Name: Delivering DevSecOps and Achieving Resilience
Start: 2019-08-08T20:00:00Z
End: 2019-08-08T20:46:33.000Z
Location: BrightTALK

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

Once considered an afterthought in software design, in today's cloud-native, app-centric world, application security must be top of mind. Widespread applications usage over distributed and public networks invites a variety of potential threats. Frequent testing and adherence to application security best practices can limit the possibility of unauthorized code being used to steal, share or modify sensitive user information.

This panel of experts will discuss the importance of a comprehensive application security program that incorporates best practices, threat identification and security testing.

Join us to learn about:

--Potential application threats
--Program requirements for app security
--Implementing app security standards
--Using DevSecOps initiatives to improve security
--Application security testing methods

Update Your Application Security Strategy

Threats like malware and denial-of-service attacks have been around since the earliest days of the internet, and the cybersecurity industry has created generations of threat detection and response tools to identify and remediate them. As security threats continue to evolve and advance, the tools to identify and stop them need to evolve as well.

This panel of security experts will explore how security teams can shift form using reactive to proactive measures, utilizing a host of emerging tools and technologies. Join us to learn about:

--Endpoint-focused technologies such as XDR
--AI's role in reshaping threat detection
--Threat detection and intelligence services
--Security observability tools that improve breach detection
--Using tools within a zero-trust framework to limit vulnerabilities

It's Time to Modernize Threat Detection

The social, economic and technological shifts of the past two years prompted cyber attackers to refine their methods, becoming more sophisticated and aggressive. This resulted in the business community suffering a series of high-profile attacks with far-reaching repercussions. Threat actors continue to exploit vulnerabilities across endpoints and cloud environments, and are ramping up use of stolen identities and credentials to bypass legacy defenses.

This panel of security experts will discuss the top threats of the moment and look toward what to expect in the next 12 months. They'll provide best practices and recommendations for security measures that can offer the best level of defense.

Join us to learn about:
--The most prevalent attacks today
--Emerging attacks that will threaten your business tomorrow
--How to take a proactive approach to threat detection
--How to prepare for continued global disruption

The Cyber Threat Landscape: Get Ready for 2023

As the methods and practices used to attack digital assets become more refined, the security tools to combat the threats must evolve, shifting from reactive to proactive methods. This change means security teams must learn about and assess a slew of acronyms, including endpoint detection and response (EDR), network detection and response (NDR), managed detection and response (MDR) and extended detection. and response (XDR). They also must consider new methods for addressing and preventing alert fatigue, such as using AI or cloud-based services.

In this panel, experts discuss the types of endpoint detection and response available and how to tease out which is best for your organization.

Join us to learn:
--Why EDR alone is not enough
--How to inventory your endpoints and their protection needs
--How to evaluate MDR options including MEDR, MNDR and MXDR
--The difference between hybrid XDR and native XDR
--Operational benefits of XDR
--How SIEM and SOAR compare with XDR

Unpacking Endpoint Detection and Response

Cyberattacks against healthcare jumped 42% in 2020 and another 35% in 2021. 

Successful cyberattacks disrupt healthcare operations, delay access to clinical services, and lead to significant economic loss. Stolen patient records can be used to commit fraud and identity theft, disrupting patients’ personal lives. 

Medical information is an attractive target because it has high economic value on the black market. 

If you are interested in protecting patients and the healthcare organizations that serve them from cybercriminals, join WiCyS Strategic Partner, Optum, to learn about the career opportunities in healthcare cybersecurity.

Cybersecurity Careers in Healthcare

Spreading operations across more than one cloud enables organizations to choose from a variety of cloud services to cut costs, improve operations and improve scalability. However, operating complex environments across multiple platforms requires a comprehensive strategy to handle connectivity, applications, data and security.

In this panel, experts will discuss how organizations can evaluate risks in their own and their cloud service provider environments, as well as technologies and tools that can assist in achieving a comprehensive strategy.

Join us to learn about:
--Understanding cloud scope across the organization
--Cloud governance frameworks
--Pros and cons of centralizing security access and monitoring controls
--Multi-cloud management and network security analytics platforms
--Cloud security posture management (CSPM) tools that can identify misconfigurations and risks
--Tools for cloud compliance monitoring

Build a Multi-cloud Strategy that Supports Governance and Compliance

Join WiCyS Strategic Partner, AWS will discuss misconfiguration in the cloud, its patterns, threats, and risk to an organization/business. Understanding the shared responsibility model and how we can protect our organizations. We will be going through a use-case exercise and attendees will learn how we can implement the shared model.

Mis-Configuration in the Cloud

Digital transformation and the evolution of identity in the workplace -- spurred by decentralization, cloud adoption and remote work -- have exposed the fact that old methods of identity and access management have outgrown traditional security protections, posing major risks. Adaptable and agile security architectures with a spotlight on identity are a necessity to keep employees and their organizations safe.

In this panel, security experts will explore digital identity trends that bolster cloud security, as well as cybersecurity innovations that focus largely on identity, and help them understand the options.

Join us to learn about:

--Open identity standards and interoperability
--Identity as a service
--Cloud infrastructure entitlement management (CIEM)
--Zero trust models
--Cloud access security brokers (CASBs)

Identity Management Is Essential to Cloud Security

The core tenet of a zero trust strategy is least-privilege access. Yet, organizations continue to rely on user and machine identities that are susceptible to compromise, abuse and misuse, and theft. Risk is compounded by over-permissive, static access rights that provide little to no visibility into who and what is using access and how. Vaguer is how identities should be monitored and protected.

Availability of modern, cloud-managed identity services is widespread. However, organizations have been slow to pivot their security programs from traditional endpoint, network, and SecOps to an approach that focuses on identity orchestration and experiences, which is dynamic and distributed. Where there are no perimeters, a multitude of identity verification services and managed identity services exist. This research-led session will focus on how teams are responding, the identity security controls at play, and the strategies shown to be most effective.

Securing the Identity Perimeter with Defense in Depth

With the huge expansion on the attack surface of an organization and the dynamic growth in the realm of Cybersecurity, employees are tempted to choose the latest and greatest product in the market to make life easier for them. While busy individuals think they are finding a solution to their problem, not assessing the associated security risks can cause more problems than it solves! What vulnerabilities are associated with this new tool? Who should have access to the data? Who should own the application? It is quite common for products from vendors to become compromised.

In this presentation, WiCyS strategic partner, Workday, will talk about how Enterprise Security establishes the relationship and collaborates with various security teams before a technology is approved.

Enterprise Security: The Batman Effect

Are you interested in breaking into cybersecurity, but not sure you have all the technical skills? This webinar will empower you to see that YOU have what it takes to break into the industry the non-technical way. This field needs diversity in all skills to fill the ongoing talent gaps, so join this webinar where WiCyS Strategic Partner, Sentinel One, will be sharing the non-technical side to start your Cybersecurity journey.

Can't make it on May 26? Go ahead and register to you receive a recording as soon as we wrap!

How to get into Cybersecurity the non-technical way

Tune into this session to learn about the importance of identifying and protecting various types of assets within organizations and how using a multi-layered approach of implementing security solutions can reduce the risk of a potential cyber attacks and threats. Attendees will discover how threat actors locate sensitive information about their targets that can lead to compromising a company and stealing data. Furthermore, viewers will gain hands-on experience in getting started with using popular tools within the cybersecurity industry to identify security vulnerabilities on their systems and network while learning how to secure them. Lastly, viewers will explore the need for developing an incident response plan and creating a team that's well-prepared to catch any security event and handle any incidents.

Key Takeaways:
- Understand the need for data protection and defense-in-depth.
- Discover how organizations leak sensitive data without knowing.
- Get started with identifying potential security vulnerabilities.
- Explore the need for incident response planning and procedures
- Build an incident response team.

Protecting organization data against cyber attacks, threats and data breaches

Businesses are now spending $170.4 billion on information security annually, according to research from Gartner. Despite this huge investment, IBM's annual security report found that the average cost due to a data breach rose from $3.86 million in 2020 to $4.24 million in 2021, the highest in 17 years. Headlines call out the latest victims, including some of the world's biggest corporations. But how can businesses protect themselves when employees are scattered, data is exploding, and devices are proliferating?

In this expert panel, cybersecurity experts will discuss best practices for proactively protecting your organization from the most common threats, and what to do when a breach does occur. 

Join us to explore:

-- Preventing breaches from external and internal threats
-- Tools and techniques for detection and response
-- How the speed of response to a breach can minimize its effects
-- Adapting breach protection to hybrid work models
-- How modern architectures such as IoT and edge affect a breach prevention strategy


Panelists include:
Jeroen Hekelaar,  Manager, Solutions Engineering EMEA, SonicWall
Carl Leonard, Cybersecurity Strategist, Proofpoint

Don't Become the Next Cautionary Tale: Top Breach Prevention Strategies

This talk will detail how to plan your application ecosystem landscape to withstand multi-layered attack.

Key Takeaways:
• Understand which tools are better aligned with your stack.
• Apply best practice to develop active simulation exercise.
• Review of disaster recovery as monthly initiatives.
• Align your business continuity to critical assets.

Planning Your Application Ecosystem Landscape to Withstand Multi-Layered Attack

Hackers will never stop their attack attempts, and organizations must be aware they could be breached any second! So tune into this presentation to discover:
• How to best prepare against those attacks? 
• What tools to leverage?
• How can your security team detect even the latest, more sophisticated foes and, most importantly, how can you respond to their attacks?

Join Dr. Erdal, corporate CISO and president of the Global CISO Forum, to learn how you can master your breach detection learning from real-life examples.

The Art of Breach Detection

Today's security operations centers (SOCs) are inundated with an endless stream of alerts, vulnerabilities, and threat intelligence. But the reality is that no matter how large or well-resourced a security operations team, there will always be more work to do. So the next-gen SOC must be calibrated to work smarter, not harder. 

In this webinar you will learn:
•  What are the main inefficiencies in SOC operations.
•  How to use technology to address the inefficiencies.
•  How to use people and processes to address the inefficiencies.

The Next-Gen SOC: Optimizing to Make the Most of Limited Resources

Data breaches increased a staggering 68% in 2021, according to Identity Theft Resource Center's annual report, affecting individuals, municipalities and nation states, businesses large and small, and public utilities and resources. Attacks involving ransomware more than doubled, and the most popular business targets were in manufacturing and utilities. Understanding these trends and anticipating how and why attackers might single out your business operations or employees is critical to mitigation.

This panel of security experts will explore the current state of cybersecurity and how to use threat intelligence and threat hunting to identify risk and avert disaster.

Join us to learn about:

-- The new breed of cyber criminals and why they attack
-- The types of breaches your business should fear most
-- The best sources of threat intelligence 
-- How threat hunting and threat modelling can help your business proactively deter attackers
-- How to increase security awareness throughout the organization

Panelists include:
Michael Pepin, CISSP, Sr. Security Architect, Clumio
Carl Leonard, Cybersecurity Strategist, Proofpoint

How to Keep up with the Cyber Threat Landscape

The bad news? Data breaches now play a role in ransomware and extortion attacks, espionage, cyber fraud, business-email compromise, and more. The good news? As security vendors and internal security teams up their game, threat actions are converging, and threat actors now have only so many initial attack vectors to break in and do bad things.

You must simplify your prevention strategy to develop an effective means to stop data breaches, regardless of the flavor of attack. But how?

Join Nick Cavalancia to explore how you can elevate your data breach prevention strategy by viewing it through the lens of threat actor actions. Topics will include:
• Start with the bad guy and work backwards to strategy.
• Focus on initial attack vectors.
• Translate threat actions into practical prevention strategy.
• Lessons from MITRE’s ATT&CK Framework and industry trends.

Use bad-guy trends, tactics and techniques against them for effective strategy

Organizations are realizing the necessity to treat security as a first-class citizen instead of an after-thought. When it comes to DevOps, organizations are now including security at every step of the development and deployment lifecycle. 

Join experts from the industry to learn more about:
- Security challenges and vulnerabilities
- DevOps vs DevSecOps: What's the difference?
- How to make disjointed security and DevOps teams work effectively
- DevOps security scans
- Steps to better application security

Speakers: 
- Rick Moy, CMO, Acalvio Technologies
- Dr. David Brumley, CEO & Co-Founder, ForAllSecure
- Connor Gilbert, Product Manager, StackRox
- Jay Beale, CTO & COO, InGuardians

Delivering DevSecOps and Achieving Resilience

DevOps

DevSecOps

Application Development

Security Testing

Application Security

Vulnerability Scanning

Vulnerability Management

Cyber Resilience

Security Scanning

Secure Development

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Delivering DevSecOps and Achieving Resilience

Presented by

About this talk

More from this channel