Name: Thailand after post COVID-19: The Essential Upskill/ Reskill on Cloud Security
Start: 2020-09-07T04:00:00Z
End: 2020-09-07T04:38:42.000Z
Location: BrightTALK
Rating: 4.8

CSA CloudBytes was launched as a webinar series to help us educate the industry on all matters related to the cloud. Our channel is designed to inform our audience about trending topics, new technologies, and latest research. Learn more at cloudsecurityalliance.org.  Join the Cloud Security Alliance on LinkedIn and follow us on twitter: @cloudsa

Distributed architecture offers a wealth of benefits, such as flexibility and scalability. However, this strategy can also present challenges when it comes to network security. In this webinar, we'll show you why application-based security management is becoming a popular method of approaching these concerns. We'll also cover the hottest trends and best practices for successful protection of your hybrid cloud environment.

Take an Insider’s Look at Managing Applications in the Cloud

Data security posture management (DSPM) is either an innovation trigger or alphabet soup. Ultimately, in order to identify meaningful data risk, you must bridge the gap between legacy tools and the modern threat landscape.

Join this CISO panel to explore how Security leaders can adopt DSPM and manage data risk - alongside the challenges and frameworks to make it a success. Take the journey with us as we explore:
• Today’s biggest cloud data security challenges (featuring exclusive research from over 1,000 security leaders)
• Where the market is driving innovation and where it’s failing
• Actionable ways to improve your cloud data risk posture

Data Security Posture Management (DSPM) Across the Multi-Cloud

Enterprises of all sizes and industries have benefited greatly from cloud transformation and data democratization. But these megatrends have also given rise to the “Data Attack Surface”. This new concept is rapidly emerging as the most challenging aspect of cloud security. In today’s world, security teams are faced with a tremendous amount of data to protect, and it's unclear where all that data resides, what type of data it is (eg. crown jewels), who is responsible for it, who has access, and what its security posture is supposed to be.  

In this session, our cloud security experts will discuss new and evolving security challenges facing cloud security teams and how leading organizations have overcome these challenges by adopting a data-centric approach to cloud security.

What You’ll Learn:

●     Why is the "Data Attack Surface" the biggest cloud security risk to your organization
●     How security teams can safeguard their organizations' crown jewels without inhibiting innovation 
●     How to tackle the challenges of cloud data security head on

Cloud Data Security 101: How to Reduce Your Data Attack Surface

When industry press is regularly reporting on cyber security breaches in telecoms, why are they blaming on 5G? How has 5G increased the attack surface? Throughout this presentation, we will look at what the industry observers are saying, looking behind the headlines and uncovering the reasons why 5G poses a greater risk to mobile operators. We will investigate the cyber security industry from a mobile telecoms point of view, explaining where the 5G Security challenges are coming from. We will also take a deep dive into protection measures open to equipment vendors and operators. And finally, we will explore the mitigation techniques available to mobile operators to keep their networks as safe as possible from the threat of a cyber-attack.

Security Challenges for Mobile Networks

Critical vulnerabilities in widely used products are cropping up more frequently than ever, and we see that in cases like Solarwinds, Kaseya, Confluence, and Log4J. But these events often leave businesses caught off guard and without a playbook for how to respond. Why? Visibility.  The impact of these events can be spread out across an organization’s own “shadow IT” and through their digital supply chain. This translates into IT and security teams struggling to identify where that product shows up and what impact the exposure has on their business. 

Whether you’re building out your risk management policies or fine-tuning your practices, this webinar will increase your awareness of Shadow IT and provide tips and tricks for ramping up your preparedness for the next Zero Day event to hit the supply chain.

Risk Management in the Era of the Supply Chain Vulnerability

MODERATOR : Ferdinand FONG (Chair, Protem Committee, CSA Sarawak Chapter)

PANELISTS :
- George MATHEWS (Principal Data Privacy Compliance Analyst & Data Protection Officer, NT Business Consulting & Training)
- Ramiah MARAPPAN (CISO, Security Spectrum)
- Marcus TAN (Managing Partner, Marcus Tan & Co, Advocates & Solicitors, Malaysia)
- Philip VICTOR (Managing Director, Welchman Keen)

Panel Discussion on "Implications of MY PDPA for Enterprise Cloud Users"

Fireside Chat with FOONG Cheng Leong (Advocate & Solicitor, Foong Cheng Leong & Co) & Moderator Daniele CATTEDDU (CTO, CSA)

Fireseide Chat

This presentation will cover the salient points of the Malaysian Personal Data Protection Laws in the context of cloud services, including application to the Cloud.

Malaysia PDPA & Its Application to Cloud Computing

With the advancement of AI/ML, Big Data analytic, and cloud technology, much can be done with data that an organization possesses. Where personal data are involved, such processing may however raise regulatory and data subject's concerns. The secure use of such technology in a privacy-respectful way could deliver more efficient and beneficial services for the end users. This session evaluates the key requirements for personal data protection focusing on some of the regional regulatory requirements, dissects what they mean in the context of personal data processing in public cloud services, and discusses how we can approach such requirements leveraging cloud-enabled and cloud-native capabilities to achieve the end goals of providing better services to the end users, and at the same time ensuring adequate privacy safeguards and security of personal data in the cloud.

Implementing Data Privacy in the Cloud - A Responsive Approach

Welcome Address
Dr. Hing-Yan LEE (EVP, Government Affairs, CSA) 

Opening Keynote
Jim REAVIS (CEO & Co-Founder, CSA)

Welcome Address & Opening Keynote

Zero Trust has become a popular security term  - and rightfully so. With breaches happening daily and lost data costing businesses millions in revenue, teams must consider all approaches to fortifying their digital walls. But what does this mean for CISOs or other leadership roles in the enterprise? When approached with a Zero Trust project idea, what must leaders consider? What are the budgeting considerations involved in Zero trust? What key features should you concern yourself with, and how does this fit into the overall scope to protect your business? How do you merge into Zero Trust with competing priorities? What are the risks from a leadership perspective when moving into a Zero Trust world? This presentation will discuss and evaluate executive considerations for Zero Trust.

Executive Considerations in a Zero Trust World

Organizations are discarding the model of “Trust but Verify” and moving toward Zero Trust Model i.e., “ Never Trust, Always Verify, Enforce Least Privileges.” Effective implementation of Zero Trust requires assessment of risk of the access to data or environment, and based on the risk level facilitating authentication, authorization, privilege, and lifecycle management to meet compliance standards across modern, hybrid enterprises. Zero trust also requires protection of data in use, in transit, and at rest while enabling adaptive access to trusted entities. In this session, we will discuss Zero Trust Architecture and solutions for cloud.

Enabling Zero Trust for Cloud

Cloud security is the center of attention for the enterprise. IT and security teams place a special emphasis on securing their Infrastructure as a Service(IaaS) and Platform as a Service (PaaS) environments but overlook their Software as a Service (SaaS) technology stack. The truth is, organizations use dozens if not hundreds of Software as a Service (SaaS) applications that are prone to misconfigurations, shadow users, and excessive spending on unused licenses. With a focus on Cyber Asset Attack Surface Management (CAASM), teams can gain visibility into their cloud environments to identify, inventory, and assess all digital assets.

Join this session to gain a new perspective on:
- How to dynamically discover managed and unmanaged SaaS apps
- How to uncover and mitigate various security risks that put sensitive customer and business data at risk
- Collecting insights on user access and app utilization needed for better IT management and cost optimization across all SaaS apps

SaaS Security Best Practices

While many organizations perceive cloud security to be strong, there are significant risks that traditional approaches cannot mitigate. We will review a recent Cloud Security Alliance survey about protecting sensitive data and examine privacy-enhancing technologies such as confidential computing, homomorphic encryption, and others. We will discuss which ones are best suited to solve enterprise security needs.

Trends in Securing Sensitive Data with Privacy Enhancing Technologies

Industry best practices today recommend adopting a continuous compliance mindset. This means leveraging actionable insights towards achieving, staying, and proving compliance. Attend this virtual talk to understand:

• Cloud and Kubernetes Security Posture Management (CSPM and KSPM) 
• Differences between static and dynamic CSPM practices, and how to go beyond checking cloud service misconfigurations 
• How open-source projects can be leveraged within policy-as-code frameworks for posture/compliance-related configurations
• How a robust root-cause-analysis (RCA) process can help you prioritize what security findings are to be remediated first and keep you on track of your compliance goals

How Good is Your Organization’s Cloud and Kubernetes Security Posture?

Will you be prepared when a new software supply chain attack happens? Because if there is one thing that can be counted on; is it is no longer “if” it will happen, but “when”…..Software development teams are working fast, and security can become an afterthought in the rush to release. While it is impossible to eliminate the risk of being a victim in a software supply chain attack, there are best practices to reduce the risk of both being a victim and suffering potential damage caused during an attack.

Join us to learn what to do when a new vulnerability or software supply chain attack is discovered and how you can quickly determine your risk exposure by searching for the affected component and allowing you to quickly move to remediation.

Securing the Software Supply Chain

This lively, fast-moving presentation will walk you through the different scenarios when considering a move from Splunk Enterprise to Splunk Cloud. Splunk is encouraging many customers to migrate to Splunk Cloud, but you need to understand the pros and cons of such a move. Come out of this talk with the right questions for your organization as well as your Splunk account team.

Splunk Cloud - Things to Consider Before Making the Leap

Early in their journey, most organizations’ cloud security practices are defined project-to-project, which results in fragmentation and becomes unsustainable. As organizations mature their strategies, they soon realize having a proper security architecture is essential to enabling the speed required to support the business, while also maintaining corporate security standards and compliance mandates. Common architecture that aligns a standard set of readily consumable security services becomes a critical enabler. Multi-cloud adds another dimension as companies look to consolidate their security practices, visibility, and tools across each provider.

Join cloud security experts from Konekti as well as multi-cloud network security platform provider Valtix for a discussion with thought leaders around the topic of cloud security architecture. You’ll walk away with insight and learnings on where cloud security architecture is going with real world insights from actual deployments.

The Top 5 Trends in Cloud Security Architecture

Thailand after post COVID-19: The Essential Upskill/ Reskill on Cloud Security

cloud security

Cloud Adoption

cyber security

Thailand

ASEAN

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Thailand after post COVID-19: The Essential Upskill/ Reskill on Cloud Security

Presented by

About this talk

More from this channel