Name: Cloud Data Risk is Lurking in the Shadows
Start: 2022-12-09T18:40:00Z
End: 2022-12-09T18:40:30.000Z
Location: BrightTALK
Rating: 0

The Laminar BrightTALK Channel will discuss how organizations can discover, classify, and safeguard their sensitive data – to achieve both preventive and detective controls to secure your data across multi-cloud environments. 



Shadow IT”, which refers to technology projects or data stores that operate outside the governance and oversight of your corporate IT, has now evolved into a more menacing threat known as “shadow data" in the era of multi-cloud architectures. This “shadow data” refers to company data that is copied, backed up, or stored in data stores that lack proper governance and security oversight, making it a significant vulnerability for organizations. As a result, well-known companies like Twitter and SEGA Europe have fallen victim to shadow data breaches, highlighting the critical need for understanding and mitigating this threat.
In this briefing, we will delve into the inadvertent creation of shadow data in various examples, including S3 buckets, RDS Postgres instances, and EBS volumes. We’ll explain how these issues can occur in any cloud environment, provide insights on how to avoid them, and offer strategies for remediating

A Technical Deep Dive Into Shadow Data: Real-World Examples

Join us for an exclusive webinar featuring cybersecurity leaders from TAG Cyber, AWS, and Laminar as they uncover the secrets to unlocking your maximum potential from data in a cloud era.

Today, organizations that harness the power of data are the biggest winners. However, cloud data, with its larger, more distributed, and dynamic nature, has surpassed the capacity of traditional data security measures to protect it, leaving organizations vulnerable. With the flexibility of the cloud, unknown, “shadow data”, has become pervasive and largely uncontrolled, putting organizations at risk of data breaches and other security challenges.

That's where Data Security Posture Management (DSPM) comes in. As a fast-growing security category, DSPM offers hope in the battle against shadow data. In this panel-style discussion, three experts – an Analyst (TAG Cyber), a Practitioner (AWS), and a DSPM provider (Laminar) will share their insights and answer your burning questions on this rapidly evolving challenge.

Join us to learn:
• What is shadow data and how big of a problem is it?
• What people, processes, and technologies are needed to address it?
• How you work with CSP's to protect customer data.
• What is cloud-native DSPM and how can it address the gap in data security?
• Where do you start?  Discover how to crawl, walk, and run towards securing your data in the cloud era.

Data Security in the Cloud: Mission Impossible?

Gartner predicts that 85% of businesses will embrace a cloud-first principle by 2025. 

Harnessing the power and potential of cloud data for innovation has amazing potential for increasing efficiency, agility, and reducing costs. However, the “innovation attack surface” created by an organization's developers and data scientists using, moving, and sharing data can be a nightmare for data security teams to protect.

In this webinar, you’ll gain valuable insights into the latest trends and best practices for data security in the cloud. Done right, cloud data security helps prevent data breaches, protect sensitive information, and ensure compliance with data protection regulations.

Fortunately, both the EDM Council's Cloud Data Management Capabilities (CDMC) framework and Data Security Posture Management (DSPM) technology have emerged to enable businesses to innovate with cloud data safely.

Tune in to hear from our panel of cloud experts from AWS and Laminar to help you answer:
* What is the new "Innovation Attack Surface" and how can I reduce its risk? 
* What is DSPM and why is it critical now for data in the cloud?
* How can DSPM help me adhere to the CDMC capabilities and key controls to protect sensitive data in the cloud?
* What should I consider when implementing a DSPM strategy?

Cloud Data 101 with AWS: Is Your Cloud Data Vulnerable or Secure?

Data Security Posture Management (DSPM) is the first step towards closing the data security execution gap. Born in the cloud companies like WalkMe can especially benefit from DSPM. Hear from Dror Zilberman, Senior Security Engineer at WalkMe, about why they invested in DSPM, their experience implementing Laminar and the outcomes they’ve achieved. Andy Smith, CMO of Laminar, will talk about how DSPM helps companies leverage data democratization for innovation without adding undue data security risk. 
What you will learn:
• What is DSPM and why it’s needed now
• Why WalkMe invested in DSPM and Laminar
• What benefits has WalkMe achieved by implementing DSPM

How WalkMe Keeps Data Secure with Data Security Posture Management

Data is one of the most valuable assets for an organization. Understanding where data lives, who has access, and where it travels is a top priority for security teams. Since Gartner defined Data Security Posture Management (DSPM) as a new category in the Fall of 2022, the term has been gaining monumental traction in the security market. 

Please join Insight Partners and Laminar as we explore how security leaders can adopt DSPM and manage data risk. The 30-minute conversation will focus on critical considerations, real world examples, and practical insights to maximize the effectiveness of DSPM technology.

What you will learn:
- What is the “innovation attack surface” and what new challenges does it cause
- What is “shadow data” and how to manage it
- What is DSPM and why is it trending now?
- Why DSPM is a critical part of a defense in depth strategy.

Demystifying Data Security Posture Management

Enterprises of all sizes and industries have benefited greatly from cloud transformation and data democratization. But both of these megatrends have also given rise to the “Data Attack Surface”. This new concept is rapidly emerging as the most challenging aspect of cloud security. In today’s world, security teams are faced with a tremendous amount of data to protect, and it's unclear where all that data resides, what type of data it is (eg. crown jewels), who’s responsible for it, who has access, and what its security posture is supposed to be.  

In this session, our cloud security experts will discuss new and evolving security challenges facing cloud security teams, as well as how leading organizations have overcome these challenges through the adoption of a data-centric approach to cloud security.

What You’ll Learn:
- Why is the “Data Attack Surface” the biggest cloud security risk to your organization
- How security teams can safeguard their organizations' crown jewels without inhibiting innovation 
- How to tackle the challenges of cloud data security head on

Cloud Data Security 101: How to Reduce Your Data Attack Surface

By 2024, 75% of the global population will have its personal data covered under privacy regulations”', according to Gartner. 

Data security, governance and privacy are becoming increasingly complex for organizations operating in the cloud. Teams across security, privacy, data governance, and DevOps are struggling to implement programs that properly address these increasingly complex requirements and dynamic environments, with data sprawl as one of the biggest areas of risk.

Join Laminar and CDG to learn how to tackle the problem of keeping up with data security, privacy and governance by using the right people, processes, and technology.  During this webinar we’ll discuss who in the organization should be responsible for data security, what processes should be put into place to ensure you are doing what is required, and what tools can be used to help solve this complex problem.

What you’ll learn
• The most important areas to focus on for data security, governance, and privacy that meets compliance objectives
• Tools you should employ to automate data security and privacy as much as possible
• Tips on how data security teams should interact cross-functionally with Governance, Privacy, and DevOps
• Strategies for data mapping and data protection

How to Automate Security, Governance & Privacy for Cloud Data Innovation

The global threat landscape is always on, a real-time source of risk for every organization, especially in an age where data is proliferating exponentially on a daily basis, data has become the new currency between B2B companies. With ever increasing amounts of data in the cloud, finding the right automated technologies to protect this data is crucial to enable unlocking its power.

The challenge: Security teams have their hands full now in an effort to enable business; they must also be able to ensure their organization’s most sensitive data is protected. It’s a fine balance between decoupling the exponential growth of cloud data from the risk it imposes by its proliferation.

The solution: Cloud-native and data-centric solutions focused on continuously protecting an organization's data by following the data as it proliferates.

During this webinar you will learn the top 3 reasons why you should include data security in your 2023 cloud security plans:
Cloud data security is different that data security
Tedious manual efforts don’t work in the cloud
What you’re doing now is not working

Top 3 Reasons You Need Cloud Data Security in 2023

Enterprises of all sizes and industries have benefited greatly from cloud transformation and data democratization. But these megatrends have also given rise to the “Data Attack Surface”. This new concept is rapidly emerging as the most challenging aspect of cloud security. In today’s world, security teams are faced with a tremendous amount of data to protect, and it's unclear where all that data resides, what type of data it is (eg. crown jewels), who is responsible for it, who has access, and what its security posture is supposed to be.  

In this session, our cloud security experts will discuss new and evolving security challenges facing cloud security teams and how leading organizations have overcome these challenges by adopting a data-centric approach to cloud security.

What You’ll Learn:

●     Why is the "Data Attack Surface" the biggest cloud security risk to your organization
●     How security teams can safeguard their organizations' crown jewels without inhibiting innovation 
●     How to tackle the challenges of cloud data security head on

Data drives business and better data delivered faster drives competitive advantage. Of course, this valuable data must be protected and secured throughout its lifecycle. However, enterprises manage and secure data in chaotic and messy ways. How can enterprises improve data security while streamlining data access at the same time?
 
The answer: this challenge can only be met by moving to a data-centric security model AND cooperation between the data and the security teams to build a “single source of truth”. By attending this exciting panel discussion, you will: 

• Understand the urgency for cloud data-centric security
• Understand the unique and practical needs of the Data Owners and the Security teams  
• Be able to build a security “single source of truth” approach that meets the needs of both teams

The Future of Data-Centric Security, a CDO's and CISO's Perspective

Data drives business and better data delivered faster drives competitive advantage. Of course, this valuable data must be protected and secured throughout its lifecycle. However, enterprises manage and secure data in chaotic and messy ways. How can enterprises improve data security while streamlining data access at the same time?
 
The answer: this challenge can only be met by moving to a data-centric security model AND cooperation between the data and the security teams to build a “single source of truth”. By attending this exciting discussion, you will: 
 
• Understand the urgency for cloud data-centric security
• Understand the unique and practical needs of the Data Owners and the Security teams  
• Be able to build a security “single source of truth” approach that meets the needs of both teams

Data-Centric Security Trends: Secure Your Cloud Data Now

To facilitate remote and hybrid working models, public cloud adoption has surged in the last two years, and as a result, organizational assets and data now increasingly reside outside of the traditional perimeter. Whilst this fast-paced transformation has enabled the rapid development of products and services, IT teams are losing visibility of their valuable data and often compromising security for expedience.

To combat data security risks many cloud security providers focus on infrastructure protection rather than what really needs protecting – the data itself. A recent study by ESG found that 33% of organizations are aware that they have lost cloud-resident data, with a further 28% suspecting they have. Compare this to 2020, where only 18% of organizations indicated they had lost cloud-resident data, and it is clear that this is a growing problem. 

In this session, ESG Senior Analyst, Jack Poller is joined by Andy Smith (CMO, Laminar Security) to explain why now is the time for a data-centric approach to public cloud security, and how your organization can take advantage of the agility and scalability of cloud computing without sacrificing security.

Join Jack and Andy to hear: 

- The current state of data in the cloud
- Why a system-centric approach to security is no longer sufficient and unnecessarily complex.
- The value of automation and continuous verification of policies when nothing in the organization is static
- How a data-centric approach to security can turn your security team from gatekeepers into business enablers
- And more…

What is Data-Centric Security and Why Now?

We used to be worried about Shadow IT. Today the challenge is "shadow data" - unknown cloud data repositories that may not be monitored or properly protected, leaving undue risk and breaches in its wake. Data security teams have lost visibility to where their sensitive data is in the cloud, leaving it unprotected, exposed and vulnerable to both external and internal threats.
In this session you will learn:
What is shadow data and where did it come from?
What are the risks of "shadow data" and how to mitigate them.
What is the best practice methodology for combating shadow data? Including a real-world case study.

Cloud Data Risk is Lurking in the Shadows

Cyber Security

Cyber Attacks

Cloud Security

Data Security

Cloud Native

Enterprise Applications

Data Protection

Data Architecture

Data Breach

Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Cloud Data Risk is Lurking in the Shadows

Presented by

About this talk

More from this channel