Name: 5 Ways Orca Security and AWS Protect Against Ransomware
Start: 2022-10-19T18:00:00Z
End: 2022-10-19T18:30:06.000Z
Location: BrightTALK
Rating: 0

Learn how to achieve 100% cloud security coverage and visibility across AWS, Azure, GCP, Alibaba Cloud, and Kubernetes. Content covers topics including attack path analysis, vulnerability management, API security, and more.

Are you using a cloud security platform that’s been stitched together from years of acquisitions? Does your team complain about a messy U/I and complicated agent-based deployments or alerts that don’t tell the whole story? 

Find out how security leaders are simplifying their security stacks, trading in the headache of agent-based deployments and multiple redundant dashboards for a clean and cohesive security experience.

Neil Carpenter, Principal Technical Evangelist, Orca Security, and Jonathan Jaffe, CISO, Lemonade, discuss how a purpose-built cloud security platform can help you:
- Reduce complexity and operational overhead
- See risks and threats that span your whole cloud environment
- Bring all of your data into a unified, easily queryable location

Simplify Your Cloud Security Stack

Join our expert CISOs as they discuss key findings from Orca Security's State of Public Cloud Security Report, a collection of findings and recommendations from our research team after analyzing billions of real-world cloud assets.

Moderated by Andy Ellis, our panelists will share:
• Which statistics from the report stood out to them
• How the report findings compare to what they are seeing in the field
• The biggest cloud security challenges facing security leaders today
• Recommendations on how to improve cloud security postures with limited resources

CISO Roundtable: State of Public Cloud Security

Establishing a Zero-Trust program is a critical strategy to help security teams govern security across cloud and on-premise environments. As an AWS Software Partner, Orca is committed to working closely with you and AWS to secure your AWS cloud estate. Aligning with the NIST Cyber Security Framework, there are 5 primary categories of protection in the cloud – Data, Infrastructure, Applications, Identities and Entitlements, and the Networks connected between them – which the Orca Cloud Security Platform addresses from a single unified platform.

Join us to learn:
- 5 areas you can address to reduce your overall security risk and establish Zero-Trust in your cloud environment
- How to secure your AWS cloud estate
- How Orca and AWS are better together

5 Ways Orca Security and AWS Establish Zero Trust in the Cloud

Traditional agent-based cloud security tools have blind spots. They either can’t see all of your cloud assets or can’t analyze them with proper risk context. Security teams are increasingly turning to agentless Cloud Native Application Protection Platforms (CNAPPs), which offer faster setup and deployment, less maintenance and lower provisioning costs, wider visibility, and greater scalability than traditional security tools.

Sagy Kratu, Director of Enablement and Evangelism and Jason Silberman, Senior Product Marketing Manager, will cover:
- The current security threat landscape and risks to look out for
- Capabilities and limitations of various cloud security approaches
- Tips for selecting and getting started with a cloud-native application protection platform

The Future Is Agentless: Cloud Security for Modern Environments

Organizations are increasingly distributing their operations across multiple public clouds in order to reduce cost, increase resiliency, and optimize services. However, multi-cloud strategies significantly increase complexity for security and governance teams tasked with applying consistent controls and policies across all cloud environments. 

In this webinar, Deborah Galea discusses the challenges of applying consistent security controls across multiple cloud platforms, as well as practical steps that organizations can take to minimize the complexity and overhead of securing a multi-cloud environment.

In this session, you’ll learn
Why organizations choose a multi-cloud strategy
Security and compliance challenges in multi-cloud environments
Recommendations to simplify multi-cloud security

How to Simplify Multi-Cloud Security & Compliance

The current economic outlook is increasing pressure to lower costs and drive efficiencies in cloud security operations. But cloud adoption is continuing to increase. In fact, Gartner estimates worldwide spending on public cloud services to grow from $494.7B in 2022 to nearly $600B in 2023. How can you adapt your security budget to help your team meet new challenges and thrive in 2023?

Join Andy Ellis, Advisory CISO, Orca Security; as well as Nick Vigier, CISO, Talend; and Guillaume Ross, Deputy CISO, JupiterOne, as they discuss:
- New security challenges triggered by the economic forecast
- Uncovering opportunities to redefine your priorities and balance efficiencies vs. risks
- Data-driven approaches to communicate cyber risks to financial stakeholders
- What you can do to help your team prepare for the year ahead

Budgeting for Cloud Security in 2023: Tips for a Tough Economy

Development teams are quickly deploying applications to the cloud, resulting in greater scale and faster time to market. But as security teams work to incorporate security into development and DevOps workflows, they face multiple challenges keeping up with the speed and volume of releases. This can lead to unauthorized access to applications, introduction of malware, exposed cloud services, and data loss.

Melinda Marks, Senior Analyst, ESG Research; Ido Geffen, VP, Product, Orca Security; and Keith Mokris, VP, Product Evangelism, Orca Security will share results from new GitOps and Shift Left Security Survey, including:
- How the cloud-native cybersecurity threat landscape is intensifying
- Security concerns around Open Source Software and Infrastructure-as-Code
- Challenges caused by faster CI/CD development cycles
- What you can do to enable rapid development without compromising on security 

(1)Marks, M. 2022. Walking the Line: GitOps and Shift Left Security. ESG Research

Enabling Rapid Development Without Compromising Cloud Security

A Cloud-Native Application Protection Platform (CNAPP) is a new approach that simplifies cloud security by combining several capabilities in one platform. By combining vulnerabilities, context, and relationships in a unified data model, a CNAPP provides a holistic view of risks, recognizing how seemingly unrelated low-severity risks can combine to create dangerous attack vectors.

In this session, we’ll talk CNAPP and dive into:
• How CNAPPs are changing the landscape of cloud security
• The advantages of agentless cloud security
• How a CNAPP reduces cloud security tool sprawl and strengthens risk prioritization
• How the Orca Cloud Security Platform combines cloud workload and configuration intelligence in a unified data model to understand the full context of risks

5 Reasons to Choose an Agentless CNAPP in 2023

As API usage continues to increase exponentially, threat actors seek to exploit APIs as an attack vector. One of the most critical risks for an organization is to expose an internal API to the outside world, potentially leading to data exposure or breach—resulting in lost revenue, lawsuits, and a loss of customer trust.

In this Orca Security webinar, we’ll dive into the state of API security with featured presenter Sandy Carielli, Principal Analyst from Forrester, and share best practices for cloud and application security teams to strengthen API security in their cloud-native applications.

In this webinar, learn about:
• The state of API security including its top challenges and threats
• Strategies and best practices for visibility and posture management of APIs in the cloud
• From Orca: our API Security capabilities—with no agents required

Securing APIs in Cloud Native Applications Best Practices

In recent years, Kubernetes has become the standard for deploying and managing software in the cloud. Security research teams often investigate potential Kubernetes vulnerabilities and weak points in an effort to harden Kubernetes environments.

The Cloud Risk Encyclopedia (CRE), a free and open resource from Orca Security, includes a collection of common Kubernetes security risks—from network and authentication misconfigurations, to lateral movement risks—helping security research teams stay up to date and improve their Kubernetes security postures. In addition to including best practices redommendations from the Kubernetes CIS Benchmark and specific Kubernetes managed service risks, the Orca Research Pod continuously adds further risks to promote Kubernetes hardening. 

In this webinar, we will demonstrate how to navigate the CRE through the various risk categories and compliance frameworks, and how to leverage a Kubernetes security checklist that DevOps and security teams can use to simplify daily tasks. 

In this webinar, learn:

- What the top Kubernetes security risks are
- How research teams can stay up to date with prevalent Kubernetes and broader cloud risks
- How the CRE can help teams improve Kubernetes security postures

How to Support Kubernetes Security Research with the Cloud Risk Encyclopedia

Join our expert CISOs as they discuss key findings from Orca Security's 2022 State of Public Cloud Security Report, a collection of findings and recommendations from our research team after analyzing billions of real-world cloud assets.

Moderated by Andy Ellis, our panelists will share:
• Which statistics from the report stood out to them
• How do the report findings compare to what they are seeing in the field
• The biggest cloud security challenges facing security leaders today
• Recommendations on how to improve cloud security postures with limited resources

This will be recorded and shared with all registrants after the live session, plus, we'll send over a free copy of our 2022 State of Public Cloud Security Report.

Today’s security and incident response teams have the tremendous responsibility to secure scaling and dynamic cloud environments. Cloud risks are multi-faceted, spanning vulnerabilities in applications, infrastructure misconfigurations, over-privileged identities, and advanced threats. Security, cloud infrastructure, and DevOps teams need a combination of in-depth coverage and automation to remediate these risks quickly and effectively.

In this webinar, join PagerDuty Head of Security Franklin Mosley and Orca Security VP, Product Marketing Keith Mokris to learn:
- Why the cloud and cloud native technologies present new challenges for security and IR teams
- How PagerDuty effectively helps teams remediate cloud risks
- How Orca Security delivers comprehensive visibility and risk prioritization
- And, how the two solutions work hand-in-hand to enable effective incident response

Identify and Remediate Cloud Risks Effectively with Orca Security and PagerDuty

Identify and Remediate Cloud Risks Effectively with Orca Security & PagerDuty

Using multiple cloud providers allows organizations to reduce cost, increase resiliency and optimize services. However, multi-cloud strategies significantly increase complexity for security teams tasked with applying consistent controls and policies across all cloud environments.  

As cloud usage increases and becomes more ephemeral, agent-based security across multiple clouds becomes unmanageable. In addition, increased security tool sprawl, with often multiple cloud provider tools for each platform, as well as separate point solutions for specific cloud security areas, further increases complexity. This leads to hundreds of (often duplicate) alerts every day, causing security teams to become desensitized and ultimately, miss critical alerts.  

In this webinar, Deborah Galea discusses how an agentless Cloud-Native Application Protection Platform (CNAPP) can significantly alleviate many security challenges in multi-cloud environments. 

In this session you will learn: 

- What are the security challenges in multi-cloud environments? 
- What is a CNAPP? 
- How does a CNAPP reduce cloud security tool sprawl? 
- How do you get full multi-cloud visibility with agentless cloud security? 
- How does an agentless CNAPP increase an organization’s agility? 
- How can a CNAPP prevent application security issues in pre-production?

Agentless CNAPP: A New Approach to Multi-Cloud Security

Development teams continue to leverage cloud native technologies and deploy applications faster than ever. But, existing security solutions and a plethora of point solutions cause friction between teams and leave even less time for deployment. 

In this webinar, Keith Mokris and Lior Samuni will explain the benefits of shifting security left and share best practices for integrating security across the full development lifecycle, including:
- Scanning container images and IaC templates
- Guardrail capabilities to consider, including how to block builds as part of your workflows
- Creating tight integrations and communication between different applications and teams within your organization

You’ll walk away with detailed recommendations about how to address risks earlier in the software development lifecycle and ship more secure code in production.

Shift Left: Find and Fix Cloud Security Risks Earlier in the Development Cycle

According to the Orca 2022 Cloud Security Alert Fatigue Report, 59% of IT professionals receive more than 500 cloud security alerts per day, and 64% say that less than 10% of them are actually critical.

Security teams waste valuable time manually correlating high volume, low-risk alert data from multiple security tools, leaving crown jewel data open to attack. By scoring and prioritizing attack paths, security teams can focus on a much smaller number of dangerous attack paths versus sifting through hundreds of siloed alerts.

Join Andy Ellis, Advisory CISO at Orca Security and Stacey Halota, VP of InfoSec and Privacy at Graham Holdings, for a lively conversation on:

- The six stages of cloud security alert fatigue (including Denial and Acceptance)
- Five recommendations on how to solve the alert fatigue problem
- How to change the game with modern attack path analysis and prioritization

All registrants will receive a copy of the 2022 Cloud Security Alert Fatigue Report – based on a survey of 813 IT professionals across ten industries and five countries.

Eliminate Cloud Security Alert Fatigue with Modern Attack Path Prioritization

Any follower of cybersecurity attacks in recent years is aware of the pervasiveness of ransomware. As an AWS ISV Partner, Orca is committed to working closely with you to secure your AWS cloud estate.

In this webinar, Keith Mokris and Dudi Matot will discuss how to protect against ransomware in your cloud environment with Orca Security and Amazon Web Services. Aligning with the NIST Cyber Security Framework, key takeaways will include: 
- 5 steps you can take to reduce ransomware risk
- How to identify and detect malware in your AWS resources.

Orca Security provides cloud-wide, workload-deep security and compliance for AWS－ without the gaps in coverage, alert fatigue, and operational costs of agents. 
Get a free risk assessment on AWS Marketplace: https://aws.amazon.com/marketplace/pp/prodview-rogbt2k4b63xc
Learn more: https://orca.security/partners/technology/amazon-web-services-aws/

5 Ways Orca Security and AWS Protect Against Ransomware

Cloud Security

Cyber Security

Ransomware

Security

Cloud Applications

Cyber Defence

Cloud Risk

Cloud

Risk Mitigation

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

5 Ways Orca Security and AWS Protect Against Ransomware

Presented by

About this talk

More from this channel