Name: How to Simplify Multi-Cloud Security & Compliance
Start: 2023-02-01T19:00:00Z
End: 2023-02-01T19:39:55.000Z
Location: BrightTALK
Rating: 4.3

Learn how to achieve 100% cloud security coverage and visibility across AWS, Azure, GCP, Alibaba Cloud, and Kubernetes. Content covers topics including attack path analysis, vulnerability management, API security, and more.

Security flaws, hackers and data breaches are the new normal. It’s not just those of us in the industry facing these foes every single day; it’s everyone. Whether you’re online or offline, you simply cannot exist today without your personal information being digitized in systems which are often left vulnerable and exploited at the whim of attackers. But who are these people — the ones who seek to break through our defenses and exploit our data? And how are they continually so effective at doing so, despite our best efforts?

Hear from the creator of “Have I Been Pwned” about the lessons he’s learned after processing more than 12B records of breached data. You’ll get a glimpse behind the scenes of what caused some of these devastating incidents and how they continue to wreak havoc today, despite how much more aware the industry is becoming. It’s a frightening, eye-opening and entertaining look at infosec and data breaches.

Speakers:
Troy Hunt, Founder and CEO of Have I Been Pwned, Microsoft Regional Director & MVP
Bar Kaduri, Cloud Threat Researcher, Orca Security

Lessons From Billions of Breached Records

It’s no secret that security teams are overworked and understaffed in 2023. So how can you create a cloud security plan that’s simple to execute but comprehensive enough to protect your organization’s unique risks? We asked a panel of security experts, “What are the most important steps you can take now to keep your cloud environment safe in the future?” Join our session to hear their answers. From industry-specific risks to auto-generated attack paths, this discussion will provide you with the information you need to tackle your plan and increase the security of your own cloud environment.

Speakers: 
Andy Ellis, Advisory CISO, Orca Security
Omer Singer, Head of Cybersecurity Strategy, Snowflake
Justin Somaini, Chief Security Officer, Unity Technologies

What Security Leaders Are Doing Now to Keep Their Cloud Environments Safe

It’s been a busy year in cloud security. We’ve seen data breaches, tens of thousands of new vulnerabilities, ambitious attacks, and a shortage of cybersecurity talent. Google Cloud’s Chief Information Security Officer Phil Venables will join Orca’s Chief Innovation Officer and Co-Founder Avi Shua for a deep dive into how these cloud security trends are evolving in 2023. They’ll discuss exciting new capabilities and integrations, megatrends, in-demand security skill sets, and recent innovations to help you keep your cloud environment secure.

Speakers:
Deborah Galea, Director of Product Marketing, Orca Security
Avi Shua, Chief Innovation Officer and Co-Founder, Orca Security
Phil Venables, VP, Google, and CISO, Google Cloud

Cloud Security: Where We’re Headed in 2023

With many organizations deploying multiple cloud accounts and providers, new opportunities arise for bad actors to exploit the increased attack surface and security loopholes.

In this webinar, we explore the phenomenon of cross-account and cross-provider cloud attacks, how multi-cloud attack path analysis can detect these security gaps, and how teams can prioritize attack paths, remediating the most critical ones first.

In this session, you’ll learn:
 • How bad actors can ‘hop’ from one cloud provider to another to reach their end target
• The role of multi-cloud attack path analysis in detecting these threats
• How Orca can help teams prioritize attack paths and remediate strategically

Defending Against Multi-Cloud Attack Paths

According to Gartner, “more than half of enterprise IT spending in key market segments will shift to the cloud by 2025.” Odds are, you already have a number of cloud security tools in place. How can you create an actionable strategy that makes the most out of your existing tools? 

Andy Ellis, Advisory CISO, and Kathy Wang, CSO/ Advisor/ Investor, will share tips for creating a solid cloud security strategy. You’ll learn how to:
- Work with your finance team to make procurement and renewals easier
- Get more out of your relationships with managed service providers, auditors, and assessors
- Evaluate tools in relation to your organization’s specific risks factors
- Create an actionable cloud security strategy without reinventing the wheel

It’s not too late to tackle your 2023 cloud security plan. Register today!

Create a Cloud Security Strategy Without Reinventing the Wheel

Industry reports show that organizations waste as much as one-third of their cloud spend. Often, that wasted spend lines up with risky, unmanaged, or unused assets. As cloud usage grows, this problem is only going to get worse: many organizations don’t have a full grasp of all the assets they are running in the cloud and what they are being used for, let alone what they are paying for them. 

In this webinar, we will explore the various strategies and best practices for optimizing cloud costs and reducing cloud waste on AWS, Azure, GCP, and Alibaba cloud. We will also demonstrate, in real-time, how the Orca Cloud Security Platform continually detects unused, underutilized, and unattached compute resources to help you reduce unnecessary cloud spend and decommission those risky unused systems.

In this session, you’ll learn:
 • How cloud resources are billed by each provider, and what you may not be aware of.
 • How Orca can alert you to unnecessary cloud resources that can be removed
 • How security can be improved by removing unnecessary assets

Master Cloud Cost Optimization: Improve Security and Reduce Costs

Securing sensitive data is one of the main focal points of cloud security. Data is scattered across multiple cloud service providers and data stores, which can result in weak and incomplete visibility into where sensitive data resides, who has access, and which data is at risk. 

To address these challenges, Data Security Posture Management (DSPM) capabilities focus on automating data discovery—including sensitive data such as PII—and data risk analysis.

In this Orca Security webinar, we’ll examine
 • The top 5 mistakes to avoid when managing sensitive data in the cloud.
 • Strategies and best practices for visibility and posture management of cloud data.
 • How Orca’s DSPM capabilities increase visibility across the cloud estate and help security teams mitigate data security risks, maintain compliance, and prevent breaches.

Understanding DSPM to Manage Your Cloud Data Risk

Whether you’re a first time CISO, or this is your tenth CISO gig, any cybersecurity pro can benefit from creating– or updating– an actionable plan to tackle cloud security risks. But where to begin?

Our veteran panel of security professionals, including Andy Ellis, Advisory CISO, Orca Security; as well as Kathryn Kun, Director of Architecture and Assurance, Forter; and George Werbacher, Director of Information Security, Blackbaud, will discuss strategies to help CISOs old and new stay ahead of the ever-evolving world of the cyber threat landscape. Topics include:
- The current state of cloud security risks
- Considerations to inform your strategic decisions
- How to uncover hidden risks within your specific cloud environment
- Mapping unique risks with attack paths

Don’t miss the chance to learn from some of the leading voices in cybersecurity, save your spot today.

Uncovering Hidden Risks in Your Cloud Environment

Are you using a cloud security platform that’s been stitched together from years of acquisitions? Does your team complain about a messy U/I and complicated agent-based deployments or alerts that don’t tell the whole story? 

Find out how security leaders are simplifying their security stacks, trading in the headache of agent-based deployments and multiple redundant dashboards for a clean and cohesive security experience.

Neil Carpenter, Principal Technical Evangelist, Orca Security, and Jonathan Jaffe, CISO, Lemonade, discuss how a purpose-built cloud security platform can help you:
- Reduce complexity and operational overhead
- See risks and threats that span your whole cloud environment
- Bring all of your data into a unified, easily queryable location

Simplify Your Cloud Security Stack

Join our expert CISOs as they discuss key findings from Orca Security's State of Public Cloud Security Report, a collection of findings and recommendations from our research team after analyzing billions of real-world cloud assets.

Moderated by Andy Ellis, our panelists will share:
• Which statistics from the report stood out to them
• How the report findings compare to what they are seeing in the field
• The biggest cloud security challenges facing security leaders today
• Recommendations on how to improve cloud security postures with limited resources

CISO Roundtable: State of Public Cloud Security

Establishing a Zero-Trust program is a critical strategy to help security teams govern security across cloud and on-premise environments. As an AWS Software Partner, Orca is committed to working closely with you and AWS to secure your AWS cloud estate. Aligning with the NIST Cyber Security Framework, there are 5 primary categories of protection in the cloud – Data, Infrastructure, Applications, Identities and Entitlements, and the Networks connected between them – which the Orca Cloud Security Platform addresses from a single unified platform.

Join us to learn:
- 5 areas you can address to reduce your overall security risk and establish Zero-Trust in your cloud environment
- How to secure your AWS cloud estate
- How Orca and AWS are better together

5 Ways to Establish Zero Trust in the Cloud with Orca Security and AWS

The power of artificial intelligence (AI) has recently taken center stage in the media with the availability of new tools like Open AI's ChatGPT. In this webinar, you'll hear the benefits of utilizing AI and machine learning in cloud security to alleviate the daily workloads of security practitioners and DevOps teams.

We'll demonstrate, in real-time, how the Orca Cloud Security Platform leverages GPT-3 to automatically generate cloud security remediation steps. We'll also show how Orca’s AI-powered AWS Policy Optimizer analyzes actual usage data to recommend the optimal AWS policy configurations that ensure adherence to the least-privilege principle.

In this webinar, you'll learn
 • The possibilities that AI and machine learning bring to cloud security 
 • How Orca leverages AI and GPT-3 in the platform
 • The impact that AI and machine learning have on cloud security efficiency and effectiveness

Improve Cloud Security Using ChatGPT & AI

Traditional agent-based cloud security tools have blind spots. They either can’t see all of your cloud assets or can’t analyze them with proper risk context. Security teams are increasingly turning to agentless Cloud Native Application Protection Platforms (CNAPPs), which offer faster setup and deployment, less maintenance and lower provisioning costs, wider visibility, and greater scalability than traditional security tools.

Sagy Kratu, Director of Enablement and Evangelism and Jason Silberman, Senior Product Marketing Manager, will cover:
- The current security threat landscape and risks to look out for
- Capabilities and limitations of various cloud security approaches
- Tips for selecting and getting started with a cloud-native application protection platform

The Future Is Agentless: Cloud Security for Modern Environments

The current economic outlook is increasing pressure to lower costs and drive efficiencies in cloud security operations. But cloud adoption is continuing to increase. In fact, Gartner estimates worldwide spending on public cloud services to grow from $494.7B in 2022 to nearly $600B in 2023. How can you adapt your security budget to help your team meet new challenges and thrive in 2023?

Join Andy Ellis, Advisory CISO, Orca Security; as well as Nick Vigier, CISO, Talend; and Guillaume Ross, Deputy CISO, JupiterOne, as they discuss:
- New security challenges triggered by the economic forecast
- Uncovering opportunities to redefine your priorities and balance efficiencies vs. risks
- Data-driven approaches to communicate cyber risks to financial stakeholders
- What you can do to help your team prepare for the year ahead

Budgeting for Cloud Security in 2023: Tips for a Tough Economy

Development teams are quickly deploying applications to the cloud, resulting in greater scale and faster time to market. But as security teams work to incorporate security into development and DevOps workflows, they face multiple challenges keeping up with the speed and volume of releases. This can lead to unauthorized access to applications, introduction of malware, exposed cloud services, and data loss.

Melinda Marks, Senior Analyst, ESG Research; Ido Geffen, VP, Product, Orca Security; and Keith Mokris, VP, Product Evangelism, Orca Security will share results from new GitOps and Shift Left Security Survey, including:
- How the cloud-native cybersecurity threat landscape is intensifying
- Security concerns around Open Source Software and Infrastructure-as-Code
- Challenges caused by faster CI/CD development cycles
- What you can do to enable rapid development without compromising on security 

(1)Marks, M. 2022. Walking the Line: GitOps and Shift Left Security. ESG Research

Enabling Rapid Development Without Compromising Cloud Security

A Cloud-Native Application Protection Platform (CNAPP) is a new approach that simplifies cloud security by combining several capabilities in one platform. By combining vulnerabilities, context, and relationships in a unified data model, a CNAPP provides a holistic view of risks, recognizing how seemingly unrelated low-severity risks can combine to create dangerous attack vectors.

In this session, we’ll talk CNAPP and dive into:
• How CNAPPs are changing the landscape of cloud security
• The advantages of agentless cloud security
• How a CNAPP reduces cloud security tool sprawl and strengthens risk prioritization
• How the Orca Cloud Security Platform combines cloud workload and configuration intelligence in a unified data model to understand the full context of risks

5 Reasons to Choose an Agentless CNAPP in 2023

As API usage continues to increase exponentially, threat actors seek to exploit APIs as an attack vector. One of the most critical risks for an organization is to expose an internal API to the outside world, potentially leading to data exposure or breach—resulting in lost revenue, lawsuits, and a loss of customer trust.

In this Orca Security webinar, we’ll dive into the state of API security with featured presenter Sandy Carielli, Principal Analyst from Forrester, and share best practices for cloud and application security teams to strengthen API security in their cloud-native applications.

In this webinar, learn about:
• The state of API security including its top challenges and threats
• Strategies and best practices for visibility and posture management of APIs in the cloud
• From Orca: our API Security capabilities—with no agents required

Securing APIs in Cloud Native Applications Best Practices

Building a Cybersecure Cloud Infrastructure with Validated Digital Identities

Mark Twain & Cloud Security

Kubernetes Resource Optimization

Cloud patterns for SAP environments

The Future of Distributed Cloud

Distributed Cloud Services: Key Considerations for IT Leaders

Distributed Cloud Services: Less Pain, More Gain

Leveraging Distributed Cloud Environments

Controlling costs in a resource that has no limits...

Organizations are increasingly distributing their operations across multiple public clouds in order to reduce cost, increase resiliency, and optimize services. However, multi-cloud strategies significantly increase complexity for security and governance teams tasked with applying consistent controls and policies across all cloud environments. 

In this webinar, Deborah Galea discusses the challenges of applying consistent security controls across multiple cloud platforms, as well as practical steps that organizations can take to minimize the complexity and overhead of securing a multi-cloud environment.

In this session, you’ll learn
Why organizations choose a multi-cloud strategy
Security and compliance challenges in multi-cloud environments
Recommendations to simplify multi-cloud security

How to Simplify Multi-Cloud Security & Compliance

Cloud Security

Multi Cloud

IT Security

Cyber Risk Management

Cyber Security

Security

Security Incidents

Cloud Compliance

Cloud Risk

Cyber Defence

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How to Simplify Multi-Cloud Security & Compliance

Presented by

About this talk

More from this channel