Name: Mission Possible - Luna 7 HSMs land to deliver the way forward
Start: 2021-06-15T10:00:00Z
End: 2021-06-15T10:26:03.000Z
Location: BrightTALK
Rating: 4

Today’s enterprises depend on the cloud, data and software in order to make decisive decisions. That’s why the most respected brands and largest organizations in the world rely on Thales to help them protect and secure access to their most sensitive information and software wherever it is created, shared or stored – from the cloud and data centers to devices and across networks. Our solutions enable organizations to move to the cloud securely, achieve compliance with confidence, and create more value from their software in devices and services used by millions of consumers every day.

We are the worldwide leader in data protection, providing everything an organization needs to protect and manage its data, identities and intellectual property – through encryption, advanced key management, tokenization, and authentication and access management. Whether it’s the securing the cloud, digital payments, blockchain or the Internet of Things, security professionals around the globe rely on Thales to confidently accelerate their organization’s digital transformation. Thales Cloud Protection & Licensing is part of Thales Group.

Due to recent global events, the Cybersecurity and Infrastructure Security Agency (CISA) in partnership with Department of Homeland Security (DOHS) have issued numerous “Shields UP” advisories, its highest alert status, indicating cyber threat actors are actively targeting agencies and organizations within the US and beyond. And while threat activity has escalated in recent months and even years, their technology is becoming more advanced and harder to detect.  

CISA, in partnership with major national security agencies, recommends all organizations—regardless of size or industry—adopt a heightened posture when it comes to cybersecurity and protecting their most critical assets. Thales recognizes the challenges these organizations face when trying to identify potential gaps in their cybersecurity plan as well as understanding the available resources required for urgent security improvements.  

Please join David Ortega, Senior Solutions Architect from Thales and Scott McHugh from the Institute of Homeland Security at Sam Houston State University, as they discuss:
• Who, or what, is behind the latest security threats prompting CISA’s “Shields UP” alert status
• How it impacts public and private organizations specifically government, supply chain and critical infrastructure 
• Capabilities and cyber tools of Advanced Persistent Threat (APT) actors with real world examples 
• How to quickly identify (detect) and mitigate existing gaps in your cybersecurity plan
• Available resources necessary for “Shields UP” readiness

Leverage Shields Up Guidance to Heighten Your Cybersecurity and Protect Assets

Financial Services companies keep some of their most valuable data in SAP applications, triggering the need for both additional security and taking steps toward meeting compliance requirements. The need increases as they move workloads to the cloud. For many of these organizations, the challenge is to adopt the right security without having to change their architecture or engage in custom coding. Fortunately, SAP and Thales have worked together to solve these challenges for Financial Services customers. Join us to learn how SAP’s Data Custodian uses Thales tokenization, encryption, and key management solutions to protect sensitive data and provide compliance relief for regulated Financial Services data:

- Adopt the right security without changing your architecture or engage in custom coding
- Automate encryption key lifecycle management across cloud environments
- Simplify compliance with privacy, sovereignty, and data security regulations such as GDPR, Schrems II, and PCI

Security & Compliance for SAP Data in Financial Services with Thales and SAP

The payments industry is undergoing intense transformation caused by customer demands, technology advancements, globalisation, disintermediation by new entrants, and increasing regulatory requirements. On top of this, fraud by cyber criminals continues to evolve with attacks becoming increasingly sophisticated.

Join this webinar where will discuss evolving trends, technologies and regulations affecting the payments industry and how Thales can help meet these challenges.

Digital First Payment Security

Join Tim Phipps as he explores a range of questions IT Security professionals are asking: 
1) What is currently driving the demand for putting sensitive data into the Cloud?
2) Hyperscalers have invested huge sums in cloud security so shouldn't we just rely on native encryption keys and key management provided by them to protect sensitive data in the cloud?
3) Is Schrems II now invalid with the recent commitment to the new Trans-Atlantic Data Privacy Framework?
4) What measures can orgainsations adopt to control their Digital Soveriegnty and how to remediate risk once it knows where its sensitive data resides.

With a rapidly evolving landscape, Tim will be able to answer your burning questions about the latest guidance to ensure your data is protected and how you can demonstrate compliance so you can continue to focus on enabling your business outcomes.

Can You Trust The Cloud With Your Sensitive Data?

Businesses across the globe are accelerating the shift to the cloud in a modern digital world where hybrid workforces are accessing data from anywhere. This is driving dramatic increases in multicloud adoption to enable effective and efficient remote work. Along with this shift, security challenges have changed and increased, and are top of mind for IT teams and security professionals.

As more data is stored across multiple cloud providers, cloud data breaches and failed audits continue to present issues for companies surveyed. Attacks targeting cloud resources are also on the rise, and enterprises need help understanding what threats to be concerned about and how to protect against them. New types of both security platforms and cloud native security services have emerged, and enterprises need help understanding which ones they should consider adopting for various cloud security use cases, especially as they apply to sensitive data and workloads.

This webinar presents key findings from the 2022 Thales Cloud Security Study which is based on a global survey of nearly 2,800 respondents from 17 countries and a broad range of industries. The purpose of this study is to help enterprise IT and security teams understand the cloud and security challenges faced by their peers to help guide cloud security strategy and budgets. Some of the topics addressed in include: Just how more widespread is multicloud adoption? What are the operational challenges of managing security across multiple clouds? How are organizations securing access and protecting sensitive data in cloud? Which technologies and best practices are most effective in securing data in the cloud?

Trends in Cloud Security: Key Findings from the 2022 Thales Cloud Security Study

When it comes to systems, devices and users, the expanding sprawl of digital objects has created a potential threat but they can’t accurately diagnose and mitigate – at least not with in-house, Do-It-Yourself (DIY) PKI.

In our new webinar with DigiCert, we dive into the threat of the unknown and how to counter these attack vectors. With DigiCert’s managed PKI solution & Thales HSMs as the root of trust, you can unify and simplify your security environment. Join us as Brian Trzupek of DigiCert and Sol Cates of Thales cover the following topics:

How third-party CA risks can be difficult to surface
How to scan, discover, and identify security vulnerabilities
How to control all endpoints at-scale
How to automate your security infrastructure

Taming Identity, Device, and Certificate Sprawl

You’d be forgiven for thinking that, as the major cloud providers have massive security teams, you can strike ‘security’ off your list of things to worry about when migrating to the cloud.  Whilst the big cloud providers will take care of both the perimeter security and physical servers, your organisation will still be responsible for maintaining access management, the applications running in the cloud and more.

Join Danna as she looks at the benefits of adopting a share security model enabling you to take ownership of who is getting what access to your data in the Cloud, controlling login credentials and using multi-factor authentication to prevent data leaks.  Learn how to identify and remedy any potential weaknesses in your cloud security to mitigate reputational damage and maintain business continuity.

How can a shared security approach help ensure that your security is watertight?

As the pandemic continues to affect both business and personal lives, expectations of a ‘return’ to pre-pandemic conditions have faded from most plans. Underlying trends that have always driven information security, such as new technologies, greater compliance mandates and more severe security incidents, continue to be significant change agents. The 2022 Thales Data Threat Report, based on data from a survey of almost 2,800 respondents from 17 countries across the globe conducted by 451 Research, part of S&P Global Market Intelligence, reviews and analyzes these trends and changes.

Many organizations continue to be unprepared for the security challenges of diverse threats, ransomware, accelerating cloud transformation and hybrid work. In fact, according to the report’s survey 21% of all respondents said they had experienced a ransomware attack. Furthermore, 22% of respondents worldwide said they have paid or would pay a ransom for their data.

This webinar will review the changing landscape of data security risks and threats. Specifically, you can expect to learn about:
• Leading sources of data threats
• Ransomware preparedness and how it has changed breach economics
• Breaches and their impacts weigh on security planning
• Data sprawl’s impact on data security
• Cloud usage trends and security practices in the cloud
• Threats of remote and hybrid workforces
• Future threats such as quantum computing

Key Findings from 2022 Data Threat Report - Global Edition

Within a permissioned blockchain, transactions are validated and processed by participants that are already recognized by the ledger. Despite this, there are still calls for further security enhancements to enable trust. For example, how can one avoid the substantial impact in the event of a cyberattack? 

To protect blockchain solutions in Hong Kong, the Securities and Futures Commission (SFC) introduced a regulatory framework in late 2018 and position paper in 2019 to license and regulate virtual asset trading platform operators. Under this framework, platform operators and their Associated Entities must implement strong internal controls so all cryptographic seeds and keys are securely generated, stored, and backed up in a secure, certified environment.

Join us for a fireside chat to learn how Hashkey Group now brings trust and security to their blockchain solution and how Thales secures core blockchain technologies and communications across the blockchain network.

Fireside Chat : Bringing Trust and Security to Blockchain

By now, US Government IT groups are well aware of Executive Order (EO) 14028 and the underlying promise to better protect the United States.  The bigger challenge remains however, what are the clear requirements and who can help assemble a plan for successful implementation (often with limited resources)?

Join us to hear Microsoft and Thales discuss new solutions for planning and compliance. The webinar will cover
• What are the EO and Zero Trust architecture requirements?
• How does this impact your business?
• Certificate-based authentication (CBA) in the Microsoft Cloud
• Modern authentication methods such as MFA
• Formulating a plan forward

Microsoft & Thales: Confusion and Planning for Zero Trust Architectures

A major European energy company had to implement a data protection strategy to secure the critical infrastructures that they are operating, and at the same time safeguard their competitive advantages and meet regulatory requirements, such as GDPR.
The data in question resides in many systems and repositories across the company, including on-premise data centers, as well as numerous SaaS platforms and hyper scalers in the cloud.
Cryptas was entrusted by the customer, to implement a company-wide key management and data protection solution, based upon the Thales CipherTrust platform.
In our webinar, we will give insights into the chosen solution architecture and we will highlight some of the challenges and lessons learned during its implementation.

The energy sector threat: How to protect your customer´s sensitive data

With remote work becoming the new norm for many companies, organizations need to secure their employee’s work-from-home network. Identity Access Management (IAM) secures all remote networks and enables employees to secure and easily access the data they need for their role. At present, Hardware-based Public Key Infrastructure (HW-based PKI) is the most secure and reliable technology to mitigate threats for sensitive information using two-factor (2FA) or multi-factor authentication (MFA). 

At most enterprises, the trend is toward fewer and fewer laptops with embedded smart card readers and tablets without USB ports. The deployment of physical cards may require additional logistical contraints and  during recent months many organizations faced challenges around hardware shortage due to the global pandemic. Now,  Virtual Smart Cards (VSCs) act as physical credential replacements, enabling 2FA on a device without requiring extra hardware. 

The key takeaways from this talk will include the following:
● Participants will gain an understanding of  virtual credentials and their unique benefits for organizations 
● Participants will learn about  the types of and use cases for virtual credentials
● Participants will view real-life use cases and a demonstration of   the issuance of client-based Virtual Smart Cards (VSCs) with centralized management capabilities

The Rise of the Virtual PKI Credential

Quantum computing is progressing rapidly, and in only a few years, a quantum cyberattack could cripple large networks in a matter of minutes. What happens when a cybercriminal, armed with the quantum power to break traditional encryption algorithms, can analyze massive amounts of data sets in seconds, or compromise critical infrastructure in the same amount of time? Where will the attack come from? What industries are most likely to be targeted first?

In this webinar, data security experts from Thales and Quantum Xchange discuss the anatomy of a cyberattack, and assess how much more destructive they will be when backed by the power of quantum computing.  Next, we’ll offer guidance of how to meet emerging government mandates and prepare for the forthcoming crypto migration – replacing classic encryption with NIST-backed Post-Quantum Cryptography (PQC) algorithms.

Assessing the True Threat and Potential Damage of Quantum Computing Cyberattacks

Thales was invited to share the path to a passwordless future at Microsoft Hong Kong Cybersecurity Summit 2021, with the theme of mitigating risks and strengthening your security posture to safeguard your organization for 2022 and beyond. 

Presenters
- Tommy NHAM, Manager, Identity and Access Management, Greater China and Korea, Thales Cloud Security 
- Amy LO, Cloud Endpoint Technical Specialist, Microsoft Hong Kong

Breaking up with password: The path to a passwordless future

Cyberattacks are on the rise and passwords no longer provide sufficient safeguard against unauthorised access to the Salesforce data. The cybersecurity threat landscape has evolved, with sophisticated methods of targeting user accounts and stolen data harming businesses more than ever. It's important to implement strong security measures to protect your business, data, and customers. Multi-factor authentication (MFA) is one of the simplest and most effective ways to help prevent unauthorised access to your Salesforce data. Yet many organisations struggle to implement the right MFA solution resulting in gaps for multiple user authentication journeys. To protect your valuable customer data and keep them secure, businesses need to enable MFA to access Salesforce. Does your organisation have a plan to move forward?
Join this webinar to learn how Persistent and Thales have helped our customers to bridge their MFA gaps to secure Salesforce

Secure your enterprise with multi-factor authentication for your Salesforce

Organisations are compelled to adapt to the evolving risk and threat environment to protect their valuable and sensitive assets. Access security and authentication plays an important role. However, organisations are facing many challenges that prevent them from mitigating expanding threats against identity theft. 

Join Chris Martin as he gives an overview of the emerging authentication landscape and the challenges towards a modern, dynamic access security. He will examine how supporting a range of user authentication journeys can help organisations balance strong security with a smooth user experience.

Supporting Multiple User Authentication Journeys Enables Modern Access Security

The Thales Luna 5/6 HSMs are going end of life in Sept 2022 and as such we have released the latest version of Luna HSM's i.e. Luna 7 Network HSM's. These HSM’s are not only faster than their predecessors but are packed with additional features to provide a more efficient offering and are also the HSM’s that we have submitted for FIPS 140-3 certifications. 

There are different ways to upgrade your legacy Luna HSM’s to the latest ones. Join the session to learn more about the FIPS roadmap and explore the different ways to upgrade to the latest HSM.

Mission Possible - Luna 7 HSMs land to deliver the way forward

Cyber Security

Data Protection

Digital Transformation

Data Security

Key Management

Compliance

Cyber Defence

Cyber Crime

Secure Cloud

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Mission Possible - Luna 7 HSMs land to deliver the way forward

Presented by

About this talk

More from this channel