Next Generation Privacy Enhancing Technologies (PETs)

The terms security and cyber (short for cybersecurity) are often used interchangeably, referring to the profession narrowly defined as a team of professionals who leverage technologies and processes to defend an organization’s systems and networks from attack. However, this narrow use of security sells the field short – there are in fact a number of key functions under the security umbrella, one of which is cybersecurity, all of which are essential to the success of the organization. Some such functions are: physical security, fraud prevention, privacy, business continuity, disaster recovery, and risk management, although there are still more. And though the security field is defined by the technical “hacker” persona, people with backgrounds, skills, and interests of a wide variety have all found success under the umbrella of work in the security field.

Join our webinar to hear from several of Equifax’s women leaders who have come to security from different educational backgrounds, former careers, and interests, but who share a passion for challenging work, career growth, and personal excellence. Learn about their career journeys that led them to security, how they apply their interests and training to their current work and future professional goals, and hear the advice they have for the next generation of women in security. Bring your questions, too, and participate in this lively interactive discussion!

The PCI Dream Team is back for another interactive Q&A session.

With hundreds of different requirements, the various Payment Card Industry (PCI) standards can be overwhelming. While the PCI Security Standards Council has provided lots of answers, the devil is often in the details.

Our panelists are some of the top PCI QSA’s in the country, with decades of combined PCI and card processing experiences. They’ve seen it all: the good, bad and ugly; and lived to tell the tale.

Join Ben Rothke, David Mundhenk, Arthur Cooper, and Jeff Hall for an interactive Q&A session, and get answers to your most vexing PCI questions. No PCI question is out of bounds.

Speakers:
- Ben Rothke, Senior Information Security Specialist at Tapad
- David Mundhenk, Senior Security Consultant at Herjavec Group
- Jeff Hall, Senior Consultant with Online Business Systems
- Arthur Cooper "Coop", Senior Security Consultant at NuArx

Organizations are realizing the necessity to treat security as a first-class citizen instead of an after-thought. When it comes to DevOps, organizations are now including security at every step of the development and deployment lifecycle.

Join experts from the industry to learn more about:
- Security challenges and vulnerabilities
- DevOps vs DevSecOps: What's the difference?
- How to make disjointed security and DevOps teams work effectively
- DevOps security scans
- Steps to better application security

Speakers:
- Rick Moy, CMO, Acalvio Technologies
- Dr. David Brumley, CEO & Co-Founder, ForAllSecure
- Connor Gilbert, Product Manager, StackRox
- Jay Beale, CTO & COO, InGuardians

How are organizations handling security for their multiple clouds and applications? Join cloud and security leaders in an interactive discussion to learn about:
- Multi-cloud reality
- Addressing your cyber risk
- Managing vulnerabilities, detecting breaches and responding to incidents
- Automating security tasks across multiple clouds and applications
- Recommendations for improving enterprise cloud security

Speakers:
- Raj Mallempati, COO, CloudKnox Security
- Chris Schueler, Senior Vice President of Managed Security Services, Trustwave
- Tim Choi, VP, Product Marketing, Proofpoint
- Nathan Wenzler, Senior Director of Cybersecurity, Moss Adams

Through their win in the 2016 DARPA Cyber Grand Challenge, ForAllSecure challenged the way application security testing is thought and approached.

Join Dr. David Brumley, CEO and Co-Founder of ForAllSecure, as he shares his observations on shifts in software security trends before and after the DARPA CGC. He'll dissect how these trends came to be and share his predictions how they will impact the software security industry.

Speakers:
Frank Downs, Director/SME Cybersecurity Practices, ISACA
Dr. David Brumley, CEO & Co-Founder, ForAllSecure

Abstract: More than 99% of all targeted cyberattacks rely on users to activate them. It is evident that people need to be at the center when building a robust cybersecurity approach in the era of highly sophisticated attacks.

Join BrightTalk for a live interview with Tim Choi, the VP of Product Marketing at Proofpoint, as we discuss the key findings of the threat landscape for 2019 and share practical tips on how CISOs can build a truly people-centric cybersecurity strategy.

Most IT roles tend to involve long hours and high stress levels, but with breaks between projects. The reality of a cybersecurity professional, however, is that their job is never fully complete. Much like an air traffic controller or a law officer, just one oversight can result in detrimental consequences. The constant pressure of identifying new threats, contending with persistent adversaries around the clock, and assessing how third parties and introduction of new technologies may impact risk is psychologically taxing. Furthermore, it may weaken the enterprise cyber resiliency.

Join this Q&A interview live from Black Hat to learn more about:

- Burnout in cybersecurity
- The effect of AI and behavioral analytics on burnout
- Industry shortage of security expertise and how to address it
- How to alleviate day-to-day cybersecurity stress

Speakers:
Frank Downs, Director/SME Cybersecurity Practices, ISACA
Chris Schueler, Senior Vice President of Managed Security Services, Trustwave

Organizations are evolving beyond the traditional, reactive approach to privacy and data security to thinking proactively. Are we closer to a Privacy-and-Security-by-Design reality?

Join this panel of experts to get the answer to all of your privacy, security and compliance questions. Viewers can learn more about:
- Effects of GDPR: One year later
- How businesses are preparing for CCPA
- Best practices for achieving and maintaining compliance
- How to bake privacy and security into your processes
- What to expect in the next 12 months

Speakers:
Joseph Carson, Chief Security Scientist, Thycotic (Moderator)
Debra Farber, Independent Privacy & Security Advisor
Nathan Wenzler, Senior Director, Cybersecurity, Moss Adams
James Chappell, Co-Founder & Chief Innovation Officer, Digital Shadows

As the Internet of Things continues to grow, so do the security and privacy risks and vulnerabilities associated with IoT devices on enterprise networks. Organizations worldwide are looking to assess and manage their risk, implement basic cyber hygiene, and improve their security posture. Discover the best strategies for achieving security at every level, including IoT.
Join this interactive panel with industry experts to learn more about:
- Impact of IoT on enterprise security
- How to assess the IoT risk
- Most common IoT vulnerabilities and how to address them
- Recommendations for improving IoT security

Speakers:
- Chris Morales, Head of Security Analytics, Vectra (Moderator)
- Jason Soroko, CTO of IoT, Sectigo
- Todd Weber, Chief Technology Officer, Optiv
- Rudolph Araujo, VP Marketing, Awake Security

Today's digitally connected businesses require multi-layer defense against rising and more sophisticated web-based threats across websites, devices, infrastructure, and cloud.

Join this interactive 1-2-1 discussion where IoT security expert, Jason Soroko, will share how to deal with IoT security challenges.

Join us, live from Las Vegas as we learn about:
- How identity plays a role in IoT security
- The role of trust models to enable third party device interoperability
- If three is a way to secure a digital identity for devices that do not have a hardware
secure element such as a TPM
- The latest IoT device security legislations
- Determining if IoT connected devices in your operations infrastructure are secure

IoT security has become a critical priority for enterprise information technology security teams. Devices with sensors and the automated processes that connect them are prime targets for attackers seeking to take advantage of insecure code and low-level vulnerabilities.

Join us for an exclusive interview LIVE from Las Vegas during Black Hat to learn more about the current state and challenges for IoT security, the areas for automation, and how regulations are affecting the future of IoT and IoT security.

Viewers will also learn about:
- How is security different for industrial control systems and IoT
- How traditional IT security principles differ in the IoT space
- IoT security certifications consumers/enterprises should be aware of
- How important is continuous penetration testing
- Is encrypting IoT data important and how

Broadcast LIVE from Las Vegas during Black Hat 2019

It’s hard to express the scale of today’s cyber threat landscape, let alone its global impact. We can tell you that there were nearly four million DDoS attacks around the world in the last six months, and that attack frequency grew by 39 percent. Or that the NETSCOUT ASERT team saw 20,000 unique samples per month from just one family of IoT malware. Or even that it can take only five days from the discovery of a new attack vector to the availability of tools for the script-kiddie designed to exploit that vulnerability.

These numbers, while startling, don’t fully convey the impact of that steady drumbeat of new threats. Cybercrime has entered the mainstream of our culture to an unprecedented extent, and it is here to stay.

Join this video interview live from Las Vegas during Black Hat to learn more about:
- The big trends in DDoS
- New attack vectors found in the past six months and what this means for device and software security
- What enterprises can do to protect themselves

Cybersecurity executives and leaders are not the only cybersecurity experts feeling the pressure to do more with less in the age of the widening cyber skills gap. Cyber security practitioners, already at a disadvantage in the asymmetric battle for the fate of their company’s and customers’ networks, have much to teach the rest of us about how organizations can overcome the shortfall.

Join Danny Slack, Senior Manager for FireEye Managed Defense, as he talks about stories and strategies from the cyber defender’s perspective.

Digital Transformation, 5G and the Internet of Things are creating wider and deeper opportunities and risks for technology and business organizations to pioneer and navigate. These new boundaries are difficult for organizations to get visibility into and contain threats across them. In a the new world of micro services, serverless computing, software defined infrastructure and Multi-Cloud, old enterprise threat and vulnerability models must transform.

Learn how to achieve consistent and continuous monitoring across your entire infrastructure, as well as within the services and providers you rely on. Getting early, accurate warning into the risks that threaten applications and infrastructure is critical.

Learn why Security and DevOps / Infrastructure teams need to lean into and how to do it at scale.

Speakers:
- Rick McElroy, Principal Security Strategist, Carbon Black (Moderator)
- Neil Thacker, CISO, Netskope
- Hardik Modi, Senior Director, Threat Intelligence, NETSCOUT
- Shahrokh Shahidzadeh, CEO, Acceptto

What do CISOs need to be successful at their job? Discover the challenges CISOs are facing and the ways they are solving them.

Join security experts as they discuss the strategies, processes and technologies CISOs use to protect their organizations in the age of breaches:
- What keeps CISOs up at night
- Strategies for breach prevention
- Strategies for making the most of AI technology and human talent
- Coping with analyst fatigue
- Threats on the horizon
- Recommendations for strengthening security

Speakers:
- Deidre Diamond, CEO & Founder, CyberSN
- Alyssa Miller, Manager, Information Security Solutions Practice, CDW
- Martin Holste, Cloud CTO, FireEye
- Mike Weber, Vice President, Coalfire

As cyber security continues to evolve into a business priority, having conversations at the highest levels about how to address security threats becomes crucial. Hear from CDW’s Alyssa Miller as we discuss why it is so important for the CISO to have a place in the board room and ways the CISO can encourage this interaction and improve their effectiveness in working with the Board of Directors.

We’ll discuss common challenges and new ways to address those challenges ensuring the CISO is positioned to become that trusted advisor for the organization.

Join us as we discuss:
- The importance of discussing cyber security strategies at a board level
- What challenges prevent cyber security from being a regular topic for the board
- Approaches that CISOs may employ to help gain visibility with the board and more!

The current state of vendor risk management (VRM) is bleak. More than half of all information security breaches are caused by third-party vendors, and according to Deloitte 83% of today’s business leaders lack confidence in third party VRM processes. Given the growing complexities in accurately collecting and screening third-party data and the need for deeper due diligence, automation is key to a successful risk program. However, many corporations haven’t adopted automation in their third-party risk management programs.

The lack of automation adoption can be traced to a few core reasons. Disparate systems, out-of-date data, and inconsistent policies can all stifle a company’s ability to modernize their third-party risk management program, and companies often suffer from more than one of these. When applied effectively, automation can not only help prevent these roadblocks; it can also drive the efficiencies procurement and compliance leaders are looking for. Join this CPE accredited panel webinar as our expert panel address some key steps to automating third-party risk management, including how to:

-Manage an up-to-date vendor master to create one source of truth across the entire corporation,
-Leverage automation and machine learning to standardize data governance,
-Drive efficiencies and reduces costs, while ensuring the highest accuracy in your third-party risk management program.