Name: Shooting Phish in a Barrel
Start: 2020-04-24T11:00:00Z
End: 2020-04-24T11:43:04.000Z
Location: BrightTALK
Rating: 3

Our channel is aimed to give you the full picture.  We will educate you on current topics of interest with the Editor of IT Security Guru hosting the webcasts, Dan Raywood.  Guest speakers will join in on the debates with their own expert view and no intention of keeping it to themselves. Our aim is to give you all the information you need, for you to be able to come to your own conclusion.

http://itsecurityguru.org/

In the past few years, Insider Threat has evolved in several aspects from how sensitive data leaves the organization to ways in which privilege access gets misused, creating risks for organizations to mitigate. The proliferation of cloud applications had made tracking and protecting sensitive data extremely challenging. Add to this the current remote work setup in the midst of COVID-19, and one can imagine how hard it is to track, monitor, and protect your crown jewels. 

Insider threats can originate from malicious insiders or insiders that are simply negligent and do not follow best practices. Insider threats can also originate from compromised accounts that are controlled by an outsider. Given all the scenarios, monitoring solutions are forced to curate use cases in conjunction with purpose-built detection techniques in order to derive specific outcomes to be effective in detecting infractions.   

This shift in behavior is becoming more evident as organizations ramp up visibility into how its employees and contractors use their assets and resources over time. Join Shareth Ben (Executive Director, Insider Threat &Cyber Threat Analytics, Securonix) and featured speaker Joseph Blankenship (Vice President, Research Director, Security & Risk, Forrester) to gain some insights into:

•	How Insider Threat has evolved over time and the new challenges it presents.
•	What are some of the most common Insider Threat behaviors observed in the field?
•	Which detection techniques are effective in detecting nefarious behaviors within the organization?
•	Walkthrough of the key trends and observations from the Securonix 2020 Insider Threat Report.

Protecting Against Insider Threat in 2020

With employees accessing sensitive business data from mobile devices, many organizations deploy mobile device management (MDM) believing this protects them from cybersecurity threats. Your mobile employees are now prime targets for phishing, application, and other threats that management tools cannot protect against. Learn how to protect your users, your corporate data, and your organization from the latest cybersecurity threats. 

Attend this webinar to learn about:
-The strengths and weaknesses of mobile device management (MDM).
-What threats mobile management tools are blind to. 
-How to apply dynamic security protections for all mobile users of cloud data.

Why managing your mobile endpoints is not securing your mobile endpoints

Reaching out with important messages, in a world where message communication is regarded with scepticism.

Cutting through the noise: smart communication for smart FIs.

Today, operational technology (OT) and industrial systems are an important element of modern life. From product manufacturing through to oil, gas and transport networks computer-controlled processes and operations reduce costs and improve productivity.  

Managing these assets to ensure better availability and output is a tough challenge, and balancing this with changing business requirements, governance, risk and compliance (GRC) issues makes it even harder.   

Unfortunately, these systems are now facing another challenge – the increasing threat from hackers, hacktivists and nation-states. Safety critical controls are also being targeted, and if these are compromised serious damage and injuries could be the end result. 

Although there is an ever-growing threat of cybersecurity events and incidents impacting OT systems many organisations have not yet run a comprehensive risk assessment for these systems. In fact, in a survey conducted by TUV Rheinland in 2019, 74% of respondents had either never conducted a cybersecurity risk review of their OT systems or were unaware if such a risk review had been completed.  

During this panel-based webinar, experts from TUV Rheinland and 2MC will discuss in detail:  

- How the role of GRC has a significant part to play in many OT deployments 

- By coupling real-time monitoring with a risk-based mindset, underpinned by a governance, risk and compliance approach, an operator of OT equipment can embrace cybersecurity challenges 

- How crucial risk assessments need not be overly time consuming or complex 

- How production assets can be safely utilised in response to ever-changing business demands

Industrial Cybersecurity - Managing Your Business Risk

Eoin Keary CEO and founder of Edgescan, and Rahim Jina, COO, will explain how to nail down the fundamentals of vulnerability management in the age of digital transformation. As organisations' attack surface is wider than it has ever been, the Edgescan team will present  clear and actionable data to inform a cybersecurity strategy that keeps pace with change. 

Chaired by Yvonne Eskenzi. the webinar will also provide an overview of the most common vulnerabilities detected by Edgescan's team over the course of last year, and will highlight the problems with how we currently think about patch management and vulnerability scanning.

Vulnerability Management Explained: the Stats You Need to Beat Cybercriminals

Hosted by Simon Roe, Product Manager, Application Security at Outpost24, this webinar will delve into the limitations of CVSS, the go-to risk score for vulnerability management, to prevent security teams from drowning in network vulnerabilities. By examining risk-based prioritization in detail including data and analysis, Simon will inform listeners on how to determine the risk of a vulnerability to help prioritize and make better-informed decisions for remediation. He will then conclude with the benefits of an efficient predictive risk-based approach which can make patching vulnerabilities more manageable and streamlining remediation through automation and orchestration.

The good, the bad and the ugly: The limitations of CVSS

Multinational brands must adhere to different data governance standards and regulations of the regions and countries they do business in. For brands that operate multiple websites, applications and other properties, having siloed data warehouses with disparate policies creates inefficiencies, poor user experiences and legal vulnerabilities.

To tackle these challenges, leading brands are investing in a global data governance policy that centralizes customer identity data, universally manages personally identifiable information (PII) across applications, and creates a self-service workflow for data subjects to manage their communication preferences and data.

Watch this webinar featuring Janrain VP of Solutions Engineering & Services, Martijn Loderus, who has supported leading brands in implementing global data governance policies with customer identity and access management (CIAM) at the core. He recently helped prepare clients for the Global Data Protection Regulation (GDPR) and will share case studies from those experiences

What you’ll learn:
The cross functional business impact of identity data governance in today’s landscape
Best practices to retain seamless customer experiences while ensuring compliance
How CIAM works in regards to policy management
The short- and long-term benefits of a global identity data governance policy
Who should attend?
Business leaders from information security, IT, legal and marketing teams

Operationalize a Global Identity Data Governance Policy

In this session, we’ll look at some of the characteristics that make a cyber-security personality – they don’t always need to follow convention. Brian Higgins from ISC2 will chair the event as we hear from the National Autistic Society, Thomas who is visually impaired and getting his start up off the ground and Tania a computing teacher for neuro diverse young people.

Speakers include: Brian Higgins, Business Development Manager at (ISC)²; Cath Legget, National Autistic Society; Thomas Seidling, relationship manager at Cyber Smart and Tania Brooks, computing teacher.

Neuro Diversity in the Cyber Security Industry

session will look at how employers are going about recruiting people creatively and what they’re doing to find the right talent and what incentives they’re putting in place to retain and grow their current staff.

Speakers include: Shan Lee, Information Security Officer at TransferWise, Vicki Gavin, Head of Business Continuity and Information Security at the Economist Group; Ryan Farmer, Delivery Manager, Acumin Consulting; Emily Swiatek, National Autistic Society and James Hadley, Founder/CEO of Immersive Labs.

Creative Employment in Cyber Security

Ransomware presents some unique challenges to organizations, regardless of the size, industry or geography. However, it has very distinct behavior relative to other kinds of malware. It actually tells you that an attack has taken place. From a defender's point of view, being alerted to an attack is far better than having it stay undetected in your systems. During this presentation, John Cloonan, head of products at Lastline, will review:
 
- Common elements of today's malware strains
- Effective strategies for combatting ransomware
- What malware defenders can learn from ransomware

Ransomware: How to strategically Fight it, Without Breaking the Bank

How could AI potentially save the cyber-security industry – Peter Warren, journalist and thought leader on AI, will chair this session on how AI should be in the interest and control of the people for the people – and how it will impact on businesses from a legal perspective.

Speakers include: Pete Warren, Chairman at Cyber Security Research Institute and Andrew Jones, Professor of Cyber Security at University of Hertfordshire.

Artificial Intelligence - how could it potentially help bridge the Cyber-skills

This session will look at what is available to make the UK an attractive place to start-up and grow a successful cyber-security company.  It will look at regional development grants for areas such as Wales, Bristol and Ireland as well as grants, accelerator programmes and other incentives available.Speakers include: Shane Wickramasuriya, Operations Manager, CyLon; David Howorth, Head of EMEA, AlertLogic; Andrew Mulvenna, founder of Brightpearl and Mike Spain, Operations Director, Cyber Growth Partnership.

Incentives to make the UK a hub for cyber-security companies

This first session will be based around the Global Workforce Study which shows the real numbers that expose the challenges facing UK companies in the wake of a global cyber-security shortfall. How can the UK become a haven for cyber-security and compete against the rest of the world for the best talent? What are the answers to building a viable, strong and competent cyber-security team? Is there enough being done to home-grow our own cyber-security workforce or will we need to talent from overseas and is that even possible with the challenges Brexit will bring?

Speakers include: Adrian Davis Managing Director, EMEA at (ISC)²; Ian Glover, President at CREST; Quentyn Taylor, Director of Information Security at Canon for Europe, Warwick Ashford, Security Editor at Computer Weekly.

The Cyber Skills Gap – The Challenge – Setting the Scene

A frank discussion about the risks of phishing, aggravated by the rise in remote working.

Hosted by Javvad Malik, Security Awareness Advocate at KnowBe4, this webinar will be examining the cybersecurity challenges of remote working. Specifically, drawing upon the KnowBe4 Benchmarking Report as well as the Q1 Phishing Report, Javvad will run listeners through an in-depth analysis of UK phishing trends. He will then end with his top tips on keeping cyber safe when working from home.

Shooting Phish in a Barrel

Phishing

Cybersecurity

Benchmarking Report

KnowBe4

Javvad Malik

Security Awareness

UK Phishing Trends

Top Tips

Remote Working

Work from Home

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Shooting Phish in a Barrel

Presented by

About this talk

More from this channel