As we realize the transformative power of the cloud, AI and machine learning, has our culture of responsibility and ethics kept pace? How do we harness our new technological capabilities to the understanding of how to use them well?

In 2022, we’ve seen all sorts of shifts in the cybersecurity world. Nation state attacks, phishing and the growth of AI are only three out of the myriad of trends. In many ways, it’s been an unpredictable year, and security leaders have had to think on their feet to keep up with the wave of change. 

As the year comes to an end, it’s beneficial to evaluate the key trends we’ve experienced in the past 12 months, to truly consider and begin to understand what’s in store for us in the year ahead, and to plan for the unexpected. 

Join us in the final panel of 2022 as we discuss: 
-  Top security predictions for 2023
-  Balancing security and privacy
-  The evolution of the C-Suite 
-  And much more

Top Cybersecurity Predictions for 2023

There is no way to sugar coat it. We are living through a time of worker change: some call it the Great Resignation, others view it as a Reshuffle. According to a recent survey by Microsoft, globally, 41% of workers are considering leaving their jobs. In the cybersecurity industry alone, more than half of professionals are contemplating leaving (Cobalt).

How does this impact the cyber world? Does it leave businesses open to attack? What can leaders in the industry do to ensure that employees remain content and satisfied?

Join us in this discussion as we consider:
-  The impact of the Great Resignation/Reshuffle on the cybersecurity industry
-  Whether the Great Resignation/Reshuffle is broadening the attack surface
-  What's lost when employees turn over?
-  How to retain talent during turbulent times
-  Is this shift due to the pandemic, or was it always coming?
-  And more!

Cyber Talent and the Great Resignation

When it comes to operational security, a forward-facing approach is essential. Having a high-level yet comprehensive cybersecurity strategy is a great way to understand your attack surface and navigate risk. But how can you plan long-term when incidents are taking attention every day and technology and attacks continue to evolve?

Being forward facing means moving away from a reactive cybersecurity strategy towards a proactive plan. However, creating a 3-year plan is no easy feat. It takes continuous monitoring, agility, and the ability to plan for the unexpected.

In this episode of The (Security) Balancing Act, Diana Kelley and guests will discuss:
-  The benefits of a long-term cybersecurity strategy
-  Key considerations when building out a program or strategy
-  Balancing immediate and urgent tasks with long-term planning
-  Getting Board by-in for strategic goals
-  How to monitor your strategy to ensure it remains effective
-  The first step to building your 3-year plan
-  And much more!

How To Build a 3 Year Cybersecurity Program

The development and evolution of IoT has shifted the world of technology forever, creating new ways for technology to deliver value. Businesses, governments, and healthcare and financial institutions have begun to leverage the benefits of IoT. However, it has also opened up opportunities for data to be lost, stolen and manipulated. In fact, according to Gartner, over 25% of enterprise attacks involve IoT.

Balancing the rate of innovation and risk assessment is key. But where do we start? Do we begin securing the device, or the network? How can we secure IoT in a proactive, holistic way? 

Join us in this episode as we discuss: 

-  Understanding the scope of IoT
-  Considerations when IoT and IIoT meet
-  Where to start when securing enterprise IoT 
-  In a WFA world is securing consumer IoT a requirement
-  Emerging technologies available to enable IoT protection
-  The future of IoT in the security landscape

Securing the IoT Landscape

Gartner predicts that 60% of large enterprises will implement passwordless methods by the end of the year. Going passwordless reduces the risk of password-based threats, improves usability and reduces operational cost. 

When weak and stolen passwords are responsible for 61% of all data breaches (Verizon), is it time to ask ourselves whether going passwordless is the future, and in 2022, are we ready to remove passwords altogether? 

Join us in this episode as we discuss: 

-  Hype-free explanation of what passwordless really means
-  Why going passwordless and effective password management go hand in hand 
-  Passwordless authentication and SSO
-  Challenges to adoption
-  Building your passwordless implementation roadmap
-  The industries embracing going password free 
-  Is passwordless the future?

Can We Go Passwordless in 2022?

In 2022, your attack surface will be larger than ever before. From the onset of the hybrid workforce to huge waves of data being produced, security teams around the world are working hard to reduce their attack surface and improve operational security. But to do this, effective vulnerability management is a must-have. 

A successful vulnerability management program must have visibility over the entire organisation and the right tools. This year, unpatched vulnerability endpoints will continue to be exploited, and building up your vulnerability management is key to avoiding a breach. 

Join us in this session as we discuss: 

-  The importance of patching 
-  Taking a risk-based approach to vulnerability management
-  AI and fraud prevention 
-  How security teams are “cleaning up” vulnerabilities left behind by Covid
-  Attack surface reduction and management

Vulnerability Management in 2022: Reduce Your Attack Surface

It has been said time and time again that humans are the weakest link when it comes to organisational security. When it comes to social engineering, this is most certainly true. Social engineering relies on human error to gain access to confidential information. When social engineering is at an all time high - 98% of cyber attacks rely on social engineering (Purplesec) - making sure your employees are educated and informed should be your first line of defence. 

Join us in this session as we discuss: 

-  How to educate your employees about cyber security
-  Why social engineering is so prominent today 
-  The most common types of social engineering, and how to avoid them
-  What to expect from cyber criminals in the next year

The Social Engineering Threat

Last year we took a look at the role of the CISO, and more broadly the evolution of the role, from job satisfaction to engaging with cyber employees and everything in between. In this month’s episode of The (Security) Balancing Act we’ll examine the last year and reflect on how the role of the CISO has changed, and what to expect next. 

Join us as we discuss: 

-  How to succeed as a CISO in 2022 
-  What is expected of CISOs in 2022 
-  How the role of the CISO has changed in the past year

Succeeding as a CISO in 2022: A Year in Review

In the pursuit of greater agility and communication with customers and prospects, companies are rapidly producing applications across a number of environments. However, the dynamic nature of cloud-native architectures and the increasing use of open source components, serveless, low code/no code, and containers has left security struggling to keep up. Traditional on-prem monitoring and prevention measures are unable to identify, manage and prevent growing multi-cloud application threats.

According to Verizon, hackers are targeting applications more today than ever before. Last year 17% of all cyberattacks were categorized as Application Security threats. These attacks represented 26% of all breaches, with web application attacks ranked as  #2 for both incident and breach sources.

In this episode of The (Security) Balancing Act, we’ll examine how to ensure your applications are developed and managed securely, and the next generation of solutions.

Join us as we evaluate:
- Why automation and security testing tools are key components in the implementation of a secure AppSec cycle
- How to align AppSec with your other security solutions, to maximize value and efficiency
- Where and how the ShiftLeft/DevSecOps mindsets fit i
- A discussion around SAST and DAST (Static and Dynamic Analysis), and their role in a comprehensive Application Security
- The role of SBOMs (software bill of materials) and how a robust SCA (software composition analysis) program can help
- The considerations you must take when using third-party applications and evaluating if they meet app sec requirements
- The future of application security and the threats you need to guard against

Application Security for the Modern Enterprise

In 2022, the end-user won’t tolerate a poor experience; when it comes to accessing resources and services remotely, both your workforce and customers have grown accustomed to convenience. And now that we can connect from anywhere on any smart device, secure remote access is more important than ever.

For many, Identity Access Management (IAM) is the key to striking the balance between experience and security. IAM places identity at the center of security and enables the right individuals to access the right resources at the right times. And we’re extending our use of IAM with CIAM (customer), PIAM (partner) and identity providers that allow everyone to BYOI (bring your own identity). Gartner estimates that the Identity Access Management market is expected to reach $19 billion in 2024.

Join us in this episode of The (Security) Balancing Act as security experts discuss:

-  Key considerations when developing a strategy for an IAM framework, particularly how to integrate the next-generation solutions and technology into existing infrastructures
-  What constitutes a strong and effective IAM program, and how to balance experience with security
Implications of CIAM, PIAM, and BYOI adoption
The importance of that “first step” - identity verification in a distributed world
-  How does IAM align with zero-trust security?
-  The differences between authentication and authorization
-  What are the challenges that can hinder a successful IAM implementation?

Mastering Identity Access Management

Security is fast-changing, and keeping up to date with new trends and predictions is key to staying ahead of the race to secure your business. This is why we’re kicking off 2022 with an episode focused on the year ahead. 

How will the role of a CISO change in 2022? Do we need a BISO? How can I prepare for what’s to come? What tools and processes are available to me today? In this session we’ll be answering these questions and much more. 

Join Diana Kelley and expert thought leaders as they discuss: 
-  The top 5 security trends and predictions for 2022
-  Why 2022 is the year for user awareness
-  AI and ML in IT Security 
-  What the threatscape looks like in 2022
-  And much more!

Keep Ahead of the Trends: Security in 2022

In the aftermath of the Covid-19 pandemic, organisations are seeing an increase in phishing and ransomware attacks, and the transformative impact of Covid-19 has demonstrated the need to implement new cybersecurity and privacy policies. There are new challenges in the cybersecurity and compliance space for both government and business leaders. The movement towards remote working has forced governments and business leaders alike to rethink privacy and security policies. 

But what do regulations and compliance look like globally in 2021? How have regulations changed in the security space, and what do we expect of the future?

Join us in this session as we discuss: 
-  How the pandemic has impacted security regulations and compliance globally
-  Why adopting new privacy policies strengthens trust in the digital economy 
-  Industry-specific compliance regulations 
-  The ways in which regulations have shifted
- What regulatory experts expect to see in the future - and how you can prepare

A Guide To Global Regulations and Compliance

Data sovereignty refers to the concept that data is subject to the laws of the country in which it is processed. Countries around the world have had these laws long before today, even before new privacy laws and legislation - like GDPR - came into force. 

By the end of 2021, 78% of enterprises will have a multi-cloud environment. With this in mind, if an organization utilises a multi-cloud infrastructure with data centers across the globe, they could be in violation of data sovereignty regulations. What does this mean given the increase in enterprises adopting multi-cloud, and how can we navigate these rules and regulations and keep our data safe and secure.

Join experts in the field as they discuss: 
-  Why data sovereignty matters when choosing your cloud solution 
-  When it is and when it isn’t reasonable to expect full containment of your data
- How to simplify data sovereignty with the cloud 
- Regulatory implications of Internationally distributed collaboration teams
-  How to make data sovereignty and SaaS get along
-  Cloud security compliance

Data Sovereignty in a Multi-Cloud World

As we move towards a post-pandemic world of WFA (work from anywhere) supporting remote and hybrid working BYOD (bring your own device or devices) has become a standard operating practice. And while there are many financial upsides to BYOD there is also a loss of corporate control over that device.

An efficient BYOD policy should address the amount of control and visibility the company has over the employee owned device, the tools employees are allowed to use on their personal devices, the rights of the employees when it comes to accessing and retaining data, the security of devices and much more. 

BYOD is more relevant now than ever before: what key considerations must be made when it comes to your BYOD policy, what mistakes must you avoid, and are there compelling reasons for companies to still supply devices rather than go all in on BYOD? 

Join us as we discuss: 
-  Managing employee owned devices without sacrificing security and privacy
- How to equip your employees with the knowledge needed to keep devices safe when working from home 
-  What to prioritise when creating your BYOD policy 
- International privacy considerations for BYOD around the globe
-  The future of BYOD; where do we go from here?

BYOD in the Era of Remote Work

C-Level executives are increasingly being targeted by cyber criminals: according to an IBM survey, “64% of CFOs, CHROs and CMOs feel the least engaged in cybersecurity threat management activities, yet are the stewards of data most coveted by cybercriminals.” With cybersecurity no longer limited to the concerns of the IT department and the broader workforce, in 2021 the risk of breaches and attacks touch every part of the organisation.

Integrating security controls at all business levels, sharing incident data and making cybersecurity an essential pillar of business considerations and training goes a long way to help CISOs and security leaders navigate the increasing threats and vulnerabilities. 

In this month’s episode of The (Security) Balancing Act we’ll be sharing how IT security leaders can ensure everyone - and every part - of the business is safe. Join as we evaluate:

-  To what extent cybersecurity should be a priority in the C-Suite
-  How C-Level execs should consider their role in relation to cybersecurity
-  How training and education can help CISOs navigate increased risk at all business levels
-  And more

This episode is part of The (Security) Balancing Act original series with Diana Kelley. We welcome viewer participation and questions during this interactive panel session.

Cybersecurity in the C-Suite

In the last year, the move to remote and hybrid working models - and newly distributed employees accessing data from distributed locations - has opened up a need for more stringent and secure network access security models. 

This is balanced with the need for remote employees to have access to reliable, low-latency access and connectivity to cloud and data center applications. So what’s the solution? According to many, it’s SASE. SASE provides a flexible, simplistic no-fuss, secure access model and Gartner predicts that by 2024, at least 40% of enterprises will have explicit strategies to adopt SASE. But what is SASE and why is it being heralded as the future of network security?

Join us in this episode of The (Security) Balancing Act as security experts discuss: 

-  What exactly SASE offers that traditional network security controls don’t
-  How SASE adoption has been in part fuelled by the pandemic, and what this means moving forward into the ’new normal’
-  The future of secure access models, and what to expect over the next 12 months
- And more

SASE for the Hybrid Workforce

As security breaches and attacks become more sophisticated and complex, managing your vulnerabilities and gaining a human perspective on your security gaps is an effective way to protect your attack surface. 

With 34% of ethical hackers and vulnerability researchers reporting that they have seen more bugs due to pandemic-driven Digital Transformation initiatives (HackerOne), now is the time to integrate a human element into your security controls.

In this episode of The (Security) Balancing Act we’ll deep dive into the threat landscape, looking at why the insights of an outsider might be just what your organization needs.

Join us as we discuss:

-  The value ethical hackers and vulnerability researchers can bring to your organization
-  Why ethical hackers and vulnerability researchers are more valuable now than ever before
-  Considerations for crowdsourcing ethical hacking and penetration testing
-  How bug bounty programs benefit companies and the research community
-  What to know if you are thinking of launching a bug bounty program
-  How ethical hackers and vulnerability researchers enhance vulnerability management
-  The 2021 threat landscape

Ethical Hackers: Redefining The Security Landscape

According to research by Capgemini, two thirds of businesses now understand that AI is a necessary component in the race to secure your organisation. The attack surface in 2022 is larger and more sophisticated than ever before, with ransomware and breaches at an all time high. The ability to detect cyber threats quickly, to have proactive security measures and to detect new, malicious threats, is more critical than ever. 

In this month’s episode of The (Security) Balancing Act, we’ll ask, ‘is AI the answer to the evolution of the threatscape?’ 

Join us in this session as we discuss: 

-  Use cases for AI in cyber - where does it fit and where it doesn’t
-  Can AI replace cyber analysts?
-  The importance of resilient AI
-  What we mean by predictive intelligence, and why it’s important 
-  How to implement AI into your security 
-  The technology AI can leverage to improve your security posture 
-  The future of AI in the cybersecurity space

Cybersecurity and AI: Managing the Evolution of the Threatscape

Presented by

About this talk

More from this channel