Name: Identity Crisis: Solving the Access Management Challenge in OT and ICS
Start: 2023-09-19T17:00:00Z
End: 2023-09-19T17:00:33.000Z
Location: BrightTALK
Rating: 5

Xage is a global leader in zero trust access and protection on a mission to pioneer a secure tomorrow. Control access and prevent attacks in the cloud, in the data center, at the remote operational edge anywhere on Earth, and even in orbit with the Xage Fabric Platform. Xage is easy to manage and can be deployed in a day, giving users easy and secure access to the assets they need from anywhere, enabling better attack prevention and vendor risk management. Learn why organizations like the U.S. Space Force, PETRONAS, and Kinder Morgan choose Xage at xage.com.

Part 3: Top sources of cyber risk in M&A, and how to address them to mitigate risk and prevent a data breach.

Mastering Cyber Risk in M&A: Strategies to Safeguard Against Data Breaches

Like the velociraptors in Jurassic Park, cyberattackers always find a way. As defenders tighten their controls, attackers open new fronts, change their attack tactics, and choose their targets to maximize profit and disruption. This webcast will discuss changes in cyberattack tactics, and how defenders can adapt:

- The increase in software supply chain attacks, plus massive growth in vulnerability exploitation as revealed in Verizon DBIR 2024.

- The state of stolen credentials as an attack vector. MFA bypass, MFA fatigue, and more.

- How AI is going to change the cyberattack landscape, and how to get ahead of it.


Join us live. We’ll take questions from the audience throughout, so you can drive the discussion too.

Exploits Up! Shifting Cyberattack Tactics Require New Defense Strategies

Part 2: Major Causes of Cyber Risk in Oil & Gas M&A, from stale identities to transference of existing compromised assets, to the challenges in cyber due diligence and risk assessment during M&A

Cyber Risks in Oil & Gas M&A: From Stale Identities to Compromised Assets

Part 1: Micro and Macroeconomic Conditions Driving Booming M&A in Oil and Gas - Why there are so many and the unforeseen IT and cyber challenges that come with them

The Surge of M&A in Oil & Gas: Economic Drivers & the Hidden IT Cyber Challenges

In today’s interconnected business landscape, not only is third-party access to your systems inevitable—it's a strategic necessity. However, this access also represents one of the largest and least defended attack surfaces within any organization.
 
Join us to hear directly from industry leaders Mark and Cassie from Carolina Ports Authority and Schneider Electric, respectively, on how they are proactively defending their networks from third-party, contractor, and vendor access risks, as well as software supply chain vulnerabilities and back doors, to maintain integrity and trust in their highly interconnected operational environments.
 
What you’ll learn:
-How to Identify Risks: Understand how third parties and supply chain actors gain both overt and covert access to your systems, and the risks this entails.
-Strategic Advantages: Learn how to leverage controlled third-party access for operational efficiency without compromising security.
-Risk Management Steps: Gain actionable insights on creating and managing secure third-party and supply chain accounts quickly and efficiently.

Mitigating Third-Party Access Risks: Strategies from Experts

The core tactics of ransomware haven’t changed, but the scale of attacks, and the size of demands, has grown. What will it take to stop this scourge on modern enterprises? Attendees of this session will get a close look at how valid credentials and compromised identities power every stage of the ransomware playbook, and actionable steps to block attackers at each layer. 
We’ll discuss:
-A close look at common ransomware initial access and lateral movement tactics that still work even though they haven’t changed for years, and how to finally stop them.
-The biggest security gaps that let ransomware in the door, and how to plug them for good with a layered ecosystem of detection and prevention approaches.
-Residual Risk: Why 80% of security leaders have been surprised by attack tactics they thought they had controls in place for, and how to stop getting caught off guard.

Can Ransomware Be Stopped? A Layered Security Ecosystem is The Only Way

Discover why traditional VPNs – once a cornerstone of cybersecurity – now pose significant risks to your business, including with several recently discovered zero-day exploits. An urgent shift towards zero trust security frameworks is underway, as enterprises seek safer alternatives for remote access, especially those with legacy systems.

Watch this webinar with Dr. Chase Cunningham (known as Dr. Zero Trust) and Roman Arutyunov, co-founder of Xage Security, for a discussion on critical features to look for in a VPN replacement.

Whether you're an IT expert or a business leader, this webinar will provide valuable insights and a path forward when navigating away from VPN dependencies towards a more secure future.

Is My VPN Trying to Kill Me?

Xage Security joins Takepoint Research to discuss emerging trends in the industrial sector based on survey results from over 250 cybersecurity decision makers. This webinar covers topics including zero trust adoption across industries, differing priorities across job titles, and challenges with IT/OT convergence. Jonathan and Sri discuss emerging trends, pinpoint potential hurdles, and forecast future developments in the integration of zero trust strategies within the complex ecosystem of operational technology and industrial control systems.

State of Zero Trust in The Industrial Enterprise

Discover why traditional VPNs, once a cornerstone of cybersecurity, now pose significant risks, including several recently zero-day exploits. An urgent shift towards zero trust security frameworks is underway, as enterprises seek safer alternatives for remote access, especially those with legacy systems.

Watch this webinar with Dr. Chase Cunningham (known as Dr. Zero Trust) and Roman Arutyunov, co-founder of Xage Security for a discussion on critical features to look for in VPN replacement, including extended use cases that enhance productivity, security, and cost efficiency. Whether you're an IT expert or a business leader, this webinar will provide valuable insights and a path forward when navigating away from VPN dependencies towards a more secure future.

Xage CEO Geoffrey Mattson joins ARC Advisory Group at their annual conference to discuss challenges faced by industrial enterprises and how Xage can help. In this video, Geoff provides a company and product overview, including how Xage can help organizations improve their security posture and help address challenges associated with regulation, risk reduction, the pursuit of OT/IT convergence, and pricing justification.

ARC Advisory Group Executive Interview with Xage CEO Geoffrey Mattson

Manufacturing is the most targeted industry by cyberattackers due to a set of unique traits and risks, including ransomware attacks disrupting manufacturing operations and Intellectual Property theft. 

In this webinar we will discuss the rise in attacks on the manufacturing industry and the prevention strategies that you can take into practice to prevent millions in losses. 

Attendees of this webinar will also learn how to uncover the major risks in their own manufacturing enterprise, from shadow IT to the production line, and how to mitigate those risks. We’ll discuss:
• The most recent trends and attacks we’re seeing in the industry
• Securing third party remote privileged access without limiting productivity
• Eliminating the biggest ransomware entry points and lateral movement tactics (with MITRE ATT&CK examples) 
• Achieving zero trust access and identity-based microsegmentation faster
• How zero trust interlaces with complex manufacturing environments

Cyber Risks in Manufacturing: Preventing and Blocking Attacks Faster

Secure Remote Access directly to OT assets using the apps you need! 
Key Benefits:
Get secure remote access and privilege management for third parties, vendors, and service providers to use the apps they need.
Allow the use of native apps to remotely access assets without granting the broad access of VPNs or needing agents—and get the ability to terminate sessions when malicious activity is suspected. 
Enable MFA to secure all remote access, including when remote users are connecting their own native apps directly to assets.

Xage Zero Trust Remote Access: Native App Support

The Transportation Security Administration (TSA) has updated and renewed their Security Directive for oil and gas pipeline operators as of July 2023. And with the new requirements comes a heavy focus on testing and auditing.
In this webcast, Michael Leonard, Sr OT System Engineer at Xage Security, sits down with Keith Ward of ActualTech Media to discuss these changes to provide guidance to oil and gas pipeline operators.

What you'll learn: 
-The five Cybersecurity Incident Response Plan (CIRP) objectives identified by TSA
-Timelines and CIRP testing requirements every pipeline operator needs to know
-How to meet the new challenges and fulfill requirements introduced in the latest TSA guideline update (02D)

Cybersecurity Compliance: Meeting Updated TSA Guidelines for Oil & Gas Pipelines

In less than 30mins learn why preventive cybersecurity is a must for states, cities, and schools. For SLED, an Ounce of Cyberattack Prevention is worth a Pound of Detection and Response.

Cyberattacks are up across the board, both in volume and sophistication. State and local governments, school districts, and other public sector organizations are targeted more than ever, while also facing other challenges of digital transformation. By protecting and preventing against the most common attack types, and eliminating the “low hanging fruit” that cyberattackers go after, these organizations can take back the upper hand. In this session we’ll discuss:

-The top attack tactics, techniques, and procedures being used against SLED organizations
-How organizations with tight security budgets can prioritize and optimize their security investments against the attacks they’re most likely to face.
-Additional resources for SLED orgs, including funding sources, and ways to optimize security activities for efficiency and effectiveness through prevention and protection.

An Ounce of Cyberattack Prevention is Worth a Pound of Detection & Response

Zero Trust Network Access (ZTNA) has skyrocketed in popularity for several years, but a few key gaps have emerged. Concerns have arisen that traditional ZTNA may expose assets to threats, serving as a pivot point for lateral movement. Organizations with highly distributed environments, or just remote offices and campuses, need both ZTNA and Asset Protection.

Attendees will come away with a new understanding of how the principles of zero trust interlace with asset protection concepts, and what to look for in technology offerings promising these capabilities.

Achieving Universal ZTNA and Critical Asset Protection

SANs ICS Summit Session: Listen now to hear experts with decades of OT/ICS security experience discuss:

-Hidden challenges in managing identity, credentials, and access in ICS/OT
-How to improve user experience and security by orchestrating identity across OT, IT, and Cloud 
-How to achieve Defensible Architecture and other SANS ICS Critical Cybersecurity Controls

Identity Crisis: Solving the Access Management Challenge in OT and ICS

Industrial Control Systems

Industrial IoT

secure remote access

zero trust

operational technology

Critical Infrastructure

Access Management

IoT Security

Remote Access

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

The energy community on BrightTALK brings together top experts from around the world. Find relevant webinars and videos on renewable energy, efficiency and more presented by recognized energy management thought leaders. Join the conversation by participating in live webinars and round table discussions on energy trends.

Energy

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Identity Crisis: Solving the Access Management Challenge in OT and ICS

Presented by

About this talk

More from this channel