SPVA Panel Session: What's Threatening PCI DSS?

TBC

TBC

TBC

TBC

GDPR is a global phenomenon because as we all know, it applies not only to organisations located within the European Union (EU) but also to those outside of it, if they market to or monitor EU data subjects. It has set a benchmark that non-EU regulators are increasingly willing to match or even exceed, with emerging legislation such as The California Consumer Privacy Act and India’s Draft Data Protection Bill enacted.

For many organisations, implementation was less challenging than they feared, as a lot of the building blocks for the CCPA were already in place after GDPR implementation. However, the bigger picture is that many issues are not yet fully resolved. The detail surrounding the data organisations hold (whose it is, why it is being held, and how it is being managed)- not just across IT systems but also devices, messaging services, social media and more – is often not yet clear. The way that the GDPR bumps up against existing laws is also not fully resolved. Just one example is data retention, where other laws require data to be kept for longer than the GDPR demands.

Add to that the varying business imperatives, regional differences, and legal perspectives that impact on data privacy and in many ways the journey is just beginning. The positive here is that as these issues are addressed, better privacy models will emerge that not only aid compliance but also boost agility and support business growth. Join this CPE accredited webinar and listen to our expert panel discuss how to implement a global privacy framework for end-to-end-compliance, including how to:

- Better align global privacy data regulations,
- Enable business agility by forstering greater interplay between CIOs, CTOs, DPOs and CEOs,
- Create successful privacy frameworks that are globally aligned, and locally deployed.

TBC

TBC

In today’s multi-cloud and hybrid environments, CISO's are struggling to secure assets, manage security policies across clouds, monitor and mitigate risks, while also supporting the business. How are CISOs solving the challenge of complexity?

Join this panel of experts to learn how to simplify cyber risk management as well as maximize the value of your team and technology.
- Risk scoring and security controls
- How to identify risks for organizations and their third-party vendors
- How to prevent, detect, and respond to, privacy and network security incidents
- Best of vulnerability and risk management in a multi-vendor environment
- Best practices and use cases across industries

Is your organization aware of the main differences in data regulations around the world?

Join this panel of industry leaders for an interactive Q&A roundtable to get a comprehensive look into the different data privacy and security requirements. The panel will also discuss what to expect in 2020 and beyond.

Viewers will learn more about:
- What's new on the data privacy and compliance landscape
- Main differences between data regulations around the world and what this means for your organization
- Expert recommendations regarding best tools and practices for achieving and maintaining compliance
- The future of data privacy
- What to expect in 2020 and beyond

In an age where cybersecurity threats are an everyday fact of life, organizations are looking for solutions that enable them to predict, prepare and react to the shifting landscape of cyber threats, and implementation of agile cyber security strategies is becoming inevitable to achieve that goal.

Agile cyber security methods allow for the simultaneous defense of multiple attack surfaces against this new wave of advanced cyber attacks targeting businesses and services. Cybersecurity Frameworks such as NIST can enable organizations — regardless of size, degree of cybersecurity risk, or cybersecurity sophistication — to apply the principles and best practices of risk management to improving security. Attend this CPE webinar to gain insights on:

- Getting a clear picture of the current health of your organizations' defenses
- Defining your security road map using a cybersecurity framework
- Conducting gap analysis and executing remediation actions
- Benchmarking performance with security controls and built-in reporting templates that align with the framework.

The stream of near constant data breaches has left consumers desensitized to the news their information was lost or stolen. We’ll discuss issues around complacency both in consumers and enterprises such as how long the customer cares after a breach occurs, whether data loss is as negatively impactful to an organization’s reputation as it used to be, and how breach fatigue benefits hackers.

Most companies underestimate their digital risk exposure and lack monitoring and mitigation capabilities. On this CPE webinar we will help enterprises identify next steps toward mitigating digital risk with the appropriate oversight, people, process, and technology. Attendees will learn how to review current efforts, identify gaps, and prioritize improvements in your digital risk management, including how to:

- Map your organization's external digital footprint
- Monitor for indicators of attack, compromise, and abuse
- Mitigate risk events by initiating response and remediation plans.

As organizations evolve and become more connected, their reliance on third-party ecosystems continues to grow. While these business relationships undoubtedly add value, they also introduce significant new risk and compliance challenges. The third-party risk management process is complex and involves more stakeholders and data sources than many people may think including: cyber risk information, supply chain, financial, IT, compliance, legal, and privacy risk data. But even with loads of available data, it’s extremely difficult for risk teams to know how to prioritize risk and focus remediation and response efforts without the proper context or processes.

As a result risk management teams are turning to governance, risk, and compliance (GRC) solutions to help centralize all of this information in order to gain a more holistic view of their third-party ecosystem. Cyber third-party risk data is a critical piece of the puzzle to a holistic third-party risk program within a GRC solution. Having access to a threat-centric view of cyber risk provides risk management teams with real-time insights that enable them to make faster, more confident decisions and effectively manage third-party risk.

On this CPE accredited webinar our panel of experts will address how to bring threat intelligence into the third-party risk management process and discuss:

- The importance of holistic risk management and sustainable ongoing monitoring,
- How to incorporate external content sources and create a centralized data repository for a more holistic view of your vendors,
- Ways to advance your third-party risk maturity with threat intelligence.

The California Consumer Privacy Act (CCPA) went into effect on January 1st 2020, yet there is still confusion and uncertainty regarding this data regulation, especially for businesses operating in a post-GDPR world.

Are you familiar with the CCPA's privacy requirements? Is your organization ready for the most far-reaching data privacy regulation in the U.S. to date? 

Join this panel of privacy experts for an interactive Q&A session to learn more about how CCPA will impact your organization, as well as dive into the main differences between CCPA and GDPR.
- The CCPA privacy requirements- CCPA checklist beyond deadline day
- Data mapping: how and why it is important for CCPA and GDPR
- Data Subject Access Requests 
- Other key similarities and differences between GDPR vs. CCPA
- The future of privacy and compliance in 2020 and beyond

Speakers:
- Guy Cohen, Strategy and Policy Lead, Privitar
- Lisa Hawke, VP Security and Compliance, Everlaw
- Joanne Furtsch, Director, Deputy Data Governance Officer, TrustArc
- Laura Koulet, Vice President, Head of Legal & Privacy, Tapad

Security leaders are increasingly basing their decisions on metrics to justify spending, quantifying risk, and demonstrating value to the executive suite. This panel of leaders will discuss how they are awash in dashboards, charts, and KPIs of little to no value and what they’ve done to develop contextual, impactful, actionable metrics.

GRC is neither a project nor a technology, but a corporate objective for improving governance through more-effective compliance and a better understanding of the impact of risk on business performance. GRC can vary dramatically depending on the businesses vertical market, and even further complexity can be found from one business unit to another. This complexity drives the need for different, highly specialized tools, which raises a huge set of cost, integration, and management issues.

To address this challenge, many businesses are opting for an automated GRC (eGRC) solution, which aims to resolve the challenges associated with scattered and disconnected operational security processes through the centralization of data, alignment of processes and workflows, and clear enterprise-level visibility with trend and analysis metrics and reporting. The benefits of Automating GRC are substantial when businesses have a mature GRC program in place. Attend this expert CPE webinar to gain insights on:

- Understanding the GRC Business Drivers.
- Defining Your GRC Strategy.
- Developing a GRC Roadmap that is aligned with the Mission, Value, and Strategic Agenda of Your Business.
- Getting Leadership Support and Enabling Cross-Departmental Collaboration.