Name: Fighting COVID-19 with secure & private location tracking application
Start: 2020-04-01T11:00:00Z
End: 2020-04-01T11:00:52.000Z
Location: BrightTALK
Rating: 4.5

Go in depth into CSA's latest research on everything from IoT to containers to blockchain. Webcasts will break down the research, provide use cases, instructions for implementation, and further insights.

The transition to cloud computing has diminished the effectiveness of traditional network security perimeters, rendering identity as the final line of defense against attackers. While enterprises have allocated substantial budgets to identity programs and have made significant progress in safeguarding human identities through the enforcement of multi-factor authentication (MFA) and centralization of control via single sign-on (SSO), the broader attack surface presented by non-human identities remains unaddressed. In this presentation, we will delve into the security of non-human identities, exploring the various methods attackers can employ to exploit them in order to breach cloud-based organizations. We will also discuss effective strategies to efficiently mitigate these risks.

Breaking the Identity Perimeter: An Attacker’s Perspective

Artificial Intelligence (AI) has moved beyond hype and unrealistic expectations. Organizations are increasingly embracing AI yet its adoption is both promising and perilous. To harness its potential while mitigating risks, organizations must cultivate a forward-looking AI risk management strategy. 


In this session, experts from Coalfire, AWS, and CSA will provide practical guidance and best practices to navigate the complexities of responsible AI adoption. From identifying potential risks to implementing safeguards, we’ll discuss how to ensure businesses can embrace AI innovation securely and safely.

Key topics discussed will include:
• The evolution of risk management to address the unique risks AI poses.
• How to develop and implement a program for mitigating risks specific to AI.
• Practical strategies for integrating AI into your existing risk management program.

De-risking AI: Risk Management Essentials

While threat actors are pivoting to target cloud environments and cloud breaches on the rise, the trends and potential lessons to learn are still difficult to find and decipher. This session is dedicated to bringing some clarity to the nature of external cloud threats, and the most pressing people, process and technology challenges internally for organisations as they face cloud security posture and cloud detection & response. 

Join Chris Hosking, SentinelOne's Cloud Security Evangelist, and John Yeoh, Cloud Security Alliance's Global VP of Research, for a real-world examination of recent cloud breaches and an open discussion of the lessons that can be learned, as well as where cloud security priorities should be set.

Challenges From Within and Without: Trends in Cloud Attack & Defense

The age of AI is shining a light on the most vulnerable identities within organizations. At the top of this list: developers. They're one of the most valuable assets for digital enterprises. Attackers know this. Initial access to a developer's credentials, an organization's repository, or secrets management leaves your company exposed. In this webinar, join CyberArk to discuss the changing cloud landscape and how it's created new circumstances and attack methods for developers--and what to do to about it. 

You'll learn:
• Different methods of risk reduction to equip your security team to protect your organization
• How to maintain velocity of deployments without sacrificing security with zero standing privileges
• The T.E.A. on securing your cloud estate.

Securing Developers By Closing Credential Security Gaps

In the ever-evolving landscape of digital transformation, organizations are facing unprecedented challenges in securing and scaling their cryptographic infrastructure. The need for crypto agility has never been more critical as companies grapple with risks posed by advanced technologies such as AI, emerging threats like Post Quantum Cryptography (PQC), and the complex web of compliance mandates, management hurdles, and technology transformations.

Join this discussion to gain actionable strategies as we create a blueprint to:
• Reducing IT resource burdens and costs through centralized certificate management
• Preventing costly business outages and addressing potential security vulnerabilities
• Building private and public trust while eliminating human error

Don't miss this opportunity to learn best practices and elevate your organization's cryptographic resilience. Be part of the conversation that prepares for a quantum-safe future and shapes the future of secure digital landscapes.

Unleashing Crypto-agility: A Blueprint for Post-Quantum Cryptography

Conventional defense mechanisms often fall short with adversaries employing advanced AI methodologies to target cloud assets. This session delves into the use of cutting-edge AI strategies to counter these evolving threats, offering insights into how AI helps defend against sophisticated attacks.

Fighting Fire with Fire - Leveraging AI in Cybersecurity

In an era where cyber threats are increasingly sophisticated and pervasive, how can resource strapped teams stay ahead? 

This webinar explores how GenAI can support cybersecurity teams by enabling rapid security investigations, anomaly detection, and faster insight generation. Tim Chase, Field CISO at Lacework, will break down how you can leverage GenAI to: 
• Augment your security team: Address the cybersecurity skills shortage through rapid onboarding and learning curve flattening for security professionals.
• Detect anomalies: Identify outliers and anomalous behavior in cloud data, a crucial aspect in modern cybersecurity.
• Accelerate insight discovery: Use GenAI to sift through extensive data and enhance operational efficiency.
• Maintain data security and privacy: A crucial cautionary note on the importance of handling sensitive data with care when deploying GenAI tools.

5 Ways Cybersecurity Leaders can leverage GenAI

Over the past year, the proliferation of AI technologies has introduced new challenges and risks for CISOs to contend with. From creating new ways for data to be accessed to reshaping the threat landscape with deepfakes and automated malware, AI has added more complexity and more pressure to existing security programs.

But it’s not all doom and gloom. AI also presents transformational opportunities for CISOs to drive operational efficiencies and deepen trust with customers.

In this conversation, Jadee Hanson, Chief Information Security Officer at Vanta, and Daniele Catteddu, Chief Technology Officer from the Cloud Security Alliance will discuss how security leaders should be engaging with the rest of the organization to support this transformation and do so with the right security and privacy practices in mind. In this conversation, they will cover:
• Top risks when leveraging AI and how to mitigate these risks
• Vendor landscape changes and the expansion of AI in the solutions we use
• Practical ways to identify and address the expansion of AI use within your organizations

How CISOs can Leverage AI: A Fireside Conversation with Vanta and CSA

In cybersecurity it is important to understand all aspects of best practices and controls: what risks and threats are they solving, what regulations and standards are prescribing them, how to apply them, and how to test for them. Currently, this information is scattered across many different standards and publications in a complex and ever-changing security, legal, and regulatory landscape. OpenCRE solves this problem by connecting standards at the level of common requirements. One of the connected standards is CSA's Cloud Control Matrix. In this webinar you'll learn how to use OpenCRE as a gateway to all the available knowledge around your security controls.

OpenCRE: Simplifying Cybersecurity Standards

That’s a wrap! Join Illena Armstrong as she  closes out the busy day with some final thoughts and insights on how to turn the knowledge gained throughout the conference into actionable items to take back to the office.

CSA Research Summit 2023: Final Thoughts

Join us for an informative webinar as we delve into the recent release of the Cloud Control Matrix (CCM) version 4.0 by the Cloud Security Alliance (CSA) and its mapping to the latest iteration of the Payment Card Industry Data Security Standard (PCI DSS) version 4.0. In this session, we will explore the intricacies of these essential industry standards and how their alignment can enhance security and compliance within the cloud environment. 

Our expert panelists will discuss the key changes and updates in both the CCM 4.0 and PCI DSS 4.0 standards, highlighting their significance in today's evolving cybersecurity landscape. Through practical insights and real-world examples, attendees will gain a deep understanding of the intersection between cloud security best practices and payment card data protection.

Whether you are a cloud service provider, a PCI DSS-compliant organization, or a security professional seeking to bolster your knowledge, this webinar offers a valuable opportunity to stay current with industry trends and best practices. Don't miss the chance to explore the synergy between CCM 4.0 and PCI DSS 4.0 and how it can drive your organization's security posture to new heights.

Mapping the Cloud Control Matrix (CCM) 4.0 to PCI DSS 4.0

Confidential computing presents new methods to secure processes as they run, which in turn can isolate code and data from attack, insider threat and exposure to service providers and unauthorized oversight. This is ideal to address complex new problems facing enterprises today spanning intimate collaboration over sensitive code and data even between untrusted entities, and generative AI, which presents completely new challenges where rights management, privacy, and control are essential for success and to avoid common issues such as model poisoning, data leakage, model compromise, and theft.

This session dives into these challenges and illustrate the essential need to protect running code and data, particularly with emerging LLM technology. The session will include demonstrations and use cases covering financial services and healthcare where protecting models, data, and code with a confidential computing-based zero-trust architecture can help organizations meet the pressure of cloud and AI technology with a much-reduced risk profile.

Confidential Computing for AI Risk Mitigation in Cloud Deployments

HSMs and Key Management in the Cloud – Securing your Keys and Safeguarding your Data

HSMs and Key Management in the Cloud

There are many Cybersecurity and Privacy Frameworks to guide in governing IT-based business solutions, but do they address the unique risks and mitigation strategies required for DLT-based solutions? This presentation by the CSA DLT Security and Privacy Governance Team will share some insights into:
What is important when matching risk appetite to DLT solution options?
What are the inherent design risks that are unique to DLT and DLT solutions ?
Demo of an Inherent Risk Profiling Tool and Risk Mitigation Methodology for a sample Trade Finance Use Case
CSA DLT Security and Privacy Governance Team has taken the approach to build on existing frameworks rather than to try and duplicate their work, so our focus will continue to be on the unique characteristics of DLT solutions

DLT Security and Privacy Framework

It’s no surprise that LLM’s and AI are gradually being introduced into every product that we have been using over the course of the last few years. But what is the impact on identity? From being able to swiftly build powershell code to help enable organizational security groups, to creating automation and techniques from learning parameters, language models seem to have an endless curation of impacting security teams and technology they once knew. This panel aims to guide listeners from the current state of IAM, AI’s role in IAM currently, and how enhancements over time may help, or challenge the roles of security practitioners.

IAM in the Age of AI: Implications for Cloud

This panel discussion introduces one of CSA’s newest research initiatives,  Implementing Privacy by Design and Default (PbDD) within DevSecOps. Researchers discuss current findings, including their approach to successfully selling privacy internally. Using Design Thinking (DT) and Human-Centered Design (HCD) based methodologies, researchers discuss how they were able to identify what really matters to stakeholders—as well as key drivers that propelled the PbDD project under study forward.

Situated non-exclusively within the DevSecOps Six Pillars framework, the current research provides additional considerations to existing processes. Of note is the use of real-world Scenario-Based Design (or modeling) to further clarify the problem and solution spaces of implementation contexts, activating essential organizational dynamics where solution-based innovations may emerge.

The scenario? A global company diagnosing infectious diseases using a downloadable AI-assisted Software as a Medical Device (SaMD) with an opportunity—an exclusive government partnership and blank check. The feasibility challenge? Compliance with all global data protection and privacy regulations.

Escalating Privacy’s Privilege: Using Design Thinking to Identify What Matters

This session will provide an overview of the main provisions and novelties introduced by the proposed Artificial Intelligence Act (AI Act) and its relationship with the General Data Protection Regulation (GDPR). In particular, this session will provide an overview of the AI Act's overall structure and the field it aims to regulate. The session will also flag some possible overlaps (and potential tensions) with the GDPR and some situations where compliance with the AI Act may facilitate compliance with the GDPR (and vice versa). During this session, some thoughts will also be shared about the impact that this upcoming AI Act may have on Cloud Service Providers (CSPs) and, in particular, on the extent to which the provisions of the AI Act may capture CSPs (and under what conditions) their activities.

Understanding the AI Act and its Relationship with GDPR:

The panel will discuss the current state of Zero Trust planning, implementation and industry references for public and private sector organizations in the US and internationally. Initial CSA research focused on the Software Defined Perimeter (SDP), which has been subsumed into the broader Zero Trust strategy and conversation. Recent changes of note in the US include an updated CISA Maturity Model and new DoD ZT Strategy and Roadmap. Impactful environmental factors include the increases in ransomware attacks and escalating threats to critical infrastructure and operational technology.

Reviewing the Current State of Zero Trust

The evolution of threat detection

The Tension Between Effective Security and Employee Experience

Building a Resilient Business for the Future of Work

The Role of Leadership in the New World of Work

A new cloud security strategy for a new normal

Embracing the digital office - the Do’s and Don’ts of remote working

VCC [Ep.3] Video Conferencing and the Future of Work-From-Home

The digital office webinar series - Life after lockdown

Real-Time Crisis Management in the Age of Covid-19

COVID-19 - Top 10 Cybersecurity Trends

The digital office webinar series - 5 steps to a balanced business comms diet

Setting up a Virtual NOC

VCC [Ep.2] Equipping the Home Office for Video

What will cyber security look like in the post-COVID-19 world?

Business Continuity: What happens post pandemic?

CISO Pandemic Response: Next Steps

The Best Practices for Data Protection for a Remote Workforce

How Risk Managers Use Real-Time Data to Restore Confidence in Predictive Models

Forecasting Cyber Threats Post Pandemic

Preparing for the Unpredictable

VCC [Ep.1]  Achieving Video Conferencing Success

Creating Your Next Normal: Low-Code Automation, Lessons for the Post-Covid World

Distributed But Connected: Enabling Today’s Remote Digital Workforce

SAP deployment on AWS: how to ensure cybersecurity & ease system administration

Defining The New Digital Worker

Getting your network ready for remote work

What You Need to Know About Real-Time Crisis Management in the Age of Covid-19

How 2020 Changed Cyber Risk Management

Manage Workforce Safety and Readiness: Dealing with Returning to the Workplace

Winning with the Fundamentals

Privacy in the Time of COVID

Remote Working – Putting the Employee First

How Working from Home has changed Cybersecurity with CEO Matt Moynahan

Emerging Trends in Intelligent Automation for Telecom

Backup: A critical security tool as you transition to a fully remote workforce

Build Your Career Confidence & Resilience in a Crisis

Barracuda IT SVP on making the sudden shift to a fully remote workforce

Securing your business during the COVID-19 crisis

Back to the Office – Or Not? Next Steps in Pandemic Technology Response

Scaling and Protecting Websites Stretched by COVID-19

Coronavirus & Surveillance: How To Protect Privacy Sensitive Data

Metodologías de ahorro de costes cloud en AWS

How do you prepare your network for a new future?

Faster Business Growth Starts with Better Vendor Onboarding

Why Work-at-Home Requires Team Collaboration

Keeping Remote Workers Safe and Your Work Secure

Emergency Networks for Federal Agencies Amid COVID-19

Best Practices for Providing Remote Access to Internal Apps and Networks

Leveraging AI & Automation in Life Sciences during a Health Crisis

Navigating Internal and External Comms When Business Continuity is Tough

Elections, Pandemics & Cybersecurity: A Toxic Brew

Ep2 Cloud Backup Top tips from Mr Backup:Coronavirus prep could prompt better DR

Covid-19 Pandemic: Impact on Virtual Workplace Collaboration Now & in the Future

Optimizing Cost, Performance and Security to Maintain Work-From-Home Efficiency

Cut Costs in ITSM with COVID-19 Survival Guide Tips

Using LTE for Pop-Up Healthcare in COVID-19 Response

The Newest Normal: Crisis = Danger + Opportunity

Phishing and Hunger for Information – COVID-19 Era

Phishing and Email Security – Effectively Managing Human Vulnerabilities

COVID-19 and credit markets: a review and outlook

Conquering Corona Crisis: Reducing Risks and Obstacles for the WFH World

Supplier Assurance Has Never Been More Important During Uncertain Times

Best Practices - How to protect your remote workers with data resiliency?

Work Securely, Work Remotely, Work Effectively: The New Pandemic Paradigm

Wi-Fi for At-Home Students without Connectivity

Why Coronavirus Magnifies Critical Need for Full-Cycle Automation (true RPA)

Increasing the security of your remote workforce

Coronavirus and the Workplace: A People-first Strategy

S1:E1 Assurance when Business is Unusual: From the Office to the Home

Data Protection & Privacy During the Coronavirus Pandemic

Using LTE to Help Employees Work from Home

Work-From-Home Success Tips

Empower Users with Secure Remote Access

Covid-19 Social Data - How are companies managing?

LTE and the Future of Technology in Public Safety

Covid 19 – Implications for Managing Systemic ESG Risks and Opportunities

Can Data Centers Handle the Increased Remote Working Caused by Coronavirus?

The Economic Impacts of the Coronavirus

Protecting Workers From COVID-19-Related Email Threats

Extending Access to Remote Workers

The CMO Imperative: Adapting your 2020 strategy during the pandemic

The CIO’s Covid-19 Roadmap: IT Innovation, Operations & User Experience in 2020

How LTE and 5G Affect Healthcare and Emergency Response

Dealing with PCI DSS Compliance During the COVID-19 Crisis

Preparing for COVID-19: An Infosec Perspective

Coronavirus Pandemic – Cyber Intelligence Fighting the Virus in Cyberspace

Fact, Fiction and Planning: How a Business Can Cope with a Pandemic

Going Virtual in the Wake of Coronavirus

Coronavirus Actions and Risks for Tech and Security Leaders

Coronavirus: Mitigating the Business Impact

The Israeli ministry of health was facing a major challenge, develop fast solution for tracking the movement of citizens and alert if they been exposed to COVID-19 patients while the keeping privacy of the citizens safe.  In very short time frame the ministry with the help of security community released an open source application that got the full blessing and support even from the security community. In this webinar Moshe Ferber, Chairman @ CSA Israeli Chapter and Guy Barnhart-mages, CTO @ Profero and consultant for the ministry, will be talking about the process of releasing this new application and how challenges were analyzed and solved.

Fighting COVID-19 with secure & private location tracking application

Covid-19

Privacy

Security

Open Source

Cloud Security

Cyber Security

Application Lifecycle Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Fighting COVID-19 with secure & private location tracking application

Presented by

About this talk

More from this channel