The CISO Job - Getting It, and Keeping It

Active Directory (AD) is a favored target for attackers to elevate privileges and facilitate lateral movement by leveraging known flaws and misconfigurations. It doesn’t have to be this way.

With Tenable.ad, you can continuously detect and prevent Active Directory attacks without agents, privileges or delays. Learn how. Join Microsoft MVP Active Directory security experts for a webinar introducing Tenable.ad. Topics covered include:

* Discovering and prioritizing weaknesses in Active Directory

* Detecting Active Directory attacks like DCShadow, brute force, password spraying, DCSync and more

* Improving and accelerating incident response by integrating Active Directory security data from Tenable.ad with your SIEM, SOAR and/or SOC platforms

To help you refine and improve your vulnerability management efforts, Tenable Research has compiled its annual Vulnerability Intelligence Report. Check out this on-demand webinar exploring the report’s findings, and related recommendations, covering:

* 2020 vulnerabilities: the top-20, and a more in-depth look at prevalence, severity, and exploitability trends

* Assessment and remediation trends and the impact of data science on prioritization

* Tools and resources defenders can use to improve cyber hygiene and drive more effective remediation

Join us for this on-demand webinar to gain insights into what happened in the latest incident that impacted the water industry. We will also share OT cyber security best practices and review the latest technological advances available to help you guard your operations from unacceptable and unimaginable threats.

Is it possible to stop OT threats before they actually happen. Join us for this webinar to learn the latest in proactive threat hunting

In 5 minutes, learn the top threats that Industrial Control Systems face.

Web applications are becoming increasingly complex, with most applications now built using multiple layered components, such as web servers, web frameworks, language engines and JavaScript libraries. The growing number of cyber attacks stemming from component vulnerabilities highlights a limitation of conventional scanning for securing web applications. Join Tenable experts to learn how you can go beyond traditional scanning to better protect your web application estate from component vulnerabilities.

Sean Storer is the Product Marketing Manager for WebApp and Container security at Tenable. He is a security professional with 10 years experience as a consultant and program manager. Throughout his career he has worked with companies and agencies in every sector from the federal government to SaaS startups to help them understand and modernize their security and risk management processes and technology. In his current role, Sean helps security practitioners adopt Tenable’s most innovative products in order to secure every part of the modern attack surface including traditional IT, cloud, containers, web apps and IoT.

According to recent polling, 80% of infosec professionals want an efficient and effective way to prioritize vulnerabilities based on risk. Of those polled, 50% are attempting to risk rate vulnerabilities, but finding the process really hard.

Tenable is resolving the vulnerability prioritization challenge with a new process we call Predictive Prioritization.

Join us at 2pm ET, August 20, 2019 to learn more about the data and computer science behind Predictive Prioritization by attending the webinar: " To Reduce Cyber Exposure, Find and Fix the Vulnerabilities that Matter Most."

Topics covered will include:

* How to overcome the limitations of CVSS scoring for risk rating vulnerabilities

* How you can effectively identify the vulnerabilities that will most likely be exploited in the near term

* Ways to dramatically improve your remediation efforts by focusing on the the highest risk vulns

* Answers to your questions during live Q&A

All IT and infosec professionals responsible for ensuring the efficient and effective delivery of vulnerability management programs are encouraged to attend this webinar.

Save your spot. Register now.

Securing the networks from attackers remains a key challenge in 2019. With billions of people affected by data breaches, governments and businesses are continuing to spend more time and money trying to better protect against cyber attacks.

Join this panel of experts as they discuss the biggest threats to enterprise networks and how to better protect against them:
- Top threats to network security
- Watering hole attacks: Explanation and examples
- Microsegmentation and lateral movement prevention
- How to improve the security of network infrastructure devices
- Real time breach detection: Myth or reality?
- Steps to take to better secure your networks

Speakers:
- Kalani Enos, Founder and CEO, kenos Technologies LLC (moderator)
- Greg DeBrecourt, Cyber Security Manager, Aerovironment
- Gavin Millard, Vice President of Product Marketing, Tenable
- Peter Wood, Partner, Naturally Cyber LLP

CISOs must deal with several stakeholders within the organization. These stakeholders range from BOD members, C-Level management, peer compliance stakeholders (e.g. Legal, Privacy Office), vendors, and the IT organization itself.

This session will focus on critical success factors to dealing with this wide array of stakeholders and success case studies.

Specifically, this session will discuss the politics of getting alignment and buy in with the many stakeholders within the organizations such as:
•Board of Directors and C-Level management
•Natural allies such as compliance, privacy, audit, enterprise risk management
•Potential contentious relationships with line or business unit management
•IT organization strategic and tactical delivery goals and objectives

Speakers include:
•Craig Shumard, Principal, Shumard and Associates, LLC, Emeritus CISO, Cigna
•Tom Doughty, VP & CISO,Prudential
•Larry Brock, CISO emeritus, Dupont
•Bob Hillmer, Director, Enterprise Information Security and Directory Services
•Marcus Ranum, CSO, Tenable Network Security

A Politics of Information Security Webcast.

This webcast will focus on how risk tolerance is decided within an organization and the processes and politics of risks assumption. Topics to be covered include:

- How risk tolerance is decided within an organization
-- Informal to formal risk tolerance model
- How and who can assume risk
- Risk assessment and risk assumption linkages
- Competing Drivers
-- Business unit versus enterprise risk

Presenters include:
- Craig Shumard, Principal, Shumard and Associates, retired CISO, Cigna
- Dennis Brixius, VP of risk management and CSO, McGraw Hill
- Catherine Rees, CISO, Dow Jones & Company
- Marcus J. Ranum, CSO, Tenable Network Security

A Politics of Information Security Webcast
Earlier this year, a panel of Chief Security Officers from some of the nation’s highest profile companies met to talk about how to get and keep the CISO job. The response was tremendous – over 1,000 people have participated in the session. But that talk only scratched the surface – our team of panelists has much more information to share. Join us for Part II of the discussion where we’ll dig into some of the questions that didn’t get answered in the initial discussion, and cover more ground on topics like working with senior management.
You'll learn:
How to Get the CISO Job:
- How to deal with senior management
- Establishing governance frameworks to guide your activities
- Advice on balancing tactical vs. strategic efforts
- Positioning yourself as an enabler, not a blocker
- Staying ahead by meeting all important audit and regulatory requirements
Featured Speakers:
- Craig Shumard, Principal, Shumard and Associates, LLC, retired CISO, Cigna
- Marcus Ranum, CSO, Tenable Network Security
- Todd Bearman, CISO, Towers Watson
- Vas Rajan, CISO, ING Direct
- John Masserini, Chief Security Officer of Miami International Holdings and the Miami International Securities Exchange (MIAX)

A Politics of Information Security Webcast

Over the last decade, the Chief Information Security Officer (CISO) has emerged as the job in IT risk management. But for many, it's a high-risk career move. Average tenures in the role remain mired at just a few years. But success is possible — join our expert panel to learn how you can get, and keep, the CISO job.

You'll learn:

How to Get the CISO Job:
- Who gets to the top of the shortlist
- Whether certifications play a role
- How experience in other parts of the organization can help your bid

And Then, How to Keep It:
- How to deal with senior management
- Establishing governance frameworks to guide your activities
- Advice on balancing tactical vs. strategic efforts
- Positioning yourself as an enabler, not a blocker
- Staying ahead by meeting all important audit and regulatory requirements


Featured Speakers:
- Craig Shumard, Principal, Shumard and Associates, LLC, retired CISO, Cigna
- Marcus Ranum, CSO, Tenable Network Security
- Todd Bearman, CISO, Towers Watson