Name: Elevating Security: The Power of CIS Critical Security Controls
Start: 2023-12-05T19:00:00Z
End: 2023-12-05T19:01:00.000Z
Location: BrightTALK
Rating: 5

We seek to empower compliance officers and everyone who participates with compliance efforts. With our content, we aim to help these professionals guide organizations toward correct actions, a more ethical culture, fairness and greater transparency. 

Headquartered in Bellevue, WA, Hyperproof serves as a system of record for an organization’s compliance data and gives teams involved the tools they need to collaborate with stakeholders in and outside of their organization. With this innovative approach, we’re able to help organizations meet their highest aspirations and demonstrate their commitment to protecting their customers, shareholders, partners and suppliers along with the greater community.

Check it out for yourself at hyperproof.io.

This event was previously recorded live on Hyperproof's LinkedIn and YouTube channels. 

During this Hyperproof live stream series, leaders in information security shed light on crucial topics that shape the modern cybersecurity landscape. This month’s episode features Ali Khan, Field CISO at ReversingLabs, and our host, Kayne McGladrey, Field CISO at Hyperproof. Guided by Kayne and audience questions, Ali will share insights into his current work and past experiences in the field. Register now for your chance to learn from one of today’s top infosec pros. 

Topics covered include:
- Supply Chain Security
- Application security and API security
- Software assurance
- SBOMs

Infosec Pros: Ali Khan, Field CISO at ReversingLabs (Recording)

This event was previously recorded live on Hyperproof's LinkedIn and YouTube channels. 

During this Hyperproof live stream series, leaders in information security shed light on crucial topics that shape the modern cybersecurity landscape. This month’s episode features Nigel Sampson, Global Director of Cybersecurity at IDG, and our host, Kayne McGladrey, Field CISO at Hyperproof. Guided by Kayne and audience questions, Nigel will share insights into his current work and past experiences in the field. Topics covered include:
- How to build strong cybersecurity programs
- Challenges CISOs are currently facing
- How AI is affecting the cybersecurity landscape
- Live audience questions

Infosec Pros: Nigel Sampson, Global Director of Cybersecurity at IDG (Recording)

This event was previously recorded live on Hyperproof's LinkedIn and YouTube channels. 

In Hyperproof’s newest live-streaming series, leaders in information security will shed light on crucial topics that shape the modern cybersecurity landscape.

We’ll kick things off with Joseph Evangelisto, CISO at Tango Analytics, and our host, Kayne McGladrey, Field CISO at Hyperproof. Kayne will interview and chat with Joe as he shares insight from his personal experiences such as:

- The comparison of the days of an SMB CISO and the days of CISOs in larger businesses
- Retaining your InfoSec workforce and vendors
- How you can maintain a proper work-life balance
- Limiting your personal liability if you don’t have D&O insurance

Infosec Pros: CISO Joe Evangelisto (Recording)

Selecting the right cyber insurance program can be an arduous process, and with the rapid rise of increased rates in the last two years, it’s only become more difficult. Compliance professionals around the world are wondering whether to buy or not to buy. That is the question, right?

Additionally, they’re thinking about what type of cyber insurance to get, what it actually covers, and what to do if they decide to get it. We’ll answer all of these questions and in our upcoming webinar.

Join us for this enlightening webinar about the current state of cyber insurance and how to decide on self-insuring certain categories of risks. We’ll discuss:

The current state of cyber insurance (and wow, it’s a doozy)
The business argument for why you should or should not get cyber insurance
How to demonstrate control implementation and efficacy if you do purchase cyber insurance

To Buy or Not to Buy: When Is Cyber Insurance Worth It?

As generative AI tools like ChatGPT continue to evolve and impact various industries, compliance experts are left wondering about the potential security implications for their businesses. Join us for this enlightening webinar as we discuss the dos and don'ts of working with ChatGPT and similar technologies to equip compliance experts with the knowledge to navigate the security challenges presented by generative AI. We’ll also explore how you can ensure the safe and secure implementation of AI technologies within your organization and what security threats to anticipate.

Join speakers Kayne McGladrey, Field CISO at Hyperproof, and Dr. Rebecca Wynn, Global Chief Security Strategist & CISO at Click Solutions group, as they discuss:

Valid use cases for using generative AI tools like ChatGPT in your business practices
How to teach your organization to responsibly use AI tools how they can negatively impact enterprise risk and liability
Security policy considerations that organizations should examine before incorporating ChatGPT or similar AI technologies
Insights into enterprise risk management frameworks that can help manage this new risk

Working with ChatGPT: The Dos and Don’ts for Your Organization’s Security

Achieving and maintaining compliance with many regulatory frameworks over time is no easy task. Many stakeholders and contributors are involved in collecting evidence, testing controls, preparing for audits, and overseeing a business’ compliance and risk posture. The complexity involved in this work can easily overwhelm even the most seasoned professionals.

IT compliance professionals are finding that purpose-built GRC platforms that streamline workflows across departments and individuals are the best way to simplify what has traditionally been repetitive and convoluted processes. Join us for an exploration of today’s best practices to optimize your compliance operations processes to reduce risk and make continuous compliance a reality.

In this session, we’ll address:

- How today’s landscape makes achieving and maintaining compliance more complex.
- Optimizing stakeholder visibility and communication.
- Using GRC tools to scale your business.
- What to consider when evaluating GRC tools.

How to Build Scalable Compliance and Risk Management Programs

2022 brought a number of high-profile data breaches, an increased focus on the ever-expanding cloud landscape, and a renewed consciousness of the cost of compliance – or lack thereof. As a result, organizations will be faced with the challenge of increased regulatory scrutiny and higher penalties for non-compliance in 2023. While this could start to feel like an impossible battle to fight, organizations that lean into the strategy of optimizing their workflows for compliance and risk management will come out on top.

While there’s no avoiding the likely increase in regulatory scrutiny, there is plenty to be done to make sure that your organization is well-prepared for responses to the change. In this webinar, Thomas Wilcox, Sr. Director, Security & Compliance at Hyperproof, and his guest will discuss how stakeholders’ focus on security, risk, and compliance has shifted and how security and compliance professionals can put in place streamlined workflows to operationalize communicating with them. In this session they’ll cover:

- What regulatory obligations are expected to change or evolve
- The costs of not optimizing compliance and risk workflows
- What practices will best prepare teams of any size to respond to regulatory changes and communicate with stakeholders

Ready for More Regulatory Scrutiny? Start Thinking About Compliance Workflows

Maintaining cybersecurity compliance and building reliable risk management practices isn’t a simple to-do item you check off anymore. The livelihood (and ultimately the growth) of your business depends on resilient security and compliance programs. Add in changing regulatory requirements, and the challenge becomes exponentially more complex. 

Join Hyperproof and (ISC)2 on April 11, 2023  at 1:00 p.m. Eastern/10:00 a.m. Pacific to hear more about: 
• The value of connecting compliance and risk 
• Optimizing stakeholder visibility and communication 
• Using GRC tools to scale your business
• Long-term impacts of streamlining compliance, security, and risk management workflows

Level Up Your Cybersecurity Scalability

Cybersecurity breaches have been a hot topic lately, with several high-profile cases making national news. One lesson carries across these stories: the importance of effective internal assessments, as they are critical tools to find weaknesses in your security program and assuring that those weaknesses are fixed. 

But how do you prepare for a sharp increase in investigations with adversarial discovery in 2023? Join our experts in security compliance as they discuss:

- The current state of risk, and what exactly happened at Uber, Drizly, and Twitter
- Why so many security breaches have hit the news recently
- How to prepare for the inevitable increase of internal assessments as a result of these breaches
- How to operationalize your risk management workflows to make these assessments as easy as possible

Cybersecurity Breaches: How Internal Assessments Can Help You Avoid One

Are you wondering about the ever-changing landscape of IT compliance and risk management? Are you looking to level-up your compliance management operations? We’re here to help.

Hyperproof conducts an annual survey to uncover the top challenges IT compliance professionals face and what hot topics they’re focused on in the coming year. We’ve asked over 1,000 survey respondents about their pain points, IT risk and compliance budgets, staffing, risk management best practices, and much more to provide an in-depth view of the market’s current state and what to prepare for this year.

Sign up for this webinar to get an overview of the reports findings and learn how your industry peers are managing IT risk and compliance programs within their organizations. 

We’ll cover:

The top five findings from the survey
How your peers are planning to handle compliance, audit management, and risk management in the midst of a volatile economy
What companies are doing differently in response to recent and highly publicized security breaches to avoid security lapses and compliance violations
Leading practices for ensuring security, compliance, and risk management today

Register today for these invaluable market insights. All registrants will also receive a copy of the 2023 IT Compliance Benchmark Report, which will be released February 23, the same day as the webinar.

2023 IT Compliance and Risk Benchmark Report Findings: The Top 5 Game-Changers

Are you using spreadsheets to manage your IT compliance or risk programs? You might not know it yet, but your spreadsheets are holding you back. 

From clunky and disorganized workflows to manual evidence collection and control monitoring, you’re spending hours of time on menial tasks instead of strategic initiatives. 

The solution is clear: it’s time for a modern GRC tool. But how does one best prepare for the move? What can be expected in the transition? How long will it take? 

While each IT and compliance professional's transition out of spreadsheets can vary, those who have gone through it can share their experiences — and why it was worth it.

Join experts in the security compliance industry as they discuss:
- 3 important things to understand about moving from spreadsheets to a GRC tool to manage compliance and risk
- How to know when you should consider upgrading to a GRC tool
- How you can best prepare for a smooth transition with your team
- Unexpected blockers to look out for while transitioning

Spreadsheets and Modern GRC Tools: 3 Things to Know

CISOs and other security practitioners have to communicate the work they are doing and the state of the business’ overall security and risk postures to various stakeholders throughout the organization, including senior executives. Having these conversations is often a challenge. What data is most important to highlight? How do you effectively communicate your risk posture to an audience that might be unfamiliar with the basics? 

Join our experts for an enlightening discussion on how to make risk management conversations more valuable in your organizations by understanding their audience and drilling down to the information that matters most to them.

Originally aired during the ISACA Virtual Summit 2022: Pursuing Digital Trust on December 7, 2022.

We Need to Talk: How to Effectively Communicate Risk to Leadership

What do answering security questionnaires and preparing for IT compliance assessments (i.e. SOC 2 Type 2 assessment) have in common? 

It turns out, a whole lot. Responding to security questionnaires and Document Request Lists for audits are things you absolutely have to do to land customers. Both processes are data intensive, repetitive and require getting accurate answers from domain subject experts across your company. Further, both processes tend to grow in volume and become exponentially more painful to manage as your company expands its footprint.  

What if you can respond to a question from a security questionnaire or a request from an auditor in minutes instead of hours or days? What if you didn’t have to bother domain subject matter experts or search through corporate file systems for answers anymore? What if you knew the status of each item at all times? 

On this webinar, join Loopio and Hyperproof to see how you can scale the security questionnaire response process and your audit preparation process as your company grows – without having to hire more staff.

Scale Your Security Questionnaire Response and Audit Preparedness Processes

The Securities and Exchange Commission has proposed that public companies make extensive new disclosures about their cybersecurity risks. Regardless of whether or when the SEC might adopt a final rule, the agency is asking important questions about cyber risk management that any organization should ponder. Join us in this webinar to discuss the issues that the SEC wants companies to confront. We’ll explore questions such as:

- What the SEC is proposing, and which companies would be covered;
- How corporate boards and the C-suite should approach cybersecurity at the strategic level;
- How CISOs and compliance officers can better identify ‘material cyber events’ that should be reported to stakeholders.

Parsing the SEC’s Proposals on Cybersecurity

Did you know that cyber insurance policies do not automatically cover ransomware claims? Does your policy contain a clause that requires certain training of employees or compliance issues that could VOID YOUR COVERAGE if not complied with? An increasing number of organizations have gotten a notice of non-renewal in 2022 even though they’d qualified for coverage in previous years.

The conditions and requirements around how to qualify for cyber insurance coverage, what it covers and how it’s administered are all changing quickly, creating a confusing situation that could become costly for organizations that aren’t up to speed on the latest trends and rules. 

Join Chris Ballard, President of the Ballard Agency, for a 60-minute live webinar addressing the complexity and nuances around cyber insurance and common questions from security leaders.

How to Choose and Qualify for the Right Cyber Insurance

ISO/IEC 27002:2022 (ISO 27002) has finally arrived after a long waiting period (it was initially announced several years ago). Wondering what the main changes were and what your organization needs to do to transition? In this webinar, Danny Manimbo – Principal / ISO Practice Director at Schellman, will help you understand what to expect and what you’ll need to be prepared for. In this webinar, we will discuss: 
What’s new with ISO 27002 
What will stay the same 
The reasoning behind the update to the standard 
Timing for when companies will need to get certified once ISO 27001:2022 is published

Reserve your seat today.

Understand What the New ISO 27002 and Future ISO 27001 Updates Mean For You

Continuous Controls Monitoring (CCM) is the application of technology to allow automated testing and monitoring of controls designed to mitigate a wide range of risks. CCM can help organizations maintain a solid cyber defense posture, improve the efficiency of their compliance program, ensure business continuity and reduce multiple types of risks.

For compliance and security assurance professionals, CCM not only helps to reduce the time they have to spend on manual controls testing, it also gives them real-time visibility into control performance. As such, it becomes much easier for compliance professionals to hold the employees operating key systems accountable for managing the associated risks and to foster a culture of security throughout an organization.

Watch this webinar to learn:
- what CCM is
- how you can deploy CCM to improve the operational efficiency and effectiveness of your risk and compliance management program
- which controls are good candidates for automation
- how you can start to set up automated controls testing and monitoring within your organization

Making Continuous Controls Monitoring Work For Everyone

CIS Critical Security controls are a prescriptive, prioritized, and simplified set of best practices that can strengthen your cybersecurity posture. The CIS Controls include foundational security measures that you can use to achieve essential hygiene and protect yourself against a cyber attack. Are you curious whether CIS Critical Security Controls is the right choice for your organization? Or are you currently using CIS Critical Security Controls and wondering how to maximize your experience? Join Charity Otwell, Director at Critical Security Controls - CIS, and Kayne McGladrey, Field CISO at Hyperproof, to discuss areas of focus for CIS controls and how they can best apply to organizational security. 

Participants will:
- Learn the basic foundation of CIS Controls
- Understand how to assess applicability for their organization
- Learn how to adopt best practices around CIS Controls
- Learn the upcoming changes that will be made to the CIS Controls

Elevating Security: The Power of CIS Critical Security Controls

critical security controls

Cyber Security

compliance controls

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Elevating Security: The Power of CIS Critical Security Controls

Presented by

About this talk

More from this channel