Name: Beyond Misconfigurations Correlating Threats to Truly Understand Your Cloud Risk
Start: 2022-10-11T19:00:00Z
End: 2022-10-11T19:00:44.000Z
Location: BrightTALK

Traditional firewalls, VPNs, and public point solutions for data security are failing in the AI era, because they expand your attack surface and allow lateral threat movement. The Zero Trust Exchange delivers a new approach that eliminates the concept of implicit trust, operating on the principle: Never trust, always verify. It delivers zero trust architecture as a service from a resilient, cloud-native AI cybersecurity platform. Acting as an intelligent switchboard to enable Zero Trust Everywhere, it provides secure, any-to-any, zero trust communication that uses business policies, not networks, for all of your workforces, branches, and clouds. The platform, built upon the Zero Trust Architecture and AI foundation, provides five integrated solutions: Cyberthreat Protection, Data Security, Zero Trust Branch and Cloud, and Security Operations.

Branch offices are evolving into dynamic, experience-focused spaces resembling cafés—designed for collaboration, productivity, and flexibility. CIOs are rethinking the branch model to meet the modern workforce's demands; seamless connectivity, uncompromised security, and exceptional user experience. Legacy network architectures—reliant on MPLS, SD-WAN, firewalls, and centralized data centers—often cause delays, poor app performance, and a subpar employee experience that no longer supports today’s agile business needs.

A café-like branch strategy transforms how IT leaders connect and secure branches. By adopting a direct-to-cloud architecture powered by zero trust principles, CIOs are not only achieving cost savings but also improving the user experience and reducing the risk of cyberthreats such as ransomware.

Watch this webinar to learn how to adopt a café-like branch strategy to redefine productivity and security for the modern workforce. 

Explore:
The shift to agile, cafe-like branches: Insights into why static, network-centric branch architectures are being replaced with flexible, user and device-centric models.
The role of zero trust: Explore how zero trust ensures secure and direct access to cloud apps without compromising on security.
Cost and complexity reduction: See how cafe-like branches eliminate the need for complex legacy technologies such as firewalls, NAC and expensive proprietary switches.
Real-life success stories: Learn how leading enterprises are embracing café-like branches to enhance employee satisfaction and boost productivity.

Why CIOs are Adopting a Cafe-like Branch Strategy

Today’s IT and Cybersecurity professionals are sharply focused on keeping their organizations flexible, adaptable, responsive, and resilient — but what about your personal resilience?

Organizational resilience is challenging enough, given today’s technology trends that include:

A diverse user base (employees, partners, suppliers, and customers), which for most is remote/hybrid
Fast, secure, and compliant access to cloud-based applications and data from anywhere, on any device
Expectations for great digital experiences, with business continuity as a top priority
Personal resilience for tech pros mustn’t be overlooked. Organizational resilience is our end goal, but tech pros with personal resilience are how we get there.

In this informative webinar, join Derek Brink from Aberdeen Strategy & Research and Kevin Schwarz from Zscaler in their engaging conversation about complimenting your enabling “technologies” with best practices in “people and process” that will strengthen personal resilience for yourself and your team.

Resilience Redefined: Prioritizing People in a Tech-Driven World

La direttiva NIS 2 è entrata in vigore. Un ampio bacino di aziende, dunque, è obbligato a implementare opportune misure per la gestione del rischio associato alla sicurezza informatica. Molte di esse sono coscienti del fatto che l’obbligo di adeguarsi e raggiungere la conformità non debba essere percepito come una minaccia ma, piuttosto, come un’importante opportunità di crescita. Ci sono, infatti, una serie di vantaggi che vanno ben oltre la prevenzione degli attacchi informatici: tra questi, riduzione dei costi, aumento della competitività, garanzia di continuità aziendale e migliore reputazione dei clienti. Tuttavia, pur volendo adeguarsi alla NIS 2 e coglierne i benefici, molte aziende sperimentano difficoltà.

Il webinar è rivolto proprio alle organizzazioni che hanno bisogno di un aiuto nell’implementazione delle misure previste dalla NIS 2 e che, per farlo, necessitano di un provider di servizi di sicurezza informatica capace di offrire, al tempo stesso, la consulenza strategica e le soluzioni operative e tecnologiche (piattaforme cloud native) per implementare un'architettura basata sul modello di sicurezza zero trust.

Questi alcuni dei temi che saranno affrontati:

Cosa devono fare le imprese per essere conformi alla NIS 2: impatti e responsabilità;
Non solo obblighi e sanzioni: perché adeguarsi alla NIS 2 è innanzitutto un’opportunità;
Cos’è il modello di sicurezza zero trust e quali vantaggi offre;
Strategie, piattaforme e soluzioni operative per implementare le misure previste dalla NIS 2.

NIS 2: Strategie e soluzioni operative - Webinar su implicazioni e adempimenti per aziende e professionisti

Your infosec and SOC colleagues are facing the threats and preventing the outages.

As they work towards ensuring organisational resiliency, what can infosec leaders do to help build resilient mindsets? How can your organisation foster a culture of resiliency, ensuring teams and people are prepared and empowered to handle cyber incidents and failures?

In this episode of teissTalk with Christoph Schuhwerk, CISO in Residence – EMEA, we’ll explore:

1. Analysing how your teams cope with a cyber incident or a failure scenario
2. Learning from crises - building resilience strategies to mitigate future incidents
3. Building a cyber resilient mindset within your infosec team and in the wider organisation

Join this episode as we discuss learning from crises to improve organisational cyber resilience, and a resilient mindset.

Teiss Talk: Building resilient infosec teams

The inevitability of a “failure scenario” involving a cyber-attack means the spotlight is falling on your cyber-resilience strategy.

Is your cyber resilience strategy ready to play the leading role in protecting your organisation, or is there a gap between confidence and effectiveness?

In this episode of teissTalk in association with Zscaler, Industry leader Thom Langford and James Tucker, Head of CISOs in Residence – EMEA, explores:

1. Identifying and removing barriers to cyber resilience
2. Reducing complexity - consolidating and eliminating legacy systems
3. Building a cyber-resilient organisation - moving from a reactive to a proactive model

Watch this episode as we explore how you can make your organisation truly cyber-resilient by design.

Teiss Talk: Why Resilient by Design is the next cyber-security imperative

The accelerating pace of cyberattacks—leveraging encrypted communication channels and generative AI—has rendered traditional security measures ineffective against the evolving threat landscape. To stay ahead, organizations must adopt a forward-thinking approach to web security. Join us for a webinar where we’ll delve into the transformative benefits of deploying a cloud-native secure web gateway (SWG) as part of your Security Service Edge (SSE) strategy, leveraging Zscaler’s pioneering innovations in zero trust and cloud security.

Featuring real-world insights from a compelling customer case study, we’ll discuss how Zscaler’s cloud-native, zero trust architecture-based SWG solution enables organizations to deliver seamless, scalable security for users, workloads, and IoT/OT devices – all while laying the groundwork for future advancements in SSE and zero trust.

Key Takeaways:

1. The limitations of traditional security strategies in defending against today’s sophisticated cyber threats. Discover why legacy solutions fall short and how adopting a cloud-native SWG revolutionizes web security.
2. Critical distinctions between cloud-native and legacy SWG models. Understand what sets a fully cloud-native SWG apart and why organizations are embracing cloud-first strategies
3. The integral role of Zscaler SWG in SSE and zero trust strategies. Explore how the Zscaler Zero Trust Exchange simplifies zero-trust adoption while safeguarding users, workloads, and IoT/OT devices
4. Customer success in action. Learn how a prominent organization enhanced security performance and aligned its cybersecurity goals with digital transformation initiatives by deploying Zscaler SWG

Future-Ready Web Security: The Power of Zscaler SWG in Your SSE Strategy

Looking to deliver faster issue resolutions or reduce troubleshooting times by 99.7%? With Zscaler Digital Experience (ZDX) Network Intelligence, you can detect ISP-related incidents in just five minutes and quickly resolve them by rerouting users to avoid problematic ISPs. As part of the Zscaler Zero Trust Exchange, ZDX provides full end-to-end visibility for all users, across any device and location. With 160+ globally distributed Zscaler data centers, finding a healthy path around provider disruptions is simple.

In this session, we’ll explore the recent Red Sea cable cut that caused widespread ISP disruptions and how ZDX Network Intelligence proactively detected the issue six hours before it was publicly announced. We’ll highlight our new Peer Insights capability, which provides powerful real‑time crowd context to validate ISP incident triage.

You’ll learn how to:

1. Reduce the time to detect problematic ISP issues by 99.7%
2. Quickly identify ISP issues across dozens of customer environments with the Network Intelligence Dashboard
3. Reroute impacted users to the best alternate Zscaler data center, bypassing ISP issues fast

3 Steps to Reroute Around ISP Trouble, Fast

Bad actors are escalating sophisticated attacks, leveraging tools like Generative AI and compromising identities for undetected lateral movement and privilege escalation. To prevent breaches, organizations must strengthen defenses across the entire cyber kill chain.


Learn how deception technology disrupts attackers at every phase. See real-world examples demonstrating how decoys—mimicking networks, endpoints, Active Directory, and cloud assets—are critical for stopping attacks.

Join this on-demand webinar to learn how to:

1. Trap Attackers Early: Identify and capture attackers during reconnaissance using realistic decoys
2. Prevent Malicious Activity: Thwart malware delivery and installation with endpoint and network decoys
3. Stop Lateral Movement: Block command-and-control (CnC) and lateral movement within your environment
4. Reveal Intent: Gain insight into attacker intent and block their activities at the earliest stages

Seize this opportunity to understand how deception enhances security, proactively disrupts attacks, and delivers high-fidelity threat intelligence.

Disrupting the Cyber Kill Chain: Stop Attackers in Their Tracks

The Client Connector endpoint agent is the key Zscaler technology powering security for end users. With its Windows v4.8 release, Client Connector will introduce Location-Based Policy to intelligently secure traffic based on device networks.

With the release, organizations can protect their endpoints by minimizing their attack surfaces and enhancing DNS privacy and data security—while simultaneously reducing policy management overhead.

Join this webinar to gain deep insights into:

1. The necessity of granular traffic steering for DNS queries, app-based bypasses, and destination IP inclusions/exclusions
2. Zscaler Client Connector’s new ability to automatically manage inbound and outbound host firewall rules
3. How streamlined ease of use reduces complexity and administrative burden, saving customers time and money

What’s New in Client Connector: Location-Based Policy

Zscaler recently announced the acquisition of innovative AI security pioneer SPLX, extending our Zero Trust Exchange with shift-left AI asset discovery, automated red teaming and governance. These new solutions enable organizations to accelerate the safe deployment of AI chatbots and applications, and stay competitive in the market.

LLMs are rapidly transforming how we work and innovate, but they also unleash a new generation of complex and often hidden security risks. Traditional approaches, such as manual red teaming, are inadequate for today’s dynamic AI systems. Automated approaches are needed for threat detection, remediation and governance across the entire AI lifecycle.

Zscaler’s Secure AI solution helps organizations:

1. Discover AI Assets and Assess Risks
2. Automate AI Red Teaming and Remediation
3. Enforce Runtime Guardrails
4. Govern AI Systems and Ensure Compliance

Zscaler Expands Platform for Secure AI with New Acquisition

As AI adoption accelerates, security and IT leaders face the critical challenge of securing a complex ecosystem that spans public GenAI applications, private models, and intelligent agents. This rapid adoption has outpaced traditional security frameworks. A recent study revealed that 63% of breached organizations either lacked or were still developing an AI security and governance policy. This significant gap underscores an urgent need for robust strategies to ensure AI is not only scalable and efficient but also inherently safe and secure.

Join our experts for an insightful webinar to explore the critical steps organizations must take to secure their AI transformation journey. We’ll guide you through building a resilient AI security foundation, equipping you with the knowledge to protect your data in an increasingly AI-driven world.

In this session, you will learn:

1. Emerging AI Trends: Understand the pressing security challenges and risks shaping the future of AI
2. Building a Robust AI Security Foundation: Discover strategies for responsible and secure AI adoption
3. A Comprehensive AI Security Checklist: Practical, actionable checklist to strengthen your AI security posture

AI Readiness: Your Checklist to Secure AI

Zero Firewalls and Zero Complexity with Zero Trust Cloud:

1. Secure Devin AI environment: Apply a true Zero Trust approach to protect your AI and developer environments.
2. Unify Multi-Cloud Security: Seamlessly connect and secure workloads with a single policy across AWS, Azure, and GCP.
3. Accelerate Cloud Migration: Confidently lift and shift mission-critical applications like SAP to the public cloud.
4. Stop Lateral Threat Movement: Shield your most critical apps from breaches with powerful, identity-based microsegmentation.
5. Prevent Breach Propagation: Implement comprehensive segmentation that extends from cloud-to-cloud and region-to-region, all the way down to individual processes.

New Innovations in Zero Trust Cloud

Test webinar - Manpreet

In today’s evolving threat landscape, organizations struggle to manage expanding attack surfaces and increasingly cunning adversaries. This session will reveal the unexpected advantages of exposure management—beyond reducing attack likelihood and improving operational efficiency—to showcase the surprising wins you might not anticipate.

Don’t miss this chance to gain a CISO’s perspective on building an exposure management program that not only mitigates risks but delivers tangible benefits across your organization.

Key takeaways include how an exposure management program can help:

1. Establish an organization-wide awareness of risk
2. Eliminate manual processes using spreadsheets and BI tools
3. Consistently meet SLA targets for faster remediation
4. Maximize the value of your existing security investments

Empower your security team to move beyond outdated vulnerability management and embrace a more strategic, proactive approach.

5 Unexpected Wins in Exposure Management

Third-party vendors, contractors, and remote IT staff require deep, privileged access to your systems—but every remote connection presents a potential breach point. Legacy solutions like VPNs and jump servers often grant excessive trust and fail to prevent lateral movement, data theft or malware injection, leaving your environment exposed and your data at risk.

Watch our webinar to discover how Zscaler Privileged Remote Access (PRA) delivers a modern Remote Privileged Access Management (RPAM) solution. Built on zero trust, PRA enables secure, agentless, browser-based privileged access without VPNs—offering granular governance controls and full isolation for every remote session.

We will cover:

1. Why VPN-based privileged access leaves your organization exposed
2. How zero trust + RPAM secures remote access for external users and third parties
3. Methods for eliminating unmanaged device risk with agentless connectivity
4. Real-world insights from enterprises enhancing security and resilience

Beyond VPNs — Secure Remote PAM for Third-Party Access

Newfound Productivity from a New Approach to Secure Browsing

Productivity isn’t just for full-time employees—contractors, partners, and part-time staff also require fast, secure browsing with easy access to apps. The Zscaler Zero Trust Browser transforms existing browsers into secure, seamless workspaces for anyone. With integrated threat protection and data security, organizations can safeguard web-based productivity, manage SaaS and private app access, prevent data leakage, and simplify IT operations without compromising efficiency.

Join us to explore:

1. Effortless, secure app access for employees, contractors, and partners using their own browsers
2. Integrated, invisible security: Govern access, protect data, and monitor activity without impacting user experience
3. Streamlined IT operations: Replace VDI software, avoid new hardware purchases, and eliminate the need for additional browsers

Don’t miss this webinar to see how the Zscaler Zero Trust Browser redefines secure productivity for today’s workforce. Register now!

Secure Productivity Anywhere with Zscaler Zero Trust Browser

With so many tools and tickets, how quickly did you detect the impact of the Slack, Zoom, or Microsoft Outlook outages on your users? Was the issue caused by an ISP, Wi-Fi , or the application itself?

Watch the launch event to discover new innovations that help Zscaler Zero Trust customers detect user performance issues faster, easily identify root causes, and remotely remediate problems–keeping users happy and productive.

New innovations include:

1. Detect comprehensive device events like system and software crashes and internet-scale network anomalies
2. Diagnose end user performance issues at scale with AI-powered root cause across last-mile and intermediate ISP issues
3. Remediate enterprise-wide device issues remotely, while addressing persistent internet issues that impact end-to-end user experience

No extra installation–Zscaler customers receive these new capabilities through the same agent.

Zscaler Digital Experience: Detect, Diagnose, and Remediate User Performance Issues Faster with AI

GenAI is revolutionizing productivity and enterprise efficiency—while introducing new security risks. Cyber adversaries are exploiting GenAI infrastructure to compromise data, exfiltrate sensitive information, and manipulate AI systems. Addressing these sophisticated threats requires innovative approaches and cutting-edge security solutions.

Discover how advanced GenAI decoys can protect your assets, detect threats, and disarm attackers targeting your AI systems. Learn how customizable decoys designed to emulate GenAI platforms—such as chatbots, large language models (LLMs), and AI APIs—can thwart attackers while providing actionable intelligence on emerging threat tactics.

In this session, we’ll examine how GenAI decoys:

1. Safeguard AI systems through real-world attack scenarios
2. Expand coverage across endpoints, networks, and cloud environments to mitigate legacy and modern cyber risks
3. Halt advanced threats like reconnaissance, lateral movement, and prompt injection attacks
4. Enhance deception strategies alongside other assets (Active Directory, storage systems, threat intelligence) for comprehensive cyber kill chain defense

Don’t miss this opportunity to explore how deception technology can expose hidden attackers within your enterprise and fortify your AI infrastructure against future threats.

Protecting the AI-Powered Enterprise: Adapting Deception for the New Threat Landscape

Why do we do the things we know we shouldn’t, and not do the things we know we should? Take password managers: Most of us know they’re an easy, useful tool that enhances our security, but not enough of us actually use them. What’s the reason behind this? Lisa Plaggemier, Executive Director of the National Cybersecurity Alliance, reveals new research from the Alliance about the public’s attitudes and beliefs about security, as well as potential drivers and barriers towards secure habits.

About the speaker:
Lisa Plaggemier is Executive Director at the National Cybersecurity Alliance. She is a recognized thought leader in security awareness and education with a proven track record of engaging and empowering people to protect themselves, their families, and their organizations.  Lisa has held leadership roles with the Ford Motor Company, CDK, InfoSec and MediaPRO, and is a frequent speaker at major events including RSA, Gartner and SANS. She is a University of Michigan graduate (Go Blue!) and while she wasn’t born in Austin, Texas, she got there as fast as she could.

A Whole Lotta BS (Behavioral Science) About Security

As cybersecurity experts, our overall goal is to protect the confidentiality, preserve the integrity, and promote the availability of data for authorized use—all without inhibiting the business from meeting its objectives. But what about the times when we must say “no” for various reasons? This interactive session focuses techniques for having a diplomatic “crucial conversation” with the business when a request just can’t be approved.

About the speaker:
Tamika Bass is an Information Security professional with more than 15 years’ experience in information security, including information security governance and risk management. Tamika is passionate about improving communication and understanding of information security in the industry. Tamika is an active speaker, college professor and enjoys spending her time educating technical staff on the importance of communicating effectively in the Information Technology space. Tamika holds the following certifications: CISA, CRISC, HCISPP, CBCP.

When the Answer Really Is “No” -- How to Say It Diplomatically

Many people talk about the need for a cybersecurity mindset. The discussion generally focuses on whether you have one or not and how to foster a security mindset. However, why should there only be one cybersecurity mindset while there are, in fact, many types of cybersecurity mindsets. This diversity in thinking is required to strengthen your cybersecurity team.  

Tune into this presentation to learn about various cybersecurity mindsets and discover:
- How does mindset influences decision making?
- What are the potential cybersecurity mindsets?
- How does the interaction of mindsets build team cohesion?

Diversity of Cybersecurity Mindsets

Senior management is generally supportive of cybersecurity and lower-level staff do what they’re told to do. Middle management, however, is beset by perverse incentives to sell, sell, sell; cut costs; and do more with less. This leaves them without enough mind-space left to focus attention on cybersecurity. 

Tune into this cyber-session to discover tips and ideas covering:
--Finding and fixing the middle management weak spots.
--The consequences of a cybersecurity culture based on inaction.
--Potential solutions, tailored for middle managers, to enhance a cybersecurity culture. 

About the speaker:
Steve holds certification as a Master Business Continuity Professional (MBCP) as well as a Certified Information Systems Security Professional (CISSP) and a Certified Information Systems Auditor (CISA). He is a specialist in business continuity management, IT disaster recovery planning, and information security and has implemented programs for numerous banks, government agencies, and industrial corporations. Before founding Risk Masters, Steve was with Deloitte & Touche as the leader of their Business Continuity Management practice. In recent years, his focus has been on the resilience of large business and technology environments. He is editor of the multi-volume series, e-Commerce Security, and author of several of the books in the series.

The Tone in the Middle: The Biggest Hindrance to a Cybersecurity Culture

Security Partners at Adobe provide product teams with guidance needed to help improve overall security posture. They partner with risk management, operational and application security teams to help product teams create unified security roadmaps and provide needed visibility for executive teams. This partnership has helped to elevate security and risk conversations into stronger business value conversations and improve overall risk management across Adobe.

Astrid Bailey, Security Partner Program Owner, will talk about her experience in building this program and scaling it using a tiered model to be effective across 200 product teams at Adobe. She will discuss lessons learned as she and her colleagues:
- Worked to get security requests positioned more strategically in product roadmaps.
- Made use of automation and standardization to help ensure management and executive teams are getting the information they need to make better security decisions.
- Improved the overall relationships between key security team leaders and product team leaders.

The best practices learned in developing this program will be beneficial to any organization looking to strengthen and improve the effectiveness of the relationship between security and other technical teams. Such an effort can help ensure your teams are even more invested in your overall risk management strategy.

About the speaker:
Astrid Bailey has been an IT project/program manager for over a decade. She has worked in numerous industries and on diverse efforts such as managing software development teams, coordinating large-scale vendor integrations to support corporate tradeshows, and, most recently, leading several key security programs at Adobe that focus on cross-org collaboration. In 2022, Astrid completed a Master of Science, Information Systems (Cybersecurity Management) at the University of Utah. Additionally, Astrid has her PMP certification and is an Associate of ISC2.

Building a Stronger Security Partner Team

It's no secret that the cybersecurity landscape is constantly changing, requiring CISOs and security teams to adapt and pivot at a moment's notice. But the security organizations with the strongest foundations will be most able to rise to whatever challenge the future brings. In this panel session, learn about the major initiatives CISOs are planning for in the coming year, changes they are anticipating, and pain points they hope to mitigate.
 
You'll hear about topics such as:
* Changing regulatory needs
* Surviving the economic and geo-political environment
* Crucial skills development areas
* Technology investments
* Cyber insurance

About the moderator:
Deidre Diamond is the founder and CEO of CyberSN, the largest cybersecurity talent acquisition technology and services firm in the US. Deidre’s leadership style combines 25 years of experience working in technology and staffing, her love of the cybersecurity community, and a genuine enthusiasm for people. She has led large-scale sales and operations and built high-performance teams at Rapid7 and Motion Recruitment prior to founding her own organizations. Deidre has also founded SecureDiversity.org, a non-profit organization working to raise awareness for, and increase the hiring of, women and underrepresented humans in the cybersecurity workforce.

Confirmed panelists:
Ozgur Danisman, VP, EMEA Sales Engineering, Forcepoint
Brenna Leath, Head of Product Security, sas
Dr. Kelley Misata, Founder and Chief Trailblazer, Sightline Security

Key Concerns of Cyber Leaders

5 ways to improve your Security Ecosystem 

In this presentation I will show you how you can shift left your security layer by learning a new style: detecting and blocking threats at the earliest stage of the attack chain, and how threat intelligence can make your security insightful. 
 
I will explain how to translate threat intelligence into actual security enhancements which will lead to more tangible follow up to ensure your SecOps workload will be reduced. 
The old math will solve new problems by using what’s already on your IT, IoT (and some cases OT) network.

How Old Math Can Solve New Problems

In the case of a legacy data migration, companies need to migrate their corporate data from an old system to a new one. When it comes to Merger and Acquisition (M&A) data carve outs, companies need to extract, migrate and merge selective data from one company’s system to another. There are many risks involved in these types of migrations, including cybersecurity and privacy risks.
Attend “The Great Data Migration: Dealing with Cybersecurity and Privacy in Legacy Data Migration and M&A Data Carve Outs” on Wednesday, 12 October at 10:00 am GMT. 
- Learn how to take advantage of natural language processing and machine learning to automate sensitive data discovery, classification and redaction at scale. 
- Listen to Kyle DuPont, Co-Founder and CEO, Ohalo on how to gather insights to securely accelerate data migration during M&A. 
- Secure unstructured data assets in line with privacy regulations and the legal rules that govern the disclosure of sensitive personal information.

The Great Data Migration: Cybersecurity & Privacy in M&A & Legacy Data Migration

In recent years, much attention has been paid to the technology that prevents malware and malicious attackers from wreaking havoc in enterprise systems, especially during the COVID era. Multi-factor authentication? Check. Robust access control? Check. Intelligent firewalls? Check. 

Still, a lot of IT enterprise leaders overlook the importance of the IT compliance function in identifying COVID symptoms, especially the “people” aspect of the information technology triad of people-process-technology. In this presentation, Ralph Villanueva will speak about the vital role IT compliance plays in securing the enterprise by identifying these post COVID symptoms, and what enterprise IT leaders can do to harness their valuable expertise and unique role in the organization.

About the speaker:
Ralph has been keeping his employers compliant with IT and cybersecurity requirements across numerous and diverse regulations such as the Nevada Gaming Control Board, Payment Card Industry, COSO-Integrated Framework, COBIT and ISO 27001 since 2007, and data privacy since 2017. His more than two decades of internal and IT audit and compliance work in the US and the Asia Pacific region provide him with insights not only in enforcing IT and cybersecurity requirements in light of changing regulatory and technical environments, but also in anticipating and dealing with future. Ralph has also earned numerous certifications such as the ISO 27001LA and ISO 27701LA, CISA and CISM, PCI-ISA and PCIP, CIA and CRMA, CFE, CPA and ITIL. Since 2010, Ralph has regularly spoken at over 40 conferences.

The IT Compliance Role in Safeguarding the Enterprise from Post-COVID Symptoms

People are crucial to the success of your cybersecurity culture. With the rate of change in cyber and information Security, we need to start thinking differently about bringing our teams up to speed. This session will discuss some tips and ideas to build a more robust training and learning solution for your security team and create security champions throughout your organization. We will also explore the importance of providing career pathways to encourage growth and career advancement of your current teams and how to attract new talent. 

About the speaker:
Connie Matthews Reynolds is the Founder/CEO of ReynCon, LLC (REST- ReynCon Educational Services & Training). Her passion drove her to start her own company, to help companies and individuals seek to build more awareness toward soft and technical cybersecurity training and provide professional services to assist organizations in improving their security posture. A believer in the importance of giving back to the community, she is also President, Central Ohio ISSA; founding member of EmpoWE-R Women of InfoSec, named in Cybercrime Magazine's 181 Top Women in Cybersecurity to follow on Twitter and Columbus Business First's Who’s Who to Follow.

Building a Cybersecurity Culture: It's Time to Think Differently About Training!

Privacy and compliance teams are under increasing pressure to respond quickly to urgent issues. Whether from senior leadership, regulators, consumers, shareholders, or other stakeholders, the pressure after a cyber or other event can be intense. Pressure is equally high to be prepared for potential incidents. What steps can a company take to have a program that is effective and right-sized to its operations? How can it best prepare for the increasing external, unknown, and uncontrollable risks? Drawing from change and risk management research, this session will share some lessons learned and strategies to help you make the most of your privacy compliance program.

About the speaker:
Liisa Thomas is a partner and lead of the Privacy and Cybersecurity practice at Sheppard Mullin. Her clients rely on her ability to create clarity in a sea of confusing legal requirements and praise her “thoughtful legal analysis combined with real world practical advice.” She is the author of two well-regarded treatises: Thomas on Data Breach and Thomas on Big Data, and teaches privacy and security law classes at Northwestern University where she is the recipient of the Edward Avery Harriman Law School Lectureship. She is consistently recognized as a privacy and cybersecurity leader by Chambers, Cybersecurity Docket, Legal 500, Best Lawyers in America and Crain’s Chicago Business. She was recently named to Legal 500’s Hall of Fame for Cyber Law. Liisa received her J.D. from the University of Chicago.

Understanding and Managing Cyber and Privacy Risk in an Increasingly Risky World

The adoption of cloud applications and infrastructure combined with increasingly dispersed workers and stakeholders, a variety of devices, and a constantly evolving threat landscape requires comprehensive security planning. As organizations' technical footprints spread, points of entry and potential vulnerabilities increase exponentially. This fireside chat will explore how security leaders can develop holistic programs to improve overall security hygiene and posture in a world of technical complexity.

Join us to learn about:

--The growing need for security posture platforms that address the cloud
--How to manage security consistently across a variety of environments
--Effective inventory and monitoring of assets and applications
--The security benefits and challenges of cloud-native applications
--Software and tools that help security staff offload mundane tasks
--And more.


Moderated by:
Jeremy Synder, Founder and CEO, FireTail.io
Featuring:
Deryck Mitchelson, Field CISO, Check Point Software

Improving Security Posture for the Modern Enterprise

The increasingly distributed nature of the modern enterprise is making zero-trust security approaches more relevant than ever. In this research-led session, John Grady, ESG Principal Analyst, will focus on how organizations are thinking about, planning for, and implementing zero trust across their environments.


Join to find out how zero trust can provide a framework to secure even the most complex environments, whether implementing least-privilege tenets for user access or securing the connections to and between the disparate aspects of today’s hybrid multi-cloud deployments. You'll learn exactly what a zero-trust initiative should entail, where to begin, and how best to overcome the organizational obstacles that result from such a cross-functional undertaking.

Zero Trust Security Strategies to Safeguard the Enterprise

Security Strategies to Safeguard the Enterprise

Today’s attackers leverage sophisticated techniques against their target organizations, using multiple attack vectors to exploit several security weaknesses. These weaknesses can include misconfigurations, unpatched vulnerabilities, overly permissive access policies, and more. Each may present only a low risk in isolation—but when combined, they create an exploitable chain of weaknesses that drive a high risk of breach.

Beyond Misconfigurations Correlating Threats to Truly Understand Your Cloud Risk

risk correlation

CNAPP

protection platform (CNAPP)

Beyond Misconfigurations

Correlating Threats

Cloud Risk

Cloud

Threat Defence

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Beyond Misconfigurations Correlating Threats to Truly Understand Your Cloud Risk

Presented by

About this talk

Zscaler