This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

Data privacy involves the proper handling and protection of personal data – information identifiable to a person. Protecting data and maintaining data privacy can be a challenge; a challenge from a security standpoint, a challenge from a governance and compliance standpoint. The sheer amount, complexity in format, varied locations, and ever escalating costs top the list of the challenges. Perhaps number one on the list are the cyber threat actors.

For the previous 14 years, the Data Breach Investigations Report (DBIR) has highlighted various aspects of data breaches. But what specifically does the DBIR dataset tell us about data protection and data privacy? We queried three years of data to better understand and learn from privacy breaches. Specifically, we looked at privacy related data breaches for patterns, industries, discovery methods, motives, actors, actions, assets, and attributes.

Key takeaways:
- Cyber Threat Landscape – Privacy Breach Insights
- Data Privacy Breaches through the Lens of the VERIS A4 Threat Model
- Way Forward – Key Solutions to Protect Privacy Data and Mitigate Data Breaches

Data Privacy Exposure (and what to do about it)

Just as enterprise organizations are embracing cloud computing, so too are cyber attackers and everyone is justifiably concerned. For all the advantages of the cloud, the framework is not impervious to cyber threats and so security protocols must always be a priority. Yet the myth that cloud is less secure than owned, on-premise security is just that: a myth. A 2020 Gartner forecast stated IaaS workloads would experience 60% fewer security incidents than traditional data centers — at least.

In order to comprehensively deploy a cloud security network, companies must understand the realities of their infrastructures. Identifying the responsibility of the cloud and that of the customer is critical, as is learning what services can be reasonably expected from a leading cloud provider. Only with the right facts can you build a truly secure network.

Join this panel of experts as they discuss the most common myths of cloud security and what you should actually be building your strategy around:

- Cloud vs. On-Premise Security: Which is easier to target?
- Is a public cloud more vulnerable than a private one?
- How automated can — and should — the cloud’s security protocol be?
- Accessibility: How much is too much?

Panelists to include: 
Rajesh Agnihotri, Senior Solutions Engineer, Middle East, SonicWall
Palo Alto Networks

Dispelling the Myths and Misconceptions of Cloud Security

Join us on November 18th to learn how to avoid sophisticated targeted attacks that could cripple your business and inflict physical damage to your critical infrastructure. Using real-world examples of well-known organizations who have felt the significant business impacts from a cyberattack, this webinar will teach you:

When to treat cyber threat as part of your overall enterprise risk strategy.
Which cybersecurity framework best suits your organization.
How to develop a cybersecurity training and education plan.

Cybersecurity: An IT Challenge or a Boardroom Priority?

As organizations face several different challenges in 2022 and beyond, preparing for a cyber attack is as important as ever. Businesses face a myriad of cyber threats; from phishing to ransomware, it's imperative that your organization puts in place measures to protect your most important assets.

Join top security leaders for an interactive discussion on how to better secure the enterprise in 2021 and learn more about:

- Trends in cyber attacks and what's at risk
- Prevention best practices
- Solution recommendations for attack detection and response
- Top threats on the horizon and what's at risk
- How organisations can take the necessary steps to prepare for the unexpected and build business resilience

Moderated by: 
Michelle Drolet, CEO, Towerwall

Threatscape 2022: Cyber Attack Prevention

Cyber Threats have changed drastically over last three decades. From being a nuisance, they have evolved into
1. A financial instrument for Cyber Attackers, with ransomware being the primary tool in attackers’ arsenal
2. A tool to sabotage operations or exfiltrate sensitive information, using sophisticated attack techniques known as Advanced Persistent Threats (aka APTs)

Attack groups behind APTs are highly sophisticated and well-funded. This enables them to invest heavily in reconnaissance & design attacks before launching them against intended target. Because of this elaborate planning & inherent complexity, such attacks are extremely hard to detect & protect against. As more & more critical infrastructure systems have started
utilizing digital technologies, risk posed by APTs has gone up substantially.

In this presentation we will discuss:

• What are APTs
• Example of APT attacks
• APT attacks against Operational Technology
• How to safeguard

APTs – Threat & Safeguards

It is Cisco’s purpose to power an inclusive future for all. This begins in the workplace with a culture that fosters diversity and inclusion. Join us on November 09, 2021, to hear about the role of male allies in helping to foster an environment of diversity and inclusion.

The Importance of Male Allies

The threatscape is fast-changing and keeping up with transformation in the cybersecurity space is key to staying ahead of the evolving threats that lie ahead. In fact, according to Cyber Crime Magazine, cyber attacks are now the fastest growing crimes globally. But what will these threats look like in 2022? How will the threatscape have evolved from 2021, and how can we prepare for this change? 

From a rise in web application breaches, to an increase in ransomware and phishing attacks, it is clear that 2022 could represent severe disruption for business globally if steps are not taken preemptively to secure your business. 

Join us in this session as we discuss: 

-  How the role of the CISO will evolve in 2022
-  The shifting threatscape 
-  The key trends we expect to see in the year ahead 
-  How to address these threats for a more secure enterprise

Moderated by:
Griff James, Director, Damrod Analysis

Confirmed panelist(s):
Michael Yehoshua, VP of Marketing, SCADAfence
Jeroen Hekelaar, Manager, Solutions Engineering EMEA, SonicWall

Panel: Preparing for The 2022 Threatscape

The Covid-19 pandemic has brought with it many changes at a speed that few expected, with the most obvious being that technology has burst onto the business centre stage. For the cyber community it will be remembered as the time when “cyber became a business issue” rather than an “IT problem”. As we are now enter the uncharted world of a hybrid work from home/work at the office, we need to revisit the concept of cyber risk - its management, its impacts across business lines and how we need to rethink the traditional held views of seeing it as a cost and perhaps start considering it as a business strength or (dare I say it) a strategic advantage. After all, staying ahead of the breach in 2021 and beyond provides a sound business base to survive and thrive …. And the best way to start is by understanding your risks.

Join BCyber as they host a discussion with Thomas Fikentscher – CyberArk’s ANZ Regional Director, where they will:

● Revisit the concept of cyber risk - how we view in now Vs how we should be viewing it
● Discuss how to make cyber risk management a strategic advantage
● Unpack the relationship between digitisation and risk
●	Explore how to identify and address workforce mobility risks, using real world examples
●	Explain why staying ahead of the “breach escalation” is just as important as focusing on stopping breaches ... because nothing can guarantee to stop the cybercriminals 100% of the time
●	Provide practical tips you can take, to help your business get ahead of breaches now and in the future

Rethink risk so you can stay ahead of cyber breaches  in 2021 & beyond

Looking at the threat horizon for 2022, it’s clear that the digital world has moved even closer to the physical world than before.  Remote work is the new normal.  On the global scale cyberattacks are the fastest growing crime. Threat actors are seizing the opportunity to cause disruption in an industry still navigating the effects of a worldwide pandemic. The good news is organizations are more aware of the risk that poor cyber hygiene presents.  In fact, many organizations have started to invest heavily in cybersecurity training and awareness programs to combat cybercrime and prevent breaches from occurring.

In this session we’ll explore:
- Current State of Cybersecurity
- The Effects of COVID on Cybersecurity
- Cybersecurity Risks for 2022 and How to Prevent Them

Moderated by: 
Jo Peterson, Vice President, Cloud and Security Services, Clarify360
Mir Hossein Mirghassemi, Vice President, Cloud Security Engineering, Morgan Stanley 
Thomas J. Sweet, Vice President, Cloud Services, GM Financial

Panel: Threat Horizon 2022

The Cyber Table Top (CTT) process was developed in 2014 to support DoD customers who were overwhelmed by the sheer number of findings produced by traditional cybersecurity scanning tools and checklist processes. These tools and processes identify a very large number of possible vulnerabilities for a system but didn’t provide context for which vulnerabilities might truly lead to potential mission failure. Since budgets are limited, customers need methods of focusing on the most critical vulnerabilities which present the highest risk to their systems. The CTT process is focused on producing actionable cyber vulnerability data in an approachable risk matrix format to enable teams to focus resources. CTTs bring together system developers and maintainers, system users, and expert red teams to execute a multi-day wargame that focuses on the security evaluation of threats that would deny, degrade, disrupt or destroy a system and prohibit users from accomplishing their core mission. By assessing the potential mission impact of vulnerabilities as well as their likelihood/difficulty it provides a way to understand the relative risks of various vulnerabilities and focus the remediation efforts. The CTT process has been used to support DoD system cyber security evaluations in various lifecycle stages from design through long-term maintenance. It has been used to identify and mitigate threats that later were witnessed “in the wild” and caused significant negative impacts to other systems. It has become so popular that an official DoD Guidebook and training course was developed in 2018.

Using the Cyber Table Top (CTT) Process to Perform a Cyber Risk Assessment

Diversity and inclusion in the technology industry and workforce do not happen overnight. Hear from trailblazer Michele Guel, who helped pave the way for future generations of women to get involved in technology and cybersecurity. Learn how Michele’s career began, what the technology culture and landscape were like when she started in her career (the hurdles, hoops, and wins); and how to start and stay in cybersecurity, including today’s challenges and career outlook for women in the technology industry.

A Trailblazer’s Path to a Career in Cybersecurity

During the pandemic, we’ve seen solutions from Zoom, Microsoft, Google, and more rise to try to meet the challenges of this unexpected pandemic and have seen mass adoption and successful use.  Unfortunately, there are many gaps where current solutions, such as video and team collaboration apps, can’t come close to replicating the experience of meeting in person. 

Enter virtual reality. While once thought of as just a niche gaming product, VR is quickly emerging as a key answer to the question of “how do we meet when we can’t meet in person.” In this session, leading VR/AR analyst Tom Brannen will share his insights on the following:

• Why VR is better for certain types of interactions than traditional meeting tools
• How companies using VR today as a collaboration tool
• A market overview of VR for business
• Challenges in deploying VR
• What’s next for VR
• What about augmented reality?

Virtual Reality and the Hybrid Workplace

Hear from members of Salesforce's Women in Security group about their traditional, and nontraditional, career paths into cybersecurity. Learn how to navigate the professional security landscape and ways that Salesforce is working to increase equality and representation in the industry.

Blaze Your Trail! Discover the Many Paths to a Career in Cybersecurity

SASE is a relatively new networking security architecture that has become incredibly popular as a result of the growth of work-at-home and cloud computing.  The network security components are well understood.  The ability to provide zero trust using SASE is being established.  Additionally, many vendors are working to  working to enable SASE capabilities.  However SASE includes so much more.  The session will provide the listener the following information on how to provide additional security flexibility within a SASE environment:
Where SASE is strong and areas where greater security flexibility is required;
How SASE is made stronger with Browser Isolation, Web API Protection and Data Security;
Specific capabilities that allow SASE to foster data loss prevention; and
A perspective on how to incorporate flexibility into SASE efforts.

Flexible Security Components for SASE

The world of work has shifted as now more employees work remote than are in the office. Succeeding in this new paradigm requires a proactive strategy to ensure that employees have the right apps and devices, and that IT is equipped to support the virtual office as it supports the physical office. In this webinar, Metrigy CEO and Principal Analyst, Robin Gareiss, will share the latest research into how organizations equip and manage remote employees to ensure collaboration success.

Robin will answer questions including:
• How to ensure high quality voice and video performance from anywhere?
• What devices to provision, and how to manage them?
• What role should IT play in equipping and managing remote employees?
• How to ensure security of applications, regardless of location?
• How to ensure collaborative culture for in-office, remote, and hybrid employees?
• What applications are required beyond messaging and video?

Optimizing Remote Employee Collaboration

When it comes to supporting remote workers, IT leaders are often at odds trying to balance security with convenience and efficiency. How can you provide both a positive, remote working experience and yet maintain, if not improve, your current security posture? In this session, we’ll talk about how collaboration tools are changing how we work in and out of the office with platforms like Microsoft 365. 

We will also review how to make on-premises systems and applications operate like they are already in the cloud while potentially improving your security posture at the same time. Our times demand that technology solutions be more intuitive and easier to consume, and IT is tasked with delivering it.

Improving the Remote Worker Experience While Balancing Security

The Fuel Powering the Workforce of the Future:

In this interactive session, learn how PwC harnessed emerging technology during the pandemic to ensure that their people's wellbeing was prioritised, recruitment was sustained, and the culture continued to positively develop. Case studies include:
The application of advanced human performance analytics developed in Formula One to transform the approach to workforce wellbeing.
The development of an award-winning virtual environment to support hiring.
The application of VR to drive behavioural change
As these technologies continue to evolve, how should you ensure that the adoption is trustworthy, responsible and ethical?

The story of PwC's human-led and tech-powered response to the pandemic

With the expansion of technology in enterprise and the adoption of cloud, it is becoming ever increasingly difficult to maintain a strong foundation when it comes to organizational structure and policy development. CSA's Enterprise Arcthicture mapping to the Cloud Controls Matrix (CCM) helps alleviate much of the unknown in this area. By going over the key domains of this architecture, and showing the audience how to utilize it for multiple benefits to include policy development, roles and responsibilities when it comes to cloud, and managing technology applications and tooling, one will begin to understand the gaps in their own organizational structure and begin to build.

This session will cover:
- What is the CSA Enterprise Architecture?
- Where do the controls fit in?
- Adjusting for policy development and gap analysis
- Utilization for organizational structure
- Creating ownership across your business
- Application and tooling identification

Building a Cloud Architecture for the Hybrid Workforce

The Hackers Paving the DDoS Path of Destruction

DDoS Attack: A Wake-Up Call for IoT

Dyn Distributed Denial of Service: Impact &amp; Lessons Learned

Evolving DDoS Threat Landscape

DDoS Attack on Dyn DNS

On October 21st, a distributed denial of service (DDoS) attack on Dyn DNS took out a large number of high-profile websites, such as Twitter, Reddit, Netflix, Spotify, Paypal and others, offline. Join this panel discussion to find out what happened, who was affected and the likelihood of repeat attacks of this magnitude in the future.

Moderator:
* Tim Helming, Director of Product Management at DomainTools

Panelists:
* Ann Barron-DiCamillo, Partner & CTO, Strategic Cyber Ventures, LLC
* JP Bourget, CEO of Syncurity
* Robert Hamilton, Director of Product Marketing at Imperva Incapsula

Dyn DDoS Attack - What We Know & Why It Matters

DDoS

cyber attack

cybersecurity

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Dyn DDoS Attack - What We Know & Why It Matters

Presented by

About this talk

More from this channel