Name: True Tales from AppSec Customers
Start: 2022-08-18T20:00:00Z
End: 2022-08-18T20:00:46.000Z
Location: BrightTALK
Rating: 5

The GuidePoint Security Channel features presentations by leading real-world certified practitioners in the fields of AppSec, Cloud Security, Digital Forensics, Government Risk & Compliance, Identity & Access Management, Incident Response, Penetration Testing, Security Operations, Vulnerability Management and more. 

Chances are, your Security Operations Center (SOC) was built for a different time. 
Technology has evolved so quickly, that many SOC teams are struggling to keep up. With new tools, playbooks, and processes piled on,  many teams are drowning in alerts, untangling complexity and unsure of what’s actually a priority.

In this Brick House session, GuidePoint Security experts will explore how to address the evolving challenges faced by the modern SOC. From better utilizing AI and threat intelligence, aligning with organizational goals and so much more. Modernize and optimize your operations — without starting from scratch.

Prioritize clean, reliable logs
The role of responsive ticketing, incident response and tracking.

The Brick House: State-of-the-Art SOC (Modernize, Optimize, Repeat)

GuidePoint Security presents "The Brick House: Preparing for the Worst— Incident Response Planning." Join our expert IR Advisory team to learn practical strategies for developing effective incident response capabilities that can transform potential cyber disasters into manageable situations.
• How IR maturity assessments help identify strategic and operational gaps
• What makes tabletop exercises effective for team development and executive alignment
• The importance of designing IR plans and playbooks as adaptable resources—not static checklists

Whether you lead a security team or oversee risk at the organizational level, this discussion will offer guidance on how to make incident response a functional, tested part of your cybersecurity strategy.

Hosted by Gary Brickhouse, CISO at GuidePoint Security, featuring:
• Blake Cifelli, Senior Advisory Consultant
• Bob Bell, Director of Forensic Services/DFIR
• Mark Lance, Senior VP, DFIR & Threat Intelligence
• Tony Cook, VP Innovation, Threat Intelligence

The Brick House: Preparing for the Worst—Incidence Response Planning

Security Validation Through Attack Simulation

As the threat landscape evolves and attack surfaces continue to expand, traditional point-in-time security validation might no longer provide the coverage organizations need. Watch this Brick House roundtable to explore how security leaders are shifting toward continuous penetration testing and validation—using threat intelligence, automation and targeted simulations to stay ahead of adversaries.

This discussion will highlight how leading organizations are applying continuous testing practices—from red team operations to BAS platforms and phishing campaigns—to proactively assess risk across systems, people and supply chains.

In this webinar, you’ll learn about:
  • Third-party risk exposure and the expanding attack surface
  • The limitations of point-in-time validations
  • Building a business case for continuous security validation
  • The strategic use of tools and partners to simulate attacks from multiple perspectives
  • How threat-informed simulations drive more meaningful outcomes

This session brings together experts from GuidePoint’s Threat & Attack Simulation and Penetration Testing teams, sharing how continuous adversary emulation supports real-world resilience.
  • Alberto Rodriguez, Senior Managing Security Consultant
  • Cameron Stish, Senior Security Consultant
  • Dale Madden, Managing Security Consultant
  • Victor Wieczorek, Senior Vice President, Offensive Security

Whether you’re a cybersecurity executive building the strategy or a practitioner implementing the controls, this discussion will show why continuous validation is becoming a cornerstone of effective enterprise security.

The Brick House: Continuous Penetration Testing—Defending Against the Modern Threat Actor

Identity sits at the heart of modern cybersecurity, yet many organizations still grapple with achieving true IAM and PAM maturity. It’s time to move beyond the status quo and build a program that’s resilient, adaptive  and future-ready.

Join this roundtable discussion to learn from top identity security experts as they share actionable insights and proven frameworks for overcoming common IAM challenges, including:

• Prioritizing identity as your security perimeter 
• Continuous identity governance across hybrid and multi-cloud environments
• Create an integrated IAM and PAM strategy to tackle privileged security gaps
• Move to risk-based, continuous access validation
• Building executive alignment for sustained investment in IAM maturity

The Brick House: Identity First—Building & Sustaining a Resilient IAM Program

Ransomware Trends and Threat Intelligence You Can't Miss
Stay ahead in the dynamic world of cybersecurity with our latest presentation from the GuidePoint Research and Intelligence Team as they break down critical findings from Q2 2025, including:

The Shifting Threat Landscape
Explore the first significant drop in ransomware activity in years and what it means for cybersecurity professionals.

New Emerging Threats
Understand the rise of new ransomware groups and their evolving tactics.

Law Enforcement Effects
Gain insight into game-changing interventions disrupting major threat actors.

GRIT Q2 2025 Ransomware & Cyber Threat Report Presentation

Regulatory cybersecurity is no longer just a technical issue—it’s a business-critical risk. With evolving regulations, increased disclosure requirements and growing executive accountability, organizations must prioritize cybersecurity governance to protect their business, investors and reputation.

Key takeaways:
•Why aligning cybersecurity risk with business objectives is essential  
• How cyber risk quantification (CRQ) is revolutionizing risk management  
• Strategies to communicate effectively with stakeholders at all levels  
• How to utilize emerging tools (like AI!) to simplify risk management  
• Building sustainable governance frameworks that balance security and compliance

This is an important discussion for security leadership, executives, CISOs, as well as Governance, Risk and Compliance professionals looking to strengthen their cybersecurity governance strategy and stay ahead of regulatory expectations.

Our expert panel includes:
• Ben Moreland, Practice Director, IA
• Brian Betterton, Vice President, GRC, IA
• Emily O’Carroll, Senior Security Consultant, Southwest
• Denny Dean, Principal Security Advisor, GRC

The Brick House: Prioritizing Cybersecurity Risks for Maximum Business Impact

Cloud-Native Application Protection Platforms (CNAPP) are transforming how cloud environments are secured.  With 99% of cloud security breaches expected to result from misconfigurations and account compromises by 2027, understanding CNAPP is vital for safeguarding your cloud-native stack.
This discussion provides insights into simplifying multi-cloud security operations, managing risks more effectively, improving collaboration between security teams and developers, plus:
• Understanding CNAP and Its Role
• CNAPP Focus and Program Consolidations
• State of CNAP and Tool Integration
• Challenges and Strategies for CNAP Adoption
• Future of CNAP and Final Advice

Learn from the perspectives of  industry leaders and discover how these solutions can strengthen your cloud security posture.

The Brick House: CNAPP for Modern Enterprises—Securing the Cloud

In this Brick House webinar, a panel of AI and Governance experts from GuidePoint Security engaged in a discussion about the complexities of AI Governance, emphasizing the need for effective oversight as AI technologies evolve. The panel discussed the importance of expediting approval processes for AI use cases while ensuring that policies are well-communicated and understood across organizations. They addressed the challenges posed by shadow AI and the necessity of maintaining visibility in AI usage, as well as the critical role of legal teams in governance. The conversation also touched on the need for transparency from AI model developers and the management of risks associated with third-party AI vendors. Watch now to learn more about AI oversight and the collaborative effort required across various departments to navigate the rapidly changing landscape of AI governance.

The Brick House: AI Governance Fundamentals for Compliance II

Cyber attackers started 2025 at a staggering pace. What does this mean for the rest of the year? How do organizations prepare? 

The GuidePoint Security’s Research and Intelligence Team (GRIT) present their key findings from the Q1 2025 Ransomware & Cyber Threat Report that highlights:
• A rise in ransomware activity, with 70 distinct groups observed
• Significant campaigns by Clop, Akira and Ransomhub
• Nonprofit organizations experienced a shocking rise in attacks, while manufacturing also saw increased targeting
• Law enforcement disruption of key players like 8base
• Emerging threats, such as Hellcat, highlight the evolution of ransomware-as-a-service (RaaS) operations

Hear directly from the authors of the report as they break down trends, threat actor tactics and what it all means for defenders in 2025.

GRIT 2025 Q1 Ransomware & Cyber Threat Report Presentation

Traditional Vulnerability Management focuses on discovering weaknesses—while prioritization, validation and remediation remain major challenges. Continuous Threat Exposure Management (CTEM) enhances existing security functions to help teams focus on real threats and take meaningful action.

Watch this expert-led discussion on how CTEM enhances multiple security practices including VM, AppSec, and Cloud Security; shifts the focus to exploitable risks with prioritization and validation; and closes the gap between security teams and remediations owners.

The Brick House: Evolving Vulnerability Management with CTEM

As artificial intelligence becomes a core part of business and cybersecurity strategies, effective governance is critical. Organizations must ensure AI systems are secure, transparent and compliant with evolving regulations—yet many face challenges such as unclear requirements, lack of expertise and the struggle to monitor AI use effectively.
• Compliance requirements and evolving regulatory expectations
• The importance of discovery, monitoring, and security controls
• Balancing AI innovation with risk management

The Brick House: AI Governance Fundamentals for Compliance & Security

Converged Identity Platforms (CIP) are emerging as a groundbreaking approach for consolidating multiple identity solutions into a single, centralized platform. By integrating Identity Governance and Administration (IGA), Access Management, Privileged Access Management (PAM), Vendor Access Management (VAM), and Governance, Risk, and Compliance (GRC), CIP offers a holistic strategy to fortify security at the identity level.

Watch this timely and insightful roundtable discussion where cybersecurity experts explore how CIP is reshaping the future of access controls.

The Brick House: Identity Platform Convergence & the Future of Access Controls

Annual Ransomware Retrospective: 2024 Insights & 2025 Expectations
Ransomware remained one of the most persistent and disruptive threats organizations faced in 2024. The GRIT 2025 Ransomware & Cyber Threat Report Presentation from the GuidePoint Research and Intelligence Team (GRIT) is your trusted source for understanding the state of ransomware, contemporary cybercrime and their broader implications for the cybersecurity community.

GRIT 2025 Ransomware & Cyber Threat Report Presentation

Watch a panel of seasoned cybersecurity leaders as they explore the pressing trends and challenges that will shape the market. Get practical advice from industry experts who share their real-world experiences adopting new technologies, managing risks and developing security strategies. 

Learn about the important trends in the informational "Fact or Fiction" segment where you will hear different perspectives to help you prepare your organization.
• Continuous assessments and holistic CTEM models
• Identity and Access Management (IAM) innovation and cloud transformation
• The balance between consolidation and innovation
• How generative AI technologies will shape cybersecurity

The Brick House: Moving the Needle—Cyber Trends Shaping the Market

As cloud environments grow more complex, the need to effectively manage access and secure applications has become more urgent than ever. Cloud security is no longer just about protecting infrastructure—it’s about ensuring that the right people have access to the right resources and that applications themselves are fortified against evolving threats.

Watch this discussion on how integrating Identity and Access Management (IAM) and Application Security (AppSec) can strengthen your cloud security posture. They will discuss key strategies for securing user access across multi-cloud environments, addressing vulnerabilities in cloud-native applications and building a unified defense strategy. Whether you are dealing with multi-cloud environments, hybrid infrastructures, or cloud-native applications, this discussion will provide actionable insights to protect your organization’s most valuable assets.

Panelists:
Kevin Converse, Vice President, Identity and Access Management
Jonathan Villa, Practice Director, Cloud Security
Robert Darwin, Senior Director of Security Engineering

The Brick House: Unified Cloud Defense With Identity, Access and Application Security

This report presentation by Jason Baker and Grayson North from GuidePoint's Research and Intelligence Team covered the July-September 2024 ransomware landscape including industry, geography, group activity and trends. Key points included the emergence of new prolific groups like Ransomhub, which saw a 150% increase in victims, and the decline of traditional heavyweights like Lockbit and Alpha/Black Cat. The total number of observed victims dropped by 22% compared to the same period last year. The discussion highlighted the shift to a "new middle class" of ransomware groups and the impact of law enforcement disruptions. Additionally, the use of AI in ransomware operations and phishing techniques exploiting legitimate services were noted.

Exploring Ransomware's Emerging Middle Class Evolving Cyber Threats—A GRIT Presentation

[PART TWO] In Part One of our series, we explored the threat intelligence life cycle, the importance of setting intelligence requirements and how threat modeling helps identify adversaries and protect your organization.

In Part Two of our series, we build on those concepts by discussing the importance of continuous improvement, feedback loop and aligning threat intelligence with an organization’s security goals. Our panelists will also touch on how to enhance threat intelligence maturity, refine intelligence objectives and further integrate these practices into daily operations. Don’t miss this in-depth discussion on advancing your threat intelligence program.

Featured Panelists:
• Tony Cook, Senior Director, DFIR & Threat Intelligence, GuidePoint Security
• Jason Baker, Principal Security Consultant
• Will Baxter, Security Engineer, Team Cymru
• Henry Carpenter, Senior Solutions Engineer, Cyware
• Dan Kropp, Director of Intelligence Services, Recorded Future

Part Two: A Day in the Life of a Threat Analyst

[PART ONE] Get a behind-the-scenes look at the daily routines of threat analysts working on the front lines of cyber intelligence. In this live panel, experts from GuidePoint Security, Cyware, Team Cymru, and Recorded Future discuss the workflows, tools and strategies they rely on to defend against evolving threats. Whether you're sharpening your skills or exploring new career paths, this session offers valuable insights into the world of threat intelligence.

Featured Panelists:
• Tony Cook, Senior Director, DFIR & Threat Intelligence, GuidePoint Security
• Jason Baker, Principal Security Consultant, GuidePoint Security
• Will Baxter, Security Engineer, Team Cymru
• Henry Carpenter, Senior Solutions Engineer, Cyware
• Dan Kropp, Director of Intelligence Services, Recorded Future

Part One: A Day in the Life of a Threat Analyst

Ransomware has plagued a wide range of organizations for several years and instead of getting better it’s getting worse. On the surface it appears the controls organizations are deploying aren’t working. But more correctly, organizations are failing to deploy the right controls. Attend this session to learn how to stop ransomware and all the *wares. You will leave this session with a manageable list of actionable steps to secure your environment and ensure your organization vaults above the cybersecurity poverty line!


About the speakers:

Jon Villanti is the Chief Information Security Officer for Allegiance Bank, a 600-employee, $7.1-billion community bank headquartered in Houston. Jon is responsible for the strategic direction and alignment of the bank’s Information Security Program. He is a former instructor for the SANS Technical Institute, teaching courses on information security, cyber warfare and hacker tactics. Lieutenant Colonel Villanti (Ret) honorably served the United States Air Force for 29 years as a member of the Intelligence Community, F-16 pilot and Cyberspace Operations Officer. Jon holds a B.S. in Business Administration from the University of Vermont and a number of cybersecurity certifications.

Andres Ruz is Chief Information Security Officer at 5 Factor Technology and has over 20 years of global experience in IT and information security. He has an MBA in MIS, a Bachelor’s in computer science and eight certificates in information technology management and information security. He is the founder of the Houston Banking Information Sharing and Analysis Organization (ISAO), where he collaborates with leaders in this sector, helping each other to better protect their companies. He is also the part of the Board of Directors and Sector Chief for the Telecommunications Cross Sector Council (CSC) of the InfraGard with the FBI.

Defeating Ransomware: Security Controls That May Surprise You

NOW AVAILABLE ON-DEMAND

The 2022 SonicWall Cyber Threat Report revealed more than 20,000 Common Vulnerabilities and Exposures (CVEs) were published in 2021, the first time in history that the number of CVEs has passed the 20,000 mark. The most serious of these vulnerabilities, those scored above nine on the 10-point scale, become entry points for cybercriminals, and attackers are increasingly utilizing this means of entry to deploy ransomware and steal data. 

Watch now to hear our expert cover:
- Exploited threat vectors and what to look out for
- Critical zero-days used to wreak havoc on businesses and governments
- Actionable insights for you and your organization

The Year of Zero Days – Defending Against the Million Dollar Threat

Application Security for Billions: Lessons Learned from Securing Web Apps and APIs at Internet Scale

Whenever you hear people talking about web and application security, you’ll often learn about the latest way to make sure you’re not ingesting user supplied input the wrong way, or how to write secure code to prevent cross site scripting, etc. 

But, have you ever wondered what it’s like to secure business critical websites, and the ever-evolving growth of API’s and bespoke applications that are developed every day across thousands of websites in dozens of countries around the world?

In this webinar, Tony Lauro, Akamai’s Security Technology and Strategy Director, will cover:
- What defenders are doing at scale to defend the evolving threats targeting websites 
- Methods for cutting out the noise of benign, but annoying vulnerability verification requests
- Best practices for managing large scale security configurations
- Some of the ways that defenders are winning against these unimaginable odds, as well as how attackers are targeting these very same applications hoping to bypass security by obscuring their attack techniques

Lessons Learned from Securing Web Apps and APIs at Internet Scale

Tune into this webinar to discover the basics of threat intelligence and how to acquire it. We will also dive into cyber maturity -- what it means and how to best measure it -- as well as the five best steps to improve cyber resiliency. Attendees will also learn the dire consequences that come with deprioritizing cybersecurity in the organization so they can ensure they don't fall victim to a breach.
 
Audience takeaways:
•         The value of threat intelligence for organizational security.
•         Measuring your cyber maturity.
•         Steps to improve your cyber resilience.
•         Turn threat intelligence into business intelligence.

Life's a Breach: Understand Threat Intelligence, Cyber Maturity and Resiliency

During this exclusive fireside chat, moderated by Jo Peterson, Sonali Shah, will look to address the following topics:

- Are unsecure applications just plain easy targets maybe even easier than email?
- What are the top 3 application security challenges organizations face today?
- Why web applications will continue to be a main vector for external attacks 
- With Open source continuing to grow, what can organizations do to put themselves in a better position in 2023.

Fireside Chat with Invicti and Clarify360 on Application Security

The pandemic rapidly accelerated digital transformation for organizations around the world. Now that the pandemic is behind us, new risks and new threats have emerged in the wake of such rapid and uncontrolled change. This talk will cover what threats to expect for the rest of this year and early next and what can organizations do today to start to get ahead of what’s coming at them.

About the speaker:

John Bambenek is the President and Chief Forensic Examiner for Bambenek Consulting. He began his career 20 years ago at Ernst & Young as a Project Manager and Senior Consultant providing IT architecture services to top Fortune 500 Firms. He has worked in both the public and private sector providing consulting to financial services providers. He is a published author and has contributed to IT security courses and certification exams covering subjects such as penetration testing, reverse engineering malware, forensics and network security. He has participated in many incident investigations spanning the globe including the DNC breach and election-related hacking during the 2016 US Presidential campaign. He has appeared in as an expert in the New York Times, Washington Post and was once on The Daily Show with Jon Stewart.

The Post-Pandemic Threat Landscape

Unlike monolithic applications of the past, where coding was all in the same language, an average cloud-native application can have anything from 50-5,000 different components. The problem is, any one of those could be rife with vulnerabilities that present an expanding attack surface. Although organizations use an abundance of AST tools to test their code, they all lack results correlation, and that missing piece distorts their view of their overall security risks.

Checkmarx recognizes the inefficiency of trying to manually correlate results from the many siloed testing solutions, and the deficiency of alternate solutions that merely aggregate results. It led us to develop Checkmarx Fusion to provide advanced correlation in modern application development environments.

In this webinar, join Stephen Gates, senior solution specialist, and Miki Sharon, senior product manager, Checkmarx, for a deep dive on Checkmarx Fusion and Checkmarx One AST Platform.

    Learn which AppSec testing approaches don’t fit well in modern development environments
    See the new functionality Checkmarx Fusion brings to the software development industry
    Understand the main use cases of Checkmarx Fusion and Checkmarx One and what’s included
    View live demonstrations of both solutions in action, performed by our subject matter experts
    After this webinar, you’ll fully understand why your AppSec testing approach is flawed.

Without Correlation, Your AppSec Testing Approach Needs an Update

Application Developers are increasing taking the “DevSecOps” ethos to heart. They are realizing that security is not just something that gets bolted onto apps or around networks. Instead, security needs to be built into the applications that they create. While many have turned to SAST solutions to identify vulnerabilities such as Log4Shell in Log4J, others rightfully wonder how to protect the code that they write themselves, code that – by definition – contains working examples of how to penetrate the security perimeter that their InfoSec colleagues have put in place.

This webinar shows:

* How threat actors reverse engineer applications
* How a “Protection Blueprint” secures applications
* What unobfuscated and disassembled machine code looks like to a threat actor
* How obfuscated machine code makes the threat actor’s job more difficult
* What anti-tamper measures do to prevent reverse engineering of applications

How to Build a Blueprint for Secure Software

A lot is expected of software developers these days; they are expected to be experts in everything despite very little training. Throw in the IT security team (often with little-to-no knowledge of how to build software) telling developers what to do and how to do it, and the situation becomes strained. This silo-filled, tension-laced situation, coupled with short deadlines and pressure from management, often leads to stress, anxiety and less-than-ideal reactions from developers and security people alike. This session will explain how job insecurities can be brought out by IT leadership decisions, and how this can lead to real-life vulnerabilities in software. This is not a talk about “feelings;” this is a talk about creating programs, governance and policies that ensure security throughout the entire SDLC.

No more laying blame and pointing fingers, it’s time to put our egos aside and focus on building high-quality software that is secure. Application security expert Tanya Janca will explore the cause and effect of insecurities and other behavioral influencers and present several detailed and specific solutions that can be implemented at your own place of work, immediately.


About the speaker:

Tanya Janca, also known as SheHacksPurple, is the best-selling author of Alice and Bob Learn Application Security. She is the Director of Developer Relations and Community at Bright Security, as well as the founder of We Hack Purple, an online learning community that revolves around teaching everyone to create secure software. Tanya has been coding and working in IT for over 25 years, won countless awards, and has been everywhere from public service to tech giants, writing software, leading communities, founding companies and “securing all the things.” She is an award-winning public speaker, active blogger and streamer, and has delivered hundreds of talks on six continents. She values diversity, inclusion, and kindness, which shines through in her countless initiatives.

Why Can't We Make Secure Software?

Every 39 seconds, someone in the world gets hit with a cyberattack. When this happens, backup remains the last line of defense to protect most applications and data. How vulnerable is your backup environment? Join this presentation to learn about comprehensive security measures every company needs in place to secure a clean, current backup so you can recover when hackers breach your back door. We will also share one company’s recent ransomware attack experience, including the impact of security measures and the lessons learned.

Talking points:

The three common threat pillars
Key areas for implementing comprehensive backup security
Back from the brink: case study of a customer cyberattack

Eliminate Ransomware Risks With the Right Backup Strategy

Once considered an afterthought in software design, in today's cloud-native, app-centric world, application security must be top of mind. Widespread applications usage over distributed and public networks invites a variety of potential threats. Frequent testing and adherence to application security best practices can limit the possibility of unauthorized code being used to steal, share or modify sensitive user information.

This panel of experts will discuss the importance of a comprehensive application security program that incorporates best practices, threat identification and security testing.

Join us to learn about:

--Potential application threats
--Program requirements for app security
--Implementing app security standards
--Using DevSecOps initiatives to improve security
--Application security testing methods

Moderator:
Jo Peterson VP, Cloud & Security Services at Clarify360 

Panelists:
Stan Lowe, CISO of Synchronoss Technologies
Matt Decapua, Application Security Architect for Travel + Leisure
Daniel Shugrue, Lead Product Marketer at Digital.ai

Update Your Application Security Strategy

Malicious actors exploit human nature to get what they want.  Technology can help, but it is not going to stop everything. Once a malicious actor is in direct communication with someone in your organization, there is little that your technology can do. This talk covers the fundamental reasons for the necessity of a security awareness program in every organization and provides a model of what it should look like. 

Key takeaways include:

--The properties of a good security awareness program

--Security-aware policy

--The limits and value of technical solutions as they pertain to social engineering attacks


About the speaker:
Joseph Carrigan is a Software Engineer with over 17 years of software development experience in a broad range of fields including computer and software security, microcontroller development, data migration, data integration, data warehousing and network communication. He has a B.S. (’99) in Computer and Information Science from The University of Maryland, University College and an M.S. (’08) in Computer Science from Capitol College.

Social Engineering and Security Awareness

Attack surfaces are expanding, spurred on by the continuous release of new digital services and business transformation. In this session, you will learn why it’s time to implement an attack resistance management strategy to find unknown risks missed by automated tools, then unlock the security expertise of ethical hackers to identify critical gaps and prioritize fixes for your exploitable assets.

About the Speaker:
Sean Ryan is a Sr. Principal, Product Marketing Manager at HackerOne, where he helps organizations to identify the gaps in their security posture and improve their attack resistance. Prior to joining HackerOne, Sean worked for a prominent industry analyst firm covering identity security, and before that he led the market & competitive intelligence practice for a Fortune 500 IT infrastructure and security software provider.

Build Resistance to Attacks by Unlocking the Value of Ethical Hackers

Let’s take a moment to consider your Enterprise Security Program.  Is it healthy and functional?  Do you have the right people and processes?  How are you layering security controls to be most successful?  In this session we will discuss the components and management framework that result in a successful Enterprise Security Program.  You can expect to learn:

How do the most successful organizations structure their security controls?
What are the enterprise strongholds that attackers are actively exploiting?
What are some quick wins you can perform to get C-level buy in for furthering your Security Program?

Building a Robust Enterprise Security Program

Measuring the impact of security operations in reducing risk can be incredibly difficult. This challenge is compounded when poor metrics, that do not meaningfully reflect the work done by security teams, mask systemic problems. This is something we must get right to justify ever-growing investments in defensive teams, tools, and process. 

In this webinar, discover some commonly accepted security metrics that rarely tell a complete or compelling story and why they fall short. With that, attendees will learn better ways to identify high-quality metrics that tell a better (and more honest) story.
 
Attendees will leave the session with an understanding of:
• What makes a metric useful in defense operations;
• Commonly used security metrics and how they hide the truth; 
• An approach to picking compelling, comprehensive security metrics.

Your Security Metrics Are Lying (And What To Do About It)

Covid has seen the SME adopt technology at a fast and furious pace -- but at what cost? With this adoption comes an increase in cybersecurity risks. Cybercriminals have acquired newer and better techniques, but their SME targets have yet to recognize the need for an Enterprise Security Management framework to establish and sustain security for critical infrastructure.

Join BCyber’s Co-Founder & CEO Karen Stephens as she unlocks the mysteries of Enterprise Security Management in 2022 for the SME. Today, through the lens of an SME, you will gain an introductory understanding of:
• What Enterprise Security Management is;
• Why it is important; 
• Practical steps on how you can start your journey.

A Road Less Traveled: Learning the Value of SME Enterprise Security Management

Cyberattackers are not showing any signs of slowing down -- in fact, cyberattacks are worsening. Several factors are responsible for that with some being directly linked to the global pandemic – thanks, COVID! Infosec teams must change their security practices to address the challenges of today and the future. In this conversation among experts, you will gain insights to help you keep your organization secure in an evolving threat landscape. 

Learn how can you limit the impact of future ransomware and supply chain attacks, how you can differentiate cloud security solutions, and more.

Moderated by:
Melinda Marks, Senior Analyst, ESG

Featuring:
Matt Hathaway, Chief Strategy & Marketing Officer, TrueFort

Limiting the Impact of Future Ransomware Threats

Securing your network against bad actors requires visibility to detect and respond to the inevitable attacks on your organization. You can’t stop what you can’t see! The good news is you have the data you need in your network data. The bad news is that you may not be using that data to identify and mitigate cyberattacks. 

Join us in this webinar to learn the innovative ways that Advanced Network Detection and Response, based on scalable deep packet inspection from your network, will help your organization achieve comprehensive security protection with:

• Always on, real-time detection of network activity to halt attackers in their tracks

• Visibility into your dynamic attack surface and its traffic

• Lateral movement tracking of attack to respond and mitigate quickly

• Unlimited historical perspective of attack

Leverage Network Data To Minimize Your Cybersecurity Risk

Timely remediation: It’s critical to responding to active threats in an environment. Knowing when (and when not) to apply automation is equally important. Given the speed at which threat actors can progress through the attack lifecycle, configuring automated remediation steps can go a long way. Hear how Expel approaches incident response and puts auto-remediation into practice.

The steps to sensible auto-remediation

Threats like malware and denial-of-service attacks have been around since the earliest days of the internet, and the cybersecurity industry has created generations of threat detection and response tools to identify and remediate them. As security threats continue to evolve and advance, the tools to identify and stop them need to evolve as well.

This panel of security experts will explore how security teams can shift form using reactive to proactive measures, utilizing a host of emerging tools and technologies. Join us to learn about:

--Endpoint-focused technologies such as XDR
--AI's role in reshaping threat detection
--Threat detection and intelligence services
--Security observability tools that improve breach detection
--Using tools within a zero-trust framework to limit vulnerabilities

Panelists:
Steve Cobb, CISO at One Source Communications
Dave Stufflebeam, Principal Sales Engineer at Digital.ai

It's Time to Modernize Threat Detection

Threat detection has become an important consideration for entities of all sizes and verticals. What originally began as logging and security-centric alerting by point products has morphed into a multi-million dollar industry of threat detection and response solutions and services. Offerings are comprised of vendor-agnostic log collection, analytics and correlation capabilities, threat intelligence feeds, and other tools geared towards reducing mean time to detect and respond. 

In this session, we’ll review the evolution of log collection and discuss the major components of today’s detection services and solutions. Viewers who are debating whether to outsource their detection and investigation needs or build their own SOC teams and manage their own solution will come away with much food for thought.

Understand Threat Detection and Response Solutions and Services

Organisations have never been more connected or vulnerable. Threats evolve at rapid pace and cybersecurity has failed to keep up. 
Proactive and preventive cybersecurity measures have previously been little more than an aspiration. No more! Machine learning and artificial intelligence allows us to stop cyberthreats in their tracks.

Join Jonathan Jackson – Director Sales Engineering, from the BlackBerry Cybersecurity team in APAC to learn:
- The current cybersecurity trends 
- What’s changed?
- How you can apply prevention-first security to your own organisation to combat cyber threats.

It’s time to outsmart and outlast modern cyber threats.

The Evolution of Prevention-First Cybersecurity

Organizations face a constant barrage of cyber threats that could lead to business disruption, intellectual property theft, and reputation damage. But preventing such attacks has become increasingly challenging due to business factors like supporting the remote worker population, connecting IT to third-party partners, and developing new types of applications for digital transformation. 

How can CISOs balance the need for aggressive IT initiatives for business enablement while managing and mitigating cyber risk? ESG Senior Principal Analyst and Fellow, Jon Oltsik, will discuss best practices for cyber-threat and breach prevention that can protect and support the business.

Outwit Attackers with a Proactive Cybersecurity Plan

Combating Cyber Threats & Breach Prevention 2022

Customers tell the best stories. This is an adventure story set in the world of AppSec told by
GuidePoint Security’s rockstar AppSec customers like The Motley Fool + Insight Global. Their live talk will cover trending AppSec topics + peeking into the future. A genuine discussion about their triumphs + challenges they encounter every day working as an industry leader in Application Security.

You’ll get to know our remarkable AppSec customers through their comments around the
following thought-provoking topics + more:

• Shifting Left: How far left do you shift and what does that truly mean?
• Quality code is secure code. Why AppSec isn’t so special.
• The future of API protection

Spend an hour with our customers. We bet you’ll find a lot in common.

True Tales from AppSec Customers

Application Security

Security

appsec

API Management

IT Security

Incident Response

Cyber Attacks

Cyber Security

CISO

Cyber Crime

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

True Tales from AppSec Customers

Presented by

About this talk

GuidePoint Security Channel