Browse communities
Presenting a webinar?
Share this content

10 Steps to Better Security Incident Detection

Brian Honan, Owner and CEO of BH Consulting
Organisations invest heavily in their security defenses, yet many still get breached. Sadly, they frequently find out about it from a third party. So why can’t security teams detect incidents early? In this webcast, information security expert Brian Honan describes why this happens and gives advice on resources you can use and steps to take to quickly identify a potential breach.
May 22 2012
37 mins
10 Steps to Better Security Incident Detection
Security SIEM Log Management Incident Detection
More from this community:

IT Security

Webinars and videos

  • Live and recorded (2605)
  • Upcoming (175)
  • Date
  • Rating
  • Views
  • There has been a lot of press lately on the escalating cyber threats especially from China. A panel of security experts and practitioners will discuss focus on how this press coverage has changed how organizations think about these cyber threats and what countermeasures they need or plan to implement to address escalating crimes, espionage, or warfare cyber risks.
    Read more >
  • More and more organizations are exploring the ramifications of Big Data on their enterprises. Deployments of Smart Meters to better manage the electric grid, Industrial Control Systems (ICS) across a variety of sectors, and the promise of always on and always connected systems are pushing organizations to gather more data than previously imagined. What are the implications from a privacy and intellectual property perspective and how can we as security professionals provide a level of control and risk management over the coming wave of The Internet of Things? Join (ISC)2 and Capella University on May 23, 2013 at 1:00pm Eastern for a discussion on these important concerns.
    Read more >
  • How do you monitor and assess performance in the cloud? Do you need more visibility and control over your managed cloud environments? Learn how HOSTING 360° Report™ delivers a level of visibility to cloud performance that has historically been unavailable to cloud customers. Aggregating key performance and operational data in a concise and usable format provides full visibility into the availability, performance, recovery, security and capacity (AppRisk™) of HOSTING’s cloud services.
    Read more >
  • The explosion of social media in recent years means that there are millions of users or ‘fans’ to reach and add to your customer base. While there are clear benefits to end-users and the organizations that accept their social identities for account creation and authentication, there are important risk factors that have to be considered as well.

    Please join CA and ISACA for this webinar, where we will review the pros and cons of social media login and Bring Your Own Identity (BYOI), and provide guidance and best practices based on real use cases to help guide organizations to a model that meets their risk profile.
    Read more >
  • BYOD is inevitable and unstoppable. Maybe even uncontrollable and unmanageable. But is it the real issue? We seem to be very interested in mobile device management and security risks and data breaches, as, of course, we should be. But, isn’t the real issue the fact that traditional IT is fast becoming irrelevant. Nearly all of us use our personal devices for work and have multiple personal clouds full of data – personal and business. Today’s users believe that they need traditional IT less than before. Crowdsourcing is replacing the Service Desk while Web self-service is replacing live people. But, there’s more to running IT than mobile device buzz words and doom & gloom blogs and tweets. Check out this webinar with CA Technologies & Pink Elephant to find out what’s really happening and what IT can do to embrace this new world. 1 PriSM CPD.
    Read more >
  • For the IT employer utilizing contingent or contract worker(s) services there are best practices and considerations that need to be made in order to protect yourself and your employees.

    - Do you know how to discuss pay rates, increases or bonuses?
    - Do you know how to deal with full-time employment queries, how to properly deal with timecards or forms?
    - How do you deal with punctuality, attendance, dress code etc?
    - What do you do when you want to terminate or suspend a contingent worker?

    These are the common questions we receive and we will provide tangible tools and information that can help protect you as an employer.
    Read more >
  • For the IT employer utilizing contingent or contract worker(s) services there are best practices and considerations that need to be made in order to protect yourself and your employees.

    - Do you know how to discuss pay rates, increases or bonuses?
    - Do you know how to deal with full-time employment queries, how to properly deal with timecards or forms?
    - How do you deal with punctuality, attendance, dress code etc?
    - What do you do when you want to terminate or suspend a contingent worker?

    These are the common questions we receive and we will provide tangible tools and information that can help protect you as an employer.
    Read more >
  • By 2014, 60% of global companies are expected to pilot, deploy or expand their BYOD programs (RainKing). As BYOD has become a fixture in the workplace, with 72% of employees clamoring to have their personal devices work-enabled, the IT industry has watched as the familiar “perimeter" model has become untenable. Data is going to more places, and ending up on a wider variety of devices, than ever before. A new model for protecting data has become a necessity. Organizations have tried to do so in a multitude of ways: extending policies to cover mobile devices, monitoring usage, MDM solutions, and even NAC; all have been methods used to try and create the most stable environment for mobile technology. Let Integralis security expert Mike Gabriel explain how to best balance mobile productivity and security in this Security Talks installment.

    Why Attend?

    1.Discover how your peers are trying to protect mobile data.
    2.See how the perimeter is being sculpted (or not) by the IT industry.
    3.Find out what the future holds for BYOD in the workplace.
    Read more >
  • Over the years true MSPs have had to work diligently to differentiate themselves from companies that are at best, not true MSPs and at worst, are shady fly-by-night operators. This is where the Unified Certification Standard or (UCS) for Cloud & Managed Service Providers comes in.

    The UCS was created by a team of dedicated MSPs to address the shortfalls of existing standards like ISO 27001, ITIL, CoBIT, SSAE 16, which were never intended for managed services organizations and offered little in the way of consumer protection.

    CASE IN POINT: Many MSPs do NOT fail because of technical deficiencies, but due to financial risk. Because of this, customers have very little insight into the service provider's business practices and financial strengths and capabilities.

    Attend this webcast and you will hear from real MSP executives on how the UCS certification and audit has helped them to:

    - Win new business
    - Provide needed transparency to customers
    - Achieve compliance objectives
    - Quickly develop trust with customers and prospects
    - Provide documentation on how those MSPs deliver their services
    - And much more...

    Both Cloud and Managed Service Providers should attend this webcast and at least begin to follow the standards necessary to achieve managed services and cloud computing excellence.
    Read more >
  • Doug Turner, CEO of Mantis Technology Group, talks about how his team built Pulse Analytics, a sentiment analysis solution using text analytics tool running on SAP HANA One. Hear how his team strengthened the capabilities of this solution while simplifying their data architecture by replacing 20 servers with only 1 SAP HANA One instance.
    Read more >
  • Channel
  • Channel profile

Tripwire

Up Down
  • I Didn't Know Tripwire Owned That! Jun 25 2013 5:00 pm UTC 45 mins
    Join Bryce Schroeder,Systems Engineer Director of Tripwire, to get an overview of the technology Tripwire recently acquired through the purchase of nCircle.

    Hear why hardware and software discovery is the foundational control to understanding your attack surface and how nCircle's market leading Vulnerability management solutions can help reduce the risk of breach within your infrastructure.

    This 30 minute presentation will include an overview of the extended product portfolio, key advantages to the technology and why the nCircle acquisition complements Tripwire’s portfolio.
  • I Didn't Know Tripwire Owned That! Jun 18 2013 9:00 am UTC 45 mins
    Join Gavin Millard, EMEA Technical Systems Director of Tripwire, to get an overview of the technology Tripwire recently acquired through the purchase of nCircle.

    Hear why hardware and software discovery is the foundational control to understanding your attack surface and how nCircle's market leading Vulnerability management solutions can help reduce the risk of breach within your infrastructure.

    This 30 minute presentation will include an overview of the extended product portfolio, key advantages to the technology and why the nCircle acquisition complements Tripwire’s portfolio.
  • Passing NERC CIP Audits with Tripwire Jun 11 2013 5:00 pm UTC 60 mins
    This presentation will provide attendees with the keys to achieving and maintaining NERC CIP compliance using Tripwire solutions. Jeff Simon, Tripwire Director of Services Solutions, and Jason Iler, Principal Services Engineer, will discuss their experiences in working with registered entities to reduce the time and effort required to pass NERC CIP audits through the appropriate use of automation.

    Webcast highlights include:
    -CIP requirements most likely to cause audit findings
    -Examples of successful – and unsuccessful – approaches to achieving compliance
    -Using Tripwire products, services and NERC-specific extensions to meet CIP standards
    -Live demonstration of using Tripwire to address specific NERC CIP requirements
    Join us for this informative webcast!
  • Tripwire Announcement Recorded: Mar 20 2013 19 mins
    Tripwire general announcement to customers
  • SCM for Dummies Recorded: Feb 20 2013 32 mins
    Join us for a live preview of "Security Configuration Management For Dummies," a new book by Wiley Publishing sponsored by Tripwire. In this webcast, we'll outline how to:
    •Harden systems against attack,
    •Rapidly repair configuration drift, and
    •Provide objective and actionable assessments of your organization’s security and compliance postures.

    Qualified attendees will receive a complimentary download of the ebook!
  • 10 Steps to Risk-Based Security Management Recorded: Dec 4 2012 59 mins
    Despite the belief of many security professionals in the value of a risk-based approach to information security, many organizations still act in ways that do not reflect this commitment. This dichotomy often leads to misplaced effort, spending and risk treatment. It is also reflected in the disconnect between executive management and those tasked with protecting the information security assets of an organization.

    This webcast will provide a simple framework for executing a risk based security management program. This framework is based on some basic tenants about risk based security management:

    It creates an environment of informed choice
    It strives to reduce uncertainty and eliminate conjecture
    It is best achieved through a plethora of relevant data
    It is based on analysis of frequency of threats and vulnerabilities
    It is a cyclical process involving feedback loops and explicit challenges to assumptions
    This webcast will not only offer you actions you can take but also provide guidance on identifying your progress towards a risk based security program.
  • IANS Webcast: Calculating Your Return on Security Investment with Tripwire Recorded: Oct 9 2012 41 mins
    In the world of security, you know first-hand how difficult it can be to quantify the advantages of solutions when there are so many variables at play. Join us and listen in to Diana Kelley, IANS faculty member and analyst and Tripwire customer, Francis Ballares, IT Systems and Infrastructure Manager at a large accounting and advisory services firm as they discuss how to assess the return on security investment with Tripwire solutions.
  • Connecting Security to the Business Recorded: Sep 14 2012 3 mins
    Information security has entered the boardroom. So, how can CISOs show value to their organization in meaningful ways? In this video we outline the growing problem and Tripwire's solution.
  • Five Steps for Utilities to Reduce Risk Management Framework Fatigue Recorded: Aug 28 2012 58 mins
    Utilities fear the specter of the NERC auditor, new security legislation on the horizon, and cyber attacks that could shut down systems and services. But risk management framework fatigue has set in, and with so many approaches they don’t know where to begin addressing risk. In this webcast, security expert Patrick Miller describes five concrete steps common to all frameworks that offer a leg up on security and compliance.
  • 2012 Ponemon Report on Risk-based Security Management: Are Organizations... Recorded: Jun 27 2012 60 mins
    Risk-based security management (RBSM) is rapidly gaining acceptance as an essential security practice. But how far along are organizations with it? Ponemon Institute and Tripwire teamed up to explore the state of risk management. In this webcast, hear the study’s key findings, including a strong commitment to the practice by most respondents, but little action to back it up.
  • 2012 Ponemon Report on Risk-based Security Management: Are Organizations... Recorded: Jun 26 2012 61 mins
    Risk-based security management (RBSM) is rapidly gaining acceptance as an essential security practice. But how far along are organizations with it? Ponemon Institute and Tripwire teamed up to explore the state of risk management. In this webcast, hear the study’s key findings, including a strong commitment to the practice by most respondents, but little action to back it up.
  • 10 Steps to Better Security Incident Detection Recorded: May 22 2012 37 mins
    Organisations invest heavily in their security defenses, yet many still get breached. Sadly, they frequently find out about it from a third party. So why can’t security teams detect incidents early? In this webcast, information security expert Brian Honan describes why this happens and gives advice on resources you can use and steps to take to quickly identify a potential breach.
  • Achieving Continuous Monitoring Easily with Security Automation Recorded: May 17 2012 47 mins
    With complex, distributed government information systems increasingly under attack from rogue nations, terrorists and cause-driven groups, IT security teams need to get a lead on the state of their systems. In this webcast, learn about an approach to continuous monitoring that offers strong protection against these threats, then see this approach with a demo.
  • 10 Steps to Better Security Incident Detection Recorded: May 2 2012 61 mins
    Organizations invest heavily in their security defenses, yet many still get breached. Sadly, they frequently find out about it from a third party. So why can’t security teams detect incidents early? In this webcast, information security expert Brian Honan describes why this happens and gives advice on resources you can use and steps to take to quickly identify a potential breach.
  • Get more out of SIEM with Change and Configuration Data Recorded: Mar 27 2012 24 mins
    Join us for this Lunch and Learn Webcast:

    Most organizations capture log data that could indicate a breach occurred. Yet not a single breach investigated in the Verizon Data Breach Investigation Report was detected through log analysis or review. Change and configuration data provides valuable insight around the security events that matter, allowing you to identify and react quickly to potential threats. Gavin Millard will talk through the common misconceptions around the limitations of SIEM solutions and how best to leverage this increasing operational efficiency.
  • From Compliance To Security: Making PCI Earn Its Keep Recorded: Mar 21 2012 41 mins
    Your File Integrity Monitoring (FIM) solution has been taking it easy. Doing the bare minimum to meet PCI Requirement 11.5. Like a prima donna that just shows its face and expects to be applauded. Nobody in IT security gets to do that, so why should FIM? Learn how it can do a lot more to improve security. Put it to work as a host intrusion detection system (HIDS) that catches the bad guys well beyond point-of-sale systems and in-scope assets.
  • The Metamorphosis: Extracting Business Intelligence from IT Security Data Recorded: Mar 15 2012 44 mins
    It’s been a long time coming: businesses really care about the organization’s state of security. But to make it relevant to business executives, they need up-leveled views of raw security data that don’t require a deep understanding of IT and security. Tripwire CTO Dwayne Melancon explains three keys to making that possible.
  • IT-Security Controls in Deutschland 2011 Recorded: Mar 14 2012 61 mins
    IT-Security-Verantwortliche in deutschen Unternehmen wissen, welche Daten sie schützen müssen und kennen die Folgen einer Datenschutzverletzung: Umsatzeinbußen, Reputations- und sogar Jobverlust. Dennoch sind die meisten der Meinung, irgendwann Opfer einer Kompromittierung zu werden oder bereits gewesen zu sein. Der optimale Einsatz der richtigen IT-Security Controls kann hier entscheidend sein. Im Webinar erfahren Sie mehr über die Ergebnisse der IDC-Studie und wie starke IT-Security Controls Ihr Unternehmen positiv beeinflussen.
  • Secure on Two Fronts: Increased Control to Protect Your Business Recorded: Feb 16 2012 23 mins
    Securing today’s organization is a daunting task. Gartner’s Mark Nicolett explains why and describes key compliance and security drivers, how to secure your organization, and criteria for selecting a security and compliance technology provider. Tripwire’s Dwayne Melancon adds his perspective, including a smart approach to selecting controls.
  • Where, When and How to Use Real-Time Monitoring Recorded: Dec 15 2011 30 mins
    It's clear to most IT security practitioners that if you only monitor for change through periodic scans, you are probably missing changes that can introduce risk or cause non-compliance. Real-time monitoring seems to offer the panacea by allowing you to detect every change that happens, as it happens. But given the number of devices in the average enterprise IT infrastructure, you may be capturing so much data that you can't possibly see the changes that actually spell trouble.

    In this webcast, Gavin Millard, Technical Director, EMEA of Tripwire uses his experience working with numerous customers to answer critical questions about real-time change monitoring, including:

    - Which parts of your IT infrastructure are suitable for real-time monitoring?
    - How do your monitor the IT estate without overloading the system?
    - What benefits should you expect to gain from real-time monitoring?

    If you are interested in learning more about best practices for implementing a real-time monitoring solution, register for this webcast and tune in to learn from someone with firsthand, practical knowledge of what works and what doesn't.
Leading Provider of IT Security and Compliance Automation Solutions
Tripwire’s powerful IT security and compliance automation solutions help businesses and government agencies take control of their IT infrastructure.
  • Upcoming webinars (3)
  • Recorded webinars (31)
  • Subscribers (677)
Channel RSS feed
Up Down

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: 10 Steps to Better Security Incident Detection
  • Live at: May 22 2012 1:00 pm
  • Presented by: Brian Honan, Owner and CEO of BH Consulting
  • From:
Your email has been sent.
or close
You must be logged in to email this
OK