Name: Complying with CPS 234: Proactive Protective Procedures
Start: 2022-03-28T13:58:00Z
End: 2022-03-28T13:58:47.000Z
Location: BrightTALK
Rating: 0

The Fortanix Data Security Expert webinar channel contains educational content related to data security topics including encryption, key management, tokenization, secure devops, and confidential computing.

In today's interconnected world, data is ubiquitous, spanning from personal devices to corporate networks. However, the management and security of this data often go unquestioned by users, leading to potential vulnerabilities and threats. With global cybercrime damage predicted to hit $10.5 trillion annually by 2025, businesses face significant risks, ranging from financial losses to business disruption, to reputational damage.

In this webinar, titled "Security as a Business Driver", we aim to shed light on the critical role security plays in achieving business goals. With organizations bringing security into the
discussions earlier in planning processes, we believe tangible business value can be achieved and recognized through the adoption of a resilient security strategy.

The webinar will take you through:

- An exploration of the evolving landscape of cyber threats and the potential repercussions for businesses. We will discuss real-world scenarios where companies have fallen victim to cyber-attacks, emphasizing the staggering financial and operational impact.
- Challenges faced by cybersecurity teams, including the widening talent gap and the pervasive stress within the industry.
- Finally, how you can demonstrate tangible business value with security that delivers for business stakeholders.

The webinar will present actionable strategies for integrating security into various facets of business operations. From enhancing customer satisfaction and trust, to improving efficiency and driving growth, security initiatives can directly impact key business metrics. We will explore practical approaches for optimizing investment efficiency, reducing insurance premiums, and capitalizing on digital engagement opportunities.

Join us for an insightful discussion on how security can drive business success in an increasingly digital world.

Security as a Business Driver

Watch our webinar to answer your “burning questions” about safeguarding your organization's sensitive data and ensuring compliance with privacy regulations. In today's data-driven world, personally identifiable information (PII) is everywhere. It is essential to minimize its footprint and ensure its anonymity right from the moment of creation or ingestion.

- Discover strategies for securely sharing data within pipelines or as it moves between applications.
- Learn how to restrict access to data, allowing only specific applications or users to decrypt it.
- Catch a live demo of the Fortanix Tokenization solution.

Keep Sensitive Data Secure, Private, and Compliant

In this webinar, we will discuss how format-preserving encryption or tokenization provides strong data security and simplifies sharing data with downstream applications with minimal risk. Once data is secured with tokenization, you can apply granular access controls at the data level and address Zero Trust principles, no matter where the data resides.

We will highlight real-world use cases of modern organizations containing sensitive data flowing between clouds and data centers and the challenges they face in enforcing data privacy and security regulations. Learn practical tips on applying tokenization in the data’s lifecycle and how to manage the encryption keys.

During this webinar, we will address how tokenization will help you:

- Keep data private and limit risk
- Simplify compliance challenges
- Analyze and find meaning in encrypted data
- Deploy Zero Trust principles at the data level

Tokenization: Make data portable and win at zero trust

Are you confident that all your sensitive data is protected everywhere? Are you meeting data privacy and compliance obligations? Can you enforce least privilege access both now and in a post-quantum era? How well you protect customers’ sensitive data shapes your business and reputation and is a common priority for data, security, and business leaders. Despite companies taking traditional security measures, data breaches continue to result in unwanted headlines and millions in damages. 

At Fortanix, we have a new approach that protects your data at rest, in motion, or moving from application to application. Register now for the must-attend event of the summer and learn how you can unify crypto and security operations, enforce governance and compliance, and manage data masking and tokenization at scale with industry-first SaaS data security and privacy platform, powered by Confidential Computing.

So, grab your seat, don’t forget your mask, and get ready to transform your data security and privacy operation.

At the event you will:
- Hear from Fortanix and our Partners on how to keep data private, wherever it is
- Catch a live demo
- Have the opportunity to ask questions

Fortanix Mask-arade

Digitally signing code is critical to the software development process to validate the integrity of the code and authenticity of the software. However, lax code signing processes and the mishandling of certificates and private keys has led to many high-profile software supply chain vulnerabilities and attacks.
 
To address this, new code signing requirements from the CA/Browser Forum went into effect on June 1, 2023. This major change now requires the use of FIPS 140-2 Level 2 or Common Criteria EAL 4+ hardware security modules (HSMs) or tokens to store and protect private keys associated with all publicly trusted code signing certificates.
 
While this change is initially disruptive, it can also be used to modernize and improve your code signing process. By implementing a SaaS code signing solution backed by a compliant cloud-based HSM, you can seamlessly integrate secure and compliant code signing into your CI/CD pipeline.  
 
Join experts from AppViewX and Fortanix as we discuss this change, the impact to you and an integrated cloud signing and HSM solution you can deploy today. 
Here’s what you’ll learn by attending:
 - Instant SaaS deployment and rapid time to value
 - Fully compliant HSM and secure code signing process
 - Seamless integration with CI/CD pipeline to boost performance
 - Accelerate agile and secure software development

Accelerating DevOps with Secure Code Signing and Key Storage in the Cloud

Due to the bearer nature of tokens, Web3 businesses have unique security requirements. Once you lose control of a token, there is no point in trying to recover it. Secure wallet seed and key management practices are crucial for Web3 businesses. Not only should wallet seeds and keys be created and used securely, but quorum-based access control over wallets is necessary.  

Join our speakers, Shashi Kiran, Chief Marketing Officer - Fortanix, Pralhad Deshpande, Senior Solutions Architect - Fortanix, Faisal Faruqui, VP Solutions Engineering - Fortanix, and Jaydeep Korde, Co-founder and CEO – Launchnodes, as they discuss enterprise-grade confidential computing powered next-gen security infrastructure for Web3. This infrastructure provides strong protection against insider and outsider threats by not only protecting secrets but also critical business logic that interacts with the secrets.

Next-Gen Security Infrastructure for Web3

Multi-cloud and hybrid environments have become the gold standard for business agility globally - and the banking & finance sector is no exception. However, when it comes to data security the space is still nascent with rapidly evolving security standards and architectural patterns.  

Bottomline - The traditional perimeter-based security as we know it is not adequate in the new cloud-world order.

The complexities around global and regional compliance combined with the bid to secure and process sensitive client data create a complex setup that’s often prone to data blindspots that are easy to exploit. The need of the hour commands Data to be the focal point of security initiatives and not fluctuating environments.

Join our experts, Rob Soh, Sales Engineering, Abhinav Nagpal, Regional Sales Manager, APAC and Aroop Menon, Product Marketing as they walk you through the nitty-gritty of how the Banking & Financial Services sector can enable pervasive, scalable, and dynamic security across clouds with Fortanix.

We will discuss:

- Cloud migration and its impact on data security and compliance within Banking
- The resulting security challenges- Why the traditional data security framework may not be adequate?
- What's required - The must-have data security capabilities for Banking
- How has Fortanix supported Banking organizations on their cloud migration journey?

Secure Your Cloud Data Without Breaking The Bank

In today’s fast-moving world where everything is connected, a company’s data has become a highly precious commodity that is critically important to ensuring a company’s future success.  The threat of losing your company’s data, or even the risk of losing access can cause Security Professionals concerns about how they can best safeguard their organization's sensitive data and reputation.

Imperva and Fortanix have joined forces to offer the best of both worlds, from identifying where your sensitive data resides, classifying all data to determine the most critical data, through to encryption for data throughout its lifecycle: ‘at-rest’, ‘in-transit’ and ‘in-use’. The challenge however is how to do that at scale, ensuring that all data held in disparate locations and in various states are catered for.

Join our Security Subject Matter Experts as they discuss:
• How to protect sensitive data-at-scale, 
• Explore the potential pitfalls and how to be assured that your data is in safe hands. 
• How to satisfy all the regulatory requirements and data privacy laws.

Protecting Sensitive Data at Scale with Imperva and Fortanix

With the increased proliferation of privacy regulations and compliance requirements, Tokenization has become a critical security mechanism to secure data within healthcare databases, payment cards, mobile wallets and SaaS applications. Tokenization can also be combined with data encryption to provide an additional layer of security that protects against insiders having access to decrypted sensitive data. 

Regulated industries like Banking, Healthcare etc. deal with vast volumes of digital data, which now more easily flow across regional or national boundaries. Security teams and developers face the challenge of balancing the fluid data flows with strict privacy and security regulations in these industries like GDPR, Schrems, SOX, HIPAA etc. And most regulations have come out with clear specifications for safeguarding Personally Identifiable Information using Tokenization. Organizations can use tokenization to solve several loopholes within their security apparatus and have better risk management in place.

Join our speakers Divya Mehra, Senior Director, Product Management, Fortanix and Aroop Menon, Principal PMM, Fortanix, as they explain how organizations can adopt Tokenization to secure PII. They will also delve into the industry-first data-centric architecture offered by Fortanix to secure data, wherever it resides.

This webinar will give you insights into:
- Cybersecurity and data privacy challenges
- Why Tokenization could be the gamechanger for securing PII
- What's required while evaluating a Tokenization solution? 
- Overview of Fortanix Tokenization solution

Securing Personally Identifiable Information With A Data-Centric Architecture

The Securities and Exchange Board of India (SEBI) announced a new framework for the Adoption of Cloud Services by SEBI Regulated Entities (REs) on Mar 6, 2023. The new framework requires regulated entities to:

- Compulsorily use Hardware Security Modules (HSM) and Key Management Systems (KMS) to store encryption keys and to secure cloud data effectively
- Ensure "In-USE" data protection by implementing encryption in use
- Retain control of Keys when using cloud services with either Bring-Your-Own-Key (BYOK) or Bring-Your-Own-Encryption (BYOE) approaches

Join Fortanix experts Ted Hendriks, Head of Sales Engineering, Ganesh Prasad, Head of Sales Engineering, Imperva, India, and Aroop Menon, Product Marketing, as they provide an educational overview of the SEBI framework, what it mandates, and why it's critical for entities moving to the cloud. You will also learn how Fortanix can help meet the SEBI mandates with its Confidential Computing powered unified data security platform.

The Securities and Exchange Board of India Framework for Cloud Services Adoption

The changing dynamics of the data security and threat landscape has made certificate and key lifecycle management more complex and notably harder to keep track of.  There are multiple certificates for different operations, often unique to each device and with varying lifecycles.  Then there are passwords, tokens, secret tokens, digital certificates, cryptographic keys, machine identities and a myriad of other IAM credentials to be managed and secured. 

When these variables are scaled across a global enterprise, certificate management becomes a nightmare for IT Professionals —often susceptible to expiration, revocation, or mismanagement when managed manually.

Join this webinar and live demo to:
• Discover how to simplify operations through automating certificate renewal and provisioning across all devices and workloads in hybrid and multi-cloud environments.
• Explore how to protect Private Keys, from key generation and storage through to management, using FIPS 140-2 Level 3 certified Fortanix HSM on-prem or in the cloud.
• See how to integrate EJBCA with Fortanix Data Security Manager (DSM) in a live demo.

Key Management requirements for PKI deployments

AWS brings a lot of innovations, including a Key Management System (KMS) to keep track of your cryptographic operations. However, many organizations hold back on migrating workloads to AWS because they need more control of their keys to satisfy the many regulatory and privacy requirements that exist in the Asia Pacific region today.

These regulations require organizations to ensure PII data from its citizens remain within its borders. To achieve this, data must be protected using state-of-the-art encryption, and the encryption keys must be in the sole custody of the data importer.

Fortanix functions as an AWS external key store to enable organizations to move sensitive data to the cloud with the highest level of security and control for their keys.

Join our speakers Anand Kashyap, CEO, Fortanix and Gerry Sillars, VP, Sales - APAC, Fortanix, as they discuss how AWS KMS External Key Store (XKS) helps elevate data privacy, sovereignty, and compliance in the cloud. We are also joined by Meg Peddada from AWS. Meg is a senior security consultant working for AWS Professional Service practice, focusing on security, risk and compliance.

This webinar will give you insights into:

- Data protection + compliance concerns: What does GDPR and other APAC-specific regulations demand
- Security framework in the cloud to meet the complex compliances – Separating keys from data
- AWS and Fortanix: A perfect combination to secure your data in the cloud.

AWS + Fortanix: Elevate Data Security and Privacy with Cloud External Key Store

Multi-cloud and hybrid environments have become the gold standard for business agility globally - and the banking & finance sector is no exception. However, when it comes to data security the space is still nascent with rapidly evolving security standards and architectural patterns.  

Bottomline - The traditional perimeter-based security as we know it is not adequate in the new cloud-world order.

The complexities around global and regional compliance combined with the bid to secure and process sensitive client data create a complex setup that’s often prone to data blindspots that are easy to exploit. The need of the hour commands Data to be the focal point of security initiatives and not fluctuating environments.

Join our experts, Faisal Faruqui (VP, Engineering) and Sander Temme (Senior Director, Product Management) as they walk you through the nitty-gritty of how the Banking & Financial Services sector can enable pervasive, scalable, and dynamic security across clouds with Fortanix.

We will discuss:

Cloud migration and its impact on data security and compliance within Banking
The resulting security challenges- Why the traditional data security framework may not be adequate?
What's required - The must-have data security capabilities for Banking
How has Fortanix supported Banking organizations on their cloud migration journey?

Secure Cloud Data Without Breaking The Bank

Regulations like the Schrems II ruling and the GDPR require organizations to ensure PII data from citizens in the European Economic Area (EEA) remains within these borders. This data must be protected using state-of-the-art encryption, and the encryption keys must be in the sole custody of the data importer.

By using a centralized, external key store, customers get full custody of their keys with complete control over the data encryption policies on AWS or other cloud providers.

Join our speakers Hildegard von Waldenfels, Regional Sales Manager Central Europe, Fortanix and Wolfgang Joppich, Senior Solutions Architect, Fortanix, as they discuss how AWS KMS External Key Store (XKS) helps elevate data privacy, sovereignty, and compliance in the cloud. We will also be joined by Patrick Palmer, Senior Security Specialist with AWS, as he explains why organizations should leverage this groundbreaking security innovation.

Join us for the practical demonstration of Fortanix integration with AWS S3 buckets and witness how the misuse of keys can be prevented by applying multi-control and role-based access control (RBAC) systems.

This webinar will give you insights into:

- Data protection + compliance concerns: What does GDPR and Schrems II demand?
- Security framework in the cloud to meet the complex compliances – Separating keys from data
- AWS and Fortanix: A perfect combination to secure your data in the cloud
- Learn how to create an AWS external key store and connect it to Fortanix DSM
- Learn how Fortanix DSM can manage keys for AWS cloud services through XKS

AWS & Fortanix: Supporting Digital Sovereignty in the Cloud

Businesses across industries are eager to harness value from their internal as well as external data ecosystems (public and private). Myriad of security, privacy, sovereignty and intellectual property constraints related to sensitive data have hampered that ambition. Learn more about how to address these challenges and pivot to optimization, innovation, and growth.

Join the webinar to explore how data collaboration can present opportunities for cost-saving and to grow your business, with industry examples of how it is being used today.

During this webinar, we will cover:
• Perspective and Insights on the challenge, approach and value of Confidential Data Collaboration
• Introduction to Confidential Computing
• Case studies in Financial Services, Healthcare and Government
• How you can get hands-on experience with this technology, use cases and access to experts

The webinar will be led by industry experts including:
• Parviz Peiravi, Global CTO/Principal Engineer, Financial Services Industry Solutions, Intel
• Harsh W. Sharma, Data-AI Business Growth Leader, Microsoft Industry Solutions
• Richard Searle, Vice President of Confidential Computing, Fortanix
• John Bottega, Moderator, President, EDM Council

Confidential Data Collaboration: Burden or Opportunity for Growth?

The Biden Administration’s Executive Order and Mandate(s) emphasize cybersecurity as a national priority and lays out new requirements. Wondering how your Department or Agency will meet these time-sensitive requirements?

Join Steve Grewal, CTG Federal’s CTO (and former CIO/CTO/CISO at GSA, ED, HHS, and DOT), and Steve Foley, Fortanix’s Federal Director for an exclusive session.

What you will learn:

- How data security has evolved and the challenge of managing encryption keys and certificates no matter where your data lives
- How Federal Departments and Agencies with On-Prem, Hybrid, and/or Cloud deployments are utilizing Fortanix to consolidate administrative tasks onto one easy platform
- The most critical capabilities to look for when evaluating a key management system
- Why you should remove your keys from the data
- Importance of securing your encryption keys
- Meeting Federal data privacy and compliance requirements (EO14028) in cloud and hybrid infrastructures
- How to centrally manage your cloud keys (AWS, Azure, GCP)

Best Practices for Securing Federal Data in Hybrid/Multi-Cloud Environments

While the GDPR and Schrems II mandates accelerated the need for external key management solutions in Europe, it is clear that these needs are expanding to become global requirements. Other countries and even states are jumping into the fray with clear specifications for safeguarding Personally Identifiable Information (PII). For example, Schrems-II doesn’t allow keys that provide access to the encrypted data, to be hosted outside of the European Economic Area (EEA). Privacy and compliance are calling the shots on the data protection lifecycle.

By using a centralized, external key store, customers get full custody of their keys with complete control over the data encryption policies on AWS or other cloud providers.

Join our host Shashi Kiran, CMO at Fortanix, and our speakers Jeremy Stieglitz, Principal PM, Cryptography, AWS, and Anand Kashyap, CEO & Co-founder, Fortanix, as they discuss how AWS KMS External Key Store (XKS) helps elevate data privacy, sovereignty and compliance in the cloud. Join us as we discuss best practices to secure sensitive data and meet compliance in the cloud.

What you will learn:

- Data protection + compliance concerns: What are we hearing from customers?
- Security framework in the cloud to meet the complex compliances – Separating keys from data
- AWS and Fortanix: Better Together
- Learn how our customers are meeting compliance challenges with Fortanix DSM for AWS KMS Extended Key Store

AWS + Fortanix: New Innovations to Accelerate Cloud Adoption

The Australian companies and government were rattled by a massive privacy breach earlier this year that exposed about 10 million customer records—almost half the Australian population.

At least eight other companies in the region have reported breaches since then.

Such incidents beg the critical question - How do Australian and New Zealand enterprises handle data and privacy, and what more can be done?

While governments are already stepping up their regulatory compliance reforms, the recent events had them push the pedal to the metal and respond quickly with new compliance requirements for organizations to adhere to.

Amid this raft of new regulatory requirements, the risk of a compliance breach can be magnified. Is your business ready for it?

Join Gerry Sillars, VP APAC, and Nils Westman, Senior Sales Engineer, as they team up to give you an overview of the ANZ data security and privacy landscape and walk you through the security and compliance best practices adopted by leading businesses globally.

You will learn more about:

- The ongoing threat landscape in Australia & New Zealand
- The role of regional compliance
- Where businesses lag behind
- How Fortanix can help

Defending Data Breaches in ANZ - Lessons from the Front Lines

2020 marked the onset of a digitization juggernaut. While businesses were busy restructuring for online operations to brace the pandemic, nearly every organization in Australia observed a sizeable increase in the frequency of spyware and trojan attacks masked under interactive coronavirus maps and websites.

what you will learn :

The APRA Prudential Standard CPS 234 aims to fill these gaps in the existing cybersecurity framework and elevate the existing security best practices and preparedness. It will make protection levels more stringent as regulated entities will have to demonstrate compliance with the standard rather than just following the guidance.  

This also means that sprawling your workloads across multiple clouds is going to get a bit more complex and will come with added responsibility. Enterprises will need the capability to secure their data, ability to thwart potential breaches, and better control over diverse cloud environments

Complying with CPS 234: Proactive Protective Procedures

cps234

Data Security

Cloud Native

Data Breach

Tokenization

Encryption

cloud data security

Key Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Complying with CPS 234: Proactive Protective Procedures

Presented by

About this talk

More from this channel