Minimizing Security Impacts of a Growing Remote Workforce

After a painful but relatively successful response to workplace changes driven by the pandemic, how well are those security measures working and what is next for the evolution of the SOC and endpoint security in specific? For most organizations, the future involves a larger remote workforce, of both full and part-time workers, including those in traditional HQ office roles. But many of the measures taken in response to pandemic conditions are proving less-than-ideal as long-term solutions. Join Infoblox and (ISC)2 on March 23, 2021 at 1:00PM GMT for a session that will draw on recent analyst reports and surveys conducted globally, with some EMEA specific call-outs, to help attendees to better understand…

· Which security alternatives are leaders considering as long-term solutions, and why?

· What techniques are helping to improve visibility for users and devices regardless of their location?

· Why are security leaders evolving methods for obtaining and using cyber threat intelligence?

· How can embracing automation improve response times and overall operational efficiencies?

(ISC)² Cybersecurity Experiences Series: One Year After The COVID-19 Outbreak

With the pandemic, our personal digital lives changed, but also our work has been catapulted into digital transformation. What role are humans having now? Why do we always say that humans are the weakest link and why we should start saying the opposite? During these difficult times, it is more than ever evident how humans are important to protect our networks. Understanding the human side of cyber security, gives an invaluable insight into understanding not only threat actors but our own colleagues and employees and how to build better strategies with human assets in mind to combat anything from insider threats to external malicious actors.

Sarka will walk you through some approaches to her engagements and how this knowledge can help you protect yourself, your loved ones as well as how useful it is for your organisation.

How do you shoot down a missile before it hits its target? That's the problem facing today's incident response teams. As cyberattacks increase in volume, velocity and complexity, the security operations center (SOC) handling incident response is the nexus for this challenge. A well-honed incident response operation that combined EPP+EDR, can deliver an impressive return on investment. In many data breach incidents, the cost is more than financial, and it is well known that the time cyber security teams take from the breach to containment is critical. With the stakes so high, how can your cyber security team shrink the time between detecting and handling cyber threats? Join SentinelOne and (ISC)2 on March 16, 2021 at 1:00pm BST as we cover these key questions and other areas such as:
· Why traditional protective approaches are no longer enough
· The importance of automation in the response process
· How to identify and establish key metrics in incident response
· Technical live demonstration of SentinelOne’s single agent, static AI platform that helps cyber security teams to prevent, detect, respond and hunt threats in real time

(ISC)² Cybersecurity Experiences Series: One Year After The COVID-19 Outbreak

It's been a year since the World Health Organisation (WHO) declared the COVID-19 outbreak as a Pandemic and even longer since the first case was recorded in the world. With total lockdowns lasting months in many parts of the word, organisations and individuals were forced to embrace the 'new normal'. Governments are reconsidering ways to ensure that their countries are stable, and businesses are trying to stay afloat. Nevertheless, while the world is focused on the health and economic threats posed by COVID-19, cybercriminals worldwide are undoubtedly capitalising on this crisis.

In a bid to support and secure a remote workforce, and ensure resiliency, there has been an increased investment in mobility, collaboration, and other remote working technologies and the adoption of cloud services. On the threat landscape, there was a significant shift in the frequency and magnitude of cybersecurity attacks and data breaches on SMEs, health institutions, public, private, financial and non-financial institutions globally.

In 2021, while the economic and social situation will largely remain the same in most parts of the world, although with a much positive outlook given vaccines' development in different countries, there is likely to be a significant increase in cybercriminals' activities. Therefore, an introspection into the lessons learnt, highs and lows in the past one year will help us develop foresight and adequately prepare as we progress in 2021 and beyond.

To mark the 46th annual International Women’s Day on March 8, 2021, (ISC)2 is proud to present a panel of accomplished women in the field of cybersecurity for a webinar discussion at 11:00am Eastern. This group will come together to discuss data on the demographics that make up the workforce and how they are shifting. They will also outline their own journeys in the profession that led them to the leadership positions they now hold, including the challenges they encountered and strategies they employed to succeed. The discussion will also look ahead to the evolution of diverse cybersecurity teams and the principles that inform how they are being assembled today. Speakers include:
Clar Rosso, CEO, (ISC)2

Aanchal Gupta, CISSP, Vice President, Azure Security at Microsoft

Lori Ross O’Neil, CISSP, Sr. ICS Cyber Researcher & Project Manager, Pacific Northwest National Laboratory; Vice Chairperson, 2021 (ISC)2 Board of Directors

Megan Hargrove, CISSP, Cyber Security Incident Response Manager, Tech Data

(ISC)² Cybersecurity Experiences Series: One Year After The COVID-19 Outbreak

Cybersecurity technologies are extremely important in identifying, detecting, responding to and recovering from attacks. However, they are not sufficient. A "HumanOS" upgrade is required to safely use the Internet. It is not only about training and awareness, though. It is about the way users must behave online and the IT community must openly acknowledge system vulnerabilities. Humans are the weakest and strongest links in Cybersecurity.

The road to shadow IT is paved with good intentions — when users create unofficial solutions to roadblocks without the oversight or approval of the IT department, they can introduce unknown risks to your environment. Examples of shadow IT may include a user opting for using a personal file-sharing service when they have difficulty collaborating with a teammate or using an unmanaged device to bypass security controls and directly log into a web-accessible cloud service. These workarounds may address the immediate need of the user…but leave a bigger problem for admins to discover later. This not only causes operational issues but introduces greater risk when faced with situations requiring an immediate response. Join Duo Security and (ISC)2 March 2, 2021 at 1:00pm GMT as we discuss solving shadow IT challenges with a focus on usability and preventing risky workarounds by removing the obstacles that invite them. This session will examine the rise of shadow IT through the shift to remote work and best practices you can implement to better defend your users and data. We’ll also focus on:

· How your shadow IT defense strategy starts with access control

· The conditions that lead to shadow IT, and how to prevent them

· How to establish user and device trust without adding friction to user access