Name: Yahoo Breach Questions & Answers - Interactive Session
Start: 2016-10-04T16:00:00Z
End: 2016-10-04T16:48:33.000Z
Location: BrightTALK
Rating: 4.11

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

Ransomware has evolved drastically in recent years where attacks have gotten bigger, more expensive, and more frequent. However, when it comes to ransomware preparedness within the organization, much remains to be done because organizations still struggle with understanding what protection technologies they should really be considering, how to create a ransomware incident response plan, and who within the organization should be involved in preparing for and recovering from an attack. 

ESG surveyed IT and cybersecurity professionals involved with ransomware protection technology and processes to better understand ransomware readiness in the enterprise today and will discuss key research findings in this keynote presentation. 
 
ESG analysts will explore from the following critical questions: 
• How ready are organizations to defend against, mitigate, and recover from a ransomware attack? 
• What ransomware readiness programs do organizations have in place? What parts of the business are involved? Have organizations rehearsed them? How do organizations know they are ready? 
• What types of data recovery capabilities are currently in use across the organization? How often do organizations formally test these capabilities? 
• Have organizations been the victims of successful ransomware attack(s), and if so, what were the impacts? How did organizations respond, and how successful were the recovery efforts? 
• What organizations and people are involved in ransomware cyber-resiliency programs? 
• Have organizations formally assessed individual risks associated with a ransomware attack on specific parts of their operation? 
• What third-party services do organizations currently have on retainer to assist in the event of a ransomware attack? 
• What business-risk management strategies do organizations have in place to address cyber-resiliency?

Ransomware Preparedness in 2022: State of the Market

This session provides practical advice to establish cybersecurity metrics, Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs). We begin with an explanation of the differences between them and why each are needed. Examples of how to design metrics, KPIs and KRIs are provided. Areas of focus include cybersecurity measurements for all organizations, for processes & functions and in alignment with a control framework. The end game is to measure if processes and controls are functioning as designed.

We also walk through tips for communicating new metrics and go-to-green updates for metrics in red or yellow status. The session includes 22 metrics and seven resources for many more. All of this saves time and can assist with enhancing your program.

About the speaker:
Gideon Rasmussen is a Cybersecurity Management Consultant with over 20 years of experience in corporate and military organizations. Gideon has designed and led programs including Information Security (CISO), PCI - Payment Card Security, Third Party Risk Management, Application Security and Information Risk Management. Has diverse cybersecurity industry experience within banking, insurance, pharmaceuticals, DoD/USAF, state government, advertising and talent management. Gideon has authored over 30 information security articles. He is a veteran of the United States Air Force, a graduate of the FBI Citizens Academy and a recipient of the Microsoft Most Valuable Professional award. Gideon has also completed the Bataan Memorial Death March (4 occurrences). He is certified in many programs including CISSP, CRISC, CISA, CISM, CIPP, ITILv3, and NSA-IAM.

Cybersecurity Metrics, KPIs and KRIs

Effective cyber defense requires time-consuming analysis and a level of data aggregation and correlation that is at best an art, and at worst cost prohibitive. Meanwhile, attackers remain agile and inventive, rapidly changing their methods with minimal costs (to them).  Automation brings with it the promise of leveling the playing field, giving more time back to defenders and keeping us equally agile. Unfortunately, it is far more common that automation in cybersecurity expands already monolithic tool sets, extends vendor lock-in, and increases our support costs.  

This talk will outline a pragmatic approach to automation in cyber defense that increases efficiency without breaking your budget. Attendees will learn how to identify candidate tasks and workflows ripe for automation, apply a repeatable approach to introducing automation, and avoid common pitfalls in building a more automated cyber defense.

A Pragmatic Approach to Automating Your Defenses

With the post-pandemic work environment taking shape, CISOs must now come to terms with permanently remote and hybrid workforces, the decline of VPNs and perimeter-based security technologies and other inalterable changes. At this “point of no return,” security leaders require an updated roadmap to effectively manage new and improved cyber threats and a user base stretched out across locations doing work with third party and non-sanctioned applications. Attackers are growing sneakier and more sophisticated in penetrating the less defined barriers of the new workforce. CISOs should rethink old strategy and risk models in order to secure their companies in this destabilized post-pandemic world.

Tune into this panel discussion including top experts in the cybersecurity sphere and discover how CISOs and other security leaders can guide their companies into a safer future. Some of the key discussion points will include:

- Top threats predicted to strike in 2023 and how security leaders can prepare.
- How to phase out legacy security technologies that may no longer be effective in this post-pandemic work world.
- The biggest challenges brought forth by hybrid and remote workforces and how to address them. 
- Rethinking and re-organizing your organization’s risk model.

CISO Security Tips to Manage the “End” of COVID-19

In today’s rapidly changing world, it’s very easy to lurch from issue to issue without stopping to pause and think strategically about where the issues are coming from and how you can prevent the next one from being a career-defining incident. 

In this talk, Quentyn will take a light-hearted view of eight issues he sees frequently today; how they have developed, and how to avoid them keeping you up at night.

8 Things That Keep CISOs Up At Night (You Won't Believe Number 4!)

Recent cybersecurity incidents continue to show that public sector entities from local school districts to federal agencies are not immune to cyber threats. These range from ransomware attacks to data breaches involving sensitive student and staff data. 

Tune into this webinar that will examine trends, highlight examples, and share best practices for steps to take before, during, and after a cyber incident with a focus on public agencies and officials.

Public Sector Entities: Vulnerable and Less Prepared Cyber Targets

Cyber attacks are not random acts that affect only a few. They are calculated ambushes that will impact you at some point -- whether you're prepared or not. Join this session as Jim Goldman discusses the state of cybersecurity, the implications of an attack, and what you can do to best mitigate your risk to protect yourself and your business. 

About the speaker:
Jim Goldman is the co-founder and CEO of Trava, a company created to protect small and medium-sized businesses from the potential damage of cyber threats through risk assessment, security strategy, and cyber insurance. He is a nationally published author and frequently requested speaker and subject matter expert on technical topics and security topics. Prior to founding Trava, he was a faculty scholar at Purdue University where he served as a professor and associate department head. He started a research lab serving the FBI and trust organizations for cloud computing companies that included Salesforce. And while at Salesforce he was responsible for enterprise-wide security governance, risk management, and compliance and built the company's first Security GRC organization.

It's Not Cyber Crime, It's Cyber Warfare

What if you could predict, and thus prevent, most security incidents in your organization? While we know 82% of attacks originate from human fallibility, effective risk management requires pinpointing the riskiest users. Fortunately, recent research has revealed the 7% of the workforce responsible for the majority of incidents. 

This presentation offers security professionals a new way to think about measuring user risk. Attendees will come away with:
• An understanding of how user risk can be quantified with data from security tools;
• Examples from leading security teams who’ve improved their organization’s cyber defense;
• An approach to the different stages of user-risk management, from feedback to tailored controls;
• Methods to mitigate workforce risk by applying risk-appropriate interventions; 
• Ways to use feedback to build trust and transparency and risk-based controls to enhance security protection;
• and more!

Master Security Kryptonite: How To Proactively Pinpoint and Mitigate User Risk

Geopolitical instability and cybersecurity are unavoidably intertwined. Organizations of all types can be at higher risk even if they’re not connected to a conflict. Cyberattacks are a weapon sometimes wielded even against nation-states not directly involved in a conflict. Going into 2023 Russia’s war in Ukraine will bring it with cyberthreats. Other nations too, including North Korea, Russia, China and Iran, are likely to raise organizational leaders’ concerns about security.

This panel will look at the current and near-future prospects for geopolitical conflict, including
• The role of cybercriminals in conflicts between nations, such as the Conti and Stormous ransomware groups’ support for Russia in the current Ukrainian conflict; 
• How nation-states weaponize cyber-attack skills to increase their power in the world;
• Where CISOs, CEOs, and other organizational leaders should focus security investments to respond to threats issuing from global conflict.
• What tools exist for companies to keep themselves from becoming “casualities” in an international conflict.

Geopolitical Instability and Its Impact on Cybersecurity

Ransomware continues to be a top security concern for cybersecurity teams, with no signs of abating in 2023. Instead, businesses must learn to live with the reality of expecting to be attacked and taking the right measures to react quickly when it happens. In this keynote presentation, ESG will present its latest findings on the prevalence of ransomware and provide best practices to help organizations make strides toward readiness, develop a plan for response, and recover quickly.

Ransomware Preparedness: Cyber Resiliency for 2023

In this webinar WiCyS strategic partner SentinelOne will explain one of the top five cyber threats, how and why they are, and how we can prevent them.

Can’t make it during the scheduled webinar? Go ahead and register to receive a recording as soon as we wrap up!

Understanding Cyber Threats

Thanks to smartphones, access to sensitive information now easily fits in the palms of our hands. This offers many benefits, but this also creates risk. Bad actors are increasingly taking advantage of these risks to cause harm.

In this webinar WiCyS strategic partner Cisco will discuss the importance of securing your phone and how. You will learn tips to protect yourselves and your information from some of the most common attack methods, as well as more sophisticated ones, like multifactor and biometric authentication. Learn how to mitigate the risks associated with mobile devices so you can enjoy them more securely.

Can’t make it during the scheduled webinar? Go ahead and register to receive a recording as soon as we wrap up!

How to Secure Your Mobile Device

America needs well-trained professionals working in cybersecurity roles. These IT professionals are critical in private industry and the government for the security of individuals and our nation. 

In this webinar WiCyS strategic partner, Sandia National Laboratories, will cover ten areas of Cyber Career applicability and will provide attendees a roadmap toward finding the right resources for their immediate cyber security skill development and long-term career goals.

Can’t make it during the scheduled webinar? Go ahead and register to receive a recording as soon as we wrap up!

Sorting Out the Alphabet Soup

Why do we do the things we know we shouldn’t, and not do the things we know we should? Take password managers: Most of us know they’re an easy, useful tool that enhances our security, but not enough of us actually use them. What’s the reason behind this? Lisa Plaggemier, Executive Director of the National Cybersecurity Alliance, reveals new research from the Alliance about the public’s attitudes and beliefs about security, as well as potential drivers and barriers towards secure habits.

About the speaker:
Lisa Plaggemier is Executive Director at the National Cybersecurity Alliance. She is a recognized thought leader in security awareness and education with a proven track record of engaging and empowering people to protect themselves, their families, and their organizations.  Lisa has held leadership roles with the Ford Motor Company, CDK, InfoSec and MediaPRO, and is a frequent speaker at major events including RSA, Gartner and SANS. She is a University of Michigan graduate (Go Blue!) and while she wasn’t born in Austin, Texas, she got there as fast as she could.

A Whole Lotta BS (Behavioral Science) About Security

No matter your workspace, you likely rely on open source code. 

In this webinar WiCyS strategic partner Google will introduce the open source software ecosystem and how it underpins the security of a majority of software systems today. We’ll discuss the unique types of attacks, the challenges in preventing them, and current progress towards solutions. We’ll close by discussing some pathways for careers and opportunities in open-source security.

Can’t make it during the scheduled webinar? Go ahead and register to receive a recording as soon as we wrap up!

Securing Open Source: Hidden in Plain Sight

As cybersecurity experts, our overall goal is to protect the confidentiality, preserve the integrity, and promote the availability of data for authorized use—all without inhibiting the business from meeting its objectives. But what about the times when we must say “no” for various reasons? This interactive session focuses techniques for having a diplomatic “crucial conversation” with the business when a request just can’t be approved.

About the speaker:
Tamika Bass is an Information Security professional with more than 15 years’ experience in information security, including information security governance and risk management. Tamika is passionate about improving communication and understanding of information security in the industry. Tamika is an active speaker, college professor and enjoys spending her time educating technical staff on the importance of communicating effectively in the Information Technology space. Tamika holds the following certifications: CISA, CRISC, HCISPP, CBCP.

When the Answer Really Is “No” -- How to Say It Diplomatically

Senior management is generally supportive of cybersecurity and lower-level staff do what they’re told to do. Middle management, however, is beset by perverse incentives to sell, sell, sell; cut costs; and do more with less. This leaves them without enough mind-space left to focus attention on cybersecurity. 

Tune into this cyber-session to discover tips and ideas covering:
--Finding and fixing the middle management weak spots.
--The consequences of a cybersecurity culture based on inaction.
--Potential solutions, tailored for middle managers, to enhance a cybersecurity culture. 

About the speaker:
Steve holds certification as a Master Business Continuity Professional (MBCP) as well as a Certified Information Systems Security Professional (CISSP) and a Certified Information Systems Auditor (CISA). He is a specialist in business continuity management, IT disaster recovery planning, and information security and has implemented programs for numerous banks, government agencies, and industrial corporations. Before founding Risk Masters, Steve was with Deloitte & Touche as the leader of their Business Continuity Management practice. In recent years, his focus has been on the resilience of large business and technology environments. He is editor of the multi-volume series, e-Commerce Security, and author of several of the books in the series.

The Tone in the Middle: The Biggest Hindrance to a Cybersecurity Culture

Many people talk about the need for a cybersecurity mindset. The discussion generally focuses on whether you have one or not and how to foster a security mindset. However, why should there only be one cybersecurity mindset while there are, in fact, many types of cybersecurity mindsets. This diversity in thinking is required to strengthen your cybersecurity team.  

Tune into this presentation to learn about various cybersecurity mindsets and discover:
- How does mindset influences decision making?
- What are the potential cybersecurity mindsets?
- How does the interaction of mindsets build team cohesion?

Diversity of Cybersecurity Mindsets

How the Heck Did They Miss It? Lessons to Learn from the Yahoo Breach

What Does the Massive Yahoo Hack Mean for Your Company?

Double Yahoo Breach: Nothing You Can Do About It, But Learn

Biggest Hack of All Time - Yahoo Breach Hits 1 Billion Accounts

Yahoo Breach #2 - Should You Be Worried? Yes, You Should

Yahoo! Breaches Continue - What to Expect Next from Yahoo

Part 2: How Is This Yahoo! Breach Different from Their Other Breach?

Not! Your! Father’s! Data! Breach!

LIVE Q&A: Bring Your Yahoo! Breach Questions

Mega Breaches of 2016 - Yahoo Next Victim

LIVE Interactive Q&A: Steve Durbin on the Yahoo Data Breach

(ISC)² EMEA Reacts: Yahoo – a case study for GDPR?

Part 1: What You Need To Know about the Yahoo! Breach: Steps To Take Today

BrightTALK on the Yahoo! Breach

Yahoo was recently hit with the biggest data breach of all time. Approximately 500 million user accounts were compromised in the massive attack. Join this interactive Q&A session with Chenxi Wang, Chief Strategy Officer at Twistlock and Casey Ellis, CEO of Bugcrowd and ask your Yahoo breach-related questions. Get the facts around what happened, how the breach affects you and the steps to take to better protect your data.

Yahoo Breach Questions & Answers - Interactive Session

yahoo

breach

cybersecurity

data protection

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Yahoo Breach Questions & Answers - Interactive Session

Presented by

About this talk

More from this channel