Ensuring Data Security in Hybrid and Multi-Cloud Environments

As the use of multiple clouds and storage services becomes the norm, security risks and challenges increase. From public cloud, to private cloud and cloud-based SaaS, it is essential to secure these complicated environments.

Join this live panel discussion from Black Hat Europe in London to discuss the future of Multi-Cloud Security, including:

- How to adopt a multi-cloud security strategy
- Addressing your cyber risks and challenges
- Managing vulnerabilities, detecting breaches and responding to incidents
- Recommendations for improving enterprise cloud security

Panellists
Gary Marsden, Cloud Services Director, Thales
Darren Busby, Global Head of Sales, MYHSM
James Johnson, Cloud Security Specialist, Proofpoint

Moderator Simon Ratcliffe, Principal Consultant, Advisory, Ensono

Cloud, Cloud Applications, Cloud Adoption, Hybrid Cloud, Multi Cloud, Cloud Security, Risk Mitigation, SaaS, Security Strategy, Cyber Risk, Vulnerability Management, Breach Detection, Enterprise Security

In un mondo che richiede massima flessibilità e continua evoluzione è di fondamentale importanza saper offrire Sicurezza Digitale in una pluralità di contesti diversi. Thales rappresenta un partner affidabile capace di fornire Data Protection sia on-premise, sia in Cloud, che in soluzioni ibride. Thales è pronta per la “next generation digital security”, e tu?

The drum beat of cloud data breaches, the worst being from Amazon S3, continues. The causes of cloud data breaches are no different than on-premises. The difference is the confusion about who is responsible for data security in the cloud, and how cloud-provider encryption is both weak and a violation of multiple best practices, including the shared security model for cloud computing and separation of duties as a core security principle. Learn how Thales’ Bring Your Own Encryption solutions strengthens security, mitigating the effect of cloud data breaches.

Join this interactive interview with NetApp as we discuss how their new partnership is changing the face of Google Cloud’s capabilities.

Enabling businesses to move, deploy and manage enterprise applications - including Windows, SAP and Oracle - onto Google Cloud without re-architecting, NetApp’s technology is powering a new flexible, agile and economic cloud solution.

As of 9am GMT (20th Nov 2019) Google Cloud volumes is generally available and we announced new opportunities between NetApp and Google to enable our customer opportunities.

Panellist - Lena Scaramuzzo, Director of Business Development - Google Cloud Platform, NetApp

Moderated by Andrew Bird, Partner & Consulting CTO, Panamoure Ltd

La necessità di cifrare i propri dati più sensibili perchè richiesto da Normative oppure per proteggere la proprietà intellettuale, i brevetti ed informazioni preziose sono attività ormai centrali per la sicurezza informatica di un’azienda. Thales è in grado di offrire una visione completa ed affidabile per mettere in sicurezza i dati che risiedono in DataCenter locali o cloud e in questo webinar ci illustra tali soluzioni attraverso casi di studio realmente implementati in Italia.

Numerous cloud trends, including storing sensitive data in cloud and the recognition that data security mandates also apply there, drive both cloud consumers and providers to endeavor to share the challenge of keeping data secure in the cloud. This webinar will explore trends and challenges in multicloud computing, introduce a cloud data security toolkit, including requirements to control cloud data encryption keys. From there we will explore a cloud provider case study: Salesforce Shield Platform Encryption and its newest and most secure key management feature: “Cached Keys”. The webinar will close with potential solutions to multicloud data encryption key management including Salesforce Cached Keys.

Moderator:
Tylen Cohen Wood, Private Consultant

Speakers:
Eric Wolff, Senior Product Marketing Manager, Thales
Tuhin Kumar, Product Manager–Security, Salesforce

Nearly half (48%) of all corporate data is stored in the cloud according the 2019 Thales Global Cloud Security Study conducted by the Ponemon Institute. However, despite the growth in cloud adoption, the study also found that there is a wide gap in the level of security precautions being applied by organizations and in different countries. Organizations admitted that on average, only about half (49%) of the data stored in the cloud is secured with encryption and only one-third (32%) believe protecting data in the cloud is their responsibility.

The reality is the cloud has created challenges in knowing where data is stored, who has access to it, and how to best secure it. In 2019, breaches like Capital One occurred because of improperly configured security or web and cloud applications. A major catalyst to address the challenges of cloud security are new government regulations and compliance mandates that will make securing multi-cloud strategies more complex. As a result, companies will be faced with more complicated and intricate auditing to demonstrate security and privacy best efforts in the cloud.

During this webinar, Dr. Larry Ponemon, Chairman and Founder of the Ponemon Institute, and Eric Wolff, Senior Manager of Product Marketing at Thales, will discuss the key findings in the global report and how cloud adoption and cloud security have progressed over the past several years. Join us to learn more about:
- Which cloud services are being commonly used
- What types of security technologies organizations are applying to protect data in the cloud
- What types of data are companies putting in the cloud and which are most at risk
- Which countries are more advanced than others when it comes to cloud security
- Strategies for how organizations can best secure data in multi-cloud environments
- The best security approaches to comply with regulations

With cloud data security, the new mantra is “Encrypt Everything”. And why not. Encryption delivers proven security, automatically addresses existing and upcoming compliance requirements — like California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR) — and is fully integrated into the fabric of the cloud service. But the “just turn it on” mentality abdicates control over data and custodial responsibilities. The reality is that to control and protect your data, you need to own your cloud encryption keys.

In this webinar Adrian Lane, Securosis CTO, co-author of the Cloud Security Alliance (CSA) Security Guidance and cloud security instructor, and Charles Goldberg, Vice President of Data Protection Product Marketing will review best practices for life cycle management of AWS, Azure, GCP, Salesforce, and other cloud provider encryption with Bring Your Own Key (BYOK).

The explosion of cloud applications and identities have set IT decision makers on a quest for reconciling the benefits of the cloud with the security and compliance requirements needs of the enterprise. Much like the user experience offered by mainstream consumer applications, cloud access management solutions have emerged to address the multi-faceted challenges of the new zero trust enterprise network. With cloud applications now a crucial part of day-to-day business operations, the 2019 Thales Access Management Index found that almost half (49%) of IT security professionals believe cloud applications make them a target for cyber-attacks. Cloud applications are listed in the top three reasons an organization might be attacked, just behind unprotected infrastructure such as IoT devices (54%) and web portals (50%).

This webinar will review the findings of the Thales global report and how organizations around the world are approaching cloud security and the technologies they are using to secure employee access to cloud services. Specifically, in this webinar attendees will learn:
- What are the major attack vectors for cyber attacks
- Which access management technologies organizations are deploying to secure access to the cloud
- Which access management technologies IT professionals deem the most effective in securing access to the cloud
- The criteria IT professionals use to determine access policies for users
- Who are the internal stakeholders involved in Access Management deployments

61% of organizations are concerned about their ability to keep keys and certificates secure throughout their lifecycle. As demand to support more devices and applications continues to put pressure on PKI teams, the need for security and automation has reached a tipping point.
Join our 30-minute webinar and live demo with Michael Kubach, Solutions Engineer at Keyfactor, and Paul Massis, Solutions Engineer at Thales. You’ll learn how to overcome the challenges of keeping keys and certificates secure, and understand which assets demand the highest level of protection.
Discover how Keyfactor and Thales have partnered together to help organizations protect and automate the lifecycle of their keys and X.509 certificates, including a demo of the integration between Keyfactor and Thales SafeNet Luna and SafeNet Cloud HSMs.

The explosion of cloud applications and identities have set IT decision makers on a quest for reconciling the benefits of the cloud with the security and compliance requirements needs of the enterprise. Much like the user experience offered by mainstream consumer applications, cloud access management solutions have emerged to address the multi-faceted challenges of the new zero trust enterprise network. With cloud applications now a crucial part of day-to-day business operations, the 2019 Thales Access Management Index found that almost half (49%) of IT security professionals believe cloud applications make them a target for cyber-attacks. Cloud applications are listed in the top three reasons an organization might be attacked, just behind unprotected infrastructure such as IoT devices (54%) and web portals (50%).

This webinar will review the findings of the Thales global report and how organizations around the world are approaching cloud security and the technologies they are using to secure employee access to cloud services. Specifically, in this webinar attendees will learn:
- What are the major attack vectors for cyber attacks
- Which access management technologies organizations are deploying to secure access to the cloud
- Which access management technologies IT professionals deem the most effective in securing access to the cloud
- The criteria IT professionals use to determine access policies for users
- Who are the internal stakeholders involved in Access Management deployments

Digital transformation is fundamentally impacting all industries, and nowhere is this truer than in retail. The internet and mobile technologies have fundamentally changed retailers’ business models, not only by opening new channels to reach customers, but also how they communicate with, serve, and support them.

While digital transformation is touching every industry, U.S. retailers are leaders are on the leading edge of implementations,
with 42% of retailers saying they are either aggressively disrupting the markets in which they participate or embedding digital capabilities that enable greater organizational agility. While Digital Transformation is allowing retailers to introduce new business models and reach more customers in new and innovative ways, it is introducing added difficulties for information security professionals and raises the potential to put sensitive customer data at risk.

Based on the results from the 2019 Thales Data Threat Report – Retail Edition, participants in this webinar can expect to learn about:
•How the adoption of digital transformation technologies, and especially cloud, is putting sensitive data at greater risk
•The data security challenges facing retail companies today
•Critical analyst recommendations for how organizations can be most effective when selecting the right tools that will enable them to manage greater amounts of complexity, that span legacy on-premises needs as well as modern, cloud-based, edge-oriented technologies.

In a recent Thales survey, two thirds of CISOs cited the increase in cloud service adoption, combined with a lack of strong security solutions, as the main reasons cloud services are the prime targets of attack. As organizations undergo digital and cloud transformation, CISOs and security officers are operating in a high stress environment caused by security, compliance and manageability challenges.

In this presentation we’ll discuss how identities are becoming the new security perimeter in a zero trust world and present best practices for implementing an access management framework that can help organizations remain secure – and scale – in distributed networking environments.

Driven by government mandates, the need for greater efficiency, and the desire to enable better patient care U.S. healthcare organizations are universally adopting cloud and other digital transformation technologies. But this transition can put patients’ sensitive healthcare and financial information fundamentally at risk. In this session, we’ll address the state of data security in healthcare companies today, the changing landscape of risks to data due to digital transformation, and IT security pros priorities for data security today.

Based on the results from the 2019 Thales Data Threat Report – Healthcare Edition, expect to learn about:
- How the adoption of digital transformation technologies, and especially cloud, is putting sensitive data at greater risk
- The data security challenges facing healthcare companies today
- Critical analyst recommendations for how organizations can be most effective when selecting the right tools to protect their sensitive data

Since Australia’s Notifiable Data Breaches (NDB) scheme launched on the 22nd February 2018, the Office of the Australian Information Commissioner (OAIC) noted that there were 964 data breaches reported between 1 Apr 2018 and 31 March 2019. This equates to just over 700% increase in data breaches reported compared to the 114 data breaches voluntarily reported in the previous year … a mind blowing statistic.

With cyber-attacks unwaning, it is not surprising to see that the Australian Prudential Regulation Authority (APRA) released its Prudential Standard CPS 234 for Information Security on 1st July 2019. The objective of CPS 234 is to ensure all APRA regulated entities in the banking, insurance and superannuation industries are prepared to protect against any information security incidents (including cyber-attacks) and are able to respond swiftly and effectively in the event of a data breach.

This webinar will:
•Discuss the key requirements of CPS 234
•Identify disruptive cybersecurity trends and the implications
•Share best practices to protect against data breaches

Featuring:
Graeme Pyper, Regional Director Australia & New Zealand at Thales

The explosion of cloud applications and identities have set IT decision makers on a quest for reconciling the benefits of the cloud with the security and compliance requirements needs of the enterprise. Much like the user experience offered by mainstream consumer applications, cloud access management solutions have emerged to address the multi-faceted challenges of the new zero trust enterprise network. With cloud applications now a crucial part of day-to-day business operations, the 2019 Thales Access Management Index found that almost half (49%) of IT security professionals believe cloud applications make them a target for cyber-attacks. Cloud applications are listed in the top three reasons an organization might be attacked, just behind unprotected infrastructure such as IoT devices (54%) and web portals (50%).

This webinar will review the findings of the Thales global report and how organizations around the world are approaching cloud security and the technologies they are using to secure employee access to cloud services. Specifically, in this webinar attendees will learn:
- What are the major attack vectors for cyber attacks
- Which access management technologies organizations are deploying to secure access to the cloud
- Which access management technologies IT professionals deem the most effective in securing access to the cloud
- The criteria IT professionals use to determine access policies for users
- Who are the internal stakeholders involved in Access Management deployments

Although most major cloud providers now offer native cloud Hardware Security Module (HSM) services, how do you choose the right cloud HSM? According to 451 Research, 69% of enterprises now have a hybrid, multi-cloud strategy. With hybrid, multi-cloud environments likely to be the norm as we move into 2020, managing multiple cloud HSMs will increase complexity, cost of ownership and operational overhead.

Join us as we discuss the complexities of managing native cloud HSMs separately, leading to islands of security with different features and rules for each. We’ll show you how the smarter and simpler route is to use a cloud HSM provider that can centrally manage and secure your entire cryptographic operations across all cloud environments.

This informative webinar will cover:
• A current view of the cloud’s impact on IT business models
• Why HSMs are critical to data security on premise or in the cloud
• How creating centralized key management and security strategy will make your cloud life a whole lot easier
• Building blocks for an HSM strategy for security across all cloud and hybrid IT environments

When you sign a piece of code, you make a statement that it comes from your trusted brand and that you stand behind it. But what happens when that trust is broken? Recent attacks, such as the ASUS Live Update hack, underscore the importance of managing reputational risk.

As attackers become increasingly skilled in the art of signing and spreading malware, all business leaders must invest in the trust associated with their digital brand – and expect the same of their vendors. The challenge is how to secure code signing keys and certificates in today’s distributed and fast-paced DevOps environments.

Join our experts as they discuss:
- Code Signing: What is it? Why does it matter?
- Recent Attacks: The Risks and Challenges of Code Signing
- How to Secure Code Signing at the Speed of DevOps
- How Thales and Keyfactor Make It Possible