Name: Enabling Cyber Resiliency: Protecting Cloud Connected Assets, From a Former CISO
Start: 2020-01-30T17:00:00Z
End: 2020-01-30T17:45:53.000Z
Location: BrightTALK

New 451 Research shows that losing control of sensitive cloud data is the top concern for information security teams. Did you know that "Rogue Robert" has unauthorized access to the company’s trading applications? Or that “Sales Susan” can access the purchase order app AND the vendor payment app in the new data center?

Toxic combinations like these are difficult to spot across today’s web of interconnected applications, mixed environments, and distributed workforces. Even with proper identity access controls in place, complex application relationships can create hidden pathways between unauthorized users and sensitive data systems, exposing you to risk and regulatory consequences.

Discover vArmour’s groundbreaking new approach to managing risky user-app relationships across modern environments. We’ll combine our deep expertise in Application Relationship Management with expert insights from 451 Research to show you how a simple shift in perspective - looking from applications out towards the users - enables you to overcome today’s top risk and compliance challenges. You’ll learn about:

•New 451 Research on data loss in the distributed workforce and the role of relationships in securing modern architectures
•Identifying areas of user access vulnerability and risk by revealing application dependencies with application relationship management
•Controlling the blast radius of an incident using user-application relationship maps to accelerate incident response
•Creating accurate access policies for dynamic application environments and an increasingly dispersed enterprise

Presenters:
Fernando Montenegro, Principal Analyst at 451 Research. With 20+ years in enterprise security architecture, Fernando focuses on the developments, vendors, and tendencies in endpoint & cloud security.

Kate Kuehn, Senior Vice President at vArmour. Kate is an industry leader in security & advanced network technologies with former executive and security roles at Senseon, BT Group, Verizon.

Managing User Access Risks of a Distributed Workforce: The Permissions Puzzle

ESG Research recently found that “maintaining security consistency across hybrid cloud” is the top challenge for securing cloud-native applications. The acceleration of digital business means your application stacks span a mix of new and old infrastructure—from cloud to physical to everything in between. How do you control your risk in this complex environment?

Join this live discussion with experts from ESG, Microsoft, and vArmour to learn about the latest hybrid cloud security challenges keeping your peers up at night, along with how to address them using an Application Relationship Management solution. You’ll learn:

-Latest hybrid-cloud security trends along with key challenges security, risk, and operations teams need to anticipate
-How to bring consistent security controls to disparate environments, including Microsoft Azure
-How to achieve granular visibility into application relationships & dependencies
-How to reduce risk and increase application resilience for your org while gaining more value from your existing technologies

Speakers:

John Grady, ESG Analyst, has more than 15 years of IT vendor and analyst experience, which he leverages to help clients identify and quantify key market trends to facilitate data-driven business decisions.

Mandana Javaheri, Global Director of the Cybersecurity Solutions Group and Microsoft, has 20 years of experience across cybersecurity and networking. Prior, she was the CTO and head of technology alliances at Savvius.

Kate Kuehn, Senior Vice President, vArmour, has been an active thought leader in security & advanced network technologies for nearly 20 years. Kate's experience includes executive and security roles at Senseon, BT Group, Verizon.


*By registering you agree to vArmour & co-host partners contacting you for marketing purposes.

Securing Hybrid Cloud Apps: Why You Need Enterprise-Wide Visibility and Control

Today, non-traditional malicious insiders are one of the hardest groups of adversaries to detect. Moving laterally across your environment, these adversaries exfiltrate intellectual property, employee information, customer data, and other valuable information.

In this live panel discussion for CISOs, security practitioners, and incident response teams, learn how leveraging the power of relationships can protect and enhance your business’s current security practices in tackling the rising risks of non-traditional insider threats. Hear insights from today’s leading relationship-centric security thought leaders Rakesh Nair, CEO and Co-Founder of Kognos, Ben Johnson, Field CTO at Digital Shadows, Kate Kuehn, SVP at vArmour, and Rich Noguera, VP of Customer Success at vArmour, including:

-Unique trends of non-traditional insider threats from real-life case studies and lessons learned to combat threats 
-Perspective on the importance of visibility into lateral moving attacks within your infrastructure
-The change in industry standard towards complementary security solutions and partnerships between products to better understand and remediate attacks

*By registering you agree to vArmour & co-host partners contacting you for marketing purposes.

The Rise & Risk of the Non-Traditional Insider Threat

FFIEC requires that financial organizations assess risk based on a standardized set of criteria to accurately identify the risk level and determine the maturity of cybersecurity programs. The FFIEC and the National Institute of Standards and Technology (NIST) have developed the Cyber Assessment Tool (CAT), a risk assessment framework combined with a maturity model, to assist with the assessment of cyber and operational risk.
 
In this session, learn modern risk management best practices by using the CAT to maintain a continuous posture of readiness and respond to changes in your business, applications and threats. Hosted by former Goldman Sachs Networking CTO Marc Woolward, now CTO & CISO at vArmour, this session will also demonstrate how continuous application relationship management enables you to automatically address and manage cyber requirements. 

This session will cover:

-Priorities and requirements for addressing risk outlined by the framework
-Determining your organization’s security maturity level within cyber risk management, threat intelligence and cybersecurity controls
-Why dynamic controls are required to address risk in cloud
-Specific controls to help you increase the maturity of your cybersecurity program

FFIEC Risk & Relationship Series: Assessing Risk with the Cyber Assessment Tool

When it comes to planning for additional business continuity challenges, an up-to-date Business Impact Analysis (BIA) is imperative to prioritizing and assessing risk to critical functions. Learn the keys to achieving an accurate risk assessment with the help of automation, dependency mapping, and scenario modeling.

Hosted by former Goldman Sachs Networking CTO Marc Woolward, now CTO & CISO at vArmour, along with Colin Ross, Sr. Director of Systems Engineering at vArmour, this 20-minute session demonstrates how continuous application relationship management helps you proactively assess risk and business impact. This segment will cover:

-How automation reduces cost and increases precision
-What application relationships tell you about business risk
-How proactive mitigation through resilience limits scope of failure

FFIEC Risk and Relationship Series: Best Practices of Business Impact Analysis

When it comes to building resilience for Business Continuity Management (BCM) in financial services, the ability to understand critical business functions and manage them proactively on a continuous basis is paramount. Learn tools and techniques that can be applied to both preventing cyber attacks and planning for additional business continuity challenges including the Business Impact Analysis (BIA). 

vArmour security leaders Marc Woolward, CTO & CISO and Colin Ross, Sr. Director of Systems Engineering, Americas will also demonstrate the importance of a resilient, flexible architecture to achieve operational and cyber resilience for BCM with a continuous data-driven solution called Continuous Application Relationship Management. This session will address key areas of BIA, including:

-Identifying Critical Business Functions to understand risks and ensure necessary operational measures and controls are applied

-Performing Interdependency Analysis to understand when dependencies change and assess RTO and RPO risk

FFIEC Risk & Relationship Series: Addressing Business Continuity Requirements

Learn the keys to maintaining a bulletproof information security and compliance strategy as we transition to a world of digital customers and distributed operations. In this 30-minute live discussion, join special guest Mark Weatherford, former VP & Global Information Security Strategist at Booking Holdings, for perspectives, predictions, and pointers for limiting business risk and tackling compliance challenges across a newly distributed workforce.

Mark will be joined by security veterans Rich Noguera, VP of Security Services at vArmour (former CISO of Gap & Yapstone), and Marc Woolward, CTO & CISO at vArmour (former CTO for Networking and Telcom at Goldman Sachs) to discuss strategies for managing risk with tactics for:

-Addressing shifts in data management due to increased reliance on analytics and BI
-Maintaining customer anonymity while delivering mass personalization
-Blending “frictionless” transaction speed with secure data practices
-Adapting IR, operations, and compliance strategies to increased digital demand

*Attend the full live session and afterwards we'll send you a $25 Uber Eats Gift Card so you can enjoy lunch on us! You must be on your business's security or infrastructure team to be eligible. Additional restrictions apply. See terms and conditions: https://info.varmour.com/lunchandlearn_april22_terms_and_conditions.html

*By registering you agree to vArmour & co-host partners contacting you for marketing purposes.

Scoping Compliance & Securing Data in a Digitally Demanding World

The operating state of many financial institutions will vary over the coming years and may never return completely to the ’old normal’. Learn best practices to address the ‘new normal’ of Business Continuity Management (BCM) focusing on operational and cyber resilience per the changing financial services regulatory requirements, specifically FFIEC. 

vArmour security leaders Marc Woolward, CTO & CISO and Colin Ross, Sr. Director of Systems Engineering, Americas will also demonstrate the importance of a resilient, flexible architecture to achieve IT risk management with a continuous data-driven solution called Continuous Application Relationship Management (CARM). The session will address changing FFIEC requirements, including:

-Shifting from static, event-based planning to continuous resilience for BCM
-Understanding critical functions and their interdependencies for operational resilience
-Developing continuous capabilities to monitor, test, and document environments for cyber resilience

Risk and Relationship Series: FFIEC IT Risk Management

Join this interactive 30-minute discussion for an insider perspective on how IT and Security CEOs are adapting to the “New Normal.” Paul Hooper, CEO at Gigamon, and Tim Eades, CEO at vArmour, will discuss the impact of the fully remote workforce on company culture, business outlook and digital business operations and how they are responding at their respective companies. And as technology partners, vArmour and Gigamon’s belief that organizations are more secure when their IT and security technologies work together.

Moderated by vArmour SVP of Alliances Kate Kuehn, this is a must attend event for all security and IT leaders for an inside scoop on the decisions being made at the executive level of your organization.

Key Topics include:
-The business transformations resulting from the global pandemic
-The importance of partnerships in maintaining business continuity
-Recognizing the positivity in adapting to a new business climate
-Acclimating the organization to a now digital sales cycle

*Attend the full live session and afterwards we'll send you a $25 Uber Eats Gift Card so you can enjoy lunch on us! You must be on your business's security or infrastructure team to be eligible. Additional restrictions apply. See terms and conditions: https://info.varmour.com/lunchandlearn_april15_terms_and_conditions.html

*By registering you agree to vArmour & co-host partners contacting you for marketing purposes.

Lunch & Learn: Insider Perspective on How CEOs are Adapting to the “New Normal”

Join our 30-minute interactive discussion with security leaders from East West Bank, Salesforce, Tufin and vArmour to learn how application relationship management and centralized policy reduces risk stemming from the remote workforce and distributed business operations. Maintaining operational and cyber resilience through the pandemic response is not only critical to the business, but for many is a mandate by regulations, including the FFIEC and the California Attorney General, amongst others.

Speakers:
-Awwab Arif, SVP CISO of Enterprise IT Risk Management at East West Bank
-Dan Tisher, Director of Engineering at Salesforce
-John Moran, Technical Director of Business Development at Tufin
-Rich Noguera, VP of Security Services at vArmour (former CISO of Gap & Yapstone)

*Attend the full live session and afterwards we'll send you a $25 Uber Eats Gift Card so you can enjoy lunch on us! You must be on your business's security or infrastructure team to be eligible. Additional restrictions apply. See terms and conditions: https://info.varmour.com/lunchandlearn_april8_terms_and_conditions.html

*By registering you agree to vArmour & co-host partners contacting you for marketing purposes.

Virtual Lunch and Learn: Resilience and Compliance in a Distributed Workforce

Enterprises today are leveraging multiple clouds for the cost and scale benefits that cloud brings, but rapid adoption is creating new challenges for CISOs and their teams. As complexity increases across environments and applications, security teams struggle to maintain visibility of critical workloads and their dependencies. Without a way to understand application relationships across the environment, vulnerabilities become hard to manage and addressing risk becomes risky itself.

In this 30-minute webinar for CISOs, Security Engineers, Architects, and SOC Teams, learn how to gain the visibility and context necessary to properly secure multi-cloud applications. You'll learn:

-The complexities of application security in multi-cloud environments
-How limited visibility increases cloud risk and exposure
-How understanding application relationships provides critical context for security
-How to turbocharge multi-cloud security with existing data sources

Presenters:
Fernando Montenegro, Principal Analyst at 451 Research & 20-year security industry veteran
Rich Noguera, VP of Security Services at vArmour & former CISO of Gap and Yapstone

Multi-Cloud Security: The Power of Relationships in Complex Environments

Enterprise IT is transforming rapidly and the evolution to container-structured applications is an important element of this transformation. From the container’s humble origins as a method to virtualize UNIX operating systems to provide process separation with high levels of efficiency, it has become the preferred method for building and deploying modern software into cloud environments.

Containers are foundational to propelling agility in the enterprise -  they are dynamic in nature, support increasing computing densities, have data residency and data provenance for governance and present challenges and opportunities for security in this new world with DevSecOps.

Please join Peter Christy, Research Director of 451 Research and Marc Woolward, CTO at vArmour as they discuss all things containers along with a look at vArmour’s container strategy, solution and latest patent on container security.

All Things Containers: Innovation, Adoption and Security

The digital economy is built upon distributed systems. Distributed systems scale horizontally, interconnect via APIs, and are highly resilient. The security solution for this digital economy needs to be equally distributed and capable of scaling  out across the multicloud.

The world has changed – the perimeter is disappearing alongside an explosion of internal threats. The imperative is to wrap security controls around assets so that environmental changes do not expose critical assets that need protection at all times. Security requirements have changed from the legacy appliance model to the modern distributed model.

In this Webinar, we will discuss how modern software architectures solve today’s security challenges   – particularly in addressing complexity, scaling across the multicloud, innovating new controls, and providing visibility into application requirements and relationships

Intel x86 and virtualized platforms offer ubiquitous, fast, cost efficient solutions, allowing for deep packet processing at high speed and rapid deployment of new features in software. These platforms are unconstrained by the limitations of specialist hardware, ‘appliance thinking', and network technology posing as security products – Welcome to the new era of IT security, enabled by Intel and vArmour.

How Distributed Systems Define the New Era of IT Security

Eva Tsai will share her experience as a woman in tech charting a journey spanning multiple disciplines and excelling as a strategic business leader, her thoughts on the challenges women are facing, both in entering and advancing in their careers, and what her recommendations are on both professional and personal fronts. 

Presenter Bio:
Eva has extensive experience leading go-to-market transformation and managing company telemetry to drive growth worldwide.  Her innovation and leadership has been recognized with significant industry awards and patents.  She was selected by Silicon Valley Business Journal in 2015 as one of Silicon Valley's 100 Most Influential Women and won the 2014 Marketer That Matters™ award, sponsored by The Wall Street Journal.  At vArmour, Eva has transformed the company into a growth machine via innovative and well-executed go-to-market strategy, insightful telemetry, and process optimization. vArmour has been named a “Company to Watch” by TechCrunch and a "Cool Vendor" by Gartner.  Prior to vArmour, Eva held strategic roles at Citrix, BroadVision and Oracle.  Eva holds a BS and a MS in Computer Science from Massachusetts Institute of Technology.

Build the Rocket for Your Journey

Legacy security architectures and traditional security platforms are ineffective at securing modern data centers.  Modern data centers need a security solution that is software-based, distributed, and simple: making security better, faster, and cheaper.  vArmour is the leader in software-based segmentation and micro-segmentation that protects critical applications and workloads in the data centers and cloud.  

Join this webinar to learn more about the simple steps to securing the modern data center with vArmour. 

Step 1: Understand the behaviors of applications and workloads (with deep visibility) for more informed decisions
Step 2: Streamline segmentation policy creation and management 
Step 3: Flatten and secure your infrastructure without a network redesign 
Step 4: Utilize proper control placement for better security and more efficient resource utilization 
Step 5: Scale out independent controls with automation

5 Steps to Simplify Security in the Modern Data Center

The problem of detecting attackers in today’s enterprises and data centers is harder than ever. Well-funded adversaries with time and patience use techniques that blend in with enterprise activities, making accurate detection difficult. Security analytics promises to address this situation by throwing advanced math at available data sources in the enterprise, with the goal of finding the proverbial threat needle in the data haystack.

This presentation will enable attendees to evaluate security analytic solutions, cutting through the buzzwords and hype, and providing both a deep understanding of the detection problem and a framework to evaluate solution efficacy, based on three axes: breadth, depth and control.

The Three Axes of Evaluating Security Analytics Solutions

As the global cyber threat environment continues to evolve, organizations need to begin thinking differently about information security and the protection of their infrastructure. The evolution from perimeter-centric, hardware-based environments to virtualized data centers and the cloud is underway and many organizations are late to the game.  As CIO’s and CISO’s are driven to transition their CapEx investments to OpEx spending, the economic efficiencies of the cloud provide a rational path to those goals.  From a security perspective however, security models that don’t sufficiently address workload and application-aware segmentation, lateral traffic visibility, and network-based threat detection of on-premises data center and public cloud-based environments leave a huge gap in the overall security posture. 

This talk will provide CIO's and CISO's struggling with decisions about migration to the cloud with some thoughts about how the cloud can be the catalyst that improves security while also reducing costs and technology footprint.

To the Cloud: Ready or Not! …The Catalyst for Better Cybersecurity?

Enterprises today are leveraging multiple clouds for the cost and scale benefits that clouds bring, but rapid adoption is creating new challenges for CISOs and their teams. Effective CISOs must have situational awareness, the ability to detect and respond to acts, and also enable cyber-resilience to protect the enterprise.

Join vArmour's VP of Security Services, Rich Noguera, former CISO of Gap and Yapstone, in this one-hour webinar targeted for CISOs, Security Engineers, Architects, and SOC Teams. You'll learn the key steps necessary to protect crown jewel data in cloud enabled enterprises.

Enabling Cyber Resiliency: Protecting Cloud Connected Assets, From a Former CISO

Cloud Security

Cyber Security

Hybrid Cloud

Multi Cloud

Azure

IT Security

CISO

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Enabling Cyber Resiliency: Protecting Cloud Connected Assets, From a Former CISO

Presented by

About this talk

More from this channel