Name: From Reactive to Proactive: Addressing and Preparing for Cybersecurity Incidents
Start: 2024-12-20T17:00:00Z
End: 2024-12-20T17:01:02.000Z
Location: BrightTALK
Rating: 4.7

Pondurance delivers world-class MDR services to industries facing today’s most pressing and dynamic cybersecurity challenges including ransomware, complex compliance requirements, and digital transformation accelerated by a distributed workforce. By combining our advanced platform with our experienced team of analysts, we continuously hunt, investigate, validate, and contain threats so your own team can focus on what matters most. 

Pondurance experts include seasoned security operations analysts, digital forensics and incident response professionals, and compliance and security strategists who provide always-on services to customers seeking broader visibility, faster response and containment, and more unified risk management for their organizations. 
Visit www.pondurance.com for more information.

Hancock Health CEO Steve Long Discusses Surviving a Malicious Attack and Lessons to Thrive with Cybersecurity

Mr. Long will provide details of their ordeal after the ransomware attack on their healthcare system resulted in tremendous disruption and a payment of $55,000 in Bitcoin – a modest sum by today’s standards. He will then outline how they learned from their experience, working with cybersecurity partner Pondurance, to create a solid, compliant cybersecurity posture that has proven resilient to attack in the subsequent years.

In this webinar, you will learn:

- How Hancock Health partnered with the Pondurance digital forensics & incident response (DFIR) team to understand what had transpired, mitigate various harms from the ransomware breach, pay the ransom, and successfully return to business as usual after decrypting their data
- Actions they took to ensure compliance with security, privacy and breach laws and regulations associated with healthcare organizations and and their responsibilities for handling protected health information (PHI)
What plans they put in place partnering with Pondurance, including adopting the Pondurance MDR service and SOC, to create an enterprise-class cybersecurity posture in order to create cyber resilience and eliminate breach risks in the future
- By dissecting a recent malicious incident, how their current cybersecurity tools, technologies and team effectively detected and resolved a malicious attack before it could cause harm

Learning from a Ransomware Breach

Putting a breach under a microscope reveals a multi-faceted and complex organism of sorts. Sometimes a breach is obvious, as with a ransomware attack; and sometimes they’re not so obvious and it takes days, weeks or months to figure out that maybe those system performance issues aren’t so innocent—maybe they’re the result of someone or something on the attack.

A breach bleeds over into regulatory, legal, and business risks. In his presentation, Doug Howard, CEO of Pondurance, will walk us through how attackers orchestrate a breach to exfiltrate the data and assets they’re after and the impact these attack methods can have on an organization. He’ll walk attendees through the process of understanding and responding to a breach: from identification, remediation and evidence preservation, through legal and risk analysis and notification requirements and how to deal with potential litigation. Lastly, he’ll provide specific recommendations on the actions organizations must take to plan for and minimize the risk of a breach—recommendations that  should be incorporated into all incident response (IR) plans.

Key takeaways:

- Business, regulatory, and legal considerations before, during and after a breach
- An in-depth understanding of how a breach happens: from “land” to “expand” and the impacts of exfiltration
- How to respond to a breach: the steps and actions between first discovery and lessons learned after-the-fact
- The importance of pre breach planning including creating an incident response plan, scenario tabletops,  and the critical elements that must be part of being best prepared 
- Considerations for improvements and how to prioritize

Navigating Data Breaches: Strategies for Understanding, Responding, and Mitigating Risk

While Managed Detection and Response (MDR) may seem like a new market, it has already undergone significant evolution. The best MDR is a modern one with a complete toolset, experts available to leverage it, and a close partnership with your team to investigate and respond to incidents. 

Niloo Razi Howe (Chair of the Board) and Ron Pelletier (Founder and CCO) of Pondurance share insight on what modern MDR is and questions prospective customers should be asking of their vendor partners They discuss: 
- The evolution of MDR
- The best solutions for organizations like yours
- Questions to ask potential MDR vendors

Interested in MDR? Learn more here: https://www.pondurance.com/managed-detection-and-response/

The Roadway to Modern Managed Detection & Response

Managed Detection and Response (MDR) is the combination of tools and services that assist in detecting, verifying, and responding to threats and security incidents. The term “MDR” is continuing to evolve but is accepted as an important operational security control for many organizations that need to rely on a third party security operations center (SOC). Many vendors tout the regulatory compliance coverage of the service for PCI, HIPAA, and CMMC, but organizations are missing opportunities to further leverage their MDR service to mature their security posture and address everchanging compliance requirements.  

This presentation will briefly cover the evolution of MDR, its iterations, the well known compliance coverage, but focus on how to integrate third party vendors into policy, procedures, plans, address compliance requirements, and approaches to uncover additional unexpected benefits.

The Unexpected Compliance Benefits of Managed Detection and Response

All organizations have a unique set of business objectives and desired outcomes. Each organization also has its own set of cyber risks, including gaps and blind spots within its network that can expose the business to a cyberattack. Pondurance addresses these unique risks by adopting a risk-based approach to cybersecurity that aligns with an organization’s outcomes, objectives, and risks. 

At the recent RSA Conference, Niloo Razi Howe, Chair of the Board at Pondurance, and Tom Field of Information Security Media Group sat down to discuss risk-based cybersecurity in depth and review the contemporary cybersecurity landscape as a whole. Some of the topics addressed in this discussion are: 

A full-scale breakdown of the term “risk-based cybersecurity”
Current cyber threats to be aware of
Achieving compliance in the face of a constantly evolving regulatory landscape
Prospective questions for cybersecurity providers

Watch the full interview to learn about the benefits of a risk-based approach to cybersecurity.

Double Click on Risk-Based Cybersecurity at the RSA Conference

An organization’s cybersecurity posture and risk tolerance are at the forefront of every CISOs mind. But it can be a challenge for CISOs or cybersecurity leads to communicate how an organization’s cybersecurity investment impacts the overall reduction of risks, and aligns with their business objectives. As a leader in cybersecurity advisory services, Pondurance helps CISOs  and cyber security team leads to “bridge the gap of grief” between the operational security teams and higher level business executives, so that there is a secure understanding of acceptable risk tolerance, and an alignment on the expected impacts of their cybersecurity investment.


In this webinar, Pondurance CEO Doug Howard, VP of Services and CISO Dustin Hutchison, and Executive Chair of the Board Niloofar Razi-Howe break down the silos and provide valuable insights and recommendations on how to bridge this gap between operational teams, and an organization’s board. 


Register now to learn: 

- How to bridge the “Gap of Grief” in cybersecurity
- How to involve your board in your cybersecurity posture discussions How to successfully  liaison between your board and your operational teams
- How “near misses” can present an opportunity for your organization to analyze its own security posture and risk tolerance
- How to tailor your communication secure additional investments in your cybersecurity program

Bridging the Conversation Gap of Grief Between Cybersecurity Professionals, CISOs and the Board

What does "risk-based cybersecurity" mean in today's context? What's the link to Managed Detection and Response (MDR), and what should organizations look for in their MDR provider? Doug Howard, CEO of Pondurance, weighs in with his use cases, compliance and strategies for getting the most from MDR.

In this video interview with Information Security Media Group, Howard discussed:
- What risk-based cybersecurity is in today's context;
- How a risk-based approach helps with regulatory compliance;
- Questions to ask of MDR providers re: risk-based cybersecurity.

Optimizing MDR in Risk-Based Cybersecurity

Organizations today know that their cybersecurity initiatives must be designed not only to identify and protect their resources, but also to detect, respond, and recover. For a variety of reasons — both technical (e.g., threat landscape, regulatory compliance requirements) and operational (e.g., cybersecurity talent shortage, competing needs from IT budgets) — this has led to growth in the adoption of Managed Detection and Response (MDR).

Join us on for this informative webinar, which features a conversation between Derek Brink, vice president and research fellow for Aberdeen Strategy & Research (a division of Spiceworks Ziff Davis) and Johnny Calhoun, senior vice president of MDR operations for Pondurance, about the key benefits of a risk-based approach to MDR. Topics include:

- How much should organizations be investing in cybersecurity? How does your organization compare with others?
- Key dimensions that enter into the choices and tradeoffs an organization makes to address its cybersecurity- and compliance-related risks
- Drivers for partnering with trusted service providers, specifically MDR
- Typical patterns of MDR relationships, from initial consultancy to a trusted extension of internal teams
- A practical discussion about the value of shorter time for detection, response, and recovery

Key Benefits of a Risk-Based Approach to Managed Detection and Response (MDR)

63% of ransomware attackers gain unauthorized access to networks six months or more before they are detected, a troubling statistic that underlines the lack of proper security prevention.

For organizations to mitigate the far-reaching impact of ransomware attacks, the key buzzword is “proactive.”

Discover how to better address and prepare for cybersecurity incidents in the healthcare industry in this webinar.

From Reactive to Proactive: Addressing and Preparing for Cybersecurity Incidents

As modern IT environments become increasingly complex and their attack surfaces continue to grow, organizations are coming to grips with a variety of challenges, including:

• Changing regulatory requirements
• Ongoing cybersecurity talent shortages
• A crowded cybersecurity tech environment
• And more

With this plethora of obstacles to consider, you may be left wondering how you can possibly protect your organization from all the potential risks that stand in your way. However, the good news is, you don’t have to. In fact, it’s a common misconception that you must address every single risk. The reality is, it’s more important to understand and align your risk appetite to your organization’s risk management practices.

In this webcast, you’ll hear from Dustin Hutchison, VP of Services and CISO at Pondurance, and Dave Gruber, Principal Cybersecurity Analyst at Enterprise Strategy Group, as they discuss how IT and security leaders can accelerate security program objectives by utilizing a risk-based approach to security.

Tune in now to discover how you can build a more sustainable security strategy that adapts to the evolving threat landscape and meets your changing business needs.

Accelerate Security Posture with Risk-driven Security Strategies

The abundance of technologies and services available for organizations looking to reduce their cyber risk can make selecting the ideal cybersecurity approach, tools, services, and provider a daunting task. 

How do you find the right approach that aligns your cybersecurity and compliance program with your unique business goals and desired outcomes? 

How do you make the most of the cybersecurity investments you have and consolidate and integrate your existing tools and resources to efficiently reduce your risk and protect your data.

How do you demonstrate outcomes and calculate your cybersecurity program return on investment? 

All these things can be accomplished with a risk-based approach to cybersecurity. Watch this video and see how you can get started right away in efficiently and effectively protecting your business from cyberattacks and regulation headaches today, while setting yourself up to advance and evolve your cybersecurity as your business grows and your needs change.

This video covers:
- Shifting to a risk-based approach to focus your cybersecurity program on business outcomes, ensure regulatory compliance, and reduce risks
- The ever-evolving landscape of cybersecurity and managed detection and response (MDR) and how you can adapt to emerging threats
- Essential questions to ask your potential cybersecurity MDR provider to make sure you have the best solution for your specific needs
- How to get started with an initial risk assessment swiftly pinpointing critical vulnerabilities, laying the foundation for a thorough evaluation of standards like NIST CSF, NIST 800-171, CMMC, NYDFS, third-party vendor risk, PCI DSS compliance, and more.

Risk-Based Approach to Cybersecurity and Compliance

Threat Detection

Data Security

Cloud Security

security vulnerabilities

Ransomware

Zero-trust access

Cyber Defence

Cyber Security

Network Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

From Reactive to Proactive: Addressing and Preparing for Cybersecurity Incidents

Presented by

About this talk

Pondurance