Name: What does it mean to "Expect the Unexpected" in third-party cyber risk?
Start: 2023-10-17T16:39:00Z
End: 2023-10-17T16:39:36.000Z
Location: BrightTALK
Rating: 0

A global leader in cybersecurity ratings, SecurityScorecard's mission is to make the world a safer place by transforming the way organizations understand, mitigate, and communicate cybersecurity risk to their boards, employees, and vendors. Here, you'll find content filled with experts chatting through the evolving cybersecurity threat landscape, how to monitor (and remediate) your cybersecurity posture (and that of your vendors), potential regulation around cyber risk mitigation, and more!

Thousands of organizations leverage our patented rating technology for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting. But we don’t stop there. Through a customer-centric, solution-based commitment to our partners, SecurityScorecard is transforming the digital landscape by building a path toward cyber resilience. 

You can monitor your organization's risk with a free account here: https://securityscorecard.com/free-account-trial/

Between malicious threat actors (cue data breaches and cyber attacks) and risk concentration of vendors within the technology landscape (cue cascading cyber incidents), having a resilient cybersecurity supply chain is more important than ever.

But first, you need to know and understand your cybersecurity supply chain.

Join Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard), Ofer Klein (CEO & Co-Founder, Reco), and Andrea Bailiff-Gush (Head of Marketing, Reco) for this webinar, where they’ll discuss:
- Best practices for detecting connected nth-party and shadow IT and securing them
- How to protect your organization with a holistic – inside-out and outside-in – cybersecurity approach
- Metrics that matter and promising solutions within the cybersecurity landscape

Breaches Beyond Borders: Securing Your SaaS Enterprise & Vendor Ecosystem

Únete a nosotros en este webinar para aprender cómo medir y reportar adecuadamente los riesgos cibernéticos al negocio. Descubre cómo alinear los esfuerzos de los equipos que protegen y operan el negocio con los que toman decisiones estratégicas. Gestionar riesgos es una tarea de equipo, donde el CEO actúa como capitán. Este capitán necesita la mejor información disponible para llevar el negocio en un mundo cada vez más desafiante, con recursos limitados y ataques sofisticados.

Cómo comunicar el Riesgo Cibernético al Board en tiempos de tormentas

Il Digital Operational Resilience Act (DORA) dell'Unione Europea è un importante atto legislativo volto a rafforzare la resilienza digitale del settore finanziario.  Le entità finanziarie di tutti i tipi saranno sottoposte a nuovi controlli per garantire la resilienza operativa informatica, la gestione della catena di approvvigionamento e il monitoraggio continuo.  Le sanzioni finanziarie e di reputazione saranno significative. Unitevi a SecurityScorecard per scoprire come mappare e misurare il rischio della catena di fornitura per facilitare la conformità.

Conformità DORA e NIS2 - Gestire la sicurezza della catena di fornitura

Supply chain disruptions can have catastrophic consequences, and recent incidents have shown that knowing your supply chain (KYSC) is a cornerstone of cyber resilience. Security teams need the ability to map dependencies effectively, identify critical vendors, and gain visibility into their extended ecosystem.

Join SecurityScorecard’s CISO, Steve Cobb, in our upcoming webinar to learn how to enhance your organization's cyber resilience, mitigate supply chain risks, and future-proof your organization for incidents. Steve will discuss: 

- The impact of recent outages on the global supply chain
- The critical role of KYSC in managing emerging threats
- How to prioritize vendors based on criticality and business impact
- Best practices for leveraging technology to enhance supply chain visibility
- Actionable recommendations to build a resilient supply chain through proactive measures

Becoming Supply Chain Resilient: Lessons from Recent Cyber Outages

Com a crescente digitalização do setor de saúde, os hospitais estão cada vez mais expostos a ameaças cibernéticas, colocando em risco não só a segurança dos dados dos pacientes, mas também a segurança dos próprios pacientes. Para os profissionais de saúde, um vazamento de dados não só mina a confiança do paciente, mas também expõe a instituição a consequências legais e financeiras severas. A violação da privacidade pode culminar em litígios, prejudicando a reputação do estabelecimento e levando à perda de pacientes. 

O que você vai aprender:
- Identificação de Ameaças Comuns: Conheça as ameaças cibernéticas mais frequentes no setor de saúde, incluindo malware, ransomware e ataques de phishing;
- Práticas de Segurança de Dados: Descubra as melhores práticas para proteger os dados dos pacientes e assegurar a privacidade;
- Políticas de Segurança: Entenda a importância de políticas robustas de segurança cibernética e como implementá-las eficazmente;
- Tecnologias de Proteção: Explore as tecnologias mais recentes em cibersegurança que podem ajudar a proteger os sistemas hospitalares;
- Resposta a Incidentes: Aprenda a desenvolver um plano de resposta a incidentes para minimizar o impacto de um ataque cibernético;
- Compliance e Regulações: Saiba mais sobre as regulações e normativas que afetam a segurança de dados no setor de saúde e como garantir a conformidade;

Palestrantes:
- Dani Pereira - Field Sales Director, Brazil, SecurityScorecard
-  Leandro Ribeiro - Gerente de Segurança da Informação, Hospital Sírio-Libanês

Benefícios da Participação:
Workshop com a SecurityScorecard: Com este webinar, tenha um desconto de 100% num workshop com a SecurityScorecard! O nosso workshop tem um custo de 6000 USD, mas se for umas das cinco (5) primeiras empresas a inscrever-se, durante o live do nosso webinar, terá acesso ao desconto! Não perca a oportunidade de revisar trinta (30) empresas, à sua escolha, que podem impactar a saúde cibernética da sua empresa!

Protegendo o Setor de Saúde Contra Ameaças Cibernéticas

DARPA. Expanse (Qadium). Escape Dynamics. Stanford and Caltech. Google Ventures and Sequoia. From entrepreneurship to academia to VC, there’s a lot to unpack.

Join Shaun Maguire (General Partner, Sequoia Capital) and Aleksandr Yampolskiy (CEO & CO-Founder SecurityScorecard) as they discuss:
- Key things to note within the investment landscape
- How to build and scale businesses that are category creators
- Lessons learned in making and/or taking mentors and opportunities

Save your seat today!

The Investor-Operator’s Take: Irrational Motivation to Build & Scale Businesses

Supply chains are prime targets for cyberattacks. Join this webinar to delve into the world of supply chain cyber risk managed services and discover what they are and how they can safeguard your entire supply chain.  

Some of the topics our experts will cover include: 

-  Understanding the Threat: What is a supply chain cyber risk managed service and why is it crucial for your business?
-  Building a Secure Foundation: Explore the key components of a comprehensive supply chain cyber risk managed service.
-  Implementation Roadmap: Learn a practical approach to implementing a managed service, ensuring a smooth and successful integration.
-  Best Practices & Real-World Insights: Gain valuable knowledge from industry experts through "tales from the trenches," including best practices and potential pitfalls to avoid.

Best Practices for Implementing a Cyber Risk Managed Service

Are your vendors putting your organization at risk? You may not be aware of various supply chain cyber risks lurking within your network, most of which are difficult to detect, manage, and mitigate. 

Introducing Supply Chain Cyber Risk Managed Services: a powerful solution that can revolutionize your approach to TPRM. Learn how managed services can:

-  Automate Third-Party Risk Assessments: Streamline the process and free up resources.
-  Gain Continuous Monitoring: Stay informed about evolving threats within your supply chain.
-  Prioritize Critical Risks: Leverage expert insights and data to focus on the biggest threats.
-  Improve Communication & Collaboration: Enhance communication with your vendors for better security.

Don't let limited resources or expertise hold you back. Register today to learn how to achieve a more secure and resilient supply chain!

Third-Party Risk Management: Detecting and Responding to Supply Chain Cyber Risks

Almost every day now, there’s news of another data breach (e.g. AT&T) or cyber attack (e.g. Change Healthcare) and/or consequences that arise from the lot. This means cybersecurity has more eyes on it than ever, making the CISO’s job feel more and more like a battlefield.

Join Mark Dunkerley (CISO, Coca-Cola Bottlers’ Sales & Services), Steve Cobb (CISO, SecurityScorecard), and Maya Kano (Senior Solutions Architect, SecurityScorecard) in this discussion, where they chat about:

- How to make the most of limited resources to manage cyber risk
- Best practices for board reporting and working with senior leadership
- Processes and solutions to deal with the CISO’s new normal

Save your seat today!

Conquering CISO Challenges: Balancing Between Risk, Resource Constraints, & More

Join Dr. Jared Smith for this talk on boosting SecOps and TPRM with Signals Intelligence. In this webinar, he’ll cover:

- the basics of signals intelligence (a quick introduction and history)
- technology application (including a dive into active scanning vs. passive collections)
- tracking adversaries using SIGINT techniques (Volt Typhoon)

Save your seat today!

Elevating Cyber Defenses: Boost SecOps & TPRM with Signals Intelligence

In order to safeguard sensitive data, maintain customer trust, and avoid costly penalties, cybersecurity leaders must continue to adapt to more than just the latest threat actor TTPs. 

Next up in our “Crafting Your Compliance Blueprint” series: Future-proofing your organization's cybersecurity compliance program.

Join Christopher Strand (Global Risk Officer) and Devaney Devoe (Senior Product Marketing Manager) as they discuss:
- Key differences and similarities between emerging frameworks, regulations, and mandates
- Overview of recent cybersecurity themes and real-world examples (DORA, SEC, NIST CSF 2.0, etc)
- Actionable recommendations to accelerate collection of security controls and posture 
- Best practices for risk assessment and compliance to effectively communicate risk to the board and future-proof your organization

Save your seat today!

Future-proof Your Organization’s Compliance Program

Cybersecurity is increasingly a team sport; you aren’t going to boost your cyber resilience without engaged executives and secure suppliers.

To that end, join SecurityScorecard’s Aleksandr Yampolskiy and the Cyber Rescue Alliance’s Kevin Duffey for this discussion on:
- Benefits of a more collaborative cybersecurity community
- Building on highly predictive cyber risk scores to improve security posture 
- Best practices to engage your executives, employees, and vendor ecosystem to move the dial on managing (and reducing!) cyber supply chain risk 

Save your seat today!

Engage Executives & Support Suppliers to Boost Cyber Resilience

It wouldn’t be a webinar in 2024 if we didn’t talk about AI. 

But we’re going beyond the hype and taking a more practical approach. Join Aleksandr Yampolskiy (CEO and Co-Founder, SecurityScorecard) and Michael Schrage (Visiting fellow, Imperial College Business School; Research fellow, MIT Sloan Initiative on the Digital Economy) for this discussion on how AI-powered:
- Selvesware and recommendation engines will shape the future of self-improvement
- KPIs can continuously learn and improve an organization’s growth
- Data-curation can drive both insights and security in the future

Save your seat today!

Selvesware, Enhanced Metrics, and The Future of Advice

As regulatory mandates and frameworks continue to emerge, cybersecurity leaders must continue to adapt to more than just the latest threat actor TTPs. 

Next up in our “Crafting Your Compliance Blueprint” series: complying with PCI DSS v4.0. 

Implementing the new PCI DSS v4.0 assessment and reporting requirements can be challenging, but are in place to empower cybersecurity leaders to proactively address evolving threats to card data and payment systems while ensuring proper scrutiny on the organization's critical controls, assets, operations, and security posture.

Join Christopher Strand (Global Risk Officer) and Brian Contos (Chief Strategy Officer, Sevco Security) as they discuss:
- How PCI DSS v4.0 assessment themes differ from its predecessor’s (3.2.1) and what to prioritize in the lead up to March 2025 when new requirements become mandatory
- Best practices for analyzing your attack surface, prioritizing the gaps you find, and conducting risk assessments as a process
- Actionable recommendations to help enforce and prove controls within PCI DSS v4.0 assessments to enable better and accelerated collection and communication of compliance and security policy

Save your seat today!

Prepare for PCI DSS v4.0 with Confidence

As notable cyber security breaches – including zero-days – feel like they’re only increasing in frequency, Purple Teaming emerges as a strategic approach that surpasses the traditional Red Teaming paradigm. 

Join SecurityScorecard’s David Mound as he chats through the benefits of Purple Teaming. Learn how to
- Foster a more collaborative environment (with Red and Blue teams working in tandem)
- Fortify the cybersecurity posture of the organization (with a combination of offensive and defensive strategies)
- Facilitate deeper insights into adversary tactics and strengthen incident response capabilities (with more structured, tailored campaigns that ensure ongoing refinement of defense mechanisms)

Save your seat today!

Elevate Your Cyber Defense: The Power of Purple Teaming

When start-ups scale-up, their cybersecurity -- or lack thereof -- is increasingly viewed as the backdoor into the larger organizations they serve.

Join Aleksandr Yampolskiy (CEO and Co-Founder of SecurityScorecard) and Harry Moseley (former CIO at Zoom, KPMG, and more) for a conversation on the:
- evolution of the C-Suite's interest in cybersecurity and data within an organization
- strategies to emulate (and avoid) in scaling up the security architecture of a growing organization
- key things to think about in scaling the security of organizations in an era where third-party breaches are on the rise

Save your seat today!

Cybersecurity In An Era of Scaling Start-Ups & Data Breaches

Saiba como podemos entender os desafios que envolvem a gestão de riscos de terceiros, que acabam por afetar  e impactar a saúde cibernética de uma organização, atuar sobre estes desafios com inteligência e automatização, criando um processo vivo, inteligente e colaborativo com os terceiros.

Com esta sessão aprenda como:
- criar processos inteligentes de gestão de riscos de terceiros;
- usar uma solução de TPRM para dar visibilidade ao compliance;
- a automatização é a regra do sucesso;
- otimizar seus recurso de tempo, de equipes e financeiros.

Os desafios da gestão de riscos de terceiros

Notre dernière analyse révèle que les 100 plus grandes entreprises françaises ont toutes été exposées à une faille de sécurité au cours des douze derniers mois. En cause, leur chaîne d’approvisionnement.

Pour parer à ces menaces, découvrez comment optimiser et automatiser la gestion des risques cyber pour l’ensemble de votre écosystème (fournisseurs, filiales, partenaires, M&A...) :
- Analyse complète de la surface d’attaque de votre supply chain
- Surveillance en continu de vos tiers
- Détection automatique des nouveaux fournisseurs
- Identification et correction des vulnérabilités
- Réponse aux nouvelles réglementations (NIS2, DORA)

Nos experts seront à disposition pour répondre à toutes vos questions en direct à la fin de la session.

Cybersécurité des tiers: Automatiser la gestion des risques

With zero-days seemingly lurking around every corner, vulnerabilities across your vendor ecosystem are gaining as much recognition as vulnerabilities in *your* ecosystem. With more board members and senior leadership with skin in the game, third-party risk is considered not only a business risk, but an increasingly important one.

So what does this mean for you and your team?

Join SecurityScorecard’s Miryam Meir, Senior Director of Product Marketing; Perry Robinson, Senior Solutions Architect; and Steve Cobb, CISO for this discussion on:
- the evolution of how third-party (cyber) risk has been viewed and handled by organizations
- the regulations helping drive and enforce this evolution, and
- the key things to consider and do to help your organization prepare for when the “unexpected” happens.

What does it mean to "Expect the Unexpected" in third-party cyber risk?

Third Party Risk Management

TPRM

Vendor Risk Management

Vendor Resiliency

Cyber Security

Zero Day Threats

Vulnerability Management

Cyber Risk Management

Cyber Incident Response

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

What does it mean to "Expect the Unexpected" in third-party cyber risk?

Presented by

About this talk

More from this channel