Name: How I got ‘X-ray and thermal vision’ across our public cloud infrastructure
Start: 2021-10-28T18:00:00Z
End: 2021-10-28T18:56:13.000Z
Location: BrightTALK

See how leading enterprises and cloud-first companies detect risks in public cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform.

Development teams continue to leverage cloud native technologies and deploy applications faster than ever. But, existing security solutions and a plethora of point solutions cause friction between teams and leave even less time for deployment. 

In this webinar, VP of Product Marketing Keith Mokris and Director of Engineering Lior Samuni will explain the benefits of shifting security left and share best practices for integrating security across the full integration lifecycle, including:
- Scanning container images and IaC templates
- Guardrail capabilities to consider, including how to block builds as part of your workflows
- Creating tight integrations and communication between different applications and teams within your organization

You’ll walk away with detailed recommendations about how to address risks earlier in the software development lifecycle and ship more secure code in production.

Shift Left: Find and Fix Cloud Security Risks Earlier in the Development Cycle

In 2021, Gartner identified Cloud Native Application Protection Platforms (CNAPPs) as a new category that combines CSPM, CWPP, KSPM, and CIEM in one platform. CNAPPs have full coverage and visibility into cloud estates and can detect risks across the technological stack, including cloud configuration, workload and identity. In this webcast, Marcelo Negro, Security & Cloud Evangelist, Orca Security, will discuss how CNAPPs can help you to:
- Increase cloud security coverage to 100% and eliminate blind spots
- Improve efficiency with agentless deployment and single pane of glass
- Avoid wasted time sifting through low risk alerts with effective risk prioritization
- Enjoy faster time to market by integrating cloud security and compliance

Cloud Security, Simplified: Why CNAPP is the Future of Cloud Security

Since its first release in 2014, Kubernetes (also known as K8s) quickly became the new standard for deploying and managing software in the cloud. Since Kubernetes was designed with functionality in mind, not security, there are several inherent challenges: visibility, broad attack surface, and least secured default configuration, to name a few.

In this session we will discuss common obstacles, share real customer stories, and reveal tips that will help you develop a strategy to overcome these challenges and secure your workloads in the cloud.

Agentless Security for Kubernetes Clusters and Container-Based Applications

Orca Security for Microsoft Azure: Frictionless Cloud Security and Compliance for Azure

Join Orca Security and Microsoft Azure for a lively conversation on how you can achieve complete security coverage and visibility of your Microsoft Azure cloud without the organizational friction, high TCO, and performance impact of agents.

During this webinar, you’ll discover how:

- Orca Security covers 100% of your cloud assets — now and in the future
- How Orca helps you avoid alert fatigue by prioritizing the 1% of the most critical alerts that matter
- How to protect PII and quickly meet compliance mandates such as PCI-DSS, SOC2, PSD2, and GDPR
- How Orca Security’s platform detects and prioritizes against vulnerabilities, misconfigurations, malware, misplaced sensitive data, lateral movement, risk identity, and access management risk

The Orca Cloud Security Platform provides multiple tools in one solution to detect and prioritize cloud security risks in all Azure workloads and to deliver full visibility into an organization’s entire cloud estate without using agents or disparate tools. Powered by Orca SideScanning™ technology, the single platform covers workload and data protection, cloud security posture management, cloud infrastructure entitlements management (CIEM), vulnerability management, and compliance management capabilities. By combining all of these capabilities into a single platform and data model, Orca Security can flag attack chains containing risky combinations.

Orca Security is now available in the Microsoft Azure Marketplace! Learn more about Orca Security + Microsoft Azure here: orca.security/partners/technology/microsoft-azure/  

Can’t make it live? Register anyway and we’ll send you the recording plus additional materials.

Orca Security for Microsoft Azure

Les fournisseurs de services de cloud public comme AWS, Azure, GCP, Oracle et Alicloud vous permettent de proposer de nouvelles solutions, de nouveaux produits et fonctionnalités en mode Agile et accéléré, mais comment s’assurer de l’équilibre entre la vitesse de mise sur le marché, la conformité et les risques de sécurité ?

Solution Technologique développée par 8 co-fondateurs dont des anciens Responsables technologiques et produits de Check Point, Orca Security propose une approche révolutionnaire de la sécurité du cloud : une approche qui simplifie et automatise considérablement la sécurité et la conformité, permettant aux équipes de développement de ne pas être freinées dans leur créativité et aux équipes de sécurité d'évoluer et de sécuriser leurs patrimoines informatiques à la vitesse du cloud.

Rejoignez-nous lors de ce webinaire pour obtenir un aperçu d'Orca Security et du fonctionnement de notre approche unique, sans agent et permettant la contextualisation de la sécurité de vos Clouds Publics.

Agenda de la séance:
Présentations : Rencontrez l'équipe
Proposition de valeur d'Orca : que pouvons-nous faire pour vous ?
Présentation de la plate-forme : fonctionnalités clés
Questions et réponses du public

Orca Security arrive en France: Une nouvelle approche de la sécurité des Clouds

Cloud Native Application Protection Platforms (CNAPP) aim to strengthen cloud security with a robust set of capabilities within a single, unified platform. Research firm Gartner encourages moving towards CNAPPs to reduce complexity, improve contextual insight, and detect risks across the technological stack, including cloud configuration, workload, and identity. 

In this webinar presented by Orca Security, we will outline the 5 most important points to consider when evaluating which CNAPP platform to select for your organization.

You'll learn:
- How CNAPP consolidates and amplifies the capabilities of CSPM, CWPP, CIEM, and KSPM tools
- Why agentless CNAPP solutions are likely to lead the way in terms of innovation and ease of use
- How to achieve context-based risk prioritization, allowing organizations to immediately understand their most critical issues—taking into account lateral movement risk, vulnerable assets, and more.
- A way to objectively measure, communicate, and compare your current cloud security benchmarks against industry peers

Can’t join us live? Register anyway and we’ll send you the recording plus you’ll get our upcoming report: The Ultimate Guide to Choosing a CNAPP Platform.

Strengthen Your Cloud Security Posture: How to Evaluate Cloud Security Platforms

At the end of 2021, the cybersecurity world was rocked by the serious and ubiquitous Log4j RCE vulnerability. Weeks later, many organizations still don’t have a full grasp on their vulnerability exposure and are still far off from completely remediating it. In this upcoming webinar, Orca Security brings together a panel of leading CISOs to share their Log4j experiences, advice and lessons learned, moderated by Andy Ellis, Advisory CISO at Orca Security. Join the webinar to hear:

- Where your peers are in the process of remediating Log4j, based on Orca Security research of thousands of Log4j alerts.
- Tales from the trenches: how our CISO panelists responded to Log4j, from initial response and investigation (including some unexpected places where Log4j was discovered), to remediation efforts.
- Advice from our CISO panelists on how to prepare for similar incidents and reduce future risk.

Panelists:
- Andy Ellis, Advisory CISO, Orca Security (Moderator)
- Helen Patton, Advisory CISO, Cisco
- Ralph Pyne, VP of Security, NextRoll
- Jack Roehrig, CSO, BookNook

Log4j Look Back: CISOs Share Lessons Learned

Are you tired of trying to achieve security situational awareness of your sprawling cloud estate by connecting the output of several discrete security tools together? Do you send alerts to your SOAR platform of choice for triage (context) and response? Are your teams suffering from alert fatigue and burnout? If you answered yes to even one of these questions this webcast is for you.

We introduce the new ‘Cloud Native Application Protection Platform (CNAPP)’ Gartner category; it’s necessity, why it’s strategic, and how with Orca you can achieve unprecedented workload, cloud, and identity and access entitlement visibility at the same time with nothing to install.

CNAPP: An Integrated and Streamlined Approach to Cloud Security

Companies in nearly every industry have embraced the cloud. While cloud adoption has matured, cloud security has been slow to catch up, and it’s putting mission critical workloads at risk. During this webinar, Orca’s Senior Security Engineer Joey Merz will discuss:
- How the cloud magnifies vulnerability management challenges
- The pillars of the vulnerability management process 
- How to gauge where your organization sits on the vulnerability management continuum
- How context-aware technologies are bringing critical risks to the forefront and eradicating alert fatigue
- The 3 “Cs” that enable 100% visibility of cloud assets, 100% of the time

Modern Cloud Vulnerability Management: 100% Visibility 100% of the Time

The promise of adding new security tools and capabilities to your security operations efforts is more intelligence to make better, more well informed decisions with, but do they deliver on that promise? If your Security Operations Center (SOC) team receives hundreds of “high priority” alerts every day should they even trust the risk score that is being used? An overwhelming number of alerts desensitizes the very people tasked with responding to them, leading to missed or ignored alerts or delayed responses. In this session we discuss our best strategies in the fight against alert fatigue and how to rebuild trust in security intelligence.

Why Context Matters in Cloud Security

Public cloud service providers like AWS, Azure, and GCP enable you to deliver new products and capabilities at breakneck speeds, but how do you balance speed to market against compliance mandates and security risk? Learn more about how Orca offers a single integrated platform to detect security risks at every layer of the cloud estate -- eliminating the need to deploy and maintain multiple tools such as cloud vulnerability management, workload protection, and security posture management solutions -- without the gaps in coverage, alert fatigue, and operational costs of agents.

A New Approach to Public Cloud Security

Welcome to Orca Security's Cloud Security Punch-Out! For this Punch-Out, we evaluated PAN Prisma Cloud Enterprise Edition as of August 20, 2021. In addition to a full-fledged, updated Prisma Cloud Punch-Out match, we also tested Palo Alto Networks’ claim that one of their main differentiators against Orca Security is their runtime protection. The results were shocking. Bypassing Palo Alto’s runtime protection was as easy as changing file names.

Palo Alto Networks Prisma Cloud vs Orca Security: Cloud Security Punch-Out

Public cloud providers like AWS, Azure, and GCP enable you to deliver new products and capabilities at breakneck speeds, but how do you balance speed to market against compliance mandates and risk – do you have to choose?

Join Patrick Pushor, Technical Evangelist at Orca Security, for a fast-paced session as he takes you through best practices, and pitfalls to avoid in securing public cloud infrastructure.

6 risks hiding inside every public cloud estate
 - How to get instant-on, workload-level visibility across 100% of your AWS, Azure, and GCP assets
- The power of addressing both the control plane and data plane at once
- Pros and cons of different cloud security tools: traditional agent-based tools and scanners, CWPP (cloud workload protection platforms), and CSPM (cloud security posture management)

6 Cloud Security Risks Hiding Inside Your Cloud Estate

Whether you are formally regulated or are simply looking to demonstrate your commitment to security and governance with best practice guidance, infrastructure and platform-as-a-service offerings provide unique governance challenges.  These platforms offer a wide array of services each with their own security controls that must be continuously tested against a trusted standard.  At the same time, public cloud platforms also host more traditional services like virtual machines, containers, and storage buckets.  Here risks like old unpatched software (and hence vulnerabilities), sloppy credentials embedded in a test script, misplaced PII, or keys that facilitate lateral movement are hiding within your workloads.

Dive in as we discuss how to build fully functional compliance guardrails at both the deep workload and broad cloud services levels with a single, simple approach.

Crafting Comprehensive Cloud Compliance

Are you using agents, network scanners, or CSPM tools to detect risks across your public cloud estate?  If so, there’s a better way. Delivered as SaaS, Orca’s SideScanning technology reads your cloud configuration and workloads’ runtime block storage out-of-band, giving you cloud-wide, workload-deep security and compliance for AWS, Azure, and GCP - without the gaps in coverage, alert fatigue, and operational costs of agents.

Attend this cast to see:

- Orca’s 5-minute onboarding process;
- The power of addressing the control plane and data plane at once;
- The scanning process for vulnerabilities, misconfigurations, malware, lateral movement risk, exploitable keys, weak passwords, and unsecured sensitive data;
-How to prioritize risk based on the underlying security issue, its accessibility, and blast radius.

How to Eliminate Security Blind Spots Across AWS, Azure, and GCP

About this webinar:
The promise of adding new security tools and capabilities to your security operations efforts is more intelligence to make better, more well informed decisions with, but do they deliver on that promise? If your Security Operations Center (SOC) team receives hundreds of “high priority” alerts every day should they even trust the risk score that is being used? An overwhelming number of alerts desensitizes the very people tasked with responding to them, leading to missed or ignored alerts or delayed responses. In this session we discuss our best strategies in the fight against alert fatigue and how to rebuild trust in security intelligence.

What you’ll learn:
In this session we discuss our best strategies in the fight against alert fatigue and how to rebuild trust in security intelligence.

Not All Risks are Equal - Why Context Matters in Cloud Security

Please join Orca Security for a dynamic discussion with Jonathan Jaffe, the CISO of Lemonade, one of the most successful and fastest-growing global insurance companies, and guest speaker Andras Cser, Vice President and Principal Analyst at Forrester, as we reveal the secrets to achieving high-speed growth while improving your security posture in the cloud.

We will explore the keys to building a high-growth cloud insurance business while ensuring security and compliance without compromise. 

Participants will learn:
How to leverage emerging cloud security technologies
Prioritizing risk using context-aware security
The keys to building trust between your DevOps and Security teams
Leveraging automation everywhere and anywhere
Sign up for this webinar (link) to gain actionable insights into how to achieve secure cloud operations in a hyper-growth company. 
 
And get ready to pose your toughest public cloud security and compliance questions to our expert panel.

Cloud Security Complexity and Agentless SideScanning Technology

In this presentation learn about:

- 5 risks hiding inside every public cloud estate
- How to get instant-on, workload-level visibility across 100% of your AWS, Azure, and GCP assets
- The power of addressing both the control plane and data plane at once
- Pros and cons of different cloud security tools: traditional agent-based tools and scanners, CWPP (cloud workload protection platforms), and CSPM (cloud security posture management)

How I got ‘X-ray and thermal vision’ across our public cloud infrastructure

Amazon Web Services

Cloud

Cloud Adoption

Cloud Infrastructure

Cloud Security

Cyber Attacks

Public Cloud

Risk Assessment

Security

Security Awareness

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How I got ‘X-ray and thermal vision’ across our public cloud infrastructure

Presented by

About this talk

More from this channel