Artificial Intelligence (AI) for enforcing email policies

Cyberattacks can cost an organisation its reputation, its customers and a great deal of money, making CEOs and board members more accountable. Yet, research shows that a high percentage of corporate boards are not actively involved in cybersecurity oversight. Nonetheless, Gartner estimates by 2021, 100% of large enterprises will be asked to report to their board of directors on cybersecurity and technology risk at least annually.

When communicating your cybersecurity program to the board, it is important to translate technical, tactical details about cybersecurity into business terms: risks, opportunities and strategic implications.In order to justify the desired cybersecurity expense, you must clearly present the risks, the plan you will implement to protect the company’s assets, and the rationale behind the cost. In this webinar, our expert panel will discuss how to present cybersecurity to the board and get buy-in, including how to:

- Map out your cybersecurity program.
- Get an independent view of your current cybersecurity state and present the facts.
- Translate technical, tactical details about cybersecurity into business terms: risks, opportunities and strategic implications.
- Propose concrete solutions and demonstrate ROI.

Many organizations rely on governance, risk, and compliance (GRC) technology to consolidate risk information from internal sources (such as finance, IT, and operations) and external sources to understand their threat landscape. Yet as vendor ecosystems grow in size and complexity, risk management teams are increasingly struggling to procure and maintain high-quality, real-time data to feed their GRC systems.

Creating a threat intelligence strategy is essential for a company to identify and prioritize threats effectively. But when it comes time to choose threat intelligence services and products it can be hard to know where to start. In this webinar, our expert panel will discuss how to use real-time threat intelligence to accelerate threat detection, including how to:

- Understand the important distinction between threat data and intelligence.
- Establish what types of intelligence will prove beneficial to your organization and be critical for ROI.
- Ensure logging and reporting mechanisms are in place that can provide data per API to simplify forensic and compliance reporting.
- Gain complete visibility into all of your organization’s API traffic, and analyze relevant intelligence effectively from large volumes of threat data.
- Empower your teams to leverage automation to detect and block threats to your organization. 

Third-party risk management (TPRM) programs are designed to offload that risk, but the current approach isn’t providing the intended results. According to the Ponemon Institute, nearly 61% of U.S. companies have experienced a data breach caused by a third party.

To build an efficient TPRM program, it's critical to understand which vendors and suppliers present the most risk, as well as which ones are essential to your operations. By understanding where to prioritize your time, you can onboard key vendors faster, spend the right amount of time performing due diligence, and invest the most resources assessing and monitoring the third parties that matter most, helping to increase security and performance.

On this CPE accredited webinar our panel of experts will share their experiences and discuss how to:

- Overcome the most common vendor risk challenges
- Prioritize your third parties by criticality
- Streamline your due diligence and vendor assessment process
- Encourage effective communication between internal stakeholders
- Establish a continuous improvement cycle to encourage better results year over year
- Achieve efficiencies out of TPRM tools

Under the weight of new and changing regulations around the world, many organizations struggle to achieve compliance. They often lack a holistic view of their compliance profile and face increasing challenges due to digital transformation. Chief Compliance Officers who take a top-down approach are often met with resistance, but a successful program requires management to actively participate, not just sign off.  

Organizations can no longer afford to apply check-the-box approaches to compliance. Executive management must take a variety of actions to demonstrate leadership and commitment to the company’s compliance management program. On this CPE accredited webinar our panel of experts will discuss the current compliance landscape and challenges facing today's organizations, and they will address best practices to modernize your compliance program, including how to:

- Use a risk-based approach to meet regulatory demands.
- Employ digital transformation in the management of compliance obligations.
- Understand the impacts of regulatory changes and minimize resource-intensive manual processes.
- Get buy-in from other departments and create a working group of stakeholders to develop and improve your compliance program.

In response to the Coronavirus Pandemic, countries are turning to tech to find solutions for containing the spread of the virus. New government initiatives including contact tracing apps are being implemented at lightning speed, and tele-health regulation is being approved in days instead of years. The world is rapidly digitizing in response to all users working from home simultaneously, companies are adding network technology to expand coverage and capability, and online video conferencing is exploding.

But what does this all mean for privacy, and how can companies maintain compliance with regulations such as the GDPR in the current climate? Join this CPE accredited webinar to learn from our panel of security and privacy experts as they discuss how to implement a framework for compliance in the current climate, including how to:

- Better align global privacy data regulations,
- Enable business agility in a changing environment,
- Foster greater interplay between CIOs, CTOs, DPOs and CEOs,
- Create successful privacy frameworks that are globally aligned, and locally deployed.

Being left at the payment altar is not easy.

PCI DSS requirements 6.1 and 6.2 address the need to keep systems up to date with vendor-supplied security patches in order to protect systems from known vulnerabilities. But what do you do if you have an in-scope application and it is no longer supported by the vendor?

Many payment applications, gateway and software are long past end-of-life, yet still processing cardholder data. Can such a setup be PCI compliant?

This PCI Dream Team webinar will detail the issue, challenges dealing with unsupported hardware/software, and suggest strategies for compensating controls.

Our panelists are some of the top PCI QSA’s in the country, with decades of combined PCI and card processing experiences. They’ve seen it all: the good, bad and ugly; and lived to tell the tale.

Join Ben Rothke, David Mundhenk, Arthur Cooper, and Jeff Hall for an interactive Q&A session, and get answers to your most vexing PCI questions. No PCI question is out of bounds.

In response to the COVID-19 pandemic, more employees are working from home than ever before, introducing corporate devices to a variety of new and evolving vulnerabilities. We recently examined the data we routinely collect from Internet traffic to learn more about how this unprecedented shift to remote work changed the security landscape — and the results were alarming.

During this webinar, Dan Dahlberg, Director of Data Research at BitSight, will dive into our research and provide proven recommendations for mitigating cybersecurity risk across a remote workforce. Join us on Wednesday, July 15, for:

- Insights into the hidden dangers lurking in residential networks
- Tips on navigating the new security challenges
- Best practices for monitoring your expanding attack surface and ensuring all digital assets are secure

The presenters for this session (Gregory Van Den Ham & Nate Zimmerman), will be discussing the following points:



The History of Ransomware
Delivery Vectors
Ransomware Behavior Examples
Detection / Prevention tactics
Mitigation and Cyber Incident Response

Nate and Greory have over 30 years combined experience in IT Security, click 'attend' to join this thought-provoking and interactive live session.

As an information security professional your knowledge of ransomware as well as the tactics & techniques to detect & respond effectively are critical to your organization. Data breaches threaten organizational financials and reputations. Strengthen your security through the use of actionable intelligence. Attendees will hear about:

- What is Ransomware?
- Leveraging Architecture Components to Detect & Respond to Ransomware
- Ransomware Scenarios & Solutions
- Tips to Protect Your Organization

Enterprise tech has transformed over the past decade, bringing improvements not only in elasticity & efficiency but especially security. Ten years ago, vulnerabilities were the easiest path into systems, but operating systems and software have become more secure through better practices, consistent updates, & leading-edge security solutions. As tech evolved, so have the exploits, which now leverage human error more than ever; capitalizing on misconfigurations or leveraging tactics like social engineering - as a primary path to compromise.

In this presentation, Luke will chronicle the evolution of malicious attacks over the last ten years and demonstrate how the security industry has responded through the implementation solutions that address the ever-changing nature of data breaches.

The presentation will address:

· Lessons learned from ten years of exploitation evolution
· Why modern threats are effective even though there are more security tools on the market than ever before
· Changes companies can make now to build stronger defenses

Luke began his cybersecurity career in the US Navy, where he trained to conduct offensive security operations for the Department of Defense. He participated in daily computer network exploitation missions in support of national intelligence requirements and in support of protection against foreign nation-state sponsored hackers. After separating from the United States Navy, he joined the start-up company, IronNet Cybersecurity. Luke conducted penetration tests and vulnerability assessments, while also providing product development support and threat hunting capabilities. Following his time at IronNet, Luke worked as a Director in security consulting at Ankura Consulting Group, where he specialized in red teaming, penetration testing, intelligence gathering, threat hunting, digital forensics, and technical writing. Luke has a M.S. degree from Eastern Michigan University and is CISSP, OSCP, and CEH certified.