Name: BIG G. little g. One Goal. Achieving a Robust Cloud Governance Framework
Start: 2023-08-03T20:00:00Z
End: 2023-08-03T20:00:54.000Z
Location: BrightTALK
Rating: 5

The GuidePoint Security Channel features presentations by leading real-world certified practitioners in the fields of AppSec, Cloud Security, Digital Forensics, Government Risk & Compliance, Identity & Access Management, Incident Response, Penetration Testing, Security Operations, Vulnerability Management and more. 

Regulatory cybersecurity is no longer just a technical issue—it’s a business-critical risk. With evolving regulations, increased disclosure requirements and growing executive accountability, organizations must prioritize cybersecurity governance to protect their business, investors and reputation.

Key takeaways:
•Why aligning cybersecurity risk with business objectives is essential  
• How cyber risk quantification (CRQ) is revolutionizing risk management  
• Strategies to communicate effectively with stakeholders at all levels  
• How to utilize emerging tools (like AI!) to simplify risk management  
• Building sustainable governance frameworks that balance security and compliance

This is an important discussion for security leadership, executives, CISOs, as well as Governance, Risk and Compliance professionals looking to strengthen their cybersecurity governance strategy and stay ahead of regulatory expectations.

Our expert panel includes:
• Ben Moreland, Practice Director, IA
• Brian Betterton, Vice President, GRC, IA
• Emily O’Carroll, Senior Security Consultant, Southwest
• Denny Dean, Principal Security Advisor, GRC

The Brick House: Prioritizing Cybersecurity Risks for Maximum Business Impact

Cloud-Native Application Protection Platforms (CNAPP) are transforming how cloud environments are secured.  With 99% of cloud security breaches expected to result from misconfigurations and account compromises by 2027, understanding CNAPP is vital for safeguarding your cloud-native stack.
This discussion provides insights into simplifying multi-cloud security operations, managing risks more effectively, improving collaboration between security teams and developers, plus:
• Understanding CNAP and Its Role
• CNAPP Focus and Program Consolidations
• State of CNAP and Tool Integration
• Challenges and Strategies for CNAP Adoption
• Future of CNAP and Final Advice

Learn from the perspectives of  industry leaders and discover how these solutions can strengthen your cloud security posture.

The Brick House: CNAPP for Modern Enterprises—Securing the Cloud

In this Brick House webinar, a panel of AI and Governance experts from GuidePoint Security engaged in a discussion about the complexities of AI Governance, emphasizing the need for effective oversight as AI technologies evolve. The panel discussed the importance of expediting approval processes for AI use cases while ensuring that policies are well-communicated and understood across organizations. They addressed the challenges posed by shadow AI and the necessity of maintaining visibility in AI usage, as well as the critical role of legal teams in governance. The conversation also touched on the need for transparency from AI model developers and the management of risks associated with third-party AI vendors. Watch now to learn more about AI oversight and the collaborative effort required across various departments to navigate the rapidly changing landscape of AI governance.

The Brick House: AI Governance Fundamentals for Compliance II

Cyber attackers started 2025 at a staggering pace. What does this mean for the rest of the year? How do organizations prepare? 

The GuidePoint Security’s Research and Intelligence Team (GRIT) present their key findings from the Q1 2025 Ransomware & Cyber Threat Report that highlights:
• A rise in ransomware activity, with 70 distinct groups observed
• Significant campaigns by Clop, Akira and Ransomhub
• Nonprofit organizations experienced a shocking rise in attacks, while manufacturing also saw increased targeting
• Law enforcement disruption of key players like 8base
• Emerging threats, such as Hellcat, highlight the evolution of ransomware-as-a-service (RaaS) operations

Hear directly from the authors of the report as they break down trends, threat actor tactics and what it all means for defenders in 2025.

GRIT 2025 Q1 Ransomware & Cyber Threat Report Presentation

Traditional Vulnerability Management focuses on discovering weaknesses—while prioritization, validation and remediation remain major challenges. Continuous Threat Exposure Management (CTEM) enhances existing security functions to help teams focus on real threats and take meaningful action.

Watch this expert-led discussion on how CTEM enhances multiple security practices including VM, AppSec, and Cloud Security; shifts the focus to exploitable risks with prioritization and validation; and closes the gap between security teams and remediations owners.

The Brick House: Evolving Vulnerability Management with CTEM

As artificial intelligence becomes a core part of business and cybersecurity strategies, effective governance is critical. Organizations must ensure AI systems are secure, transparent and compliant with evolving regulations—yet many face challenges such as unclear requirements, lack of expertise and the struggle to monitor AI use effectively.
• Compliance requirements and evolving regulatory expectations
• The importance of discovery, monitoring, and security controls
• Balancing AI innovation with risk management

The Brick House: AI Governance Fundamentals for Compliance & Security

Converged Identity Platforms (CIP) are emerging as a groundbreaking approach for consolidating multiple identity solutions into a single, centralized platform. By integrating Identity Governance and Administration (IGA), Access Management, Privileged Access Management (PAM), Vendor Access Management (VAM), and Governance, Risk, and Compliance (GRC), CIP offers a holistic strategy to fortify security at the identity level.

Watch this timely and insightful roundtable discussion where cybersecurity experts explore how CIP is reshaping the future of access controls.

The Brick House: Identity Platform Convergence & the Future of Access Controls

Annual Ransomware Retrospective: 2024 Insights & 2025 Expectations
Ransomware remained one of the most persistent and disruptive threats organizations faced in 2024. The GRIT 2025 Ransomware & Cyber Threat Report Presentation from the GuidePoint Research and Intelligence Team (GRIT) is your trusted source for understanding the state of ransomware, contemporary cybercrime and their broader implications for the cybersecurity community.

GRIT 2025 Ransomware & Cyber Threat Report Presentation

Watch a panel of seasoned cybersecurity leaders as they explore the pressing trends and challenges that will shape the market. Get practical advice from industry experts who share their real-world experiences adopting new technologies, managing risks and developing security strategies. 

Learn about the important trends in the informational "Fact or Fiction" segment where you will hear different perspectives to help you prepare your organization.
• Continuous assessments and holistic CTEM models
• Identity and Access Management (IAM) innovation and cloud transformation
• The balance between consolidation and innovation
• How generative AI technologies will shape cybersecurity

The Brick House: Moving the Needle—Cyber Trends Shaping the Market

As cloud environments grow more complex, the need to effectively manage access and secure applications has become more urgent than ever. Cloud security is no longer just about protecting infrastructure—it’s about ensuring that the right people have access to the right resources and that applications themselves are fortified against evolving threats.

Watch this discussion on how integrating Identity and Access Management (IAM) and Application Security (AppSec) can strengthen your cloud security posture. They will discuss key strategies for securing user access across multi-cloud environments, addressing vulnerabilities in cloud-native applications and building a unified defense strategy. Whether you are dealing with multi-cloud environments, hybrid infrastructures, or cloud-native applications, this discussion will provide actionable insights to protect your organization’s most valuable assets.

Panelists:
Kevin Converse, Vice President, Identity and Access Management
Jonathan Villa, Practice Director, Cloud Security
Robert Darwin, Senior Director of Security Engineering

The Brick House: Unified Cloud Defense With Identity, Access and Application Security

This report presentation by Jason Baker and Grayson North from GuidePoint's Research and Intelligence Team covered the July-September 2024 ransomware landscape including industry, geography, group activity and trends. Key points included the emergence of new prolific groups like Ransomhub, which saw a 150% increase in victims, and the decline of traditional heavyweights like Lockbit and Alpha/Black Cat. The total number of observed victims dropped by 22% compared to the same period last year. The discussion highlighted the shift to a "new middle class" of ransomware groups and the impact of law enforcement disruptions. Additionally, the use of AI in ransomware operations and phishing techniques exploiting legitimate services were noted.

Exploring Ransomware's Emerging Middle Class Evolving Cyber Threats—A GRIT Presentation

[PART TWO] In Part One of our series, we explored the threat intelligence life cycle, the importance of setting intelligence requirements and how threat modeling helps identify adversaries and protect your organization.

In Part Two of our series, we build on those concepts by discussing the importance of continuous improvement, feedback loop and aligning threat intelligence with an organization’s security goals. Our panelists will also touch on how to enhance threat intelligence maturity, refine intelligence objectives and further integrate these practices into daily operations. Don’t miss this in-depth discussion on advancing your threat intelligence program.

Featured Panelists:
• Tony Cook, Senior Director, DFIR & Threat Intelligence, GuidePoint Security
• Jason Baker, Principal Security Consultant
• Will Baxter, Security Engineer, Team Cymru
• Henry Carpenter, Senior Solutions Engineer, Cyware
• Dan Kropp, Director of Intelligence Services, Recorded Future

Part Two: A Day in the Life of a Threat Analyst

[PART ONE] Get a behind-the-scenes look at the daily routines of threat analysts working on the front lines of cyber intelligence. In this live panel, experts from GuidePoint Security, Cyware, Team Cymru, and Recorded Future discuss the workflows, tools and strategies they rely on to defend against evolving threats. Whether you're sharpening your skills or exploring new career paths, this session offers valuable insights into the world of threat intelligence.

Featured Panelists:
• Tony Cook, Senior Director, DFIR & Threat Intelligence, GuidePoint Security
• Jason Baker, Principal Security Consultant, GuidePoint Security
• Will Baxter, Security Engineer, Team Cymru
• Henry Carpenter, Senior Solutions Engineer, Cyware
• Dan Kropp, Director of Intelligence Services, Recorded Future

Part One: A Day in the Life of a Threat Analyst

The latest Brick House presentation focused on building a strong cybersecurity culture through a proactive and inclusive approach. Key topics included the importance of strong passwords, multi-factor authentication, phishing awareness and regular software updates. The expert panel—featuring GuidePoint Security's Ed Dunnahoe, Vice President, IA, Andy Lux, Vice President Engineering, Heartland, Steve Rosenkranz, Senior Director Corporate Information Security and Andre Rosario, Security Consultant —discussed integrating security into everyday business operations, fostering a culture of trust and leveraging AI to enhance security awareness.

They emphasized the value of tailored training, practical exercises, and leadership alignment to promote better security practices across the organization. Notable statistics included a 68% breach rate due to human error and the increasing use of AI in social engineering attacks. The panel offered practical advice, such as verifying suspicious requests, using AI with caution and maintaining strong situational awareness.

Watch the full episode for more actionable insights to strengthen your organization's security culture.

The Brick House: Prioritizing a Security Culture

Enhancing your cybersecurity measures involves more than just setting up defenses—it's about continuously evolving them. Join Gary Brickhouse, CISO, for a roundtable discussion on maturing your cybersecurity programs to meet and exceed industry standards. Our experienced panel will provide their perspectives on basic security protocols to sophisticated cybersecurity frameworks and discuss growing and adapting security frameworks to maintain a competitive edge. 

With GuidePoint Security Panelists:
Chris Peltz, Practice Lead
Lance Fischer, Senior Security Architect
Russ Thomas, Principal Security Consultant
Zachary Sheaffer, Managing Security Consultant, IA

The Brick House: Basics to Brilliance—Maturing Your Cybersecurity Program

Watch this roundtable discussion on penetration testing strategies that go beyond traditional vulnerability checks. Our GuidePoint Security panel of TAS and AppSec practitioners focus on advanced methods for testing the weakest points of your organization’s cybersecurity.

The Brick House: Into the Breach–Advanced Pen Testing Tactics

Cybersecurity dynamics are rapidly shifting. Join our GuidePoint Research and Intelligence Team (GRIT) analysts for an in-depth discussion on the ransomware trends, emerging threats and tactical shifts within the ransomware ecosystem during Q2 of 2024.

Our analysts will present unique findings, identifying key patterns, best practices, and lessons learned. Gain actionable recommendations to reinforce your defenses against sophisticated cyber adversaries.

Adaptive Defenses: Q2 ’24 Ransomware Trends and Recommendations

The landscape of Identity and Access Management (IAM) is undergoing a seismic shift, driven by rapid technological advancements and evolving cyber threats. A paramount challenge facing IAM revolves around the integration and management of increasingly complex multi-cloud environments.

Navigating IAM in a Cloud-Based World

Cloud storage has a perception problem, one that is easily addressed with the right education. Once you understand how cloud storage can be absolutely secured, it becomes more obvious how you can meet your compliance regulations and mitigate the threats of data loss or malicious alteration. 

What you will learn: 
- The market forces driving the increase in compliance regulations 
- The data security regulations you should know and understand 
- What is “immutability” (aka “object lock”) and how it factors into compliance requirements 

Speakers:  
Drew Schlussel; Sr. Director, Technical Product Marketing; Wasabi Technologies

Critical Compliance Qualifications for Cloud Storage Security

Cloud governance has now become necessary with the increase of businesses choosing to migrate their operations into the cloud environment.  Cloud services has become the key driver for digitalization and resilience, from its acceleration and reliance because of the pandemic. How did cloud services increase in value to become the core of digital disruptions? 

According to studies from Oxford Economics, the outlook of cloud adoption was considered an inflated expectation for future business use. This evolved and paved the way to the realization of cloud implementation. The challenge to be taken is to undergo a “healthy process” to refine and tune its application for business utilization. Cloud services took on a mindset towards a more realistic approach from a strategic perspective in order to execute ways of implementation.

This is why cloud governance plays a significant role in achieving the full potential of cloud technology aligned with business objectives. Tune into this in-depth webinar to discuss:
- What actually is cloud governance and why do businesses need it?
- What is its application to cloud management?
- How did cloud services evolve strategically to necessitate the need for governance and what role does it play in businesses and its value?
- The definition of cloud compliance from a business, cloud services market and various regional government perspectives.

Cloud Governance: What is its business value?

In this webinar you will learn about the latest trends and threats in cloud security based on a survey of nearly 3,000 IT professionals from 18 countries around the world. Topics will include cloud migration trends, top targets in the cloud for hackers, top sources of cloud data breaches, cloud security complexity, and the impacts of sovereignty on cloud migration strategies as well as many more. Following the presentation of key findings, there will be a Q&A with the S&P Global Market Intelligence analysts.

Trends in Cloud Security: Key Findings from the Thales 2023 Cloud Security Study

As organizations increasingly migrate their infrastructure to the cloud, ensuring the performance, availability, and reliability of cloud resources becomes paramount. The cloud environment brings tremendous benefits in terms of scalability, flexibility, and cost-efficiency. However, these benefits come with unique challenges that must be addressed through effective monitoring practices. 

One of the primary goals of infrastructure monitoring in the cloud is to proactively identify and address performance issues before they impact users. By continuously monitoring key metrics such as CPU usage, memory utilization, network latency, and storage capacity, organizations can detect bottlenecks, identify potential failures, and take timely actions to optimize resource allocation.

Infrastructure monitoring in the cloud: Optimizing performance and availability

Everyone wants their applications to be scalable and highly available, and doing so while optimising costs is critical. That's where multi-tenancy comes in. It allows companies to optimise their costs and resources while providing the same level of service to multiple customers. 
 
That is only possible when there's an efficient monitoring and observing system in place. These systems help organisations with enhanced visibility and better issue detection along with better resource utilisation and optimisation.
 
Multi-tenant systems can be hard and complex to manage and hence organisations need to identify the right way to implement observability. Which tools to use, how to configure them, strategies and approaches for centralised monitoring for complete visibility.
 
Tune into this session from industry thought leader Atulpriya Sharma to learn more about the points above as well as witness a demo of multi-tenancy monitoring using Prometheus and Thanos receiver.

Monitoring multi-tenant Kubernetes deployments: Challenges and solutions

The Cloud is not a destination any longer.  It’s a journey.  Once companies have completed one phase of cloud implementation there is always a need to do better.

Better at monitoring, better at managing the complexity, and better at managing cost.

Join us as we provide recommendations on how your organization can take full advantage of all that cloud ...and its related tools have to offer. This webinar will include information on these key topics:
• A definition of cloud operations (CloudOps) and how the practice has evolved over time
• Insight into how organizations have started applying an agile methodology to their cloud management so support agility and innovation at the infrastructure layer
• CloudOps best practice and how it can help establish strong processes for workloads, no matter the application or environment 
• Ways that standardization helps streamline deployment, operation, and monitoring of secure workloads in the public cloud. 
• Key security considerations and best practice that you and your teams need to consider as threats continue to evolve
• Client example of cloud management and how it has served as a platform for new solutions while at the same time minimizing downtime

The rest of your cloud journey starts today.

Navigating Cloud Chaos: Strategies for Streamlining Post-Cloud IaaS

Multi-Cloud is not simply about juggling multiple clouds - it's about orchestrating your teams, partners, and most importantly, your data, in a harmonious, integrated ecosystem. In this webinar, we will uncover how achieving true Multi-Cloud can streamline governance, bolster collaboration, and significantly reduce costs. Join Faction CTO, Matt Wallace as he shares insights drawn from myriad successful large enterprise multi-cloud engagements. Discover the strategic edge that comes with a seamlessly interconnected multi-cloud environment, and how it can be the catalyst to unlocking your cloud resources' full potential.

Adding unique value with a true multi-cloud architecture

Industry reports show that organizations waste as much as one-third of their cloud spend. Often, that wasted spend lines up with risky, unmanaged, or unused assets. As cloud usage grows, this problem is only going to get worse: many organizations don’t have a full grasp of all the assets they are running in the cloud and what they are being used for, let alone what they are paying for them. 

In this webinar, we will explore the various strategies and best practices for optimizing cloud costs and reducing cloud waste on AWS, Azure, GCP, and Alibaba cloud. We will also demonstrate, in real-time, how the Orca Cloud Security Platform continually detects unused, underutilized, and unattached compute resources to help you reduce unnecessary cloud spend and decommission those risky unused systems.

In this session, you’ll learn:
 • How cloud resources are billed by each provider, and what you may not be aware of.
 • How Orca can alert you to unnecessary cloud resources that can be removed
 • How security can be improved by removing unnecessary assets

Master Cloud Cost Optimization: Improve Security and Reduce Costs

Whether your enterprise is cloud native or has evolved into cloud use, you likely are employing a great many clouds in delivering services to end users: dozens of SaaS applications, and two or more IaaS and PaaS providers hosting applications you develop or deploy in-house. This state of affairs has been a decade in the making - no one can claim it snuck up on them! But, all too often, enterprise cloud management has not kept up with the realities of cloud use. The recent pandemic accelerate migration of resources to cloud for many organizations, and the accelerated shift highlighted—and exacerbated—the problems with managing across clouds. 

Join Nemertes for an overview of how to approach bringing order to the chaos, and a method to the madness!

Embracing multi-cloud management for hybrid service delivery

According to Gartner, 90% of organisations will run containerised applications in production by 2026, so they can speed up innovation and improve agility. But how do you ensure that increased speed and agility doesn't result in loss of control?

As you enter the world of containerised applications, where security needs are vastly different, you may find yourself in search of a new approach. In this webinar, we’re talking to Dhanil Parwani, Senior Partner Solutions Architect-Networking at AWS, and Gadi Naor, VP, Software Engineering at Rapid7, to give insights into:

- The unique challenges associated with securing containerized applications
- Adapting your VM program to address containerized workloads
- How the AWS Shared Responsibility Model works, and what it means for your organisation
- The capabilities you need in your security solutions to build safely on AWS

Register for this informative webinar to start innovating with containerized applications — securely and confidently.

Secure Your Containerized Apps With Rapid7 on AWS

Managing Hybrid and Multi-Cloud Environments

Explore the nuances of Cloud Governance, its relationship with traditional governance [GRC], and the unique challenges faced by organizations in aligning their policies and frameworks to the cloud environment in our live talk, August 3, 2023 at 4:00pm EDT. 

Jonathan Villa, Cloud Security Practice Director with GuidePoint Security will lead a discussion about the importance of a common language and shared understanding between GRC and cloud security teams. Villa will explore the emerging trend of platform teams and how they enable self-service, while establishing architectural and security standards. 

This talk will provide Cloud Security and GRC teams with an understanding of how to establish a strong partnership that ensures the effective implementation of Cloud Governance practices and enhances overall security and compliance in the cloud environment.

BIG G. little g. One Goal. Achieving a Robust Cloud Governance Framework

Cloud

Governance

Cloud Security

Security

Cloud Governance

IT Security

Cloud Computing

IT Governance

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

BIG G. little g. One Goal. Achieving a Robust Cloud Governance Framework

Presented by

About this talk

GuidePoint Security Channel