Name: From DLP to DSPM: Where are we Headed with Data Security Posture Management
Start: 2023-11-01T14:00:00Z
End: 2023-11-01T14:01:01.000Z
Location: BrightTALK
Rating: 4.5

The Metomic data security solution combines Data Discovery, Data Loss Prevention (DLP), and Access Controls across your SaaS tools, to protect your most sensitive data, without getting in the way of employee productivity.

This webinar will highlight practical strategies for detecting and mitigating insider threats, ensuring data protection and regulatory compliance in the ever-evolving landscape of cloud and SaaS platforms.

Key Takeaways:

- Learn how to monitor and manage stale and sensitive data in SaaS environments.
- Explore the role of automated tools for data classification and real-time threat detection.
- Discover how Role-Based Access Controls (RBAC) can minimize unauthorized access.
- Understand the value of regular employee training to reduce human error.
- Implement automated remediation actions to quickly resolve security incidents.

This session is ideal for data security professionals who are looking to reduce insider risk and strengthen their data security practices. Don’t miss this opportunity to equip your business with the tools and knowledge needed to stay ahead of insider threats!

The Insider Risk Playbook: 5 Critical Steps to Protect SaaS Data

How much sensitive data in Google Drive is exposed publicly?

In early 2023, we introduced the Google Drive Risk Scanner, a complimentary tool designed to offer insights into the security status of users' data stored on Google Drive. This scanner provides users with crucial information about their data's accessibility, including who has access, which files are publicly available, and actionable steps to implement data protection measures.

Our annual report, based on the findings from this scanner, serves as a cornerstone for understanding the extent of sensitive data exposure on Google Drive. 

Join us for an in-depth discussion led by Metomic's CEO, Rich Vibert, alongside industry experts, where we dive into:
 The findings from our ‘Risks of Storing Sensitive Data in Google Drive’ report
 The darker aspects of these widely embraced productivity tools in our work environments
 Effective strategies for managing data security and mitigating risks in productivity tools like Google Drive

Mitigating the Risks of Storing Sensitive Data in Google Drive

Is your data protection strategy truly effective, or are you just hoping it is? In today's landscape, hope isn't enough. A modern Data Loss Prevention (DLP) program is essential for safeguarding your organization’s most sensitive data and mitigating risks before they become headlines.

Join us for our upcoming webinar, "A Guide to Implementing a Modern DLP Program that Actually Works." Metomic’s CEO, Rich Vibert, along with Staff Security Engineer, Michale Ivey from Modern Health, will break down the key elements of a successful DLP strategy for modern businesses. They will explore the intricacies of balancing technology with people and processes, and equip you with the tools to confidently protect your organization's data.

Don’t miss this chance to ensure your DLP program is up to the challenge!

A Guide to Implementing a Modern DLP Program that Actually Works

In this webinar, Metomic CEO, Rich Vibert caught up with Numan's Chief Medical Strategy Officer Sam Shah & Modern Health's Staff Security Engineer Michael Ivey.

The topics they discuss include: 
- How can healthcare organisations make data security a top priority?
- Why healthcare organisations should be using a data-centric approach in 2023
- Why it's vital that you make your employees aware of your security policies & build your human firewall
- Why now is the right time to secure your data, particularly with the rise of AI

How Can Healthcare Organisations Make Data Security a Top Priority?

As the digital landscape grows in complexity and as cyber threats become more sophisticated, focusing on the human element of security supported by the technological aspect—is crucial for creating a resilient, adaptable, and scalable approach to data security.

With 95% of data breaches caused by human error, human-centric data security gives businesses the tools to lock down their sensitive data, without hindering employee productivity and collaboration.

Tune into this discussion-rich Fireside Chat with Rich Vibert, CEO of Metomic, to understand how to approach human-centric data security in your company and the benefits of creating a “human firewall” to thwart potential breaches. Additional agenda items include:

• The security advantages and disadvantages of cloud, SaaS, and GenAI
• Metomic shares their customers’ GenAI usage and data security concerns associated with ChatGPT, CoPilot and others
• How to approach GenAI and SaaS security for your user and employee base

Human-Centric Data Security Proves Vital for SaaS, Gen AI, and Cloud

In today's digital age, data protection laws are evolving at an unprecedented pace, impacting organisations of all sizes and industries. To thrive and succeed, businesses must not only comply with these regulations but also harness them as a strategic advantage. 

When it comes to the penalties associated with non-compliance, organisations not only face hefty fines - they can sustain irreparable reputational damage. Our upcoming webinar, "Navigating Data Protection Laws with Confidence," will unravel the complexities of data protection and empower you with the knowledge to navigate this landscape with assurance.

Key Takeaways:

1. Navigating Complex Regulations: Understand the intricacies of data protection laws, including GDPR, CCPA, and emerging regulations.
2. Data as a Strategic Asset: Discover how to leverage compliant data management for competitive advantage and building customer trust.
3. Proactive Risk Mitigation: Gain insights into proactively mitigating risks related to data breaches and compliance violations.

Disclaimer: While our guests will discuss industry regulations on a broader scale, we suggest each business should seek individual advice when it comes to complying with the regulations relevant to their organisation.

Navigating Data Protection Laws with Confidence

In as dynamic a landscape as the financial services industry, the adoption of SaaS, GenAI and cloud applications has become instrumental in driving business growth. Tools such as Slack, Teams, Google Drive, and OneDrive have revolutionised work dynamics, providing unprecedented opportunities for collaboration and efficiency. However, this digital evolution introduces new and complex security challenges, particularly in the realm of handling sensitive information in a heavily regulated industry.

In this webinar featuring Richard Vibert, CEO of Metomic, and Graham Cluley, Cybersecurity expert and host of 'Smashing Security,' participants will gain valuable insights into the dynamic landscape of data security challenges within the financial services industry.

1. Understanding the Diverse Threat Landscape: Graham Cluley will share specific instances of data security breaches, illustrating the multifaceted threats that financial institutions encounter

2. Exploring Security Challenges in SaaS, GenAI and cloud Adoption: Understand the security challenges introduced by the adoption of SaaS applications like Slack, Teams, Google Drive, and OneDrive.|

3. Practical Strategies for Fortifying data security in Financial Organisations: Richard Vibert will share the four key areas Finservs should be considering in order to effectively manage their data security

Fortifying Financial Services: Mastering Data Security in the Digital Age

In anticipation of future cyber security challenges, as well as enable organizations to address current ones, the US National Institute of Standards and Technology (NIST) released the draft version of NIST Cyber Security Framework (CSF) version 2.0 for comments on August 8, 2023. Once all comments are submitted on November 4, 2023, this new version will be finalized in early 2024. 

This will be a very important tool against cybersecurity risks in 2024 not only because it is a government issued gold standard for cyber security, but also because it emphasizes cyber security governance and cyber security supply chain risk management. A lot of severe cyber incidents in recent years can be traced to a combination of bad decisions and third parties.

In this presentation, Ralph will give the audience a first look at this new upcoming NIST CSF v2.0 and show how they can use it to protect their companies from a myriad of cyber security risks in 2024 and beyond.

NIST CSF v2.0: A Potent Tool Against Cybersecurity Risks in 2024 and Beyond

This session from industry thought leader will provide a 360-degree view on how to develop a strategy that can easily drive a zero day attack, while maintaining ironclad environment. 

Key takeaways:
- Understand the moving part of your organization entities. 
- Establish an enterprise posture that mirror's your assets. 
- Develop a mechanism to manage attack evolution.

Developing Strategy That Enables Zero-Day Exploitation

Explore groundbreaking insights, uncover staggering findings from a threat analysis report of 1.3 million scanned emails, and discover unparalleled defense strategies against advanced threats. Arm yourself with knowledge and AI-powered solutions to safeguard your digital communication.

How to Stay Protected From Advanced Email Attacks With AI

Today’s approach to assess defensive capabilities is broken.  The manual processes used by security teams for threat mapping are manual, time-intensive, inefficient, usually focus on IOC-based threat intelligence, and are reliant on point-in-time data. As a result, there’s a lack of understanding between actual threat and defensive capabilities. New exploits are discovered weekly and with multiple CISA advisories/alerts every month, the process to assess readiness after every release is daunting.

The ability to quickly understand cyber defense readiness is critical to staying on the offensive or left of boom.  What if you could shift this approach from manual to automated and focus preparedness on the threats that matter most?

Join us as we explore a new approach for automating Cyber Defense Readiness that aligns your controls and fleet assets with the threats targeting your organization. We’ll share how Interpres helps organizations reduce their time to analyze security technologies and protective policies from hours to minutes a day.

Are You Prepared? Aligning Your Cyber Defense Readiness to Threat Exposure

Companies at a senior leadership level recognize operational risk in the form of  their “Risk Appetite & Tolerance”, defined as “the amount and type of risk that an organisation is willing to take in order to meet their strategic objectives”. 

The question companies should ask themselves is how much can cybersecurity risks identified in the 2024 threat forecast impact organizations technology, and how can they communicate effectively what this means to their organizations' strategic objectives?

Tune into this session presented by disaster recovery and cyber resilience expert Steve Yates as he brings to light the operational risk considerations and resilience options for those “scary” technology moments which can cause organizations to face the Maximum Tolerable Period of Disruption, or when an organization faces tough decisions, one of which may mean no choice but to close down!

By the end of the session, you will be able to:
- Be aware of The 2024 threat forecast and potential cybersecurity impacts on technology. 
- Form an understanding of the difficult language that must be used when dealing with the senior leadership team.
- Be conversant with a joined-up thinking approach when reviewing technology operational risk and identifying resilience measures.

Threat Forecast Vs. Operational Risk: What Keeps You Awake At Night?  Part 2

Hear from cybersecurity industry luminary Mark McLaughlin, former Chairman & CEO of Palo Alto Networks, on the hard truths of data security and how known and unknown threats are impacting organizations.

Learn about the state of data security, the impact of known and unknown threats on organizations worldwide, and the need to move beyond prevention. Or just watch for an inspirational leadership lesson or two. 

Make sure to take a look at the attachments as well - we've added extra learnings on how to optimise data protection and provided you with additional resources to help set you up for success.

The Evolving Data Threat Landscape: A Fireside Chat w/ Mark McLaughlin

Join Jen Easterly, Director of CISA, and Wendy Thomas, Secureworks CEO, in a thought-provoking fireside chat as they share the rising imperative for cyber defense through collaboration. As threats grow and attack surfaces expand, today's security responsibility extends beyond the CISO, to Boards, CEOs, and other business decision-makers. Jen and Wendy will share real world stories as well as strategies that can fortify organizational defenses by ensuring a united front against modern cyber challenges. Learn why the future of cybersecurity is collaborative.

Defend Your Frontiers with Collaborative Cybersecurity Defenses

Within the cybersecurity sphere, there’s a general reluctance to rock the status-quo: think of the “if it’s not broken, don’t fix it” attitude. Although adopting this mentality, given the current vein of debilitating ransomware, phishing, social engineering, and DDoS attacks, could be your undoing.

As such, it’s important for customers to continually evaluate their security tools and procedures, ROI, and gap analysis, and after which then create action plans to bolster their cyber posture.

On the other side of the coin, security vendors must adopt this evaluation mode, too, inviting and actioning feedback from customers and developing their tools with both customers and the adversaries in mind.

Watch this Fireside Chat featuring Katie Ralph, EMEA Solutions Engineering, SonicWall to discover what happens when customers and vendors rest on their laurels, and to learn how to reverse this trend with a cybersecurity assessment framework.

What Happens When Cybersecurity Pros & Vendors Rest on Their Laurels

There is a common sense that companies need to develop and establish a comprehensive cybersecurity strategy to protect their own perimeter from attacks and also react fast and in the right way if they are under fire.
Despite the fact that still many enterprises don’t have a real strategy until they become a victim – which factors should you take into account when you decide to develop and implement a cybersecurity strategy to protect your company?
 
There is no silver bullet, no strategy you can just clone from another company. Different scales of businesses need to develop different strategies based on
- Budget
- Threat landscape
- Targets
- Type of data
- Business sector
 
In our session you will learn how you can develop a cybersecurity strategy that really that is tailored to really protect your business and helps to to react in the right way to mitigate caber attacks. And you will also learn how much budget you should really invest to be protected.

One fits all? No! All you need to develop the right cybersecurity strategy

Organisations are sitting on an ocean of data. On the surface that ocean looks vast, yet stable. But anyone dropped into its depths knows that it’s teeming with life. Vision is limited, but the more you look - the more data you’ll find. Data is the most critical asset of every organisation and securing this data as it rapidly grows across cloud, SaaS, and on premise is once again one of the most significant challenges facing IT and Security teams in 2024. 

As data is now the primary target of cyberattackers with 59% of organisations reporting a data breach in 2022, and the projection is that a typical organisations’ data volume will triple in the next five years, how do you close the cyber resilience gap and secure your data?

In this fireside chat, you’ll hear from Steve Stone, Head of Rubrik Zero Labs, Rubrik, and Simon Ratcliffe as they discuss:

● The disturbing industry trends of malicious actors success rate
● How beating the attackers depends on your readiness to respond
● The growth of data and its impact on cyber resilience

The Data Seascape: What You Don't Know Will Hurt You

Our presentation team will cover 4 key areas that focus on the time-saving advantages that many large language models (LLMs) can offer, but also highlights important considerations for the potential risks to the organization’s reputation, IP, and overall security posture, by using an LLM.

These 4 areas include:
- AI Applied: The current scenario mindset - examining ROI and competitive advantage.
- AI Risk: The worst-case scenario mindset - reputational risk and loss of intellectual property.
- AI Trust: The best-case scenario mindset – aligning brand values with customer values- every relationship is about trust.
- AI Tomorrow: The unknown-scenario mindset – examining the need for acceptable use policies, and development of data-driven risk management systems.

While there are obvious time-saving and cost-reducing benefits that many LLMs can offer, it’s crucial to maintain staunch awareness of the risks to your organization’s reputation, IP, and overall security posture, just from using an LLM.

The AI Elephant in Every Room

In our ever-evolving digital landscape, the fusion of artificial intelligence (AI) and machine learning (ML) technologies has ushered in a new era of innovation and efficiency. However, as we step into 2024, we must also prepare for the darker side of this technological advancement -- the looming cybersecurity threats posed by both AI and ML.

This webinar will dissect the most recent trends and vulnerabilities that cybercriminals are likely to exploit using AI and ML techniques. From AI-driven social engineering attacks to ML-powered malware, we will explore the full spectrum of threats and discuss practical strategies to defend against them. With insights from real-world incidents and cutting-edge research, this webinar aims to equip individuals and organizations with the knowledge and tools needed to safeguard their digital assets and privacy in the face of evolving cyber threats driven by AI and ML technologies.

Will 2024 Bring Us a Year of AI and ML Threats?

The pace of the adoption of generative AI is set to eclipse nearly every other major technology introduction in the past two decades. As an inherently democratised technology usable by technical and non-technical users alike, security professionals are being challenged to leverage it as a tool – and view it as a threat. 
 
In this session, we will examine the defensive and offensive uses of generative AI, and attempt to predict what the future holds for the cybersecurity industry as we adjust to the rapidly growing "new normal". You will learn about: 
 
 • The emerging threat surface created and embodied by generative AI technologies
 • Ways that adversaries use and abuse generative AI, and possible defences
 • A simple way to classify AI workloads that you can easily apply
 • What the future holds for AI-backed security

Generative AI in Cyber Security: A Double-Edged Sword

Emotet, SocGholish and AgentTesla are amongst 2023’s top malware distributed by email messages.  Carl Leonard, Cybersecurity Strategist at Proofpoint, will take a look at what this means for those tasked with defending organisations like yours and how you might adapt based on these and other trends anticipated in the future threat landscape.  

Are you ready for changes in lure topics and threat delivery that seeks to exploit your employee’s willingness to read, click and otherwise interact with malicious payloads?  
How can you help your employees to help themselves and so not have cyber criminals help themselves to your employee’s credentials?

But threats to your organisation are not delivered solely by the external attacker – Carl will also touch on how employee behaviour can present risk to your critical data in terms of careless actions and malicious intent.

Understanding the most critical variable in today’s cyber threats – people.

The 2024 Threatscape

For decades, security professionals have been managing the security of their data leveraging Data Loss Prevention (DLP) tools.

However, contemporary teams are embracing a more holistic approach through the adoption of Data Security Posture Management (DSPM).  This webinar will explore DSPM, shedding light on its fundamental principles, its practical implications, and its pivotal role in modern cybersecurity.

Key takeaways include:

1) Understanding the Evolution: Discover the historical context of data security and how DSPM is reshaping the landscape.
2) Navigating Comprehensive Security: Explore the multifaceted aspects of DSPM and its application in achieving a robust data security posture.
3) Strategic Imperatives: Gain insights into why DSPM is not just a buzzword but an essential component for safeguarding data integrity in today's dynamic threat landscape.

Join Metomic CEO, Rich Vibert as he chats to Christopher Reed, CISO at SunFire, and Mackenzie Jackson, Developer Advocate at Git Guardian about the importance of DSPM, and why every business should have it in place.

From DLP to DSPM: Where are we Headed with Data Security Posture Management

DSPM

Data Security

IT Security

Data Best Practices

Threat Horizon

Threat Detection

Cyber Security

Data Integrity

Data Backup

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

From DLP to DSPM: Where are we Headed with Data Security Posture Management

Presented by

About this talk

Metomic