Name: Understanding and Managing Secrets Sprawl
Start: 2024-01-30T16:00:00Z
End: 2024-01-30T16:00:42.000Z
Location: BrightTALK
Rating: 4.6

Today’s enterprises depend on the cloud, data and software in order to make decisive decisions. That’s why the most respected brands and largest organizations in the world rely on Thales to help them protect and secure access to their most sensitive information and software wherever it is created, shared or stored – from the cloud and data centers to devices and across networks. Our solutions enable organizations to move to the cloud securely, achieve compliance with confidence, and create more value from their software in devices and services used by millions of consumers every day.

We are the worldwide leader in data protection, providing everything an organization needs to protect and manage its data, identities and intellectual property – through encryption, advanced key management, tokenization, and authentication and access management. Whether it’s the securing the cloud, digital payments, blockchain or the Internet of Things, security professionals around the globe rely on Thales to confidently accelerate their organization’s digital transformation. Thales Cloud Protection & Licensing is part of Thales Group.

Insurances face an ongoing race to innovate amidst rising customer expectations and pervasive security threats. The challenge lies in formulating a strategy that weaves robust security and privacy measures with a seamless digital experience for customers and partners.
In this session, we will share practical strategies and success stories specifically tailored to insurance professionals. You'll discover:
• Why insurance companies need to modernize their identity systems to remain competitive in the digital age
• The benefits of future-proof Identity technology for insurance, such as improved Customer experience and operational efficiency on Brokers access
• Challenges insurers may face to strike a balance between security and user experience, thriving in the digital revolution.

Speakers: 
Jim McDonald - Director of Risk Consulting RSM US LLP
Marco Venuti - Director of IAM Business Acceleration, Thales

Modern Identity Solutions at the Heart of Insurance's Digital Evolution

No setor de serviços financeiros, proteger informações confidenciais é fundamental para manter a confiança e a conformidade. Exploraremos os desafios únicos que as instituições financeiras enfrentam no gerenciamento de segredos, incluindo chaves de API, credenciais e chaves de criptografia. Especialistas do setor discutirão as melhores práticas, requisitos regulatórios e estudos de caso que destacam a importância do gerenciamento de segredos na proteção de dados do cliente e na manutenção da integridade operacional. Os participantes obterão insights acionáveis para fortalecer seus processos de gerenciamento de segredos, garantindo conformidade e resiliência em um cenário em rápida evolução.

O Papel crítico da Gestão de Segredos em Serviços Financeiros

In an era of increasingly sophisticated and pervasive cyber threats, the role of identity management has become essential to steering organizations toward cyber resilience. Identity serves as the first line of defense against unauthorized access and potential breaches, acting as a critical pillar of a well-designed cyber-resilient framework. This discussion will explore the challenges of governing, securing, and maintaining the privacy of both digital and physical identities while ensuring that all other pillars of the framework remain intact.

Our expert panelists will share their extensive knowledge and real-world experiences on how effective identity management can significantly enhance their organization's security posture. By participating in this webinar, you will gain actionable strategies and insights that empower your organization to strengthen its defenses against cyber threats, ensuring a more resilient future.
Join us for this exclusive webinar, featuring industry experts who will provide valuable insights into the intersection of identity management and cyber resilience.

Key Takeaways:
• Understanding Cyber Resilience: Gain insights into the importance of cyber resilience in today’s digital landscape and discover how identity management serves as a critical foundation.
• Navigating Complexities: Explore the complexities of governing digital and physical identities while ensuring privacy and compliance, equipping you to tackle these challenges effectively.
• Integrating Strategies: Learn how to effectively integrate identity management into your overall cyber resilience strategy across both IT and OT environments.

Join us for an exclusive webinar where industry experts will share the most effective strategies to boost your organization's cyber resilience through identity. 

Presenters: 
- Martijn Loderus, CIAM Business Director at Thales
- Vinita Bhushan, President at Pontis Research Inc

A Cornerstone of Cyber Resilience

En la industria de servicios financieros, proteger la información confidencial es fundamental para mantener la confianza y el cumplimiento. Exploraremos los desafíos únicos que enfrentan las instituciones financieras al administrar secretos, incluidas claves API, credenciales y claves de cifrado. Los expertos de la industria discutirán las mejores prácticas, los requisitos regulatorios y los estudios de casos que resaltan la importancia de la gestión de secretos para proteger los datos de los clientes y mantener la integridad operativa.

El papel fundamental de la Gestión de Secretos en los Servicios Financieros

In an increasingly complex regulatory environment, organizations must prioritize effective secrets management to protect sensitive information and comply with frameworks like the Digital Operational Resilience Act (DORA), Cloud Computing Compliance Controls Catalog (C5), and the Network and Information Systems Directive (NIS2). 

This webinar will explore the critical role of secrets management in maintaining operational integrity, enhancing security postures, and meeting compliance requirements. Industry experts will discuss best practices for implementing secrets management solutions, including access controls, encryption, and monitoring. 

Participants will gain actionable insights on navigating the compliance landscape while safeguarding their organizations against potential threats.

Simplifying Compliance: Secrets Management for DORA, C5, and NIS2

NIST recently announced the finalization of post-quantum cryptography (PQC) standards marks a pivotal moment for organizations aiming to future-proof their data security against quantum threats. Organizations need to prepare for a quantum-safe strategy to enhance the cyber security posture by understanding the challenges and becoming cryptographically agile in the quantum era today. 
In this webinar, our experts discuss the challenges and recommendations to enhance security resiliency against quantum threats:
• Uncover the risks from quantum computing such as Harvest Now Decrypt Later
• Understand the upcoming regulations 
• Practical steps to prepare for PQC adoption 

Join us now to safeguard your organization with the PQC adoption.

Securing Tomorrow Today: Guide to Quantum-Resilient Security with PQC

Thales and Oracle are joining forces to present the latest data security trends, challenges and recommendations for critical infrastructure organizations. Successful cyberattacks against organizations in industries such as utilities, energy, and communications represent significant risks to national security, economic prosperity, and public safety. 
The 2024 Thales Data Threat Report Critical Infrastructure edition explores the perspectives of over 300 critical infrastructure respondents in 18 countries regarding their understanding of the evolving security threat landscape, and challenges and strategies for protecting data, whether in the cloud, on-premises or across multicloud and hybrid environments. Among the highlights from the report we found that: 

• 93% of critical infrastructure organizations said they experienced an increase in attacks last year. 
• 24% experienced a ransomware attack. 
• 90 is the average number of SaaS platforms used by critical infrastructure organizations. 
• 26% plan to integrate GenAI into their security products/services in the next 12 months. 

Attendees will receive a free copy of the 2024 Thales Data Threat Report Critical Infrastructure Edition.

Key Findings from the 2024 Critical Infrastructure Data Threat Report with Thales and Oracle

Collaborative ecosystems have been widely used in business models for multiple industries to support today’s fast-moving innovations, complex supply chains and interconnected go-to-market partners. Managing different levels of trust efficiently and securely in collaborative ecosystems is critical for productization and time-to-market.

Join our industry experts from Thales and RSM US LLP to discover the dynamic landscape of ecosystem collaboration, underpinned by the critical role of Business-to-Business Identity and Access Management (B2B IAM). Backed by the latest findings from S&P Global’s B2B-IAM analyst research, we will use real world examples in advanced industrial manufacturing to navigate the challenges, imperatives, and transformative potentials surrounding collaboration with external suppliers, partners, and contractors.
 
In this panel discussion, we will focus:
• How efficient ecosystem collaboration is driving innovation and improving operational efficiency.
• Discuss challenges and bottlenecks caused by using legacy or home grown IAM to manage complex external identities and increasing supply chain vulnerabilities. 
• Uncover the transformative potential of B2B IAM in reshaping the manufacturing landscape and fortifying collaborative practices.

Speakers
- Ward Duchamps, Director of IAM Strategy & Innovation, Thales 
- Jim McDonald, Director of Risk Consulting, RSM US LLP

Unleashing the Power of B2B IAM in Building Secure Collaborative Ecosystems

Which is the best secret management solution out there? Join us for an enlightening session on avoiding pitfalls when choosing the best secrets management solution for your organization. In this webinar, we will delve into how CipherTrust Secrets Management security’s approach stands out in the realm of secrets management and  the key requirements for choosing the ideal solution for your organization. 

Discover how CipherTrust Secrets Management powered by Aykeless (CSM) simplifies your secrets management by eliminating the complexity and cost associated with managing multiple vaults across different platforms. With up to 70% lower total cost of ownership (TCO), you’ll learn how to cut costs by reducing the overhead of deploying, managing, scaling, and maintaining vaults. 

Experience enhanced security and functionality through patented technology and automated secrets rotation, which provide seamless and fortified security for your sensitive data. Explore top features unique to CSM, including automated secret rotations, dynamic secrets with extensive third-party connections, and universal secrets management. 

In this session, we will also highlight innovative capabilities such as automated secrets migration, a universal identity UID, and advanced reporting tools that enhance operational efficiency and security. Whether you’re looking to streamline your secrets management processes or enhance your security posture, this webinar offers valuable insights and practical tips to help you compare to other solutions.

Avoid pitfalls in choosing the best secrets management solution

Many enterprises have complex IT environments with multiple identity providers and sign-in processes. These systems operate in silos, creating security weaknesses, inefficiencies, and inconsistent user experiences. Thales and Microsoft discuss the options given to organization moving to the cloud to combine a cloud identity Provider such as Microsoft Entra ID with an external authentication methods provider such as SafeNet Trusted Access to deploy MFA everywhere.

Speakers:
- Pooja Jain, Senior Product Manager IAM at Thales 
-  Eleanor Falla, Senior Product Manager at Microsoft Security

Moderator:
- Sarah Lefavrais, Product Marketing Manager IAM at Thales

Deploying Passwordless Multi-Factor Authentication across Diverse IT Landscapes with Thales and Microsoft

In this session, our speakers will discuss ways to build a future-proof data security strategy for the evolving cyber landscape, combining a vision of possibility while staying grounded in reality.

Join this webinar to learn about:

- Future-proof data security strategies and risk-based essentials needed to protect against threats and enforce compliance across the organization.
- Key use cases for unifying data visibility and control on-premises, cloud data stores, data lakes, and storage systems.
- Thales Data Security innovations to address the dynamic challenges of the modern threat landscape while keeping your organization digitally resilient.

The Power of a Future-Proof Data Security Strategy

Third-party identities present both opportunities and risks, opening doors to new business while also posing security challenges. The latest report from S&P Global Market Intelligence, commissioned by Thales, highlights the crucial role of Business-to-Business Identity and Access Management (B2B IAM) in securing the extended enterprise. 

Legacy Access Management or IGA systems are not built for B2B IAM needs, leading to IT overheads and a complex web of custom developments. In this webinar, learn from our panel of experts about how B2B IAM strengthens security by managing complex relationships with partners, vendors, and other external entities. 

Attendees will gain insights into the unique challenges and emerging trends in B2B IAM, discover how it bridges internal and external identity management, and understand its vital role in establishing identity trust in today's interconnected business environment.

Speakers:
- Marco Venuti, Business Acceleration Director for Identity and Access Management, Thales Group
- Amy Chaney, Executive Risk Officer, Huntington National Bank

Moderator:
- Dustin Sachs, Chief Technologist and Sr. Director of Programs, CyberRisk Collaborative

Navigating Complex Third-Party Identities: The Hidden Value of B2B IAM

In today's rapidly evolving digital landscape, managing secrets such as API keys, credentials, and other sensitive information is crucial for maintaining security and operational efficiency. The "Secrets Management 101" webinar will provide a comprehensive overview of the challenges associated with secrets management and present effective solutions to address these issues.

We will explore common problems such as hardcoded credentials and insecure storage and discuss how modern secrets management solutions offer centralized control, enhanced security, and streamlined processes. Attendees will learn about the benefits of implementing a robust secrets management system, including improved protection against unauthorized access, regulatory compliance, and operational efficiency.

Join us to gain valuable insights into best practices for managing secrets, discover real-world success stories, and understand the steps required to integrate a secrets management solution into your organization. This webinar is designed for IT professionals, security experts, and anyone interested in safeguarding their sensitive information.

Secrets Management 101: The Key to Security

Europe’s Digital Operational Resilience Act (DORA) enters into effect on 17 January 2025. Financial entities need to accelerate the deployment of a comprehensive compliance plan with technical, organisational and contractual measures to address the most important DORA requirements from day one. From a cryptography management standpoint, DORA provides clear instructions. In this webinar Deloitte and Thales join forces to outline some of the most important provisions of DORA and how they affect everything from the use of cryptography to the adoption and management of cloud services. We will cover:

• A brief description of DORA main objectives and key pillars.
• The impact of DORA on digital transformation and the use of cryptography. 
• How DORA is going to drive action towards crypto resiliency to mitigate specific risks and facilitate incident response.
• Conclusion: Key priorities to achieve ICT risk management, ICT 3rd party and incident response.

The impact of DORA on cryptography management and digital transformation

With increasing cyber risks and heightened regulatory scrutiny, protecting Personally Identifiable Information (PII) data becomes imperative, necessitating a comprehensive protection approach. Join us for an insightful webinar that delves into the intersection of data security, privacy, and compliance within the realm of big data.

Join our webinar to explore how the combined power of tokenisation and PII anonymisation can revolutionise data protection practices in data warehousing.

Webinar highlights:
- Discover how to enhance data protection practices and compliance in data warehousing operations.
- Explore strategies for seamlessly integrating tokenisation and PII anonymisation solutions with popular data warehouse platforms.
- Learn how to maximise data security and privacy while upholding data integrity and performance.

Language: Cantonese/ Mandarin

Big Data Tokenization and PII Anonymization in Data Warehouses

In today's digital landscape, enterprises are constantly challenged with effectively safeguarding their data in cloud environments. Cloud, data and access is the top-ranked security priorities; nearly two-thirds of respondents (65%*) identify it as a current concern and even more (72%) say it is a future concern.
Our webinar - Data Protection in the Cloud with a focus on the Asia-Pacific region is a collaboration between ABI Research and Thales to unveil valuable insights into the challenges to protecting data in the cloud and how organizations address the issues, it covers: -  
• Data Protection Regulation in Asia-Pacific
• Enterprise Cloud Adoption
• Limitations of Cloud Platforms
• Impact of Regulation on Cloud Migration
• Overcoming the challenges with basic prerequisites
Discover more and to fortify data security in the cloud data now!
*Thales Cloud Security Report 2024 - https://cpl.thalesgroup.com/cloud-security-research

Elevate Your Data Protection Strategy in the Cloud

Join us for an eye-opening webinar as we go behind the scenes with real-life ransomware stories from a ransomware protection Engineer. Gain unique insights from an expert on the front lines of ransomware defense. Discover the challenges faced, strategies employed, and lessons learned from real-world ransomware incidents. 

Whether you're looking to strengthen your organization's defenses or understand the evolving threat landscape, this webinar promises valuable perspectives and practical takeaways for cybersecurity professionals and decision-makers alike.

Behind the Scenes: Ransomware Stories from a Ransomware Protection Engineer

FIDO (Fast Identity Online) has emerged as a pivotal solution in the realm of authentication, widely regarded as the benchmark for phishing-resistant multi-factor authentication (MFA) while enhancing user convenience. However, many organizations remain apprehensive about the lifecycle management of FIDO authenticators, which impedes full-scale adoption of FIDO as their primary method for phishing-resistant MFA. 

In this presentation will delve into: 

- The specific challenges faced by IT security leaders in deploying FIDO keys within their organizations. 
- The implications of new standards, such as CTAP 2.1, for organizational deployment. 
- Advanced strategies beyond the standard: best practices for the efficient and secure deployment and management of FIDO keys at scale. 

Join us to explore practical solutions and gain insights into effectively integrating FIDO into your organization's security infrastructure. 

Speakers: 
Gregory Vigroux, PKI/FIDO Product Manager at Thales
William Houry, VP of Worldwide Sales at Versasec

Passwordless 360°: FIDO Deployment Challenges & Best Practices for FIDO Key Lifecycle Management

Unlocking Secrets Management: Streamlining DevOps Security

Unlocking Secrets Management: Customer's Journey from Decision to Implementation

Reduce DevOps and Cloud Security Risk with Secrets Management

Fireside chat - What is secrets management and why do you need it?

Thales Partner Solutions Series: CipherTrust Secrets Management for DevSecOps

Unlocking Secrets Management

Learn the latest trends in Secrets Management and how to ensure your secrets, certificates, and credentials stay protected from cyberattacks. The proliferation of secrets, as well as recent high-profile breaches – like those experienced by LastPass, Uber, and SolarWinds due to compromised credentials – have raised awareness around the risk of secret leaks. As a result, it is becoming a more important focus for security teams, who are increasingly recognizing that a fragmented approach to secrets management does not scale with today's modern computing environments, and that the most effective solution is a scalable and unified platform that can automate processes for creating, storing, rotating, and revoking secrets.

Understanding and Managing Secrets Sprawl

Secrets Management

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Understanding and Managing Secrets Sprawl

Presented by

About this talk

More from this channel