Name: The Human and Machine Identity Problem in SaaS Environments
Start: 2023-06-08T18:00:00Z
End: 2023-06-08T18:00:25.000Z
Location: BrightTALK
Rating: 5

If you are interested in SaaS Data Security, you've come to the right channel. We discuss the issues, the use cases and the solutions that companies are facing when trying to keep their SaaS data secure. Whether it be shared documents in Google Drive or in Slack, or any SaaS Applications, DoControl gives organizations the automated, self-service tools they need for SaaS applications data access monitoring, orchestration, and remediation. We take a unique, customer-focused approach to the challenge of labor-intensive security risk management and data exfiltration prevention in popular SaaS applications. 

DoControl, SADA, An Insight company, & DigitalOcean are teaming up for a live session on how to future-proof your Google Workspace security strategy in the age of GenAI.

Protecting Google Workspace in the Age of AI

Meet Terry O'Daniel, a renowned security leader who has worked at the likes of Netflix, Instacart, and others, to discuss recent trends and how to enable security controls without hindering business productivity.

The Breach Seat - Terry O'Daniel

Meet Chris Honda, Manager of Risk & Compliance at Plotly, to discuss how AI is shaping the role of security practitioners and leaders going into 2026.

The Breach Seat - Chris Honda, Plotly

An employee shares a sensitive file in Google Drive - maybe it’s a financial report, a product roadmap, or your GTM playbook.

They choose “Anyone with the Link” sharing permissions to speed things up & send it to their team in Slack, which includes employees, contractors, and interns.  

Three weeks later, that same link is indexed on Google. Internal data is exposed, and that file ends up in the hands of a competitor. 

No one knew. No one got an alert. And no one knows what its about to cost.  

This is data exfiltration in the SaaS era - whether it’s from wide sharing permissions, insider threats, careless behavior, or shadow IT gaining access. It’s silent, it’s common, and it’s expensive.

Join our eye-opening 30 minute webinar where we’ll cover how to spot your biggest threats, + how to measure what those risks are really costing your organization.

Top SaaS Exposures: Understanding How to Quantify Your Risk

90% of organizations have had an identity related attack within the past year. 

Most attacks, breaches, and security incidents are identity-initiated since they use the identities of internal users. Thanks to the surge of identities across SaaS apps, identity-based attacks are increasingly becoming a major threat to organizations. 

Learn the essential elements of ITDR, how to identify potential threats, implement effective detection methods, and develop mitigation strategies to enhance your organization's security posture.

Google Workspace Security Series: Unmasking and Mitigating Identity Threats

Anytime an employee logs in to a website and clicks ‘Continue with Google’, they are opening the door to a thousand security risks.

Shadow apps—also known as third-party OAuth apps—connect to your business’s cloud environment, often without IT oversight. With a single authorization click, employees can unknowingly grant access to sensitive company data, creating major security vulnerabilities.

Learn how to uncover these risks, quantify the exposure, and remediate both historical and future threats.

Google Workspace Security Series: How to Control Risky Third Party Applications

Sharing documents in Google drive is essential for business productivity—but how do you ensure personally identifiable information (PII) and sensitive data stays protected?

Based on our 2025 SaaS Data Report, over 25% of assets exposed contain sensitive information - this includes employee information, customer data, financial records, and much more.

Learn how to uncover these risks, quantify the exposure, and remediate both historical and future threats.

Google Workspace Security: Control External Sharing of PII and Sensitive Data

An employee leaving the company trying to take company information to their next role? How about product teams thinking the roadmap they create is theirs to keep?

Employees often believe the assets they create at a company are theirs, but in reality, they’re proprietary company information that needs to be protected.

Learn how to uncover these risks, quantify the exposure, and remediate both historical and future threats.

Google Workspace Security Series - Personal Account Sharing!

Okta, the leading IAM provider, and DoControl, the leading SaaS Security solution, offer comprehensive identity and access management security in collaboration with the world’s most comprehensive and broadly adopted cloud provider, Amazon Web Services (AWS). With Okta, customers gain complete control over user access to SaaS applications and data. Okta excels at securely managing the onboarding and offboarding of employees within an organization. With just a click, access to all applications can be granted or revoked. Traditional Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions often struggle to keep up with the dynamic nature of SaaS data. DoControl’s solution excels in identifying and remediating such issues, ensuring that data exposure is effectively managed.

By integrating Okta with DoControl, organizations can gain comprehensive control over their onboarding and offboarding processes, thereby strengthening their Identity and Access Management (IAM) program.

Join us at our upcoming event to learn from top experts at AWS, Okta, DoControl, and our joint customer, Vox Media, on how to enable this strategy within your security framework.

Unlocking Secure Access: Integrating IAM with Okta, DoControl & AWS

Join us for an inspiring and insightful Women in Cyber webinar hosted by Ilana Yakobi, VP of Customer Services at DoControl. This event brings together prominent female leaders in cybersecurity to share their experiences, challenges, and triumphs. Our distinguished speakers include Ida Ek, VP Information Security at EQT, Yasmin Abdi, Security Engineer at Snap, Sue Begamu, Global CIO/CISO, Shenhaz Mirza, Security Engineer at KKR, and Kayla Williams, CISO at Dev.

During the webinar, we will explore what inspired these remarkable women to pursue careers in cybersecurity and discuss the unique perspectives and skills they bring to the field. We will delve into the challenges women face in this industry and how they have overcome them, balancing demanding careers with personal life.

Our speakers will also share their thoughts on how increasing gender diversity in cybersecurity can drive innovation and problem-solving. They will provide effective strategies for encouraging more women to enter and succeed in this field, emphasizing the importance of mentorship and support networks.

Additionally, we will highlight the role companies like DoControl play in advancing diversity and inclusion within the cybersecurity sector and how such initiatives can positively impact organizations' SaaS security posture and operations.

Join us for this engaging discussion to learn from and celebrate the contributions of women in cybersecurity and envision a future of greater gender diversity and inclusion in the industry.

Empowering Women in Cybersecurity: Perspectives and Strategies for Success

Join us for an exclusive webinar dissecting the findings of DoControl's latest report, "The State of SaaS Data Security 2024." We'll unfold key insights derived from extensive analysis of SaaS usage trends. Discover the implications of exponential asset creation, rampant data oversharing, and prevalent security risks posed by third-party OAuth apps. Real-world case studies will showcase effective strategies for mitigating these risks and enhancing your organization's SaaS security posture.

Explore findings such as:
- 9 out of 10 companies have former employees who accessed assets stored in SaaS applications after they left the company.
- 64% of active third-party OAuth apps are over-permissioned.
- By the end of 2023, the average company had 35K sensitive assets exposed publicly.

Join us to gain actionable insights and optimize your organization's SaaS security.

The State of SaaS Data Security 2024

DoControl, in collaboration with Amazon Web Services (AWS), is tackling a significant challenge in contemporary Cloud Security – SaaS Security. In today's business landscape, the reliance on SaaS applications is paramount for boosting productivity and enabling seamless collaboration across the organization, but the overexposure of this sensitive data is unmanageable without the proper tooling in place. Through their partnership with AWS, DoControl has developed a SaaS Security Platform that offers real-time visibility, continuous monitoring, and no-code workflow automation to safeguard your entire SaaS threat landscape.

Join us in this session to gain insights into AWS and DoControl's Shared Responsibility model, and explore the importance of DoControl as a crucial component within a modern security infrastructure.

See you there!

Securing Your SaaS Environment with DoControl & AWS

Security teams of all sizes struggle to detect, triage, and respond to threats quickly and efficiently at scale. Simply put, visibility is a critical component to securing your cloud environments, and with DoControl’s SaaS security platform organizations will be able to identify malicious user activity across their cloud environments – helping reduce the likelihood and impact of an attack.   
 
Legato Security understands that resources and budgets are tight – and with a SOC that operates 24x7, we help organizations manage and remediate these identified threats. A dedicated team of security experts will help customers streamline and eradicate a threat quickly and efficiently, streamlining the day-to-day operations – and instantly improve their security posture. 
 
Join the conversation, and learn how DoControl and Legato Security will help you: 
* Identify blind spots and detect threats in the cloud 
* Create an optimal response plan 
* Reduce time-to-remediation and minimize the chances of a breach

Increasing Cloud Visibility to Mitigate and Respond to Attacks

Modern businesses increasingly rely on SaaS applications like Google Drive, Box, Dropbox, and Slack to facilitate daily exchanges of sensitive data and files. Although these tools allow for real-time collaboration that drives business enablement, their lack of granular access and security controls presents serious material risks for the businesses that use them. This webinar will outline ten of the most significant SaaS security risks associated with unmanageable data access within SaaS applications that your organization should be aware of.

The Top 10 SaaS Security Risks

A software supply chain attack targets the software development process, with the intent of introducing malicious code into “trusted” software packages. This attack typically involves compromising one or more of the components that make up the software supply chain. Upon successfully infiltrating the supply chain, attackers can then insert malicious code or backdoors into the software package. Compromising the supply chain allows for the ability to steal sensitive data, launch further attacks on the target organization or its customers, or take control of the affected systems and/or applications. Yikes!

In this webinar we will highlight software supply chain risks, as well as offer pragmatic recommendations and guidance to mitigate this type of increasingly common attack that targets Software as a Service (SaaS) applications.

Defending Against Supply Chain Attacks

Video: The Human and Machine Identity Problem in SaaS Environments

As SaaS environments become more complex and fragmented, the attack surface expands, and security becomes overwhelmingly burdensome. IT and Security teams are already strapped – having to do more with less – and the macroeconomic situation has impacted organizations across every industry vertical. An automated approach to SaaS security is required to navigate this current landscape, and transform the business at speed and scale.
Join us in this next installment in the DoControl webinar series as we explore key capabilities of a modern SaaS security program, and walk through the proof-of-value and ROI both in terms of financial return, as well as the valuable time and resources your teams are given back through automated remediation. We will highlight real-world customer ROI examples for both medium-sized organizations and large enterprises, as well as provide the necessary tools and resources to help build the business case for a SaaS security program.

The ROI of a SaaS Security Program

The concept of cloud applications have gone a long way from the days of peer to peer file sharing to modern enterprise solutions hosted in massive data centers. Nevertheless, there are areas in cloud applications, especially security, that can benefit from internationally recognized standards such as the ISO set of IT security standards. In this presentation, industry thought leader Ralph Villanueva will leverage his knowledge and experience in working with ISO standards to share some insights which can strengthen the audience’s cloud application security posture.

Key takeaway:
- Learn about ISO standards relevant to cloud application security.
- Discuss pointers for implementing the relevant aspects of these standards.
- Highlight ways to secure buy in from key stakeholders for implementation of these standards.

Optimizing cloud application security through relevant ISO standards

As more organizations adopt microservices, containers, Kubernetes, and serverless architectures, the complexity of their IT environments continues to grow, creating an expanded attack surface. Given the dynamic and complex nature of cloud-native environments, how confident are you in your development and security teams' ability to identify and prioritize the most significant security risks and remediate vulnerabilities in a timely manner to reduce the risk of a security breach? 
 
To secure cloud-native applications, organizations use multiple tools from different vendors. However, these tools are often not developer-friendly, creating a fragmented view of risk. This results in an excessive number of alerts that can waste developers' time and delay remediation efforts.
 
Join this fireside chat to learn why you need an end-to-end cloud application security solution in today’s dynamic and complex multi-cloud environment. And why it’s essential to address the most significant risks first, reducing the risk of a breach and saving valuable time and resources when time is of the essence.
 
Key takeaways:
 
• Improve Visibility: Gain real-time insights into security issues across cloud assets to reduce compliance violations and expedite deployment of cloud-native apps.
• Contextualize Risks: Prioritize vulnerabilities that can have the most significant impact on cloud apps.
• Enable Security through Collaboration: Prioritize vulnerabilities through collaboration among teams to develop effective remediation plans.

How to Prioritize Critical Vulnerabilities to Protect Your Cloud Applications

Security imposes a huge workload on app development teams.  Regardless of how many mobile developers or security professionals your organization has, there’s a good chance it’s not quite enough in today’s evolving mobile threat landscape.  
There is just no single fix for the mobile app security problem that developers are facing. 
Criminals are continuously developing new mobile-specific attacks, 3rd party audits take time and effort, and regulatory changes have an impact on mobile security. 
So, what’s the solution? 

In this webinar, an impressive team of mobile app experts will share strategies to help organizations follow a mobile first mindset, which includes app shielding that keeps apps protected from unknown attacks, thus making efficient use of developers’ time. 

Key topics will include: 
- How to speed up app releases without compromising security
- Preparing for a future when users will download apps from any app store
- Introducing user-friendly zero-code technology that requires no development skills


Dan McLoughlin, Field CTO OneSpan
Lucas Gibbons, Senior Product Manager
Alexander Kuznetsov, Solutions Sales Manager
Zlatan Cekro, Senior Experience Engineer

Enhancing Mobile App Security: Strategies for Conquering Business Obstacles

In the last 10 years, Azure has become one of the most popular cloud platforms for businesses and organizations of all sizes. As the platform has evolved, so has the threat landscape. To understand the present cloud security landscape and predict the future, let's take a trip down the memory lane!

In this session, cloud security expert Karl Ots will discuss how Azure's security controls have evolved over time. Throughout the session, he will share best practices for securing your Azure infrastructure, applications, and data, so that you can build an architecture that stands the test of time.

Top 10 Azure security tips from 10 years of securing Azure applications

Automation is a growing security problem that most organisations don’t recognise as many have no way of identifying which “users” are real humans and which are bots. Taking advantage of this blind spot, hackers can easily automate or scale attacks, imitate human mouse usage, or leverage AI tools like ChatGPT to assist in malicious coding and phishing campaigns.
 
And, because moderate and advanced bots can easily evade your defences by posing as human users, MFA, WAFs, and CAPTCHAs are no longer enough to mitigate this threat.

Watch this Fireside Chat featuring David Warburton, Director at F5 Labs, the threat research division of F5, and Editor in Chief at ComputerWeekly Bryan Glick to access an in-depth discussion on the state of attacker automation and learn how to shore up your app vulnerabilities against emerging threats.
 
Additional agenda items include:
 
• The type of attacks bots and automation are capable of
• Future trend predictions for AI-based attacks
• Why cloud migration complicates the bot defence process

The Future of Attacker Automation and AI

With cloud architectures, protecting both the application business logic and the underlying application infrastructure is paramount. However, as applications are deployed across multiple cloud environments, they often fail to deliver the desired app-to-app connectivity and security.  To simplify and secure your applications in an increasingly complex infrastructure, you need to deploy a Web Application and API Protection (WAAP) solution that enables consistent security across multi-cloud environments.

In this session, you will learn how you can:

•    Deploy WAF, DDoS, bot defence, and API security functions across multiple clouds
•    Combine WAAP with cloud workload protection to secure the cloud-native infrastructure
•    Gain valuable insights into application threats by leveraging AI and ML capabilities

By watching this webinar, your personal details will be shared with F5 and treated in accordance with the F5 Privacy Notice (https://www.f5.com/company/policies/privacy-notice). You also are signing up to be contacted about F5 products and services but you can unsubscribe at any time.

Protect Your Apps and APIs to Thrive in a Multi-Cloud World

Current IT environments and the reality of modern business practices have left organizations with no choice but to consider new security models. The need for security resilience and the ability for business leaders to protect the integrity of every aspect of their businesses so that they can withstand - not just survive - and emerge stronger from unpredictable threats or changes has never been greater. 

In this webinar, Enterprise Strategy Group’s Senior Analyst John Grady is in conversation with Doug Browne, Director for Cloud Security and SSE, APJC at Cisco Systems, to discuss why security service edge (SSE) is the best way that businesses can forge this security resilience. 

Join them to learn: 

- The security challenges that are forcing businesses to consider new security models 

- Drivers for SASE interest and the challenges and opportunities that SSE brings 

- Practical advice for planning and getting started with security service edge and SASE expansion 

- SSE use cases in Asia Pacific region. 

- Considerations for choosing vendor partners

Prioritizing SSE to Protect the Modern Digital Business

Tune into this session from industry thought leader Vincent Amanyi for insight on how to simplify you application security tooling and enable agility in your ecosystem. 

Attendees will come away with the knowledge to:
- Eliminate assumptions.
- Identify how to perform a comprehensive assessment.
- Strategy of implementing tools-based on complexities and evolution.

Considerations in application tooling

Only 8% of organizations have secured at least 75% of their cloud-native apps using DevSecOps (Enterprise Strategy Group).
 
DevOps is enabling faster deployment of more secure software to devices by tightly coupling development and operations functions. However, to ensure security, the DevOps pipeline itself must be secure. At the intelligent edge, mission-critical systems require that security is built into the development process for a true DevSecOps environment.

What you will learn:

- New security approaches for the emerging intelligent edge
- Methods for full lifecycle security for mission-critical systems
- Must-have development tools for security validation
- Lessons learned in the journey to build security into a DevSecOps environment

Security and the DevSecOps Platform: Approaches, Methods, and Tools

In today's digital landscape, ensuring the security of software applications has become paramount. With the rise in cyber threats and the potential for devastating breaches, organizations must adopt robust application security measures to protect their sensitive data and maintain user trust. 

This presentation from TD Bank's Pankul Chitrav aims to shed light on the critical role of application security tools and testing in fortifying software defenses.

Explore application security tools and testing to strengthen software defenses

Whether it is a new web application architecture creating new threat surfaces, new zero-day attacks challenging traditional security mechanisms, or the just the shortage of cybersecurity staff to keep track of it, organizations today are straining to defend against web application attacks and vulnerabilities.  The traditional ways worked no longer applies, and a new web application security paradigm is required to protect organizations against an emerging wave of web attacks.
 
Join this presentation to learn:
 
* What are the key trends in web application security, and what are the key challenges facing organizations
* How modern web application design architecture is creating new threat surfaces
* What are the criteria that web application security tools should meet, in order to protect organizations
* And how radware helps organizations defend themselves against emerging threats

Web Application Security is Broken. What Comes Next?

If shadow and zombie APIs are climbing your AppSec priority list, you’re not alone. Software development teams are increasingly using APIs for web applications and other needs, and that’s motivating attackers to find ways to exploit them.

In fact, security experts are predicting that APIs will continue to experience a growing number attacks. It’s a gap in application security testing that has become a growing problem for many teams.

This webinar will introduce our solution. Checkmarx has found a way to shift API security way left, giving AppSec teams complete API visibility and helping them fix problems earlier in the SDLC – faster and at a lower cost. Our experts will cover:

-   An explanation of shadow and zombie APIs
-   How Checkmarx identifies and fixes vulnerable APIs earlier in the SDLC
-   Remediation that prioritizes the vulnerabilities that represent real risks

Understanding Growing AppSec Concerns Around API Security

Web applications are moving from traditional back-end and front-end architecture, deployed in an organization’s physical data center, to modern multi-cloud, microservices, and Kubernetes architectures, opening up new threat surfaces along the way. 
 
How are you to, for instance, secure application vulnerabilities from supply-chain attacks when your data is dispersed across multi-cloud applications? How do you protect from vulnerabilities in 3rd and 4th-party libraries?
 
Join our experts deconstruct the most essential requirements for complete web application protection in the following Fireside Chat and explain: 
 
• New web application attack vectors, beyond the standard OWASP top 10
• How usage of 3rd and 4th-party libraries and APIs increases app vulnerabilities 
• The security and liability implications of using client-side logic and code 
• How Radware helps organizations protect their modern web applications.

Tune into this session to discover how to protect your web apps from these, and other, vulnerabilities.

How the New Web Application Architecture is Changing Web Application Security

In this in-depth talk, University of Washington's Deveeshree Nayak will discuss the benefits of implementing DevSecOps in businesses, emerging DevSecOps frameworks, and their use. 

Tune into this webinar to learn:
- What is DevSecOps?
- Why is this role important?
- How to pursue career in DevSecOps?
- Hiring and execution.

Ensure security with DevSecOps

In this webinar you will get insights into the latest data security trends, threats and emerging topics in the 2023 Thales Data Threat Report. Based on a survey of more than 3,000 IT security professionals across 18 countries around the world, the 2023 Data Threat Report presents a number of findings on top data security topics, including leading sources of data threats, ransomware attack trends, digital sovereignty, the threats of quantum computing, and challenges of cloud security - just to name a few.

Attendees will receive a free copy of the 2023 Thales Data Threat Report and will be able ask questions following the presentation by 451 Research, part of S&P Global Market Intelligence, who wrote the report.

Key Findings from the 2023 Thales Data Threat Report

Enterprises are increasingly relying on applications to drive business growth and success in the age of digital transformation. However, the rise of cyber threats has made ensuring the security of these applications more critical than ever before. Security concerns can often slow down digital transformation initiatives, but application security controls can help enterprises reduce costs and improve speed of delivery.

In this webinar, we'll provide a CXO's guide to application security in the age of digital transformation. We'll explore 
- Latest threats to enterprise applications and how to mitigate them.
- Risks associated with cloud-based applications and how to secure them. 
- How application security controls can reduce costs and improve speed of delivery. 
- Strategies and technologies to improve the security posture of enterprise applications.
- Role of DevSecOps in application security and how it can accelerate digital transformation efforts
- Best practices for integrating security into the development process
- How to balance security concerns with the need for innovation and agility in digital transformation initiatives.

A CXO's guide to application security in the age of digital transformation

Effective Application Security

Software as a Service (SaaS) applications bring the promise of business agility and enablement. But like any technology that provides significant benefit, there are often security implementations that become overlooked. As your business grows and scales, so does the risk imposed at the identity layer across the SaaS estate. In this session, we will highlight the identity problem in SaaS; from human identities (internal employees, external vendors, third party contractors, partners, etc.) to machine identities (application-to-application connectivity, 3rd party OAuth applications, etc.). Attend this session to better understand the risks imposed on every identity within the SaaS estate, and pragmatic approaches to improve your posture.

The Human and Machine Identity Problem in SaaS Environments

SaaS

SaaS security platform

Supply Chain

Data Protection

Supplier Risk

Malicious Activity

IT Security

Data Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The Human and Machine Identity Problem in SaaS Environments

Presented by

About this talk

DoControl