OWASP Panel: New Web Application Threats and Ways to Secure Them

As in-house security becomes increasingly complex and costly, organizations are in need of a reliable and safe security provider. Join industry experts as they discuss the latest trends in SEaaS, including:

-Why your organisation needs to move towards SEaaS
-The different models of security as a service
- SEaaS solutions and strategies

With the proliferation of the Internet of Things, IoT devices are often added into enterprise environments without due consideration for the security and privacy risks they pose to the business. Oftentimes, IT security teams do not have full visibility into how many IoT devices are connected to the network. This creates security gaps, as IoT devices are notoriously vulnerable to hacks and attacks.

Join this interactive panel experts to learn about how enterprises can enhance endpoint, and therefore IoT security.

Attendees will learn more about:
- IoT and today's enterprise
- What's on your network? How do you evaluate IoT devices?
- Why visibility is key
- Controlling access to your IoT environment
- Vendor risk and holding vendors accountable for their IoT equipment
- Areas for automation and where to reduce your IT security team's involvement
- Patching and upgrading
- Expert recommendations for enhancing IoT security

In today’s multi-cloud and hybrid environments, CISO's are struggling to secure assets, manage security policies across clouds, monitor and mitigate risks, while also supporting the business. How are CISOs solving the challenge of complexity?

Join this panel of experts to learn how to simplify cyber risk management as well as maximize the value of your team and technology.
- Risk scoring and security controls
- How to identify risks for organizations and their third-party vendors
- How to prevent, detect, and respond to, privacy and network security incidents
- Best of vulnerability and risk management in a multi-vendor environment
- Best practices and use cases across industries

As there have been countless insider threat breaches recently, it’s no surprise that research suggests that up to 60% of cyberattacks are due to insider threats. With so much at stake, it's vital for organizations to protect against insider threats.

Join this interactive panel of industry experts as they discuss:

-How to protect your organisation from insider threats
-Latest technologies and solutions
-Benefits of early and timely detection

Running SOC on-premise is highly complex and expensive. This calls for expertise (for example -Firewall, DNS, Network analyst, Active Directory Domain), and well preparedness to handle unique situations. It becomes imperative for starter companies to build the credibility success factor to stay competitive as against large enterprises.

Register for this webinar and you will learn about:
- SOC as a Service, and its Importance
- Key Components of SOC - Asset Discovery, Threat detection, Vulnerability Assessment, & Behavioural Monitoring
- Rapid Incident Response & Event Investigation
- Better Risk & Compliance Management
- Choosing a MSSP SOC Vendor vs Build your own SOC
- How to select the right MSSP SOC Vendor

About the speakers:

Senthil Palaniappan, CEO & Founder at Sennovate Inc.
- Over 25 Years of Industry Experience in Information technology
- Specializes in Information Security, Identity and Access Management, Infrastructure and Integration
- Consulted with various fortune companies

Kumar K, Lead Solution Architect at Sennovate Inc.
- Over 18 years of industry experience
- Specializes in various Identity and Access Management products including oracle and various cloud products
- Vast experience in building custom solutions with Oracle Access Manager.

With email security breaches constantly making headlines, it is crucial for organisations to be ahead of the curve. Join this interactive panel of industry experts as they discuss the latest trends in email security and how to prevent becoming the next international headline.

Join this Q&A panel to learn more about:

-Emerging trends in email attacks
-How to stay on top of the latest threats
-Best solutions to protect your organisation

Securing the networks from attackers remains a key challenge in 2019. With billions of people affected by data breaches, governments and businesses are continuing to spend more time and money trying to better protect against cyber attacks.

Join this panel of experts as they discuss the biggest threats to enterprise networks and how to better protect against them:
- Top threats to network security
- Watering hole attacks: Explanation and examples
- Microsegmentation and lateral movement prevention
- How to improve the security of network infrastructure devices
- Real time breach detection: Myth or reality?
- Steps to take to better secure your networks

Speakers:
- Kalani Enos, Founder and CEO, kenos Technologies LLC (moderator)
- Greg DeBrecourt, Cyber Security Manager, Aerovironment
- Peter Wood, Partner, Naturally Cyber LLP

This talk will explore the challenges of defining security policies for hybrid and multi-cloud implementations. The attendees will see the new components needed for hybrid cloud security policies. The considerations of what content is needed for multi-cloud security policies will be listed. The clear advantage of workload context will be used to show how security policy can be created for cloud-based workloads. Security policy for dynamic movement of workloads to different cloud environments such as AWS, Azure, Google Cloud, and private clouds will be explored. Ideas on how to properly create a security policy for dynamic workload movement will be presented.

Attendees will see that the role of IP in a multi-cloud security policy is diminishing or even presenting an obstacle. Hybrid and multi-cloud security policies introduce a new paradigm in security, and presentation attendees will learn how to embrace it.

For years organisations have relied on perimeter-based security strategies to protect and secure their networks. As the workplace becomes increasingly fluid, it is clear that relying solely on perimeter-based security is no longer suitable.

Join this exclusive panel of industry experts as they discuss:
• Where traditional perimeter-based security models fall short
• Notable cyber attack methods and how to protect against them
• Strategies for improved network security and how to implement them

Speakers:
- Jo Peterson, VP Cloud Services, Clarify360
- Tina Gravel, SVP Global Channels, Cyxtera

The PCI Dream Team is back for another interactive Q&A session.

With hundreds of different requirements, the various Payment Card Industry (PCI) standards can be overwhelming. While the PCI Security Standards Council has provided lots of answers, the devil is often in the details.

Our panelists are some of the top PCI QSA’s in the country, with decades of combined PCI and card processing experiences. They’ve seen it all: the good, bad and ugly; and lived to tell the tale.

Join Ben Rothke, David Mundhenk, Arthur Cooper, and Jeff Hall for an interactive Q&A session, and get answers to your most vexing PCI questions. No PCI question is out of bounds.

Speakers:
- Ben Rothke, Senior Security Consultant at Nettitude
- David Mundhenk, Senior Security Consultant at Herjavec Group
- Jeff Hall, Senior Consultant at Wesbey Associates
- Arthur Cooper "Coop", Senior Security Consultant at NuArx

The current state of vendor risk management (VRM) is bleak. More than half of all information security breaches are caused by third-party vendors, and according to Deloitte 83% of today’s business leaders lack confidence in third party VRM processes. Given the growing complexities in accurately collecting and screening third-party data and the need for deeper due diligence, automation is key to a successful risk program. However, many corporations haven’t adopted automation in their third-party risk management programs.

The lack of automation adoption can be traced to a few core reasons. Disparate systems, out-of-date data, and inconsistent policies can all stifle a company’s ability to modernize their third-party risk management program, and companies often suffer from more than one of these. When applied effectively, automation can not only help prevent these roadblocks; it can also drive the efficiencies procurement and compliance leaders are looking for. Join this CPE accredited panel webinar as our expert panel address some key steps to automating third-party risk management, including how to:

-Manage an up-to-date vendor master to create one source of truth across the entire corporation,
-Leverage automation and machine learning to standardize data governance,
-Drive efficiencies and reduces costs, while ensuring the highest accuracy in your third-party risk management program.

Organizations are increasing their spend on cloud security solutions (up to $12.7 billion by 2023). What are the biggest challenges for businesses when it comes to securing the cloud, the solutions they are increasingly turning to, and the best practices needed to improve security overall?

Join this panel of experts to learn more about the current state of cloud and what organizations are doing to secure it. Attendees will learn about:

- Moving to the multi-cloud
- What's the deal with Infrastructure-as-a-service (IaaS), software-as-a-service (SaaS), and platform-as-a-service (PaaS)
- Compliance challenges and how to overcome them
- Common sense tips for cloud security
- Recommended tools and solutions
- Words of wisdom from the experts

Speakers:
- Tim Woods, VP Technology Alliances, Firemon
- Raef Meeuwisse, ISACA Expert Speaker & author Cybersecurity for Beginners
- Ed Moyle, General Manager and Chief Content Officer, Prelude Institute