Name: “Delivering real organisational change to meet the needs of ISO27001”
Start: 2014-09-24T11:30:00Z
End: 2014-09-24T11:30:28.000Z
Location: BrightTALK
Rating: 3.67

MetaCompliance is a cyber security and compliance organisation that helps transform your company culture and safeguard your data and values. We create state-of-the art eLearning, GDPR, policy management, incident management and phishing solutions that our clients trust to help them create a better relationship with employees and regulators.

In today's digital age, where threats evolve at a pace like never before, the importance of cyber attack simulations is paramount. They serve as crucial tools for organisations to proactively discover vulnerabilities, enhance their incident response strategies, and fortify defences against emerging cyber threats.

Join us for our upcoming webcast, 'Conducting Effective Cyber Attack Simulations,' where we delve into the crucial aspects of attack simulation and incident management in today's rapidly evolving digital landscape.

During this webcast, we will explore the following key topics:
• Understanding the importance of attack simulations
• Unveiling the intricacies of authentic attack simulations
• Building the foundation for success
• The role of ongoing cyber awareness training
• Practical insights into conducting table-top exercises

Conducting Effective Cyber Attack Simulations

Cyber Security Awareness Month, celebrated every October, helps to highlight the importance of cyber security and the collective effort required to prevent cyber attacks.

However, a month-long initiative is not enough to make a real, long-lasting impact on staff security behaviours. 

Our upcoming webcast, ‘Best Practice for Cyber Security Awareness Month’, explores how organisations can make the most of Cyber Security Awareness Month and keep security top of mind all year round. 

This 40-minute webcast will discuss:
• Cyber fatigue and the difficulty of engaging users
• Tips for planning Cyber Security Awareness Month
• Maintaining momentum and employee engagement throughout the year
• Ongoing cyber awareness certifications
• Thinking outside the box when it comes to cyber initiatives

Best Practice for Cyber Security Awareness Month

Verizon's 2023 DBIR reveals that, 74% of all breaches involve the human element. As technology advances, cybercriminals are shifting their focus from exploiting system vulnerabilities to targeting human ones.

Our upcoming webcast, 'Hacking 101: Mitigating Human Vulnerabilities,' delves into why humans are often labelled as the 'weak link' in an organisation's cyber security and shares effective strategies to bolster this risk. 

This 50-minute webcast will discuss:
• Real-world examples of how human vulnerabilities are exploited. 
• The power of personalised Security Awareness Training.
• Securing C-Suite buy-in for cyber awareness campaigns.
• Are humans truly the weakest link in cyber security?

Hacking 101: Mitigating Human Vulnerabilities

Cyber attacks are becoming increasingly sophisticated and frequent, making it critical to adopt a proactive approach to cyber security.  

Join our upcoming webcast, ‘How to Make Offensive Security your Cyber Defence Superpower’ and explore how you can identify and remediate security vulnerabilities before they can be exploited by attackers. 

During this 45-minute webcast, we’ll cover:
• Understanding the concept of offensive security and why it’s crucial for cyber security.
• How to integrate offensive security to bolster your defence against threats. 
• The often-overlooked importance of physical security.

How to Make Offensive Security your Cyber Defence Superpower

Privileged Accounts = Targeted Accounts.

Once compromised, these privileged credentials give hackers the "keys to the kingdom," allowing them to gain access to your most sensitive and critical information.

Join our upcoming webcast, ‘Privileged User Awareness: The Keys to the Kingdom’ and learn the steps you can take to secure privileged user accounts and mitigate risks. 

During this 45-minute session, we will cover:
• The problem with privileged user accounts
• How cybercriminals target and exploit privileged users 
• The steps organisations can take to mitigate risks

Privileged User Awareness: The Keys to the Kingdom

83% of organisations fail to deliver cyber security training that engages employees.

Employee engagement determines the success or failure of a cyber security training program. Without engagement, organisations cannot build a robust culture where security is front of mind.

Join us on our upcoming webcast, 'Level Up Your Cyber Security Training with Netflix Style E-Learning', and explore MetaCompliance’s latest eLearning series, Cyber Police, and the power of storytelling in enhancing employee engagement in cyber security education.

Level Up Your Cyber Security Training with Netflix Style E-Learning

The speed at which technology and cybercrime rapidly evolve makes it increasingly difficult for organisations to remain cyber-secure and compliant. 

Consequently, the need to implement effective Information Security frameworks has heightened. With these frameworks in place, organisations can define the processes and procedures to assess, monitor, and mitigate cyber risk. 

Our upcoming webcast, ‘Business Benefits of Information Security Frameworks’, explores the business value of Information Security frameworks and how to build a robust cyber security strategy. 

This 45-minute webcast will discuss:
• The why and what of standards, regulations, policies, and frameworks
• Business benefits associated with Information Security frameworks 
• Pitfalls to watch out for when engaging with Information Security frameworks
• How to best approach ISO 27001 certifications

Business Benefits on Information Security Frameworks

In today’s complex business environment, organisations need to be able to respond rapidly to any changes and adapt policies where necessary. The only way to adapt to the dynamic, disrupted, and distributed nature of business is to be agile.

This requires organisations to have an agile policy management program in place so they can react quickly to changes in risks, regulations, strategy, processes, roles, and responsibilities.

An effective policy management program will provide a framework of governance, identify risks, define compliance, and play a crucial role in organisational success. It should also engage staff and clarify the standards of what is expected of them.

The 40-minute webcast will explore:
• How to monitor the internal and external environment for changes that impact policy.
• Key steps to defining a policy management program that is agile and dynamic to the needs of the business.
• Engaging employees on policies to ensure they know what is expected of them.
• How to ensure policies are being followed and aligned with the needs of the business.

Key Steps to Implementing an Agile Policy Management Program

Whether accidentally or deliberately, employees can put organisations at significant risk of a cyber attack. The task of defending against such threats is difficult because insider threats are often difficult to detect. 

The pandemic and the shift to remote working have contributed to the growing rate of insider threats in recent years and will continue to be an ongoing challenge for organisations. 

Our upcoming webcast ‘Insider Threats: The Dangers Within’ explores the types of insider threats that can impact your organisation and how to protect against risky employee behaviors from the careless to the malicious.

This 45-minute webinar will discuss:
• Internal threats versus external threats
• Types of insider threats and their motivating factors
• The risks that insiders pose
• How to protect your organisation by detecting, deterring, and disrupting insider threats

Insider Threats: The Dangers Within

Social engineering takes many forms, but email continues to be the most attractive attack vector for hackers to get a footing into our personal and professional lives.

In our upcoming webcast, "Could Social Engineering Exist Without Email," we will examine why email remains a favored target for malicious attacks and explore ways for organisations to fortify their defences.

During this 45-minute webcast, we will cover:
• The story of social engineer and email prankster, James Linton.
• The reasons why email is a prime target for exploitation.
• Best practices for conducting phishing simulations and avoiding a shame culture.
• Strategies for creating effective email awareness campaigns that engages users.

Could Social Engineering Exist Without Email?

The effectiveness of a Security Awareness Training program in ultimately depends upon improving the security behaviours of staff. 

However, security training alone will not change employee behaviours. Until and unless awareness training affects how staff feel about the need to secure information, and their security instincts, organisations will continue to be vulnerable to cyber risk. 

Our upcoming webcast ‘Beyond Awareness Training: Cultivating A Security Culture’ explores why organisations must go beyond awareness training and instil a security mindset that transforms staff into their frontline defence against cyber attacks. 

This 45-minute webcast will discuss:
• Changing how staff perceive, think, and feel about information security
• Ingraining default security behaviours that point staff towards the right course of action
• Understanding the “why” and communicating this across the board
• Embedding a security subculture into the organisational culture
• Knowing your audience and making culture-change stick

Beyond Awareness Training: Cultivating a Security Culture

Our smartphones are always an arm’s length away, but how aware are we of the security risks they pose?

Smartphones are a portal into our increasingly digital-first lives. Should they fall into the wrong hands, they’re a potential treasure trove of information. 

Our upcoming webcast, ‘Get Smart about Smartphone Cyber Security’, explores the cyber risks posed by smartphones and how to mitigate against them.

This 45-minute webcast will discuss:
• The impact smartphones have had on our lives 
• How smartphones have evolved to become a significant risk vector 
• The cyber risks smartphones potentially pose
• How organisations can minimise smartphone security threats

Get Smart about Smartphone Cyber Security

Despite the ongoing threat of cyber attacks, security awareness training remains a major challenge for management teams.

Identifying what training needs to be delivered, who needs to be trained and a lack of employee engagement are all common obstacles that organisations face when it comes to implementing security awareness training. 

As every organisation knows, change management is notoriously difficult. The best security awareness programs approach the task in the same way as other organisational change projects. Change isn’t a given; it takes time and effort.

The reality is cyber security can be a dry topic. As such, it’s vital you find ways to engage your staff if you want to positively impact behaviour within your organisation, raise awareness of cyber security threats, and embed a culture of compliance.

This 40 minute webcast will explore:
-How to implement staff security training that maintains momentum and encourages engagement
-The importance of getting buy-in in the boardroom
-Tailoring cyber security awareness training for your audience
-Using storytelling to breathe life into your cyber security awareness campaign

The Realities of Getting Staff Security Training Right

C-suite engagement is essential to embed the culture and tone necessary for effective cyber risk management. Despite the reality that cyber attacks are evolving and becoming more complex, making cyber security a C-level priority is no easy endeavour. 

Our upcoming webcast, ‘The Reality of Securing C-Suite Support for Human Security’, explores the challenges with leadership support in cyber security, and the approach to gain buy-in at an executive level. 

This 40-minute webcast will discuss:
• Why buy-in from the top is important for security awareness program success
• Challenges in engaging and maintaining leadership participation
• Tips and tricks to make senior management see the benefit of robust cyber security programs

Todd Wade is a Chief Information Security Officer for Fintech / Technology companies, with 20+ years’ experience in all things cyber security, technology and risk. 

Author of Cybercrime: Protecting your business, your family and yourself.

The Reality of Securing C-Suite Support for Human Security

The coronavirus pandemic has triggered a new era that now sees organisations, employees and the public embracing information technology more than ever before. Technology has become an indispensable part of our lives, facilitating everything from the way business is conducted to staying in touch with friends and family.

With entire workforces working from home (WFH) and supply chains morphing to accommodate the new situation, the uncertainty of the Covid-19 crisis has created a fertile environment for cybercriminals to inflict crippling consequences.

Join award-winning Cyber Security thought leader and Cyber Security Awareness For Dummies author, Robert O’Brien as he offers a best practice approach to tackling staff awareness campaigns and improving employee security behaviours.

In this webinar we will cover:

• The modern Cyber Security landscape and secure working from home challenges
• Determining what Cyber Security awareness means for your organisation
• The challenges of changing organisational security culture
• The importance of policies to establish safe baselines
• How to set up a staff awareness program
• Top 10 cyber awareness tips

Cyber Security Awareness for Dummies

Despite increased investment in cyber security initiatives, organisations continue to be impacted by cyber attacks. Almost all successful breaches share one variable in common: human error. The reality is organisations face a very real danger of threat from within.

Against the backdrop of a complex cyber threat landscape, the insider threat has intensified as working practices have evolved and cybercriminals launch increasingly sophisticated attacks.

The mitigation of human-born error is key to reducing cyber risk in an organisation and a proactive approach to prevent employee-related threats has never been more important.

Our upcoming webcast titled, ‘Cyber Security: Is the Nightmare Between the Chair and the Keyboard?’, explores the human dimension to cyber vulnerabilities and solving cyber security’s people problem. 

This 40-minute webinar will discuss:
• Why people are at the centre of cyber security threats
• How hackers exploit people for their own gain
• Tactics to improve employee engagement in Security Awareness Training
• The CISO’s challenge in creating a cyber secure workforce

Cyber Security: Is the Nightmare Between the Chair and the Keyboard?

ISO27001 is on the agenda of most modern organisations. Obviously it’s an initiative that involves People, Processes and Technology, otherwise known as a Change Management Project. 

This webinar provided by security experts Coalfire and Metacompliance will examine the challenges surrounding the implementation of ISO27001 and in particular those issues involving the people aspect. The panel will provide real life examples of how inertia can be overcome and outline activities that can lead to real change and a successful project.

“Delivering real organisational change to meet the needs of ISO27001”

IT SECURITY

ISO27001

Cybersecurity

ITGRC

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful learning and development insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge in the field.

Learning and Development

Human resources is intrinsically linked to business success and requires a thoughtful balance of a variety of complex issues. The human resources community on BrightTALK is made up of thousands of professionals in human resources exchanging human resources best practices and advice. Watch hundreds of on-demand webinars for immediate information or participate in upcoming live webinars and have your questions answered by respected HR thought leaders.

Human Resources

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

“Delivering real organisational change to meet the needs of ISO27001”

Presented by

About this talk

More from this channel