Name: How to ACE OCC Audits: A Global Bank's Success Story
Start: 2021-09-09T15:30:00Z
End: 2021-09-09T15:30:59.000Z
Location: BrightTALK
Rating: 5

DTEX Systems helps hundreds of organizations worldwide better understand their workforce, protect their data and make human-centric operational investments. Its Workforce Cyber Intelligence platform brings together UEBA, endpoint DLP, digital forensics, user activity monitoring and insider threat management in one scalable, cloud-native platform. Through its patented and privacy-compliant meta-data collection and analytics engine, the DTEX platform surfaces abnormal behavioral “indicators of intent” to mitigate risk of data and IP loss and make smarter business decisions quickly. 

The content of this channel is geared towards security teams and their leaders who are looking for the latest research and case studies that will help them tackle today's greatest security challenges.

No one wins alone. Isn’t that how the saying goes? The same is true for mitigating insider-born risks and thwarting malicious internal actors. Unfortunately, investments in anti-phishing technologies, security awareness training, and UEBA tools have done little to stem the tide of data loss, internal fraud, and privileged user compromise. It’s time to bring insider risk and intent intelligence into the fold for real. 
 
Join us to learn:
•      Where Insider Risk fits in your cyber security architecture
•      What technologies are super-charged by Insider Risk technologies
• How to assess Insider Risk platforms: features & capabilities
• The common mistakes SOC teams make when adopting Insider Risk tools
 
The seminar will conclude with a demonstration of DTEX InTERCEPT integrations with Splunk, CrowdStrike, Microsoft, and MITRE to showcase insider risk intelligence as a value multiplier for security operations and risk management.

Insider Risk Ecosystem—Completing the Puzzle

Here’s what we’ve learned in the last 20 months as the Remote Age of work has taken a firm grip on each and every one of our organizations: Humans are the New Firewall. This forced reality has also made it crystal clear that past and present technologies designed to protect humans and secure data are not working as intended or force multipliers for the other. It’s time for a new approach, one that leverages what we’ve learned and what works to empower humans as shepherds of enterprise security, not suspects.
 
Join Rajan Koo, Chief Customer Officer with DTEX Systems, as he explores the realities of the Remote Work Age, including the: 
•      Dichotomies of Innovation and Risk
•      Balance of enterprise expectations, employee empowerment, and data security
• Strengths and weaknesses of DLP, Insider Threat, UAM and UEBA technologies
• Opportunity to protect personal privacy
• Best practices available to IT, cyber, risk, compliance, and fraud teams to embrace the Human Firewall

Embracing the Human Firewall—The Convergence of UEBA, DLP, and UAM

As the Work-From-Anywhere environment continues to evolve, it has given rise to a new persona: the Super Malicious Insider. One with superior technical skills, an in-depth knowledge of common insider threat detection techniques, and the opportunity to cause serious damage to your organization. 

How do these individuals differ from other malicious insiders, or employees just trying to do their jobs? In our latest threat report, written by the DTEX i3 research team, “2022 Insider Risk Intelligence & Investigations Report: Psycho-Social Behaviors, Remote Work & the Rise of The Super Malicious Insider” we discuss the nuances between an insider risk and an insider threat, why current technology falls short of providing useful data, and how remote work puts organizations at higher risk than ever before. 

Register now for our upcoming webinar, where you’ll learn: 
• Insider Risk vs. Insider Threat
• How to spot a Super Malicious Insider based on behavioral data and context
• Real-world examples discovered through research by the DTEX i3 team
• Steps to secure your organization in 2022 and beyond

A New Threat Emerges—The Super Malicious Insider

The reality facing today’s security and risk professionals is discouraging – workforce privacy and protection from cyber risk continue to opposing forces for many organizations. The pursuit of one has and continues to negatively affect achievement of the other.  Join Larry Ponemon, Research Director and President with the Ponemon Institute and Chief Customer Officer, Rajan Koo of DTEX, as they review the findings of the first ever State of Workforce Privacy and Risk Report.   They will dig deep into the survey data of 1,249 IT and IT security practitioners across North America, Western Europe and Australia/New Zealand to reveal: • How your peers are managing this pursuit? • What’s working and what’s not? • How these seemingly converse goals can be demagnetized? • And the outcomes and value of a complementary privacy and risk architecture.  Don’t miss this inaugural report presentation and the opportunity for your organization to achieve a new levels of employee trust and safety, organizational security, and a culture built on partnership and the transparency required to compete and win in today’s fast-paced, hybrid competitive landscape.

The 2021 State of Workforce Privacy & Risk Report with the Ponemon Institute

The reality has set in. First-generation Endpoint DLP solutions focused on data-centric rules, policies and ‘time-of-exfiltration’ triggers have failed to meet expectations. Blocking is hardly ever used because it completely disrupts user productivity and workflows. Reporting is messy and incomplete, support for MacOS is marginal, and off-network protection is hit or miss.
 
According to Gartner, ‘People-centric’ DLP is the future of data loss prevention and user behavior risk-scoring is a must have capability. 

Join Andy London, Customer Solutions Architect at DTEX Systems and DLP Expert, to learn how Behavioral DLP is meeting the specifications laid out by Gartner and to review the seven capabilities you need in your next DLP RFP.

Behavioral DLP ~ The Knockout Punch to Trigger-based Endpoint DLP and UEBA?

There is strength in numbers. Insider Risks, Remote Worker Protection, Compromised Credentials are risks facing every practitioner, cyber leader, organization, and industry. The more we can learn from each other, the stronger and more secure we will be.

Listen as your peers from leading financial services, pharmaceutical, retail and utility enterprises discuss their experience designing, implementing, and managing an insider risk program including the politics, the relationships, the coordination, the processes and yes, the technology.

Moderator: Mohan Koo, Co-Founder & CTO, Dtex 
Panelists: Scott Rossi, Head of IT Security Engineering, Gilead Sciences Jason Koler, Sr. Manager, Cyber Security Incident Response Team, Eaton Corporation Jack Sinclair, Intelligence Capability Lead, NBN Australia

Defending Critical Infrastructure & Operations from Insider Risks

Next-Gen Anti-Virus technology has greatly improved every organizations ability to detect, identify and stop malware from infecting their endpoints, servers and networks.  The efficacy over legacy solutions is undebatable.  So why are we continuing to hear about continued data breaches?  

 It’s simple really… humans.  Users remain the elusive ‘missing link’ who’s behavior has the most impact on an organizations risk posture.  

Join DTEX Chief Customer Success Officer Rajan Koo and DTEX customer, Stephen Seljan, Security Operations Manager at Equinix, to learn how they are super-charging their NGAV tool with behavioral DLP and human activity forensics.  The two will discuss and detail: 

- Why and how Equinix utilizes EDR and NGAV; 
- What gaps are filled by DTEX InTERCEPT including behavioral DLP and human cyber forensics;
- How Equinix is moving ‘Left of Boom’ with an integrated NGAV/DLP/Insider Threat approach that is delivering a 200% reduction in time to remediation.

How Equinix is Supercharging NGAV with Behavioral DLP & User Intelligence

Employees are NOT the weakest link ~ their activity is simply invisible to most SOC teams.  Why?  Because firewalls, windows log files, IOCs from EDRs do not capture the meta-data that tells the story of – and verifies - how, when, why and where humans drive interactions with endpoints, servers, data and applications. 

Join James Young, Security Strategist with Splunk, and Rajan Koo, DTEX Chief Customer Success Officer, as they explore Zero-Trust, the Next-Gen SOC, and Internal Threat Intelligence.  They’ll examine and detail:
•	Zero-Trust & SOC Transformation
•	The 12 elements of human cyber telemetry;
•	Indicators of Intent vs. IOCs and IOAs;
•	SOC enrichment use cases such as anomaly detection, peer group profiling automation, user logic correlation and behavioral risk scoring. 

Don’t miss this opportunity to learn how you can super-charge your SOC with internal threat intelligence.

Optimizing the SOC with Zero Trust & Insider Threat Intelligence

The reality facing today’s security and risk professionals is discouraging – workforce privacy and protection from cyber risk continue to opposing forces for many organizations.  The pursuit of one has and continues to negatively affect achievement of the other.

Join Larry Ponemon, Research Director and President with the Ponemon Institute and Chief Customer Officer, Rajan Koo of DTEX, as they review the findings of the first ever State of Workforce Privacy and Risk Report.   They will dig deep into the survey data of 1,249 IT and IT security practitioners across North America, Western Europe and Australia/New Zealand to reveal:
•	How your peers are managing this pursuit?
•	What’s working and what’s not?
•	How these seemingly converse goals can be demagnetized?
•	And the outcomes and value of a complementary privacy and risk architecture.

Don’t miss this inaugural report presentation and the opportunity for your organization to achieve a new levels of employee trust and safety, organizational security, and a culture built on partnership and the transparency required to compete and win in today’s fast-paced, hybrid competitive landscape.

Over the last 12 months, four of the top 10 global banks and others have been fined by the Office of the Comptroller of the Currency (OCC) for violations surrounding organizational risk management practices. These fines have varied in amounts ranging from a half of a million dollars to $400 million.  Other financial institutions can learn from the mistakes of their peers so that they do not repeat them. 

Join the Director, Security and Risk Operations of a Large Multi-National Bank and Rajan Koo, Chief Customer Success Officer with DTEX as they discuss and review:
•	The attacks and vulnerabilities that led to these OCC actions;
•	An OCC Audit Checklist that maps OCC requirements regarding internal risks against common cyber security tools and solutions:
•	How financial institutions can identify anomalous behaviors and bad actors earlier on in the attack supply chain;

Don’t miss this opportunity to learn how you can evaluate your internal risk posture and insulate your organization from OCC fines.

How to ACE OCC Audits: A Global Bank's Success Story

Cyber Attacks

Cyber Crime

Cyber Security

Financial Services

Fintech

Insider Threat

IT Security

SecOps

Security Breach

Threat Detection

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How to ACE OCC Audits: A Global Bank's Success Story

Presented by

About this talk

More from this channel