Name: Beyond the checkbox: A CISO perspective on continuous compliance and automation
Start: 2025-06-25T15:00:00Z
End: 2025-06-25T15:00:49.000Z
Location: BrightTALK
Rating: 5

Panaseer helps organisations proactively understand their security posture with automated trusted security metrics using Continuous Controls Monitoring (CCM).

Panaseer provides Cyber Asset Management - A trusted inventory of all assets that is business enriched with context, criticality and ownership and Security Controls Management – The ability to understand security control effectiveness and identify gaps in protection across eight security domains: Vulnerability Management, Endpoint Management, Patch Management, Identity and Access Management, Privileged Access, Security Awareness, Cloud Security & Application Security.

By taking all the data from disparate business, IT and security tools and bringing it together using data science; we give organisations the ability to prioritise risk based on business context, so they can make better decisions and prioritise and track remediation campaigns all of which is helping organisations fully understand their security posture without the need for manual reporting. 

Visit panaseer.com to find out more.

It's been well documented that the role of the CISO is changing. Panaseer's Lisa Parcella sits down with leading CISO Andy Piper to discuss what the new norms of cybersecurity looks like.

More complex IT environments and an ever-evolving threat landscape is putting CISOs under increasing pressure. Add to this the growing need to provide assurance to organizational leaders, maintain and demonstrate compliance and deliver value, it’s causing many to say they’re more anxious.

Andy shares his approach to these new risk, compliance, and stakeholder challenges and how it's more important than ever to support a security teams mental wellbeing.

Navigating the new norms of cybersecurity leadership with Andy Piper, CISO at Barclays Investment Bank

The role of the CISO is more complex than ever. As regulatory demands increase, security leaders are facing increased pressure to not only manage evolving cyber threats but also to meet stricter compliance requirements and provide clear assurance to the board. 

In this webinar, Panaseer speaks to Simon Goldsmith, Enterprise Security and Platforms Lead at OVO Energy, to discuss the need for enhanced reporting, assurance, and compliance strategies. We’ll explore practical approaches to bridging the gap between security teams and the board, ensuring cybersecurity is aligned with organizational goals, and navigating the evolving landscape of regulations to drive better security outcomes while maintaining board confidence.

Bridging the CISO gap: reporting, assurance and compliance amid increased regulatory demands

The role of security leaders is changing. On top of an evolving threat landscape and more complex IT environments than ever before, CISOs are under increasing pressure to provide assurance to organizational leaders, maintain and demonstrate compliance and deliver value. It’s causing many to say they’re more anxious, with 15% of security leaders considering leaving the industry altogether. 

Panaseer have gathered security leaders from across industries to discuss the challenge of risk, compliance, and board scrutiny and how new approaches can support security teams to better protect both their organizations and their mental wellbeing.

Navigating the new norms of cybersecurity leadership: risks, compliance pressures, board scrutiny, and wellbeing

What's the main cause of security breaches? Most business executives would probably point to zero-days or sophisticated hacks, but the reality is more mundane. 

In this webinar, Dave Ferguson from the Bank of England joins Panaseer's Nick Lines to discuss why control failures continue to be a huge problem for security teams. Using the findings from a recent Dark Reading report, they explore: 

Why cyber hygiene should be a higher priority 
How the Bank of England gets actionable insights from security data 
How to bring the sexy back to cybersecurity fundamentals

Why control failures are the cybersecurity industry's dirty little secret

It's no secret that CISOs face a long list of problems. Increasing cyber risk, internal politics, complex tech stacks, and burned out teams are high on the agenda, along with the growing scrutiny coming from stakeholders and regulators.

To find out how CISOs are preparing to overcome these challenges, we asked 400 security leaders about their key priorities and concerns. In this webinar, global cybersecurity and risk experts discuss the findings and give their views on the challenges facing CISOs in 2024.

The topics covered will include:
- The top three priorities for new CISOs
- How CISOs are responding to increased scrutiny
- Why a change in mindset is needed to help solve the root cause of security problems

CISO priorities in 2024: What are the key challenges for the year ahead?

Cybersecurity resources are limited, yet CISOs are under constant pressure to improve their security posture in response to increasing threats. How can you squeeze more from your existing security budget, without buying shiny new tools or investing in the latest analyst trend? 
 
Join our webinar hosted by David Moth, Head of Audience and Content at Panaseer, to hear findings from our new research into cybersecurity budgets and the actions organisations are taking to get maximum value from their security resources. You’ll also hear from guest experts Malcolm Harkins - Chief Security & Trust Officer - Epiphany Systems, Thom Langford, CISO - DXC Technology and Heather Engel, Managing Partner - Strategic Cyber Partners.

They’ll be discussing:

·      Where security leaders are prioritising investment in 2023 
·      How automation and consolidation of vendors is helping CISOs do more with less 
·      How security leaders are dealing with increasing regulatory requirements 
 
Panaseer's cybersecurity platform gives organisations a true picture of their security posture. It uses automation and advanced data analytics to continuously monitor the effectiveness of an organisation's cybersecurity tools, highlighting gaps and weaknesses in defences and helping prioritise what to fix first. This reduces cybersecurity risk and ensures organisations get the most from their investment in cybersecurity.

Get More From Your Security Spend: Finding Efficiencies & Optimizing Defences

We’re going to be discussing 4 simple steps you can take – or think about – to improve your ransomware resilience.

4 steps to improve your ransomware resilience

The Digital Operational Resilience Act, also known as DORA, is now law in EU countries, with enforcement starting January 17, 2025. It aims to ensure that all financial institutions operating in the EU are actively managing the operational risks stemming from their use of information and communication technology (ICT).
In our upcoming webinar Nick Lines, Product Evangelist at Panaseer, and Annick O’Brien, VP of Operations at CybSafe, will discuss:
• What exactly is DORA? 
• Why does it matter to you as a security leader? 
• What should you be doing now to prepare for the enforcement deadline?

What security leaders need to know about the Digital Operational Resilience Act

There’s no denying that the stress of working in cybersecurity in 2023 is huge. Security teams are dealing with increasingly complex environments, handling reporting demands from different stakeholders and navigating daily threats. Coupled with an overwhelming workload is the frustration that comes with the fact that 79% of enterprises have experienced cyber incidents that should have been prevented with existing safeguards (Panaseer 2023 Security Leaders Peer Report).

In this discussion, cybersecurity experts will look at how enterprises can stop these preventable breaches and reduce the burden on overworked teams by using resources more efficiently. Taking new insights from the Panaseer 2023 Security Leaders Peer Report, and looking at the personal impact that combating security issues and managing controls has on both leaders and their security teams, the panellists will discuss:

- The challenges that are keeping security teams and their leaders up at night
- Control failures and what can be done about the fact that most breaches are preventable
- How the stress of bearing the burden of preventable breaches impacts staff churn and resource constraints
- How to improve prioritization so resources are used more efficiently
Why security leaders are so frustrated by security tools and the gaps between them
- Why interest in Continuous Controls Monitoring is at an all-time high
- And more

Combating Control Failures: How Can Enterprises Stop Preventable Breaches?

The rise of ransomware is putting both cyber insurers and their potential customers under increasing pressure. The surge in both the frequency and value of customer claims - coupled with the fact that it’s difficult to accurately assess cyber risk - has meant that enterprise security teams and insurers are at a kind of impasse.

As a result, security leaders are facing numerous challenges: insurance premiums are rising, policy coverage is being limited, and insurers are demanding more detailed evidence of a strong security posture. It's leading many enterprises to question the value of cyber insurance.

In this discussion, Charlotte Jupp, Head of Security Performance Management at Panaseer is joined by Nathan Hankin, Senior Cyber Broker, Commercial Risks Solutions, at Aon; and Sean Martin, CISSP and co-founder, ITSPmagazine, to share how security leaders can navigate the complex landscape of securing the cyber insurance the modern business needs.

Join them to learn:

- The factors impacting insurance premiums and the challenges insurers face when assessing cyber risk
- How to prove security posture to insurers and the necessary steps to take to get there
- Why Continuous Controls Monitoring (CCM) technology can help you secure a reasonable premium
- What the future looks like for insurer and customer, and what could drive positive change for the industry as a whole
- And more

Proving You’re a Safe Bet: How to Get the Cyber Insurance Your Business Needs

In today’s fast-moving regulatory landscape, traditional approaches to compliance are falling behind. Join Panaseer and our panel of experts as we explore why static ‘checkbox’ compliance approaches are no longer enough to protect modern organizations. We’ll unpack how treating compliance as a one-time exercise can put a business at risk – and what needs to change.

In this 50-minute conversation, we’ll discuss the future of compliance, automation, and resilience. Our panel of CISOs from across banking, telecoms and financial services will share insights on adopting a continuous, automated approach to controls monitoring and assurance – one that not only reduces audit fatigue but builds security into the fabric of your operations. 

Whether you're rethinking your compliance strategy or looking to stay ahead of tightening regulations, this session will offer practical takeaways and strategic direction for 2025 and beyond.

Beyond the checkbox: A CISO perspective on continuous compliance and automation

CISO

Cyber Security

Compliance

Continuous Monitoring

Automation

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Beyond the checkbox: A CISO perspective on continuous compliance and automation

Presented by

About this talk

More from this channel