The CISO Job - Getting It, and Keeping It

According to recent polling, 80% of infosec professionals want an efficient and effective way to prioritize vulnerabilities based on risk. Of those polled, 50% are attempting to risk rate vulnerabilities, but finding the process really hard.

Tenable is resolving the vulnerability prioritization challenge with a new process we call Predictive Prioritization.

Join us at 2pm ET, August 20, 2019 to learn more about the data and computer science behind Predictive Prioritization by attending the webinar: " To Reduce Cyber Exposure, Find and Fix the Vulnerabilities that Matter Most."

Topics covered will include:

* How to overcome the limitations of CVSS scoring for risk rating vulnerabilities

* How you can effectively identify the vulnerabilities that will most likely be exploited in the near term

* Ways to dramatically improve your remediation efforts by focusing on the the highest risk vulns

* Answers to your questions during live Q&A

All IT and infosec professionals responsible for ensuring the efficient and effective delivery of vulnerability management programs are encouraged to attend this webinar.

Save your spot. Register now.

Securing the networks from attackers remains a key challenge in 2019. With billions of people affected by data breaches, governments and businesses are continuing to spend more time and money trying to better protect against cyber attacks.

Join this panel of experts as they discuss the biggest threats to enterprise networks and how to better protect against them:
- Top threats to network security
- Watering hole attacks: Explanation and examples
- Microsegmentation and lateral movement prevention
- How to improve the security of network infrastructure devices
- Real time breach detection: Myth or reality?
- Steps to take to better secure your networks

Speakers:
- Kalani Enos, Founder and CEO, kenos Technologies LLC (moderator)
- Greg DeBrecourt, Cyber Security Manager, Aerovironment
- Gavin Millard, Vice President of Product Marketing, Tenable
- Peter Wood, Partner, Naturally Cyber LLP

As your organization embraces cloud infrastructure, DevOps technologies, and other modern assets, you have new risks coming from a broader attack surface. Vulnerability management designed for traditional assets is not enough. To improve security you need to rethink how you do things. For example, containers have become the defacto standard in cloud architectures today, which means that security needs to move into developers’ build processes while complementing existing solutions.

Attend this webinar to discover how DevOps and modern assets have turned the six steps of the vulnerability management life cycle on their head. During this webinar we’ll cover:
- Where vulnerability management for today’s assets needs to start (and it’s not where it used to)
- Why prioritization should not be based on scan results
- Why assessments and network scans are no longer synonymous
- Why reports and PDFs are no longer the answer
- What the new face of remediation looks like
- How DevOps can be convinced to incorporate security (without name calling and threatening!)

CISOs must deal with several stakeholders within the organization. These stakeholders range from BOD members, C-Level management, peer compliance stakeholders (e.g. Legal, Privacy Office), vendors, and the IT organization itself.

This session will focus on critical success factors to dealing with this wide array of stakeholders and success case studies.

Specifically, this session will discuss the politics of getting alignment and buy in with the many stakeholders within the organizations such as:
•Board of Directors and C-Level management
•Natural allies such as compliance, privacy, audit, enterprise risk management
•Potential contentious relationships with line or business unit management
•IT organization strategic and tactical delivery goals and objectives

Speakers include:
•Craig Shumard, Principal, Shumard and Associates, LLC, Emeritus CISO, Cigna
•Tom Doughty, VP & CISO,Prudential
•Larry Brock, CISO emeritus, Dupont
•Bob Hillmer, Director, Enterprise Information Security and Directory Services
•Marcus Ranum, CSO, Tenable Network Security

A Politics of Information Security Webcast.

This webcast will focus on how risk tolerance is decided within an organization and the processes and politics of risks assumption. Topics to be covered include:

- How risk tolerance is decided within an organization
-- Informal to formal risk tolerance model
- How and who can assume risk
- Risk assessment and risk assumption linkages
- Competing Drivers
-- Business unit versus enterprise risk

Presenters include:
- Craig Shumard, Principal, Shumard and Associates, retired CISO, Cigna
- Dennis Brixius, VP of risk management and CSO, McGraw Hill
- Catherine Rees, CISO, Dow Jones & Company
- Marcus J. Ranum, CSO, Tenable Network Security

A Politics of Information Security Webcast
Earlier this year, a panel of Chief Security Officers from some of the nation’s highest profile companies met to talk about how to get and keep the CISO job. The response was tremendous – over 1,000 people have participated in the session. But that talk only scratched the surface – our team of panelists has much more information to share. Join us for Part II of the discussion where we’ll dig into some of the questions that didn’t get answered in the initial discussion, and cover more ground on topics like working with senior management.
You'll learn:
How to Get the CISO Job:
- How to deal with senior management
- Establishing governance frameworks to guide your activities
- Advice on balancing tactical vs. strategic efforts
- Positioning yourself as an enabler, not a blocker
- Staying ahead by meeting all important audit and regulatory requirements
Featured Speakers:
- Craig Shumard, Principal, Shumard and Associates, LLC, retired CISO, Cigna
- Marcus Ranum, CSO, Tenable Network Security
- Todd Bearman, CISO, Towers Watson
- Vas Rajan, CISO, ING Direct
- John Masserini, Chief Security Officer of Miami International Holdings and the Miami International Securities Exchange (MIAX)

A Politics of Information Security Webcast

Over the last decade, the Chief Information Security Officer (CISO) has emerged as the job in IT risk management. But for many, it's a high-risk career move. Average tenures in the role remain mired at just a few years. But success is possible — join our expert panel to learn how you can get, and keep, the CISO job.

You'll learn:

How to Get the CISO Job:
- Who gets to the top of the shortlist
- Whether certifications play a role
- How experience in other parts of the organization can help your bid

And Then, How to Keep It:
- How to deal with senior management
- Establishing governance frameworks to guide your activities
- Advice on balancing tactical vs. strategic efforts
- Positioning yourself as an enabler, not a blocker
- Staying ahead by meeting all important audit and regulatory requirements


Featured Speakers:
- Craig Shumard, Principal, Shumard and Associates, LLC, retired CISO, Cigna
- Marcus Ranum, CSO, Tenable Network Security
- Todd Bearman, CISO, Towers Watson