Name: Extending the Purdue Model to IoT/OT Remediation
Start: 2023-07-11T16:00:00Z
End: 2023-07-11T16:00:53.000Z
Location: BrightTALK
Rating: 5

Unmanaged and IoT devices are the fastest growing attack surface impacting all types of organizations.  Viakoo remediates cyber vulnerabilities by automating firmware updates, certificate management, and password policy enforcement.  

Many organizations have adopted agentless asset discovery to improve IoT security, and reports from the field are that it takes longer than expected to deploy and even longer to effectively remediate IoT device vulnerabilities. In part this is because asset discovery alone does not provide the context that IoT devices operate in, especially when it comes to the overall application workflow and how all elements need to work together in a tightly coupled fashion. This talk will show how application-directed discovery adds to the information uncovered in asset discovery, and how the two together dramatically accelerates the time to remediation and shrinking the attack surface. Data examples from application-directed discovery will be provided, as well as an industrial IoT use case.

Application Context Accelerates IoT Discovery and Remediation

This webinar takes CISA's theme for 2023 Cybersecurity Awareness Month (Secure Our World) and focuses on what that means for IoT devices, specifically in the enterprise.  Securing IoT has specific requirements when it comes to application-based asset discovery, device remediation, and ensuring compliance to internal and external standards.  Attend this webinar and come away with a prioritized list of what matters most in order to Secure Our IoT World.

Secure Our (IoT) World:  Cybersecurity Awareness Month

Automation is critical to achieving IoT security at scale across fleets of devices.  Using solutions that require agents being placed on devices defeats those advantages, and will ultimately create problems in both scaling and adding new devices that may not be supported by agents.  Likewise, the solutions used for IoT security must be easy to set up at scale and capable of managing devices across multiple sites and locations.  This webinar goes into best practices to ensure you are using agentless solutions for asset discovery, threat assessment, and remediation/repatriation so that the goals of cost and headcount reduction can be achieved.

The Dead End of Using Agents For IoT Security

Managing physical security environments is a challenge regardless of the size.  Ensuring critical systems are working, mitigating cyber risks and meeting compliance and audit requirements are a few of the challenges organizations are faced with in regard to physical security IOT devices today.  Managing this environment in a simple automated way increases efficiency and overall cost savings.  
Presidio, one of the largest technology and managed services provider, along with Viakoo, the leading solution provider for automated service assurance and cyber hygiene, invite you to an interactive dialogue via webinar to learn more about the outcomes you can achieve while saving both time and money.

The 3 Unavoidable Risks of Unmanaged Physical Security IOT devices

This presentation details a framework for how IoT security platforms can be assessed against the organization’s overall goals and existing infrastructure, and how that can be used in working across multiple lines of business to reduce the IoT attack surface.  Key areas within this assessment framework include:
- IoT system mission
- Enterprise integration
- Vendor risk to the organization
- Compliance/audit
- Ecosystem integration

Framework for Assessing IoT Security Platforms

When it comes to security, more than ever the focus by threat actors is to breach and exploit IoT and OT systems.  This webinar highlights 10 key predictions for "what comes next" on both vulnerabilities and defenses against them.  IoT/OT represents the fastest growing attack surface and has risk implications across the entire enterprise - learn in this webinar how to prepare and make your organization safer.

IoT/OT Security Predictions for 2023

Many organizations with robust information security policies struggle to extend those policies to IoT devices.  Whether it is because these devices are bought and managed by agencies that are not accustomed to handling cybersecurity, the scale and physical locations of the devices, or the perceived risk is lower than the need to take action, the end result is a large and growing attack surface presented by vulnerable IoT devices.  This webinar will feature speakers from a large-scale industrial organization (Carrier Corporation) and the largest municipality in the United States (City of New York), who will describe their journey in creating, deploying, and enforcing IoT security governance policies at scale.

IoT Governance: Applying Policies to Teams That Don't Report to You

The recently discovered Shikitega malware that is designed to compromise Linux and IoT devices is an advanced threat that without a specific focus on IoT remediation can become a persistent threat to an organization.  This webinar will go into what makes Shikitega so dangerous, why threat actors specifically target IoT devices, and how to provide an automated remediation response to this threat.

Shikitega:  Anatomy of an IoT Threat (and How to Defeat It)

Physical security teams are being asked by their IT and Cybersecurity teams to perform (at significant time and effort) more comprehensive cyber hygiene on their devices, specifically to rapidly update firmware to implement security fixes, deploy certificates on IP cameras to support zero trust initiatives, and rotate passwords more often. This is a new requirement being put on physical security teams, and security integrators play the crucial role in how to perform these functions both quickly and cost effectively. This presentation details how integrators can meet these customer needs, enhance customer relationships, while also building significant RMR.

How Security Integrators Can Help Organizations Avoid Costly Oversights

Threat actors are focused on deploying cyber vulnerabilities through open-source software, creating a potential tsunami of breaches and a massive increase in effort needed to remediate these vulnerabilities.  Whether Log4j, PwnKit, or many others, these vulnerabilites are exploitable and the impact from them is growing.  This webinar will highlight why open-source is a growing attack vector, what systems are impacted, and best practices for addressing it quickly.

Remediating Open-Source Vulnerabilities: Surviving the Tsunami

IoT devices are the largest and fastest growing attack surface for most organization.  Deploying and managing 802.1x/TLS certificates can be done easily with Viakoo DCM.

Overview on Extending Zero Trust to IoT

Zero Trust leads to better cybersecurity, but often is not applied to IoT devices and systems.  This webinar demonstrates how to extend Zero Trust to your IoT infrastructure through deployment and management of 802.1x/TLS certificates.

Extending Zero Trust to IoT

Man in the middle attacks have been around for a while, but are expanding rapidly with unmanaged and IoT devices.  This webinar highlights methods to stop such attacks, especially with using certificates deployed on IoT devices.

Preventing IoT Man in the Middle Cyber Attacks

IoT devices are a fast growing attack surface within most organizations.  A critical part of managing their cyber risk is having an effective governance policy that is supported by actionable controls that can be audited and extensible to devices/applications on IT networks managed by Operational Technology teams.  This panel brings together expertise from a corporate enterprise, industry organization, and research firm to dig into what makes for effective governance that reduces the likelihood of cyber criminals being successful in their next attack.

Shrinking The IoT Attack Surface - Governance Priorities

IoT devices are vulnerable to cyber attack almost as soon as you connect them because of known vulnerabilities.  Yet many OT and IT teams struggle to stay on top of firmware patches, leaving them open to attack.  This webinar highlights why patching IoT devices is significantly different than IT systems, and how automated solutions can help you keep up.

Patch Me If You Can - IoT Firmware Management

Overview of Viakoo's automated cyber hygiene and service assurance capabilities, including firmware updating, certificate management, and password policy compliance.

Cyber Hygiene of Unmanaged & IoT Devices

For many years organizations have used the Purdue Model to secure and maintain Industrial Control Systems (ICS), and use similar techniques with related systems such as IoT/OT.  This educational webinar with experts from Nozomi Networks and Viakoo will dive into how to extend the Purdue Model to IoT/OT devices, and augment it with automated device remediation and zero trust capabilities.  The webinar will feature a demo showing integrated asset discovery and vulnerability remediation.

Extending the Purdue Model to IoT/OT Remediation

IoT Security

Remediation

Cyber Security

Vulnerability Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

Get powerful operations insights for your business. Connect with experts and colleagues to get the most up-to-date knowledge on which systems and processes are driving operational efficiency, maximizing value and customer success.

Operations

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Extending the Purdue Model to IoT/OT Remediation

Presented by

About this talk

More from this channel