CyberRisk Alliance

Director of Multimedia Content Strategy

Headshot for Bradley Barth from PPWorks


<p>Security assessment questionnaires are no longer the centerpiece of third-party risk management programs. As our third-party ecosystems become more diverse and dynamic, so too should our way of monitoring and collaborating with these critical business partners.<br><br>Join Caitlin Gruenberg, Director of Solution Engineering at CyberGRX as she takes us through a demo of the CyberGRX Exchange, demonstrating:&nbsp;</p>



<ul><li>How the CyberGRX exchange can immediately kick-start your TPCRM Program through the use of &#8216;Predictive Analytics&#8217;&nbsp;</li><li>Identifying vendors that pose the most risk to your vendor ecosystem&#8230;and how we work with you to mitigate those risks</li><li>What security vulnerabilities your third parties face as identified by the MITRE Att&amp;ck Framework and our award-winning Framework Mapper feature</li></ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/Caitlinsized.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Caitlin Gruenberg</p><p class="speaker-job">Director of Solution Engineering</p><p class="speaker-company">CyberGRX</p></div><div class="speaker-description"><p>Caitlin Gruenberg is a third party risk professional with over a decade of privacy and cybersecurity experience in government, retail, and financial industries. Caitlin is a Certified Information Privacy Professional (CIPP) and a Certified Data Privacy Solutions Engineer (CDPSE).</p></div></div></div></div>





<p><strong>Sponsored By:</strong></p>



<figure class="wp-block-image size-large is-resized"><img loading="lazy" decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/cGRXlogo_lightBG-1024x576.png" alt="" class="wp-image-344271" width="410" height="230" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x169/smart/files.cyberriskalliance.com/wp-content/uploads/2022/06/cGRXlogo_lightBG.png 300w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/1024x576/smart/files.cyberriskalliance.com/wp-content/uploads/2022/06/cGRXlogo_lightBG.png 1024w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/768x432/smart/files.cyberriskalliance.com/wp-content/uploads/2022/06/cGRXlogo_lightBG.png 768w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/1536x864/smart/files.cyberriskalliance.com/wp-content/uploads/2022/06/cGRXlogo_lightBG.png 1536w, https://files.cyberriskalliance.com/wp-content/uploads/2022/06/cGRXlogo_lightBG.png 1920w" sizes="(max-width: 410px) 100vw, 410px" /></figure>


Supply chain

Cybercast

Archived: Shining a Light on Third-Party Risk


<p>Look inside most business organizations and you’ll find that their endpoint environments have become increasingly complex, divergent and fragmented – with a proliferation of workstations, mobile and IoT devices, containers, servers, cloud platforms and virtual machines. And remote workforce policies are only accelerating this trend.<br>&nbsp;<br>So imagine the simplicity of using one single platform to consolidate the management of every endpoint across your organization&#8230; One platform that handles all aspects of both IT operations and security processes, including asset discovery and visibility, endpoint policy-setting and patch management, risk and compliance management, data monitoring, and threat hunting.<br>&nbsp;<br>This concept, known as Converged Endpoint Management (XEM), may be the strategy you need to break down silos between your IT management and security teams. Moreover, this approach would eliminate the need to aggregate key security data from multiple, disjointed point solutions.<br>&nbsp;<br>Join Tanium for this live demonstration of Tanium’s XEM platform for a better understanding of this latest innovation in the endpoint management and security space.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/Eric-Arnstresized.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Eric Arnst</p><p class="speaker-job">RVP, Technical Solutions Engineering</p><p class="speaker-company">Tanium</p></div><div class="speaker-description"><p>Eric Arnst is Regional Vice President of Technical Solutions Engineering at Tanium covering the Southeast Region. He has been in various IT roles over his career that extends 20+ years, ranging from Network Engineering to Security Operations. Eric has led extremely successful Security and Vulnerability management programs at several organizations. He has used that knowledge to assist many Tanium customers to achieve better visibility, both as a Technical Account Manager and a Technical Solutions Engineer. Eric now leads the Southeast Technical Solutions Engineering team with a focus on connecting with customers and presenting the Tanium solution.</p></div></div></div></div>




Asset Management

Endpoint/Device Security

Vulnerability Management

Compliance Management

Archived: Part 2: Endless endpoints, one solution: A new strategy for simplifying endpoint management


<p>In 2018, Palo Alto CTO Nir Zuk coined the term XDR – extended detection and response. Since then, the market for this security toolset – designed to unify, correlate and prioritize threat information gathered across all network data points – has taken on a life of its own. Now, organizations are hungry to know if XDR is the right approach for them, and how they stand to benefit.</p>



<p>In this webcast, XDR’s originators, Palo Alto Networks, will provide perspective on the technology’s latest evolution, while dispelling misconceptions about the current state of the XDR market. The session will examine XDR’s capabilities and business value, explain how XDR supplements threat hunting efforts, and reveal how end users can generate a meaningful response after an incident is detected through XDR.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/07/Parker-Crook-headshotresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Parker Crook</p><p class="speaker-job">Technical Marketing Engineering Director</p><p class="speaker-company">Palo Alto Networks</p></div><div class="speaker-description"><p>Parker Crook is a Technical Marketing Engineering Director for Cortex Products at Palo Alto Networks. With over 15 years in security, his career spans various roles across network and endpoint security where he has worked with numerous Fortune 500 companies to architect security solutions and implement threat hunting best practices.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/07/Peter-headshotresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Peter Havens</p><p class="speaker-job">Director of Product Management </p><p class="speaker-company">Palo Alto Networks</p></div><div class="speaker-description"><p>Peter has been developing, architecting and leading product management and marketing for enterprise software and security services for 20 years and currently leading tech evangelism for Cortex cybersecurity products. Prior to Palo Alto Networks, Peter led product management for leading vendors in the Enterprise Mobile Management and Identity and Access Management spaces.</p></div></div></div></div>





<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-large is-resized"><img loading="lazy" decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/07/PANW_Parent_Brand_Primary_Logo_RGB-1-1024x187.png" alt="" class="wp-image-402204" width="359" height="65" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x55/smart/files.cyberriskalliance.com/wp-content/uploads/2022/07/PANW_Parent_Brand_Primary_Logo_RGB-1.png 300w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/1024x187/smart/files.cyberriskalliance.com/wp-content/uploads/2022/07/PANW_Parent_Brand_Primary_Logo_RGB-1.png 1024w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/768x140/smart/files.cyberriskalliance.com/wp-content/uploads/2022/07/PANW_Parent_Brand_Primary_Logo_RGB-1.png 768w, https://files.cyberriskalliance.com/wp-content/uploads/2022/07/PANW_Parent_Brand_Primary_Logo_RGB-1.png 1356w" sizes="(max-width: 359px) 100vw, 359px" /></figure>


Cloud Security

Network Security

Democast

Archived: Palo Alto – The rise of the XDR market: Tracing its growth and debunking its myths


<p>Supply chain-based cyberattacks are one of the biggest threats facing companies in 2022. What decisions would you make if you were the software development company whose third-party library had been targeted, potentially impacting its entire downstream customer supply chain?</p>



<p>In this interactive webinar, you will take on the role of a CISO at a software development company. Your products are used by organizations across the globe, including Fortune 500 companies. In this scenario, a globally respected Security Research Team has informed you that they have found a backdoor in your popular third-party library. This leaves both you and hundreds of thousands of customers who use this app vulnerable to a targeted attack.</p>



<p>The Research Team has given you 5 days grace before they will make the information public in order to help organizations mitigate against future effects. These 5 days will be critical. Can your Crisis Management team navigate its way through this situation, successfully defending its network while also protecting its supply chain, reputation and brand value?</p>



<p>During this session you will use Immersive Labs&#8217; Crisis Simulator, which creates realistic incident response problems inspired by real-life events. As a participant you will have the opportunity to use the platform to help test your own skills, as you listen to the exciting storyline and debate the responses with the team of experts, who are all on hand to guide you through this interactive experience.</p>



<p>Sign up today to see if you have what it takes to quickly and accurately respond to the crisis as it unfolds before your eyes!</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/Bec-McKeown_Immersive-Labs-e1655295877755.jpeg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bec McKeown</p><p class="speaker-job">Director of Human Science, JP MSc CPsychol AFBPsS FHEA</p><p class="speaker-company">Immersive Labs</p></div><div class="speaker-description"><p>Bec has significant academic experience of delivering scientifically-robust research for regulatory, industry and government sectors, including the UK Ministry of Defense. The knowledge and insights gained from this research has given Bec a unique perspective on the ways humans react in times of crisis. She works at both operational and strategic levels, with a focus on situational awareness, decision-making and problem-solving in complex environments.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/Kev-Breen_Immersive-Labs.jpeg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Kev Breen</p><p class="speaker-job">Director of Cyber Threat Research</p><p class="speaker-company">Immersive Labs</p></div><div class="speaker-description"><p>Kev Breen is the director of Cyber Threat Research at Immersive Labs where he researches new and emerging cyber threats. Prior to his civilian life Kev, spent 15 years in the military serving as a Radio Technician and Trunk Comms Specialist before transitioning to a Cyber Security Analyst, specializing in Malware Analysis. After leaving the military, he continued to work in Cyber Security running a CIRT team for a defense contractor before joining Immersive Labs. Outside of his work life, Kev can be found publishing or contributing to Open Source tools and projects or reading a Sci-Fi book.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/Max-Brady-Immersivelabs.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Max Brady</p><p class="speaker-job">Incident Response Management Consultant</p><p class="speaker-company">Immersive Labs</p></div><div class="speaker-description"><p>Max Brady is an Incident Response Management Consultant for Immersive Labs, working to help business leaders to enhance their crisis response capability within their organization. Prior to Immersive Labs, Max worked at The Bank of Montreal as the Crisis Management Lead for the EMEA region. Max has a wealth of experience delivering in crisis management guidance to the enterprise organizations. Prior to his role at Bank of Montreal, he delivered crisis management exercising and training to the Executive Committees of a number of global financial institutions across Europe the Middle East and North America.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/Dan-Potter-Immersive-Labs.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Dan Potter</p><p class="speaker-job">Director, Operational Resilience</p><p class="speaker-company">Immersive Labs</p></div><div class="speaker-description"><p>Dan worked at Citi for over 15 years, gaining significant expertise in the design, delivery and management of resilience related disciplines including crisis management, business continuity and disaster recovery (including cyber), third party resilience and exercising. Dan regularly engaged with regulators, clients and boards and held a number of industry positions including Co-Chair of the Bank of England Sector Exercise Group (SEG) and leading various projects for the Cross Market Operational Resilience Group (CMORG).</p></div></div></div></div>





<p><strong>Sponsored By:</strong></p>



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/06/IL_Primary_Hrz_Lockup_RGB@2x.png" alt="" class="wp-image-354858" width="549" height="183" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x100/smart/files.cyberriskalliance.com/wp-content/uploads/2022/06/IL_Primary_Hrz_Lockup_RGB%402x.png 300w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/768x256/smart/files.cyberriskalliance.com/wp-content/uploads/2022/06/IL_Primary_Hrz_Lockup_RGB%402x.png 768w, https://files.cyberriskalliance.com/wp-content/uploads/2022/06/IL_Primary_Hrz_Lockup_RGB%402x.png 1022w" sizes="(max-width: 549px) 100vw, 549px" /></figure>


Penetration Testing

Archived: Cyber Crisis Simulation: Supply Chain Pain


<p>The API attack surface grows larger and more complex every day – leaving organizations uncertain of how to navigate this unfamiliar and dangerous territory. Such confusion leaves businesses vulnerable to botnet attacks against APIs that could result in a denial-of-service scenario or user account takeover.</p>



<p>The first step toward fixing this problem is for organizations to gain a better understanding of what constitutes API security, why it differs from traditional web application security, and how lack of API visibility remains a key challenge.</p>



<p>This democast, showcasing ThreatX’s API protection platform, will give viewers a much clearer picture of the state of API security, while explaining the benefits of implementing a solution specifically designed to comprehensively tackle the inherent challenges of API security. Attendees will see first-hand how ThreatX’s features – including instant API discovery and profiling; automated threat detection and protection; and logic-aware behavior analysis – can stop complex API attacks in their tracks before the damage is done.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/08/bret-settle-2021.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bret Settle</p><p class="speaker-job">Co-Founder &amp; Chief Strategy Officer</p><p class="speaker-company">ThreatX</p></div><div class="speaker-description"><p>Bret has served in multiple executive roles for Corporate Express/Staples and BMC Software. He has extensive knowledge of the software development and security products industries. Bret has been responsible for enterprise security in multiple roles and has been an innovator throughout his career. His proven track record of building and developing high-performing organizations and dynamic cyber security teams helps ThreatX deliver AppSec services that meet enterprise needs.</p></div></div></div></div>





<p><strong>Sponsored by: </strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="450" height="79" src="https://www.scworld.com/wp-content/uploads/2022/08/threatx-web.jpg" alt="" class="wp-image-419038" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x53/smart/files.cyberriskalliance.com/wp-content/uploads/2022/08/threatx-web.jpg 300w, https://files.cyberriskalliance.com/wp-content/uploads/2022/08/threatx-web.jpg 450w" sizes="(max-width: 450px) 100vw, 450px" /></figure>


Application security

Archived: Comprehensive API security: Lifting the veil of uncertainty around your attack surface


<p>What makes a Privileged Access Management (PAM) solution truly comprehensive, end-to-end, and modernized? Without truly understanding how to harness the power of PAM, organizations could leave themselves open to attacks on assets that typically require special user access.</p>



<p>This webcast will examine the key moving parts of PAM, including vaulting tools and privilege elevation capabilities that allow for policies such as Zero-Standing Privileges and Just-in-Time Access. Moreover, the webcast will explain how today’s PAM strategies must be updated to expand beyond a traditional legacy data center approach, and account for increasingly popular cloud-based services and platforms.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/08/Tony-Gouldingresize.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Tony Goulding</p><p class="speaker-job">Senior Director in Technical Product Marketing</p><p class="speaker-company">Delinea</p></div><div class="speaker-description"><p>Tony is a cyber security evangelist at Delinea helping deliver cloud identity security solutions to secure modern enterprises and stop the leading cause of breaches — privileged access abuse. Internally he’s a Senior Director in Technical Product Marketing, involved with product positioning and messaging, analyst relations, market intelligence, sales enablement, content creation, go-to-market strategy, and thought leadership. He is an IT security expert and author, speaking at industry events internationally. Educated in the United Kingdom with a BSc. Honors degree in Mathematics, Tony has been part of the global IT security community for more than 25 years. His domain expertise lies in identity and access management and privileged access security. He regularly provides commentary, publishing blogs, articles, and bylines on data breaches, insider threats, cyber warfare, incident response, and IT security best practices. He is ITIL and CISSP certified.</p><p></p></div></div></div></div>





<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/08/big-delinea-logo-wordmark-tagline-tm-rgb-purple.png" alt="" class="wp-image-439945" width="270" height="94" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x104/smart/files.cyberriskalliance.com/wp-content/uploads/2022/08/big-delinea-logo-wordmark-tagline-tm-rgb-purple.png 300w, https://files.cyberriskalliance.com/wp-content/uploads/2022/08/big-delinea-logo-wordmark-tagline-tm-rgb-purple.png 450w" sizes="(max-width: 270px) 100vw, 270px" /></figure>


Identity

Archived: Unlocking end-to-end PAM: How to modernize Privileged Access Management for the cloud age


<p>The growing number of cloud-based SaaS applications that employees are using to conduct their day-to-day business is dramatically expanding their companies’ attack surface. And malicious actors are increasingly infiltrating networks by compromising weak credentials used across various cloud applications.</p>



<p>The initial knee-jerk reaction among security professionals might be to forbid or severely restrict employee access to their favorite SaaS applications. However, the downside to this approach is that it could curtail worker productivity, hurt morale and contribute to the IT/security department’s reputation as the “Department of No.”</p>



<p>As an alternative, companies could instead implement a solution designed to provide security pros with visibility into the full spectrum of SaaS solutions in use within an organization – such that they can be properly secured from sophisticated attacks, rather than banned altogether.</p>



<p>This webinar will reveal how Push Security’s user-centric SaaS security solution empowers companies to give their employees the freedom to install and use the cloud-based services of their choosing. Attendees will learn how this solution enables security professionals to:<br>• Discover what SaaS platforms are in use, and which employees are using them<br>• Identify risky third-party integrations<br>• Let Push automatically nudge employees to improve SaaS security through actions such as: removing dormant or unused apps, enrolling in MFA and creating stronger, unique passwords.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/09/adam-bateman-push-tshirtresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Adam Bateman</p><p class="speaker-job">Co-founder/CEO</p><p class="speaker-company">Push Security</p></div><div class="speaker-description"><p>Adam has 16+ years of experience as security practitioner and was one of the longest standing members of MWR InfoSecurity &#8211; a globally recognized research-led consultancy. Adam joined MWR in the offensive security (red) team and later established MWR’s defense practice where he worked with MWR’s vast enterprise customer base and specialized in helping them to defend against sophisticated adversaries and state-sponsored attacks. Adam later founded and grew Countercept, MWR’s MDR (Managed Detection and Response) division along with it’s proprietary EDR solution, which became a driving force for MWR’s acquisition by F-Secure in 2018.</p></div></div></div></div>





<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-large is-resized"><img loading="lazy" decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/09/push-logo-4-1024x321.png" alt="" class="wp-image-448638" width="200" height="63" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x94/smart/files.cyberriskalliance.com/wp-content/uploads/2022/09/push-logo-4.png 300w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/1024x321/smart/files.cyberriskalliance.com/wp-content/uploads/2022/09/push-logo-4.png 1024w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/768x241/smart/files.cyberriskalliance.com/wp-content/uploads/2022/09/push-logo-4.png 768w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/1536x481/smart/files.cyberriskalliance.com/wp-content/uploads/2022/09/push-logo-4.png 1536w, https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/2048x642/smart/files.cyberriskalliance.com/wp-content/uploads/2022/09/push-logo-4.png 2048w" sizes="(max-width: 200px) 100vw, 200px" /></figure>


Archived: Securing – not banning – your employees’ favorite SaaS apps


<p>The traditional security monitoring architecture has been troubling security teams with data silos, performance issues, and delays in retrieving archived data for years. Many analysts who continue to operate with the antiquated SIEM architecture stack also experience a high volume of alerts—with many false positives. Luckily, the internal security team at Snowflake has found a way to solve these problems and more by utilizing the Snowflake Data Cloud as Snowflake’s security data lake. &nbsp;</p>



<p>Join this session to learn:&nbsp;</p>



<ul><li>How the detection lifecycle model helps speed up detection development while improving quality&nbsp;</li><li>How to prioritize your identity and assets and dynamically adjust alert severity based on the prioritization &nbsp;</li><li>How to group alerts based on risk levels &nbsp;</li></ul>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/11/HaiderDostresize.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Haider Dost</p><p class="speaker-job">Manager, Threat Intelligence And Detection</p><p class="speaker-company">Snowflake</p></div><div class="speaker-description"><p>Haider Dost leads Global Threat Intelligence and Detection Engineering at Snowflake. He has over nine years experience in cybersecurity with a focus on Security Operations, Threat Detection, and Threat Intelligence. Prior to joining Snowflake, he led the Threat Detection program at Freddie Mac, and prior to that he led the Global Cybersecurity Operations Center at Capital One . Haider is a George Mason Volgenau School of Engineering alum graduating with a degree focused on Information Security.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/11/Daniel-Wyleczuk-Sternresize.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Daniel Wyleczuk-Stern</p><p class="speaker-job">Senior Security Engineer</p><p class="speaker-company">Snowflake</p></div><div class="speaker-description"><p>Daniel Wyleczuk-Stern is a recent convert to the blue team after spending the majority of his career breaking systems at Praetorian and the US Air Force. At Snowflake, he spends his time improving the threat detection program. When he’s not working, you can find him spending time with his wife and cats, enjoying a nice cup of coffee, or meandering around the internet.</p></div></div></div></div>




Archived: Implementing Identity Access Prioritization and Risk-Based Alerting for High-Fidelity Alerts


<p>Identity authentication is a critical tool in the fight against fraud, especially as malicious attackers steal consumer credentials in an attempt to take over their online accounts. But it’s also important to ensure that having these safeguards in place doesn’t negatively downgrade the customer experience or violate an individual’s privacy. Otherwise you may be trading one problem for another. <br> <br>For example, if your company’s identity solution relies on one or more external, third-party partners, then it potentially may be exposing your customers data to unnecessary risk. <br> <br>In this webcast, Incode will identify the challenges surrounding curbing account takeover fraud, and then explain how its proprietary machine learning, computer vision, anti-fraud and digital onboarding features allow corporate clients to enable features like ID validation, risk assessment, facial recognition and liveness detection services, without forcing consumers to jump through extra hoops or share their sensitive information and attributes with third parties.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/12/LF-INCODE-OFICINAS_resize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Luis Felipe Segura</p><p class="speaker-job">Head of IT, Security, and Compliance</p><p class="speaker-company">Incode</p></div><div class="speaker-description"><p>Luis Felipe (LF) Segura is the Head of IT, Security, and Compliance working to ensure infrastructure and service availability, implement best-in-class security processes and controls, and compliance with security and privacy standards. LF has over 18 years of experience in IT strategy, process improvement, and business development. Prior to Incode, LF worked for one of the largest professional services firms in the world, leading multinational projects and advising clients on risk mitigation strategy and systems integrations and implementations. LF earned his B.S. in Telematics Engineering from the Instituto Tecnológico Autónomo de México (ITAM) and his M.S. in Engineering and Policy Analysis from Delft University of Technology in the Netherlands.</p></div></div></div></div>





<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/12/logo-dark.png" alt="" class="wp-image-465148" width="329" height="82" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x75/smart/files.cyberriskalliance.com/wp-content/uploads/2022/12/logo-dark.png 300w, https://files.cyberriskalliance.com/wp-content/uploads/2022/12/logo-dark.png 502w" sizes="(max-width: 329px) 100vw, 329px" /></figure>


Privacy

Archived: Bolstering customer account security without diminishing privacy


<p>One of the most preventable causes of malicious exploits that result in damaging breaches or malware attacks is the failure to update known software vulnerabilities. Ideally, your organization is vigilant enough to patch these flaws as soon as they are publicly divulged. But if one does slip through the cracks and becomes exploited, you at least want to catch the anomalous activity quickly in order to minimize impact.&nbsp;<br><br>This democast will showcase how the Tanium platform allows end-user organizations to tackle such incidents from both angles – pre- and post-exploitation.&nbsp;<br></p>



<ul><li>On the prevention side, Tanium allows businesses the comprehensive visibility, in real time, to find and remediate vulnerable versions of software on managed endpoints to reduce an organization&#8217;s attack surface.&nbsp;</li><li>On the detection side, Tanium allows users to flag anomalous activity such as suspicious code execution in real time so that IT security teams can quickly investigate the cause of the breach and remediate the entry point used by an attacker. The objective is to prevent attackers from achieving the dwell time necessary to commence lateral movement across the enterprise and gain a stronger foothold into your systems.&nbsp;</li></ul>



<p>Join Tanium for an instructive look at how, with the right tools and approach, businesses can reduce their risk of experiencing a full-fledged exploit emergency by stopping it before it happens, or short-circuiting the intrusion shortly after it occurs.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2023/01/228mattresize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Matt Psencik</p><p class="speaker-job">Director, Endpoint Security Specialist</p><p class="speaker-company">Tanium</p></div><div class="speaker-description"><p>From the dark glow of a dimly-lit SOC to the whine of a mainframe datacenter and everything in between, Matt Psencik has worn a menagerie of security hats throughout his 8-year career. Matt now works with Tanium customers on a daily basis to improve their security programs and maximize the value they get out of the Tanium Platform. With a vast background in many tools he&#8217;s able to weave Tanium into just about any process to allow security teams to automate out the mundane and focus on the real threats they battle against.</p></div></div></div></div>




Archived: Evading exploit emergencies: Tanium’s keys to prevention & detection


<p>Cybersecurity is a pressing issue for public-sector organizations in the US, as they face the challenge of sorting through a vast amount of cyber threat intelligence while operating with limited resources and a shortage of skilled infosec professionals. The consequences of a successful attack can be devastating, highlighting the importance of prioritizing defenses against the top threats. &nbsp;<br>  &nbsp;<br>So how does one make cybercriminal intelligence, detection and response, and network security less overwhelming while at the same time compensating for underwhelming budgets and a shortage of skilled infosec professionals? &nbsp;<br>  &nbsp;<br>Foundationally, municipalities, agencies, schools, law enforcement, and other public-sector entities must understand the adversarial tools, techniques, and practices that pose the most significant risk to their organizations. That way, they can better prioritize their defenses against those top threats. &nbsp;<br>  &nbsp;<br>In this fireside chat with Sophos, attendees will gain insights into &nbsp;</p>



<ul><li>the most prominent cybersecurity challenges facing public-sector organizations today &nbsp;</li><li>the wide-ranging consequences that can develop when an attack is successful &nbsp;</li><li>the most relevant adversarial TTPs and how to navigate an increasingly menacing threat landscape</li></ul>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2022/04/Andrew-Mundell.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Andrew Mundell</p><p class="speaker-job">Enterprise Security Engineer</p><p class="speaker-company">Sophos</p></div><div class="speaker-description"><p>Andrew provides new and existing customers with expert insight into the latest threats and advising on strategy across all areas of the Sophos portfolio, including Next Generation protection techniques against malware attacks, data protection/encryption and network security. Andrew brings a wealth of experience working on international projects with some of Sophos&#8217; largest global customers and is excited to share his experience and industry vision.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2023/02/Julie-Davila-resize.png" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Julie Davila</p><p class="speaker-job">Field CTO Public Sector</p><p class="speaker-company">Sophos</p></div><div class="speaker-description"><p>Julie is currently the Field CTO Public Sector for Sophos and has worked in private and public sectors with a deeply technical background, having worked in disciplines across software, cloud, big data, DevOps, and cybersecurity. Before Sophos, she led her email cybersecurity startup that primarily served large-scale federal customers. In her free time, Julie enjoys spending time with her children, playing competitive ice hockey, and volunteering with veteran and women-focused nonprofits.</p></div></div></div></div>




Threat Management

Critical Infrastructure Security

Archived: The Latest Cybercriminal TTPs: How Public-Sector Defenders Can Stay Ahead


<p>As adoption of software-as-a-service (SaaS) applications skyrockets, cybercriminals understand that the cloud has become a go-to vector for them to illegally access and compromise your data.</p>



<p>Through phishing scams, exploits and abuse of misconfigurations, adversaries can steal, modify, encrypt or wipe your valuable SaaS-based assets – resulting in lost business, reputational damage and legal headaches.</p>



<p>Fortunately, the concept of cyber resilience applies as much to SaaS offerings as it does to on-premise business apps. With a rock-solid data backup and restoration strategy, organizations can quickly recover and resume business as usual after a cyberattack strikes.<br><br>This webinar – part demo, part Q&amp;A discussion –will explain how SaaS data backup solutions such as those offered by Spanning can effectively protect your precious data against internal and external threats, without a painstaking manual recovery process.</p>





<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://www.scworld.com/wp-content/uploads/2023/04/Shyam-Oza-Headshot.jpg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Shyam Oza</p><p class="speaker-job">Director of Product Management</p><p class="speaker-company">Spanning</p></div><div class="speaker-description"><p>As Director of Product Management, Shyam is responsible for understanding the needs of the SaaS and Appliance Backup market and defining the future of the company’s innovative line of products for protecting data in the cloud. Shyam brings 10 years of experience managing, marketing, designing, delivering, and supporting enterprise software products. Over the years he has done everything from teaching video game design to transforming legacy enterprise business models to fully taking advantage of SaaS technology and Agile methodologies. Shyam graduated from the New Jersey Institute of Technology with a B.A. in Information Systems and holds a CSPO® (Certified Product Owner) certification from the Scrum Alliance. Connect at: Twitter: @ShyamOza / www.linkedin.com/in/shyamo/</p></div></div></div></div>





<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="350" height="94" src="https://www.scworld.com/wp-content/uploads/2023/04/Spanning.png" alt="" class="wp-image-485471" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x81/smart/files.cyberriskalliance.com/wp-content/uploads/2023/04/Spanning.png 300w, https://files.cyberriskalliance.com/wp-content/uploads/2023/04/Spanning.png 350w" sizes="(max-width: 350px) 100vw, 350px" /></figure>


Data Security

Archived: SaaS data backups: Automated resilience & recovery in the cloud


<p>We’re hosting an eye-opening webinar aimed to help you take your digital security to the next level — all from the vantage point of security analysts dealing with threat intelligence, threat hunting, research, detection engineering and incident response. &nbsp;</p>



<p>In this session, Real-world Insights from a Sophos Threat Analyst, Sophos will dive into the core of Managed Detection and Response services and their crucial role in safeguarding your digital business, data, and assets.&nbsp;</p>



<p>Here’s what you&#8217;ll learn:&nbsp;</p>



<ul>
<li>MDR Unpacked: Understand why Managed Detection and Response (MDR) should be at the core of your security strategy.&nbsp;</li>



<li>Tech Unveiled: Get a sneak peek into the tools and technologies our experts rely on to deliver superior protection.&nbsp;</li>



<li>Seamless Integration: Learn how Sophos MDR fits into your existing security setup, ensuring comprehensive coverage.&nbsp;</li>



<li>Teamwork for Victory: Discover how our analysts collaborate with your team for around-the-clock protection. &nbsp;</li>
</ul>



<p>Real Action, Real Results: Join us to relive a real-life incident in which Sophos MDR analysts suspected, detected and quickly contained a lateral breach within a firewall provider&#8217;s infrastructure. Saying it doesn&#8217;t get much more exciting than this might be a little much — but we’re analysts, and this is edge-of-your-seat stuff! It’s digital security in action! &nbsp;</p>



<p>Don&#8217;t miss this opportunity to learn more about how you can supercharge your digital security.</p>


Incident Response

Archived: Real-world Insights from a Sophos Threat Analyst: It’s Great You Have a Firewall, But Here’s Why You Shouldn’t Skip Over MDR


<p>The Reckoning is here for Traditional MFA, as it&#8217;s not enough for cyber insurance compliance. Did you know that the most popular methods of MFA (like OTP and push to email / text) are easily hacked and are grounds for higher premiums and non-renewals?&nbsp;<br>Everyone knows that MFA provides better protection against hackers than just SSO and 2FA alone. But even when cyber insurance requires organizations to use MFA, few have done so as it results in poor user experience and increased MFA bombing attacks. &nbsp;&nbsp;<br>Join this thought leadership cybercast to learn how invisible MFA, powered by a risk-based continuous authentication platform, is the superior way to both secure your enterprise and exceed compliance for cyber insurance and ZTA.</p>



<p>Viewers will learn:</p>



<ul>
<li>Why popular MFA methodologies are not allowed by federal agencies and regulated industries like energy and financial services. &nbsp;</li>



<li>Why public companies may face cyber insurance coverage gaps due to a recent SEC ruling.&nbsp;</li>



<li>Customer best practices on how to deploy invisible MFA to attain the highest user adoption rate and maximize insurance coverage.</li>
</ul>



<h2 class="wp-block-heading"><span style="text-decoration: underline">Speakers</span></h2>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/08/DonovanProfilePic.jpeg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Donovan Blaylock</p><p class="speaker-job">Sr. Director of Solutions</p><p class="speaker-company">SecureAuth</p></div><div class="speaker-description"><p>Donovan brings more than 20 years&#8217; experience in the IAM space as a practitioner, product developer, and strategist. Fortune 1000 organizations depend on his leadership to help them choose the right solution for their identity security needs. As Sr. Director of Solutions Engineering, Mr. Blaylock manages the technical sales and engineering team to best demonstrate the innovation and differentiators of SecureAuth&#8217;s passwordless continuous authentication platform. He&#8217;s also a veteran technology speaker who inspires audiences around the globe with the latest thought leadership topics and security trends. Before joining SecureAuth, Donovan was the Chief Technology Evangelist and Healthcare Strategy Lead at SailPoint for seven years. He was also the lead consultant at Trace 3&#8217;s IAM practice.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img decoding="async" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/05/bradley_barth_head_shot-0.jpeg" alt="Speaker" /></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name"><strong>Bradley Barth</strong></p><p class="speaker-job">Director of Community Content</p><p class="speaker-company">CyberRisk Alliance</p></div><div class="speaker-description"><p>As director of community content at CyberRisk Alliance, Bradley Barth develops content for SC Media online conferences and events, as well as video/multimedia projects. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.</p></div></div></div></div>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full is-resized"><img loading="lazy" decoding="async" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/08/secureeauth_blk-04-01-01-9.png" alt="" class="wp-image-623275" width="411" height="69" /></figure>


Governance, Risk and Compliance

Archived: The Reckoning: Why traditional MFA is not enough for cyber insurance compliance


<p>It’s more important than ever for apps to remain secure through their entire development lifecycle – but without impacting dev teams’ ability to innovate with efficiency. Fortunately, these two goals don’t have to contradict each other – and one way to balance these two needs is to approach security from a dev point of view.&nbsp;<br><br>This live demo will demonstrate how Snyk’s cloud native application security platform is designed to work like a developer tool, all while enabling one continuous feedback loop between dev and security personnel.<br>This makes it easy to not only find security issues in your code, open source dependencies, containers, and infrastructure as code, but also fix them quickly. This webcast will demonstrate why millions of developers choose to use Snyk to build securely. You&#8217;ll learn:&nbsp;</p>



<ul>
<li>How developers can secure proprietary code, open source libraries, container images, and infrastructure-as-code deployments&nbsp;</li>



<li>How to utilize automatic pull requests in a matter of seconds&nbsp;</li>



<li>How security teams can manage visibility throughout the software development life cycle</li>
</ul>


Archived: Secure and efficient app development? How Snyk makes both possible


<p>Getting work done has gotten easier: instead of having to deal with on-premises applications, VPNs, and VDI, employees and contractors can now do most of their work using only a browser, whether they are working onsite, 100% remotely or in a hybrid environment.&nbsp;<br>&nbsp;<br>But with the browser effectively becoming the workplace super app, enterprises need to have strong security in place to protect against exploits, other web-based attacks, phishing, and sensitive data loss, and to enforce corporate policies. Existing solutions like Endpoint Detection and Response (EDR) and Secure Web Gateways (SWG) simply can’t protect the browser on either corporate or personal devices.&nbsp;<br>&nbsp;<br>Enterprise browser security is a key component of a Zero Trust strategy and, depending on your environment, can be used instead of or in conjunction with secure server edge (SSE) solutions. &nbsp;<br>&nbsp;<br>This webcast will review enterprise browser security and where it fits as you architect your cybersecurity stack. We&#8217;ll look at: how the technology works, what it covers that other technologies don’t, how it differs from SSE, and recent examples of how these solutions have successfully uncovered threat-actor activity.</p>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="640" height="256" src="https://cms.cyberriskalliance.com/wp-content/uploads/2023/08/Seraphic_Security_Primary_logo-1.png" alt="" class="wp-image-622006" srcset="https://image-optimizer.cyberriskalliance.com/unsafe/fit-in/300x120/smart/files.cyberriskalliance.com/wp-content/uploads/2023/08/Seraphic_Security_Primary_logo-1.png 300w, https://files.cyberriskalliance.com/wp-content/uploads/2023/08/Seraphic_Security_Primary_logo-1.png 640w" sizes="(max-width: 640px) 100vw, 640px" /></figure>


Zero trust

Archived: Zero Trusts Given: Enterprise Browser Security and the Digital Workplace

Bradley Barth

a fingerprint on a circuit board, Cloud backup and cyber security

a fingerprint on a circuit board, Cloud backup and cyber securit

IAM Technologies

Security Staff Acquisition & Development

News

Zero trust for third parties requires improvements in IAM, logging and monitoring

Kimberly_Alkire

HealthFirst revises process for prioritizing disaster recovery resources and restoration 

Texas gov’t CISO: Security KPIs needed for CIOs so they won’t neglect cyber investments

Texas plate

Patch/Configuration Management

Texas CISO: Better security KPIs needed for CIOs

CISOs at InfoSec World 2023 talk AI

AI/ML

AI benefits/risks

CISOs push for baseline AI business rules

0928_rachel_wilson

Threat Intelligence

Russian state hackers attempted to block Ukrainians from opening US bank accounts

Questions to ask your cybersecurity recruiter.

Recruiter-Main

Distributed Workforce

Recruiters not recommending your ideal infosec job candidates? Consider training them.

McDonalds

McDonald’s expedites onboarding and data synch so new hires can start on first day

The Kroger logo is displayed on a storefront.

Companies And Organizations Logos In The United States

Kroger elevates fraud measures after online account creation explodes 

White silhouette of key made from zeros and ones

White key made from zeros and ones, over dark binary code

New milestones prove passkeys are ‘ready for prime time,’ says FIDO Alliance leader

Abstract virtual fingerprint illustration on a modern coworking room background, personal biometric data concept.

Bradley Barth

Bradley Barth

Zero trust for third parties requires improvements in IAM, logging and monitoring

HealthFirst revises process for prioritizing disaster recovery resources and restoration

Texas CISO: Better security KPIs needed for CIOs

CISOs push for baseline AI business rules

Russian state hackers attempted to block Ukrainians from opening US bank accounts

Recruiters not recommending your ideal infosec job candidates? Consider training them.

McDonald’s expedites onboarding and data synch so new hires can start on first day

Kroger elevates fraud measures after online account creation explodes

New milestones prove passkeys are ‘ready for prime time,’ says FIDO Alliance leader

The most overhyped identity trends, according to cybersecurity investors