Name: Identity and Access Management: The First Line of Defense
Start: 2022-12-07T21:00:00Z
End: 2022-12-07T21:00:48.000Z
Location: BrightTALK
Rating: 4.2

Palo Alto Networks is the next-generation security company, leading a new era in cybersecurity by safely enabling applications and preventing cyber breaches for tens of thousands of organizations worldwide. Built with an innovative approach and highly differentiated cyberthreat prevention capabilities, our game-changing security platform delivers security far superior to legacy or point products, safely enables daily business operations, and protects an organization's most valuable assets. Find out more at www.paloaltonetworks.com or call us at 1-877-524-1031.

AI agents powered by the Model Context Protocol (MCP) are reshaping how enterprises work — coordinating tasks, integrating with tools and making autonomous decisions at scale. But the very power that makes MCP so transformative also makes it dangerous. Attackers don’t need to break your infrastructure; they just need to trick your AI. From prompt injections and impersonated services to excessive privilege and compromised “trusted” tools, MCP introduces a new class of vulnerabilities that can quietly erode revenue, trust and compliance.

Traditional security controls aren’t designed for this environment. AI agents move fast, interpret loosely and can be manipulated in ways legacy defenses can’t detect. The question isn’t whether MCP-enabled agents can be exploited — it’s how quickly adversaries will take advantage.

In this session, we’ll demystify MCP, expose the top security gaps it creates and share a practical security playbook for containing AI risk. Whether you’re an executive asking “what’s the business impact?” or a practitioner asking “how do I defend it?”, you’ll walk away with a clear roadmap for securing your agentic future.

You’ll learn:

● How MCP works — and why it’s becoming the backbone of agentic AI.
● The most common and dangerous ways AI agents can be tricked.
● Security strategies to control agent “agency” and prevent rogue behavior.
● What leaders must do now to protect AI-powered systems before attackers strike.

Join us to uncover the hidden risks in MCP — and how to defend your AI before it makes a decision you can’t take back.

Can your AI Be Tricked? Exposing the Security Gaps in MCP

AI systems are no longer theoretical targets — they’re already being exploited. From jailbreaks and prompt injections to data leaks and agent manipulation, attackers are using simple language to probe and break systems once thought secure. Traditional pentesting can’t keep pace with this reality. AI behaves unpredictably, its vulnerabilities change with context and every new update or integration introduces fresh risk.

In this session, we’ll explore why AI needs an entirely new red teaming playbook. You’ll hear real-world evidence of how even the most advanced models fail under adversarial testing, and why continuous red teaming — across models, applications and agents — is now essential. We’ll break down how red teaming works in practice, from simulating guardrail bypasses and data exfiltration to uncovering context-driven flaws that only appear in deployment.

You’ll learn:

● Why AI’s nondeterministic nature breaks the old red-teaming model.
● The most common attack vectors enterprises face today.
● How vulnerabilities differ in models, applications and agents.
● How continuous red teaming builds confidence for developers, executives and customers alike.

Join us to see how AI red teaming turns hidden flaws into actionable insights — helping you protect your business before attackers exploit the gaps.

Red Teaming Your AI Systems Before Attackers Do

Generative AI is transforming how businesses innovate — but it also opens the door to risks that only surface once systems go live. Even rigorously trained models can harbor hidden flaws that attackers exploit through prompt injection, jailbreaks, tool misuse or data exfiltration. These aren’t rare edge cases — organizations have already suffered financial loss, compliance penalties and reputational damage from AI failures.

In this webinar, we’ll show why static testing and traditional tools can’t keep pace with adaptive AI systems. You’ll learn:

• How vulnerabilities emerge when chatbots and agents interact with real users.
• Real-world cases where runtime attacks disrupted operations and eroded trust.
• Why legacy security methods fail to block AI-specific threats.
• A practical framework for runtime protection using inspection, monitoring and adaptive defenses.
• How Prisma AIRS™ AI Runtime Security delivers broad detection and low-latency safeguards without slowing innovation.

Join us to see how runtime protection transforms AI from an unpredictable risk into a trusted, resilient business enabler.

When Hidden Flaws Surface: Securing AI at Runtime

AI is a powerful driver of innovation, but it can introduce an invisible risk: unintentional data leaks. These leaks are often self-inflicted when employees, customers or partners unintentionally expose sensitive data through AI tools. Systems can remember, replicate and resurface confidential information in unexpected ways, leaving organizations vulnerable without a clear forensic trail. The ultimate risk isn’t just fines or a breach notification, but a profound loss of trust from customers, regulators and boards.

In this webinar, we'll shift the conversation from a technical problem to a trust-driven business imperative. You'll learn:

● Why traditional security models fail.
● The most common ways sensitive data slips into and out of AI systems.
● How to build a proactive AI governance strategy with real-time visibility and automated guardrails.
● How to accelerate AI adoption safely. 

Join us to move beyond reactive security and create a responsible AI framework that lets you innovate confidently.

When AI Leaks: Containing and Preventing Sensitive Data Leaks

AI is redefining what’s possible, with over 78% of global enterprises having integrated it into their operations. However, only 6% have an advanced AI security strategy framework. To compensate, many organizations are putting AI guardrails in place, hoping to seal security gaps without slowing innovation.

In this webinar, we'll expose the "guardrail trap" — the reason why these traditional mechanisms often fail under real-world pressure. Drawing on recent examples, we'll show you how adversaries exploit fragmented standards and risky design decisions, turning a "lethal trifecta" of external data, permissive tools and broad access rights into a major liability. 

You’ll leave with a clear framework for avoiding the guardrail trap — and a view into how Prisma AIRS™ can help your organization build AI systems that aren’t just functional, but resilient, compliant and trustworthy.

The Guardrail Trap: Why Existing AI Security Strategies Aren't Enough

Organizations face pressure as AI adoption accelerates and cloud environments expand, yet most lack full visibility into their security posture. With 79% of organizations reporting visibility gaps leading to three times more security incidents, the stakes are high. As AI spending surges across 96% of enterprises, identifying vulnerabilities in cloud networks and AI systems is critical.

This webinar explores three approaches to address security blind spots that put your organization at risk. Gain insights to protect cloud infrastructure and AI deployments before incidents occur.

· Techniques for assessing network risk in public cloud environments
· Strategies to test cloud firewalls against advanced threats
· Methods to identify exposures in AI applications, models, and data

Learn how complimentary tools can uncover security gaps and AI vulnerabilities missed by traditional methods. Watch to shift from reactive response to proactive security management.

3 Ways to Identify Your AI & Cloud Network Security Blind Spots

Cryptographically relevant quantum computers threaten traditional key exchange methods, leaving encrypted data vulnerable to harvest-now-decrypt-later attacks. Adversaries collect encrypted communications today, intending to decrypt them once quantum computers advance. Organizations must explore protection strategies beyond standard encryption.

This webinar examines quantum key distribution (QKD), an out-of-band key exchange technology using quantum mechanics instead of mathematical formulas. Unlike conventional methods, QKD generates encryption keys through a separate appliance, ensuring harvested data stays secure as attackers never access the key material. Topics include:

· How QKD integrates with VPN infrastructure
· Real-world use cases securing financial and government communications
· QKD’s advantages, limitations, and distance constraints

Learn how early adopters deploy QKD to protect sensitive data against future quantum threats.

What is Quantum Key Distribution?

Traditional random number generators may leave cryptographic keys vulnerable to attacks, including quantum computing threats. As organizations transition to quantum-resistant security, entropy quality for encryption keys is critical yet often overlooked.

This session explores quantum random number generators (QRNGs) and their role in enhancing data security. Palo Alto Networks experts discuss the differences between pseudo-random, true random, and quantum random number generators, highlighting why entropy quality is as vital as key length for protecting sensitive data. The session includes evidence of vulnerabilities from weak entropy and guidance on implementing QRNG technology.

· Types of random number generators and their security implications
· How weak entropy has compromised SSL/TLS servers and IoT devices
· Current QRNG options, from embedded chips to cloud-based services

Watch this webinar to learn how QRNGs can strengthen your cryptographic foundation.

What is Quantum Random Number Generator QRNG?

Quantum computing threatens encryption standards, making the shift to postquantum cryptography (PQC) essential. Traditional algorithms protecting sensitive data today will become vulnerable as quantum computers emerge.

This session provides security leaders a roadmap for PQC migration. Experts from Palo Alto Networks cover technical fundamentals, standardization efforts, and strategies for quantum readiness. Key topics include:

· NIST-approved PQC algorithms for lattice-based, hash-based, and code-based approaches
· Hybrid cipher strategies combining classical and postquantum keys for compatibility and security
· Crypto agility frameworks enabling rapid algorithm transitions
· Migration scope and timeline for VPNs, TLS, certificate authorities, and endpoints

Cryptographic transitions take time—TLS 1.1 remains widely supported despite deprecation. With PQC adoption likely taking 8-10 years, organizations must start planning now to protect against quantum threats.

What is Post-Quantum Cryptography?

The threat of quantum computing to cryptography is imminent, making quantum readiness essential. Delaying initiatives risks exposing sensitive data to harvesting attacks, where encrypted information is collected now and decrypted later when quantum computers advance.

This session provides a framework for transitioning to a quantum-resistant network. Experts from Palo Alto Networks outline steps to assess cryptographic posture, prioritize migration based on business impact, and implement interim protections. Topics include:

· Conducting a cryptographic inventory to identify vulnerabilities
· Categorizing data by sensitivity and business impact to guide priorities
· Strengthening VPN and TLS security against quantum threats
· Using labs to evaluate post-quantum cryptography

Quantum migration is a multi-year initiative requiring careful planning. Start now to protect data needing long-term confidentiality. Watch to build a tailored quantum readiness roadmap.

Kickstarting Your Quantum Readiness Plan

Quantum computing threatens enterprise security as traditional encryption like RSA and elliptic curve cryptography nears obsolescence. Cryptographically relevant quantum computers enable harvesting attacks, where adversaries collect encrypted data now to decrypt later, leaving organizations vulnerable.

This session examines quantum algorithms like Shor's and Grover's that compromise encryption, focusing on risks to VPNs, SSL/TLS, digital signatures, and software signing. Learn why nation-states are harvesting encrypted communications and why immediate action is critical. Topics include quantum-resistant upgrades for key applications, the urgency of addressing harvesting attacks, and challenges with early post-quantum cryptography implementations.

Watch this webinar to understand the quantum threat landscape and why transitioning to quantum-resistant infrastructure must be prioritized before adversaries exploit vulnerabilities at scale.

Quantum Threats: What Every CISO Should Know

The encryption securing digital communications faces a major threat from quantum computers, which could break cryptographic algorithms protecting financial transactions and government secrets. With rapid advancements and investments, a cryptographically relevant quantum computer may arrive sooner than expected.

This webinar explores the quantum computing threat and offers a roadmap for transitioning to quantum-resistant security. Experts Phil Quan and Ru Chesa from Palo Alto Networks discuss how quantum algorithms like Shor's and Grover's threaten encryption, vulnerabilities in current PKI infrastructure, and implications for security. Topics include:

· How quantum computing enables faster cryptographic attacks
· When quantum computers might break encryption
· Government mandates driving post-quantum cryptography
· Steps to inventory cryptographic assets and prioritize migration

Act now to build quantum-resistant defenses before encryption becomes obsolete.

Quantum Computing: Closer than you think–but not as difficult as you expect

Modern data centers face an unprecedented series of security challenges - an increasingly intense threat environment, new threat vectors and risks from every AI app, and the "East-West blind spot," where threats move laterally between servers, completely invisible to traditional perimeter firewalls. This problem grows exponentially in distributed, multi-site environments, where maintaining a consistent security posture often seems impossible.

Join experts from Arista and Palo Alto Networks to understand a unified solution that solves these challenges without requiring a complex network redesign. Learn how the Arista data center fabric intelligently steers traffic to the Palo Alto Networks Next-Generation Firewall for deep, Layer 7 inspection, with policy then enforced at wire speed directly in the network.

This session will demonstrate how this integrated solution:
● Eliminates the East-West blind spot in a single data center.
● Extends to provide a single, consistent security policy across a multi-site environment using a single, seamless management experience
● Avoids common multi-site issues like asymmetric routing and inefficient traffic "tromboning."

Discover how to build a scalable, consistent, and automated Zero Trust strategy for your entire data center infrastructure.

Comprehensive Data Center Security for the Age of AI

Attackers are fully focused on utilizing the identity when infiltrating organizations through their endpoints. Most security teams are still fighting these threats with disconnected tools, creating dangerous blind spots that let threats slip through undetected.

Don’t let siloed security create blind spots. Join us for this webinar where our speakers, Niels van Bennekom from CyberArk, and Nadav Shai Kanon from Palo Alto Networks, will walk through the importance of breaking down silos in your organization’s security to protect the identity at the endpoint.

What you’ll learn:
● The risks organizations face through approaching endpoint protection and security in a siloed manner.
● What a defense-in-depth strategy looks like when protecting endpoints.
● How to transform your organization’s endpoint security from reactive to proactive with solution integrations.

Bridging security gaps with defense-in-depth: Tackling vulnerabilities of siloed security

According to Unit 42®, 80% of security exposures occur in the cloud, with attacks increasing almost 2x in the past three years. To stay ahead, modern organizations are adopting cloud detection and response (CDR) approaches in record numbers.

Join Forrester VP and Principal Analyst Andras Cser and Palo Alto Networks Technical Evangelist Ory Segal in a candid discussion on the state of CDR. They'll dive deep into cloud security trends, discuss real customer challenges and provide actionable recommendations to help your organization build a resilient CDR program.

What you'll learn:

- The state of cloud security: Understand why traditional security strategies are failing and how attackers are exploiting new cloud vulnerabilities faster than ever.
- Proactive vs. reactive approaches: Discover how a prevention-first approach is crucial to stopping attacks before they escalate.
- A strategic roadmap: Walk away with concrete, actionable steps for building a resilient CDR program, including how to improve threat detection and automate response.

This is a must-attend session for security leaders looking to move beyond reactive defense and stop cloud attacks in real time.

The State of Cloud Detection & Response, Featuring Forrester

Digital transformation is changing how we do business, creating incredible opportunities for growth and innovation. But as we embrace new technologies and workflows, we also open the door to new cyber risks. 

Don't let these challenges slow your progress. Join us to learn how to stop being a gatekeeper and start turning your security operations into an enabler of business growth.

In this session, you'll discover:  
● Discover the latest social engineering trends from Unit 42 research.
● Empower your security teams with automation and machine-learning tools to focus on the most critical threats.
● Strengthen your organization's defenses by leveraging AI to respond faster and more effectively.
● See how the Cortex XSIAM, the AI-Driven SOC Platform makes all of this possible.

Register today and take the first step toward a more secure digital future.

Secure Your Innovations, Outsmart Cyber Risks

Phantom Taurus isn't just another advanced persistent threat (APT), it's an evolution of cyber espionage itself. This highly sophisticated Chinese APT group identified by Unit 42 uses custom-built, evasive malware to bypass traditional defenses and breach high-value targets.

In this live briefing, our Unit 42 experts will share exclusive, actionable intelligence from our investigation conducted over the past two and a half years. You will learn how to:

● Unmask the Adversary: Go behind the scenes of the investigation that began with a single activity cluster and resulted in a newly attributed threat actor.
● Dissect the Novel Malware: Understand the details of the NET-STAR malware suite, including its fileless components and sophisticated evasion techniques.
● Harden Your Defenses: Learn the TTPs of Phantom Taurus to better protect yourself, and see how Palo Alto Networks provides a comprehensive defense against this new threat.

Get the insights you need to stop Phantom Taurus in your organization.

To learn more, check out the threat research: http://unit42.paloaltonetworks.com/phantom-taurus

UNMASKED: Inside a New Chinese Nexus APT

The truth? Upgrading from QRadar to Cortex XSIAM is easier than you think. Join Palo Alto Networks and IBM as we separate fact from fiction when it comes to modernizing your SOC. 

In this fast-paced myth-busting session, we’ll tackle the top concerns about moving to a cloud-native, AI-powered SOC, from fears of time-consuming deployments to worries about cost, complexity, and security. Hear directly from security leaders who’ve made the switch—and haven’t looked back.

Featuring Chris Meenan, formerly the VP of Security Product Management, Threat Management at IBM, now Security Operations Transformation Leader at Palo Alto Networks, Bill Crawford, VP of Sales at IBM, and Danny Milrad, Principal Product Marketing Manager for Unit 42 at Palo Alto Networks, this session delivers expert insights, real customer stories, and practical tips to simplify your journey from QRadar to the future of security operations.

What you’ll learn:
● Why QRadar customers are making the move now.
● What real customers say about migration timelines and outcomes.
● How IBM and Palo Alto Networks can help you upgrade seamlessly.

Don’t let outdated assumptions hold your SOC back. It’s time to debunk the myths and move forward with confidence.

5 QRadar Migration Myths Debunked: Why You Should Move to a Cloud-Native, AI-Driven SOC

This session will describe approaches and suggestions for potentially lowering your risk of a breach and how to prepare for when they happen.  We will discuss our experiences and practical ideas for consideration to take back to your companies.

Tune in to learn more about these topics:
1. What is the definition of a breach
2. SANS Security Critical Controls – 
a. CIS Control 1: Inventory and Control of Enterprise Assets
b. CIS Control 2: Inventory and Control of Software Assets 
3. Starting with the basics
4. Access Control – Knowing your data – Identity Access Management (IAM)
5. Leveraging Threat Intelligence
6. Bonus – Have a plan, practice, table tops

Top 5 Strategies to Reduce the Risk of a Breach

Security operations is hard. The threat landscape is constantly
evolving. Business and IT initiatives create an ever-expanding attack surface.
Myriad security products overwhelm operators and drive costs up. And as
cybersecurity becomes a topic in board rooms, CISOs are not only under
pressure to reduce risk, but also to prove the efficacy of their security
postures.
 
Next-Gen MDR/XDR represents a shift in mentality from traditional solutions,
which primarily focus on detecting threats by managing EDR and XDR
products. In this session, we will discuss how Next-Gen MDR solutions:
 
1. Continuously assess prevention and configuration settings to prove
security efficacy
2. Use security posture context to make more accurate incident triage
and response decisions
3. Facilitate better collaboration between security and IT teams to
streamline operations
4. Reduce overall complexity by plugging into a consolidated multi-cloud,
multi-device control plane
 
Don’t miss out on the future of Managed Detection and Response!

Reduce Risk and Prove Security Efficacy with Next-Gen MDR/XDR

When we think of cybersecurity for enterprises, we think next-gen firewalls, EDR, and SIEM. But none of these resources can protect your cloud assets as traditionally employed. This means companies must use new techniques to protect cloud environments and the various SaaS applications deployed by modern enterprises.

Tune into this talk to learn:
1.) How to collect telemetry and generate alerts from various cloud environments.
2.) Techniques to detect misuse of SaaS application including cloud account takeover. 

The ultimate goal is to stop cloud and SaaS breach from occurring in the first place.

Breach Detection in the Cloud

In the last two years, technology has shifted from onsite to remote. This paradigm shift in computing introduces additional security concerns to both individuals and enterprises. 

Tune into this presentation to hear TD Bank's Application Release Engineer Pankul Chitrav discuss security issues and concerns common in cloud computing while addressing various key topics like vulnerabilities, threats and mitigations, and breach prevention.

Speaker bio:
Pankul is an expert DevOps consultant and entrepreneur. With a background in software technology and leadership, her career expands over several industries including education, healthcare, and finance. Currently she is working on Azure Clouds as Application Release Engineer at TD Bank. She has received numerous awards as a technology expert and mentor. Her strong background in learning, development and managing teams makes her the perfect fit. She is widely regarded as the go-to source for automation and troubleshooting. Pankul is a Certified Agile Practitioner and is Certified in Designing Microsoft Azure Infrastructure Solutions along with Microsoft Azure Administrator. Pankul has been invited to speak to organizations across the world including RSA and WWC. Pankul is passionate about volunteering and is one of the most sought-after mentor for newly immigrants of Canada.

When not working or volunteering, Pankul can be found creating delicious meals and doing gardening.

Breach Prevention in Cloud Computing

It is no secret your data in the cloud is vulnerable. What's worse is that, according to Gartner, more than 99% of cloud breaches will have a root cause of preventable misconfiguration or mistakes by end users through 2025. But the silver lining -- more like silver word -- to your cloud is that these breaches can be preventable so you can reach to your data in cloud when you need it. 

Tune in to this presentation from TD Bank's Leena Bongale if you looking for ways to secure your cloud data by:
• Securing access with zero trust principles
• Protecting data in an era of hybrid work
• Transforming your data protection for the cloud
• Reducing human error with security posture management

Speaker Bio:
Leena Bongale is a recognized industry expert with over 18 years of experience in Information Technology and specializes in Information Security and Risk Management.  She is currently Manager of Data Protection at TD Bank. Leena is an accomplished speaker, trainer, also volunteers information security consulting on pro bono basis, and has achieved industry certifications including CRISC and SAP BI. Leena regularly speaks on topics including cybersecurity, cloud adoption, business continuity, and compliance.

Reach it, Don't Breach It!

Social engineering tactics – using the art of deception in cyberattacks – have climbed to the top spot as the #1 cause of cybersecurity breaches. Our researchers break down common attack vectors, where we’re most vulnerable and find out why social engineering is so successful. Finally, we explore Forrester’s recommendation for the best defence against social engineering tactics like phishing. They make the case for adopting a multi-tiered cybersecurity strategy. Equipped with the right defences, you can protect your business from social engineering.

Join our webinar to learn how to protect your business.

Is Your Security Engineered To Beat Social Engineering?

The cloud landscape is complex with different threats, risks, and vulnerabilities that can overwhelm a business and its security teams. An annual report released by CSA tracks the top concerns reported by security professionals to understand how threats and breaches impact the business. 

Organizations must prioritize how cloud security affects the organization, break down recent cyber attacks, and implement controls that protect the organization from future threats. Some of these tools include the Top Threats initiative complements industry tools for a richer business context. IT leaders should also compare industry perception with actual threat data in the Verizon DBIR. Another strategy is to take real-world attacks and use alternative lateral techniques from the MITRE ATT&CK framework. Finally, security leaders can implement cloud security controls with the Cloud Controls Matrix to mitigate business risk and cyber attacks. 

Tune into this webinar as Cloud Security Alliance's John Yeoh shows how to use these tools and better communicate cloud security for the business.

About the speaker:
With over 20 years of experience in research and technology, John Yeoh has held technical analyst, executive, and board member positions in the industry. He is also a Technical Advisory Council Member for the Federation Communications Commission, Standards Officer for the International Standardization Council, and representative on multiple industry professional consortiums. Yeoh is a published author, researcher, and technologist with areas of expertise in cybersecurity, cloud, and next generation technologies. His works and collaborations have been presented in The Wall Street Journal, Forbes, SC Magazine, USA Today, Information Week, and others.

Top Threats to the Cloud for the Business

When it comes to securing cloud usage, misconfigurations can arise for many reasons and stem from a number of sources. One particularly well-traveled road for the origination of security issues is through application development. Specifically, situations where changes made during development lead to undermined security, the introduction of vulnerabilities, or other non-optimal security outcomes.  

Fortunately, by working together with development teams, security groups can help find and mitigate these types of issues.  

This discussion will explore how and why threats get introduced during the development cycle and cover strategies for how you can mitigate those issues when they do.

Application-induced cloud security issues (and how to overcome them)

Tune into this session, presented by Boleaum Inc. founder Vincent Amanyi,  to learn the critical components involved in order to craft security strategies for the cloud environment.

 Attendees will come away from this webinar with these key takeaways:
- Define what matters to them within a cloud security strategy.
- The right technology and tools to build up their strategy.
- Frame their environment based on growing business applications.
- Partner with the right vendors to manage risk and lower cost.

The building blocks of a cloud security strategy

Network security is primed for a transformation. Traditional approaches to threat and data protection are no longer effective in a cloud and mobile world. Users, data and apps have left the network, leaving traditional network security approaches in the dark. As data breaches and ransomware continue to rise, IT leaders are now being forced to evaluate new ways to help drive down risk.

Defining the future of Security Service Edge

70% of organizations have had a public cloud security event in the last 12 months— and we know that number continues to rise. That's because attackers are zeroing in on public cloud resource misconfigurations.  As more and more data and resources are migrated to cloud platforms like AWS, Azure, and Google, it's harder for IT pros to keep pace, much to the delight of attackers worldwide. Organizations are increasingly investing in cybersecurity services, most notably Managed Detection and Response (MDR), to help improve their threat detection and incident response capabilities 

When you’re up against malicious actors, the more expertise you can bring to bear the better. Join this webcast to learn how to effectively integrate managed detection and response into your proactive security strategy. We will also cover: 
- A common attack scenario and how it plays out from a defender's standpoint 
- Trends of attacks that are taking place in the cloud 
- Solutions your organization can leverage to obtain better visibility and detection

MDR: Delivering Superior Security Outcomes Through Cybersecurity as a Service

A Cloud-Native Application Protection Platform (CNAPP) is a new approach that simplifies cloud security by combining several capabilities in one platform. By combining vulnerabilities, context, and relationships in a unified data model, a CNAPP provides a holistic view of risks, recognizing how seemingly unrelated low-severity risks can combine to create dangerous attack vectors.

In this session, we’ll talk CNAPP and dive into:
• How CNAPPs are changing the landscape of cloud security
• The advantages of agentless cloud security
• How a CNAPP reduces cloud security tool sprawl and strengthens risk prioritization
• How the Orca Cloud Security Platform combines cloud workload and configuration intelligence in a unified data model to understand the full context of risks

5 Reasons to Choose an Agentless CNAPP in 2023

The World Economic Forum estimates that over 92% of all data in the western world is stored on servers owned by very few US-based companies. This concentration creates a situation of high dependence, and a challenge for business resilience. Digital sovereignty has become an important topic for many nation states, and new regulations are emerging to manage these risks. In this webinar we will cover:

- Digital sovereignty challenges between the EU’s GDPR and the US Cloud Act and FISA since the Schrems II decision.
- The emerging sovereignty regulations such as GAIX-X, DORA, France’s “Trusted Cloud”, Australia, and others.
- The impact of sovereignty on cloud deployment risk and governance.
- Strategies to maintain data, operational, and software sovereignty.
- How sovereign controls leveraging encryption and key management can protect privacy and sovereignty in the cloud.

Join us learn more about how to overcome digital sovereignty challenges in the cloud.

The Keys to Sovereignty in the Cloud

It's no longer news that we need to support and secure increasingly distributed organizations. As companies look for long-term solutions for their hybrid and fully remote workforces, one thing is clear - identity is at the center of businesses today. An identity-first approach to security reduces today's cybersecurity risks and provides the foundation for a Zero Trust security strategy. A modern identity solution can also help you tie the complexities of protecting people and assets together in a seamless way.

Join this session to learn:
 - How to enable and secure your workforce
 - How identity can lay the foundation for any Zero Trust security initiative
 - How identity fits into a larger ecosystem and supports a more robust security posture

Approaching Security with an Identity-First Mindset

According to Foundry, formerly IDG Communications, 92% of organizations currently host some or all of their mission critical applications and IT footprint in the cloud. But cloud environments continue to face a myriad of security threats including misconfiguration, lack of visibility, identity and unauthorized access.

In this panel discussion moderated by Clarify360's Jo Peterson, tune into hear leading experts focus on specific takeaways that you and your team can put in place to now to ensure your cloud footprint is secure for the upcoming year. 
- Cloud security roadmap;
- Cloud security posture management; 
- Zero trust network access (ZTNA);
- SDLC and DevSecOps within the cloud;
- The need for centralized platforms;
- Increased investment in intelligent security;
- Increased investment in certification and cross training of your team.

Panelists:
Teena Piccone (Google) 
Iain Clarke (PayPal Invest)
Charles Johnson (Coalfire) 
Stan Davidson (SonicWall)

Secure Your Cloud Footprint in 2023

An effective cloud security strategy can be an elusive and challenging goal to reach. Tune into this session to hear CDS Defence & Security's Martin Nash discuss PAGODA, a self-styled approach to implement a cloud security strategy. 

PAGODA is an acronym standing for:
- Principles 
- Assets
- Governance 
- Operations
- Data 
- Access 

This self-styled, tailorable approach to building a cloud security strategy is simple and easy to remember and will ensure that key principles are considered. Attendees will come away from this session with a template on how to build their own cloud security strategy or an option to measure their existing one.

Enable your cloud security strategy by building a PAGODA

Organizations are adopting cloud strategies at a rapid pace to scale infrastructure demands, onboard new applications, and provide flexibility to software development teams, among many other use cases. But this brings up challenges for security teams who are responsible for managing security risk and meeting compliance regulations for workloads and applications running in environments outside of their direct control. In this session, ESG Senior Analyst Melinda Marks explores the cloud security priorities your organizations needs to focus on for 2023 and the defenses you should consider putting in place.

Get Your Cloud Security Strategy Ready for 2023

360° Cloud Security for 2023

Join Bob West, Chief Security Officer at Prisma Cloud, to learn about how Prisma® Cloud can address the cloud threats in your enterprise. This event explores how to operationalize the insights in the latest Unit 42 Cloud Threat Report.

Identity and Access Management: The First Line of Defense

Cloud

Enterprise Architecture

Palo Alto Networks

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Identity and Access Management: The First Line of Defense

Presented by

About this talk

Palo Alto Networks