ISSA is the community of choice for international cybersecurity professionals dedicated to advancing individual growth, managing technology risk and protecting critical information and infrastructure.

In today's world cybercriminals are busy at work every day and cyber threats are at an all-time high. It’s time to get serious about protecting your data. Join us to learn the anatomy of the 8 Ransomware stages and see what exploits that bad actors leverage. We'll walk you through the technologies we offer to set up your security with other best practices for mitigating a myriad of cyber threats. You will walk away understanding how you can keep your environment safe from ransomware while utilizing next-generation firewall technology.

Solutions to Combat Ransomware

In this podcast, Dr. Cole will provide a playbook for approaching organizational security from this perspective. You’ll learn how a proper foundation for security is key, followed by proactive threat hunting and active defense. You’ll also get a prioritized checklist of actions that you can take right away to reduce the risk of an attack and mitigate one in progress..  The constant barrage of security threats is not going to let up, and if you wait to respond, it will already be too late.

Life of a CISO

Privacy incident response management is a key component of any mature privacy program.  Your IR process should be more than a reaction to events impacting privacy but comprehend a vast array of dynamic factors such as global and local privacy laws and regulations, internal organizational and external partnering, and purpose-driven metrics that go beyond containment.  In her presentation, Carrollynn will talk about some of the nuances of privacy incident response management, including challenges and opportunities to drive towards a agile and resilient privacy program.

Nuances of Privacy Incident Response Management

API security has emerged as a top priority for protecting vital data and services. Unfortunately, many organizations are just one vulnerable API away from a privacy incident or data breach, and it’s an area where many companies lack expertise.

Salt Security has compiled a comprehensive list of API security best practices, drawn from field experience and customer feedback, to help guide your API security journey.

Join us for this session on API security best practices focusing on these key areas:

- API documentation, discovery, and cataloging to improve awareness of your API attack surface
- Runtime protection to prevent sensitive data exposure and protect your APIs from abusive callers
- API-centric security operations so you're prepared in the event of an API incident or breach

API Security Best Practices

In today’s complex world of legacy networks, branch offices, work-from-home, public, and private clouds, gaining the proper network visibility has never been more challenging and vital for cyber threat protection. Join this educational webinar on advanced network detection and response platforms for the scale, scope, and consistency required to secure today’s digital infrastructures. This session will demonstrate (at a high level) the necessary components and aspects of Advanced Network, Detection, and Response. Understanding how the critical elements of advanced NDR work together is essential to achieving comprehensive network protection for Enterprise networks.
 
Examples of NDR Characteristics Explored and Demonstrated in this Discussion
• Detect, investigate and remediate emerging threats
• Manage packet-based data
• Conduct full packet capture at scale 
              
The incompleteness of the network data in your current cybersecurity stack could be decreasing your overall efficiency and effectiveness as a cyber organization.  Join Us To Learn More.

Advanced Network Detection and Response (NDR) in Action

The Center for Internet Security (CIS) is a top resource for cybersecurity best practices. One of its recommended security controls, Control 4, should be called “Remember What Happened to the Death Star.” Why? Well, in case you don’t remember, the Star Wars® Death Star was designed to be impregnable but wasn’t, as proven when Luke Skywalker blew it to bits by exploiting a vulnerability, a simple engine exhaust port. CIS Control 4 is all about hardening systems against attack — a strategy as critical for IT ecosystems as for intergalactic weapons of mass destruction.
Unfortunately, research suggests that IT vulnerabilities are increasing today, due in part to a widening gap between cybersecurity teams and IT operations. As a result, organizations are at a higher risk of breaches and less able to make good decisions about investments in security controls and operational infrastructure.
Join this webinar as we explain what CIS Control 4 involves and how to implement it in your organization — all in just 45 minutes.

Cybersecurity Lesson from the Death Star: CIS Control 4 Explained in 45 Minutes

Digital transformation promises business growth by providing value to customers by
leveraging emerging technologies and supporting skills for new business models. At its
core, data-driven decisions are the lifeblood of digital transformation. When data is
poisoned, stolen, and misused for malicious intent, progress slows resulting in poor
customer experience and satisfaction. In this session, we will explore how sophisticated
bot attacks are contaminating top digital transformation trends related to automation,
data analytics, and application architectures that should be part of every security strategy
to solve in 2022.

Your Digital Transformation is Being Sabotaged

ISSA International is partnering with various organizations to find new ways to address the CyberSecurity talent shortage.
Today's session will highlight four particular organizations that will provide ISSA members and guests with the resources if they were looking into any of these types of programs.

New approaches to Addressing the CyberSecurity Talent Shortage

Abundant data is now available to put numbers behind what we instinctively know: trusted organizations are more successful. InfoSec teams have a prominent role in helping their organization become trusted, and therefore more successful: first and foremost, by communicating changes in the IT & security risk posture. In this webinar, Justin Henkel, OneTrust’s Head of CISO Center of Excellence, is joined by Ryan Walker, Third-Party Risk Manager at AutoZone to drill down into how IT & Security teams support risk reduction, build trust, and drive growth.

Key Takeaways:
•        Learn about recent research that quantifies the value of trust for businesses.
•        Maturing IT & Security risk management responsibilities and activities to respond to the ever-changing security landscape.
•        Discuss communication improvements and how to create transparency in your risk remediation process

How Successful Security Teams Manage Risk to Build Trust & Drive Growth

Sharing insights without leaking personal data: an introduction to differential privacy.

Differential privacy is a principled approach to sharing insights about groups, without revealing personal data about individuals. In this talk, we will explain what differential privacy is about, provide a high-level intuition of how it works, and explain what kind of problems it can solve. We will then present a case study from our work with the Internal Revenue Service, to provide a concrete example of a real-world deployment of this approach. We will then conclude by giving a brief overview of our work towards making it easier for anyone to use and deploy differential privacy.

Sharing insights without leaking personal data

An all-too-common belief is that to move fast you must sacrifice security. It’s a dangerous assumption, based on the misguided belief that cyber criminals are focused on larger, “juicier” targets. The Kaseya ransomware attack proved that any organization can be a victim – regardless of size or maturity.

This conversation between Cobalt CSO Caroline Wong, Abrigo Senior Manager of Security Operations Jeremy Herr, and Debbie Christofferson will debunk the myth that security and speed do not mix. 

Scaling companies often prize innovation above all else, and bolt security on as an afterthought. Remote work adds further pressure to build a comprehensive security strategy. But how do you build in proactive, preventative measures when you’re strapped for money, talent, and guidance? The fireside chat will discuss:
• Why testing is critical, and automation alone isn’t good enough. 
• Which practices really work with today’s modern software development cycles 
• What “security at scale” really means, and practical tips to achieve it.

Modern Security with PtaaS: Move Fast and Don’t Break Things

Insider threats continue to be a significant cybersecurity threat within organizations, although often overlooked. In fact, in the past two years, insider threat incidents increased by 44%, and the annual cost of those threats increased from $11.45 million to $15.38 million.  Insider threat risks are clearly an area that organizations need to address. 
 
Join our webinar to learn about the benefits of a modern, people-centric approach to insider threats and data loss. Hear insights from the Ponemon 2022 Cost of Insider Threats Report and understand what the data means for your organization. 
 
You will learn:
•                     How to recognize the three insider threat profiles and why they are trending up
•                     The importance of context to understand people risk
•                     Real-world examples of insider threat scenarios and their implications
•                     How to build an ITM program tailored to business outcomes

Manage Insider Threats with a People-Centric Approach

The remote and hybrid work revolution forced organizations to rework their identity and access management procedures to ensure that distributed workforces could access internal resources securely. However, critical third-party vendors and business partners also require access to internal systems and data, and as recent supply chain attacks have demonstrated, a vendor with a poor security posture is as much of an “insider threat” as an untrained or malicious employee. This webinar will examine the risks posed by supply chain attacks, discuss high-level considerations when assessing the security posture of vendors and partners, and propose strategies for mitigating vendor risk from within your organization.

Supply Chain Cyber Risks & Security Strategies

Optimize your security posture by combining the power of automation with human intervention

In this session Jason Miller, CEO and Founder, BitLyft Cybersecurity will discuss why a layered approach to cybersecurity is the best method to address advanced cyberthreats and other challenges facing business and security leaders alike. 

Topics covered include:
● Breaking through the confusion
○ The sheer number of available solutions on the market can easily overwhelm IT and security teams leaders. Our panel will break down which types of products and services are essential (and which aren’t) and what percentage of your budget you should allocate to building a strong security posture within your organization 
● Beyond EDR + MSS – Why do organizations need SIEM?
○ Our panel will discuss the benefits of layered protection to strengthen your organization’s security and how today’s advanced SIEM solutions can provide crucial insight into your environment, helping you combat threats more efficiently and effectively. And when implemented properly, how it can serve as an essential tool in meeting customer and stakeholder compliance requirements.  
● Automation and people – how do they work together?
○ A shortage of cybersecurity professionals, along with high turnover and increasing salaries has made organizations more reliant on supplementing people with automation. Our panel will discuss the strengths of each, how they compliment each other and what this hybrid approach might look like in the future.

Optimize your security posture

The rapid increase in SaaS adoption has pushed technology innovation to new heights. With all the advantages that come with SaaS applications, it’s essential for companies to onboard providers as efficiently as possible. But SaaS adoption also introduces new cybersecurity risks, vulnerabilities, and policy changes.

Want to learn how to equip your team with the necessary tools to control the complexity, cost, and risks associated with managing SaaS apps — and cultivate a proactive and capable security culture?

In this session we’ll dive deep into how your organization and security program can benefit from:
• Gaining comprehensive visibility into all SaaS apps
• Identifying misconfigurations that can lead to data leaks
• Managing, optimizing, and reducing SaaS spend across apps
• Addressing the highly probable, high-impact risks associated with technology innovation
• Asking the right questions when time is of the essence

Ready for Anything: SaaS Management and Security

Extended detection and response (XDR) is a solution area which is not yet fully defined. There is no broad agreement on which key capabilities must be included, but a common thread through most definitions includes visibility into network and endpoint entities. Both are important, but one is far more essential than the other. Join this session to learn why network visibility (or NDR) should be at the heart of your future XDR plans.

Too Many “DR”s - How to Think About Extended Detection and Response (XDR)

Three women leaders will share their experience in relocating and hiring across borders, their insights on key success factors, how to prepare for, locate and mine opportunities, and how to mesh your own goals with the job market and organizational needs.  We will also gain a perspective on what a go-forward plan would include in today’s climate.

A Birds Eye View for Crossing Borders in Cyber Security:  Hiring or Relocating

Cyber Attacks

Cyber Intelligence

Cybersecurity

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

A Birds Eye View for Crossing Borders in Cyber Security: Hiring or Relocating

Presented by

About this talk

More from this channel