Name: 4 Key Steps to Eliminate Vault Sprawl Across AWS Applications
Start: 2023-10-11T16:26:00Z
End: 2023-10-11T16:26:31.000Z
Location: BrightTALK
Rating: 0

CyberArk is partnered with organizations around the globe to offer the most complete and extensible identity security solution, protecting identities and critical assets by enabling zero trust and enforcing least privilege.
This channel is focused on addressing today’s most critical Identity Security challenges in conjunction with CyberArk's Partner Network.

In today’s rapidly evolving digital landscape, especially in the AI era, CyberArk and Red Hat play crucial roles in enabling secure and agile transformations for enterprises. 

Incidents like the SolarWinds software supply chain breach highlight the significant risks posed by unprotected developer pipelines and containerized environments. Containerized and automated environments are becoming primary targets for attackers, as they often rely on powerful credentials to run applications. Securing the flow of secrets across various infrastructure points—from developers to containers to cloud access—is essential. Whether automated or manually entered, secrets have varying requirements across the infrastructure, creating multiple security vulnerabilities.

Join our session to discover how CyberArk and Red Hat empower organizations with the tools needed for secure, efficient, and innovative digital transformations, helping them navigate the complexities of modern technology while protecting their critical assets.

Contact us at apj-events@cyberark.com

The Ultimate Duo: Driving Digital Change with CyberArk and Red Hat

In this webinar, Toby Noble & David Higgins explore Identity Maturity, discussing; the evolution of PAM + IAM, Market Maturity, the Influence of Zero Trust, the rise in Converged Platforms and take a look at the future of Identity Security.

Bytes: Securing Identities - Identity Maturity

AI is shaping the evolution of DevSecOps and application security. 

In this fireside chat, Uzi Ailon, VP DevSecOps, CyberArk, Lucy Kerner, Director of Security Global Strategy and Evangelism, Red Hat and Melinda Marks, Practice Director of Cybersecurity, Enterprise Strategy Group will discuss the new security risks introduced by GenAI and how to incorporate secure development practices for GenAI applications. 

We'll also discuss how Red Hat and CyberArk have teamed up to create integrations to provide application security in the AI era, across hybrid environments, without impeding development, operations, and security teams.

GenAI and its impact on Application Security

This webinar will guide you in transitioning to a centralized SaaS secrets management solution integrated with the CyberArk Identity Security Platform. Learn about the best practices and common pitfalls of moving from on-premises to cloud-based solutions for managing secrets and machine identities. Discover how CyberArk SaaS reduces complexity and cost while enhancing security and compliance. The session will also cover integration with DevOps tools and workflows to enable secure access and automation.

 

Speakers:

Damon McDougald, Accenture
Uzi Ailon, CyberArk
Joe Garcia, CyberArk
John Walsh, CyberArk
 

Register now to safeguard your organization against evolving cyber threats.

How Security Teams Are Solving Vault Sprawl With a Modern SaaS Solution

96% of organizations have shifted existing workloads to the cloud or are in the initial stages of doing so, according to Enterprise Strategy Group. Additionally, with software releases entering production faster than ever, security teams lack the visibility and control in the development process to adequately reduce risk. 

Join us in this webinar featuring Tony Palmer, Practice Director, Enterprise Strategy Group and Chris Smith, Product Marketing Director, DevSecOps, CyberArk as they discuss how to optimize cloud security for all identities – human and machine – across the enterprise with CyberArk on AWS. 

You will learn about:
• What steps you should take to improve security over your cloud environments
• The spectrum of identities that CyberArk secures for your business
• Why centralizing secrets management is key to eliminating risk

Enterprise Strategy Group: Modernizing Cloud Security with Identity for AWS

In this episode of Identity Security Insights Live, Kurt Sand, CyberArk's GM of DevSecOps, and Ritesh Desai, Amazon's GM of Secrets Manager for Amazon Web Services (AWS) dive deep into the critical areas that organizations should focus on to secure machine identities and protect their sensitive information.

Securing AWS Workloads: Safeguarding Secrets and Machine Identities

The rise in identities, cloud migration, and sophisticated attacks have led to a surge in identity-based cyberattacks. Experts suggest that with more identities, organizations can achieve more with less.
Sunil Patel of Accenture advises using "just-in-time" identity creation to eliminate threats. Matt Girdharry from AWS highlights the need to secure both human and machine identities. Brandon Traffanstedt of CyberArk notes the importance of prioritizing identities, coining the term "Skittle-sorting conundrum."

In their RSA Conference 2024 interview, Patel, Girdharry, and Traffanstedt discuss how attackers now log in instead of hacking, the use of generative AI in identity security, and the need for every identity to access data across diverse resources.

Accenture, AWS and CyberArk: Why the Future of Security Is Identity

Join this panel of experts from AWS, Accenture and CyberArk as they share their advanced experiences and discuss navigating the intricate landscape against evolving cyberthreats and how every identity, both human and nonhuman, needs the right level of intelligent privilege controls to be secure.

This panel will deliver insights and practical guidance on topics including:

- Staying compliant with future trends and emerging technologies;
- Cloud security best practices;
- People, processes and technology recommendations for secure application development;
- Practical steps to make progress toward the ideal states of zero trust and zero standing privileges.
 

Speakers:

Charles Chu

General Manager, PAM & Cloud Security, CyberArk

 

Bin Du

Senior Manager, Accenture Security - Cloud & Application Security

 

Dudi Matot

AWS Security Segment Business Lead

Securing Tomorrow: A Comprehensive Approach to Identity Security through the Cloud

Clay Rogers of CyberArk and Amit Chhikara of Deloitte emphasize the growing importance of a unified identity-centered zero trust security approach amid ongoing digital transformation. They highlight that organizations must protect data through cohesive, identity-focused strategies and unify their identity tools to ease implementation.

 

In their interview with Information Security Media Group at RSA Conference 2024, Rogers and Chhikara discuss:

Key elements of an identity-centered zero trust approach
Recommendations for a unified zero trust platform
The Deloitte and CyberArk alliance
 

Rogers has over 20 years of IT security experience, while Chhikara has been with Deloitte for nearly 17 years.

Embracing a Unified Identity-Centered Zero Trust Approach

Join our session to navigate complex IT environments and tackle identity security challenges with a zero trust model. The webinar will cover adaptive authentication, least privilege access, and constant monitoring. Learn to protect digital assets and integrate zero trust seamlessly into your IT infrastructure.

Experts from CyberArk and Deloitte will discuss:

Key components of identity-centered zero trust
Strategies for implementing zero trust, including privilege controls and credential vaulting
Insights on improving compliance and cybersecurity insurance
Stay ahead of cyber threats and enhance your organization's security. Register now!

Protecting Digital Assets: A Blueprint to Identity-Centered Zero Trust

In the realm of government cybersecurity, the Zero Trust framework stands as a beacon of defense against evolving threats. Central to its efficacy are the principles of identity and access management, which redefine traditional security paradigms. Zero Trust advocates for perpetual verification of users, devices, and resources, emphasizing a “never trust, always verify” mantra. Identity verification, facilitated by multifactor authentication and behavioral analytics, lies at the heart of this approach, ensuring that access requests are scrutinized for legitimacy.

Tune in to this webinar session as Federal officials and IT experts discuss the roles of identity and ICAM in their current ZT infrastructure, how they got to the level they’re at, and lessons learned with implementation. Hear about current trends, tools, and resources that both public and private sector are utilizing and unveiling.

Securing the Identity Fabric in the Age of Cloud and Zero Trust

In an era where the Cloud's possibilities are limitless, its attack surface has also grown exponentially. AWS, Azure, and GCP collectively offer a staggering 1,400+ native services, each guarded by over 40,000 access controls. These numbers aren't just statistics; they're the real-world complexities you face daily.
What's more, the Cloud has revolutionized the roles within your organization. Cloud-native developers, Lift & Shift workload admins, and professionals from diverse backgrounds now possess powerful tools for innovation. This transformation is both a blessing and a challenge. How can you enforce identity security without slowing down the velocity demanded by your business?

Charles Chu, General Manager of Cloud Privilege Security at CyberArk, is here to guide you through this complex landscape. This enlightening webinar delves into the why and how of new security methods. Explore the art of provisioning on-the-fly entitlements, crafted for the right person in the right situation. It's not just about security; it's about maintaining the critical balance between security and operational velocity.

Key topics:
- Cloud's Expanding Attack Surface: Gain insights into the exponential growth of native services and access controls on AWS, Azure, and GCP.
- The explosion of New 'Admins': Understand the paradigm shift where new users become admins with access to powerful set of tools to create, and innovate.
- Balancing Identity Security and Business Velocity: Uncover strategies to meet the challenge posed by the ever-increasing need for velocity.
- Practical Steps for Improved Identity Security: Learn actionable strategies, best practices, and tools to enhance your identity security hygiene.

Who is this relevant for?
- IT Security Leaders
- Cloud Architects and Engineers
- CISOs, CTOs and CIOs
- IT Managers and Directors

Language spoken: English

Don't miss this great opportunity to learn from a top industry expert.

Unlocking Cloud Security: The Zero Standing Privilege Solution

Among the greatest risks to data today is the threat of ransomware attacks. The impact and likelihood of ransomware can be significantly reduced with a comprehensive endpoint privilege manager. Such a tool can eliminate local admin rights and guided by policies, elevate specific programs or tasks transparently. Instead of completely stripping users of all privileges, potentially hindering their work, CyberArk EPM facilitates automated policy-driven and ad hoc workflows for on-demand privilege elevation, ensuring no disruption to the end-user experience or burden on support teams.

Benjamin Jørgensen, Information Security Advisor at Kommando, will lead an exploration into the WHYs and HOWs of Endpoint Privilege Management. He will provide a foundational understanding of its importance, showcase how CyberArk addresses the challenges of endpoint privilege security, and demonstrate two practical scenarios that resonate in real-world contexts.

Who should attend?
- IT Security Leaders
- Cloud Architects and Engineers
- CISOs, CTOs, and CIOs
- IT Managers and Directors

Language spoken: Norwegian

Don’t miss this short but informative session that will hopefully help you along your Least Privilege Enforcement journey.

Endpoint Privilege Manager – Hvorfor er det nyttig?

ID North's Identity Spotlight - Episode 4: Building Beyond Compliance 

Join us as we dive into the evolving landscape of cybersecurity and explore how to build measures that extend beyond compliance. In this episode, we highlight the importance of anticipating changes in regulations and compliance frameworks. Our experts discuss the necessity of developing a robust cybersecurity posture and the advantages of adopting an Identity Fabric-centric approach to enhance security capabilities and boost overall cybersecurity.

Key takeaways from the episode:
• Regulations and compliance frameworks are continuously adapting out of necessity; anticipate further changes. 
• Aim to build a robust overall cybersecurity posture, rather than just meeting regulatory demands. 
• Adopt an Identity Fabric-centric approach to Identity Security to enhance security capabilities and bolster cybersecurity.

Building Beyond Compliance

ID North's Identity Spotlight - Episode 2: The Challenges of AI

Dive into the complex world of AI as we uncover the pros and cons of AI within Identity Security. Hear from leading experts as they discuss the obstacles and opportunities in realizing AI's full potential.
Key takeaways from the episode:

• AI to enhance Identity Security operations and efficiency. 
• Govern the lifecycle of AI identities and their access to systems and data. 
• Regulate what data users can access through generative AI's outputs.

The Challenges of AI

ID North's Identity Spotlight - Episode 2: Identity Security as Strategic Insurance

Explore the concept of Identity Security as a critical component of your organization's survival. In this episode, we discuss how robust identity security measures not only keep your digital assets safe but also ensure business continuity and resilience. Tune in and gain valuable insights from industry experts. 

Key takeaways from the episode:
• Treat Identity Security and cybersecurity as essential insurance, not as profit drivers. 
• Establish clear, metric-based risk levels in agreement with management. 
• Agree on specific outcome-driven metrics for basic identity hygiene, including multi-factor authentication, governance policies, and privileged access management.

Identity Security as Strategic Insurance

ID North's Identity Spotlight - Episode 1: The First Line of Defense is Identity Security

Join us for an engaging discussion on the crucial role of Identity Security in today's digital landscape. In this episode, we dive into how securing digital identities acts as the first line of defense against cyberthreats and data breaches. Get practical tips, expert insights, and innovative solutions to protect your organization’s most valuable assets.

Key takeaways from the episode:
• Identity Security is the first line of defense in Cybersecurity. 
• Basic identity hygiene is crucial. 
• Implement multi-factor authentication, enforce least privilege access through governance, and securely manage privileged accounts.

The First Line of Defense is Identity Security

Defending sensitive assets in a multi-/hybrid-cloud world with legacy and modern applications and growing number & types of identities is challenging to say the least. As security teams recognize that protecting sensitive assets means securing access for all identities, they are pressed to demonstrate the ROI of existing and future investments. In this panel, experts from leading global system integrators will discuss the real-world challenges and insights to prove the value of a robust Identity Security strategy.

Measure & Deliver Value with Identity Security

Building PHI Compliant Apps in the Cloud: Identity Security Best Practices

Multi-Cloud Identity Security: Combating a Wide Open Gate

Secure Identities for a Secure Cloud with CyberArk and AWS

As businesses increasingly rely on rapidly deploying innovative apps, running at scale to meet market demand, attackers are relentlessly looking to exploit any weakness. And while security teams can meet the challenge of securing apps at scale, is it possible for security teams to stop asking developers to do things they really don’t want to do?

Security teams need comprehensive tools to secure the credentials and identities used by various applications. To get high levels of developer adoption, security teams must use tools that meet developers where they are—for example, integrating with the existing cloud security tools they already use, such as AWS Secrets Manager.

For security professionals, developers, DevOps, and DevSecOps concerned about securing application secrets, join this panel to discover how CyberArk has partnered with AWS to provide simple and effective secrets management that meets the needs of developers and cybersecurity teams.

Gain practical insights on:

-The challenges security teams face managing and securing application secrets.
-The gap between development teams and security teams requirements for secrets management.
-Approaches for avoiding vault sprawl across projects and achieving security best practices for secrets management.
-How to satisfy developers and security teams using CyberArk Secrets Hub and AWS Secrets Manager simply and effectively.

4 Key Steps to Eliminate Vault Sprawl Across AWS Applications

Innovation

DevSecOps

Scalability

Secure Access

Cloud Security

IT Security

Developers

Attack Vectors

Secure Cloud

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

4 Key Steps to Eliminate Vault Sprawl Across AWS Applications

Presented by

About this talk

More from this channel