(ISC)² Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs

This year was particularly challenging for IT security professionals. For a short while, we thought we finally had this pandemic kicked. Then the Delta variant came along, further extending the work-from-home movement and its associated cybersecurity risks. Meanwhile, we saw record-setting ransomware attacks, including high-profile attacks on critical infrastructure, while the shortage of IT security talent worsened. On a brighter note, we saw increased adoption of promising security technologies, such as zero trust network access (ZTNA) and secure access service edge (SASE). 

So, what does next year have in store for the cybersecurity industry? Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he shares his top five cybersecurity predictions for 2022.

Top Five Cybersecurity Predictions for 2022

Cloud is an intrinsic part of our everyday lives both personally and professionally. With more organizations running vital business functions in the cloud, the demand for cloud security professionals has never been higher.

(ISC)2 interviewed about 50 Certified Cloud Security Professionals (CCSPs) who achieved this credential mid or later in their careers and asked them why they chose to add the CCSP to their skillset and the benefits they experienced as a result. And we want to share their answers with YOU! 

Join our live panel of distinguished CCSPs and host Brandon Dunlap on Wednesday, December 8th at 1pm EST to find out why our panelists and thousands of others have pursued the CCSP credential.

Accelerate Your Career in Cloud Security – with CCSP

Save your spot today!

Open Doors with CCSP- How to Start Your Career in Cloud Security

The majority of crippling cyberattacks begin with a simple phishing email. And while most companies provide some form of annual training, they focus on overly simplistic lures taken from public events that fail to represent the real danger of targeted criminal campaigns. Join eSentire and (ISC) 2 on December 2nd, 2021 at 1:00 p.m. as they explore how to build a comprehensive training and testing programme that leverages realistic threat scenarios to foster context-relevant security awareness that drives behavioral change:

o Use risk management data and accurate phishing lures to build comprehensive awareness training

o Maximise your resources and programmes to increase return on investment

o Conduct testing that improves resilience

o Meet regulatory requirements and demonstrate programme success to your leadership

Building Cyber Resilience with Managed Phishing and Security Awareness Training

Cyber threats will only continue to rise globally as the ROI of such attacks has unfortunately been proven. Coupled with the emergence of Ransomware-as-a-Service, the barriers for cyber crime to take place have been significantly lowered, causing more to fall prey. Many organizations today use legacy solutions to fight cyber threats, but find that they are losing the race as such methods may be outdated or ineffective. This is apparent when big organizations around the globe are impacted by ransomware attacks. To understand this race better, organizations need to change the question that will help them future proof their organizations against cyber threats. Join ReaQta and (ISC)2 on November 30, 2021 at 1:00p.m. GMT for a discussion on how to stay protected against cyber threats now and into the future.

The Defeat of Cyber Threats Begins with Asking the Right Question

Security teams need new approaches to work with the super fast development cycles that are inevitable when using Kubernetes and OpenShift. New research found 96% of enterprises using Kubernetes or OpenShift recently experienced a security related issue from a workload misconfiguration. One example: developers use non-enterprise approved Certificate Authorities CA(CAs) for TLS machine identities with Kubernetes, OpenShift, Istio and more making initiatives like Zero Trust impossible. These gaps won’t be fix with more controls pushed down from security teams. Developers today decide cloud-native security tooling. Security and developers need to operate in a #fastsecure mode: going as fast as possible while staying safe. Join Venafi and (ISC)2 on November 23, 2021 at 1:00p.m. GMT as open source innovator, Matt Barker, and security leader, Kevin Bocek discuss what #fastsecure means and how you can get started. The developer-led, cloud-native world doesn’t mean that security teams are any less important; just the opposite. Going faster means security teams bring their experience with threat protection, machine identity, risk and compliance to help developers stay safe at highest speeds.

#fastsecure: Security in the Age of Kubernetes

Taking the step toward earning the (ISC)² Certified Cloud Security Professional (CCSP) credential puts you on a path to excel as an expert in cloud security. CCSP empowers individuals and organizations with the highest level of mastery in cloud security. 

But how do you get started? How do you prepare? And why…what tangible benefits will you gain? Join (ISC)² for a panel discussion as industry professionals share their stories, experience and tips toward preparing for the Certified Cloud Security Professional certification. Areas for discussion will include:

- Why you should consider CCSP
- How to prepare for CCSP
- How CCSP can accelerate your career progression

The Cloud Gambit: Advanced Moves for a Cloud Security Career

Do you know who in your organisation has the most significant exposure to compliance risk?  Are they at risk because of their actions, or are they targets? How do you build a complete picture of their risk profile identifying potential risky behaviour? Join Proofpoint, (ISC)2 and Dennis Sullivan, Vice President, Senior Compliance Officer of Industry Leading Pimco, to listen to a case study on how they achieved world-class Supervision, from implementation, optimisation in production and how to look ahead to apply practical AI machine learning. On November 16, 2021 at 1:00p.m. GMT you’ll discover how big data analytics and ML can be brought to bear in the fight against misconduct by building an effective people-centric view, promoting a culture to protect your people from compliance violations, whilst safeguarding the whole organisation. Learn the practical steps now and how to scale into the future.

Compliance Begins with People: A Case Study from a Leading Financial Institution

Despite acknowledging its security benefits, many organizations hesitate to implement a Zero Trust model. An "all or nothing" approach to Zero Trust is a tall and unsustainable task. What if you took a more incremental, agile approach that allows your organization to make realistic steps toward achieving Zero Trust? Join Illumio and (ISC)2 on November 11, 2021 at 1:00 p.m. GMT  as we will discuss:

• Why taking a waterfall approach to rolling out Zero Trust is fraught with risk of failure 

• How adopting an agile mindset significantly improves the chances of success of achieving the Zero Trust security goals 

• The six steps to pragmatically build your Zero Trust security program using a repeatable process 

• How security controls like segmentation can help tackle focus areas such as workload protection 

• A demonstration of each of the six steps in action in the context of segmentation – see how an application is taken through the full cycle

Lighting a Path to Zero Trust: 6 Steps to Implementing a Zero Trust Model

Recruiting and retaining qualified IT security talent has never been more challenging. Nearly nine in 10 organizations are experiencing a shortfall, according to CyberEdge’s 2021 Cyberthreat Defense Report. That’s up from eight in 10 organizations just three years ago. This weighs heavily on the minds of IT security managers as ‘lack of skilled personnel’ is consistently rated as one of the top inhibitors to successfully defending networks against cyberthreats. So, what can organizations do to mitigate the effects of this talent shortage? Well, if you’re willing to ‘think outside the box,’ there is hope. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he:

Examines the shortage of IT security personnel by job role
Proposes creative ways for recruiting new security talent
Suggests clever ways for retaining the talent you already have
Identifies technologies that enable security teams to do more with less

Strategies for Recruiting and Retaining Top IT Security Talent

The future is created by what you do today. Oftentimes we don’t feel we are ready to take what seems like a big step forward. But we want to show you why now is the best time to make that first step on your CISSP journey.

People from all walks of life, of various generation, from every industry and with different lifestyles have all succeeded in their mission to achieve the CISSP. Through this webinar our panel of CISSPs want to share the different paths you can take to achieve the CISSP and the benefits that the CISSP brings to your career.

Join our live panel of distinguished CISSPs and host Brandon Dunlap on Tuesday, November 9th at 1pm ET to take that first step on the ladder to harnessing the CISSP credential. Stronger cybersecurity starts with CISSP!

Save your spot today!

CISSP: The Time Is Now

With hybrid workplaces now the new norm and supply chain attacks on the rise, there’s an increased exposure to cyber-attacks, which can cause substantial disruption to any organization or industry. This increased exposure is forcing companies to not only invest and improve their own cybersecurity posture, but also manage third party risk and protect against cyber risks with cyber insurance. Certain best practices and technologies help reduce your risk and improve your security score while helping to keep insurance premium costs low. DNS security is one such approach that provides extended visibility, protection and security automation to improve a company’s security posture.

Join Infoblox and (ISC)2 November 9th, 1 p.m., GMT for this webinar to learn more about:

o    Why organizations invest in cyber insurance

o    Getting the most out of cyber insurance

o    How DNS security improves security scores and reduces cyber insurance premiums

Cyber Insurance: Optimizing Costs While Minimizing Risk

With a staggering growth in the number of vulnerabilities and a constantly changing attack surface, companies begin their transition to the cloud at a disadvantage in their security posture. Threat actors understand this and better than we do and are quickly morphing their traditional attacks to take advantage of the situation. At the end of the day there was fact that all companies must accept, breaches happen. On November 2, 2021 at 1:00pm BST join Ell Marquez, Linux Security Advocate at Intezer, for exploring how assume breach doesn’t mean all the money you spent on security solutions is going to waste and what really is meant by assume breach and what makes an effective assume breach strategy.

Leveraging the Assume Breach Mentality

Security Operations Centers (SOC) have traditionally achieved visibility through varying sources, including log files, EDR, and NDR.  Each approach has inherent weaknesses and strengths, converging on a superior NDR method.  For example, if the flow of data is too broad, and packets can be challenging without highly scalable network instrumentation that converts raw packets into enriched metadata for longer-term and superior analytics.   Using a more intelligent network-based security strategy, SOCs can maintain broad and deep network visibility to improve the quality, reliability, and security of services. Join Netscout and (ISC)2 on October 28th, 2021 at 1 p.m., GMT for a discussion on how to use packet-derived metadata, behavioral analysis, and threat intelligence to reduce MTTR (i.e., Mean Time To Resolution) it takes to detect, investigate and remediate cyber or other IT threats. We’ll explore: 

-How to leverage a robust set of metadata and packets to become a more agile and proactive cybersecurity analyst 
-Why leveraging the same network instrumentation and common source of metadata and packets is advantageous for Net & Sec Ops When and how tap and decryption capabilities are to be addressed  
-How to deploy intelligent network instrumentation in a hybrid cloud environment for a security optimal cyber posture

Gain Comprehensive, Multi-Dimensional Visibility Across Digital Infrastructures

Building a strong cybersecurity team takes grit. The best results don’t always come at the first pass. When BT, a world-leading communications provider headquartered in London with offices globally, tasked CSIRT Training Specialist Jonathan Kilgannon and Security Learning & Development Specialist Cathy Marsh with raising the bar for success among the company’s CISSP candidates, they delivered. Average exam pass rates jumped to 90% percent — a 40% increase — following the changes they implemented in the training process. Find out how identifying the right candidates, preparing them in advance and (ISC)2 Official In-Person Team Training made all the difference.

BT Sets the Bar Higher with (ISC)2 CISSP Team Training

Join us for (ISC)2 Security Congress Town Hall to learn what’s next for (ISC)2 and hear directly from members of the Board of Directors.  

CEO Clar Rosso will provide a strategic update for our association, including recent accomplishments and milestones, as well as what members can expect in 2022 and beyond. 

Then, a panel consisting of (ISC)² Board members and management will answer members’ questions about the association, membership, certifications, workforce trends and other cybersecurity issues and challenges facing the profession. 

Town Hall is open to (ISC)2 members and associates, as well as all Security Congress attendees.

Featuring:
Clar Rosso, CEO, (ISC)2
Zachary Tudor, CISSP, Board of Directors Chairperson
Lori Ross O'Neil, CISSP Board of Directors Vice Chairperson
Dr. Casey Marks, Chief Qualifications Officer, (ISC)2

(ISC)2 Town Hall 2021

Most organisations plan cloud migrations, but few achieve a full migration to the cloud, ending up with a hybrid deployment.  This works for many, but for others it can be a “worst of both worlds” situation, with differing toolsets, increased costs, inconsistent visibility for security, operations and compliance leading to risk and issues.  Some organisations are even repatriating workloads back from the cloud: not a good outcome.  How can you benefit from a hybrid deployment, and avoid the downsides? 

Join Gigamon and (ISC)2 on October 14, 2021 at 1 p.m., BST when we will discuss how hybrid networks can be architected to deliver operational capabilities, security outcomes and compliance requirements.

Hybrid Cloud – Avoiding a Worst of Both Worlds Outcome

Zero trust network access (ZTNA) has been one of the most widely discussed and debated security technology categories in recent years. While most enterprise IT security teams have already started drinking the zero trust Kool-Aid, there are still some skeptics who are hesitant to embrace zero trust architectures for a variety of reasons. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he debunks five common zero trust security myths so you can distinguish between fact and fiction.

Is Zero Trust a Pipe Dream? Debunking Five Zero Trust Security Myths

Ransomware currently dominates the headlines and is top of mind for many.  DNS can be used to improve protection against ransomware campaigns and speed up investigations of such incidents.  In this session, we’ll share fresh tactics, techniques, and procedures (TTPs) used by ransomware actors which actively adopt advanced persistent threat (APT)-style tactics and evasion techniques. These actors’ goals have shifted from deploying ransomware on a few vulnerable machines to achieving persistence in the network and causing maximum damage to push victims into paying the ransom.

On October 12th, 2021 at 1 p.m. BST, join the Cisco Umbrella team and (ISC)2 as they share DNS-based classifiers developed by Cisco and discuss their approach to building them based on changes in the threat landscape.

Keeping Ransomware Attacks at Bay with DNS

As eCrime has evolved over the past decade, Nigerian cybercriminals have evolved too. 419 scammers or 'Yahoo Boys' running simple Nigerian prince scams have graduated to criminal confraternities conducting sophisticated business email compromise (BEC).
 
In 2017 CrowdStrike Services were repeatedly called in to organisations affected by BEC. Although non-technical in nature, the operations yield highly effective results.
 
In this webinar we'll share CrowdStrike Intelligence outlining:
- The techniques, tactics and procedures of these threat actors
- How BEC affects all geographical regions, involving fraud on multiple continents
- Steps you can take to protect your organisation

Cybercrime, Cults and Confraternities: The Evolution of Nigerian 419 Email Scams

Business Email Compromise

419 Scams

Email scams

Yahoo boys

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Cybercrime, Cults and Confraternities: The Evolution of Nigerian 419 Email Scams

Presented by

About this talk

More from this channel