Name: Toward a European Certification Scheme for Cloud Services
Start: 2020-06-09T07:00:00Z
End: 2020-06-09T07:24:00.000Z
Location: BrightTALK
Rating: 3.82

Go in depth into CSA's latest research on everything from IoT to containers to blockchain. Webcasts will break down the research, provide use cases, instructions for implementation, and further insights.

Cloud Service Providers (CSPs) are often the first line of defense regarding new technology. CSPs support various financial services companies, including banks, insurance firms, asset managers, and investment funds. The role of a CSP is to provide the tools and infrastructure required to support these organizations' operations, whether it be a data center, disaster recovery site or any other IT requirements.

Our panel of CSP representatives will discuss how cloud providers support the financial services industry and what the industry needs from the cloud, and how using STAR as due diligence facilitates implementing good security posture for high-risk sectors.

This is an excellent opportunity for anyone who works in the financial services industry or wants to learn more about what it means for their business moving forward!

CSP Perspective Working with Financial Services

Billions of financial transactions are routed digitally all over the world each day, requiring many third-party service providers to protect not only the confidentiality and integrity of the information but also be able to clearly demonstrate to their cloud customers adherence to regulatory expectations.

This session will explore the Top 5 risks for third-party cloud services and recommend risk-management best practices for successfully protecting financial data.

Best Practices for Effective Third-Party Management

Whether you noticed it or not, data governance is very much back on the agenda globally, from the European General Data Protection Regulation (GDPR), to California's personal data and privacy law and everything in between. When doing business globally, the data chain of custody and associated responsibility, including data retention, is an increasingly important consideration as we move towards cloud-based data management services and big data analytics.
During this session, we will take you through the major changes around the world, delve into data governance issues and how they may impact the financial industry, and provide some predictions of upcoming trends. We will also discuss the current landscape and why the adequacy of the current regulations is still being debated.

Governance in the Cloud - Managing Data Regulation

In this webinar, Cloud Security Alliance will discuss the growth of cloud services for banking, fintech, crypto exchanges and other organizations managing financial data. Additionally, we’ll discuss CSA’s current efforts to work with industry on pilot programs and other projects to improve cloud migration, reduce regulatory redundancy, and improve security of third-party providers. This will also include a forecast of future opportunities to collaborate within CSA for financial services best practices going forward.

State of Cloud Security for Financial Services

CAIQ is an acronym for the Consensus Assessment Initiative Questionnaire. This questionnaire is a downloadable spreadsheet of yes or no questions that correspond to the controls of CSA’s Cloud Controls Matrix (CCM).

CSPs submit the CAIQ to the CSA STAR Registry, our cloud security assurance program, to earn STAR Level 1. This encourages due diligence on the part of the CSP and leads to a higher quality procurement experience.

Filling out the CAIQ and submitting it raises questions for some, so we are here to help. This webinar will feature CSA technical experts that will help you understand the CAIQ, walk you through completing it, and how upload it to the STAR Registry. 

Consensus Assessment Initiative Questionnaire (CAIQ): https://cloudsecurityalliance.org/artifacts/consensus-assessments-initiative-questionnaire-caiq-v4-0/
Cloud Controls Matrix (CCM): https://cloudsecurityalliance.org/blog/2020/10/16/what-is-the-cloud-controls-matrix-ccm/
CSA Star Registry: https://cloudsecurityalliance.org/star/

Understanding, Completing, and Submitting a CAIQ

Zero Trust has become a popular security term  - and rightfully so. With breaches happening daily and lost data costing businesses millions in revenue, teams must consider all approaches to fortifying their digital walls. But what does this mean for CISOs or other leadership roles in the enterprise? When approached with a Zero Trust project idea, what must leaders consider? What are the budgeting considerations involved in Zero trust? What key features should you concern yourself with, and how does this fit into the overall scope to protect your business? How do you merge into Zero Trust with competing priorities? What are the risks from a leadership perspective when moving into a Zero Trust world? This presentation will discuss and evaluate executive considerations for Zero Trust.

Executive Considerations in a Zero Trust World

While many organizations perceive cloud security to be strong, there are significant risks that traditional approaches cannot mitigate. We will review a recent Cloud Security Alliance survey about protecting sensitive data and examine privacy-enhancing technologies such as confidential computing, homomorphic encryption, and others. We will discuss which ones are best suited to solve enterprise security needs.

Trends in Securing Sensitive Data with Privacy Enhancing Technologies

Cybersecurity is not just about securing a network, monitoring threats, or identifying vulnerabilities. Consider exactly what you are protecting: intellectual property, trade secrets, and employee and customer data. The loss, damage, or disclosure of this information can also have consequences at a regulatory level.

What has changed in recent years is the realization that risk management and zero trust go hand in hand. Security and technology leaders must protect sensitive data and assets in order to meet their governance objectives and be in compliance with regulations. Through the adoption of zero trust principles, organizations advance their cyber architectures and better protect their users, data, and reputations.   

Sounds great in theory, but what steps do organizations need to take to align zero trust  solutions with their own governance structures and compliance mandates?

Sean Cordero, Zscaler CISO - Americas, and Pam Kubiatowski, Zscaler Field CTO - Americas, will walk you through the practical methods that leading enterprises have used to successfully implement a zero trust architecture solution, with risk management and mitigation initiatives at the forefront.

The Zero Trust Advancement Center is hosting free monthly webinars about one of the most widely talked about cybersecurity trends today. Zero Trust experts will guide you through the ins and outs of this increasingly popular approach to cybersecurity, helping you come to an understanding of why Zero Trust is needed today, what the key principles are, and how to implement it into your business planning, enterprise architectures, and technology deployments. Learn more at https://csaurl.org/zeroinseries.

The role of zero trust in improving corporate governance and compliance

Modern attacks like ransomware and supply chain attacks can start from anywhere in the kill chain –  endpoints, identities or cloud workloads. Zero Trust, if deployed correctly, can be the answer to increasing real-time security coverage and reducing the attack surface in the hybrid enterprise. 

However, with the rapidly evolving adversarial tactics and techniques behind modern attacks, organizations need to not only operationalize Zero Trust, but to do so with minimal disruption to business operations and complete integration with existing systems.

Join us to learn more about the top five Zero Trust best practices CISOs use to detect and stop modern attacks like ransomware and supply chain breaches in real time.

Top 5 Zero Trust Practices to Stop Modern Attacks

Identity powers cyber resilience, and acts as the basis for the secure adoption of modern IT innovations, and for the pursuit of digital transformation initiatives that are essential for business competitiveness. Identity is the core of a Zero Trust strategy: With the perimeter moving to the identity layer, people become the critical component of the Zero Trust ecosystem.

Join us for this session to learn more about the key role that identity plays in a zero trust strategy, how you can successfully integrate identity into your existing security practice and why adopting identity-first security will help you realize your zero trust goals.

The Zero Trust Advancement Center is hosting free monthly webinars about one of the most widely talked about cybersecurity trends today. Zero Trust experts will guide you through the ins and outs of this increasingly popular approach to cybersecurity, helping you come to an understanding of why Zero Trust is needed today, what the key principles are, and how to implement it into your business planning, enterprise architectures, and technology deployments. Learn more at https://csaurl.org/zeroinseries.

The Journey to Zero Trust starts with Secure Identity

En esta charla conoceremos a detalle qué elementos conforman una arquitectura de SASE, cuáles son los desafíos a los que la organización se enfrenta al adoptar la misma y porqué es importante plantearnos en un futuro la adopción de SASE en nuestra estrategia de seguridad corporativa.

SASE: Transformación de seguridad para una transformación digital

Join the 2021 CSA-DC Chapter Research Team as they walk us through the concepts, technologies, business processes, and team building activities associated with their recent CSA publication entitled “A Guided Approach to Support Your Zero Trust Strategy; A Guided Approach for a Complex Hybrid World”. 

Dr. Mari Spina, Research Committee Chair, will moderate a panel of key research contributors to the paper and experts in the field of Zero Trust Architecture (ZTA) development and adoption: Jyoti Wadhwa, Director, Cybersecurity Solutions Architect at T-REX Solutions, Paul Deakin, F5-CSE Security, F5-CSE Cloud Field Solutions Engineer, and Uma Rajagopal, Advisor and author of Essential Security Fundamentals; Security is a Process; Not a Single Product.

The Zero Trust Advancement Center is hosting free monthly webinars about one of the most widely talked about cybersecurity trends today. Zero Trust experts will guide you through the ins and outs of this increasingly popular approach to cybersecurity, helping you come to an understanding of why Zero Trust is needed today, what the key principles are, and how to implement it into your business planning, enterprise architectures, and technology deployments. Learn more at https://csaurl.org/zeroinseries.

A Guided Approach to Support Your Zero Trust Strategy

Cloud is at the center of an expanding IT ecosystem giving organizations the ability to scale, innovate and enhance business objectives securely. The rise of cloud and today’s remote workforce requires that measures be put in place across IT systems to protect the layers, components and people of the IT ecosystem. Zero Trust, arguably the most widely discussed trend in cybersecurity, challenges the barriers of IT systems by ensuring that implicit trust is verified, limited and continuously monitored.

CSA launched the Zero Trust Advancement Center (ZTAC) to create a consolidated resource center of curated Zero Trust content, providing easy access to research, training and professional credentialing. ZTAC delivers a community driven approach to eliminate market confusion and guide the public on a Zero Trust philosophy to cybersecurity based on strategies and methodologies for cloud customers. In this webinar, CSA’s Global Vice President of Research, John Yeoh, will highlight the evolution of Zero Trust, the goals of the ZTAC initiatives, and the components that make it the most trusted source on Zero Trust today.

The Zero Trust Advancement Center is hosting free monthly webinars about one of the most widely talked about cybersecurity trends today. Zero Trust experts will guide you through the ins and outs of this increasingly popular approach to cybersecurity, helping you come to an understanding of why Zero Trust is needed today, what the key principles are, and how to implement it into your business planning, enterprise architectures, and technology deployments. Learn more at https://csaurl.org/zeroinseries.

Advancing Zero Trust Principles

Implemented correctly, a Zero Trust architecture / strategy / approach to Information Technology, and the architecture that supports it, has the potential to provide a simpler, more secure, more flexible environment for an organization to do business.

The advent of Zero Trust should be regarded as an opportunity to better align IT with an organization’s business strategy. The whole purpose of modern networked computing is to facilitate collaboration, both with others that are part of the organization, but more importantly with entities that are not part of the organization; whether on the Intranet, via the Internet or as part of an outsourced service. Implementing Zero Trust is not about buzz-words (especially when communicating to the C-Level), it’s about organizational and cultural transformation.

A Zero Trust “philosophy” is neither a technology, security, or an identity issue; it's about the strategic alignment of the business roadmap & strategy with the technology needed to support it, delivering solutions to the business that are: Better, Faster, Cheaper and most importantly More Secure.

Demystifying Zero Trust for the C-Level (and the rest of us)

Nel webinar verrà presentato il programma STAR Evidence-Based Self Assessment (ESBA) sviluppato da CSA per fornire un livello di valutazione della sicurezza dei servizi cloud che possa posizionarsi tra l’attestazione STAR Livello 1 (Self Assessment)  e la certificazione di terza parte STAR livello 2, quest’ultima più completa ed efficace, ma più onerosa in termini di tempo e risorse per i cloud provider piccoli e medi (PMI).

Nel webinar verrà presentato un esempio di applicazione della metodologia ESBA condotto dalle società ACCA Software (Auditee) and BIP (Auditor), entrambe soci corporate di CSA.

Nelle settimane che precedono il CSA Research Summit, segui con noi i tre webinar sulle ultime notizie e tendenze che hanno ispirato la Ricerca CSA. Scopri di più sul motivo per cui la nostra ricerca sulla sicurezza del cloud è fondamentale per affrontare i problemi critici della sicurezza informatica. Il CSA Research Summit si terrà il 9 e 10 marzo 2022. Per i dettagli sull'evento, visitare: https://www.csaresearchsummit.com.

STAR Evidence-Based Self Assessment (Presentato in italiano)

Zero Trust (ZT) has been around for over 10 years. A rather simple and at the same time powerful approach to cybersecurity, built of the idea of "trust but verify."



Since its first inception the ZT concept has evolved and matured, and under the impulse of some recent security breaches as well as government policy changes, got to the attention of the wider audience.



In this presentation, Daniele Catteddu, CTO at the Cloud Security Alliance (CSA), will provide an introduction of the key principles, tenants, and main drivers for embracing the Zero Trust philosophy. 



Daniele will also introduce the CSA Zero Trust Advancement Center, talk about the reasons behind it and the CSA’s roadmap on Zero Trust research, education, awareness, and training.

Searching for Zero Trust

The CSA-DC Chapter Research Committee is dedicated to solving critical problems facing the Government and highly regulated business sectors important to our membership. As organizations contend with complying with a federal mandate, developing modernization journeys to the cloud and implementing resiliency from new attack vectors, the lead authors of this paper from the CSA-DC Chapter published a guided approach on how organizations can navigate a highly complex environment to develop a Zero Trust (ZT) strategy.

Zero Trust Architecture (ZTA) has been a goal for enterprise IT for a decade.  Even with broad support from the IT vendor community, the reality of ZTA is still ambition rather than reality for large enterprises.  Modern micro-services and hybrid cloud based architectures compound the challenge by increasing system complexity and adding operational costs for synchronization and orchestration of cybersecurity policy.   This paper explores the options enterprises have to deliver a ZTA for granular access control spanning multiple clouds, on-premises environments, and end-point level security.

In a Panel format, We will discuss today few highlights on the topic of the Publication as well as the collaboration of the publication through our chapter and how you can be part of any future research projects.

A Guided Approach Towards a Zero-Trust Architecture

With the recently created CxO Trust Initiative, CSA is looking to elevate the knowledge of cloud computing and cybersecurity amongst executive teams by enabling Chief Information Security Officers with tools to communicate cloud computing risk, governance, and compliance issues to their peers within the C-Suite. From the initial meeting, some of the CxO Trust Advisory Council’s research topic ideas include PII in the cloud, SaaS provider security, Zero Trust models, cross-cloud-platform security strategy, security operations and response, confidential computing, regulatory compliance, and cloud expertise, among others. This session will give an overview on some of these research ideas and strategies.

CxO Trust Initiative: Research for the C-Suite

In 2019, the Cybersecurity Act became a law in Europe, establishing a European Certification Framework. In November 2019, the European Commission tasked ENISA with designing a candidate scheme for cloud services. This work is currently underway. This presentation will first describe the Cybersecurity Act's Certification Framework, and then provide a high-level status on the ongoing work on the scheme for cloud services.

Toward a European Certification Scheme for Cloud Services

Cloud

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Toward a European Certification Scheme for Cloud Services

Presented by

About this talk

More from this channel