Name: Trust No One Part 2. What Does Zero Trust Mean for You?
Start: 2018-11-20T14:00:00Z
End: 2018-11-20T14:57:51.000Z
Location: BrightTALK
Rating: 4.34

(ISC)² Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs

Many professions value and leverage pattern recognition and informed judgment based on limited information. While this is a huge strength for our employees, managers and practitioners, it could also lead to unconscious biases in our decisions making when it comes to day-to-day issues like hiring, mentoring, promoting, staffing, developing people, and engaging with clients. 

On October 24th at 1:00 p.m. Eastern/10:00 a.m. Pacific Cyversity and (ISC)² discuss Managing Bias, as part 3 of this 3-part Unconscious Bias Series. This webinar will share an engaging mix of insights, exercises, illustrations, activities, polls, and videos, will enable participants to understand their unconscious biases in a constructive manner to help obtain the highest level of inclusiveness and performance.

Unconscious Bias Series (Part 3): Managing Bias

Many professions value and leverage pattern recognition and informed judgment based on limited information. While this is a huge strength for our employees, managers and practitioners, it could also lead to unconscious biases in our decisions making when it comes to day-to-day issues like hiring, mentoring, promoting, staffing, developing people, and engaging with clients. 

On September 21, 2022 at 1:00p.m. Eastern/10:00 a.m Pacific, Cyversity and (ISC)² present part 2 of this 3-part Unconscious Bias Series.  this webinar will share an engaging mix of insights, exercises, illustrations, activities, polls, and videos, will enable participants to identify their unconscious biases. Session participants will leave with specific understanding of the various types of biases we all have and how to diagnose them.

Unconscious Bias Series (Part 2): Identifying Bias

Recent years have seen a massive shift in trends in the way we work. Cloud services and solutions have been adopted en masse, working from anywhere and everywhere has become a norm and multi-layered approaches to access control as a way of mitigating common vulnerabilities has become commonplace.  As exciting as they are, these new trends also pose important questions around security and business resilience. 
Join Duo Security and (ISC)² July 19, 2022 at 1:00 p.m., BST as we explore how to enable business resilience with a secure access strategy, covering people, processes and technology incorporating new trends such as Passwordless and in the future, the use of Digital Identities.

Discover methods to:
• Apply the appropriate level of trust when people or devices access corporate systems and applications.
• Maintain a great user experience whilst ensuring security isn’t compromised.
• Achieve business resilience, turning temporary fixes into future-proof measures.

Future-Proof Your Secure Access Strategy

According to Verizon "2022 Data Breach Investigation Report," Web Application attacks are the number one vector in breaches. Moreover, Web Application Attacks Surged 740% in 2020, and API attacks peaked to 7 Billion, based on data monitored by CDNetwork.

The same challenges also apply to Cloud environments, where despite the availability of native security tools, misconfiguration, and human errors contribute increasing the risks of security incidents. Indeed, the dynamic nature of Cloud environments poses even a bigger threat: DevOps teams need to prioritize the release of newer functionalities in their applications and security needs to adapt and more importantly, need to be part of the full lifecycle of application development, from Code to Cloud.

In order to address the increase complexity and scale of cybersecurity attacks, security solutions need to be flexible, consistent for heterogenous environments, comprehensive, and easy to manage.

Join Palo Alto and (ISC)2 July 7, 2022, at 1:00 p.m. BST to learn about the latest trends in Cloud Native application security and how to apply preventive security measures for Web and API workloads that are prone to insecure design, exploits, misconfigurations, bad bots, and software supply chain risks.

Be Confident In Your Web Application and API Security

The UK has a dynamic cybersecurity policy landscape. With the formation of the UK Cyber Security Council, and government’s recent consultation on proposals to develop the cybersecurity profession, there are important changes on the horizon for cybersecurity sector in the UK.
 
In this webcast, June 30, 2022, at 1:00pm BST, (ISC)2 provides insights on policy developments in the UK, and (ISC)2’s work to advocate for its membership. Join us to learn about:
-The key activities of the UK Cyber Security Council
-Potential implications for (ISC)2 members
-Important policy issues
-100K in the UK initiative
-Q&A session

Key Insights on the Future of Cybersecurity Profession in the UK

Many professions value and leverage pattern recognition and informed judgment based on limited information. While this is a huge strength for our employees, managers and practitioners, it could also lead to unconscious biases in our decisions making when it comes to day-to-day issues like hiring, mentoring, promoting, staffing, developing people, and engaging with clients. 

On June 29, 2022 at 1:00p.m. Eastern/10:00 a.m. Pacific Cyversity and (ISC)² present part 1 of this 3 part Unconscious Bias Series.  This engaging mix of insights, exercises, illustrations, activities, polls, and videos, will enable participants to understand their unconscious biases. Session participants will leave with specific strategies and tactics that they can deploy in their day-to-day work as they learn the definition, domains and impact of bias.

Unconscious Bias Series (Part 1): Understanding Bias

When approaching software supply chain security, managing the risk related to open-source usage is often a top consideration for builders of applications. Several notable vulnerabilities, such as Apache Struts and Log4j justify that consideration, demonstrating just how widespread the downstream impacts can be. However, managing open-source risk gets increasingly difficult the more ubiquitous it becomes, and organizations become more complacent as they focus on hardening other nodes of their software supply chain.  
 
Join Synopsys and (ISC)² June 28, 2022 at 1:00 p.m. BST as we elevate the conversation beyond tool implementation and discuss the importance of installing an open-source risk management program in order to protect your organizations, and your consumers, from supply chain threats. We will discuss:
o Implications of open-source risk  
o Obstacles to effectively managing open-source risk 
o The necessary people, processes, and tools to overcome those obstacles

Open-Source Risk: The Ground Zero of Software Supply Chain Security

With more and more organizations moving their operations to multi-cloud environments, IT and security professionals with specialized cloud knowledge will be in demand. Becoming a CCSP demonstrates to potential employers and business partners that you have the technical skills needed to secure valuable assets in the cloud.
 
The vendor-neutral, globally recognized CCSP certification proves your expertise, advances your career, and gains support from a community of cybersecurity leaders here to help you throughout your professional development journey.
 
Where do you begin your certification journey in cloud security? What do you need to study? How do you even get started in a vast field with so many areas, and so many opportunities?
 
Join this online information session, and you will learn:
 
• Why it has never been more important to become a Certified Cloud Security Professional
• What are the essential qualifications of a Cloud Security Leader
• What is the earning potential
• Recent changes regarding the CCSP exam
• The topics covered in the CCSP CBK (Common Body of Knowledge)
• The merits and benefits of CCSP certification for you as well as the steps involved to attain accreditation. 
 
And, you can ask any question that will support your certification journey.
 
Save your spot now and begin your professional development journey with (ISC)2!

Increase Your Hiring Appeal as a Cloud Security Expert with the CCSP

You know the workforce gap numbers. Your team feels the effects, often working long hours and picking up the slack from an understaffed organization. There simply aren’t enough experienced cybersecurity professionals to go around. So how do you build a resilient, sustainable cybersecurity team? New research from (ISC)² finds that hiring managers are looking to entry- and junior-level pros. The 2022 (ISC)² Hiring Managers Report, released in June, faced the issue of a shortage of experienced cyber pros head on and dives into how managers can find and nurture the talent to strengthen their teams.
 
Hear from experienced cybersecurity leaders as they discuss this new report and share their own insights, experiences and advice on how to build a team that can reinforce your security operations and add fresh new perspectives to your approach. Join (ISC)² June 23, 2022 at 11:00 a.m. ET / 4:00 p.m. BST for this roundtable discussion moderated by Brandon Dunlap.

How to Hire and Develop Entry- and Junior-Level Cybersecurity Practitioners

The business disruptions from COVID have had a profound effect on information security for organisations around the world, and Europe, Middle East & Africa has grappled right along with the rest of the world. A new report from the CyberRisk Alliance and Infoblox brings those effects into sharp focus—and in an easily consumable way.
The report, 2022 Global State of Security Report, gives you a one-of-a-kind picture of the global state of security, with a focus on EMEA. Reflecting on the state of security at the end of the second year of the pandemic and the measures organisations took to mitigate risks associated with a remote workforce. While everyone sent staff home, priorities differed. In comparing EMEA to other regions, most countries chose primarily to accelerate digital transformations and build or expand remote-customer portals to help remote workers.
 
Join Infoblox and (ISC)² June 14, 2022 at 1:00 p.m. BST for this webinar and learn more about:
● The measures organisations EMEA & worldwide took to mitigate risks associated with a remote workforce
● The most urgent security challenges posed by remote and hybrid work—and which ones U.S. organisations are prioritizing for mitigation
● Which attack vectors malicious

CyberRisk Alliance Global Security Report (EMEA): Remote Workers Spell Trouble

With the threat of nation-state level cyberattacks on the rise, it’s essential for defenders of critical infrastructure to pressure test their cyber defense capabilities.  

In this webcast, June 9, 2022, at 1:00 p.m. BST, Corelight and (ISC)² discuss the specific techniques, tactics, and procedures that defenders should monitor in order to identify and disrupt attacks in their environment.

Join us to learn more about:
• The current threat landscape
• Intelligence sharing groups
• Centralizing alerting and intelligence
• Reusable data-telemetry-based behavioral detections

Defending Against Nation-State Actors

The 2021 (ISC)² Cybersecurity Workforce Study estimates there are 4.19 million cybersecurity professionals worldwide. the study also shows that global demand for cybersecurity professionals continues to outpace supply — resulting in a Cybersecurity Workforce Gap of 2.72 million professionals. 

The cyber world needs your expertise. But how can you, as a security leader of tomorrow, acquire the technical and soft skills that drive business prosperity? CISSP is one of the world’s most valued information technology and information security certifications today. With a proven track record of over 25 years in the making, the CISSP truly demonstrates that you are at the top of your cybersecurity game in terms of knowledge, skills and experience.

In this information session, you will learn:
• Why it has never been more important to become a Certified Cybersecurity Professional
• What are the essential qualifications of a Cybersecurity Leader
• Recent changes regarding the CISSP exam 
• The topics covered in the CISSP CBK (Common Body of Knowledge) 
• The merits and benefits of CISSP certification for you as well as the steps involved to attain accreditation. 

And, you can ask any question that will support your certification journey.

Save your spot now and begin your professional development journey with (ISC)² !

Accelerate Your Cybersecurity Career with the CISSP Certification

Ransomware readiness is the #1 board-level directive when it comes to cyber security.  Join Cyberbit and (ISC)² on May 26, 2022 at 1:00 p.m. BST as we prepare information security executives and incident responders for ransomware by running a live simulation of a corporate ransomware crisis.
 
You will be presented with an unfolding cyberattack scenario, confronting you with critical decisions ranging from the C-Level to the SOC manager level. We will then shift gears to the cyber range, which will emulate a real-world SOC and demonstrate how IR experts can successfully investigate and eradicate a ransomware attack.
 
The session will combine the C-level, decision-making challenges encountered in a ransomware crisis with a hands-on, ransomware investigation simulated in a cyber range. The simulation allows you, as the audience, to impact the flow of the scenario by providing your suggested actions while our experienced instructor will provide you with helpful tips.

LIVE Ransomware Crisis Simulation with You in Control

A record 71% of organizations were compromised by ransomeware last year with 63% of ransomware victims paying ransoms, encouraging cybercriminals to increase their attacks.

CyberEdge’s 2022 Cyberthreat Defense Report (CDR) has become the standard for assessing organizations’ security posture, for gauging perceptions of IT security professionals and for ascertaining current and planned investments in IT security infrastructure.

Now in its ninth year, the 2022 CDR assesses the views of 1,200 IT security professionals representing 17 countries and 19 industries. It’s the most geographically comprehensive view of IT security perceptions in our industry.

Join (ISC)2 (a sponsor of this year’s study) and CyberEdge on Wednesday, May 25, 2022 at 1:00PM Eastern for highlights and key insights of the results, including:

• Lack of skilled personnel and low security awareness inhibit IT security’s success
• 84% of organizations are experiencing a shortfall of skilled IT personnel; IT security administrators, analysts and architects are in shortest supply
• Nearly all respondents (99%) agreed that achieving a specialty cybersecurity certification would help their careers; the top choices were cloud security, software security and security administration

Key Insights from CyberEdge’s 2022 Cyberthreat Defense Report

Kubernetes and OpenShift have become one of the standards for modern cloud-based application development.  As this infrastructure grows and clusters scale, workload security becomes essential and huge volumes of TLS and mTLS certificates are being used by development teams who are building and deploying workloads on ever faster release cycles. Recent research is showing 94% of companies using Kubernetes in production are regularly experiencing security vulnerabilities. Without observability and control, these companies simply can’t establish and maintain a validated and auditable chain of trust for every workload deployed to a Kubernetes cluster. 

In this Venafi and (ISC)² webinar May 24, 2022 at 1:00 p.m. BST, we will hear from cloud native experts on how platform team leaders and cloud security architects can come together with highly automated security tooling that can eliminate the threats that come from certificate misconfigurations without compromising developers’ speed.

Workload Misconfiguration – The #1 Security Threat When Using Kubernetes

Join the Guide to Your (ISC)² Membership in EMEA webinar to learn more about these topics and others including:

- CPE opportunities, member benefits and getting involved
- Updates on (ISC)² news, developments and changes in your region
- Your membership requirements summarised
- Who are the (ISC)² EMEA team and how we can help you
- Focus discussions
- Q&A session

Guide to your (ISC)² Membership in EMEA: Benefits, Maintenance & Opportunities

The Inside (ISC)2 webinar series gives attendees access to the leaders and decision makers within the association to hear the latest insights from the Board and executive levels, including a look at recent successes and plans for upcoming programs. Join (ISC)2 CEO Clar Rosso on April 27 at 1:00 p.m. EST as she is joined by Board Chairperson Zach Tudor, CISSP and (ISC)2 Chief Qualifications Officer Dr. Casey Marks, who will provide an update on the new entry-level cybersecurity certification pilot program as well as the online proctored CISSP exam pilot.

Inside (ISC)2: Quarterly Board Update and the Latest on Exams

Abundant data is now available to put numbers behind what we instinctively know: trusted organizations are more successful. InfoSec teams have a prominent role in helping their organization become trusted, and therefore more successful: first and foremost, by communicating changes in the IT & security risk posture. 

On April 21, 2022 at 1:00 p.m. BST, One Trust and (ISC)² drill down into how IT & Security teams support risk reduction, build trust, and drive growth.

Key Takeaways include:

• Learning about recent research that quantifies the value of trust for businesses.
• Hearing about Maturing IT & Security risk management responsibilities and activities to respond to the ever-changing security landscape.
• Discussing communication improvements and how to create transparency in your risk remediation process.

How Successful Security Teams Manage Risk, Build Trust and Drive Growth

As early as 2003 the Jericho Forum was created to tackle "de-perimeterisation" and later in 2014 Google released their "BeyondCorp" paper detailing how they made it happen.  However, have Zero-Trust security models been adopted in the enterprise and what challenges do organisations face when considering de-perimeterisation?

Join the discussion between Richard Archdeacon from Duo Security and Daniel Cuthbert from Banco Santander in Part 2 of the Zero Trust series and learn about Zero Trust deployments within the enterprise.  
Speakers:
Richard Archdeacon, Advisory CISO, Duo Security
Daniel Cuthbert, Global Head of Cybersecurity Research, Banco Santander

For Part 1 in the Zero Trust Series, copy and paste this link into your browser: https://www.isc2.org/News-and-Events/Webinars/EMEA-Webinars?commid=334792&Part2

Trust No One Part 2.  What Does Zero Trust Mean for You?

Zero trust

cybersecurity webinar

beyondcorp

Jericho forum

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Trust No One Part 2. What Does Zero Trust Mean for You?

Presented by

About this talk

More from this channel