Name: SANS 2024 Top Attacks and Threats Report
Start: 2024-10-30T17:00:00Z
End: 2024-10-30T17:01:29.000Z
Location: BrightTALK
Rating: 4.7

AuditBoard is the leading cloud-based platform transforming audit, risk, compliance, and ESG management. Nearly 50% of the Fortune 500 leverage AuditBoard to move their businesses forward with greater clarity and agility. AuditBoard is top-rated by customers on G2, Capterra, and Gartner Peer Insights, and was recently ranked for the fifth year in a row as one of the fastest-growing technology companies in North America by Deloitte. To learn more, visit: AuditBoard.com.

The convergence of risk velocity and volatility in the 2020s has contributed to a perilous risk exposure gap for many organizations — fueled by a tsunami of new and emerging risks and stagnant to declining resources. 
As technology advances and the risks associated with them rapidly expand, InfoSec and IT compliance teams need to implement a connected risk model to bridge the gap between their capabilities and their organization’s risk exposure. By leveraging emerging technologies like AI, RPA, and continuous monitoring to build state-of-the-art, scalable compliance programs organizations can:
 - Identify key factors contributing to risk exposure gaps
 - Meet their compliance, IT risk, and vendor management needs
 - Build trusted views of their risks and exposures that help align teams and drive action 
 - Improve collaboration, reduce compliance fatigue, and strengthen risk management

As a result, organizations will be able to bridge the risk exposure gap and successfully navigate tomorrow’s cyber risks with greater resilience and agility. This session will explore the evolving cyber risk landscape, organizational collaboration to address issues, the roadblocks to progress, and keys to creating a risk-aware culture. The demonstration will cover:
 - Using a unified risk taxonomy to provide end-to-end visibility and a single language for enterprise risk.
 - How connected control assessment/testing results provide a more complete and accurate view of control effectiveness and residual risk.
 - How to leverage evidence requests across SOX, IT compliance, and internal audit to reduce burden on the business and save time.
 - Using shared issues to improve visibility and provide a better understanding of the full impact of issues across various risk domains.
 - Enabling inventory-level visibility for stakeholders to facilitate a more risk-aware culture.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Confronting Cyber Risk as a Connected Organization

As the fiscal year kicks off, many Internal Audit and SOX professionals find themselves immersed in their work, focusing solely on completing their tasks. However, it's important to remember that excelling in your current role doesn't automatically guarantee a promotion or raise in 2025—even if you've earned it.

Join AuditBoard's Field CAE, Tom O'Reilly, for valuable insights and guidance on actions to take in 2024 to position yourself for a promotion in 2025.
What you'll gain from this webinar:
- Understand the difference between promotable and non-promotable activities.
 - Identify opportunities to up-level and improve your SOX compliance program in 2025.
 - Explore the Internal Audit process, highlighting areas of needed enhancement.
 - Discuss essential soft skills needed for Internal Audit and SOX professionals to advance from practitioner to manager and leader.
 - Learn how to create and gain support for a 2025 promotion plan.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Advancing your Career in Internal Audit and SOX Compliance in 2025

The network perimeter can no longer protect you. Critical data is proliferating outside of organizational visibility and control at an accelerating rate — aided by important technological innovations from cloud transformation and the SaaS revolution to the explosion of emerging technologies like AI. 

Protecting data in this increasingly interconnected world requires new collaborative strategies and a renewed emphasis on key controls such as third-party risk management, data governance, data security, access control, and continuous monitoring. 

Discover the connected risk strategies enabling cyber leaders to partner with internal and external partners to succeed against this important emerging risk. 

Through this webinar, you'll be able to:
 - Identify the trends making supply chain the fastest growing emerging cyber risk category. 
 - Learn how to galvanize your internal and external peers to develop partnerships and shared responsibility for cyber supply chain risks. 
 - Design and implement effective key controls to mitigate cyber supply chain risks. 

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Defending Against Cyber Supply Chain Risk in an Interconnected World

Tune in for an insightful webinar hosted by PRMIA in collaboration with AuditBoard that delves into the critical aspects of enterprise risk management, highlighting key parts of our recent joint white paper, Fragmented to Connected: Achieving Cohesion by Unifying Risk Management. 

The webinar will explore the latest trends, challenges, and best practices in risk management with content supported by data from a comprehensive survey and in-depth discussions with industry practitioners.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Unifying Risk Management - Fragmented to Connected

In today’s digital-first environment, getting compliance and vendor management right is crucial to achieving strategic business objectives. Managing the scale and complexity of modern IT compliance and risk management requires the right tools and strategy.

Join AuditBoard’s industry experts as we share learnings and best practices on how to leverage our IT compliance, third-party, and IT risk management solutions to defend and strengthen your business.

In this live product walkthrough, we’ll cover:
 - How to build and scale a multi-framework IT risk and compliance program for your business.
 - How to understand your threat landscape, quantify risks, and improve cyber resilience.
 - How to streamline vendor evaluation and onboarding as well as visualize and assess your vendor programs to mitigate third-party risks.
 - What’s new with AuditBoard.

*CPEs not offered for this product walkthrough.

AuditBoard Live: IT Compliance and Risk Management

In today's unpredictable world, characterized by a volatile geopolitical landscape, vulnerable markets, and economic uncertainties, organizations face elevated risks across cybersecurity, operational, third-party, and regulatory domains. The traditional GRC programs may no longer suffice in this dynamic risk and compliance environment. To thrive, organizations must enhance their GRC effectiveness and efficiency by leveraging risk insights and intelligence for better decision-making that delivers agility and resilience.

Join GRC 20/20’s Pundit Michael Rasmussen and AuditBoard in a discussion on the latest trends in the GRC market as we prepare for another year filled with both demands and opportunities.

From this webinar:
 - Understand the top risk and regulatory drivers and trends in GRC.
 - Assess your strategies for creating a connected approach to managing interconnected risks.
 - Implement proactive measures to fortify the extended enterprise and mitigate risks.
 - Empower the frontline to build a resilient organization.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Navigate the Dynamic Risk Landscape to Deliver GRC Agility & Resilience

Join us for a lively conversation with IDC Analyst Philip Harris as he discusses how leaders in audit, risk, compliance, and information security functions are tackling the risk and compliance challenges their organizations face. Discover creative ways these leaders are leveraging people, processes, technology, and cross-functional collaboration to navigate these challenges. Philip will share insights, stories, and trends from IDC research, along with findings from numerous customer interviews conducted during the Business Value assessment of AuditBoard’s connected risk platform.

In this webinar, you will learn about:
 - The regulatory environment that’s changing the face of GRC and assurance.
 - The people, process, and technology approach organizations are taking to accelerate transformation and demonstrate measurable strategic impact.
 - What forward-looking GRC and Assurance programs are doing differently to ensure sustainable business growth.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

GRC Insights Unveiled: A Candid Conversation With IDC Analyst Philip Harris

In today’s volatile environment, organizations face unprecedented challenges in managing risks that are growing in complexity and magnitude. The current landscape is fraught with cybersecurity threats, regulatory changes, evolving ESG demands, and digital risks — all of which require a strategic and integrated approach to risk management. 

Recent incidents, such as the AT&T cybersecurity breach and the CrowdStrike IT outage, highlight the escalating risk landscape and underscore the need for robust integrated risk management (IRM). 

Many organizations struggle to keep pace with the rapid emergence of new risks. Traditional risk management frameworks often operate in silos, leading to fragmented oversight and reactive decision-making. This disjointed approach can leave companies vulnerable, undermining their resilience and strategic objectives. The implications for businesses are significant: financial losses, reputational damage, and regulatory penalties are just a few potential outcomes of inadequate risk management.

From this webinar, you will:
 - Learn how to prioritize and manage emerging risks such as cybersecurity, ESG reporting, compliance, and digital risks to safeguard their organizations.
 - Understand the importance of ERM in supporting audit committees and boards, ensuring robust governance frameworks amidst growing uncertainties.
 - Discover best practices for integrating ERM, ORM, TRM, and GRC using IRM technology to create a cohesive and proactive risk management strategy.
 - Gain critical insights from the 2024 CAQ-Deloitte Audit Committee Practices Report and Wheelhouse Advisors’ 2024 IRM Navigator™ Annual Viewpoint Report, offering guidance on navigating the IRM technology market and making informed decisions.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Leading Through Uncertainty: Risk Management Essentials in 2024 and Beyond

Forging and executing strategic plans for internal audit functions has long been a leading practice in the profession. However, The IIA’s new Global Internal Audit Standards will mandate that chief audit executives “plan strategically” to ensure the function is sufficiently resourced and positioned to support the organization’s success. The new requirement will be a paradigm shift for many internal audit functions that are managed tactically one year at a time. 
At the end of this session, attendees will be able to:
- Explain the value of planning and leading strategically.
- Prepare for the requirements mandated by the new standards.
- Implement best practices in forging a strategic plan.
- Align internal audit strategy with the enterprise
- Describe the imperative to execute and refresh the internal audit strategic plan.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

The Clock is Ticking: Does Your Strategic Plan Align With the New IIA Standards?

Risks are accelerating at a startling rate with no signs of slowing down, and new threats are constantly emerging. Based on insights from hundreds of frontline risk professionals, the 2024 AuditBoard Digital Risk Report investigates the emerging trends driving this transformation. Join us as we discuss the takeaways from this year's report. 
- Recognize how to identify emerging risks to your organization, such as AI and other emerging technology risks.
- Identify the types of risks that are growing as a result of the business resilience gap.
- Close the gap between risk functions in order to operate more effectively as a connected risk organization.
- Use best practices to perform effective digital risk management.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Be on the Lookout! Digital Risk Trends and Drivers

In addition to high level business objectives, risks, and audit plans, centralizing and connecting risk and controls across the organization is becoming a top priority for Boards in 2024. This is largely being driven by the influx of new regulatory requirements, including the UK Corporate Governance Code Reform and the EU’s Corporate Sustainability Reporting Directive (CSRD) requiring organizations to develop stronger risk based internal controls. In addition to compliance with these new requirements, the benefits of a strong risk and controls environment include: enhanced fraud detection and prevention, improved investor confidence, and support for better decision-making.

This webinar covers the importance of connecting and centralizing risks and controls across your business to drive compliance with the UK’s Corporate Governance Code Reform and CSRD. 

In this webinar you will learn:
- The pain points of building a strong risk and controls-focused culture in a manual environment.
- Best practices for empowering your control owners to test their controls more efficiently and effectively.
- The benefits of connecting your internal controls and risks across the organization and how AI & Analytics could help.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Driving Regulatory Success And Strengthening Risk Management: The Benefits of Connecting Internal Controls

What if you could transform audit data into a competitive advantage? While you may have access to a wealth of data, you may be leaving valuable insights buried beneath the surface. For many teams, the root cause of ineffective audit analytics programs is due to a lack of strategy. Simply buying tools and hiring a data analyst is rarely enough. But a well-designed audit strategy — one that’s powered by advanced analytics and AI — could yield unprecedented risk coverage and advisory value. In this session, we'll identify the critical elements needed to design an internal audit data strategy that drives impact.

What you will gain from this webinar:
- Understanding of the number one reason data strategies fail.
- Ability to identify the key components of an effective data strategy for Internal Audit departments.
- Understanding of how to measure the impact of your data strategy.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

How to Build Your Analytics and AI Strategy

In today’s digital-first environment, getting compliance and vendor management right is crucial to achieving strategic business objectives. Managing the scale and complexity of modern IT compliance and risk management requires the right tools and strategy.

Join AuditBoard’s industry experts as we share learnings and best practices on how to leverage our IT compliance, third-party, and IT risk management solutions to defend and strengthen your business.

In this product walkthrough, we’ll cover:
- How to build and scale a multi-framework IT risk and compliance program for your business.
- How to understand your threat landscape, quantify risks, and improve cyber resilience.
- How to streamline vendor evaluation and onboarding as well as visualize and assess your vendor programs to mitigate third-party risks.
- What’s new with AuditBoard.



*CPEs not offered for this product walkthrough.

AuditBoard Demo: IT Compliance and Risk Management

Last year, AI broke into the mainstream and business use cases with the advent of generative AI and large language algorithms (LLMs). IDC predicts that AI spending will continue to accelerate to over $301 billion globally by 2026. 

Despite all the buzz, a recent Gartner survey reveals that over half of organizations don’t have an internal policy on generative AI — opening them up to potential ethical, legal, and privacy risks.

This session will discuss the challenges organizations face as a result of AI’s rapid adoption and offer guidance on how to develop policies for responsible use and minimize risks.

From this session, you'll be able to:
 - Describe how enterprises are currently leveraging AI in business contexts.
 - Discuss risks and challenges associated with AI adoption.
 - Develop a comprehensive AI usage policy that enables innovation while mitigating risks.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

AI Goes Mainstream: What Enterprises Need to Know

Since The IIA introduced new global internal audit standards in January 2024, there's been much discussion about these standards, their changes, and internal audit's compliance plans. In this AuditBoard webinar, we'll share perspectives from the front line on how internal audit teams of all sizes are strategizing and taking action to conform to these new standards. You’ll hear how audit leaders are building support from key internal stakeholders and we’ll help you identify areas where continuous improvement or change is needed to adapt in 2025.

From this webinar, you'll be able to:
 - Gather perspectives on internal audit teams' plans to comply with the new IIA standards.
 - Understand the perceived and actual gaps that internal audit teams might have, along with action plans to achieve the desired state of conformance.
 - Identify areas within the IIA’s standards that can inspire improvements to internal audit's methodology.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Front Line Perspectives on Adhering to The IIA's New Global IA Standards

None of us are as ethical as we think we are. 
 
All evidence points to the fact our society is not getting any better ethically. The number and variety of recent scandals proves our culture has changed in the last half-century to one with a greater emphasis on self, ignoring or rationalizing any unethical behavior involved in our decision-making or actions. You might say you are ethical and perhaps that everyone at your organization is as well. It’s time to see if you and the leaders at your organization are truly walking the talk.

From this webinar, you'll be able to: 
 - Identify The Big Me character choice in real-life fraud, ethics, and audit cases.
 - Recognize blind spots that exist and why they lead to being The Ethical Rationalizer.
 - Select personal values and create an ethical mantra to become The Everyday Ethical Auditor.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Say Something, Even If: Becoming the Everyday Ethical Auditor

The SEC's final rule on Climate-Related Disclosures marks a significant step toward corporate transparency, reflecting the demand for more consistent, comparable, and reliable climate risk reporting. As climate-related disclosures become mandatory, comprehensive carbon accounting technology within a robust risk management framework is crucial for compliance, highlighting the importance of audit-ready carbon metrics in broader Environmental, Social, and Governance (ESG) program management.

This webinar delves into the recent developments in ESG regulations, including the SEC Climate Disclosure Rule, California’s Climate Accountability Package (SB-253 and SB-261), the International Sustainability Standards Board (ISSB), and the Corporate Sustainability Reporting Directive (CSRD).

Explore the scope and applicability of these regulations, providing guidance on prioritizing compliance efforts and emphasizing the importance of interconnected internal controls to enhance data quality. This is particularly crucial for companies gearing up for ESG assurance processes. Experts from Persefoni will lead an in-depth discussion on GHG disclosure requirements.
What you'll gain from this webinar: 
 - Navigate the intricate ESG regulatory landscape and align organizations with emerging frameworks, standards, and regulations.
 - Discuss the collaborative approach essential for success, highlighting the synergy required among internal audit, finance, risk, and sustainability teams.
 - Use effective strategies for collecting the right data, identifying key emissions sources, and mastering climate risk data management to ensure reporting compliance.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Navigating ESG Regulations: Strategies and Insights for Climate Risk Reporting

The dust has begun to settle on another successful RSA Conference where SANS continued its 15-year tradition of highlighting some of the year's most concerning emerging threats.

This year’s Top New Attacks & Threats Report and virtual event will take a deeper dive into the emerging threats discussed during the annual SANS keynote at RSA Conference and look at numerous other noteworthy attacker trends. SANS Certified Instructor and event chair, Lee Crognale will provide mitigation strategies and actionable advice on the critical skills, processes, and controls needed to protect enterprises from these advanced attacks.

Topics include:
- The Security Cost of Technical Debt
- Verifying Identity in the Age of AI
- LLMs Hyper-Accelerate the Exploitation Lifecycle
- The Use of AI to Defeat Novel Malware
- The Organizational Risks associated with Generative AI
- Developing Detection Mechanisms for Detecting Deepfakes & Gaining Digital Trust.

SANS 2024 Top Attacks and Threats Report

Cyber Security

Cyber Attacks

Cyber Crime

IT Compliance

third party risks

Risk Management

Risk Framework

Cyber Defense

Vendor Resiliency

Compliance

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

SANS 2024 Top Attacks and Threats Report

Presented by

About this talk

More from this channel