Name: How I got ‘X-ray and thermal vision’ across our public cloud infrastructure
Start: 2021-10-28T18:00:00Z
End: 2021-10-28T18:56:13.000Z
Location: BrightTALK
Rating: 5

Learn how to achieve 100% cloud security coverage and visibility across AWS, Azure, GCP, Alibaba Cloud, and Kubernetes. Content covers topics including attack path analysis, vulnerability management, API security, and more.

Whether you’re a first time CISO, or this is your tenth CISO gig, any cybersecurity pro can benefit from creating– or updating– an actionable plan to tackle cloud security risks. But where to begin?

Our veteran panel of security professionals, including Andy Ellis, Advisory CISO, Orca Security; as well as Kathryn Kun, Office of the CSO, Akamai Technologies; and George Werbacher, Director of Information Security, Blackbaud, will discuss strategies to help CISOs old and new stay ahead of the ever-evolving world of the cyber threat landscape. Topics include:
- The current state of cloud security risks
- Considerations to inform your strategic decisions
- How to uncover hidden risks within your specific cloud environment
- Mapping unique risks with attack paths

Don’t miss the chance to learn from some of the leading voices in cybersecurity, save your spot today.

Uncovering Hidden Risks in Your Cloud Environment

Are you using a cloud security platform that’s been stitched together from years of acquisitions? Does your team complain about a messy U/I and complicated agent-based deployments or alerts that don’t tell the whole story? 

Find out how security leaders are simplifying their security stacks, trading in the headache of agent-based deployments and multiple redundant dashboards for a clean and cohesive security experience.

Neil Carpenter, Principal Technical Evangelist, Orca Security, and Jonathan Jaffe, CISO, Lemonade, discuss how a purpose-built cloud security platform can help you:
- Reduce complexity and operational overhead
- See risks and threats that span your whole cloud environment
- Bring all of your data into a unified, easily queryable location

Simplify Your Cloud Security Stack

Join our expert CISOs as they discuss key findings from Orca Security's State of Public Cloud Security Report, a collection of findings and recommendations from our research team after analyzing billions of real-world cloud assets.

Moderated by Andy Ellis, our panelists will share:
• Which statistics from the report stood out to them
• How the report findings compare to what they are seeing in the field
• The biggest cloud security challenges facing security leaders today
• Recommendations on how to improve cloud security postures with limited resources

CISO Roundtable: State of Public Cloud Security

Establishing a Zero-Trust program is a critical strategy to help security teams govern security across cloud and on-premise environments. As an AWS Software Partner, Orca is committed to working closely with you and AWS to secure your AWS cloud estate. Aligning with the NIST Cyber Security Framework, there are 5 primary categories of protection in the cloud – Data, Infrastructure, Applications, Identities and Entitlements, and the Networks connected between them – which the Orca Cloud Security Platform addresses from a single unified platform.

Join us to learn:
- 5 areas you can address to reduce your overall security risk and establish Zero-Trust in your cloud environment
- How to secure your AWS cloud estate
- How Orca and AWS are better together

5 Ways to Establish Zero Trust in the Cloud with Orca Security and AWS

The power of artificial intelligence (AI) has recently taken center stage in the media with the availability of new tools like Open AI's ChatGPT. In this webinar, you'll hear the benefits of utilizing AI and machine learning in cloud security to alleviate the daily workloads of security practitioners and DevOps teams.

We'll demonstrate, in real-time, how the Orca Cloud Security Platform leverages GPT-3 to automatically generate cloud security remediation steps. We'll also show how Orca’s AI-powered AWS Policy Optimizer analyzes actual usage data to recommend the optimal AWS policy configurations that ensure adherence to the least-privilege principle.

In this webinar, you'll learn
 • The possibilities that AI and machine learning bring to cloud security 
 • How Orca leverages AI and GPT-3 in the platform
 • The impact that AI and machine learning have on cloud security efficiency and effectiveness

Improve Cloud Security Using ChatGPT & AI

Traditional agent-based cloud security tools have blind spots. They either can’t see all of your cloud assets or can’t analyze them with proper risk context. Security teams are increasingly turning to agentless Cloud Native Application Protection Platforms (CNAPPs), which offer faster setup and deployment, less maintenance and lower provisioning costs, wider visibility, and greater scalability than traditional security tools.

Sagy Kratu, Director of Enablement and Evangelism and Jason Silberman, Senior Product Marketing Manager, will cover:
- The current security threat landscape and risks to look out for
- Capabilities and limitations of various cloud security approaches
- Tips for selecting and getting started with a cloud-native application protection platform

The Future Is Agentless: Cloud Security for Modern Environments

Organizations are increasingly distributing their operations across multiple public clouds in order to reduce cost, increase resiliency, and optimize services. However, multi-cloud strategies significantly increase complexity for security and governance teams tasked with applying consistent controls and policies across all cloud environments. 

In this webinar, Deborah Galea discusses the challenges of applying consistent security controls across multiple cloud platforms, as well as practical steps that organizations can take to minimize the complexity and overhead of securing a multi-cloud environment.

In this session, you’ll learn
Why organizations choose a multi-cloud strategy
Security and compliance challenges in multi-cloud environments
Recommendations to simplify multi-cloud security

How to Simplify Multi-Cloud Security & Compliance

The current economic outlook is increasing pressure to lower costs and drive efficiencies in cloud security operations. But cloud adoption is continuing to increase. In fact, Gartner estimates worldwide spending on public cloud services to grow from $494.7B in 2022 to nearly $600B in 2023. How can you adapt your security budget to help your team meet new challenges and thrive in 2023?

Join Andy Ellis, Advisory CISO, Orca Security; as well as Nick Vigier, CISO, Talend; and Guillaume Ross, Deputy CISO, JupiterOne, as they discuss:
- New security challenges triggered by the economic forecast
- Uncovering opportunities to redefine your priorities and balance efficiencies vs. risks
- Data-driven approaches to communicate cyber risks to financial stakeholders
- What you can do to help your team prepare for the year ahead

Budgeting for Cloud Security in 2023: Tips for a Tough Economy

Development teams are quickly deploying applications to the cloud, resulting in greater scale and faster time to market. But as security teams work to incorporate security into development and DevOps workflows, they face multiple challenges keeping up with the speed and volume of releases. This can lead to unauthorized access to applications, introduction of malware, exposed cloud services, and data loss.

Melinda Marks, Senior Analyst, ESG Research; Ido Geffen, VP, Product, Orca Security; and Keith Mokris, VP, Product Evangelism, Orca Security will share results from new GitOps and Shift Left Security Survey, including:
- How the cloud-native cybersecurity threat landscape is intensifying
- Security concerns around Open Source Software and Infrastructure-as-Code
- Challenges caused by faster CI/CD development cycles
- What you can do to enable rapid development without compromising on security 

(1)Marks, M. 2022. Walking the Line: GitOps and Shift Left Security. ESG Research

Enabling Rapid Development Without Compromising Cloud Security

A Cloud-Native Application Protection Platform (CNAPP) is a new approach that simplifies cloud security by combining several capabilities in one platform. By combining vulnerabilities, context, and relationships in a unified data model, a CNAPP provides a holistic view of risks, recognizing how seemingly unrelated low-severity risks can combine to create dangerous attack vectors.

In this session, we’ll talk CNAPP and dive into:
• How CNAPPs are changing the landscape of cloud security
• The advantages of agentless cloud security
• How a CNAPP reduces cloud security tool sprawl and strengthens risk prioritization
• How the Orca Cloud Security Platform combines cloud workload and configuration intelligence in a unified data model to understand the full context of risks

5 Reasons to Choose an Agentless CNAPP in 2023

As API usage continues to increase exponentially, threat actors seek to exploit APIs as an attack vector. One of the most critical risks for an organization is to expose an internal API to the outside world, potentially leading to data exposure or breach—resulting in lost revenue, lawsuits, and a loss of customer trust.

In this Orca Security webinar, we’ll dive into the state of API security with featured presenter Sandy Carielli, Principal Analyst from Forrester, and share best practices for cloud and application security teams to strengthen API security in their cloud-native applications.

In this webinar, learn about:
• The state of API security including its top challenges and threats
• Strategies and best practices for visibility and posture management of APIs in the cloud
• From Orca: our API Security capabilities—with no agents required

Securing APIs in Cloud Native Applications Best Practices

In recent years, Kubernetes has become the standard for deploying and managing software in the cloud. Security research teams often investigate potential Kubernetes vulnerabilities and weak points in an effort to harden Kubernetes environments.

The Cloud Risk Encyclopedia (CRE), a free and open resource from Orca Security, includes a collection of common Kubernetes security risks—from network and authentication misconfigurations, to lateral movement risks—helping security research teams stay up to date and improve their Kubernetes security postures. In addition to including best practices redommendations from the Kubernetes CIS Benchmark and specific Kubernetes managed service risks, the Orca Research Pod continuously adds further risks to promote Kubernetes hardening. 

In this webinar, we will demonstrate how to navigate the CRE through the various risk categories and compliance frameworks, and how to leverage a Kubernetes security checklist that DevOps and security teams can use to simplify daily tasks. 

In this webinar, learn:

- What the top Kubernetes security risks are
- How research teams can stay up to date with prevalent Kubernetes and broader cloud risks
- How the CRE can help teams improve Kubernetes security postures

How to Support Kubernetes Security Research with the Cloud Risk Encyclopedia

Any follower of cybersecurity attacks in recent years is aware of the pervasiveness of ransomware. As an AWS ISV Partner, Orca is committed to working closely with you to secure your AWS cloud estate.

In this webinar, Keith Mokris and Dudi Matot will discuss how to protect against ransomware in your cloud environment with Orca Security and Amazon Web Services. Aligning with the NIST Cyber Security Framework, key takeaways will include: 
- 5 steps you can take to reduce ransomware risk
- How to identify and detect malware in your AWS resources.

Orca Security provides cloud-wide, workload-deep security and compliance for AWS－ without the gaps in coverage, alert fatigue, and operational costs of agents. 
Get a free risk assessment on AWS Marketplace: https://aws.amazon.com/marketplace/pp/prodview-rogbt2k4b63xc
Learn more: https://orca.security/partners/technology/amazon-web-services-aws/

5 Ways Orca Security and AWS Protect Against Ransomware

Join our expert CISOs as they discuss key findings from Orca Security's 2022 State of Public Cloud Security Report, a collection of findings and recommendations from our research team after analyzing billions of real-world cloud assets.

Moderated by Andy Ellis, our panelists will share:
• Which statistics from the report stood out to them
• How do the report findings compare to what they are seeing in the field
• The biggest cloud security challenges facing security leaders today
• Recommendations on how to improve cloud security postures with limited resources

This will be recorded and shared with all registrants after the live session, plus, we'll send over a free copy of our 2022 State of Public Cloud Security Report.

Today’s security and incident response teams have the tremendous responsibility to secure scaling and dynamic cloud environments. Cloud risks are multi-faceted, spanning vulnerabilities in applications, infrastructure misconfigurations, over-privileged identities, and advanced threats. Security, cloud infrastructure, and DevOps teams need a combination of in-depth coverage and automation to remediate these risks quickly and effectively.

In this webinar, join PagerDuty Head of Security Franklin Mosley and Orca Security VP, Product Marketing Keith Mokris to learn:
- Why the cloud and cloud native technologies present new challenges for security and IR teams
- How PagerDuty effectively helps teams remediate cloud risks
- How Orca Security delivers comprehensive visibility and risk prioritization
- And, how the two solutions work hand-in-hand to enable effective incident response

Identify and Remediate Cloud Risks Effectively with Orca Security and PagerDuty

Identify and Remediate Cloud Risks Effectively with Orca Security & PagerDuty

Using multiple cloud providers allows organizations to reduce cost, increase resiliency and optimize services. However, multi-cloud strategies significantly increase complexity for security teams tasked with applying consistent controls and policies across all cloud environments.  

As cloud usage increases and becomes more ephemeral, agent-based security across multiple clouds becomes unmanageable. In addition, increased security tool sprawl, with often multiple cloud provider tools for each platform, as well as separate point solutions for specific cloud security areas, further increases complexity. This leads to hundreds of (often duplicate) alerts every day, causing security teams to become desensitized and ultimately, miss critical alerts.  

In this webinar, Deborah Galea discusses how an agentless Cloud-Native Application Protection Platform (CNAPP) can significantly alleviate many security challenges in multi-cloud environments. 

In this session you will learn: 

- What are the security challenges in multi-cloud environments? 
- What is a CNAPP? 
- How does a CNAPP reduce cloud security tool sprawl? 
- How do you get full multi-cloud visibility with agentless cloud security? 
- How does an agentless CNAPP increase an organization’s agility? 
- How can a CNAPP prevent application security issues in pre-production?

Agentless CNAPP: A New Approach to Multi-Cloud Security

In this presentation learn about:

- 5 risks hiding inside every public cloud estate
- How to get instant-on, workload-level visibility across 100% of your AWS, Azure, and GCP assets
- The power of addressing both the control plane and data plane at once
- Pros and cons of different cloud security tools: traditional agent-based tools and scanners, CWPP (cloud workload protection platforms), and CSPM (cloud security posture management)

How I got ‘X-ray and thermal vision’ across our public cloud infrastructure

Amazon Web Services

Cloud

Cloud Adoption

Cloud Infrastructure

Cloud Security

Cyber Attacks

Public Cloud

Risk Assessment

Security

Security Awareness

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How I got ‘X-ray and thermal vision’ across our public cloud infrastructure

Presented by

About this talk

More from this channel