Name: The Past, the Present, and the Future with Andy Steingruebl of Pintrest
Start: 2022-06-20T22:49:00Z
End: 2022-06-20T23:20:01.000Z
Location: BrightTALK
Rating: 0

See how leading enterprises and cloud-first companies detect risks in public cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform.

Any follower of cybersecurity attacks in recent years is aware of the pervasiveness of ransomware. As an AWS ISV Partner, Orca is committed to working closely with you to secure your AWS cloud estate.

In this webinar, Keith Mokris and Dudi Matot will discuss how to protect against Ransomware in your cloud environment with Orca Security and Amazon Web Services. Aligning with the NIST Cyber Security Framework, key takeaways will include: 
- 5 steps you can take to reduce ransomware risk
- How to identify and detect malware in your AWS resources.

Orca Security provides cloud-wide, workload-deep security and compliance for AWS－ without the gaps in coverage, alert fatigue, and operational costs of agents. 
Learn more: https://orca.security/partners/technology/amazon-web-services-aws/

5 Ways Orca Security and AWS Protect Against Ransomware

Development teams are quickly deploying applications to the cloud, resulting in greater scale and faster time to market. But as security teams work to incorporate security into development and DevOps workflows, they face multiple challenges keeping up with the speed and volume of releases. This can lead to unauthorized access to applications, introduction of malware, exposed cloud services, and data loss.

Melinda Marks, Senior Analyst, ESG Research; Ido Geffen, VP, Product, Orca Security; and Keith Mokris, VP, Product Evangelism, Orca Security will share results from new GitOps and Shift Left Security Survey, including:
- How the cloud-native cybersecurity threat landscape is intensifying
- Security concerns around Open Source Software and Infrastructure-as-Code
- Challenges caused by faster CI/CD development cycles
- What you can do to enable rapid development without compromising on security 

(1)Marks, M. 2022. Walking the Line: GitOps and Shift Left Security. ESG Research

Enabling Rapid Development Without Compromising Cloud Security

Development teams continue to leverage cloud native technologies and deploy applications faster than ever. But, existing security solutions and a plethora of point solutions cause friction between teams and leave even less time for deployment. 

In this webinar, Keith Mokris and Lior Samuni will explain the benefits of shifting security left and share best practices for integrating security across the full development lifecycle, including:
- Scanning container images and IaC templates
- Guardrail capabilities to consider, including how to block builds as part of your workflows
- Creating tight integrations and communication between different applications and teams within your organization

You’ll walk away with detailed recommendations about how to address risks earlier in the software development lifecycle and ship more secure code in production.

Shift Left: Find and Fix Cloud Security Risks Earlier in the Development Cycle

According to the Orca 2022 Cloud Security Alert Fatigue Report, 59% of IT professionals receive more than 500 cloud security alerts per day, and 64% say that less than 10% of them are actually critical.

Security teams waste valuable time manually correlating high volume, low-risk alert data from multiple security tools, leaving crown jewel data open to attack. By scoring and prioritizing attack paths, security teams can focus on a much smaller number of dangerous attack paths versus sifting through hundreds of siloed alerts.

Join Andy Ellis, Advisory CISO at Orca Security and Stacey Halota, VP of InfoSec and Privacy at Graham Holdings, for a lively conversation on:

- The six stages of cloud security alert fatigue (including Denial and Acceptance)
- Five recommendations on how to solve the alert fatigue problem
- How to change the game with modern attack path analysis and prioritization

All registrants will receive a copy of the 2022 Cloud Security Alert Fatigue Report – based on a survey of 813 IT professionals across ten industries and five countries.

Eliminate Cloud Security Alert Fatigue with Modern Attack Path Prioritization

Enterprises and cloud native organizations around the world have gravitated towards Kubernetes for powering their applications and tech stacks. Why? Kubernetes provides users with always-on orchestration of their microservices-driven applications.

As security teams partner with DevOps teams to secure their applications, organizations have a lot of security requirements to consider, including: vulnerability management of their hosts and applications, secure networking, access control measures, and more. At the same time, DevOps workflows provide many new ways to integrate security in an automated fashion.

In this webinar, Orca Security’s VP of Cloud Security Evangelism Keith Mokris and Security Engineer Jacob Graves will explain:
- Kubernetes architectures and how microservices are the new way of running applications
- Security controls that are vital for protecting Kubernetes at scale
- The latest trends and survey data from TechStrong

Securing Kubernetes at Scale: Deploying Uncrackable Clusters

Cloud native technologies and cloud service provider offerings continue to evolve at a rapid pace to enable business innovation. As organizations deploy more quickly, scale to new heights, and develop applications in new ways, cloud native security is evolving to meet new challenges and solve problems for users.

In this session, join a discussion between Google Cloud Director of Financial Services, Office of the CISO, Alicja Cade and JupiterOne CEO and Founder Erkang Zheng to hear: 
- How customers are using the cloud in exciting and innovative ways
- What are the biggest security challenges that organizations face
- How are innovators like Google Cloud, JupiterOne, and Orca Security partnering to deliver best-in-class security for end users

Speakers: Alicja Cade, Director, Financial Services, Office of the CISO, Google Cloud; and Erkang Zheng, CEO & Founder, JupiterOne 
Moderator: Keith Mokris, VP, Cloud Security Evangelism, Orca Security

The Evolution of the Cloud and Innovation in Cloud Native Security

Find out how Paidy, a BNPL leader in Japan acquired by PayPal in 2021, and a Fintech leader in delivering cardless payments and other financial services through the cloud, gained visibility into their large-scale cloud environment. In this session, Jeremy Turner, Deputy CISO and Senior Cloud Security Engineer at Paidy, and Andy Ellis, Advisory CISO at Orca Security, discuss how Paidy:
- Overcame challenges related to multi-cloud environments, costly in-house solutions, and compliance issues
- Optimized its overall cloud security posture
- Increased the speed of merchant onboarding driving revenue growth

Speaker: Jeremy Turner, Deputy CISO & Senior Cloud Security Engineer, Paidy
Moderator: Andy Ellis, Advisory CISO, Orca Security

Paidy’s Journey to Full Cloud Security Visibility & Compliance

Today’s risks in the cloud continue to rapidly evolve, including vulnerabilities that impact applications, misconfigurations that expose sensitive data, attacks that look for footholds and lateral movement across services, and identity and entitlement risks. Security teams can struggle to keep up with the evolution of risks and find using traditional security technologies ill-suited to address the cloud. 

At Orca Security, we believe that cloud security should enable business innovation – delivering a unified platform to address all the risks you have in the cloud. In this session, Orca Security CEO and Co-Founder Avi Shua will cover: 
- How organizations are navigating the complex cloud ecosystem and approaching security – threats from the last year, including Log4J, the Confluence Security Advisory, and Orca Security Pod security advisories
- How Orca Security is building a leading agentless platform for securing the cloud, with an overview of our recent product announcements
- The latest capabilities as part of the Orca Cloud Security Platform

Lessons from the Trenches: What We Learned This Year to Get Cloud Security Right

The Cloud Risk Encyclopedia (CRE), a free and open resource, includes a collection of common cloud security risks pulled directly from the Orca Cloud Security Platform. From IAM best practices, to data protection risks, to control plane misconfigurations, the Encyclopedia helps DevOps and security teams stay up to date with the latest and most prevalent cloud risks.

In this webinar, presented by Orca Security, we will explain the motivation behind the CRE, demonstrate how to navigate through the various risk categories and compliance frameworks, and show how DevOps teams can leverage the CRE strategically to gain valuable insight into production risks and create or enhance useful checklists. 

In this webinar, learn:
- How DevOps teams can stay up to date with prevalent cloud risks
- How production checklists can help avoid common misconfigurations and security loopholes
- How the CRE can provide answers to common DevOps questions

DevOps Teams: Why the Cloud Risk Encyclopedia  Should Be Your New Best Friend

Kubernetes is one of the most complex IT platforms ever built. Now that fleets of Kubernetes clusters are being deployed in enterprise IT environments, the need to make management easier has become much more urgent. IT teams are now looking for management frameworks that will enable IT administrators to use graphical tools to manage Kubernetes clusters at scale alongside DevOps professionals. The management of Kubernetes clusters is about to become the next great IT team sport.

This panel will discuss the opportunities and challenges faced as enterprise organizations increasingly turn to Kubernetes in their environments. 
- What management frameworks are out there, and how can you best use them? 
- How can IT and DevOps professionals best work together to make sure enterprises can create value with their Kubernetes cluster deployments?

Container/ Kubernetes Management Panel Discussion

Development teams continue to leverage cloud native technologies and deploy applications faster than ever. But, existing security solutions and a plethora of point solutions cause friction between teams and leave even less time for deployment. 

In this webinar, VP of Product Marketing Keith Mokris and Director of Engineering Lior Samuni will explain the benefits of shifting security left and share best practices for integrating security across the full development lifecycle, including:
- Scanning container images and IaC templates
- Guardrail capabilities to consider, including how to block builds as part of your workflows
- Creating tight integrations and communication between different applications and teams within your organization

You’ll walk away with detailed recommendations about how to address risks earlier in the software development lifecycle and ship more secure code in production.

Cybersecurity is an ever-changing field. And since the emergence of the cloud, social media networks, and machine learning algorithms, the security space has continued to evolve to respond to the market's needs.

But some things never change — the willingness to learn, adapt, and improve remains the golden standard of cybersecurity.

In this episode of the Cloud Security Reinvented podcast, our host Andy Ellis welcomes Roland Cloutier, the Global Chief Security Officer at TikTok. They talk about the most significant changes since the emergence of cloud computing, what it's like to work at TikTok, and why technologists should always keep learning.

How the Willingness to Learn Helps With Cybersecurity Featuring Roland Cloutier

Want to score a prize and learn how to detect and prioritize cloud security risks in minutes? Join us on June 14th at 10:00 a.m. PT/1pm ET for an overview of Orca’s Agentless Security Platform for Google Cloud and we’ll send the first 30 registrant attendees a $30 DoorDash eGift card for attending.

Here's how it works:
1. Fill out the Brighttalk registration form. The first 30 registrants will receive a $30 DoorDash eGift card.*
2. Attend the virtual 30-minute webinar.
3. At the end of the 30-minute webinar you’ll have the chance to ride away with a brand new GoTrax Electronic Bike! It’s yours if you’re the first person to correctly answer one of our trivia questions.

Your eGift card is waiting– register now!

Orca Security provides cloud-wide, workload-deep security and compliance for Google Cloud－ without the gaps in coverage, alert fatigue, and operational costs of agents.
- Avoid the cost and complexity of multiple cloud security tools
- Realize instant time-to-value
- Focus on the alerts that matter most
- Simplify security and compliance operations
- Deny threat actors any foothold in your public cloud estate
- Give team members cloud security superpowers

Delivered as SaaS, Orca Security’s patent-pending SideScanning™ technology reads your cloud configuration and workloads’ runtime block storage out-of-band, detecting vulnerabilities, malware, misconfigurations, lateral movement risk, weak and leaked passwords, and unsecured PII. SideScanning™ covers all your workloads﹣VMs, containers, and serverless. Orca Security is available for purchase in the Google Cloud Marketplace.

Orca Security for Google Cloud

The cloud has been around for a while now. And ever since it emerged — two decades ago — it has brought in new ways to think about security, identity, and access management.

But at the end of the day, we still need to make sure that the right people have the right information at the right time.

In this episode of the Cloud Security Reinvented podcast, our host Andy Ellis welcomes Meg Anderson, the CISO at Principal Financial Group. They talk about the changes in cloud security since the emergence of the cloud, some of the best and worst practices, and what the future holds for cloud security.

Learning How the Cloud Helps with Identity and Access Management

Cloud computing is changing the world as we know it. So what impact does it have on the world of security?

Jonathan Jaffe is the Chief Information Security Officer at Lemonade, a full-service consumer insurance company powered by artificial intelligence and behavioral economics and driven by social good. After years of experience in information security and cybersecurity, he made the transition to the cloud through a San Francisco startup in 2018, and then in 2020 landed at Lemonade, where it's all cloud and technology.

In this episode of Cloud Security Reinvented, host Andy Ellis and Jonathan Jaffe discuss how the world has changed since the rise of technology and the prevalence of the cloud. They also talk about growth opportunities in the security industry and the power of automation. Tune in to find out more about the post-cloud security era.

Why We Should Embrace Automation to Improve Security

In 2021, Gartner identified Cloud Native Application Protection Platforms (CNAPPs) as a new category that combines CSPM, CWPP, KSPM, and CIEM in one platform. CNAPPs have full coverage and visibility into cloud estates and can detect risks across the technological stack, including cloud configuration, workload and identity. In this webcast, Marcelo Negro, Security & Cloud Evangelist, Orca Security, will discuss how CNAPPs can help you to:
- Increase cloud security coverage to 100% and eliminate blind spots
- Improve efficiency with agentless deployment and single pane of glass
- Avoid wasted time sifting through low risk alerts with effective risk prioritization
- Enjoy faster time to market by integrating cloud security and compliance

Cloud Security, Simplified: Why CNAPP is the Future of Cloud Security

When someone says Pinterest, the first thing that comes to mind is a social platform and a place to seek inspiration. But for the people working behind the scenes, it's more than that.

In February 2021, Pinterest had 459 million active monthly users. That's a lot of data and traffic, and security measures must be put in place for an exceptional user experience. So how do they do it?

In this episode of Cloud Security Reinvented, our host Andy Ellis chats with Andy Steingruebl, the Chief Security Officer at Pinterest. The two discuss the difference between the on-premise and cloud era and what differentiates Pinterest from companies like PayPal. They also touch upon the best and worst on-premise practices and the future of technology.

The Past, the Present, and the Future with Andy Steingruebl of Pintrest

Cloud Security

CISO

On Premise

Cloud Architecture

Digital Transformation

Infrastructure as a Service

Compliance

Cloud Adoption

Cloud Applications

Risk Management

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Past, the Present, and the Future with Andy Steingruebl of Pintrest

Presented by

About this talk

More from this channel