With the dynamic and rapid pace of technology innovations, cloud migrations, product releases, and development cycles, CISOs and their teams need to find ways to keep pace with malicious adversaries. Security teams have had to make tradeoffs and invest in less-than-ideal self-service scanning solutions to get broad attack surface coverage. These solutions fall short, producing noisy results, false positives, lack of actionable insights.

In this panel, moderated by Rob Cross, Sales Director at Synack, will discuss the use of on-demand security testing and analytics to:

• Get actionable security data in real time at a continuous cadence
• Insight into a comprehensive security strategy that minimizes risk
• Understand how testing results and analytics can provide visibility to inform

« show less

Threat actors are masquerading as business tools and communication platforms to slip past perimeter controls that are programmed to block known threats. In our recently released Annual State of Phishing Report, we discuss how 2020 saw the emergence of new threat actors, the appearance of some old ones, and changes in malware and phishing attacks.

Join Cofense CTO & Co-Founder, Aaron Higbee as he shares the best and worst of 2020, what we learned about phishing, phishing attacks, threat actors, malware, and more.

Attend this Keynote to Learn:

• How attackers are diversifying the malware used in phishing campaigns.
• How over 50% of phish reported to the Cofense PDC by end users are credential phish
• How the COVID-19 pandemic reshaped the phishing landscape.
• Why you can’t stop human attackers without human reporting and analysis

« show less

Legacy software supply chain “exploits”, such as Struts incident at Equifax, prey on publicly disclosed open source vulnerabilities that are left unpatched in the wild. Conversely, next-generation software supply chain “attacks” are far more sinister because bad actors are no longer waiting for public vulnerability disclosures. Instead, they are actively injecting malicious code into open source projects that feed the global supply chain.

Join this session ith Ax Sharma, Senior Security Researcher, Sonatype to:

• Understand software supply chain attacks and their impact on the open-source ecosystem
• Deep dive into prominent real-world examples of dependency confusion, typosquatting and brandjacking malware
• Learn how your organization can proactively protect itself against software supply chain attacks

« show less

As cyber-attacks increase in complexity, frequency, and velocity, in our experience, many enterprise organizations are reliant on outdated IT governance. The organizational paradigm is limited by slow-moving bureaucracy and scarce resources. This situation is often the result of a limited understanding of the risks on the part of decision-makers, like board executives who rely on outdated corporate governance frameworks that were developed in response to accounting scandals – e.g., WorldCom, Enron, Tyco, etc. – not cyber risks.

Enterprise executives continue to propagate a compliance check-box mindset that values minimal security control investment to meet audit standards. The focus on audit/compliance misses the costs that may extend beyond regulatory penalties into financial losses that are not always small enough to recover from without significant repercussions.

In this session, we draw from consulting experience, candid conversations with security leaders, and empirical research to define the current issues plaguing enterprise cyber governance, while offering specific remedies for organizational leaders striving for an effective governance model that moves beyond audit compliance to iterative and measurable risk reduction.

« show less

« show less

Working with outsourced security partners can sometimes feel like paying for an expensive black box. What are they really achieving for you and how do they do it? Understanding how, or perhaps even if, your security partner contributes to the ROI on your overall security plan is paramount and can start to reveal where improvements could be made. In this panel discussion, we will hear from peers working within information security how they tackle this challenge and what a good outsourced security partner looks like to them.

Key takeaway bullets:

• An understanding of how your peers see value in their service providers
• A range of options in methodology for calculating security ROI
• An understanding of what good looks like in an outsourced security partner

« show less

Human-operated attacks, including nation-state espionage and targeted ransomware, are on the rise against large enterprises in every industry. These are highly-targeted strains designed to evade security controls, reach critical assets and either steal information or surgically extort large sums of money. Despite significant investments, It’s still difficult for any given enterprise to be certain that attackers can’t bypass their security tools, move inside the environment and manipulate or encrypt data. During this presentation, we will examine how to stop sophisticated attackers by choking off their ability to move laterally and encrypt thousands of devices at scale.

« show less

The Pandemic of 2020 has resulted in accelerated digital transformation, a dispersed workforce and, alas, a monumental increase in cyber crime. Organizations have traditionally focused on securing mission critical data, networks and infrastructure, but the mindset must now be changed to an all-encompassing enterprise-wide strategy addressing people, process and technology, not only to protect, but to quickly recover from any digital disruption.

« show less

« show less

The chance for IT to lead in SaaS? Big data? Hadoop? Those ships have already left the port. But for enterprise data science, the time is now. CIOs have a unique opportunity to take the reins, but you need to start educating yourself right now.

During this fireside chat, we’ll talk with IT executives who will share first-hand experiences centralizing Data Science — whether those efforts focused on people, process, and/or technology. They’ll talk about their “before” state, where communication was lacking or processes were bottlenecked, and the steps they took to drive consensus around a shared Data Science strategy. We’ll discuss wins they’ve seen so far on the journey, and we’ll conclude with live attendee Q&A.

« show less

The best of breed big data fabrics should deliver actionable insights to the business users with minimal effort, provide end-to-end security to the entire enterprise data platform and provide real-time data integration, while delivering self-service data platform to business users.

While big data initiatives have become necessary for any business to generate actionable insights, big data fabric has become a necessity for any successful big data initiative. The best of breed big data fabrics should deliver actionable insights to the business users with minimal effort, provide end-to-end security to the entire enterprise data platform and provide real-time data integration, while delivering self-service data platform to business users.

Attend this session to learn how big data fabric enabled by data virtualization:

• Provides lightning fast self-service data access to business users
• Centralizes data security, governance and data privacy
• Fulfills the promise of data lakes to provide actionable insights

 

« show less

« show less

« show less

« show less

The charter of the CISO has always been daunting, made even more so by the challenges brought forth by the COVID pandemic. From budget constraints to competing priorities, business and security leaders need to rethink their ideas around business continuity, expansion/contraction, work-from-home/work-from-office, all while managing exposure and risk. The CISO is entrusted to protect and defend the enterprise internally and externally from continuous threats in a constantly changing landscape, typically with limited resources and unrealistic deadlines, all with the expectation that there are zero vulnerabilities. Given such an impossible reality, “hope” can seem to be the best strategy. It is not. Please meet our panel of CISOs that will share their experiences in how they navigate these challenges, and plan for success rather than hope for it! You will learn from them:

• The unique COVID-related cybersecurity challenges presented in 2020;
• The balance between playing “offense vs. defense” in today’s environment;
• The benefits and difficulties with outsourcing vs. insourcing cybersecurity solutions;
• Emerging threats.

« show less

« show less

Organizations of all sizes are facing challenges arising from the shift to remote working and multi-cloud adoption which means that networks are increasingly more distributed and disaggregated than ever before. Simultaneously, we’re seeing the emergence of edge computing as the next tectonic shift in enterprise networking and Zero Trust becoming foundational to cybersecurity.

In this session, we’ll discuss how these macro trends are creating new challenges and opportunities for organizations of all sizes. How should we think about security and risk management service when enterprises own less and less infrastructure, platform and software? This is reflected in the evolution of the digital, virtual and software defined enterprise with its focus on service automation and value creation. We’ll review how integrated platforms are evolving as integrated prevention, detection and response technologies reach maturity, and the focus shifts to cross domain visibility and service automation.

« show less

Organizations are accelerating their cloud migration journeys to improve the customer experience, streamline business processes, and gain a competitive edge. While the business forges forward with plans to leverage and monetize data, the CISO needs to make sure data is being used responsibly in order to protect the business, its customers, and its partners.

In today’s day and age, data breaches and leaks are seemingly inevitable – but they don’t have to be catastrophic. Not if you have a universal data authorization platform that can dynamically tokenize, mask, or obfuscate sensitive and private data for every data request. You’ll be able to secure your data, regardless of where or how it’s accessed, and ensure that both people and applications can only see what they’re supposed to see.

« show less