Name: Protecting Against Software Supply Chain Attacks
Start: 2024-04-23T15:00:00Z
End: 2024-04-23T15:00:38.000Z
Location: BrightTALK
Rating: 5

Today’s enterprises depend on the cloud, data and software in order to make decisive decisions. That’s why the most respected brands and largest organizations in the world rely on Thales to help them protect and secure access to their most sensitive information and software wherever it is created, shared or stored – from the cloud and data centers to devices and across networks. Our solutions enable organizations to move to the cloud securely, achieve compliance with confidence, and create more value from their software in devices and services used by millions of consumers every day.

We are the worldwide leader in data protection, providing everything an organization needs to protect and manage its data, identities and intellectual property – through encryption, advanced key management, tokenization, and authentication and access management. Whether it’s the securing the cloud, digital payments, blockchain or the Internet of Things, security professionals around the globe rely on Thales to confidently accelerate their organization’s digital transformation. Thales Cloud Protection & Licensing is part of Thales Group.

IBM Consulting and Thales join forces to outline the challenges presented by PCI DSS 4.0 and how can organizations achieve compliance in order to meet the upcoming deadline of March 2025. IBM Consulting, a Qualified Security Assessor, will outline the new requirements of PCI 4.0 while Thales will give an overview of how its Data Security, Access Management and Application Security solutions can help organizations uncover compliance gaps, protect sensitive cardholder data and monitor risks automatically. 

• Understand the new requirements and challenges to comply with PCI DSS 4.0.
• How to discover compliance gaps and vulnerabilities across hybrid IT.
• Protect sensitive cardholder data and all paths to it.
• Continuously monitor for risks and threats.

PCI DSS 4.0: What is new and how to achieve compliance?

In today's dynamic business landscape, the seamless collaboration and sharing of sensitive content are paramount, necessitating robust measures to safeguard against unauthorized access and ensure compliance with data protection regulations.
Discover how Thales CCKM and M365 DKE encryption solutions facilitate a paradigm shift in data security, empowering organizations to encrypt sensitive content with dual keys, one of which remains exclusively under the organization's control. This innovative approach guarantees the highest level of data security, mitigating risks associated with unauthorized access by hackers, privileged users, and external entities.
Embrace this opportunity to explore the strategic imperative of integrating these cutting-edge technologies to fortify data protection practices, nurture trust, and uphold regulatory compliance.
Join us for an insightful webinar highlighting Thales CipherTrust Cloud Key Management (CCKM) integration with M365 DKE.
#MISA

Enhanced Security and Risk-Based Control Over Sensitive Data in Microsoft 365

Insurances face an ongoing race to innovate amidst rising customer expectations and pervasive security threats. The challenge lies in formulating a strategy that weaves robust security and privacy measures with a seamless digital experience for customers and partners.
In this session, we will share practical strategies and success stories specifically tailored to insurance professionals. You'll discover:
• Why insurance companies need to modernize their identity systems to remain competitive in the digital age
• The benefits of future-proof Identity technology for insurance, such as improved Customer experience and operational efficiency on Brokers access
• Challenges insurers may face to strike a balance between security and user experience, thriving in the digital revolution.

Speakers: 
Jim McDonald - Director of Risk Consulting RSM US LLP
Marco Venuti - Director of IAM Business Acceleration, Thales

Modern Identity Solutions at the Heart of Insurance's Digital Evolution

This Fireside Chat will delve into the transformative role of High Speed Encryption (HSE) in enhancing data security for businesses across various industries. With a focus on practical insights and real world applications, the discussion will feature a detailed exploration of HSE's technical advantages, business impacts, and future developments. Modern networks include mobility or crypto mobility to enable evolving standards and encryption to the edge within vehicles, across satellites, on ships, etc.

Also, modern networks should be upgraded for the era of post-quantum computing, as many current legacy security products will become redundant.
You will gain valuable knowledge from industry experts and actual users about the effectiveness, implementation, and benefits of adopting High Speed Encryption solutions.

Fireside Chat - Accelerating Security: The Future of Network Encryption

No setor de serviços financeiros, proteger informações confidenciais é fundamental para manter a confiança e a conformidade. Exploraremos os desafios únicos que as instituições financeiras enfrentam no gerenciamento de segredos, incluindo chaves de API, credenciais e chaves de criptografia. Especialistas do setor discutirão as melhores práticas, requisitos regulatórios e estudos de caso que destacam a importância do gerenciamento de segredos na proteção de dados do cliente e na manutenção da integridade operacional. Os participantes obterão insights acionáveis para fortalecer seus processos de gerenciamento de segredos, garantindo conformidade e resiliência em um cenário em rápida evolução.

O Papel crítico da Gestão de Segredos em Serviços Financeiros

In an era of increasingly sophisticated and pervasive cyber threats, the role of identity management has become essential to steering organizations toward cyber resilience. Identity serves as the first line of defense against unauthorized access and potential breaches, acting as a critical pillar of a well-designed cyber-resilient framework. This discussion will explore the challenges of governing, securing, and maintaining the privacy of both digital and physical identities while ensuring that all other pillars of the framework remain intact.

Our expert panelists will share their extensive knowledge and real-world experiences on how effective identity management can significantly enhance their organization's security posture. By participating in this webinar, you will gain actionable strategies and insights that empower your organization to strengthen its defenses against cyber threats, ensuring a more resilient future.

Key Takeaways:
• Understanding Cyber Resilience: Gain insights into the importance of cyber resilience in today’s digital landscape and discover how identity management serves as a critical foundation.
• Navigating Complexities: Explore the complexities of governing digital and physical identities while ensuring privacy and compliance, equipping you to tackle these challenges effectively.
• Integrating Strategies: Learn how to effectively integrate identity management into your overall cyber resilience strategy across both IT and OT environments.

Presenters: 
- Martijn Loderus, CIAM Business Director at Thales
- Marco Venuti, IAM Business Acceleration Director at Thales
- Vinita Bhushan, President at Pontis Research Inc
- Sridhar Muppidi, IBM Fellow, VP & CTO IBM Security

Identity: A Cornerstone of Cyber Resilience

En la industria de servicios financieros, proteger la información confidencial es fundamental para mantener la confianza y el cumplimiento. Exploraremos los desafíos únicos que enfrentan las instituciones financieras al administrar secretos, incluidas claves API, credenciales y claves de cifrado. Los expertos de la industria discutirán las mejores prácticas, los requisitos regulatorios y los estudios de casos que resaltan la importancia de la gestión de secretos para proteger los datos de los clientes y mantener la integridad operativa.

El papel fundamental de la Gestión de Secretos en los Servicios Financieros

In an increasingly complex regulatory environment, organizations must prioritize effective secrets management to protect sensitive information and comply with frameworks like the Digital Operational Resilience Act (DORA), Cloud Computing Compliance Controls Catalog (C5), and the Network and Information Systems Directive (NIS2). 

This webinar will explore the critical role of secrets management in maintaining operational integrity, enhancing security postures, and meeting compliance requirements. Industry experts will discuss best practices for implementing secrets management solutions, including access controls, encryption, and monitoring. 

Participants will gain actionable insights on navigating the compliance landscape while safeguarding their organizations against potential threats.

Simplifying Compliance: Secrets Management for DORA, C5, and NIS2

NIST recently announced the finalization of post-quantum cryptography (PQC) standards marks a pivotal moment for organizations aiming to future-proof their data security against quantum threats. Organizations need to prepare for a quantum-safe strategy to enhance the cyber security posture by understanding the challenges and becoming cryptographically agile in the quantum era today. 
In this webinar, our experts discuss the challenges and recommendations to enhance security resiliency against quantum threats:
• Uncover the risks from quantum computing such as Harvest Now Decrypt Later
• Understand the upcoming regulations 
• Practical steps to prepare for PQC adoption 

Join us now to safeguard your organization with the PQC adoption.

Securing Tomorrow Today: Guide to Quantum-Resilient Security with PQC

Thales and Oracle are joining forces to present the latest data security trends, challenges and recommendations for critical infrastructure organizations. Successful cyberattacks against organizations in industries such as utilities, energy, and communications represent significant risks to national security, economic prosperity, and public safety. 
The 2024 Thales Data Threat Report Critical Infrastructure edition explores the perspectives of over 300 critical infrastructure respondents in 18 countries regarding their understanding of the evolving security threat landscape, and challenges and strategies for protecting data, whether in the cloud, on-premises or across multicloud and hybrid environments. Among the highlights from the report we found that: 

• 93% of critical infrastructure organizations said they experienced an increase in attacks last year. 
• 24% experienced a ransomware attack. 
• 90 is the average number of SaaS platforms used by critical infrastructure organizations. 
• 26% plan to integrate GenAI into their security products/services in the next 12 months. 

Attendees will receive a free copy of the 2024 Thales Data Threat Report Critical Infrastructure Edition.

Key Findings from the 2024 Critical Infrastructure Data Threat Report with Thales and Oracle

Collaborative ecosystems have been widely used in business models for multiple industries to support today’s fast-moving innovations, complex supply chains and interconnected go-to-market partners. Managing different levels of trust efficiently and securely in collaborative ecosystems is critical for productization and time-to-market.

Join our industry experts from Thales and RSM US LLP to discover the dynamic landscape of ecosystem collaboration, underpinned by the critical role of Business-to-Business Identity and Access Management (B2B IAM). Backed by the latest findings from S&P Global’s B2B-IAM analyst research, we will use real world examples in advanced industrial manufacturing to navigate the challenges, imperatives, and transformative potentials surrounding collaboration with external suppliers, partners, and contractors.
 
In this panel discussion, we will focus:
• How efficient ecosystem collaboration is driving innovation and improving operational efficiency.
• Discuss challenges and bottlenecks caused by using legacy or home grown IAM to manage complex external identities and increasing supply chain vulnerabilities. 
• Uncover the transformative potential of B2B IAM in reshaping the manufacturing landscape and fortifying collaborative practices.

Speakers
- Ward Duchamps, Director of IAM Strategy & Innovation, Thales 
- Jim McDonald, Director of Risk Consulting, RSM US LLP

Unleashing the Power of B2B IAM in Building Secure Collaborative Ecosystems

Which is the best secret management solution out there? Join us for an enlightening session on avoiding pitfalls when choosing the best secrets management solution for your organization. In this webinar, we will delve into how CipherTrust Secrets Management security’s approach stands out in the realm of secrets management and  the key requirements for choosing the ideal solution for your organization. 

Discover how CipherTrust Secrets Management powered by Aykeless (CSM) simplifies your secrets management by eliminating the complexity and cost associated with managing multiple vaults across different platforms. With up to 70% lower total cost of ownership (TCO), you’ll learn how to cut costs by reducing the overhead of deploying, managing, scaling, and maintaining vaults. 

Experience enhanced security and functionality through patented technology and automated secrets rotation, which provide seamless and fortified security for your sensitive data. Explore top features unique to CSM, including automated secret rotations, dynamic secrets with extensive third-party connections, and universal secrets management. 

In this session, we will also highlight innovative capabilities such as automated secrets migration, a universal identity UID, and advanced reporting tools that enhance operational efficiency and security. Whether you’re looking to streamline your secrets management processes or enhance your security posture, this webinar offers valuable insights and practical tips to help you compare to other solutions.

Avoid pitfalls in choosing the best secrets management solution

Many enterprises have complex IT environments with multiple identity providers and sign-in processes. These systems operate in silos, creating security weaknesses, inefficiencies, and inconsistent user experiences. Thales and Microsoft discuss the options given to organization moving to the cloud to combine a cloud identity Provider such as Microsoft Entra ID with an external authentication methods provider such as SafeNet Trusted Access to deploy MFA everywhere.

Speakers:
- Pooja Jain, Senior Product Manager IAM at Thales 
-  Eleanor Falla, Senior Product Manager at Microsoft Security

Moderator:
- Sarah Lefavrais, Product Marketing Manager IAM at Thales

Deploying Passwordless Multi-Factor Authentication across Diverse IT Landscapes with Thales and Microsoft

In this session, our speakers will discuss ways to build a future-proof data security strategy for the evolving cyber landscape, combining a vision of possibility while staying grounded in reality.

Join this webinar to learn about:

- Future-proof data security strategies and risk-based essentials needed to protect against threats and enforce compliance across the organization.
- Key use cases for unifying data visibility and control on-premises, cloud data stores, data lakes, and storage systems.
- Thales Data Security innovations to address the dynamic challenges of the modern threat landscape while keeping your organization digitally resilient.

The Power of a Future-Proof Data Security Strategy

Third-party identities present both opportunities and risks, opening doors to new business while also posing security challenges. The latest report from S&P Global Market Intelligence, commissioned by Thales, highlights the crucial role of Business-to-Business Identity and Access Management (B2B IAM) in securing the extended enterprise. 

Legacy Access Management or IGA systems are not built for B2B IAM needs, leading to IT overheads and a complex web of custom developments. In this webinar, learn from our panel of experts about how B2B IAM strengthens security by managing complex relationships with partners, vendors, and other external entities. 

Attendees will gain insights into the unique challenges and emerging trends in B2B IAM, discover how it bridges internal and external identity management, and understand its vital role in establishing identity trust in today's interconnected business environment.

Speakers:
- Marco Venuti, Business Acceleration Director for Identity and Access Management, Thales Group
- Amy Chaney, Executive Risk Officer, Huntington National Bank

Moderator:
- Dustin Sachs, Chief Technologist and Sr. Director of Programs, CyberRisk Collaborative

Navigating Complex Third-Party Identities: The Hidden Value of B2B IAM

In today's rapidly evolving digital landscape, managing secrets such as API keys, credentials, and other sensitive information is crucial for maintaining security and operational efficiency. The "Secrets Management 101" webinar will provide a comprehensive overview of the challenges associated with secrets management and present effective solutions to address these issues.

We will explore common problems such as hardcoded credentials and insecure storage and discuss how modern secrets management solutions offer centralized control, enhanced security, and streamlined processes. Attendees will learn about the benefits of implementing a robust secrets management system, including improved protection against unauthorized access, regulatory compliance, and operational efficiency.

Join us to gain valuable insights into best practices for managing secrets, discover real-world success stories, and understand the steps required to integrate a secrets management solution into your organization. This webinar is designed for IT professionals, security experts, and anyone interested in safeguarding their sensitive information.

Secrets Management 101: The Key to Security

Europe’s Digital Operational Resilience Act (DORA) enters into effect on 17 January 2025. Financial entities need to accelerate the deployment of a comprehensive compliance plan with technical, organisational and contractual measures to address the most important DORA requirements from day one. From a cryptography management standpoint, DORA provides clear instructions. In this webinar Deloitte and Thales join forces to outline some of the most important provisions of DORA and how they affect everything from the use of cryptography to the adoption and management of cloud services. We will cover:

• A brief description of DORA main objectives and key pillars.
• The impact of DORA on digital transformation and the use of cryptography. 
• How DORA is going to drive action towards crypto resiliency to mitigate specific risks and facilitate incident response.
• Conclusion: Key priorities to achieve ICT risk management, ICT 3rd party and incident response.

The impact of DORA on cryptography management and digital transformation

With increasing cyber risks and heightened regulatory scrutiny, protecting Personally Identifiable Information (PII) data becomes imperative, necessitating a comprehensive protection approach. Join us for an insightful webinar that delves into the intersection of data security, privacy, and compliance within the realm of big data.

Join our webinar to explore how the combined power of tokenisation and PII anonymisation can revolutionise data protection practices in data warehousing.

Webinar highlights:
- Discover how to enhance data protection practices and compliance in data warehousing operations.
- Explore strategies for seamlessly integrating tokenisation and PII anonymisation solutions with popular data warehouse platforms.
- Learn how to maximise data security and privacy while upholding data integrity and performance.

Language: Cantonese/ Mandarin

Big Data Tokenization and PII Anonymization in Data Warehouses

Software supply chain attacks tend to be very lucrative for criminals and devastating to businesses. A single breach can impact thousands of victims in a rapid domino effect. What can organizations due to protect against these security risks? Join us as we discuss methods to protect software releases, safeguard private encryption keys, proactively detect vulnerabilities, and ensure software transparency.

Protecting Against Software Supply Chain Attacks

root of trust

container signing

code signing

SBOM

Supply Chain

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Protecting Against Software Supply Chain Attacks

Presented by

About this talk

More from this channel