Name: MDR: Delivering Superior Security Outcomes Through Cybersecurity as a Service
Start: 2022-12-06T20:00:00Z
End: 2022-12-06T20:00:24.000Z
Location: BrightTALK
Rating: 5

70% of organizations have had a public cloud security event in the last 12 months— and we know that number continues to rise. That's because attackers are zeroing in on public cloud resource misconfigurations.  As more and more data and resources are migrated to cloud platforms like AWS, Azure, and Google, it's harder for IT pros to keep pace, much to the delight of attackers worldwide. Organizations are increasingly investing in cybersecurity services, most notably Managed Detection and Response (MDR), to help improve their threat detection and incident response capabilities 

When you’re up against malicious actors, the more expertise you can bring to bear the better. Join this webcast to learn how to effectively integrate managed detection and response into your proactive security strategy. We will also cover: 
- A common attack scenario and how it plays out from a defender's standpoint 
- Trends of attacks that are taking place in the cloud 
- Solutions your organization can leverage to obtain better visibility and detection

MDR: Delivering Superior Security Outcomes Through Cybersecurity as a Service

Let experts take care of your AWS security monitoring and threat response so you don’t have to.

Can you keep up with AWS Security Hub, Amazon GuardDuty, and AWS Cloud Trail alerts? Is your cloud firewall and EC2 workload protection blocking the most advanced threats? And are you proactively preventing threats with proper configuration?

AWS recently announced a new baseline standard for cybersecurity, taking care of your AWS security needs by defining ten cybersecurity areas that all workloads should be monitored for around the clock by trained AWS security professionals known as Level 1 Managed Security Services. Sophos is one of the world's first AWS Partners to join the new Level 1 MSSP Competency Program, fusing automated protection, with a team of managed service experts monitoring your environment 24/7 to stop threats – even at 3 a.m. and over the holidays.

Join to hear from Ryan Orsi, AWS WW Security-MSSP Practice Lead, and Scott Barlow, VP of Global MSP and Cloud Alliances at Sophos as we discuss this important new topic.

Managed AWS Security – even at 3 a.m. and over holidays

This session will describe approaches and suggestions for potentially lowering your risk of a breach and how to prepare for when they happen.  We will discuss our experiences and practical ideas for consideration to take back to your companies.

Tune in to learn more about these topics:
1. What is the definition of a breach
2. SANS Security Critical Controls – 
a. CIS Control 1: Inventory and Control of Enterprise Assets
b. CIS Control 2: Inventory and Control of Software Assets 
3. Starting with the basics
4. Access Control – Knowing your data – Identity Access Management (IAM)
5. Leveraging Threat Intelligence
6. Bonus – Have a plan, practice, table tops

Top 5 Strategies to Reduce the Risk of a Breach

Security operations is hard. The threat landscape is constantly
evolving. Business and IT initiatives create an ever-expanding attack surface.
Myriad security products overwhelm operators and drive costs up. And as
cybersecurity becomes a topic in board rooms, CISOs are not only under
pressure to reduce risk, but also to prove the efficacy of their security
postures.
 
Next-Gen MDR/XDR represents a shift in mentality from traditional solutions,
which primarily focus on detecting threats by managing EDR and XDR
products. In this session, we will discuss how Next-Gen MDR solutions:
 
1. Continuously assess prevention and configuration settings to prove
security efficacy
2. Use security posture context to make more accurate incident triage
and response decisions
3. Facilitate better collaboration between security and IT teams to
streamline operations
4. Reduce overall complexity by plugging into a consolidated multi-cloud,
multi-device control plane
 
Don’t miss out on the future of Managed Detection and Response!

Reduce Risk and Prove Security Efficacy with Next-Gen MDR/XDR

When we think of cybersecurity for enterprises, we think next-gen firewalls, EDR, and SIEM. But none of these resources can protect your cloud assets as traditionally employed. This means companies must use new techniques to protect cloud environments and the various SaaS applications deployed by modern enterprises.

Tune into this talk to learn:
1.) How to collect telemetry and generate alerts from various cloud environments.
2.) Techniques to detect misuse of SaaS application including cloud account takeover. 

The ultimate goal is to stop cloud and SaaS breach from occurring in the first place.

Breach Detection in the Cloud

In the last two years, technology has shifted from onsite to remote. This paradigm shift in computing introduces additional security concerns to both individuals and enterprises. 

Tune into this presentation to hear TD Bank's Application Release Engineer Pankul Chitrav discuss security issues and concerns common in cloud computing while addressing various key topics like vulnerabilities, threats and mitigations, and breach prevention.

Speaker bio:
Pankul is an expert DevOps consultant and entrepreneur. With a background in software technology and leadership, her career expands over several industries including education, healthcare, and finance. Currently she is working on Azure Clouds as Application Release Engineer at TD Bank. She has received numerous awards as a technology expert and mentor. Her strong background in learning, development and managing teams makes her the perfect fit. She is widely regarded as the go-to source for automation and troubleshooting. Pankul is a Certified Agile Practitioner and is Certified in Designing Microsoft Azure Infrastructure Solutions along with Microsoft Azure Administrator. Pankul has been invited to speak to organizations across the world including RSA and WWC. Pankul is passionate about volunteering and is one of the most sought-after mentor for newly immigrants of Canada.

When not working or volunteering, Pankul can be found creating delicious meals and doing gardening.

Breach Prevention in Cloud Computing

It is no secret your data in the cloud is vulnerable. What's worse is that, according to Gartner, more than 99% of cloud breaches will have a root cause of preventable misconfiguration or mistakes by end users through 2025. But the silver lining -- more like silver word -- to your cloud is that these breaches can be preventable so you can reach to your data in cloud when you need it. 

Tune in to this presentation from TD Bank's Leena Bongale if you looking for ways to secure your cloud data by:
• Securing access with zero trust principles
• Protecting data in an era of hybrid work
• Transforming your data protection for the cloud
• Reducing human error with security posture management

Speaker Bio:
Leena Bongale is a recognized industry expert with over 18 years of experience in Information Technology and specializes in Information Security and Risk Management.  She is currently Manager of Data Protection at TD Bank. Leena is an accomplished speaker, trainer, also volunteers information security consulting on pro bono basis, and has achieved industry certifications including CRISC and SAP BI. Leena regularly speaks on topics including cybersecurity, cloud adoption, business continuity, and compliance.

Reach it, Don't Breach It!

Social engineering tactics – using the art of deception in cyberattacks – have climbed to the top spot as the #1 cause of cybersecurity breaches. Our researchers break down common attack vectors, where we’re most vulnerable and find out why social engineering is so successful. Finally, we explore Forrester’s recommendation for the best defence against social engineering tactics like phishing. They make the case for adopting a multi-tiered cybersecurity strategy. Equipped with the right defences, you can protect your business from social engineering.

Join our webinar to learn how to protect your business.

Is Your Security Engineered To Beat Social Engineering?

Join Bob West, Chief Security Officer at Prisma Cloud, to learn about how Prisma® Cloud can address the cloud threats in your enterprise. This event explores how to operationalize the insights in the latest Unit 42 Cloud Threat Report.

Identity and Access Management: The First Line of Defense

The cloud landscape is complex with different threats, risks, and vulnerabilities that can overwhelm a business and its security teams. An annual report released by CSA tracks the top concerns reported by security professionals to understand how threats and breaches impact the business. 

Organizations must prioritize how cloud security affects the organization, break down recent cyber attacks, and implement controls that protect the organization from future threats. Some of these tools include the Top Threats initiative complements industry tools for a richer business context. IT leaders should also compare industry perception with actual threat data in the Verizon DBIR. Another strategy is to take real-world attacks and use alternative lateral techniques from the MITRE ATT&CK framework. Finally, security leaders can implement cloud security controls with the Cloud Controls Matrix to mitigate business risk and cyber attacks. 

Tune into this webinar as Cloud Security Alliance's John Yeoh shows how to use these tools and better communicate cloud security for the business.

About the speaker:
With over 20 years of experience in research and technology, John Yeoh has held technical analyst, executive, and board member positions in the industry. He is also a Technical Advisory Council Member for the Federation Communications Commission, Standards Officer for the International Standardization Council, and representative on multiple industry professional consortiums. Yeoh is a published author, researcher, and technologist with areas of expertise in cybersecurity, cloud, and next generation technologies. His works and collaborations have been presented in The Wall Street Journal, Forbes, SC Magazine, USA Today, Information Week, and others.

Top Threats to the Cloud for the Business

When it comes to securing cloud usage, misconfigurations can arise for many reasons and stem from a number of sources. One particularly well-traveled road for the origination of security issues is through application development. Specifically, situations where changes made during development lead to undermined security, the introduction of vulnerabilities, or other non-optimal security outcomes.  

Fortunately, by working together with development teams, security groups can help find and mitigate these types of issues.  

This discussion will explore how and why threats get introduced during the development cycle and cover strategies for how you can mitigate those issues when they do.

Application-induced cloud security issues (and how to overcome them)

Tune into this session, presented by Boleaum Inc. founder Vincent Amanyi,  to learn the critical components involved in order to craft security strategies for the cloud environment.

 Attendees will come away from this webinar with these key takeaways:
- Define what matters to them within a cloud security strategy.
- The right technology and tools to build up their strategy.
- Frame their environment based on growing business applications.
- Partner with the right vendors to manage risk and lower cost.

The building blocks of a cloud security strategy

Network security is primed for a transformation. Traditional approaches to threat and data protection are no longer effective in a cloud and mobile world. Users, data and apps have left the network, leaving traditional network security approaches in the dark. As data breaches and ransomware continue to rise, IT leaders are now being forced to evaluate new ways to help drive down risk.

Defining the future of Security Service Edge

A Cloud-Native Application Protection Platform (CNAPP) is a new approach that simplifies cloud security by combining several capabilities in one platform. By combining vulnerabilities, context, and relationships in a unified data model, a CNAPP provides a holistic view of risks, recognizing how seemingly unrelated low-severity risks can combine to create dangerous attack vectors.

In this session, we’ll talk CNAPP and dive into:
• How CNAPPs are changing the landscape of cloud security
• The advantages of agentless cloud security
• How a CNAPP reduces cloud security tool sprawl and strengthens risk prioritization
• How the Orca Cloud Security Platform combines cloud workload and configuration intelligence in a unified data model to understand the full context of risks

5 Reasons to Choose an Agentless CNAPP in 2023

The World Economic Forum estimates that over 92% of all data in the western world is stored on servers owned by very few US-based companies. This concentration creates a situation of high dependence, and a challenge for business resilience. Digital sovereignty has become an important topic for many nation states, and new regulations are emerging to manage these risks. In this webinar we will cover:

- Digital sovereignty challenges between the EU’s GDPR and the US Cloud Act and FISA since the Schrems II decision.
- The emerging sovereignty regulations such as GAIX-X, DORA, France’s “Trusted Cloud”, Australia, and others.
- The impact of sovereignty on cloud deployment risk and governance.
- Strategies to maintain data, operational, and software sovereignty.
- How sovereign controls leveraging encryption and key management can protect privacy and sovereignty in the cloud.

Join us learn more about how to overcome digital sovereignty challenges in the cloud.

The Keys to Sovereignty in the Cloud

It's no longer news that we need to support and secure increasingly distributed organizations. As companies look for long-term solutions for their hybrid and fully remote workforces, one thing is clear - identity is at the center of businesses today. An identity-first approach to security reduces today's cybersecurity risks and provides the foundation for a Zero Trust security strategy. A modern identity solution can also help you tie the complexities of protecting people and assets together in a seamless way.

Join this session to learn:
 - How to enable and secure your workforce
 - How identity can lay the foundation for any Zero Trust security initiative
 - How identity fits into a larger ecosystem and supports a more robust security posture

Approaching Security with an Identity-First Mindset

According to Foundry, formerly IDG Communications, 92% of organizations currently host some or all of their mission critical applications and IT footprint in the cloud. But cloud environments continue to face a myriad of security threats including misconfiguration, lack of visibility, identity and unauthorized access.

In this panel discussion moderated by Clarify360's Jo Peterson, tune into hear leading experts focus on specific takeaways that you and your team can put in place to now to ensure your cloud footprint is secure for the upcoming year. 
- Cloud security roadmap;
- Cloud security posture management; 
- Zero trust network access (ZTNA);
- SDLC and DevSecOps within the cloud;
- The need for centralized platforms;
- Increased investment in intelligent security;
- Increased investment in certification and cross training of your team.

Panelists:
Teena Piccone (Google) 
Iain Clarke (PayPal Invest)
Charles Johnson (Coalfire) 
Stan Davidson (SonicWall)

Secure Your Cloud Footprint in 2023

An effective cloud security strategy can be an elusive and challenging goal to reach. Tune into this session to hear CDS Defence & Security's Martin Nash discuss PAGODA, a self-styled approach to implement a cloud security strategy. 

PAGODA is an acronym standing for:
- Principles 
- Assets
- Governance 
- Operations
- Data 
- Access 

This self-styled, tailorable approach to building a cloud security strategy is simple and easy to remember and will ensure that key principles are considered. Attendees will come away from this session with a template on how to build their own cloud security strategy or an option to measure their existing one.

Enable your cloud security strategy by building a PAGODA

Organizations are adopting cloud strategies at a rapid pace to scale infrastructure demands, onboard new applications, and provide flexibility to software development teams, among many other use cases. But this brings up challenges for security teams who are responsible for managing security risk and meeting compliance regulations for workloads and applications running in environments outside of their direct control. In this session, ESG Senior Analyst Melinda Marks explores the cloud security priorities your organizations needs to focus on for 2023 and the defenses you should consider putting in place.

Get Your Cloud Security Strategy Ready for 2023

360° Cloud Security for 2023

Cloud Security

Cyber Security

Threat Intelligence

Emerging Technologies

Security as a Service

Cyber Defence

Threat Protection

Threat Prevention

Endpoint Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

MDR: Delivering Superior Security Outcomes Through Cybersecurity as a Service

Presented by

About this talk

Sophos Inc. - Channel