ISSA Thought Leadership Series: Threat Reports Undone

Organizations historically have relied on their Cybersecurity, IT and their Networking teams to purchase
technologies to provide defense-in-depth protection for their organizations. While this is necessary, most
organizations never think that their biggest risk is actually their untrained employees.
With the onslaught of phishing, malware, ransomware attacks and Business Email Compromise or CEO
Fraud, we are at a critical point that each and every organization needs to have a successful training
program in place to properly educate their employees on how to identify social engineering attempts, or
they are almost guaranteed to fall short of its security objectives and they will become a victim of
cybercrime, and in many cases this can be a very expensive lesson to be learned.
Ninety percent of security breaches are caused by Human Error. A successful security awareness training
program will not only educate your employees. A successful program will also empower them to make
changes to their behavior and embrace a security minded culture, securing themselves and in turn,
securing your organization.
But how can organizations take the next step beyond training when changing human behavior is such a
complex process. Traditional security awareness programs are not enough—you need to develop
Security-Minded Employees and make it part of the corporate culture.
In this webinar, Larry Cates, President and CEO, and Suzanne Gorman, Vice President, Information Security
and Risk Management Evangelist with Global Learning Systems will discuss:
● Setting objectives to make your program successful
● Biggest risks to any organization
● Elements of a Successful Security Awareness Program
● Quantifying Your Success

Regardless of the industry, most organizations report to unique regulatory bodies with their own set of requirements– and meeting those requirements only becomes more complicated when data and applications are stored in the cloud. And on top of that, many companies find themselves lacking direction around Data Loss Prevention (DLP), legacy data archiving, data classification, document tagging, third party access, and other issues that can bring your organization out of good standing with those regulatory bodies.

How can your company quickly adapt your cloud controls, standards, and processes to maintain compliance under changing conditions?

In this webinar, our group of experts will provide guidance on tools and resources for your organization to develop a roadmap to better tackle your compliance needs in the Azure cloud.

Information security continues to evolve as the workplace goes hybrid

67% of security personnel are concerned that remote employees’ use of personal devices to access their work systems have hurt their organizations’ security posture. As hybrid work conditions become the norm, companies must find a way to keep their systems safe from cyber-attacks while keeping employees connected. This webinar provides solutions to the most common challenges facing security teams in the hybrid work environment.

• Learn about possible security issues stemming from remote work
• Ways to keep networks secure with little business interruptions
• Learn how password security can help protect networks

DDoS attacks have dominated the charts in terms of frequency, sophistication, and geo-distribution over the last year. Ransom DDoS attacks are also surging, crippling organizations' network infrastructure and taking them offline while demanding ransom in bitcoin. Unlike ransomware attacks, these ransom DDoS attacks do not even require the hacker to access an organization’s internal systems before they can be carried out.

There are no signs of DDoS attacks going away anytime soon. How do organizations ensure that their Internet assets are protected against threats of any size or kind?

In this webinar, you’ll learn about:

* Key Q2 2021 DDoS attack trends
* Ransom DDoS threats — and what you can do if you are affected
* Steps organizations can take to make the impact of DDoS attacks a thing of the past

How can technology help with global privacy regulation compliance, data analytics, and help us manage shared APIs, multiple companies, divisions, and departments with different data utilization strategies. How can differential privacy allow us to engage in meaningful research or demographic studies with detailed and privacy-protected datasets? Where are we now in the art of data management, software architecture, and where will we be in five years or ten years? How does self-sovereign identity play into this? Which historical experiences are analogous to our privacy and data protection work now and why is today’s IoT, video surveillance, facial recognition, artificial intelligence, and machine learning world different?

In this podcast, Dr. Cole will provide a playbook for approaching organizational security from this perspective. You’ll learn how a proper foundation for security is key, followed by proactive threat hunting and active defense. You’ll also get a prioritized checklist of actions that you can take right away to reduce the risk of an attack and mitigate one in progress..

The constant barrage of security threats is not going to let up, and if you wait to respond, it will already be too late.

In financial services, keeping gross fraud loss in check is critical to the brand and the bottom line. Unfortunately, financial services institutions are lucrative targets for organized crime rings and the tools that enable cybercriminals are becoming more sophisticated and less expensive. You need the latest intelligence if you want to protect your organization.

Join this session to learn:

• New threats from organized crime rings related to the credential marketplace landscape.
• Insights and evidence around how criminal organizations are increasingly reverting to manual (i.e., human-driven) fraud methods, and how to stop them.
• The latest machine learning algorithms trained by attack profile, risk surface, and historical fraud records that specifically protect banks, credit unions, and other financial institutions.

Understand What Matters - The New Approach to Assessing, Quantifying, Prioritizing, and Reducing Cybersecurity Risks to the Business

Today’s security teams navigate significant layers of complexity, contending with too many different standards and too many disparate technologies. The proliferation of technologies and terminology, in turn, generates a broader challenge: getting teams across the organization to speak plainly and generate consensus about risks to the business, all using a common language.
The reality is that too often there’s a fundamental gap between the cybersecurity strategy and business goals and priorities that conspires against the success of each of these roles.
Join us to learn how your organization can begin to achieve a common language and align priorities for reducing risk by employing risk-based vulnerability management, and by establishing a model for cyber risk quantification (CRQ) within the enterprise.
During the webinar we’ll discuss:
● Why a risk-based vulnerability management approach enables you to drive down and prioritize the risks that pose the gravest threats to the business
● A new, proposed model for quantifying cyber risks
● How a simple calculation and defining three key terms can provide a blueprint for aligning the organization
● How the model can be applied in less mature and in more mature organizations
● Which technologies will best support your cyber risk quantification efforts

Cybersecurity for a long time revolved around the central idea of the classic network perimeter, driven by the theory—inside is trusted and outside must be verified. When the cloud burst onto the enterprise IT landscape, many organizations resisted cloud migration because it infringed on the traditional concept of the network perimeter. Moving data and applications outside the data center into the cloud meant no control over user access and data security.

Today, the enterprise IT landscape is undergoing a radical transformation. The impact of the COVID-19 pandemic has irrevocably altered workplace dynamics. Retail office spaces have closed doors and organizations have shifted to long-term remote work. To support modern workforce needs, organizations are rapidly moving data and applications to multi-cloud and hybrid-cloud environments. The once trusted network perimeter is slowly disappearing. And cloud security has yet again become a top priority for business leaders. Thankfully, cybersecurity has evolved significantly, shifting the focus from network to identity as the new perimeter. And, machine identity is the modern approach to cybersecurity in a perimeter-less environment.

Machine identity-driven solutions such as Public Key Infrastructure (PKI) and CLM (Certificate Lifecycle Management) help organizations take complete control of all digital assets and enable secure online communication regardless of where they are located. This helps build a fluid and agile cybersecurity model that is identity-first and location-independent.
Join this webinar to understand how machine identity is redefining cloud security for today’s distributed and hybrid IT environments and helping organizations build cyber-resilience.