Name: CISO Says: Interview with Ivan Holman, Group Information Security Officer, EWI
Start: 2016-11-07T12:00:00Z
End: 2016-11-07T13:00:56.000Z
Location: BrightTALK
Rating: 4.22

(ISC)² Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs

Cybersecurity professionals have endured many challenges this year, including record-setting ransomware attacks, expanded attack surfaces, and shortages of skilled IT security personnel. However, we’ve seen security budgets rebound, increased reliance on cloud security deployments, and increased adoption of promising security technologies, such as zero trust network access (ZTNA), API security, and network/endpoint deception.

So, what does next year have in store for the cybersecurity industry? Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he shares his top five cybersecurity predictions for 2023.

Top Five Cybersecurity Predictions for 2023

Many professions value and leverage pattern recognition and informed judgment based on limited information. While this is a huge strength for our employees, managers and practitioners, it could also lead to unconscious biases in our decisions making when it comes to day-to-day issues like hiring, mentoring, promoting, staffing, developing people, and engaging with clients. 

On October 24th at 1:00 p.m. Eastern/10:00 a.m. Pacific Cyversity and (ISC)² discuss Managing Bias, as part 3 of this 3-part Unconscious Bias Series. This webinar will share an engaging mix of insights, exercises, illustrations, activities, polls, and videos, will enable participants to understand their unconscious biases in a constructive manner to help obtain the highest level of inclusiveness and performance.

Unconscious Bias Series (Part 3): Managing Bias

Recruiting and retaining qualified IT security talent has never been more challenging. Seven in eight organizations are experiencing a shortfall, according to CyberEdge’s 2022 Cyberthreat Defense Report. This weighs heavily on the minds of IT security managers as ‘lack of skilled personnel’ is consistently rated as one of the top inhibitors to successfully defending networks against cyberthreats. So, what can smart security organizations do to mitigate the effects of this talent shortage? Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he:

- Examines the shortage of IT security personnel by job role
- Proposes creative ways for recruiting new security talent
- Suggests clever ways for retaining the talent you already have
- Identifies technologies and services that enable security teams to do more with less

Strategies for Recruiting and Retaining Top IT Security Talent

Many professions value and leverage pattern recognition and informed judgment based on limited information. While this is a huge strength for our employees, managers and practitioners, it could also lead to unconscious biases in our decisions making when it comes to day-to-day issues like hiring, mentoring, promoting, staffing, developing people, and engaging with clients. 

On September 21, 2022 at 1:00p.m. Eastern/10:00 a.m Pacific, Cyversity and (ISC)² present part 2 of this 3-part Unconscious Bias Series.  this webinar will share an engaging mix of insights, exercises, illustrations, activities, polls, and videos, will enable participants to identify their unconscious biases. Session participants will leave with specific understanding of the various types of biases we all have and how to diagnose them.

Unconscious Bias Series (Part 2): Identifying Bias

Vulnerability management has been a staple of security teams for decades. But if you haven’t noticed, this space has evolved considerably over the last half decade. Long gone are the days of lengthy, hard-to-digest vulnerability scanning reports often created to check the PCI compliance checkbox. These days, smart IT security teams are investing in risk-based vulnerability management (RBVM) technologies and best practices to help prioritize which vulnerabilities to remediate first based on a variety of internal and external factors. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he:

 - Recaps the evolution from VA, to VM, to RBVM
 - Defines key elements of modern-day RBVM solutions
 - Reviews internal and external factors to help prioritize vulnerability remediation
 - Describes what to look for when evaluating best-of-breed RBVM offerings
 - Summarizes the extraordinary benefits derived from RBVM deployments

The Evolution of Risk-based Vulnerability Management

More than seven in 10 organizations were victimized by successful ransomware attacks last year. These days, it’s more of a question of “when” than “if” your organization will be next. Are you ready? Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he reviews the latest ransomware statistics from the 2022 Cyberthreat Defense Report and describes what it takes to be prepared for the inevitable. Specifically, Steve will:

- Examine disturbing ransomware trends, by country and by industry
- Evaluate key factors that go into deciding whether to pay ransoms
- Outline ways to be prepared for a successful ransomware attack
- Review technologies to help give security teams the upper hand

Ransomware Deep Dive: Preparing for the Inevitable

After two years of virtual events, (ISC)² is excited to be back in person for our upcoming Security Congress conference. Join us for this webinar to learn everything you need to know about the upcoming event, taking place at Caesars Palace in Las Vegas, Nevada October 10-12. Hear from (ISC)² staff on what you can expect from the year’s best opportunity to earn CPE credits, network with colleagues, learn from experts and hear from dynamic keynote speakers.
 
(ISC)² Security Congress will also be available for virtual registration as well, so if you’re not able to join us in Las Vegas, you can still learn and connect from home! Be sure to join us live to ask your questions about the conference and engage with (ISC)² leadership.

Face to Face Again! Preview for (ISC)² Security Congress - October in Las Vegas

Join the Guide to Your (ISC)² Membership in EMEA webinar to learn more about these topics and others including:

- CPE opportunities, member benefits and getting involved
- Updates on (ISC)² news, developments and changes in your region
- Your membership requirements summarised
- Who are the (ISC)² EMEA team and how we can help you
- Focus discussions
- Q&A session

Guide to your (ISC)² Membership in EMEA: Benefits, Maintenance & Opportunities

Recent years have seen a massive shift in trends in the way we work. Cloud services and solutions have been adopted en masse, working from anywhere and everywhere has become a norm and multi-layered approaches to access control as a way of mitigating common vulnerabilities has become commonplace.  As exciting as they are, these new trends also pose important questions around security and business resilience. 
Join Duo Security and (ISC)² July 19, 2022 at 1:00 p.m., BST as we explore how to enable business resilience with a secure access strategy, covering people, processes and technology incorporating new trends such as Passwordless and in the future, the use of Digital Identities.

Discover methods to:
• Apply the appropriate level of trust when people or devices access corporate systems and applications.
• Maintain a great user experience whilst ensuring security isn’t compromised.
• Achieve business resilience, turning temporary fixes into future-proof measures.

Future-Proof Your Secure Access Strategy

Instead of looking at MITRE ATT&CK as a game of bingo, a handful of proven strategies can be used to get the most out of the framework.  As prevention opportunities and detection of attacks happen, organizations can address their most common threats using sound methods backed by data and research.

We will present a flexible framework utilizing openly available tools such as the MITRE ATT&CK Navigator, DeTT&CT, and Atomic Red Team combined with research to help your organization: 
• Use the MITRE ATT&CK Framework to its fullest capacity
• Use your existing tools and capabilities as data sources
• Understand what threats are real, the protections you have available, and where to invest in the future.

On July 12, 2022 join Tines and (ISC)²  at 1:00 p.m. BST as we discuss this timely topic.

Prepare to ATT&CK: Understand Your Visibility, Prevention & Detection Abilities

According to Verizon "2022 Data Breach Investigation Report," Web Application attacks are the number one vector in breaches. Moreover, Web Application Attacks Surged 740% in 2020, and API attacks peaked to 7 Billion, based on data monitored by CDNetwork.

The same challenges also apply to Cloud environments, where despite the availability of native security tools, misconfiguration, and human errors contribute increasing the risks of security incidents. Indeed, the dynamic nature of Cloud environments poses even a bigger threat: DevOps teams need to prioritize the release of newer functionalities in their applications and security needs to adapt and more importantly, need to be part of the full lifecycle of application development, from Code to Cloud.

In order to address the increasing complexity and scale of cybersecurity attacks, security solutions need to be flexible, consistent for heterogenous environments, comprehensive, and easy to manage.

Join Palo Alto and (ISC)2 July 7, 2022, at 1:00 p.m. BST to learn about the latest trends in Cloud Native application security and how to apply preventive security measures for Web and API workloads that are prone to insecure design, exploits, misconfigurations, bad bots, and software supply chain risks.

Be Confident In Your Web Application and API Security

The UK has a dynamic cybersecurity policy landscape. With the formation of the UK Cyber Security Council, and government’s recent consultation on proposals to develop the cybersecurity profession, there are important changes on the horizon for cybersecurity sector in the UK.
 
In this webcast, June 30, 2022, at 1:00pm BST, (ISC)2 provides insights on policy developments in the UK, and (ISC)2’s work to advocate for its membership. Join us to learn about:
-The key activities of the UK Cyber Security Council
-Potential implications for (ISC)2 members
-Important policy issues
-100K in the UK initiative
-Q&A session

Key Insights on the Future of Cybersecurity Profession in the UK

Many professions value and leverage pattern recognition and informed judgment based on limited information. While this is a huge strength for our employees, managers and practitioners, it could also lead to unconscious biases in our decisions making when it comes to day-to-day issues like hiring, mentoring, promoting, staffing, developing people, and engaging with clients. 

On June 29, 2022 at 1:00p.m. Eastern/10:00 a.m. Pacific Cyversity and (ISC)² present part 1 of this 3 part Unconscious Bias Series.  This engaging mix of insights, exercises, illustrations, activities, polls, and videos, will enable participants to understand their unconscious biases. Session participants will leave with specific strategies and tactics that they can deploy in their day-to-day work as they learn the definition, domains and impact of bias.

Unconscious Bias Series (Part 1): Understanding Bias

When approaching software supply chain security, managing the risk related to open-source usage is often a top consideration for builders of applications. Several notable vulnerabilities, such as Apache Struts and Log4j justify that consideration, demonstrating just how widespread the downstream impacts can be. However, managing open-source risk gets increasingly difficult the more ubiquitous it becomes, and organizations become more complacent as they focus on hardening other nodes of their software supply chain.  
 
Join Synopsys and (ISC)² June 28, 2022 at 1:00 p.m. BST as we elevate the conversation beyond tool implementation and discuss the importance of installing an open-source risk management program in order to protect your organizations, and your consumers, from supply chain threats. We will discuss:
o Implications of open-source risk  
o Obstacles to effectively managing open-source risk 
o The necessary people, processes, and tools to overcome those obstacles

Open-Source Risk: The Ground Zero of Software Supply Chain Security

With more and more organizations moving their operations to multi-cloud environments, IT and security professionals with specialized cloud knowledge will be in demand. Becoming a CCSP demonstrates to potential employers and business partners that you have the technical skills needed to secure valuable assets in the cloud.
 
The vendor-neutral, globally recognized CCSP certification proves your expertise, advances your career, and gains support from a community of cybersecurity leaders here to help you throughout your professional development journey.
 
Where do you begin your certification journey in cloud security? What do you need to study? How do you even get started in a vast field with so many areas, and so many opportunities?
 
Join this online information session, and you will learn:
 
• Why it has never been more important to become a Certified Cloud Security Professional
• What are the essential qualifications of a Cloud Security Leader
• What is the earning potential
• Recent changes regarding the CCSP exam
• The topics covered in the CCSP CBK (Common Body of Knowledge)
• The merits and benefits of CCSP certification for you as well as the steps involved to attain accreditation. 
 
And, you can ask any question that will support your certification journey.
 
Save your spot now and begin your professional development journey with (ISC)2!

Increase Your Hiring Appeal as a Cloud Security Expert with the CCSP

You know the workforce gap numbers. Your team feels the effects, often working long hours and picking up the slack from an understaffed organization. There simply aren’t enough experienced cybersecurity professionals to go around. So how do you build a resilient, sustainable cybersecurity team? New research from (ISC)² finds that hiring managers are looking to entry- and junior-level pros. The 2022 (ISC)² Hiring Managers Report, released in June, faced the issue of a shortage of experienced cyber pros head on and dives into how managers can find and nurture the talent to strengthen their teams.
 
Hear from experienced cybersecurity leaders as they discuss this new report and share their own insights, experiences and advice on how to build a team that can reinforce your security operations and add fresh new perspectives to your approach. Join (ISC)² June 23, 2022 at 11:00 a.m. ET / 4:00 p.m. BST for this roundtable discussion moderated by Brandon Dunlap.

How to Hire and Develop Entry- and Junior-Level Cybersecurity Practitioners

The business disruptions from COVID have had a profound effect on information security for organisations around the world, and Europe, Middle East & Africa has grappled right along with the rest of the world. A new report from the CyberRisk Alliance and Infoblox brings those effects into sharp focus—and in an easily consumable way.
The report, 2022 Global State of Security Report, gives you a one-of-a-kind picture of the global state of security, with a focus on EMEA. Reflecting on the state of security at the end of the second year of the pandemic and the measures organisations took to mitigate risks associated with a remote workforce. While everyone sent staff home, priorities differed. In comparing EMEA to other regions, most countries chose primarily to accelerate digital transformations and build or expand remote-customer portals to help remote workers.
 
Join Infoblox and (ISC)² June 14, 2022 at 1:00 p.m. BST for this webinar and learn more about:
● The measures organisations EMEA & worldwide took to mitigate risks associated with a remote workforce
● The most urgent security challenges posed by remote and hybrid work—and which ones U.S. organisations are prioritizing for mitigation
● Which attack vectors malicious

CyberRisk Alliance Global Security Report (EMEA): Remote Workers Spell Trouble

With the threat of nation-state level cyberattacks on the rise, it’s essential for defenders of critical infrastructure to pressure test their cyber defense capabilities.  

In this webcast, June 9, 2022, at 1:00 p.m. BST, Corelight and (ISC)² discuss the specific techniques, tactics, and procedures that defenders should monitor in order to identify and disrupt attacks in their environment.

Join us to learn more about:
• The current threat landscape
• Intelligence sharing groups
• Centralizing alerting and intelligence
• Reusable data-telemetry-based behavioral detections

Defending Against Nation-State Actors

In the CISO Says Series, information security leaders share their experiences of what it means to be responsible for establishing and maintaining an enterprise's security vision and strategy in an interview format. They provide insight into the path he took to become CISOs and how they are reinventing the role in the face of accelerating industry change.

CISO Says: Interview with Ivan Holman, Group Information Security Officer, EWI

CISO

EMEA

Secuirty

Interview

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

CISO Says: Interview with Ivan Holman, Group Information Security Officer, EWI

Presented by

About this talk

More from this channel