Name: Coming to Terms with Your NIS2 Security Controls Gap. And How to Address It
Start: 2023-11-07T17:08:00Z
End: 2023-11-07T17:08:27.000Z
Location: BrightTALK
Rating: 1

CyberArk is partnered with organizations around the globe to offer the most complete and extensible identity security solution, protecting identities and critical assets by enabling zero trust and enforcing least privilege.
This channel is focused on addressing today’s most critical Identity Security challenges in conjunction with CyberArk's Partner Network.

Smart factories are here, but so are the threats. As OT connects to the cloud and AI drives automation, your attack surface is exploding. Are your defenses ready?
Watch the final episode in our 3 part series with PwC to learn how to secure the future of manufacturing by moving from outdated security models to modern, resilient strategies.

Best Practices for building a robust OT strategy - Episode 3

Discover how automation is transforming identity management for modern organizations. This session highlights how CyberArk Identity Governance Automation and MajorKey address complex IGA challenges, ensure application connectivity, and streamline operations and compliance. Learn practical strategies for integrating automation, reducing audit stress, and improving security posture.
What you’ll learn:
• How CyberArk and MajorKey enable automation in complex identity environments.
• Common IGA challenges and automation strategies to overcome them.
• Best practices for integrating and securing third-party identities.
• Real-world IAM automation use cases, including provisioning and access requests.

From Complexity to Clarity: The Next Evolution of Identity Governance

As TLS certificate lifespans shrink to 47 days by 2029, identity teams face mounting pressure to automate. This session explores the intersection of Public Key Infrastructure (PKI) and Privileged Access Management (PAM)/Identity Access Management (IAM)—and how automation can deliver uninterrupted operations, compliance, and improved efficiency in mature environments.
What you’ll learn:
• Why 47 days? Understanding the new TLS certificate standard and its rationale.
• Scope of impact: What is and isn’t affected by the change.
• Implications for identity teams: How shortened lifespans reshape certificate management.
• Automation strategies: Building resilience through automated certificate lifecycle management.
• Integration approaches: Connecting PKI with PAM/IAM systems for seamless operations.
• Operational & compliance benefits: Why automation matters for security and governance.
• CAB Forum influence: How upcoming changes will affect your organization.

PKI Meets PAM: Automation Strategies for the New TLS Certificate Lifespan

Privileged Access Management (PAM) automation can unlock major efficiency and security gains, but timing and strategy are key. This session offers practical guidance on identifying automation opportunities, achieving quick wins, and building stakeholder support.
What you’ll learn:
• How to spot automation-ready PAM workflows.
• When to initiate automation for maximum impact.
• Quick wins that deliver measurable benefits.
• Communicating automation value to stakeholders.

PAM Automation Playbook: Identifying Quick Wins and Strategic Gains

Tom Eggleston, CEO of ProofID, brought together Kevin Bocek, SVP of Innovation at CyberArk, and Paul Heaney, CTO of ProofID, to explore how organisations can prepare for the next era of machine identity management.

As AI agents, bots, and automated systems proliferate, businesses face an urgent need to secure machine identities — a challenge that’s rapidly outgrowing traditional manual certificate management.

From certificates to AI agents - building confidence in the machine identity age

In Episode 2 our panellists will focus on what is required to build a robust OT security strategy and they will discuss best practices for the manufacturing industry.
This will cover how our panellists are starting to see many organisations taking more of a proactive approach to OT security strategies by taking a more threat lead stance where they aim to detect and contain cyber threats as early as possible.

Best Practices for OT Security in Manufacturing - Episode 2

As cyber threats grow more sophisticated, traditional perimeter-based defenses are no longer enough. Zero Trust architecture—centered on the principle of “never trust, always verify”—has emerged as a critical model for securing modern environments, especially at the endpoint level. In this webinar, James Hauswirth, Managing Director, PAM at Cyderes and Dylan Holmes, Business Lead, Endpoint Privilege Manager at CyberArk will explore the fundamentals of Zero Trust and its relevance to endpoint security. We'll explain how the least privilege principle—granting users only the access they need—can prevent lateral movement and unauthorized access. You will gain practical guidance on implementing least privilege on endpoints and: * Understand Zero Trust and its impact on endpoint security * Learn how least privilege minimizes attack surfaces * Explore strategies for enforcing least privilege * Overcome implementation challenges with best practices

Zero Trust Starts at the Endpoint: A Dive into Least Privilege Security

As machine-to-machine communication grows, so does the need to secure identities that enable it. Machine identities—used by applications, containers, devices, and more—are essential for secure operations, yet often go unmanaged, creating major security risks. James Hauswirth, Managing Director, PAM at Cyderes chats with Kevin Bocek, Senior Vice President, Innovation at CyberArk to explore the role of machine identities in today’s digital ecosystem and the threats posed by poor identity management, including unauthorized access and data breaches. We’ll examine the key challenges organizations face—such as scale, visibility, and manual processes—and share real-world examples of security failures and share how to build a strong machine identity security framework, including: * What machine identities are and why they matter * Common risks and vulnerabilities * Key framework components and tools * Automation strategies

Building a Strong Framework for Machine Identity Security

In Episode 1 our panellists will be identifying and understanding the top threats to OT Security in Manufacturing.

This will set the stage for the series by discussing the key cybersecurity threats facing the manufacturing industry, with a focus on Operational Technology (OT) environments.

Best Practices for OT Security in Manufacturing - Episode 1

In this webinar Toby Noble and Deepak Taneja, The Godfather of Modern IGA discuss the importance of Identity Governance and managing access and levels of privilege to ensure the right users have the correct access to the appropriate apps and why.

Securing Identities - Modern IGA

Join CyberArk's Field CTO Brandon Traffanstedt and Red Hat's Principal Technical Account Manager Mike Ralph as they tackle one of the most persistent challenges in enterprise security: integrating Linux systems into your centralized identity management strategy.

Discover how to move beyond the traditional "castle and moat" security approach by implementing modern identity principles across your entire infrastructure. Learn practical strategies for centralizing authentication, implementing least privilege access, and automating security policies for Linux environments. Our experts will demonstrate how both CyberArk Identity and Red Hat Identity Management can bridge these critical gaps, providing you with flexible implementation options regardless of your current technology stack.

This webinar explores the journey toward Zero Trust architecture with identity as the foundation, offering actionable insights on reducing risk through operational access controls, adaptive authentication, and centralized policy management. Whether you're managing on-premises systems or cloud infrastructure, you'll gain valuable knowledge on breaking down the silos that have traditionally separated Linux from your broader identity security program. Don't miss this opportunity to enhance both security posture and operational efficiency across your entire technology ecosystem.

Breaking Down Silos with Identity Management

In modern cybersecurity, identity is a critical focus. The conversation has evolved beyond protecting just human identities to also include non-human ones. To meet this challenge, organizations need a robust strategy that unifies three key pillars: Privileged Access Management (PAM), Identity and Access Management (IAM), and Identity Governance and Administration (IGA). 

Join experts James Hauswirth, Managing Director, PAM from Cyderes, and Chris Maroun, Field CTO from CyberArk, as they share their expertise on building an effective identity security strategy with PAM + IAM + IGA. They will discuss the advantages of: 

·         A platform-based approach for defense-in-depth protection 
·         AI-driven business processes to modernize IGA 
·         Least privilege controls to protect access across all identities, infrastructure and apps

Securing the Identity Perimeter: A Unified Strategy with PAM, IAM & IGA

Traditional Identity Governance and Administration (IGA) approaches struggle to keep pace with the evolving demands of cloud environments, hybrid workforces, and increasingly sophisticated cyber threats. Organizations are challenged with managing a sprawl of identities, enforcing granular access controls, and demonstrating continuous compliance—all while striving for operational efficiency. 

In this session, Deepak Taneja, General Manager, IGA from CyberArk & James Hauswirth, Managing Director, PAM from Cyderes, will explore how a new generation of IGA solutions is revolutionizing identity management. We'll delve into the shortcomings of legacy systems and highlight the transformative power of modern IGA to empower organizations by highlighting: 

·         Modern IGA vs. Traditional IGA: Align with Zero Trust principles and adapt to emerging threats and evolving attack vectors. 
·         Identity Security Challenges: Manage non-human identities and address governance complexities in multi-cloud and hybrid environments. 
·         Simplify Audit and Compliance: Meet regulatory requirements with ease through automated evidence collection and comprehensive audit trails.

Reshaping Identity Governance with Modern IGA

As AI agents become more sophisticated, traditional identity and access management frameworks are being pushed to their limits. This session will focus on best practices and provide a deeper view on managing identity security in environments where AI agents need to authenticate, access resources, and make decisions on behalf of human users and systems.

Episode 2: Identity Security in the Age of AI Agents

Dive into the rapidly evolving world of AI agents and their growing impact. Examine how organizations are deploying AI agents for automation, decision-making, and customer interaction - and the critical security blind spots that emerge. The speakers will discuss the current state of AI agents and the security measures being implemented today.

Episode 1: The Current State of AI Agents and Their Security Implications

The rapid rise of artificial intelligence and generative AI is reshaping the identity landscape, leading to an explosion of machine identities that require strong security controls. From chatbots to robotic processes and system IDs, enterprises must rethink how they secure both human and non-human identities in a digital-first world.

“A lot of companies are leveraging AI for operational efficiencies... But with that, all the chatbots and AI agents are making these data calls. So, those calls need to be governed, and they need to be secured,” says Clay Rogers, VP of Global Strategic Alliances at CyberArk.

This shift has drastically increased the machine-to-human identity ratio. Some organizations now face a ratio of 40 machine identities for every human identity. “It becomes very important to manage those machine identities because if they are not protected appropriately and fall into the wrong hands, we’re now going to deal with a different set of threat actors,” warns Sowvik Chakrabarty, Partner in the Cybersecurity Practice at PwC.

In this exclusive video interview from the Financial Services Cybersecurity Summit 2024, Rogers and Chakrabarty discuss:
o How AI enables proactive risk detection and response – using intelligent systems to predict and prevent identity threats;
o The evolution of security tools – why legacy IAM solutions are no longer sufficient for managing modern machine identities;
o The CyberArk–PwC partnership – how both firms help enterprises build scalable identity security frameworks fit for AI-driven environments.

With decades of experience, Chakrabarty leads IAM programs centered on compliance and risk mitigation, while Rogers brings deep expertise in Zero Trust and identity-first security strategies across enterprise and government sectors.

Watch the full discussion to learn how your organization can stay ahead of the AI-driven identity surge and protect its expanding digital ecosystem.

AI Surge Drives a 40-1 Ratio of Machine-to-Human Identities

Machine identities have proliferated across enterprises, often outnumbering human identities by a ratio of 10 to 50 to 1—and that gap continues to widen. As organizations rapidly adopt cloud-native architectures, AI models, robotic process automation, and connected devices, managing and securing these non-human identities has become a critical challenge.

Many enterprises attempt to solve this issue through technology alone, overlooking the need for robust compliance frameworks, risk models, and governance policies. According to Sowvik Chakrabarty, Principal at PwC and Cyber IAM Leader, this narrow approach is a core reason many programs fall short.

"Where organizations struggle is when they try to tackle it with technology alone, and they don't have the right compliance framework or risk framework and applicable standards and policies that govern how these different machine identities need to be tracked and managed," Chakrabarty explained.

In this exclusive video interview with Information Security Media Group at CyberArk Impact 2025, Chakrabarty explores:

o The potential for agentic AI to push the ratio as high as 200 machine identities per human identity;
o Why centralized governance combined with decentralized management often delivers the most effective results;
o How PwC’s strategic partnership with CyberArk enables clients to address machine identity challenges at scale.

With more than two decades of experience in identity and access management, Chakrabarty has helped global organizations navigate risk and regulatory pressures, build forward-looking security architectures, and align IAM strategies with digital transformation goals.

Why Tech Alone Won't Solve the Machine Identity Crisis

Modern organizations should make sure their privileged access management (PAM) programs evolve at the pace of their fast-transforming IT projects. To help satisfy key audit and compliance requirements, businesses should be sure they are consistently applying PAM controls throughout their environments, from the data center to AI initiatives and cloud-hosted apps.

Register for this webinar to learn about:

o People, processes, and technology strategies to help reduce risk and drive operational efficiencies for a PAM program
o Tips for accelerating time-to-compliance with low-friction, cloud-native privilege controls
o How modern PAM programs can address requirements for regulations llike Sarbanes-Oxley, SOC II, PCI DSS and HIPAA

Prepping for IT Security Audits in 2025: Considerations for Modern PAM Programs

Three real-life examples of attacks on organizations that fit NIS2’s expanded definition of ‘Critical’.. From the perspective of CyberArk’s Incident Response team.

NIS2: Inside the War Room Responding to 3 Attacks on Critical Infrastructure

We cut through any ambiguity around NIS2 –  CyberArk and PwC covers what and who’s in scope, why it’s important, tier classifications, key policy areas and how NIS2 will get transposed into law.

Are You Essential or Important- Making Sense of NIS2

Get Ready for NIS 2 – An Identity Security Perspective

From NIS2 ‘cyber hygiene’ to securing your software supply chain with : what controls gap you are likely to face when NIS2 principles transpose into law. And what steps you can take to address it.

Coming to Terms with Your NIS2 Security Controls Gap. And How to Address It

NIS2

CyberArk

Cyber Hygiene

Software Supply Chain

Cyber Attacks

Cyber Defence

Cyber Incident Response

IT Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Coming to Terms with Your NIS2 Security Controls Gap. And How to Address It

Presented by

About this talk

CyberArk - Partner Hub