how CA Technologies is intensely focused on their customers--how they're helping them do more, making their job better, more fun, and freeing up their time with innovative action. Learn more at http://www.ca.com/mainframe
    Read more >
  • In the last 10 years, hacking has become big business with a well organised infrastructure, defined roles and responsibilities, and sophisticated attack vector automation that generates large-scale attacks of unprecedented size, speed and devastation. Advanced protection is needed in order to successfully stand up to the ‘industrialisation of hacking’. In this webinar, Andy will talk about:

    - How to prevent web attacks like SQL injection, cross-site scripting, app DDoS or site scraping.

    - The limitations and vulnerabilities associated with IPS solutions and other traditional security solutions.

    - Attack-mitigation techniques for combating malware including bots and other automated attacks common in industrialised hacking.

    - How to protect networks from the ‘compromised insider’ threat.

    About the speaker:
    Mark has 18 years’ experience in the IT industry, and has specialised in Internet security systems for more than 16 years. Mark is a passionate evangelist for technology and is multi-skilled across a broad range of security solutions including Firewalls, VPNs, IPS, WAF, web and email content filtering, SIM/SIEM, load balancing, DLP, risk assessment, monitoring tools, DB security and consultancy. Mark joined Imperva in 2007 and held previous technical roles at Nokia and contracted as a security specialist where he has held senior roles designing and implementing firewall, IDP and VPN solutions in mission critical environments.
    Read more >
  • Come avvengono gli attacchi? 5 STAGES OF A DATA BREACH
    Per proteggere le aziende da attacchi informatici, è importante capire come operano gli attacanti. Questo webcast descrive l’anatomia di un attacco nelle sue 5 fasi: Reconnaissance, Incursion, Discovery, Capture ed Exfiltration
    Verranno inoltre analizzate le principali tecniche impiegate e le soluzioni per prevenirle e/o contrastarle oltre al relativo impatto sul business (rilevato dalla ricerca “Cost of a Data Breach 2013”)
    Partecipa a questo webcast per vedere come si sono evolute le cyber minacce e come stanno influenzando le realtà produttive.
    Read more >
  • Cosa sta DAVVERO succedendo? Il Security Threat Report
    Il Security Threat Report fornisce una panoramica e un'analisi di attività delle minacce a livello mondiale nel 2012. Dai dati della Global Intelligence Network, esperti di Symantec analizzano le tendenze emergenti negli attacchi, nelle vulnerabilità e negli obiettivi.
    Inoltre, l’ultima ricerca “Cost of a Data Breach Report 2013” traccerà gli impatti economici per le organizzazioni nel caso di attacchi informatici
    Partecipa a questo webcast per avere un aggiornamento sul panorama delle minacce e della sicurezza nel 2013 e sulle conseguenze nel business.
    Read more >
  • Pour limiter les risques d’une cyber-attaque, la politique de sécurité doit comprendre la mise en place d’une politique de supervision incluant la surveillance des vulnérabilités, la corrélation des événements de sécurité, les procédures de réponse en cas d’attaque… Lors de ce webcast, nous vous invitons à faire le point sur les solutions de SOC, SSIEM, Services Managés et leurs bénéfices.
    Read more >
  • Join Raj for a complete regulatory overview including:

    - HIPAA Omnibus Update
    - FTC Health Breach Rule
    - Top 5 reasons organizations FAIL Security Assessments
    - Case Studies
    - Guidance
    - Success Stories
    Read more >
  • Enterprise Storage moving toward the cloud requires an interoperable interface foundation to avoid vendor lock-in and provide choice. This tutorial will provide an overview of the features of a Enterprise cloud storage standard and explain how interoperability between clouds is achieved.

    What should you be requiring from your cloud vendors?
    How can you expect standards to roll out in implementations?

    Learning Objectives
    How this cloud storage standard can achieve interoperability and what this interoperability means to you.
    How you can use the cloud storage standard both internally for private clouds as well as for public clouds.
    Read more >
  • Virtualization, cloud computing, hybrid environments and BYOD are here to stay. When implemented successfully, these solutions can transform the way businesses operate and lower the OPEX and CAPEX costs of IT departments. However, these major IT trends cannot be considered separately: virtualization and cloud are often linked, and needs for anytime anywhere connectivity and mobile workforce enablement won't wait. This is why it's essential to have a holistic approach and address the business, technology and financial implications of today for tomorrow's needs.


    Dell has quickly become one of the largest and fastest growing networking providers in the world by leveraging its extensive expertise in the data center to build a complete portfolio of switches that are designed to be open, flexible, powerful and economical.
    Read more >
  • Channel
  • Channel profile

(ISC)2 ThinkTank

Up Down
  • Using New Design Patterns to Improve Mobile Access Control Aug 29 2013 5:00 pm UTC 75 mins
    Security Briefings Part 3 - Using New Design Patterns to Improve Mobile Access Control

    The widespread popularity of consumer mobile applications continues to influence how corporate applications are being created and deployed. IT teams who initially deployed web gates to manage HTTP based web applications are under pressure to support a whole new set of native mobile communications and security protocols.

    On August 29, 2013 at 1PM Eastern, (ISC)2 and Oracle conclude their Security Briefings series with Part 3 as Oracle expert Sid Mishra joins Moderator Brandon Dunlap to discuss the patterns of mobile application access and the impact they have on your existing application infrastructure.
  • Optimizing Directory Architecture for Mobile Devices and Applications Jul 25 2013 5:00 pm UTC 75 mins
    Security Briefings Part 2 - Optimizing Directory Architecture for Mobile Devices and Applications

    Directories are the data stores of all modern Identity Management systems. Traditional directory architecture focused on a low number of directory writes and a very high level of reads.

    The advent of mobile devices and applications has dramatically changed the access load patterns on modern directories. Mobile applications are connected 24/7 and brings significant new features such as location-based services. This has created a new performance demand for an increased number of directory writes and updates. Join (ISC)2 and Oracle on July 25, 2013 at 1PM Eastern for Part 2 of our Security Briefings series where moderator Brandon Dunlap and Etienne Remillon examine how load patterns are changing best practices to install and how to optimize your directory architecture to meet the demand.
  • Identity Auditing: Techniques for Reducing Operational Risk and Internal Delays Jun 26 2013 5:00 pm UTC 75 mins
    Security Briefings Part 1: Identity Auditing: Techniques for Reducing Operational Risk and Internal Delays

    Provisioning user identities and application accounts has evolved from the days of Helpdesk tickets and spreadsheet mapping to a new proactive standard of self service access requests, business based workflow approvals and automated certification.

    Businesses that manage accounts throughout their lifecycle can lower risk due to access abuse and fraud, and can improve their compliance profile. Join (ISC)2 and Oracle on June 26, 2013 at 1PM Eastern for Part 1 of a new Security Briefings series. Moderator Brandon Dunlap and identity expert Jim Taylor of Oracle will discuss and identify common governance gaps, and explains how to take an intelligent risk based approach to account lifecycle management.
  • When Trust is Assumed - The Dangers of Failed Certificates Jun 20 2013 5:00 pm UTC 75 mins
    Today, every business and government is a target for data theft. Research shows 100% of all advanced attacks are a result of credential compromises and organizations are racing to add new layers of security to help detect and respond. But, are you still leaving the door open to advanced persistent threats (APTs) and targeted attacks? How can organizations mitigate this potential vulnerability and better manage their cryptographic infrastructure? Join (ISC)2 and Venafi on June 20, 2013 for a discussion on the failure of trust and how to improve your security posture.
  • Big Data and Internet of Things Recorded: May 23 2013 62 mins
    More and more organizations are exploring the ramifications of Big Data on their enterprises. Deployments of Smart Meters to better manage the electric grid, Industrial Control Systems (ICS) across a variety of sectors, and the promise of always on and always connected systems are pushing organizations to gather more data than previously imagined. What are the implications from a privacy and intellectual property perspective and how can we as security professionals provide a level of control and risk management over the coming wave of The Internet of Things? Join (ISC)2 and Capella University on May 23, 2013 at 1:00pm Eastern for a discussion on these important concerns.
  • Who Shouldn't BYOD? Recorded: Apr 18 2013 60 mins
    Face it, BYOD is already here, at least in parts of your enterprise. But, it is probably not the right solution for every part of the organization. By spreading the right message to the right people, you can slow this trend enough to identify who should, and who should not be connecting personal devices to the corporate network. Join IBM Software Group and (ISC)2 on April 18, 2013 at 1:00pm Eastern as we take a look at key factors in identifying off-limits employee groups and how to include Human Resources (policy), Legal (contracts), Finance (billing) and IT (purchasing) to craft a much more robust risk picture from which your stakeholders can make an informed decision about this strategy.
  • Security Briefings Part 3: Data Breaches are just the Tip of the Iceberg Recorded: Apr 4 2013 59 mins
    Digital security is the new battleground and cyber criminals are focused on stealing corporate and government secrets for financial and strategic gain. With increasing internal and external attacks and stronger regulatory compliance enforcement, investing in data security is a top priority for organizations; yet, significant gaps still exist at the very core - the databases that house the crown jewels. Join (ISC)2 and Oracle on Apr 4, 2013 for the conclusion of our Security Briefings series as we summarize implementing an effective database security strategy by using administrative controls that can help organizations discover where sensitive data resides and who has privileged access to this data.
  • The State of Cloud Security 2013 Recorded: Mar 21 2013 64 mins
    In May of 2010, CA and The Ponemon Institute released a survey in North America and Europe on the security of cloud applications, infrastructure and platforms. Almost 3 years have passed from that initial study and CA and Ponemon have decided to revisit the topic. What¹s changed in 3 years? Are the concerns the same or have they evolved? Have security threats changed to meet this new computing model? Have solutions kept pace? Are more standards in place? Join (ISC)2 along with CA, The Ponemon Institute and Cloud Security Alliance on March 21, 2013 for a discussion on the latest survey findings and what the industry thinks about cloud security issues.
  • Security Briefing Part 2: As Attacks Evolve, Can You Prevent Them? Recorded: Feb 21 2013 58 mins
    The collaboration and sharing of information made possible by social media has enabled a new class of social engineering attacks, greatly increasing the risks posed by insiders for most organizations. Consider that LinkedIn searches for "Database Administrator" and "System Administrator" return over one million potential targets. In fact, stolen credentials were involved in 84% of the attacks that have resulted in over one billion records stolen from database servers. Join (ISC)2 and Oracle on February 21, 2013 for Part 2 of our Security Briefings series as we focus on database security and the preventive controls that can be used to mitigate the risks posed by insiders and attackers exploiting legitimate access to data and database infrastructure by adopting a defense-in-depth strategy.
  • Divining Meaning From Security Information Recorded: Feb 14 2013 63 mins
    With modern enterprises generating hundreds of millions of log events per day, how is today's practitioner supposed to make sense of this deluge and distill from it actionable intelligence? To date, legacy SIEM implementations have relied on vast numbers of rules and correlation logic to separate the signal from the noise. With ever increasing data volumes this becomes a model that is difficult to scale.

    To identify stealthy attacks, stop attacks before they become breaches and improve security defenses, organizations need stronger context, advanced analytics and dynamic access to data. Join us on February 14, 2013 at 1pm Eastern where (ISC)2 and McAfee & DynTek explore how SIEM implementations need to evolve to fight the increased sophistication of attacks and derive meaning from the ever growing masses of security data.
  • Security Briefings Series - The Easy Target: Your Unsecured Databases Recorded: Jan 31 2013 63 mins
    Part 1: 60 Seconds to Infiltrate, Months to Discover
    According to leading industry reports, 98% of breached data originates from unsecured database servers and nearly half are compromised in less than a minute! Almost all victims are not aware of a breach until a third party notifies them and nearly all breaches could have been avoided through the use of basic controls. Join (ISC)2 and Oracle on January 31, 2013 for Part 1 of our next Security Briefings series that will focus on database security and the detective, preventive, and administrative controls that can be put in place to mitigate the risk to your databases. There's no turning back the clock on stolen data, but you can put in place controls to ensure your organization won't be the next headline.
  • Taming the PCI Beast Recorded: Jan 24 2013 64 mins
    Just about every company is conducting commerce over the internet. Because of this, compliance with the Payment Card Industry Data Security Standard 2.0 (PCI DSS) has become a concern all the way to the boardroom. Yet, as we know from on-going headlines, data breaches are still happening. And on top of that, new threats and technologies are being introduced every day. What can your organization do to streamline the process, mitigate the problem and protect your company and your customers from data breach? Join (ISC)2 and Voltage Security along with FishNet Security on January 24, 2013 for our first ThinkTank Roundtable of the New Year as we discuss PCI and solutions to this important multi-faceted issue of payment security in a changing world.
  • Situational Awareness Meets Strong Authentication Recorded: Jan 17 2013 60 mins
    Security and risk professionals are increasingly turning to risk-based authentication as an alternative to other authentication solutions. Usability, ease of deployment, and the ability to work well on mobile devices are just some of the reasons driving the adoption of risk-based authentication in the enterprise. But even more important, rapid advances in cyber threats - from phishing to session hijacking - call for a new risk-based approach that allows for continuous learning of the environment and the user and enables authentication and access controls to be adjusted in real-time. Join (ISC2)2 and RSA on January 17, 2013 at 1:00pm Eastern for a discussion on risk, authentication and access control.
  • Identity is the New Perimeter part 6: ­ Big Data and Identity Recorded: Dec 20 2012 62 mins
    It seems that all organizations are talking about these days is "Big Data". As security professionals, we all know that there are challenges in securing it, making it appropriately accessible and classifying the growing mountains of data. How do organizations deal with these issues, as well as adding the appropriate controls for identity and access to limit the disclosure and leakage of sensitive data. Join (ISC)2 and CA Technologies on December 20, 2012 at 1pm Eastern as we present the final part of our Security Briefings series on Identity and Access Management.
  • After the Storm - Cleaning up After a Malware Incident Recorded: Dec 13 2012 61 mins
    Chances are it’ll happen to your organization. A large malware outbreak will hit and you’ll have to deal with the incident itself and the aftermath. Join (ISC)2 and Verisign on December 13, 2012 for our next ThinkTank Roundtable for a discussion about best practices that can be used and the new processes that can be implemented. We’ll also examine the skills that can be called into play to mitigate the damage and get the enterprise back up and running infection free.
  • Identity is the New Perimeter - Part 5: ­Social Identity Recorded: Nov 29 2012 61 mins
    On the surface, leveraging social or consumer identities in the business world might not seem that useful. The truth is many organizations are finding that their marketing departments are active on the social networking front and trying to leverage more information from it. Being successful in this could prove to be a huge advantage. However, these disparate identities and the information gathered needs to be secured. How can a security department best work with the marketing department to connect and protect these identities? Is there a better way to capture online customers and identities? How does security become a business enabler in a situation like this? Join (ISC)2 and CA Technologies on November 29, 2012 as we continue our Security Briefings series
  • ­Identity is the New Perimeter Part 4: Identity and BYOD Recorded: Oct 25 2012 61 mins
    The Bring Your Own Device [BYOD] trend is in full swing as the growth of
    mobile devices within the enterprise explodes. How do you enable secure
    data access for mobile applications? How do you deal with user
    authentication? How do you allow broader adoption for enterprise
    applications on user owned devices? Join (ISC)2 and CA for the next part
    of our Security Briefings series on October 25, 2012 as we outline
    solutions to these issues, explore different mobile security approaches,
    and discuss, through case studies, how others have solved these problems.
  • Attacker Attribution - It¹s NOT Who You Think Recorded: Oct 18 2012 59 mins
    It seems as though every node on the Internet is under attack. As security practitioners, we spend most of our time and effort layering defenses and cleaning up the aftermath of these attacks often, without any idea who might be behind them. Chances are, the bad guys you think are attacking you aren¹t the guilty parties. Join (ISC)2 and Trend Micro for a roundtable discussion on cyber attacks, advance persistent threats (APTs) and the entities out there that are targeting and attacking networks and how to defend against them.
  • Identity is the new Perimeter: Part III Virtualization Challenges Recorded: Sep 27 2012 60 mins
    Virtualization Challenges for Privileged Identities

    (ISC)2 is excited to bring you part 3 in their Security Briefings Series, "Virtualization Challenges for Privileged Identities". These Security Briefings are a series of monthly webinars focusing on different aspects of a specific area of information security. This series allows members to gain a better understanding of a given subject by allowing us to dig deeper, uncovering hidden pitfalls and discovering the challenges inherent in considering solutions, all presented by noted subject matter experts.

    On September 27, 2012 at 1pm Eastern, we will kick off Part 3 of a 6 part "Identity is the New Perimeter" series sponsored by CA Technologies. "Virtualization Challenges for Privileged Identities" will host Nimrod Vax, VP, Product Management, who will examine trends in managing access to virtual environments, how the compliance efforts are being impacted by the migration of business critical and sensitive applications into the virtual datacenter, and how protecting the entire virtualized infrastructure presents interesting problems for today's CISO.
  • Identity is the New Perimeter - Part II ­ The Role of Content and Context Recorded: Aug 30 2012 60 mins
    While traditional Identity and Access Management (IAM) solutions allow
    control to access to key applications and information, they do not control
    what an individual does once they get the information. Soft skill efforts
    such as data classifications and information protection policies are still
    critical, and provide a valuable foundation of your protection strategy,
    but what tactics and technologies do they require to support the rest of
    your efforts? Join (ISC)2 and CA Technologies for part 2 of our Security
    Briefings series on August 30th at 1pm Eastern where content expert Sumner Blount discusses with moderator Brandon Dunlap and the audience these topics and presents case studies on IAM and content control.
ThinkTank
(ISC)2 hosts a monthly panel discussion around different thought engaging topics within the information security sector.
  • Upcoming webinars (4)
  • Recorded webinars (56)
  • Subscribers (12,709)
Channel RSS feed
Up Down

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: Critical Infrastructure, Critical Imperative
  • Live at: Jun 28 2012 5:00 pm
  • Presented by: Brandon Dunlap, Brightfly (Moderator), Justic Meeas, Utilisec; Stacy Bresler, Brett Kilbourne
  • From:
Your email has been sent.
or close
You must be logged in to email this
OK