Name: Are You Essential or Important- Making Sense of NIS2
Start: 2023-11-07T16:55:00Z
End: 2023-11-07T16:55:13.000Z
Location: BrightTALK
Rating: 0

CyberArk is partnered with organizations around the globe to offer the most complete and extensible identity security solution, protecting identities and critical assets by enabling zero trust and enforcing least privilege.
This channel is focused on addressing today’s most critical Identity Security challenges in conjunction with CyberArk's Partner Network.

Cyber attackers have become more innovative when targeting privileged accounts. Threat actors commonly target privileged endpoints such as Linux administrator accounts and once attackers gain access, they can traverse the network and take over workstations, servers and critical parts of the infrastructure.  Do you have the necessary tools in place to safeguard your critical assets and ensure the integrity of your cloud-based operations?

Join ESG, Red Hat, and CyberArk for an engaging discussion about endpoint privilege management.  Topics include:

• Identity-related threats and controls against these threats
• Securing Linux-based cloud instances and how to simplify the administration of security policies
• A secure and easy way of connecting to and working on cloud machines with certified solutions from Red Hat and CyberArk

We will explore best practices, real-world use cases, and actionable insights to help you secure your Linux deployments effectively. Join us to learn how the combined strengths of Red Hat and CyberArk can help you fortify your Linux infrastructure against evolving cyber threats, enhance operational efficiency, and achieve regulatory compliance.

Role-specific Least Privilege Protection of Linux Machines

From NIS2 ‘cyber hygiene’ to securing your software supply chain with : what controls gap you are likely to face when NIS2 principles transpose into law. And what steps you can take to address it.

Coming to Terms with Your NIS2 Security Controls Gap. And How to Address It

Three real-life examples of attacks on organizations that fit NIS2’s expanded definition of ‘Critical’.. From the perspective of CyberArk’s Incident Response team.

NIS2: Inside the War Room Responding to 3 Attacks on Critical Infrastructure

Passwords are a problem for individuals and businesses alike. Not only are they constantly forgotten or lost, but password mismanagement can lead to data breaches, reputational damage and millions of dollars lost. New research from Enterprise Strategy Group (ESG) reveals that 55% of companies say adopting passwordless is in their top 3 identity-related goals. 

So, is passwordless the answer? And how do you get started on your passwordless journey?

Join Jack Poller, Senior Analyst, ESG and John Wu, Solutions Strategy Architect, CyberArk in this webinar as they discuss all things passwordless, including:
• ESG research on how workforce passwordless is making a positive impact
• The top 10 challenges organizations face when optimizing authentication
• The FIDO concerns around passwordless
• And more!

Why Now is The Time to Consider Passwordless Authentication

Security-minded companies know that Access Management (AM) is more than employee efficiency. They deploy AM solutions to defend their IT systems against cyberattacks, identity-focused security breaches, and data loss. Despite being a standard component of cybersecurity and a central pillar of the enterprise technology portfolio, Access Management programs vary greatly from company to company. 

Some IT organizations are laying the foundation, while others are well on the way to operational excellence. No matter where your organization is on the Access Management journey, the need to secure and maintain control of identities, as well as defend against modern attacks is always there.  

In this webinar, you’ll learn about the best practices to create more secure and sophisticated Access Management programs that enable businesses, enhance user experience, and provide better protection against breaches. 

• Alignment of authentication policies with NIST guidelines 
• Leveraging User Behavior Analytics for risk-based decisions
• Protecting non-SSO credentials and secrets
• Monitoring and securing activity within web applications 
• Managing access for B2B users and 3rd parties

Register now to secure your spot!

From Foundational to Exceptional: Best Practices for Access Management Programs

With decades of combined experience in cyber security and digital identity, David and Aaron share their perspectives on what Zero Trust means, its challenges, and most importantly, how to implement it effectively.

The session stresses the collaborative nature of security, emphasizing that there is no one-size-fits-all solution for Zero Trust. Instead, a holistic approach is required to address diverse cybersecurity challenges.

If you're looking to enhance your organization's security posture and embark on a Zero Trust journey, this on-demand webinar provides valuable insights and actionable strategies to get you started. Explore the world of Zero Trust and learn how to protect your digital assets effectively.

In line with BrightTalk terms, CyberArk and its Partners may send you news and offers about their products and services when you watch one of our webinars or access our content. You can withdraw your consent at any time and find out more about how we process personal data by consulting our privacy notice. <link to: https://www.cyberark.com/privacy-notice/>

Continuous Zero Trust Transformation

How do you balance risk reduction and engineering velocity? In this panel discussion, leaders in cloud security are joining together to discuss how to ‘move fast and break things’ – securely. 

We plan to cover:
• Increased attack surface: Compatibility accommodations for lift and shift migrations plus maintaining the hundreds of services offered by cloud service providers now require a greater variety of identities and credentials. This has increased complexity and a need for governance.
• Zero Standing Privileges: Managing risk while maintaining velocity (and customer relationships) is complex. Elevating the right access, at the right time, with the right entitlements is required to securely deliver software on time. 
• Entitlements sprawl: Every relationship between components deployed within the cloud is controlled by entitlements mapped to roles. These entitlements and roles vary greatly across cloud providers. Learn best practices to keep up with the constant changes that make up the dynamic nature of the cloud.
• Misconfigurations: These identity blind spots can cause big risk. In fact, the NSA suggests that misconfigurations are the most common and easiest entry point into a cloud for an attacker. Lock down your access then reduce your entitlements.

Speakers:
Charles Chu – GM Cloud Security at CyberArk
Damon McDougald – Global Digital Identity Lead at Accenture
Yuval Shchory - Head of Global Partnerships, Identity and Access Management at AWS

Moderator: 
Ben Cole, TechTarget

Multi-Cloud Identity Security: Combating a Wide Open Gate

As businesses increasingly rely on rapidly deploying innovative apps, running at scale to meet market demand, attackers are relentlessly looking to exploit any weakness. And while security teams can meet the challenge of securing apps at scale, is it possible for security teams to stop asking developers to do things they really don’t want to do?

Security teams need comprehensive tools to secure the credentials and identities used by various applications. To get high levels of developer adoption, security teams must use tools that meet developers where they are—for example, integrating with the existing cloud security tools they already use, such as AWS Secrets Manager.

For security professionals, developers, DevOps, and DevSecOps concerned about securing application secrets, join this panel to discover how CyberArk has partnered with AWS to provide simple and effective secrets management that meets the needs of developers and cybersecurity teams.

Gain practical insights on:

-The challenges security teams face managing and securing application secrets.
-The gap between development teams and security teams requirements for secrets management.
-Approaches for avoiding vault sprawl across projects and achieving security best practices for secrets management.
-How to satisfy developers and security teams using CyberArk Secrets Hub and AWS Secrets Manager simply and effectively.

4 Key Steps to Eliminate Vault Sprawl Across AWS Applications

Government agencies need quick access to a variety of resources. You need confidence it’s them knocking – not an attacker. With CyberArk Workforce Identity, you can empower your workforce while keeping threats out

Workforce Password Management (WPM): Government Use-Cases

A self-hosted solution to securely authenticate, centrally control and audit how applications, DevOps and automation tools use secrets and privileged credentials to access databases, cloud environments and other sensitive government resources.

Secrets Management: Non-Person Entities Have Privilege Too!

The road to least privilege requires balance. Removing local admin rights to protect against threats is essential – but so is ensuring your government agency and its users remain nimble. Watch this short clip and learn how to un-privilege the attacker.

Endpoint Privilege Manager: Un-Privilege the Attacker

With OMB, CISA and DOD providing strategies and directives on improving the nation’s cybersecurity through principles such as Zero Trust, CyberArk and Merlin would like to offer guidance on where agencies cyber priorities should lie in 2023.

In this webinar our team will share:

- How to meet Zero Trust and the Executive Order 14028 objectives and goals
- Enforce least privilege for your privilege users, at the workstation, or server
- How to act as a decision policy point for your operations tool sets
- Secure the software supply chain by protecting applications and non-person entities
- Reduce the attack vector with secure Multi-factor Authentication (MFA) and credential repository

Zero Trust and Identity Security - From Privilege Policy to End User Security

Get Ready for NIS 2 – An Identity Security Perspective

We cut through any ambiguity around NIS2 –  CyberArk and PwC covers what and who’s in scope, why it’s important, tier classifications, key policy areas and how NIS2 will get transposed into law.

Are You Essential or Important- Making Sense of NIS2

NIS2

CyberArk

Policy Compliance

Tier Classifications

Policy Scope

Essential Workers

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Are You Essential or Important- Making Sense of NIS2

Presented by

About this talk

More from this channel