(ISC)² Security Briefings EMEA offers members in Europe, the Middle East and Africa a chance to learn about the latest trends, tools and best practices in cyber, information, software and infrastructure security while earning CPEs

The promise of cloud computing was a utility; always up, always on, just a click away. But we've seen many outages, caused by natural disasters and human error. It’s clearly time to blow the dust off the continuity handbook and revisit recovery for the twenty-first century. Join Duo Security and (ISC)2 on January 6, 2022 at 1:00 p.m. GMT overview of business impact analysis, business continuity, disaster recovery, and revisiting these concepts in the day and age of utility computing and cloud services.   After all, the cloud breaks — so what do you do when it does? We’ll also discuss how to:  · Establish continuity and recovery with cloud services · Avoid common mistakes that can stop clouds in their tracks · Contextualize continuity within the business mission and objectives · Gain executive buy-in and support using continuity and recovery programs

And the Clouds Break - Establishing Continuity & Recovery with Cloud Services

Cybersecurity is always evolving. The 2021 (ISC)2 Cybersecurity Workforce Study has found how the profession has evolved and matured with respect to risk and governance as well. Join (ISC)2 on December 16, 2021 at 11:00am Eastern/8:00am Pacific and learn how organizations and professionals are evolving from:

·         "How secure are we?" to "What's our security-related risk, and is it acceptable to the business?"

·         Risk as a purely technical issue to risk as a key business issue

·         Subject-matter experts to both subject-matter experts and trusted advisors

Putting Risk, Management and Governance in Perspective

Join the Guide to Your (ISC)² Membership in EMEA webinar to learn more about these topics and others including:

- CPE opportunities, member benefits and getting involved
- Updates on (ISC)² news, developments and changes in your region
- Your membership requirements summarised
- Who are the (ISC)² EMEA team and how we can help you
- Focus discussions
- Q&A session

Guide to your (ISC)² Membership in EMEA: Benefits, Maintenance & Opportunities

This year was particularly challenging for IT security professionals. For a short while, we thought we finally had this pandemic kicked. Then the Delta variant came along, further extending the work-from-home movement and its associated cybersecurity risks. Meanwhile, we saw record-setting ransomware attacks, including high-profile attacks on critical infrastructure, while the shortage of IT security talent worsened. On a brighter note, we saw increased adoption of promising security technologies, such as zero trust network access (ZTNA) and secure access service edge (SASE). 

So, what does next year have in store for the cybersecurity industry? Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he shares his top five cybersecurity predictions for 2022.

Top Five Cybersecurity Predictions for 2022

CEO Clar Rosso will be joined by (ISC)² Board of Directors Chairperson, Zachary Tudor, CISSP to provide the Q4 2021 update to members. Join us on December 15, 2021 at 10:00 am Eastern/7:00 am Pacific to hear the latest updates from the most recent board meeting, what the association has planned for 2022 and beyond, and to ask your questions live.

(ISC)2 2021 Q4 Quarterly Board Update with Chairperson and CEO

Firewalls, VPN concentrators, IDS/IPS, load balancers, etc., all have one thing in common. They are stateful devices. That makes them very susceptible to DDoS attacks – more specifically, state exhaustion attacks.  To protect these devices from DDoS attacks, you need dedicated, stateless DDoS attack protection technology deployed in front of your stateful infrastructure. Join Netscout and (ISC)2 on December 6, 2021 at 1:00p.m. Eastern/19:00a.m. Pacific as we examine:

· Why stateful devices like firewalls are susceptible to DDoS attacks.
· Why industry best practices (and firewall vendors) suggest deploying stateless DDoS protection in front of your firewall to protect it and other stateful devices.

· How and why organizations should prepare and defend around the first and last line of network perimeter defense to protect the availability and performance of firewalls and other stateful infrastructure from cyber threats.

Protecting Stateful Devices on Your Network Edge from DDoS Attacks

Want a real-world view from the experts at the front lines and gain insights that can inform your security strategies in the months ahead? On December 9, 2021 at 1:00 p.m. GMT, join Crowdstrike and (ISC)2 as the OverWatch Threat Hunting team share insights from the last 12 months. They’ll review intrusion trends, share insights into current adversary tactics and deliver highlights of notable intrusions identified by expert OverWatch threat hunters. You’ll also learn:

· A new look at the most common tactics, techniques and procedures (TTPs) used by adversaries, as well as those OverWatch believes defenders should have on their radar.

· An analysis of intrusions by vertical — including a special focus on the telecommunications vertical, which saw intrusions double this past year.

· Detailed case studies providing insights into how adversaries are carrying out their campaigns in the wild.

· Recommendations for defenders looking to better protect their organization from current and emerging threats.

Nowhere to Hide: Insights from the CrowdStrike OverWatch Threat Hunting Team

Cloud is an intrinsic part of our everyday lives both personally and professionally. With more organizations running vital business functions in the cloud, the demand for cloud security professionals has never been higher.

(ISC)2 interviewed about 50 Certified Cloud Security Professionals (CCSPs) who achieved this credential mid or later in their careers and asked them why they chose to add the CCSP to their skillset and the benefits they experienced as a result. And we want to share their answers with YOU! 

Join our live panel of distinguished CCSPs and host Brandon Dunlap on Wednesday, December 8th at 1pm EST to find out why our panelists and thousands of others have pursued the CCSP credential.

Accelerate Your Career in Cloud Security – with CCSP

Save your spot today!

Open Doors with CCSP- How to Start Your Career in Cloud Security

Clar Rosso, CEO of (ISC)2 shares her insights on what’s happening at our association. Join us for this quarterly update in which we cover the latest developments at (ISC)2, ranging from certification to member benefits, continuing education and events, to major milestones and achievements. On December 7, 2021 at 1:00 p.m. Eastern/10:00 a.m. Pacific, Clar will be joined by Tara Wisniewski, EVP of Advocacy, Global Markets and Member Engagement at (ISC)2, to provide some updates on the strides being made to increase the association’s influence on emerging cybersecurity policy issues, and the expansion of (ISC)2’s reach both in terms of global capabilities and supporting its members.

Inside (ISC)2: Updates on Advocacy, Global Markets and Member Engagement

As organisations migrate to cloud native architectures using automation, traditional security teams have struggled to keep up with the change. DevOps teams are moving forward at speed and on December 7, 2021 at 1:00 p.m. GMT, we’ll explore how you can automate and speed up security assurance whilst reducing friction with Dev teams with Prisma Cloud.

Helping Traditional Cyber Teams Shift Left and Automate Security

The majority of crippling cyberattacks begin with a simple phishing email. And while most companies provide some form of annual training, they focus on overly simplistic lures taken from public events that fail to represent the real danger of targeted criminal campaigns. Join eSentire and (ISC) 2 on December 2nd, 2021 at 1:00 p.m. as they explore how to build a comprehensive training and testing programme that leverages realistic threat scenarios to foster context-relevant security awareness that drives behavioral change:

o  Use risk management data and accurate phishing lures to build comprehensive awareness training

o  Maximise your resources and programmes to increase return on investment

o  Conduct testing that improves resilience

o  Meet regulatory requirements and demonstrate programme success to your leadership

Building Cyber Resilience with Managed Phishing and Security Awareness Training

(ISC)² officially launched our Diversity, Equity and Inclusion (DEI) initiative at this year’s Security Congress event. The conference featured DEI keynote speaker Jane Frankland on the importance of women in cybersecurity, as well as breakout sessions in our InclusionREADY track. These sessions generated great conversations and we received many questions. We’re excited to continue the inclusion conversation on December 1, 2021 at 1:00 p.m. Eastern/10:00 a.m. Pacific as we address many of those questions with our panel.

Continuing the Inclusion Conversation: Your Security Congress Questions Answered

Cyber threats will only continue to rise globally as the ROI of such attacks has unfortunately been proven. Coupled with the emergence of Ransomware-as-a-Service, the barriers for cyber crime to take place have been significantly lowered, causing more to fall prey. Many organizations today use legacy solutions to fight cyber threats, but find that they are losing the race as such methods may be outdated or ineffective. This is apparent when big organizations around the globe are impacted by ransomware attacks. To understand this race better, organizations need to change the question that will help them future proof their organizations against cyber threats. Join ReaQta and (ISC)2 on November 30, 2021 at 1:00p.m. GMT for a discussion on how to stay protected against cyber threats now and into the future.

The Defeat of Cyber Threats Begins with Asking the Right Question

Security teams need new approaches to work with the super fast development cycles that are inevitable when using Kubernetes and OpenShift. New research found 96% of enterprises using Kubernetes or OpenShift recently experienced a security related issue from a workload misconfiguration. One example: developers use non-enterprise approved Certificate Authorities CA(CAs) for TLS machine identities with Kubernetes, OpenShift, Istio and more making initiatives like Zero Trust impossible. These gaps won’t be fix with more controls pushed down from security teams. Developers today decide cloud-native security tooling. Security and developers need to operate in a #fastsecure mode: going as fast as possible while staying safe. Join Venafi and (ISC)2 on November 23, 2021 at 1:00p.m. GMT as open source innovator, Matt Barker, and security leader, Kevin Bocek discuss what #fastsecure means and how you can get started. The developer-led, cloud-native world doesn’t mean that security teams are any less important; just the opposite. Going faster means security teams bring their experience with threat protection, machine identity, risk and compliance to help developers stay safe at highest speeds.

#fastsecure: Security in the Age of Kubernetes

Taking the step toward earning the (ISC)² Certified Cloud Security Professional (CCSP) credential puts you on a path to excel as an expert in cloud security. CCSP empowers individuals and organizations with the highest level of mastery in cloud security. 

But how do you get started? How do you prepare? And why…what tangible benefits will you gain? Join (ISC)² for a panel discussion as industry professionals share their stories, experience and tips toward preparing for the Certified Cloud Security Professional certification. Areas for discussion will include:

- Why you should consider CCSP
- How to prepare for CCSP
- How CCSP can accelerate your career progression

The Cloud Gambit: Advanced Moves for a Cloud Security Career

Do you know who in your organisation has the most significant exposure to compliance risk?  Are they at risk because of their actions, or are they targets? How do you build a complete picture of their risk profile identifying potential risky behaviour? Join Proofpoint, (ISC)2 and Dennis Sullivan, Vice President, Senior Compliance Officer of Industry Leading Pimco, to listen to a case study on how they achieved world-class Supervision, from implementation, optimisation in production and how to look ahead to apply practical AI machine learning. On November 16, 2021 at 1:00p.m. GMT you’ll discover how big data analytics and ML can be brought to bear in the fight against misconduct by building an effective people-centric view, promoting a culture to protect your people from compliance violations, whilst safeguarding the whole organisation. Learn the practical steps now and how to scale into the future.

Compliance Begins with People: A Case Study from a Leading Financial Institution

Despite acknowledging its security benefits, many organizations hesitate to implement a Zero Trust model. An "all or nothing" approach to Zero Trust is a tall and unsustainable task. What if you took a more incremental, agile approach that allows your organization to make realistic steps toward achieving Zero Trust? Join Illumio and (ISC)2 on November 11, 2021 at 1:00 p.m. GMT  as we will discuss:

• Why taking a waterfall approach to rolling out Zero Trust is fraught with risk of failure 

• How adopting an agile mindset significantly improves the chances of success of achieving the Zero Trust security goals 

• The six steps to pragmatically build your Zero Trust security program using a repeatable process 

• How security controls like segmentation can help tackle focus areas such as workload protection 

• A demonstration of each of the six steps in action in the context of segmentation – see how an application is taken through the full cycle

Lighting a Path to Zero Trust: 6 Steps to Implementing a Zero Trust Model

Recruiting and retaining qualified IT security talent has never been more challenging. Nearly nine in 10 organizations are experiencing a shortfall, according to CyberEdge’s 2021 Cyberthreat Defense Report. That’s up from eight in 10 organizations just three years ago. This weighs heavily on the minds of IT security managers as ‘lack of skilled personnel’ is consistently rated as one of the top inhibitors to successfully defending networks against cyberthreats. So, what can organizations do to mitigate the effects of this talent shortage? Well, if you’re willing to ‘think outside the box,’ there is hope. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he:

Examines the shortage of IT security personnel by job role
Proposes creative ways for recruiting new security talent
Suggests clever ways for retaining the talent you already have
Identifies technologies that enable security teams to do more with less

Strategies for Recruiting and Retaining Top IT Security Talent

Mobile security threats can affect both Android and iOS devices.  In this webinar on September 28, 2021 at 1 p.m, BST,  (ISC)2 and Comarch will explore the most dangerous security vulnerabilities on these platforms. We will start from common problems like root and jailbreak which are very often the beginning of attack that leads to serious financial loses.

Then, we will compare different threats to find the most dangerous for our customers in terms of financial/business loses. The webinar shall provide details of heuristic and AI based solutions in terms of accuracy according to rapid changes of vector attack as well as Android/iOS platform capabilities comparison in terms of security gaps. Finally, we will go through best security practices to detect and prevent such threats on each platform. Described technics and mechanisms will help to choose between most common security solutions on the market.

Mobile Threats: What Can Hide Beneath Your Apps & How to Get Rid of Them

(ISC)2

ISC2

CISSP

Information Security

Cyber Security

Mobile Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Welcome to the big data and data management community on BrightTALK. Join thousands of data quality engineers, data scientists, database administrators and other professionals to find more information about the hottest topics affecting your data. Subscribe now to learn about efficiently storing, optimizing a complex infrastructure, developing governing policies, ensuring data quality and analyzing data to make better informed decisions. Join the conversation by watching live and on-demand webinars and take the opportunity to interact with top experts and thought leaders in the field.

Big Data and Data Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Mobile Threats: What Can Hide Beneath Your Apps & How to Get Rid of Them

Presented by

About this talk

More from this channel