Name: 5 Reasons CISOs are Turning to Security-as-a-Service
Start: 2020-11-26T18:00:00Z
End: 2020-11-26T18:01:01.000Z
Location: BrightTALK
Rating: 4.6

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

As data collection and analysis become increasingly central to business, research, and governance, protecting sensitive information is more crucial than ever. This session will examine the privacy, ethical, and security challenges involved in analyzing sensitive data such as personal health records, financial information, and other confidential datasets. 

Key questions to be addressed include: 
- How can sensitive data be ethically and responsibly analyzed while still protecting individual privacy? 
- What technical and policy safeguards are essential when working with sensitive data? 
- How can risks related to re-identification, unauthorized access, and data leakage be mitigated? 
 
This talk presented industry thought leader Donald Farmer will review best practices and frameworks for enabling secure and ethical data analysis across various industries and applications. Expert perspectives on navigating emerging regulations, managing tradeoffs, and aligning analytical objectives with privacy values will be discussed. Attendees will gain critical insights into analyzing sensitive data securely while upholding public trust and mitigating risks.

Analyzing Sensitive Data: Privacy, Ethics, and Security Considerations

Companies need to understand “wicked” problems, and the best way to navigate the organization during periods of uncertainty.

Companies should ask themselves how speedy their response be to a data security incident, when escalating to the senior leadership team, more so when it is an extortion and/or ransomware attack that involves critical data sets.

Tune into this session presented by disaster recovery and cyber resilience expert Steve Yates as he brings to light the crisis management options for those scary technology moments for when super speedy decisions are needed (or are they)?

By the end of the session, you will be able to:
- Be aware of data security incident management processes and procedures. 
- Form an understanding of the need for having a plan (runbooks/playbooks) and agreed crisis escalation process.
- Be conversant with a joined-up thinking approach when reviewing technology incident management that is “fit-for-purpose”.

Data Security Incident Management: What Keeps You Awake At Night? Part 3

Tune into this session to hear from industry thought leader Vincent Amanyi as he provide a 360-degree view for developing a strategy that can easily drive a zero-day attack, while maintaining an ironclad environment. 

Key takeaways 
- Understand the moving parts of your organizational entities. 
- Establish an enterprise posture that mirror's your assets.
- Develop a mechanism to manage attack evolution.

Developing strategy that enables zero-day exploitation

Tune into this session from industry thought leader Vincent Amanyi as he explore a 360-degree view for developing a strategy that can easily drive a zero-day attack, while maintaining an ironclad environment. 

Key takeaways
- Understand the moving parts of your organizational entities.
- Establish a an enterprise posture that mirror’s your assets.
- Develop a mechanism to manage attack evolution.

This session from industry thought leader will provide a 360-degree view on how to develop a strategy that can easily drive a zero day attack, while maintaining ironclad environment. 

Key takeaways:
- Understand the moving part of your organization entities. 
- Establish an enterprise posture that mirror's your assets. 
- Develop a mechanism to manage attack evolution.

Developing Strategy That Enables Zero-Day Exploitation

Companies at a senior leadership level recognize operational risk in the form of  their “Risk Appetite & Tolerance”, defined as “the amount and type of risk that an organisation is willing to take in order to meet their strategic objectives”. 

The question companies should ask themselves is how much can cybersecurity risks identified in the 2024 threat forecast impact organizations technology, and how can they communicate effectively what this means to their organizations' strategic objectives?

Tune into this session presented by disaster recovery and cyber resilience expert Steve Yates as he brings to light the operational risk considerations and resilience options for those “scary” technology moments which can cause organizations to face the Maximum Tolerable Period of Disruption, or when an organization faces tough decisions, one of which may mean no choice but to close down!

By the end of the session, you will be able to:
- Be aware of The 2024 threat forecast and potential cybersecurity impacts on technology. 
- Form an understanding of the difficult language that must be used when dealing with the senior leadership team.
- Be conversant with a joined-up thinking approach when reviewing technology operational risk and identifying resilience measures.

Threat Forecast Vs. Operational Risk: What Keeps You Awake At Night?  Part 2

The need for structured IR readiness process that addresses both on-premises and cloud environments is clearer than ever before. In this session, an incident responder and cloud security architect will share their personal experiences in defending against nation-state attacks. 

Through real-life case studies, they will cover best practices for Incident Response methodology and tools that stand the test of nation-state attacks. They will then present how this battle-tested but traditional approach to IR is challenged with the introduction of cloud computing. Finally, they are introducing a a battle-proven framework to enhance your IR capabilities in the cloud.

About the speakers:
Karl Ots is a cloud and cybersecurity expert, as well as international speaker and trainer, with a broad range of deep Azure expertise. He believes that secure cloud technologies are the key to successful digital transformation. He applies his passion as Head of Cloud Security at EPAM Systems. Karl has been working with Microsoft Azure since 2011 in a variety of forums ranging from large projects to speaking at largest tech conferences, such as Microsoft Ignite. Karl is a Microsoft Certified Trainer (MCT) and a Certified Information Systems Security Professional (CISSP). He is the author of Azure Security Handbook.

Aviv Srour has more than a decade of Cyber Security experience. He specializes in defensive security, Incident Response (IR) and organizational information security. Currently he holds the position of Head of Cyber Innovation at EPAM.

Aviv has handled hundreds of security incidents, starting back at his days at Israeli Air Force where he led the CIRT team. His hands-on experience with complex security incidents helps him develop an unique view on what is needed from IR readiness processes and how to significantly reduce detection and remediation time.

Is Your IR Ready for Cloud? Lessons From the Front Lines of Nation-State Attacks

Supply chains face known and unknown risks. IT organizations are especially susceptible to supply chain risk as it often uses many open source products in the acquisition and development of their software. We need a structured approach for cybersecurity supply chain risk management. A “software bill of materials” (SBOM) has emerged as a key building block in software security and software supply chain risk management. A SBOM is a nested inventory, a list of ingredients that make up software components. 

The Executive Order (EO) on Improving the Nation’s Cybersecurity released on May 12, 2021 acknowledges the increasing number of software security risks throughout the supply chain. This EO mandates that Federal departments and agencies (and their suppliers) understand the cybersecurity risks through the software and services that they acquire, deploy, use, and manage from their supply chain (which includes open source software components). Acquired software may need to contain known and unknown vulnerabilities as a result of the product architecture and development life cycle.

In this webinar learn about cybersecurity risk management and governance. 
- Identify and document the risks and known vulnerabilities.
- Build a supply-chain risk-management framework. 
- Know and manage critical components and suppliers. 
- Develop a supplier/vendor software bill of materials, of each binary component that is used in the software, firmware, or product.
- Build a remediation plan for any vulnerable open source materials.
- Institute a governance and monitoring process.

Cybersecurity Supply Chain Governance

When you think about it, supply chain security surfaced as an important focus in the wake of several significant events that highlighted vulnerabilities in global supply chains. These events began with the 9/11 attacks in 2001 resulting in a heightened focus on national security - including the security of supply chains. Subsequently, we had high-profile product recalls and quality issues - such as contaminated foods and counterfeit drugs - again raising concerns about supply chain security. Additionally, we also had an increasing reliance on digital systems and technology in supply chains that were made more vulnerable due to cyber threats. 

These events in conjunction with the rapid growth of globalization and outsourcing of manufacturing and sourcing activities to different areas of the globe increased the complexity and extended the geographic reach of supply chains. Hence, supply chain security -- including cyber and physical -- surfaced and required important focus. 

Join Ernie Hayden (Founder & Principal, 443 Consulting) to gain a better perspective of the physical security issues involved with the current global supply chain and get insights on how to overcome them. Key challenges discussed in the session include:  
- Unauthorized access to the supply chain and materials. 
- Inadequate surveillance of physical security of supply chain operations; and,  
- Transportation security weaknesses arising from inadequate packaging, lack of tracking and tracing mechanisms, or insufficient verification of drivers and personnel involved in the transportation process.

The Nuances of Physical Security and Supply Chain Management

Supply chain managers are being asked to better manage supply chain risk and create more resilient supply chains while maintaining efficiency. Unfortunately, traditional approaches to risk management and resilience are insufficient to address this complex issue.  

Many companies lack the data, tools, and insights needed to manage risk and improve resilience effectively and efficiently. Fear not - there is a game-changing solution on the horizon: the intelligent use of digital technologies!  

In this session, Digital Supply Chain Advisor, Fabio Tiozzo shares his expert insights on the transformative power of digital technologies in supply chain risk management and resilience. Get an overview of the digital technology stack, including both mature and emerging technologies, and discover how to leverage them to revolutionize supply chain resilience and risk management.

Topics for discussion include:  
- What supply chain managers can do to better manage supply chain risk and improve resiliency, while maintaining supply chain efficiency. 
- Why embracing digital supply chain risk management and resilience is not only a necessity for survival, but an opportunity to create new value and gain a competitive advantage. 
- How to map out your digital adoption roadmap to ensure you are integrating the right technologies into your processes. 
- And more...

Innovating SCRM and Resilience: Harnessing the Potential of Digital Technologies

More companies are seeking out 100% availability as a key part of their disaster recovery plan. But delivering such a commitment is a huge feat. Companies would need a service that was able to “To resist and tolerate failure and recover mission critical communication elements within a business acceptable timescale by planning and design” as well as to manage whatever intentional human and natural risks likely to occur. Full availability would also need infrastructure resilience, in-place disaster recovery plans, and contingency capability as well as the establishment of an integrated and external incident command system. 

The question companies should ask themselves is “How easy would it be to achieve all of this in my organization and, if so, at what cost?’

Tune into this session presented by disaster recovery and cyber resilience expert Steve Yates as he brings to light “scary” technology moments companies must consider and how companies can tackle them if they put in place the right strategy based upon their specific requirements. Viewers are encouraged to share their thoughts on disaster recovery plans and their major concerns to gain the most from this session.

By the end of the session, you will be able to:
- Be aware of the challenges you may likely encounter. 
- Form an understanding of the core supporting elements.
- Be conversant with a joined-up thinking approach when delivering technology resilience.

About the speaker
Steve is a Founding Fellow of the Business Continuity Institute (FBCI), as well as being a Disaster Recovery Institute (DRI) International Certified Business Continuity Professional (CBCP) and Cyber Resilience Professional (CCRP). He has been awarded the Freeman of the City of London for his work in incident management and technology disaster recovery during the response to several terrorist bombings, and is now a Liveryman of the Worshipful Company of Information Technologists (WCIT).

Disaster recovery plans: What keeps you awake at night?

AI Systems are rapidly emerging in a broad range of industries and applications. Businesses find themselves compelled to accelerate and deploy these systems at “warp speed,” far more rapidly than previous new or emerging technologies. But AI introduces many new risks. In the rush to deploy and monetize AI, there has been little time to understand these risks, nor how to manage and mitigate them. Reports of failures, financial loss, litigation, and reputational damage appear in the news regularly. Even the most experienced and sophisticated AI players have been exposed to these risks.

This session will review the key risks of AI systems and their impacts. Many of these are new and unique. Additionally, unlike conventional systems, these associated risks extend into operational deployment and ongoing production use of AI systems. Industry thought leader Allan Cytryn will present examples and consequences along with insights and guidance on measuring, managing, and mitigating them. 

Attendees will develop a meaningful understanding of what AI is and isn’t, its risks, and how to effectively lead risk management efforts in their organizations. This session is foundational, and hence will also provide attendees a basis for further exploration of AI risks and risk management on their own.

Risk management for AI systems

Ready to expand into the international cybersecurity market? Join us to discover how to get started and explore the wealth of State and Federal resources available to cyber companies.

Business development experts Pompeya Lambrecht, Senior International Trade Specialist at the U.S. Commercial Service, and Ellen Meinhart, Senior International Trade Manager from the Virginia Economic Development Partnership, will be our guests giving U.S.-based businesses tips and resources to help break into the international cyber marketplace.

Sign up today!

How to Break into the International Cybersecurity Market

Modern IT environments are complex. Organizations have logs and telemetry from thousands of devices, dozens of tools, covering both on-premises and cloud solutions. It’s hard enough to collect all this data in one place, knowing how to begin can also be daunting. 

This talk presented by industry thought leader John Bambenek will cover practical examples and techniques to dig into the security data of an organization to start hunting for otherwise unknown threats. Armed with this knowledge, teams can realize the goal of building their own detection techniques to find the threat actors that slip through their defenses.

Hunting for the unknowns...Where to start?

Tune into this webinar from industry thought leader Vincent Amanyi as he establishes assumptions and iterates a clear pathway to develop your security analytic requirements. 

Attendees will come away from this session with knowledge to:
- Establish enterprise criteria for your requirements.
- Define a measurement benchmarking system.
- Manage and control your environment.

Developing the requirements of a security analytics solution

Data Breach – Tools and tips for managing a cyber attack

Cyber Threats in 2021: Real impact of COVID on Cyber Security

I've Been Hit By Ransomware: Now What?

CYA Toolkit for CISOs

Key Strategies to Reduce your Attack Surface in 2021

Web Application Security and the API’s They Rely On

Infrastructure Compliance Automation, Security & Management in your Cloud

Better Together: Fighting Modern Threats with XDR and SIEM

Endpoint Protection Strategies for the Post-COVID World

5 Reasons CISOs are Turning to Security-as-a-Service

Why can't security teams overlook the benefits of Collaboration & Automation?

The CISO Playbook for Measurably Reducing Cyber Risk

Surviving Beyond the New Normal: It's more than securing your remote workers

Bridging the Gap: Communicating Cyber Risk Reduction Strategies

Assess. Comply. Assure: Eight Cyber Challenges in an Uncertain World

Breach Response in context of new Privacy Regulation

Countering Zero-Day Ransomware: Deception + MDR

Adapting Your Incident Response Policy to the Cloud Era

Responding to a Breach - Business Resilience from a CISO perspective

The Beginning of the End of Ransomware

The Ins and Outs of Enterprise Crypto in the world of cloud and mobile computing

Preventing cyber attacks; lost cause or is it possible?

[Panel] Cyber Attack Prevention

Cyber Risk Drives Cost Effective Security

Police insight – How to protect your business from cyber threats

Old Wine in New Bottles: Has the threat landscape really changed?

Advancing AI & Machine Learning in Cybersecurity Threat Prevention

Staying Ahead of Cyber Threats Anytime and Anywhere

Changing Cyber Landscapes: The Battle of Algorithms (APAC)

A Global Reset: Cyber Security Predictions 2021 | Expert Roundtable

Prioritize Your Organization for the 2021 Threatscape

Security Spotlight: Explosion of Identities & Proliferation of Privileged Access

The 2021 Threat Forecast

Plenty of Phish: Why We Need a New Approach to Email Security in 2021

The Explosion of Identities & Proliferation of Privileged Access

CISO Challenges and Opportunities

The 2021 Threatscape

The global security as a service market size is expected to grow from USD 11.1 billion in 2020 to USD 26.4 billion by 2025, at a Compound Annual Growth Rate (CAGR) of 18.9% during that time period. Driven by a cloud-based delivery model, options abound for organizations in areas such as application security, data security, identity and access management, infrastructure protection and integrated risk management to name a few. These options include off the shelf security as a service products as well as those provided and managed by an MSSP.  

In today’s session we’ll explore these 5 key points:
1. Security budgets and priorities in a post Covid-19 world
2. When to outsource
3. Selecting an MSSP
4. Tools, Tools and More Tools
5. Upskilling your team

Security as a Service

Cyber Security

Cyber Attacks

IT Security

Security Awareness

Information Security

CISO

Security tools

MSSP

Access Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

5 Reasons CISOs are Turning to Security-as-a-Service

Presented by

About this talk

More from this channel