Name: Are we there, yet? Measuring effectiveness of InfoSec programs
Start: 2021-03-25T16:00:00Z
End: 2021-03-25T16:59:31.000Z
Location: BrightTALK
Rating: 5

In today's connected world, software runs everything - from smart phones to banking applications, cars to home security systems, even refrigerators, garage doors and other every day devices are "connected." Software is everywhere – and unfortunately, it provides the largest attack surface for hackers.  We are a cybersecurity company leveraging our deep knowledge of software security to create relevant products and services.

Addressing software security requires more than just the ‘secure code training’ approach that many organizations use and vendors sell. This webinar will help you understand why you need to go beyond the code to keep your organization’s software secure, and how to do it.

Creating A Complete Software Security Training Program: Going Beyond the Code

Leveraging a real-world Banking Web site to demonstrate MITRE Attacks, see firsthand how hackers exploit the OWASP Top Ten and other vulnerabilities to break into applications and systems - and learn defensive techniques that can help to immobilize them.

Defending Against Live MITRE ATT&CKs

How ‘Secure Code Training’ Leaves Organizations Vulnerable & What To Do About It

The modern enterprise is highly dependent on the cloud and software-driven systems. To protect them, teams need relatable training that reflects the technologies they work with. Otherwise, they’ll tune it out.  

Recent Ponemon Institute research shows that realistic simulation training tied to a specific job function is the most effective way to prepare teams for the battles they’ll face. By utilizing hands-on training in a familiar environment, teams can enumerate security risks in a native context. 

Come learn the strategies of three security & technology leaders to up level skills of various  audiences, create engagement, and drive lasting behavior change.

How to Train IT Teams for Security

While Threat Modeling is an incredibly useful process in determining the level of risk associated with an application, it can also be an intimidating process. In this webinar, Kevin will be performing a short threat model of a feature in one of our CMD+CTRL applications known as Shadowbank. This demonstration will guide new Threat Modeling practitioners into bypassing some of the difficulties Kevin experienced when creating threat models years ago. It will also give those new to the process an understanding of how Threat Modeling can be a beneficial addition to their SDLC.

We'll cover topics such as:
- Enumerating Assets, Roles, and Inputs
- Finding the Correct Scope of the Threat Model
- Enumerating Threats
- Quantifying Risk & Prioritizing Fixes

30-Minute Threat Model

The What, How, and Why of Software Security Training

In recent years the cybersecurity industry enjoyed high valuations, rapid growth, and the creation of many ‘unicorns.’ However, the industry has also had its fair share of overhyped expense/debt-laden companies. Cybersecurity investors have pumped the brakes with a global economic slowdown and generational inflation. Path-to-profitability has quickly become a paramount metric, once de-prioritized for growth, often despite massive losses.

This Ed TALKS will feature diverse perspectives from a cybersecurity investment banker, entrepreneur/executive, and venture capitalist.  Attend to hear how today’s technology and investment trends are changing the way we operate in cybersecurity and get expert advice on:

• Challenges of running a VC/PE-backed cybersecurity company
• Valuation calibration and investment appetite
• Metrics to watch closely, stress, or de-emphasize
• ‘Red herrings’ cyber leaders need to avoid chasing

Ed TALKS: Cybersecurity M&A – True Tales From All Sides

Join us as we dive deep into three common vulnerabilities found in the cloud:

* Improper identify & access management - It's harder than you think!
* Failure to use Multi-Factor Authentication - Credential stuffing is still a real problem
* Improper sensitive information storage - Data Security is *crucial*

Plus we'll give a live look at the real-world effects of these vulnerabilities using our cloud-focused cyber range.

Cloud Application Authentication and Access Control Vulnerabilities

The new CMD+CTRL Base Camp training modernizes and up-skills the cybersecurity talent of your entire organization – not just those nearest to the code. Please Join Fred Pinkett, Sr Director of Product Management at Security Innovation for a sneak peek of CMD+CTRL Base Camp: A completely new learning system that blends courses, labs and cyber ranges into a single individualized streamlined learning experience.

Meet the New CMD+CTRL Base Camp: Training that Goes Beyond the Code

Modern application design and the continued adoption of DevOps expand the scope of automated security testing and push tools to the limit. Simultaneously, complex platforms like IoT and Blockchain require more specialized tools and skills.

With software applications being more assembled than coded, and cloud CI/CD accelerating release, it’s time to sunset some legacy tools and consider new ones.

Come hear how product and application security professionals plan to scale software securely in 2022.

• The traditionalists: SAST, DAST, IAST
• Replacement players: SCA, API & container security, etc.
• New Kids on the Block: IaC, cloud native, fuzz
• Limitations, pitfalls, and best practices

Ed TALKS: Scaling AppSec – Getting Tools to Perform

Data security is always top-of-mind for cybersecurity executives; however, emerging technology and attack developments will pose new risk to the data we try to secure.

Come hear how 3 leaders approach dynamic threats of the 20's, including:

• Tech Temperature – Hot or cold? 
- Artificial Intelligence 
- 5G: too dense and fast for its own good? 
- Applied Crypto: Blockchain, NFTs, and de-centralized trust
- Quantum computing

• Intrinsic Dependencies
- Cloud: expansion or evaporation?
- Passwords, authentication, biometrics 

• Changing Attack Landscape

Ed TALKS: Keeping Secrets – The Future Threats to Data are Here

Your team's first exposure to new threats should happen on OUR platform - not yours. With new CMD+CTRL Labs, your teams will build skills through hands-on exposure to modern threats. They'll learn to identify and mitigate vulnerabilities, gain new techniques to defend against attacks, and learn to write safer code - all on a single, easy-to-use training platform. 

Please join us to learn:

• Why first exposure is important to you
• How Labs transform new concepts into tangible skills
• How Labs help to modernize and up-skill your teams
• You'll also see a demonstration of two new lab types – Skill Labs and Learn Labs

CMD+CTRL Labs: A Bridge to Better, More Secure Software

High-performing InfoSec programs are critical to protecting sensitive data, securing systems, and maintaining compliance. However, organizations continuously struggle with the “how are we doing?” question.

Attend our next Ed Talk to learn how to identify key metrics and implement measurement vehicles to understand your real security posture.

* Benchmarking: What do you measure? And against what?

* Analysis Paralysis: What to do with the results and avoiding misleading and distracting data

* Metric Traps: Red flags versus red herrings

Are we there, yet? Measuring effectiveness of InfoSec programs

Information Security

Cyber Defence

Application Security

Security Awareness

Secure Cloud

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Are we there, yet? Measuring effectiveness of InfoSec programs

Presented by

About this talk

More from this channel