Name: New Approaches To Protecting Sensitive Data As Current Layered Defenses Have Failed
Start: 2024-10-16T18:00:00Z
End: 2024-10-16T18:00:40.000Z
Location: BrightTALK
Rating: 4.2

Our events are featuring industry leaders in data security and privacy. In this series, we delve into the latest trends, technologies, and best practices with renowned experts who are shaping the future of data protection. Each episode provides invaluable insights, actionable strategies, and a glimpse into the innovations safeguarding our digital world. Whether you’re a seasoned professional or new to the field, our series offers the expertise you need to stay ahead in the ever-evolving industry.

The Network and Information Security (NIS2) Directive is a significant update to the original NIS Directive (NIS1), aiming to enhance the overall level of cybersecurity across the European Union (EU). Set to take effect on October 17, 2024, NIS2 extends its scope to include more sectors and imposes stricter requirements on organizations to improve resilience against cyber threats.

NIS2 introduces new governance frameworks, mandates more comprehensive risk management practices, and requires incident reporting within a tighter timeframe. The directive's goal is to address the evolving cybersecurity landscape and ensure a higher standard of security across the EU.

In this webinar Borneo's experts on NIS2 will discuss the major sections as they apply to data security and governance requirements in order to protect networks from breaches and safeguard sensitive data. We will also show how to reduce manual efforts in gathering the information in case of an audit, assess your risk in minutes or hours, and remediate and eliminate discovered risks to achieve continuous compliance.

Oct 17 2024 Deadline is Coming! Mapping NIS2 Directive to Data Security and Governance Requirements

Organizations are increasingly leveraging Data streams for processing and analysis of constant, continuous and fast-moving data such as web engagement, eCommerce transactions, IoT device transmissions, or geolocation and traffic monitoring. Confluent Kafka Stream Catalog provides a market-leading solution for real-time data aggregation, sampling, and filtering, allowing analysts to access data instantly and gather actionable insights or make adjustments as changes occur.

However, IT Security teams must strike a balance between protecting sensitive data and making sure organizations can extract business value from technology investments. However, it has proven challenging to effectively gain visibility into sensitive data that moves within data streams. 

In this webinar, we will discuss these challenges, how data security solutions are mostly unable to identify sensitive data within stream solutions, and how to better protect sensitive data within Confluent Kafka Stream Catalog and reduce the risk of a data leak or breach, as well as assure compliance.

Uncover Sensitive Data Risks Hidden within Confluent Kafka Streams and Learn Remediation Strategies.

In this episode, Ben Martin, the Author of GDPR for Startups and Scaleups and Trustpilot's Privacy Director, will talk with Sanjay Raja, Borneo's VP of Marketing, about how to ensure compliance with global data protection regulations, how to effectively communicate your privacy efforts to customers and partners to build trust, the challenges he noticed in the industry and what can you take from his book in order to solve them, and many more.

Building Trust Through Data Privacy & Security: Privacy Essentials from the Author of GDPR for Startups and Scaleups

In this Privacy Chat, Martin Gomberg, the founding member of "The Privacy Panel", and Bill Brady, Director of Solutions Engineering at Borneo, will talk about the current state of data security and privacy in the industry today, fundamental best practices for organizations to ensure robust data security, some common mistakes organizations make when it comes to data security and data privacy, among others.

As a strategic technology executive for a global bank, a former CIO for a global media network, a CISO, a privacy specialist, a speaker and an author, Martin brings decades of leadership and business operations and a unique perspective to the development and maturity of security, privacy and technical operations programs.  As the 'Privacy CIO', and now as a Founding Member of the newly formed ‘The Privacy Panel’, Martin advises companies and their leadership on maturing, integrating and globalizing Privacy, Data and Business Protection programs.

Harnessing the Power of Data Security and Privacy - Best Practices and Common Pitfalls

In this Privacy Chat, Kai Warmbold, In-house Legal Counsel at Uberall, and Bill Brady, Director of Solutions Engineering at Borneo, will talk about the core principles of privacy and compliance Uberall prioritizes, how to balance operational efficiency with regulatory requirements, how the landscape of privacy and compliance has evolved and what are some future trends we'll see, among others.

Kai is an In-house Counsel at Uberall and responsible for both data protection as well as commercial law. He is well-experienced in negotiations with commercial, legal and procurement stakeholders of customers, partners and vendors. At the same time, he also regularly collaborates with different internal departments on legal-related matters to achieve his organization's strategic and commercial objectives while at the same time coordinating its data processing activities in light of different applicable data protection laws.

Making Privacy and Compliance an Ally - Uberall’s Legal Counsel’s Perspective

Alex Willan, Global Head of Privacy and DPO at Teya, and Patrick McKinney, Head of Product at Borneo, will talk about how to ensure compliance with data protection regulations when handling payment data, how can organizations effectively address the most common challenges, and how to strike a balance between implementing strong privacy measures for payment data and ensuring a seamless user experience, among others.

Alex is currently serving as Global Head of Privacy and DPO at Teya, leading the organization’s data protection compliance efforts, providing legal guidance, and collaborating with various departments to ensure responsible data handling practices.

He is an experienced legal professional with extensive knowledge in data protection and data privacy. He has a proven track record of mitigating legal risks, ensuring regulatory compliance, and protecting sensitive information.

Protecting Payment Data and Gain Business Insights - from a DPO Perspective

In this Fireside Chat, Max Hanson, Managing Director at KPMG US, and Patrick McKinney, the Head of Product at Borneo, will talk about compliance automation, automating privacy programs which are imperative to a company’s risk and compliance posture, and how customers are benefiting from Borneo and what are some of the features coming on the horizon for Borneo, among others.

Max is a Managing Director in KPMG’s Digital Lighthouse practice focused on Fintech and Web 3.0. His focused client accounts include Meta and Coinbase.

He is passionate about solving complex business problems with technology and has experience doing so at some of the largest technology and most disruptive clients in the world. He is a collaborative hands-on leader who brings digital solutions to life creating meaningful business value in a safe and secure manner.

The San Francisco Business Times 40 under 40 list, has recognized Max for his exceptional leadership in building trust in tomorrow’s technologies across crypto, blockchain, and Metaverse.

The Power of Automating Data Security & Privacy

Sonia Siddiqui, Privacy Leader and former Privacy Counsel at Coinbase, will talk about how blockchain technology can enhance privacy, the main challenges when it comes to blockchain regarding data privacy, what solutions there are for them, and how to successfully communicate blockchain benefits to the decision-makers, among others.

Sonia is the former Senior Counsel for Global Data Privacy and Security at Coinbase, Inc., a leading cryptocurrency exchange. Sonia advised product teams and other stakeholders on privacy requirements as it relates to new features, products, and launches.  Additionally, Sonia supported the maintenance of the global privacy program through the review and revision of privacy policies, and notices, conducting gap assessments, and interfacing with regulators to discuss privacy practices with a focus on the crypto industry. 

Sonia has several years of experience assisting multinational clients in various industries including telecommunications, healthcare, retail, and technology. She has provided project management support and subject matter expertise on projects involving GDPR and CCPA readiness assessments, implementation efforts, data inventorying, third party management, privacy governance and policy development.

Leveraging Blockchain for Privacy - Enhancing Solutions

In this Privacy Chat, Ed Britan, leader of Salesforce’s Global Privacy and Marketing Legal Team, will talk about managing a global legal team, how to achieve successful AI implementations, and challenges in striving for a balance between AI innovation and data protection, among others.

Ed is an accomplished leader in the privacy, policy, and technology fields, with a wealth of experience and knowledge from various leadership roles. He leads Salesforce’s Global Privacy and Marketing Legal Team, where he and his team are responsible for building and overseeing the Salesforce privacy program to keep pace with the latest global developments in privacy and data protection regulations and legislation for Salesforce and its customers.  

Previously, Ed held leadership positions at Microsoft, where he worked on both the privacy and government affairs teams. He has been recognized for providing expert guidance on the EU General Data Protection Regulation (GDPR), California’s privacy laws, and comprehensive data protection and data sovereignty measures that have recently passed in many other U.S. states and foreign countries, including China, India, Japan, Brazil, Argentina, Russia, Canada, Kenya, and many others.

Balancing AI Innovation and Data Protection

Throughout this Privacy Chat, Nicolette Nowak, the Associate General Counsel and Data Protection Officer at Beamery, will talk about AI Ethics & Regulations and how can you leverage AI technologies for business growth, talent acquisition, innovation, and data protection, among others.

Nicolette is Associate General Counsel/DPO at Beamery, a Talent Lifecycle Management platform. She thrives on partnering with the business to help it achieve its goals and live its values, and is currently focused on all things AI and Privacy, to keep Beamery ahead of all related regulations. She leads the day-to-day operations of an incredible legal team that supports sales, HR, product, infosec, finance, and marketing, to provide practical, business-friendly advice. Before that, Nicolette worked at world-class technology companies in San Francisco and New York City.

Data Privacy and Responsible AI Practices - Navigating the Changing Landscape

This Privacy Chat will have Patrick McKinney, former IT Risk, Governance & Compliance at Coinbase, Dropbox, and Salesforce talking with Nicholas Knoop, Director, Associate General Counsel – Privacy, Security, and Risk at HubSpot, about Data Visibility while growing internationally.

Nick is an experienced in-house counsel with deep domain expertise in solving complex, global privacy and cybersecurity challenges and leading cross-functional teams in SaaS.

You can read here Nick’s article on “Making Trust a Priority: A Framework for the Ethical Use of Data” - https://medium.com/@HubSpot/making-trust-a-priority-a-framework-for-the-ethical-use-of-data-75a33211e7dd

How to Manage Data Visibility while Growing Internationally

Data breaches and privacy concerns are an increasingly important issue for organizations of all sizes, public and private. As a result, leaders are finding they need to rethink how they manage and protect sensitive information. 

This presentation looks at new, transformative trends in automation for data management which, in addition to being more efficient, can support data privacy and security. Industry thought leader Donald Farmer will explore the limitations of manual data handling and how automation can mitigate risks associated with human error, poor performance, and inconsistencies. You will learn about cutting-edge automated solutions that enable real-time monitoring, access control, and regulatory compliance. 

By adopting an automated approach - even just starting out on this path - organizations can not only safeguard their data assets but also build trust with customers and stakeholders.

It’s an important topic and one which will resonate with every data manager concerned with security and privacy.

Automating Data Management to Secure Data and Build Trust

As organizations handle vast amounts of data across multiple repositories, the need for comprehensive data management has never been greater. In this webinar, we'll explore how Data Discovery and Classification lay the foundation for effective governance and privacy. You'll learn how the various disciplines of data management must work together to secure sensitive information and ensure compliance, while addressing the challenges of excessive access, complex entitlements, and endpoint vulnerabilities.

Watch the session to learn how to:
- Identify and classify sensitive data across diverse repositories to reduce security gaps.
- Govern and manage access, entitlements, and permissions to prevent unauthorized exposure.
- Implement best practices for maintaining control over endpoints and ensuring ongoing compliance with privacy regulations.

This webinar will provide the knowledge and tools you need to take control of your data management strategy and enhance your organization's security and compliance posture.

The Path of Data Management: From Discovery & Classification to Governance & Privacy

In today's digital landscape, cyber threats make identity protection more critical than ever, especially in managing employee access. With the rise of increasingly dangerous identity-related attack vectors such as account takeover (ATO), insider threats, and adversary-in-the-middle (AitM) attacks, safeguarding identity has become essential. As threats become more commonplace and breaches more costly, protecting employee, contractor, and partner identities is paramount to maintaining security and operational integrity. 

Join Ping Identity's VP of Sales Engineering Advait Deodhar and Workforce IAM Evangelist Max Fathauer in this webinar to explore risk-based authentication and how incorporating risk signals into your security stack fortifies identity and prevents breaches. We'll dive into PingOne Protect, the Ping Identity Platform’s comprehensive risk engine, and how it analyzes threats, aggregates multiple risk predictors and creates a risk score to help you stop bad actors and mitigate risk. Discover how advanced features like machine learning risk algorithms, pre-configured risk policies, and out-of-the-box risk predictors can thwart emerging threats while alleviating your organization's MFA fatigue.

Key Takeaways:
● Understanding Risk Signals: Learn what risk signals are and how the Ping Identity Platform enables you to detect and respond to identity threats in real-time
● Leveraging Risk-Based Authentication: Discover why risk-based authentication is crucial for reducing unauthorized access and breaches
● Implementing Security Measures: Learn how PingOne Protect shields your organization against some of the most common and damaging threats, including third-party threats
● Reducing MFA Fatigue: Explore how risk signals can be leveraged to provide a more seamless end-user experience while still facilitating secure user journeys

Identity Threat Protection: Harnessing Adaptive Access Control for Enterprise Data Security

In today's dynamic threat landscape, building a security-first culture is essential for safeguarding an organization’s data. This panel session, featuring Michelle Pruitt, Binta Kindle, Swati Popuri, and Cherie Griffith-Dunn, will explore leadership tactics for fostering a mindset of holistic data protection across all levels of the organization.

Key topics include:
- Establishing a security-centric organizational mindset.
- Best practices for leadership to encourage proactive data protection.
- Effective training strategies for promoting security awareness.
- Integrating security considerations into AI and digital workflows.
- And more

Join us to discover how to empower your team, regardless of their technical background, to embrace security as a core value and enhance your organization’s data protection strategy.

Building a Security-First Culture: Leadership Strategies for Holistic Data Protection

Automation in cybersecurity holds the promise of making the world a safer place. However, this promise can be broken if we place blind trust in automation without proper checks and balances. 

In this presentation, industry thought leader Alex Holden will share his knowledge and experience to guide you through the crucial decisions of where to trust AI, where to automate, and where human judgment and decision-making are still indispensable for achieving the most secure outcomes.

To Automate or Not Automate: Guide to Cybersecurity Best Defenses

In an era where data breaches and cyber threats are becoming increasingly common and complex, the need for a comprehensive data security strategy has never been more critical. 

This talk from industry thought leader Efe Ogolo will explore the evolving space of data security from a fragmented set of practices to a holistic, integrated approach that is made up of technological safeguards, regulatory compliance, and the cultivation of a security-conscious organizational culture. Listeners will gain insights into cutting-edge security technologies, including AI-driven threat detection and response systems, as well as the importance of aligning security protocols with legal requirements and industry standards. Moreover, the discussion will touch on the often-overlooked human element -- how fostering a culture of security awareness and accountability can be a powerful defense against both external and internal threats. 

This session is designed for business leaders, IT professionals, and data custodians looking to strengthen their data security posture in a rapidly evolving digital landscape.

Integrating AI, Compliance and the Human Factor in a Comprehensive Data Security Strategy

As modern threat actors become increasingly sophisticated, organizations must move beyond traditional cybersecurity measures and develop comprehensive strategies that enable them to anticipate, withstand, recover from, and adapt to cyber incidents.
 
In this fireside chat, we'll explore the critical importance of cyber resilience in today's rapidly evolving digital landscape. During the session, David Antonio Green, CSTO for Cybersecurity at Hitachi Vantara is speaking with Michelle Drolet, CEO & Founder of Towerwall to share insights on building a resilient cybersecurity framework, discussing real-world experiences, emerging trends, and practical approaches to fortifying digital defenses.
 
Tune in to learn about:

· The Evolution of Cyber Threat
· Moving Beyond Prevention: The Pillars of Cyber Resilience
· The Importance of Culture and the Human Factor in relation to Cyber Resilience
· Is This IT’s Problem?
· Measuring and Improving Cyber Resilience in a Hyper-Regulatory Landscape

Navigating the Storm: Building Cyber Resilience in an Era of Constant Threats

This session will delve into the potential impact of quantum computing on cybersecurity. It will explore how quantum computers could render current encryption methods obsolete, leading to a “crypto-apocalypse.” But it will also discuss the potential positive applications of quantum computing for enhancing security measures.

Key Takeaways:
- Understanding the threat quantum computing poses to existing cybersecurity infrastructure.
- Exploring the potential of quantum-resistant cryptography.
- Gaining insights into how quantum computing could be leveraged to strengthen security measures.
- Developing strategies to prepare for the quantum computing era.

Quantum Computing: The Cybersecurity Apocalypse or the Next Great Leap?

In an era where cyber threats are evolving at an unprecedented pace, building and maintaining cyber resilience is crucial for organizations of all sizes. This webinar will delve into the strategies and best practices that can help you safeguard your digital assets and ensure business continuity. Join us to explore the latest trends, tools, and techniques in cyber resilience, and learn how to stay one step ahead of cyber adversaries.

 Key Takeaways:

-Understanding Cyber Resilience:
      -Definition and importance of cyber resilience.
      -Difference between cyber resilience and cybersecurity.
-Current Threat Landscape:
      -Overview of the latest cyber threats and attack vectors.
      -Case studies of recent high-profile cyber incidents.
-Building a Resilient Cyber Strategy:
      -Key components of a robust cyber resilience strategy.
      -Importance of risk assessment and management.
-Technological Solutions:
      -Emerging technologies that enhance cyber resilience (e.g., AI, machine learning, blockchain).
      -Tools and platforms for threat detection and response.
-Human Factor in Cyber Resilience:
      -Role of employee training and awareness.
      -Best practices for fostering a security-conscious culture.
-Incident Response and Recovery:
      -Steps to take during and after a cyber incident.
      -Importance of having a well-defined incident response plan.
-Regulatory and Compliance Considerations:
      -Overview of relevant regulations and standards (e.g., GDPR, CCPA).
      -How to ensure compliance while maintaining resilience.
-Future Trends in Cyber Resilience:
      -Predictions for the future of cyber resilience.
      -How to prepare for emerging threats and challenges.

Unbreakable Resilience: Fortifying Your Digital Fortress by Mastering Cyber Resilience in Today’s Threat Landscape

If you have managed to evade a data breach or fines from the regulator, then well done! Today, business and government organizations inform the public of a data breach, whereas in the past they kept quiet to avoid reputational damage until the news eventually got out!

Based on recent events, either caused internally or externally by threat actors like staff, individuals, hackers, organized crime or state governments, protection of your data and its privacy has become quite challenging.

This webinar will focus on data protection and the consequences of non-compliance. One example of this is Uber fined $324 million for personal data transfer. It will also cover unauthorized access through third-party suppliers and contractors), as well as tips to evaluate your data policy.

Tune into this session presented by business continuity, disaster recovery, cyber resilience and major incident expert Steve Yates, as he shares his views on protecting data security and privacy. Yates will explore these elements from the attacker’s point of view and take attendees on a learning path to consider their own state of readiness for data breaches and disclosure of personal, corporate, and government information. 

By the end of the session, you will be able to:
• Know the importance of understanding your organizations end-to-end data world, specifically mapping data sources and where it resides.
• Understand how easy it could be to cause disruption, modification, or destruction of critical data along with the services which they support.
• Understand the core organizational components necessary for regulation and compliance of your data resources.

How Secure and Private is Your Data?

In this session, our speakers will discuss ways to build a future-proof data security strategy for the evolving cyber landscape, combining a vision of possibility while staying grounded in reality.

Join this webinar to learn about:

- Future-proof data security strategies and risk-based essentials needed to protect against threats and enforce compliance across the organization.
- Key use cases for unifying data visibility and control on-premises, cloud data stores, data lakes, and storage systems.
- Thales Data Security innovations to address the dynamic challenges of the modern threat landscape while keeping your organization digitally resilient.

The Power of a Future-Proof Data Security Strategy

Protecting your data - no matter how much there is and no matter where it lives - ultimately protects your business continuity. The latest Rubrik Zero Lab report noted that 94% of external organizations were victimized in a cyberattack in 2023, occurring in SaaS (67%), Cloud (66%), and on-premises (51%). Legacy data protection solutions can be complex, lack integrations and automation which can hinder data access, recovery and backup.

Watch this session and learn more about:

Why outdated data protection technology puts your organization at risk
How today’s threats are targeting your data and accessing it with valid credentials
Benefits of a modern data protection solution including:
Reduced IT overhead and cost of ownership
Improved visibility, accessibility and automation
Lower total cost of ownership and reduced risk

Top Reasons Why Legacy Data Protection Fails and What to do About It

The Data Security and Privacy Summit 2024

Millions of dollars are invested by organizations in products and resources to sit in front of your data, but a breach still seems inevitable. Instead of stopping a breach, proactive data risk remediation eliminates 90% of your risk even if a breach occurs. In this informative session, learn how to take steps to proactively protect your data by eliminating data risks, thereby negating the impact of a breach, while also effortlessly nailing data privacy compliance requirements, such as from GDPR and PCI

New Approaches To Protecting Sensitive Data As Current Layered Defenses Have Failed

Data Security

Data Governance

Data Compliance

Compliance

Remediation

Data Privacy

Data Protection

Cloud Security

Cyber Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

New Approaches To Protecting Sensitive Data As Current Layered Defenses Have Failed

Presented by

About this talk

Data Security and Privacy Series - by Borneo