Name: Risk and Relationship Series: FFIEC IT Risk Management
Start: 2020-04-22T17:15:00Z
End: 2020-04-22T17:15:28.000Z
Location: BrightTALK
Rating: 0

Unlock the pathway to DORA compliance and operational resilience in our webinar, 'Preparing for DORA: Automating ICT Risk Management for Operational Resilience,' hosted by vArmour's CTO & CISO, Marc Woolward, and VP of Customer Success, Matt Ebben. Discover how DORA regulations are shaping 2024 operational resilience priorities for financial institutions, and learn how to leverage automation to simplify your compliance journey while navigating DORA requirements for ICT Risk Management.

This session explores DORA’s four-step ICT Risk Management Workflow and the must-know requirements that financial institutions must have in place before the January 2025 compliance deadline. We’ll dive into real-world approaches to automation that risk management leaders can use to overcome the most pressing DORA compliance challenges. Additionally, we’ll introduce vArmour's Decision Intelligence Platform for automating ICT Risk Management, and explore how it addresses the challenges posed by the proliferation of application relationships and dependencies in modern environments, and how it removes lengthy, error-prone manual approaches from your DORA journey.

Join us for an insightful session on automating ICT risk management processes for DORA compliance and optimizing operational resilience in today's dynamic business landscape.

Preparing for DORA: Automating ICT Risk Management for Operational Resilience

Welcome! Join us for a deep dive into operational resilience in the digital age. As companies complete their digitalization journey, unforeseen challenges emerge. Our panel, featuring Malcolm Melville, EMEA Field CISO at WWT, Marc Woolward, CTO & CISO at vArmour, and Alan Jenkins, Principal Consultant at Cyber Security Navigator Ltd will explore these challenges and the crucial role of operational resilience. We'll demystify "ground truth" and discuss how it informs decision-making. We’ll also look at how to prioritize operational resilience for your 2024 IT strategic planning.

Takeaways:

• Know Your Ground Truth: Understand what's measurable and actionable.
• Map Relationships and Dependencies: Identify crucial connections between your critical business services.
• Align with Business Priorities: Synchronize resilience with compliance, data protection, and growth.

Reserve your spot today. If you can’t make the live event, your reservation means we’ll send you the recording.

Speakers:

• Malcolm Melville, Field CISO EMEA, World Wide Technology
• Marc Woolward, CTO & CISO, vArmour
• Moderator: Alan Jenkins, Principal Security Consultant, Cyber Security Navigator Ltd.

Manifesting Operational Resilience: The Role of Ground Truth

Join us for an insightful webinar that explores the significance of operational resilience for financial services institutions serving the EU and US regions. Ensuring operational resilience is a daily struggle for many organizations: service failures, operational changes, incident blast radius, inconsistencies in recovery time objectives, and toxic combinations or conditions are all critical operational challenges that directly impact the bottom line. That’s not to mention the potential reputational damage and steep fines now being levied by regulators relating to operational resilience failings.

This webinar will dive deep into two specific regulations: DORA in the EU, and FFIEC BCM in the US. We’ll be discussing the stricter policy guidelines they’ve established, and where you should start in building operational resilience for your organization. We will also begin to explore operational resilience management as a strategic advantage beyond the regulatory imperative. 

Agenda:

• The evolution of Business Continuity Planning to Operational Resilience
• DORA and FFIEC BCM guidelines specific to operational resilience 
• How lack of visibility into IT environments impacts operational resilience
• Why the identification of Important Business Services is the crucial starting point
• The benefits of continuous mapping of Important Business Services
• Q&A

Register now to secure your spot!

Guests:
• Paul Kelly, Cyber & Digital Risk Specialist, vArmour Advisor
• Marc Woolward, CTO & CISO, vArmour

Moderator:
• Sherban Naum, CRO, vArmour

Get Ahead Of New Operational Resilience Compliance Requirements: DORA and FFIEC

FFIEC requires that financial organizations assess risk based on a standardized set of criteria to accurately identify the risk level and determine the maturity of cybersecurity programs. The FFIEC and the National Institute of Standards and Technology (NIST) have developed the Cyber Assessment Tool (CAT), a risk assessment framework combined with a maturity model, to assist with the assessment of cyber and operational risk.
 
In this session, learn modern risk management best practices by using the CAT to maintain a continuous posture of readiness and respond to changes in your business, applications and threats. Hosted by former Goldman Sachs Networking CTO Marc Woolward, now CTO & CISO at vArmour, this session will also demonstrate how continuous application relationship management enables you to automatically address and manage cyber requirements. 

This session will cover:

-Priorities and requirements for addressing risk outlined by the framework
-Determining your organization’s security maturity level within cyber risk management, threat intelligence and cybersecurity controls
-Why dynamic controls are required to address risk in cloud
-Specific controls to help you increase the maturity of your cybersecurity program

FFIEC Risk & Relationship Series: Assessing Risk with the Cyber Assessment Tool

When it comes to planning for additional business continuity challenges, an up-to-date Business Impact Analysis (BIA) is imperative to prioritizing and assessing risk to critical functions. Learn the keys to achieving an accurate risk assessment with the help of automation, dependency mapping, and scenario modeling.

Hosted by former Goldman Sachs Networking CTO Marc Woolward, now CTO & CISO at vArmour, along with Colin Ross, Sr. Director of Systems Engineering at vArmour, this 20-minute session demonstrates how continuous application relationship management helps you proactively assess risk and business impact. This segment will cover:

-How automation reduces cost and increases precision
-What application relationships tell you about business risk
-How proactive mitigation through resilience limits scope of failure

FFIEC Risk and Relationship Series: Best Practices of Business Impact Analysis

When it comes to building resilience for Business Continuity Management (BCM) in financial services, the ability to understand critical business functions and manage them proactively on a continuous basis is paramount. Learn tools and techniques that can be applied to both preventing cyber attacks and planning for additional business continuity challenges including the Business Impact Analysis (BIA). 

vArmour security leaders Marc Woolward, CTO & CISO and Colin Ross, Sr. Director of Systems Engineering, Americas will also demonstrate the importance of a resilient, flexible architecture to achieve operational and cyber resilience for BCM with a continuous data-driven solution called Continuous Application Relationship Management. This session will address key areas of BIA, including:

-Identifying Critical Business Functions to understand risks and ensure necessary operational measures and controls are applied

-Performing Interdependency Analysis to understand when dependencies change and assess RTO and RPO risk

FFIEC Risk & Relationship Series: Addressing Business Continuity Requirements

The operating state of many financial institutions will vary over the coming years and may never return completely to the ’old normal’. Learn best practices to address the ‘new normal’ of Business Continuity Management (BCM) focusing on operational and cyber resilience per the changing financial services regulatory requirements, specifically FFIEC. 

vArmour security leaders Marc Woolward, CTO & CISO and Colin Ross, Sr. Director of Systems Engineering, Americas will also demonstrate the importance of a resilient, flexible architecture to achieve IT risk management with a continuous data-driven solution called Continuous Application Relationship Management (CARM). The session will address changing FFIEC requirements, including:

-Shifting from static, event-based planning to continuous resilience for BCM
-Understanding critical functions and their interdependencies for operational resilience
-Developing continuous capabilities to monitor, test, and document environments for cyber resilience

Risk and Relationship Series: FFIEC IT Risk Management

IT Security

FFIEC

Cyber Intelligence

Cloud Security

Business Continuity

Cyber Resilience

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Risk and Relationship Series: FFIEC IT Risk Management

Presented by

About this talk

More from this channel