Name: Response & Remediation best practices for Third Risk Management Program
Start: 2021-04-05T11:00:00Z
End: 2021-04-05T11:00:40.000Z
Location: BrightTALK
Rating: 0

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Global enterprises, governments, and organizations rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. When unrelenting market pressure pushes organizations to uncertainty and caution, they turn to Bitsight to confidently navigate cyber risk and grow with confidence.

Bitsight’s universally recognized risk standard and market-leading data provides actionable insights into how companies set and manage to standards and report results to internal and external stakeholders. Built on over a decade of technological innovation, Bitsight’s integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis. 

Bitsight is on a mission to free the global economy from the material impact of cyber incidents. For more information, visit bitsight.com.

No company is an island anymore, and enterprises typically have hundreds and even thousands of vendors. To complicate the matrix of interconnectivity, most companies are themselves within the supply chain, or at a minimum, clients for businesses, including cyber insurers. Organizations struggle to understand the risks within their supply chain because of a lack of transparency beyond their own organization, and often don’t have a good sense of their own security posture or the effectiveness of their controls.
In this session, join Chris Poulin, Director of Technology and Strategy and Deputy CTO at Bitsight, to learn how to:
• Assess the security program and controls of your vendors using observable data;
• Manage your cybersecurity reputation as a competitive advantage;
• Right-size your insurance limits and premiums.

Glass Doors Make Everyone More Secure

Les attaques via la supply chain étant devenues de plus en plus fréquentes au cours des dernières années, les organisations doivent mettre leurs tiers sous les feux de la rampe afin de prévenir les attaques et d'améliorer leur propre position en matière de cybersécurité. L'augmentation des piratages de tiers montre à quel point il est important d'avoir une visibilité sur l'ensemble de la chaîne d'approvisionnement - y compris les fournisseurs des fournisseurs - et d'en atténuer les risques.

Rejoignez-nous pour une présentation des bonnes pratiques de gestion du risque tiers dans la cyber, y compris :
- Un retour sur quelques scénarios types récents et les leçons que l'on peut en tirer
- La mise en place de workflow automatisé d'évaluation et de questionnaires pour gérer efficacement ce risque à grande échelle.
- Pour aller plus loin : des outils pour aider la réponse à incident sur la supply chain

Bonnes pratiques pour préparer et sécuriser votre supply chain

In today’s economic environment, nearly every department in every organization across the globe is being challenged to do more with less. Meanwhile, digital footprints continue to grow and sprawl and cyber attackers look to take advantage of vulnerable infrastructure. Organizations need to assess how they can be more resourceful as they look to maintain a best-in-class cyber risk program and continue to meet business expectations. 

The first step to managing your cyber risk program is to have full visibility of your organization’s extended attack surface and the risk that comes with it. And, you need the ability to communicate your strategy and program performance to stakeholders like the Board – this is more important than ever with the adoption of new SEC Regulations.

Join Gregory Keshian and Vanessa Jankowski as they dive into:
● How to maximize the value of your organization’s current tools while fending off cyber threats
● How continuously monitoring your extended attack surface can help identify priorities to reduce exposure and secure your infrastructure
● The importance of communicating effectively with the Board and how to speak their language
● Driving accountability both internally and externally, and how recent changes to SEC regulations may have an impact

Optimizing Returns from Your Cyber Risk Program

Upcoming regulations like DORA, PS21/3, and NIS2 are not mere compliance checkboxes—they represent a seismic shift in how we safeguard our digital economy. Join us as we uncover how these directives reach far beyond your organisation's boundaries, extending the protective umbrella over your entire supply chain. You will gain insights, strategies, and a renewed perspective on how compliance can be a stepping stone towards organisational resilience and success.

Join us to learn more about:
- What changes in these regulations;
- What processes does it impact;
- Why should you care;
- How can that benefit you; 
- How can you leverage the regulations to make cyber risk a business conversation?

Is your organisation ready for the new cyber regulations in the EU and the UK?

Changes in the cyber risk landscape have led to an increase in vulnerabilities affecting the digital supply chain and an elevated level of scrutiny from business leaders, regulators, and other influencers.

Zero-days reflect a specific type of vulnerabilities within this broader trend, and one that often comes with high demands on cyber security and third-party risk management teams. The reason is clear – for these vulnerabilities, organizations have had “zero days” to work on a patch or a fix, which leaves them open to exploitation by motivated bad actors.

At Bitsight, our goal is always to provide timely, actionable evidence for customers dealing with zero-day vulnerabilities.

Join us to learn more about: 
- How to detect, manage and mitigate vulnerabilities with speed;
- Exposure management across your portfolio;
- How to scale and improve your response to vulnerabilities across your supply chain.

Improving Vulnerability Detection and Response Across your Supply Chain

Cybersecurity leaders face various challenges in protecting their organization's digital assets from cyber threats. With the rise in cloud infrastructure, internet-connected devices, and third-party vendors, the attack surface has expanded, and the number of vulnerabilities and risks has increased dramatically. This has led to enormous pressure from stakeholders, including executives, board members, customers, business partners, regulators, insurers, and investors, to ensure the organization's protection.

Despite the risks, recent BitSight research revealed that the average vulnerability remediation rate is only 5 percent per month, which is concerning given the criticality of vulnerability management in reducing the likelihood of a cyber incident.

During this session, we'll explore these key issues: 

● The current cybersecurity landscape 
● How cybersecurity leaders can improve awareness of their organization's digital assets and risks 
● How to strengthen vulnerability and exposure management programs 
● Creating trust among critical internal and external stakeholders. 

Join BitSight’s Vice President of Government Affairs, Jacob Olcott, as he shares innovative and comprehensive solutions that can help cybersecurity leaders identify their attack surface, enhance their vulnerability management programs, and communicate their success to stakeholders effectively.
Don't miss this opportunity to gain valuable insights and strategies to reduce organizational risk and foster a culture of trust in an insecure world.

Creating Trust in an Insecure World: Strategies for CISOs

BitSight’s research team works tirelessly to discover vulnerabilities that pose threats to organizations. Most recently, Pedro Umbelino, Principal Security Researcher at BitSight, uncovered thousands of organizations using internet-facing and exposed webcams. His findings? One in 12 BitSight-tracked organizations with internet-facing webcams and/or similar devices are susceptible to video and/or audio compromise. 

An exclusive Tech Talk where Pedro will discuss: 
● Our webcam vulnerability research - his approach and findings 
● Its potential risks and consequences, and 
● How organizations can better protect themselves.

Tech Talk: Decoding the Latest Research with Bitsight

A new set of Regulations is being implemented around Europe and UK, bringing a consistent, harmonised regulatory approach that is affecting specifically (but not only) the Financial industry and the Information and Communications Technology (ICT) entities deemed critical due to their pivotal role in today’s digital economy.

The goal is to reinforce the EU and UK digital economy with operational resilience. However, many companies need help finding themselves lost in translation as they see this new mandatory compliance wave coming their way.

Join us to learn more about:
- How the new regulations build on top of previous ones (that you may already be compliant with);
- What changes with the new regulations;
- What processes are impacted; 
- When will you need to be ready?

A recap on DORA,  PS21/3 Regulations on Cyber Resilience and what to expect next

Did you know that 69% of organizations have experienced some type of cyber attack in which the attack itself started through the exploit of an unknown, unmanaged, or poorly managed internet-facing asset?

Understanding the scope of your organization’s external attack surface is essential. You need to continuously manage your digital footprint to know where risks exist and how to prioritize vulnerable areas. Gain visibility into what an attacker sees and take informed action to reduce exposure and empower your organization’s growth and success.

In this webinar, you will learn how to:
● Identify and assess your evolving attack surface 
● Prioritize and remediate vulnerable areas of infrastructure
● Monitor your digital footprint and protect for the future

Identifying Blind Spots Through External Attack Surface Management

The constant threat of cyber attacks can create a challenging situation for organizations looking to effectively prioritize their defenses with limited resources.
Watch this webinar diving into a recent study highlighting the 14 BitSight analytics that are significantly correlated with cybersecurity incidents.
You will learn:
● What the 14 BitSight analytics are, which significantly correlated with cybersecurity incidents;
● Recommendations to improve programmatic areas in your cybersecurity strategy;
● Performance areas to prioritize to achieve better cyber insurance coverage and terms.

How to Unlock the Power of Data for Improved Cybersecurity Decision-Making

With the current economic climate and the trend of an ever-expanding digital supply chain, risk leaders need to strengthen their vendor risk management and make critical decisions around the best use of resources and talent.

Join us on Wednesday, May 31 at 4:30 PM WEST for a replay conversation with our experts Lauren Rigby and Henry Myllymaa, Director and Manager of the Advisory team at Bitsight. Lauren and Henry have both worked with hundreds of risk leaders to help bring their VRM program up to speed and uplevel it so they can focus on more strategic initiatives.

Together they will share their knowledge on best practices tailored to industry needs, as well as how to navigate through: 
- Talent shortage
- Backlog of vendors
- Delay of deployment

Uplevel Your VRM Program Against Recession and Resource Restraints

A medida que las organizaciones amplían su huella digital, se enfrentan a una serie de retos más complejos, dado el creciente número de amenazas a la ciberseguridad y el volumen de ataques que aparecen a diario en las noticias. Esto crea la necesidad de una gestión superior de los riesgos de ciberseguridad que pueda ayudarles en esta misión cada vez más difícil de gestionar su postura ante los riesgos cibernéticos. Sin embargo, pueden centrarse en innovar e impulsar el crecimiento del negocio haciéndolo de forma más eficaz.
 
La gestión de riesgos cibernéticos es clave para ayudar a mejorar drásticamente su programa de seguridad cibernética, trabajando así como un facilitador de crecimiento y diferenciación competitiva entre los pares de la industria de sus orgs. Sin embargo, requiere el uso de las herramientas adecuadas para hacerlo menos complejo y más exitoso.
 
Únase a nosotros en este seminario web para obtener más información sobre cómo:
- Desarrollar controles de seguridad eficaces en toda su huella digital ampliada
- Medir la eficacia de los controles en múltiples unidades de negocio
- Aprovechar el análisis prescriptivo y la matriz de riesgos de activos para priorizar las decisiones.
- Definir la estructura jerárquica de su organización para gestionar de forma más eficiente el riesgo cibernético.

Garantizar el rendimiento de los controles de seguridad en toda la organización

What are the major cybersecurity trends for 2023? How can security leaders adapt their programs and increase their levels of preparedness? Join this discussion to dive into what our experts saw in 2022 and how they think this will impact risk management strategies in the current year, including:
- What are the major security trends for 2023?
- How is artificial intelligence impacting the industry?
- What is the most effective way to report to the board?

Speakers:
Derek Vadala - Chief Risk Officer, BitSight;
Jake Olcott - VP of Communications and Government Affairs, BitSight;
Zach Tisher - VP of Security Risk, Strategy, & Communications, Equifax, Inc.

2023 Outlook: Cybersecurity Trends and CISO Priorities

Cybersecurity risk is evolving in novel ways, with growing potential to cause significant economic disruption and financial losses as attackers become more sophisticated and businesses become more interconnected. Recent analysis from Moody’s highlights the risk: $22 trillion in global rated debt has “High” or “Very High” cyber risk exposure.

What are the major cybersecurity trends for 2023? How can security leaders adapt their programs and increase their levels of preparedness? How will financial markets incorporate cyber risk into investment and credit decisions?
Join our webinar on January 20th, at 11am to hear insights from Moody’s analysts and BitSight’s cyber risk experts as they discuss their latest research and look ahead to 2023:
• Key takeaways regarding the latest Moody’s research featuring BitSight data, including factors contributing to increased cyber risk in markets, sectors, and regions with the highest cyber risk levels;
• Future of ransomware attacks;
• Potential impact of new regulations like the Securities and Exchange Commission’s cyber incident disclosure requirements;
• Evolution of cyber insurance;
• Quantifying losses from cyber incidents.

Speakers: 
Derek Vadala - Chief Risk Officer BitSight; 
Jim Hempstead - Managing Director Moody's Investors Service; 
Leroy Terrelonge - VP Senior Analyst, Cyber Risk Group Moody's Investor Service

Cybersecurity Trends 2023: Latest Research & Key Risk Contributors

La gestión eficaz de la seguridad y el riesgo es obligatoria independientemente del sector o el tamaño de la empresa. Las organizaciones grandes y pequeñas de todos los sectores sólo pueden superar los crecientes retos cibernéticos impuestos a su huella digital mediante la creación y el aprovechamiento de un sólido programa de ciberseguridad, en el que la adopción de estrategias de gestión de riesgos cibernéticos y de garantía efectiva son fundamentales para el éxito. 

La gestión del rendimiento de la seguridad permite a todas las empresas alcanzar estos objetivos ayudando a desarrollar controles de seguridad eficaces en toda la organización e informar a la junta directiva y a otras partes interesadas del rendimiento eficaz del programa para inspirar confianza, sin utilizar terminología técnica.

Únase a nosotros en este webinar para aprender más sobre cómo:

- Integrar BitSight en un proceso de gestión de incidentes
- Aprovechar el potencial de la integración y automatización de herramientas
- Utilizar BitSight frente a un escáner de vulnerabilidades
- Crear informes que todos los interesados puedan entender

Aumentar la resiliencia digital con la gestión de riesgos cibernéticos

As organisations realise that being exposed to cyber risk is an inevitable part of doing business today, security leaders are being pressed to effectively plan and manage cyber security programs. The process often includes executing policies and procedures defined by the Governance team to implement controls, prioritise remediation, and respond to incidents. However, the organisational hierarchy can be rather complex, leading to numerous challenges in driving accountability across the business.

Organisations are looking into setting a uniform standard for their cyber security programs that can sit across the entire structure. Still, they first need to determine what standard is appropriate and find a way to measure performance against it consistently. With Cyber Risk Governance, they can define the guidelines for how the organisation manages cybersecurity - but the rather complex organisational hierarchy in some extended businesses can lead to numerous challenges for driving accountability across the company.

Join us in this webinar to know more about driving accountability with Cyber Risk Governance in more detail, as we target topics such as:
- The different options for setting standards, and ideas for implementation
- How Cyber Risk Quantification can be applied to drive accountability
- How to incorporate benchmarking and peer comparisons into your standards

Extender la Responsabilidad mejorando la Gobernabilidad del Riesgo Cibernético

How to drive the efficiency of conversations with more level of engagement, and making the conversation more focused and align? In this webinar, we will demonstrate how can companies improve Third-party Risk through Collaboration and showcase the new capabilities to continue the collaboration workstream. We will end the session with some best practices for collaboration.

AGENDA:
1 - Improving Third-party Risk Throughout Collaboration 
1.1 - BitSight’s new remediation Workflow
2- New Capabilities
2.1 - Continuous and proactive collaboration workstream 
2.2 - Improvements  on the platform to give the users the capabilities to support the continuous and proactive workstream?
2.3 - New feature - Define Collaboration Outcomes with the EVA Reason 
2.4 - New feature - Align Conversations with Message & Items for Review 
2.5 - New feature -  Collaborate and Document conclusions (Collaborate Outbox) 
3 - Best practices for collaboration 
3.1 - Foundation of the collaboration 
3.2 - Establish continuous and proactive collaborate workstream

Response & Remediation best practices for Third Risk Management Program

Cyber Risk Management

Cyber Security

Information Risk

Risk Management

Security

Security Performance

Security Performance Management

Security Ratings

Third Party Risk

Third-Party Risk Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Response & Remediation best practices for Third Risk Management Program

Presented by

About this talk

More from this channel