Step 1 - Creating and Managing a Cybersecurity Policy: Tips for the SMB

Learn how ESET’s next generation of endpoint security products make protecting and controlling your business systems easier and more cost-effective. Built using the award-winning ESET NOD32® technology. ESET Endpoint Antivirus and ESET Endpoint Security aren’t just updates to existing products, but entirely new ways of approaching your endpoint security.

Feature highlights:

- Web control
- Data access control
- Remote management and reporting

If you are like most small businesses you have probably experienced issues with anti-malware software in the past. Do any of the issues below ring true when thinking about your current antivirus solution?

• When it performs scans it slows our systems to a crawl

• It creates too many alerts on files that aren’t malicious

• It is hard to manage across all our platforms and devices

• Our users want to turn it off because it is so annoying

If so, join Peter Streips, Network Security Group (ESET’s Gold Partner) President and ESET researchers for a panel discussion and learn why it’s time to change your antivirus solution.

Third-party tests can be extremely caluable for evaluating anti-malware products. In-fact, more tests are available than most people realize, covering not only detection rates and scanning speeds, but also factors like number of false positives and ability to block zero-day attacks. But an educated evaluator can both avoid the snares of misleading tests and find a surprising number of useful third party tests.

The Internet is a force multiplier, allowing businesses of all sizes to reach more customers, better service those customers and ultimately be more competitive. By utilizing the Internet, many small and medium businesses can be much more successful. However technological advances cut both ways.
While improved connectivity, communication, and Web presence provide benefits to small and medium businesses (SMBs), it can also resulted in an increase of Internet based security threats and expose the business to criminal elements that they wouldn't normally encounter. If customers can find you so can cybercriminals. The most damaging cyber attack against small and medium businesses is when cybercriminals implant malware on a company's computers, and use that malware to gain access to the company's bank accounts via online-banking.
This webcast is designed to bring the growing cyberthreats and protection strategies to the attention of executives and employees of small and medium enterprises. In this webcast, IDC's analyst, using survey data, recent threat data, and insight, will provide the following information:
* Highlight threats and successful attacks directed towards SMBs
* Identify the special needs for SMB cybersecurity
* Explain companies' existing attitudes around cybersecurity
* Discuss the key security technologies SMBs should consider
* Highlight what features and support companies should look for from their security vendors

Join Stephen Cobb, Security Evangelist at ESET to discover how:
- Vunerable SMB's like yours really are
- You can establish a cyber security policy for your organization
- You can defend your company-and it's employees partners and customers against online attacks
Many small and medium-size businesses (SMB) operate under the mistaken impression that their size, or the minimal security steps that they have already taken, will protect them from cyber attacks.

Targeting of corporate and consumer data and devices by criminals and rogue states is well-funded and likely to persist for some time. Hardened operating systems, firewalls, IDS, and secure application coding are leading attackers to target endpoints, defined as people with devices, not devices alone. Analyzing large amounts of endpoint data we map current and emerging threats, both digital and analog, to provide a set of best practices for defeating attackers.

How can IT security adapt to fight constantly mutating cyber threats?

As the adversarial relationship between information security professionals and malicious cyberactors intensifies, the security gap between new attack methods and traditional controls will grow in favor of the attackers.

Cyberattacks have become multidimensional in their complexity and sophistication.

Join Forrester Analyst, Chenxi Wang, Ph.D. to:
- Look at the new threats that corporate IT will face in 2012
- Discuss the role of IT in the face of such threats
- Review effective investment and risk management strategies to get ahead of the cyberattacks
- Explore strategies to invest in preventative technologies, not just on reactive controls

More specifically, we will dive into strategies to build a solid layered defense, not just patch-work products. For example, going from firewalls and IDS to log management, building DLP capabilities in your network, and investing in strong host-based controls would help you raise the bar significantly and give you advanced capabilities to identify malicious behaviors before they wreak havoc.

Panel Discussion Points with Forrester and ESET's Research team:
- What sort of new threats (or increase of existing threats) can be expected in 2012?
- What role does the commoditization of IT have, if any, in those threats?
- What role does the social media have, if any, in those threats?
- What can IT departments do to reduce their threat surface profile?

Followed by Q&A session

With the deluge of new mobile smartphones like Android, iPhone, and others hitting the streets, there are thousands of new attack vectors against a company's IT infrastructure that create potential security nightmares. When users download apps by the droves and then want to connect to core critical infrastructure, how should IT handle it? While there is a drive for increased off-hours and/or offsite productivity using mobiles, can we stomach the changes that are coming, and can our organizations remain (or become) secure?

Before you choose an antivirus solution it is important to understand how it goes about detecting malware in the first place.

Join us as we discuss:
- Security in the news
- Modern threat categories and attack vectors
- Endpoint risks, infection methods, payloads
- Detection with signatures and heuristics
- Zero day risk
- Technologies that protect removable storage devices
- Best practices

SMB Cybersecurity Challenge - Webcast Series Part 4


Join a blue-ribbon panel of experts from government and business to learn:
- How U.S. agencies are collaborating with business to solve the SMB security threats
- Recommendations and solutions to keep your SMB organizations safe from cyber crime attack
- How your business can create and implement an employee cybersecurity awareness program itself

In a recent speech at the Massachusetts Institute of Technology (MIT), Department of Homeland Security (DHS), Secretary Janet Napolitano asked the question, “How do we secure our nation's critical infrastructure when the vast majority of it is in private hands?” It’s precisely why DHS is partnering with agencies such as the Commerce Department’s National Institute of Standards and Technology (NIST), and with private-sector companies in key areas such as finance, energy, transportation and others. But the real challenge will be to help our small and midsize businesses improve security, which often lack the resources and experience to protect themselves against today's slick, savvy cybercriminals.

SMB Cybersecurity Challenge - Webcast Series Part 3

Join FBI Supervising Special Agent, Mark Culp, and Author Glenn Jacobs, as they provide your business:

>> Tips and best practices to prevent an attack from occurring
>> Important steps to take when a cyber break-in has been discovered
>> How to bring perpetrators to justice and recoup your losses

When it comes to being a victim of cybercrime, size does matter: “The sting of a cybercrime is not felt equally across the board. A small company may NOT be able to survive even one significant cyberattack.” This chilling testimony to the extreme vulnerability of small and midsize businesses was delivered to the Senate Judiciary Committee’s Subcommittee on Crime and Terrorism this spring by the FBI’s Cyber Division Assistant Director Gordon M. Snow.
The implications to your business are clear. The question is, what can you do about it?

NOTE: The first 50 live attendees will receive a free PDF copy of speaker Glenn Jacobs new book, Is Your Computer Bugged – Protecting Your Computer from Cyber Attack.

SMB Cybersecurity Challenge - Webcast Series Part 2

Join Stephen Cobb, Security Evangelist at ESET to discover how:
- Vulnerable SMBs like yours really are
- You can establish a cybersecurity policy for your organization
- You can to defend your company – and its employees, partners and customers – against online attacks.

Many small and medium-size businesses (SMB) operate under the mistaken impression that their size, or the minimal security steps that they have already taken, will protect them from cyberattacks. According to the U.S. Chamber of Commerce’s publication, Commonsense Guide to Cyber Security for Small Businesses, “This assumption is both inaccurate and dangerous. Attacks on information systems operated by small and midsize companies are growing rapidly and are having a severe impact on business operations… Neither the size of your company nor the type of your business guarantees protection from an attack. If you use the Internet, you are vulnerable.”

Speakers: Stephen Cobb, Security Evangelist, ESET
Moderator: Steve Kovsky, Technology Journalist and Director of Community Outreach , Securing Our eCity

SMB Cybersecurity Challenge - Webcast Series Part 1

Cybercrooks have changed the game. Lone hackers craving attention have been replaced by international criminal networks with vast resources and patience, and to them, your small business looks like easy prey. But there’s also some good news: Securing your small business is a lot easier than you thought.

Join our panel of experts, including Naresh Lachmandas, CIO, General Atomics, as the panel discusses the changing nature of today’s cyberthreats, how to identify your business potential for attack, and the simple steps you can take to protect your organization from electronic intruders.

As part of the Threat Management Summit ESET along with Frost & Sullivan will discuss Real-time Threat Detection.

Frost & Sullivan: Making the Case for Endpoint Security

The headline grabbing attacks against firms like RSA, Epsilon, Lockheed Martin, and others have brought a great deal of attention to data protection and tools to protect the data itself. As many organizations look at moving data and services to the cloud, organizations are focusing their energies on securing cloud based services. Unfortunately, focus on the endpoint seems to be waning, leaving a large hole in many organization's defense.

Rob Ayoub, CISSP and Research Director for Frost & Sullivan's Information Security Practice will discuss why protecting the endpoint is still critical in today's changing threat landscape. The endpoint is still the last connection to the end user and without adequate protections against the latest threats, corporate data is still at risk, even with safeguards in place.

ESET: The Best Defense is a Good Offense

With the pace of emerging threats, it’s not good enough to know about the last attack to hit your company, you have to be prepared for the next, with always-on, self-learning, adaptive technology leading your security stance.

Get the information you need to make the right decision through this presentation followed by a 30 minute panel available for your questions about ESET products, services and solutions.

>> Effectiveness/Coverage: What threats does the solution eliminate? Does the solution address the immediate concerns of zero-day attacks while maintaining a legacy database to avoid the re-introduction of known viruses?
>> Performance: Does the solution consume resources that impact your users in order to meet fast scanning requirements or operate in the background to minimize the impact on your users. Is the scanning configurable to achieve a balance between speed and security?
>> Environmental fit and usage: How well does the anti-virus utility conform to the platform, operating system and application environment that you have created for your organization?
>> Management efficiency: How easily and comprehensively can the anti-virus solution be managed across the business and IT infrastructure
>> Services: What added value can the vendor deliver to help an organization remove existing viruses or replace an existing solution to another

The proliferation of multiple type’s of devices across businesses offers many benefits; desktop computers running both Windows or Mac OSX, tablets and mobile phones. The advantages and productivity are obvious. What is not so obvious, till it is too late, is how to protect your business from malware attacks?

During this session of ESET's Cybersecurity Masters series you will hear from ICSA Labs, Anti-Malcode Program Manager, Andy Hayter who will share:
– How to protect your business across multiple platforms
– How to streamline IT management across varied OS
– When trying to find a product to protect multiple platforms - Does product certification matter?

Join us to examine some of the malware risks associated with heterogeneous computing environments and solutions to protect your valuable business assets.

Not long ago there were those who were complaining that there was a monoculture in computing. Too many people were using Windows operating systems and that was a primary facilitator for Windows based attacks.

Over the past few years things have been changing. Endpoints now, are likely to be mobile devices using various operating systems, to reside on a server in the cloud by way of desktop virtualization, or to be a non-Windows machine running Apple or Linux.

To address this new environment, organizations need to look for specific capabilities when selecting their endpoint security solution. These include:

• The ability to have one product that can be used to protect a wide range of devices (Windows, MAC, Linux), work in virtualized environments, and deal with removable media
• Centralized management with remote administration that verifies protection, is used for compliance reporting, and saves IT resources.
• High level of performance. This includes a small footprint and fast scanning so as to not negatively impact on machine performance, while at the same time maintaining a high level of protection.

Not long ago there were those who were complaining that there was a monoculture in computing. Too many people were using Windows operating systems and that was a primary facilitator for Windows based attacks.

Over the past few years things have been changing. Endpoints now, are likely to be mobile devices using various operating systems, to reside on a server in the cloud by way of desktop virtualization, or to be a non-Windows machine running Apple or Linux.

To address this new environment, organizations need to look for specific capabilities when selecting their endpoint security solution. These include:

• The ability to have one product that can be used to protect a wide range of devices (Windows, MAC, Linux), work in virtualized environments, and deal with removable media
• Centralized management with remote administration that verifies protection, is used for compliance reporting, and saves IT resources.
• High level of performance. This includes a small footprint and fast scanning so as to not negatively impact on machine performance, while at the same time maintaining a high level of protection.

Trends such as mobility, Web 2.0, and consumerization are shattering traditional notions of IT control. As a result, IT security organizations are struggling to defend against a more formidable hacker adversary at a time when they have less visibility and control over their IT environment.

Forrester Research: Understanding and adapting to the New Threat Landscape

* What you need to know about the changing nature of the threat landscape
* Which long-held security principles are outdated, and which ones should be adhered to
* Where to invest to maximize the impact of your efforts while minimizing risk

ESET: The New Threatscape - What hasn't changed?

* Recognizing old attacks in the context of new technologies
* Addressing the constants; Security software, patch management, password management, encryption, education

What is the Cybersecurity Masters Series?
ESET's Cybersecurity Masters webinar series is designed to connect you with the experts. As an IT Security professional you will gain access to analysis and commentary from industry experts on the Cybersecurity front. Register now >>