Name: Making the Transition from Vulnerability to Exposure Management
Start: 2023-08-16T20:53:00Z
End: 2023-08-16T20:53:42.000Z
Location: BrightTALK
Rating: 0

Tenable®, Inc. is the Cyber Exposure company. Over 30,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include more than 50 percent of the Fortune 500, more than 30 percent of the Global 2000 and large government agencies. Learn more at www.tenable.com.

For organizations reliant on operational technologies, one of the important threat detection frameworks is MITRE ATT&CK® for ICS. Based on real actions exhibited by threat actors, MITRE ATT&CK for ICS is a variant of the enterprise and mobile ATT&CK matrices, and is regularly updated to reflect the latest adversary behaviors.

Join Dick Bussiere for this on-demand webinar to learn the techniques attackers use to compromise OT infrastructures. By understanding the techniques, you can proactively bolster your security posture with Tenable.ot. Through discussion and demonstration, the session will explore:

> Using MITRE to think like an attacker and become more proactive
> Ways to incorporate MITRE ATT&CK for ICS into your overall OT security workflows
> How Tenable.ot maps to the ATT&CK techniques and tactics

The MITRE ATT&CK for ICS Framework... And What to do About it

Check out this on-demand webinar for insights into the development of the National Security Telecommunications Advisory Committee (NSTAC) draft report, and a discussion about its recommendations for improving the security of your converged IT/OT systems.

Led by experts who contributed to the NSTAC report, this webinar shares key findings, recommendations and guidance for measures you can take to improve the resilience of your organization's IT/OT networks and systems. Though focused on Federal Civilian Agencies, the report and its findings are relevant for all public and private sector organizations reliant on OT.

The Time for Prioritizing Your IT/OT Cybersecurity is Now

Join OT security veterans Marty Edwards and Howard Holton for a discussion about OT security challenges, changes in OT security responsibility, and approaches to reducing risk in OT.
Cyber security leaders know it is crucial for organizations to protect the entire attack surface, including OT.

For steps you can take to evaluate and mature your OT cybersecurity efforts, join industry experts, Howard Holton, CTO, GigaOm and Marty Edwards, Deputy CTO for OT/IoT, Tenable for a panel webinar, 11am ET, Oct. 31, covering the following topics:

* Why and how cybersecurity leaders must take control of OT security
* What makes OT security so difficult?
* Insights from the 2023 GigaOm Radar for Operational Technology (OT) Security report
* Real world lessons learned helping organizations protect IT-OT attack surfaces

Ops or Security? Who Should Own OT Security And Why?

Join Tenable cloud security expert, Lior Zatlavi, for a 2-hour deep dive into the power of CNAPP and approaches for boosting your capacity to more effectively secure cloud-native and hybrid environments.

By watching this on-demand master class you will gain insight into the multi-dimensional practice of cloud security, covering workload protection, identity and entitlements management, network security, posture management, data security, and much more, including:

>> Identifying and addressing key cloud security challenges
>> Common pitfalls and lessons learned from real-world breaches
>> In-depth demonstrations of the CNAPP and CIEM capabilities of Tenable Cloud Security, and how they apply to your most challenging use cases

Cloud Security Master Class: Secure Your Cloud Environment-No Matter How Complex

Cyber resilience requires effective management of exposures across your entire IT environment to prevent and or minimize the impact of attacks and increase your chances of successful recovery. This includes safeguarding your last line of defense – your backup data.

To learn how you can help ensure your recovery data does not reintroduce vulnerabilities into your production environment, check out this on-demand webinar from Cohesity and Tenable exploring:

* Best practices for detecting and managing cyber exposures within your recovery data

* Real-world success stories of clean recoveries

* How Cohesity CyberScan integrates Tenable Vulnerability Management to enable proactive assessment of your backup data

Secure Your Back-up Data with Proactive Exposure Management

One of the most fundamental ways you can protect your OT operations is by proactively monitoring user behavior. Tenable OT Security has a comprehensive set of policies for detecting user activities: who has entered the OT network and what have they done.

To help you better monitor and manage user activity on your OT networks, join Dominic Storey for this on-demand “In the Lab” session, exploring best practices for using the Tenable OT Security policy architecture.

Through discussion and demonstration, the session explores:

* Using policies to manage user access and actions
* How Tenable OT Security helps you keep the bad guys off of your networks

In the Lab with Tenable OT Security: Finding Bad Guys on Your OT Network

40% of businesses renew cyber insurance policies in calendar Q4. Whether you’re part of that cohort or not, with the right guidance you can be better prepared to navigate the cyber insurance buying process, and ensure your business secures the right policy at the best possible price.

To make that happen, check out this on-demand expert panel webinar covering the following topics:

* Key actions cyber pros can take to support and optimize the insurance buying process
* Latest cyber insurance market trends and their potential impact on your organization’s procurement process
* How Tenable helps optimize your cyber insurance buying process

Securing the Best Cyber Insurance Policy at the Best Price for Your Business

Learn how you can greatly enhance overall security posture by implementing a proactive and preventive approach to identity security.
A quick Google search reveals something you probably already know. The majority of cyber attacks include some identity-related compromise – and no surprise, many target Active Directory.

Fortunately, there are steps you can take to proactively discover and remediate identity risk across your on-prem and cloud environments. For guidance, check out this on-demand webinar led by Nathan Wenzler, Chief Security Strategist, Tenable, exploring:

* How Tenable uses data science and real-time risk prioritization to determine the most vulnerable identities in your environment

* Key steps for quantifying risk and operationalizing preventative security

* Ensuring you have the right data to quantify and communicate cyber risk to make better business decisions

Find & Fix the Riskiest Identities Before Your Adversaries Beat You to It

Discover how Ermetic's unified CNAPP, now part of Tenable Cloud Security, and CIEM solution, will revolutionize your approach to managing risk in cloud environments. By watching you'll you will gain insight into key Tenable Cloud Security capabilities including:

>> Unified CNAPP: Reveal and prioritize security gaps, and enable immediate remediation. From full asset discovery and deep risk analysis to runtime threat detection and compliance, the platform lets you automate complex cloud security operations through meaningful visualization and step-by-step guidance.

>> Powerful CIEM: The most comprehensive solution for managing human and machine identities for cloud infrastructure. It visualizes all identities and entitlements, using automated analysis for comprehensive security.

>> Context-aware risk prioritization: Lets you assess risk holistically across workloads, human and machine identities, vulnerabilities and cloud configurations to reveal security gaps.

>> Simplified remediation: Mitigate faulty configurations, policy violations and excessive privileges. Do this directly with wizards or through optimized, auto-generated policies and IaC snippets integrated into existing developer and security workflows.

What’s Next and Needed for Truly Effective Enterprise Cloud Security

When it comes to protecting your mission-critical operations, one of your overarching goals should be gaining complete visibility of your OT networks. In most cases, this is best accomplished using a combination of passive and active discovery technologies.

The use of active querying is not without controversy, largely due to a lack of understanding of how it works. In this on-demand webinar, Dominic Storey, Principal OT Security Engineer with Tenable, explains how you can use active querying safely and effectively in your OT environment.

Demystifying and Optimizing Active Querying in OT Environments

Check out this on-demand webinar exploring how Tenable Attack Path Analysis and ExposureAI give you the data and insights needed to stay ahead of attackers and proactively protect your enterprise. Through discussion and demonstration, topics covered include:

>> Breaking free from siloed security data and gaining complete visibility to proactively assess exposures, prioritize actions and visualize relationships across your entire attack surface

>> How Tenable uses generative AI to summarize and explain the most complex attack paths, and also provide step-by-step mitigation guidance

>> Leveraging Tenable Research and pre-built policies to detect ransomware threats head-on

Stay Ahead of the Bad Guys with Tenable Attack Path Analysis and ExposureAI

New SEC disclosure rules significantly expand public company disclosure requirements relating to cybersecurity and risk management processes, strategy, governance, and oversight requiring company management and boards of directors to proactively assure preparedness against cybersecurity threats. Are you ready?

For perspective and guidance on the new mandates, join Tenable Chief Legal Officer, Michelle VonderHaar, Chief Security Officer, Bob Huber, and Kevin Flynn, Senior Product Marketing Manager, for this on-demand webinar covering:

* General counsel’s perspective on key issues and areas of concern
* Implications for cyber leaders and their teams, and best practices for reducing cybersecurity risks

Preparing for the New SEC Cybersecurity Disclosures

This Master Class is for security professionals who are either new to OT security, exploring IT/OT convergence OR seeking to refresh their ICS security principles.

Tenable OT Security Master Class, August 2023

Watch this on-demand panel webinar for guidance on how you can better address the evolving cyber threats impacting your factory floor to boost security posture and operational resilience.

Experts Share Ways To Improve Manufacturing Sector IT/OT Security

Attend this webinar to learn how you can reduce identity risk, while boosting preventative security measures and implementation efficiency.

Quantifying and correlating risk and exposure across all your enterprise systems is extremely difficult and time-consuming. At the same time, threat actors are one identity vulnerability away from compromising your environment. Having the ability to proactively safeguard identities across on-prem and cloud is essential for preventing attacks – rather than cleaning up the aftermath. How can you make this happen?

For guidance and answers, join Tenable identity security experts for a webinar exploring how you can discover and prioritize weaknesses within your Active Directory domains, and then reduce your identity exposure with step-by-step remediation guidance.

Detect & Prevent Active Directory Attacks Across On-Prem and Hybrid Environments

Join Tenable cloud security engineers Alex Feigenson and Paul Anderson for an on-demand, online workshop to boost your capacity for securing cloud-native and hybrid environments.

Cloud Master Class: Building a Resilient Cloud Security Program

Join experts from Tenable, Measured Insurance, and PNC Bank for guidance on optimizing the cyber insurance purchase process, improving risk communication, and strengthening your organization’s overall cyber posture.
Securing cybers insurance is no longer guaranteed, and for many businesses, increasingly expensive – plus, the acquisition process can also be very time and labor intensive. It doesn’t have to be this way.

To help you streamline and optimize the process of acquiring cyber insurance, while also enhancing the security posture of your business, check-out this on-demand panel webinar with experts from Tenable, Measured Insurance, and PNC Bank, exploring the following topics:

>> How CISOs can better meet the data demands of insurers without throwing more bodies at the problem

>> An insurers’ perspective on using Tenable to enhance cyber insurance readiness and reduce friction in the application process

>> Helping the General Counsel more effectively manage risk and cost

Panelists:
Michelle VonderHaar, Chief Legal Officer and General Counsel, Tenable
Sam Strohm, Senior Vice President and Director, PNC Global Security Fusion Center
Vince McCarthy, President, Measured Analytics and Insurance
Ray Komar, Vice President of Technical Alliances, Tenable

Securing the Right Cyber Insurance for Your Business is No Joke...

Watch this on-demand webinar to learn how adopting exposure management lets you better understand and protect your entire attack surface, anticipate emerging threats, and effectively communicate cyber risk to key stakeholders.

Making the Transition from Vulnerability to Exposure Management

Vulnerability Management

Risk Based Security

Cyber Defence

Cyber Security

Attack Surface Management

Exposure Management

Active Directory Security

Cyber Asset Attack Surface Management

Risk-Based Prioritization

Benchmarking

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Making the Transition from Vulnerability to Exposure Management

Presented by

About this talk

More from this channel