Name: How Well Do You Know Your Attack Surface?
Start: 2023-11-21T14:00:00Z
End: 2023-11-21T14:00:58.000Z
Location: BrightTALK
Rating: 4.6

A thought-provoking webinar programme developed from over three decades of collaborating with our Members across global business, government bodies, legislators and cyber security experts.

With the rise of large language models (LLMs), there's been an explosion of innovation in AI being applied to nearly every domain, from generating beautiful art, to summarizing huge bodies of text, automating sales outreach and customer service, performing scientific research, and more.  

Clint Gibler, Head of Security Research, Semgrap and guest speaker from Wiz, has spent hundreds of hours following how AI is being applied to cybersecurity.

In this webinar, Clint distills the best articles, papers, and talks across cloud security, web security, AppSec, offensive security and more into one talk so you can rapidly understand the lay of the land.  

You'll leave this webinar with a solid understanding of:
- The current landscape
- Open problems
- Where things are headed

Disclaimer: This is a pre-recorded webinar

AI & Cybersecurity: The current state of the art and where we're headed

With 2023 coming to an end and 2024 on the horizon, we find ourselves confronted by a landscape characterised by economic downturn, social disillusionment and escalating regional tensions.

Amidst these turbulent macro-economic, geopolitical, and social fronts - trust will crumble as organisations learn that regulators can introduce new risks, technology does not always achieve desired outcomes, and data itself is more susceptible than ever to manipulation.

To prepare security leaders for the challenge ahead, Chief Executive of the ISF Steve Durbin returns to the virtual stage to deliver our annual Emerging Threats webinar. Secure your place for early insight into the prominent information security threats to expect in 2024 and crucial guidance on how to fortify against them.

ISF Annual Threat Update: Emerging threats for 2024

As the regulatory landscape continues to evolve, organizations are aligning with industry standards and frameworks to support their operational, compliance and audit requirements.

Whilst security leaders are aware of the considerable advantages this strategic adoption brings, budget constraints, shifting priorities and a shortage of cyber security expertise are leaving security teams grappling with organizational and technical roadblocks.

Join us for the opportunity to engage with ISF experts and discover how the ISF Standard of Good Practice (SOGP) is supporting leading global organizations in managing compliance across multiple standards and jurisdictions.

In this session, we explored how to:

- integrate up-to-date best practice into business processes, risk management and information security programmes 
   and policies
- minimise effort and investment when looking to comply with international industry standards and frameworks
- build a strong foundation for resilience based on ISF security controls frameworks.

A Unified Approach to Compliance

Information risk assessments enable organisations to select controls or other treatment options that are commensurate with risk in order to reduce the frequency and impact of information security incidents.

ISF materials, including the SOGP, have been developed to support the risk assessment process of identifying business impacts, assessing key threats and vulnerabilities, in addition to treating information risks. These materials complement organisational approaches to information risk assessment and, when used in conjunction with ISF Risk methodologies such as IRAM2 or QIRA, enables an organisation to keep information risk within acceptable limits.

Join Benoit Heynderickx, Principal Analyst and Hui Shan, Senior Analyst, at the ISF, for our final webinar in the ISF Cyber Security Showcase Week, where they consider all these different materials, and present how they can be combined and used to effectively manage risk.

Manage Risk the ISF Way

Successfully withstanding, and recovering from, a major cyber incident depends on strong leadership, planning and preparation. During a cyber crisis, you face a second enemy - time!
 
In this session Mark Chaplin, ISF Principal, will share top tips and insights from the many Cyber Simulation Exercises he and his team have run for leading global organisations.
 
You will learn about best practices in cyber resilience and hear about the success factors and also pitfalls that challenge organisations at all levels, from technical and operational to executive and board level.

Lessons from the frontline: What we learn from Cyber Simulation Exercises

From relentless adversaries to resilient businesses

Join Peter Watts, Cyber Security Specialist, to learn how to examine the relentlessness of today’s adversaries and the persistence required to stay a step ahead of them. Based on frontline observations from CrowdStrike’s threat intelligence team, Peter will share highlights, notable themes, trends and events across the cyber threat landscape.

Over 200 adversaries are attacking companies across the globe - and they’re moving faster than ever before.

Threat Landscape 2023

Have information security leaders changed business stakeholders' perception of security in recent years, or is security still merely seen as cost, friction and burden?

Security leaders and their teams remain committed to helping business stakeholders understand the value of balancing security, risk and innovation to achieve business goals and maintain competitive advantage. However, many are frustrated at the challenges faced when nurturing relationships with business stakeholders.

In this presentation, we will explore some of the reasons for the slow progress and suggest steps that could be taken to accelerate a more positive change in how security is perceived - unlocking its true value and potential.

Unlocking the Business Value of Security

Achieving behaviour and culture change requires execution of a multi-dimensional strategy that goes beyond just learning and awareness. The ISF has been building human centred security expertise by researching where the major gaps in organisations’ approach lie, and the corresponding solutions. This webinar will demonstrate how ISF methodologies and case studies can demonstrate how an intentional, targeted behaviour change programme can improve business resilience.

In this session, organisations will:
- Identify about common security incidents and data breaches caused by human behaviour.
- Understand what initiatives most effectively transform human behaviour and organisational culture.
- Hear case studies about how to implement behaviour and culture change programmes.

Human-Centred Security - Transforming Security Behaviours

This presentation will explore the present and future of the AI tools that everyone seems to be using right now.

ChatGPT, Bard, Mid-Journey, Llama and many others are all proving popular with businesses and consumers alike, but few are considering the risks they take when they ask them to generate text, create an image, write code or even just search for information.

By exposing the pressures these tools put on organisations, and the dangers people are courting, this talk will act as a guide on how to handle these sites and platforms so they do not wreck existing security safeguards or put people at risk. Properly harnessed, the tools have great potential to augment people and help them do a better job rather than expose them, and their employer, to unknown or unforeseen risks.

Surviving AI and Staying Safe

The recent commercialization of generative AI and large language models like OpenAI’s ChatGPT has sent shockwaves through the cybersecurity community.  From blocking its use to setting up “guardrails” the response has been quick but tentative. There is a lot to be learned.

On the opposite side of that concern is the promise that generative AI brings to cybersecurity processes and solutions.  In particular, generative AI will play a role in third-party security risk management.

In this session, Dov Goldman, VP Risk Strategy at Panorays, will explore what he and his firm see as the benefits AI will bring to the challenge of third-party security risk management and how they plan to utilize the power of this capability.

Beyond Third-Party Security

Some consider that cyber attacks are one of the four most important global concerns that society faces, to include Climate Change, Weapons of Mass Destruction and Disease Pandemics. Whether sensational talk or fact, cyber attacks are both increasing in number and scale.

Join Steve Dobson, Operations Director at the ISF, as he kicks-off the ISF Cyber Security Showcase Week to discuss:
- What are cyber attacks?
- What are the reasons behind the growth of cyber attacks?
- Who is most at risk?
- What are the five key steps everyone can do to be better aware - and better protected - from attack?

Why Cyber Security is for Everyone

In 2022, observed cloud exploitation cases grew by 95%. As organisations migrate more of their operations to the cloud, it is imperative to understand the motivations and strategies of these cloud adversaries to effectively defend against attacks.

CrowdStrike’s 2023 Cloud Risk Report puts a spotlight on the adversaries targeting enterprise cloud environments. Register to learn key trends in adversary activity, real-world stories of attacks on the cloud, the critical oversights leaving organisations vulnerable and guidance for defending against cloud-conscious adversaries. 

You'll learn about how:

- Adversaries are sharpening cloud TTPs
- Identity is a key access point in the cloud
- Human error drives cloud risk

The Rise of the Cloud-Conscious Adversary

Cyber asset discovery - the process of identifying and managing all devices, endpoints, and resources connected to a network, is a market projected to grow from $100M in 2021 to $4bn in 2030. Organisations from across all industries are facing a rise in cyber threats and are setting their sights on asset discovery solutions to avoid losing ground to bad actors.  

This panel session features ISF Analyst, Mark Ward in conversation with:

- Peter West –  Assistant Head, Defensive Cyber Organisation at UK Ministry of Defence, with 20 years’ experience across the MoD as a Crown Servant in Project and Programme Delivery.

- Justin Stouder – Chief Technology Officer at FireMon with over 20 years' experience building world-class software development and operations organisations.

Join this panel discussion to learn about:

- The rising significance and growth of asset discovery
- The pivotal role data quality and speed play in decision making
- The consequences of inadequate discovery and overcoming common challenges

Cyber Asset Discovery: From 'nice-to-have' to mission critical

Having a successful security posture is more easily said than done. It takes a well-designed strategy for a host of multi-faceted parameters to come together to truly bring security to an organization. 

Security Culture, being the ideas, customs, and social behaviours of an organization that influence security, is a powerful tool to help nurture and sustain that which keeps your organization safe.

In this session, we'll be hearing from industry expert Jelle Wieringa about how you can use security culture to your advantage. Based on statistics from academic research, combined with real-world experience, you'll hear everything you need to know to better understand what it can bring you and your organization

In this session you will learn:

- What defines a Security Culture
- How can you measure and better understand your existing security culture
- What are proven and practical ways to grow your security culture?

Security Culture: Making cybersecurity an active part of your organization

The cloud is big business, and threat actors know it. 

Ransomware attacks in the cloud are steadily increasing in both volume and sophistication, and organisations are struggling with a common cloud security challenge. The issue boils down to: how do we secure our cloud-enabled business without throttling innovation? After all, no one went to the cloud to slow down.

Join SentinelOne as they speak plainly about cloud defence in depth. From build time to runtime, they will discuss the complementary roles of agentless (“shift-left”) and agent-based (“shield right”) security layers. Covering both CNAPP (Cloud-Native Application Protection Platforms) and real-time cloud workload protection (CWPP), they will examine a cloud ransomware incident, and share insights to help your organisation accelerate innovation while operating securely.

Shift Left, Shield Right: The role of CWPP in a CNAPP world

Hybrid IT environments are no longer the exception for the modern enterprise; they are now the rule. 

Embracing hybrid clouds allow your organisation to innovate more rapidly and achieve better business outcomes through technology. But you have to achieve these outcomes while minimising risk - that’s the goal. 

Faced with this new reality, join Nachiket Joshi from CrowdStrike in July for a webinar exploring how IT leaders like yourself can manage and secure a continuously changing attack surface.

The Perfect Storm: Preparing today for the future state of cloud security

Even with the recent focus on increasing diversity across the industry, 75% of cyber security roles continue to be held by men. 

Particularly against the backdrop of a staffing and skills shortage, it is evident that there is a need to remove structural and cultural barriers to attract and retain diverse talent.

In this webinar, the ISF has brought together a panel of women, each with a unique and illuminating path into the industry. As a result, they are passionate about sharing their experiences to support and cultivate a community of aspiring female information security professionals. 

During this session, our panel will be discussing:

• how to break through the institutional and cultural barriers in the information security profession
• how to attract and retain a more diverse workforce from a variety of professional backgrounds
• the possible paths into the industry and the required skillsets for individuals at all career levels
• the network and training groups available for women in cyber.

Why Women Should Choose Cyber

With more than 20% of all interactive intrusions associated with the exploitation of public-facing applications, the security of your organization’s data and publicly facing assets is more critical than ever. 
 
During this session Will Barlow, Senior Manager, Professional Services at CrowdStrike will share five tips to reduce the risk of exposure in an increasingly connected digital landscape.

How Well Do You Know Your Attack Surface?

Attack Surface

Attack Surface Management

Cyber Attacks

Cyber Defence

Information Security

Information Risk

Risk Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

How Well Do You Know Your Attack Surface?

Presented by

About this talk

More from this channel