ISSA Thought Leadership Series: Threat Reports Undone

Threat intelligence has always been a hot topic and remains to be so. Understanding how your organization can benefit from threat intelligence is the first step. The second step would be how to dissect the world of threat intelligence and build real requirements that can provide value. Once you set requirements for intelligence and obtain access to threat intelligence, it needs to be applied in an operational manner. Where it belongs in security operations and how it can impact the processes and tools in place can make a world of difference. Coming full circle, threat intelligence being a hot topic has people focused on other hot topics in security. Many of these new technologies and approaches are interesting and can provide value, but in many cases, fundamentals are left behind. Taking a risk-based approach and focusing efforts on the building block of a comprehensive cyber program often gets overshadowed by the allure of trendy and new solutions. Telling the difference between the steak and sizzle can mean a make or break for the security posture of your organization.

The news that SolarWinds was breached and used to distribute malicious code rocked the security world in December. In this session, Jake Williams founder and chair of the inaugural SANS Supply Chain Security Summit, will discuss software supply chain attacks, what they are, and how to threat model, and how to prepare for the inevitable next one.

Even before 2020, we knew where digital transformation was taking us. But we had no idea how quickly it would arrive. Because of the pandemic, our journey in cloud migration happened almost overnight. As a result, businesses today are less constrained by traditional network infrastructure and designated worksites. And, while we’ve always had some agility to shift work between on-prem and remote, we’re seeing the beginning of the new age of the Unbound Enterprise in which people have the freedom to work anywhere and anytime.

Join this discussion to see how the new ways that people are accessing and using data—in multiple locations, on different devices, over the internet, in public and private clouds—are greatly accelerating the need to replace siloed infrastructure that can’t keep up. We’ll connect the dots on how you can take a “human-centric” SASE approach that puts users and data at the center of cloud-based security to make your business more agile and safer, all while cutting complexity and cost.

Takeaways:
1. Make working anywhere seamless and easy to deploy
2. Protect data everywhere with a single set of policies enforced uniformly from endpoints to the cloud
3. Automatically personalize security based on people’s behavior and the risk they present

Some privacy regulations now have privacy by design/privacy by default obligation, and in the past, these have been difficult for engineers to define and implement. We will explore the history of how to translate these vague legal obligations into concrete design requirements. This session will explain how privacy design strategies were developed and how they break down into actionable tactics. We will provide real-world examples of how to apply the tactics in practice. You will walk away with knowledge of privacy-friendly processing techniques and how to process personal data responsibly.

Your vendors present a real operational risk to your business in 2021. The pandemic drove major shifts in not only how your business operates and partners, but also how your suppliers operate and partner. These systemic changes left unchecked can leave your business at significant risk to real cybersecurity threats.

Join Troy Vennon, Director of Cybersecurity and Trustworthiness at Covail, for a quick session on:
1. The 2021 outlook on supply chain risk and threats
2. How MITRE ATT&CK can help prioritize threats and risks
3. Practical, actionable steps to get you on the right path to managing third-party risk with confidence

Cyber criminals are taking a people-centric approach to phishing attacks. Is your organization taking a people-centric approach to phishing prevention? Join this webinar for Proofpoint’s seventh annual State of the Phish report as it delivers critical, actionable insights into the current state of the phishing threat.

Our experts will deep dive into:

- The end-user awareness and knowledge gaps that could be negatively impacting your cybersecurity defenses.
- The impacts infosec professionals are experiencing as a result of phishing attacks and the ways they’re attempting to combat these threats
- How organizations are delivering phishing awareness training, and the ways they measure program success

Diana will share her expertise on cyber security trends for the future, and what they mean to business, the world and your career. She will provide personal insights on executive career planning, what will help you build a successful security program, and how you can create your own impact and path to success.

Supply Chain Risk Management doesn’t need to be complex or resource intensive. A well-designed approach to your risk strategy can save you time, money, and headache.

In this webinar, Security Assessment Specialist Brandon Ritze will share:
1. The key building blocks to an effective risk strategy
2. Common pitfalls organizations make that should be avoided
3. Practical, actionable steps to get you on the right path to managing third-party risk with confidence

The “shift left” approach is not a new concept within software testing and DevOps best practices and it is commonly thought of when discussing DevSecOps. This usually includes security testing earlier in the software development lifecycle with the goal of identifying security vulnerabilities and weaknesses prior to shipping code to operations. However, “shift security left” is commonly interpreted to be “get developers to run security tools”. This approach is fraught with issues as it requires developers to context switch out of their workflow, learn and use new tools, understand the output of these new tools, and file bugs to be remediated (in yet another tool). The “shift left” approach requires a harder shift left, bringing security testing as close as possible to the developer while not expecting them to learn new tools. Furthermore, security results need to be contextual and provide actionable next steps so they can be resolved as quickly as possible. Finally, security scans need to finish in minutes, not in hours or days. A harder shift left empowers you and your organization as it applies repeatable, defensible processes that automate security and compliance policies from the first line of code written.

In this session, we will discuss:
• Common pitfalls when implementing traditional “shift left” security
• How to best apply different security scanning techniques available
• Embedding security scanning into the developer workflow
• Automating secure development best practices

In this podcast, Dr. Cole will provide a playbook for approaching organizational security from this perspective. You’ll learn how a proper foundation for security is key, followed by proactive threat hunting and active defense. You’ll also get a prioritized checklist of actions that you can take right away to reduce the risk of an attack and mitigate one in progress.

The constant barrage of security threats is not going to let up, and if you wait to respond, it will already be too late.

In this session, Thom Bailey, senior director of product strategy at Mimecast, will explore the benefits of a consolidated cyber resilience platform to layer security, enhance visibility, and more effectively reduce mean time to remediate (MTTR). Attendees can expect to learn how to leverage an open API platform that uses shared threat intelligence to integrate with prevention, detection, and response technologies, and identify phishing emails with machine learning using real-life attacks to train and educate end users. With this knowledge session, attendees will gain an understanding of business risk with a Risk Score, comprised of aggregated data, to better gauge their organization’s security posture.

5 Benefits of Attending Session:

• Learn the benefits of a consolidated cyber resilience platform to layer your security, enhance visibility, and more effectively reduce time to respond/remediate (MTTR)
• Leverage an open API platform that uses shared Threat Intelligence to integrate with the prevention, detection, and response technologies
• Identify phishing emails with Machine Learning - and use real-life de-weaponized phishing attacks to both train and educate end-users
• Understand and manage business risk with a Risk Score comprised of aggregated data to gauge the organization’s security posture

Many businesses have now been supporting work from home for months now. After an initial rush to get the basics such as remote access to applications scaled up, what other changes need to be considered to protect and secure remote employees? Especially since it may be a considerable time before normality returns, this question is more imperative than ever.

In this webinar, we will look at how attackers have adapted their techniques to exploit remote working, what changes has there been in user behavior and the top 5 approaches business should be considering to protect users when they are accessing the public internet.