Name: Navigating the Evolving Supply Chain Threat Landscape
Start: 2023-12-14T17:00:00Z
End: 2023-12-14T17:00:55.000Z
Location: BrightTALK
Rating: 5

A global leader in cybersecurity ratings, SecurityScorecard's mission is to make the world a safer place by transforming the way organizations understand, mitigate, and communicate cybersecurity risk to their boards, employees, and vendors. Here, you'll find content filled with experts chatting through the evolving cybersecurity threat landscape, how to monitor (and remediate) your cybersecurity posture (and that of your vendors), potential regulation around cyber risk mitigation, and more!

Thousands of organizations leverage our patented rating technology for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting. But we don’t stop there. Through a customer-centric, solution-based commitment to our partners, SecurityScorecard is transforming the digital landscape by building a path toward cyber resilience. 

You can monitor your organization's risk with a free account here: https://securityscorecard.com/free-account-trial/

Cybersecurity is increasingly a team sport; you aren’t going to boost your cyber resilience without engaged executives and secure suppliers.

To that end, join SecurityScorecard’s Aleksandr Yampolskiy and the Cyber Rescue Alliance’s Kevin Duffey for this discussion on:
- Benefits of a more collaborative cybersecurity community
- Building on highly predictive cyber risk scores to improve security posture 
- Best practices to engage your executives, employees, and vendor ecosystem to move the dial on managing (and reducing!) cyber supply chain risk 

Save your seat today!

Engage Executives & Support Suppliers to Boost Cyber Resilience

It wouldn’t be a webinar in 2024 if we didn’t talk about AI. 

But we’re going beyond the hype and taking a more practical approach. Join Aleksandr Yampolskiy (CEO and Co-Founder, SecurityScorecard) and Michael Schrage (Visiting fellow, Imperial College Business School; Research fellow, MIT Sloan Initiative on the Digital Economy) for this discussion on how AI-powered:
- Selvesware and recommendation engines will shape the future of self-improvement
- KPIs can continuously learn and improve an organization’s growth
- Data-curation can drive both insights and security in the future

Save your seat today!

Selvesware, Enhanced Metrics, and The Future of Advice

As regulatory mandates and frameworks continue to emerge, cybersecurity leaders must continue to adapt to more than just the latest threat actor TTPs. 

Next up in our “Crafting Your Compliance Blueprint” series: complying with PCI DSS v4.0. 

Implementing the new PCI DSS v4.0 assessment and reporting requirements can be challenging, but are in place to empower cybersecurity leaders to proactively address evolving threats to card data and payment systems while ensuring proper scrutiny on the organization's critical controls, assets, operations, and security posture.

Join Christopher Strand (Global Risk Officer) and Brian Contos (Chief Strategy Officer, Sevco Security) as they discuss:
- How PCI DSS v4.0 assessment themes differ from its predecessor’s (3.2.1) and what to prioritize in the lead up to March 2025 when new requirements become mandatory
- Best practices for analyzing your attack surface, prioritizing the gaps you find, and conducting risk assessments as a process
- Actionable recommendations to help enforce and prove controls within PCI DSS v4.0 assessments to enable better and accelerated collection and communication of compliance and security policy

Save your seat today!

Prepare for PCI DSS v4.0 with Confidence

As notable cyber security breaches – including zero-days – feel like they’re only increasing in frequency, Purple Teaming emerges as a strategic approach that surpasses the traditional Red Teaming paradigm. 

Join SecurityScorecard’s David Mound as he chats through the benefits of Purple Teaming. Learn how to
- Foster a more collaborative environment (with Red and Blue teams working in tandem)
- Fortify the cybersecurity posture of the organization (with a combination of offensive and defensive strategies)
- Facilitate deeper insights into adversary tactics and strengthen incident response capabilities (with more structured, tailored campaigns that ensure ongoing refinement of defense mechanisms)

Save your seat today!

Elevate Your Cyber Defense: The Power of Purple Teaming

When start-ups scale-up, their cybersecurity -- or lack thereof -- is increasingly viewed as the backdoor into the larger organizations they serve.

Join Aleksandr Yampolskiy (CEO and Co-Founder of SecurityScorecard) and Harry Moseley (former CIO at Zoom, KPMG, and more) for a conversation on the:
- evolution of the C-Suite's interest in cybersecurity and data within an organization
- strategies to emulate (and avoid) in scaling up the security architecture of a growing organization
- key things to think about in scaling the security of organizations in an era where third-party breaches are on the rise

Save your seat today!

Cybersecurity In An Era of Scaling Start-Ups & Data Breaches

Saiba como podemos entender os desafios que envolvem a gestão de riscos de terceiros, que acabam por afetar  e impactar a saúde cibernética de uma organização, atuar sobre estes desafios com inteligência e automatização, criando um processo vivo, inteligente e colaborativo com os terceiros.

Com esta sessão aprenda como:
- criar processos inteligentes de gestão de riscos de terceiros;
- usar uma solução de TPRM para dar visibilidade ao compliance;
- a automatização é a regra do sucesso;
- otimizar seus recurso de tempo, de equipes e financeiros.

Os desafios da gestão de riscos de terceiros

Missed us at RSAC? 

Join Dr. Jared Smith for this on-demand version of his live talk on boosting SecOps and TPRM with Signals Intelligence!

In this webinar, we’ll cover:
- the basics of signals intelligence (a quick introduction and history)
- technology application (including a dive into active scanning vs. passive collections)
- tracking adversaries using SIGINT techniques (Volt Typhoon)

Elevating Cyber Defenses: Boost SecOps & TPRM  with Signals Intelligence

Notre dernière analyse révèle que les 100 plus grandes entreprises françaises ont toutes été exposées à une faille de sécurité au cours des douze derniers mois. En cause, leur chaîne d’approvisionnement.

Pour parer à ces menaces, découvrez comment optimiser et automatiser la gestion des risques cyber pour l’ensemble de votre écosystème (fournisseurs, filiales, partenaires, M&A...) :
- Analyse complète de la surface d’attaque de votre supply chain
- Surveillance en continu de vos tiers
- Détection automatique des nouveaux fournisseurs
- Identification et correction des vulnérabilités
- Réponse aux nouvelles réglementations (NIS2, DORA)

Nos experts seront à disposition pour répondre à toutes vos questions en direct à la fin de la session.

Cybersécurité des tiers: Automatiser la gestion des risques

Change. Ascension. It hasn’t exactly been a great year to date for healthcare cybersecurity.

In this 20-minute talk, SecurityScorecard’s Matthew Ancellin highlights the healthcare findings from our report on Global Third-Party Cybersecurity Breaches (an in-depth analysis of the most significant third-party cyber risks and incidents in 2023) released earlier in the year. 

Questions we’ll address:
- What are 3rd party breaches?
- Who are the prime perpetrators of 3rd party breaches? 
- Why does healthcare get more than their fair share of third party breaches?
- What is the nature of B2B relationships involved in supply chain breaches?
- How can the healthcare industry make their supply chains more resilient?

2023 Supply Chain Breach Analysis in Healthcare

現代企業面對來自全球的數位供應商，供應鏈千絲萬縷。
可是未知、不安全、不斷變化的供應鏈攻擊面讓 CISO 夜不能寐。

根據估計，超過 70% 的漏洞都是供應鏈攻擊造成的： MOVEit 和 SolarWinds 就是很好的例子。
有些公司的資安團隊不具備評估和保護供應鏈的工具和專業知識，不足夠應付日新月異的供應鏈
攻擊。又或是 TPRM 團隊使用過時的基於問卷的解決方案，同樣，他們不具備安全專業知識。
現實情況是，大多數公司甚至不知道誰是他們的供應鏈供應商：供應鏈供應商的違規行為總是出
乎意料。我們看到，出現漏洞的公司會向客戶解釋，真正被入侵的其實是供應商。不幸地，他們
的聲譽已經受損了。

供應鏈安全領域需要徹底的模式轉變!

是次線上講座，我們將分享SecurityScorecard MAX解決方案如何:
● 識別並修復可能使您暴露的網路關鍵漏洞
● 解決網路安全人才缺口問題，使您能夠將團隊投入到其他關鍵專案中去
● 做到客戶供應商監控的同時, 讓我們負責供應商管理和溝通，節省時間和金錢
● 利用易於理解的即時報告，讓您的安全領導者能夠交流成功經驗

請立即登記參加

新世代供應鏈網路風險管理

Critical infrastructure services in North America face accelerating threats from both nation-states and other sophisticated threat actors. Governments globally are grappling with how to best balance incentives, support, and direct oversight. Meanwhile, critical infrastructure owners and operators face significant challenges with technology, staff resources, and expertise to better manage cyber resilience.

Join Cheri Caddy (Senior Technical Advisor for Cybersecurity, US Department of Energy), Brendan Peter (VP, Global Government Affairs, SecurityScorecard), and John Breeden II (Moderator & Contributing Editor, FedInsider) as they discuss:

- Trends in cyber threat activities that organizations may see
- Metrics to determine the cyber resilience in different critical infrastructure sectors
- Tools available to address these kinds of threat activities
- Actionable recommendations to build flexibility to respond to evolving threats

Metrics That Matter for Critical Infrastructure Cyber Resilience

Missed us at RSAC? Join SecurityScorecard's Dr. Jared Smith, Distinguished Engineer, Threat Research in this session, where he'll discuss:
- the symbiotic relationship between Threat Intelligence, Security Operations, and Third-Party Risk Management
- outcome-driven metrics for Supply Chain Cyber Risk Management
- real-world examples and strategies to mature your cybersecurity posture and increase collaboration across security teams

Save your seat today!

Mature Your Cyber Defenses: Are You Smarter Than Your Third-Party Risks?

DoubleClick. MongoDB. Gilt Groupe. Business Insider. Zola.com. Nomad Health. And so many more. 

Join Kevin Ryan (the “Godfather” of NYC Tech) and Aleksandr Yampolskiy (CEO & CO-Founder SecurityScorecard) for this webinar discussing the:
- Ideas worth incubating in the NYC tech space in 2024 and beyond
- Broader trends to note in what may be the next innovative start-ups
- Lessons learned in scaling up across various stages of building an enterprise

Save your seat today!

The Founders’ Take: Strategies for Start-Ups & Scaling Up

¡Descubre cómo la automatización puede cambiar la forma en que manejamos los riesgos en empresas con pocos recursos! Aprende cómo la inteligencia artificial puede hacer más simple nuestros procesos y cómo trabajar juntos puede reducir los riesgos.

Aprende a comunicar los riesgos de manera efectiva a tu empresa y descubre cómo nuestro programa de gestión de riesgos de terceros de SSC puede ser implementado fácilmente. ¡No te pierdas esta oportunidad de mejorar la gestión de riesgos en tu empresa! ¡Regístrate ahora para asegurar tu lugar!

Automatizando la gestión de riesgo de terceros

As regulatory mandates and frameworks continue to emerge, cybersecurity leaders must continue to adapt to more than just the latest threat actor TTPs. 

Next up in our “Crafting Your Compliance Blueprint” series: Implementing the updated NIST Cybersecurity Framework. NIST CSF 2.0 empowers cybersecurity leaders to proactively address evolving threats and safeguard their organization's assets, operations, and reputation.

Join Adam Bixler (Principal, Squadra Ventures), Christopher Strand (Global Risk Officer), and Steve Cobb (CISO, SecurityScorecard) as they dissect the latest updates for NIST CSF 2.0, focusing on the five key updates, including core framework revisions, organizational profiles, and tier structures. 

In this webinar, you will:
- Better understand how the NIST CSF 2.0 framework impacts risk management processes across departments to assess, prioritize, and mitigate risks effectively
- Hear from cybersecurity leaders on how they predict these updates will impact policy management, reporting, and boardroom discussions 
- Walk away with actionable recommendations and best practices to implement the NIST CSF 2.0 framework effectively, enable better communication and collaboration, and strengthen your cybersecurity posture

Save your seat today!

Implementing NIST CSF 2.0 Controls with Confidence

98% of organizations have a hacked vendor… are you prepared? 

Third-party breaches are a major threat, but most companies lack a plan. Join this webinar to hear from our team of experts on how you can leverage our Third-Party Cyber Incident Response playbook to:  

- Stop scrambling - Learn how to respond quickly and effectively.
- Communicate clearly - Craft a winning communication plan.
- Become proactive - Discover best practices to prevent future incidents.
- Ask the right questions - Vet your vendors' cybersecurity.
- Learn from the pros - See real-world response strategies in action.

Don't wait for a breach to hit. Register now!

Speakers:

- Mark Dunkerley, Chief Information Security Officer, Coca-Cola Bottlers' Sales & Services
- Dave Hoeller, Sr. Director, Product Marketing, SecurityScorecard
- Larry Slusser, VP, Professional Services & MAX Fellow, SecurityScorecard

A CISO's Guide to Mastering Cyber Incident Response

“Companies are in the cross hairs of hackers of many stripes, and corporate leaders have become de facto national security decision-makers.” ~ Sue Gordon and Eric Rosenbach 

Years later, the words are prescient in an era of increased cyber conflict across companies and countries.

Join Aleksandr Yampolskiy (CEO & CO-Founder SecurityScorecard) and the Honorable Sue Gordon (former Principal Deputy Director for National Intelligence) for this discussion on the:
- Evolution of (cyber) security over the past few years, including the types of threats Russia, China, and others pose
- Best practices for decision-makers and their teams, including communication and execution across different levels of an organization
- Role of public-private partnerships, including which organizations are helping drive security forward

Save your seat today!

Public-Private Partnerships: Rebuilding Trust In An Era of Cyber Conflict

Gestionar la postura de Ciberseguridad de tu cadena de Suministro, es fundamental cuando el 54% de los incidentes se originan en la inadecuada gestión de riesgos en los terceros.

Gestionar la superficie de ataque de nuestra cadena de suministro para que se fortalezcan sus defensas y puedan verificar la Resiliencia, es parte de nuestra propuesta de valor. Contenido:

- Buenas Prácticas de gestión de Riesgos de Terceros
- El papel de la Automatización en un mundo con pocos recursos.
- Reportando Riesgos al Negocio
- Identificando los eslabones, más débiles en nuestra cadena de Suministro.

Duración 60 Minutos.

Ciberseguridad en la cadena de Suministro

It’s no secret that the supply chain threat landscape is constantly evolving; about 98% of firms have had a supply chain relationship that has been breached over the past couple of years.


Join SecurityScorecard’s Alexander Heid and Carrie Mulcahy as they examine the state of the supply chain threat landscape. Learn how you can use context-rich and actionable threat intelligence to:
- dive into some of the most disruptive supply chain cyber attacks
- look at best practices based on data from thousands of customers, and
- reduce vendor threat exposure now and in the future.

Navigating the Evolving Supply Chain Threat Landscape

Cyber Security

Supply Chain

Threat Landscape

Threat Intelligence

Threat Analysis

Threat Assessment

Vendor Resiliency

Cyber Attacks

Cyber Resilience

Cyber Risk Management

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Navigating the Evolving Supply Chain Threat Landscape

Presented by

About this talk

More from this channel