Name: Simplify Your Pathway to PCI DSS 4.0 Compliance with QSA Recommendations
Start: 2024-08-08T05:00:00Z
End: 2024-08-08T05:00:52.000Z
Location: BrightTALK
Rating: 4.9

Today’s enterprises depend on the cloud, data and software in order to make decisive decisions. That’s why the most respected brands and largest organizations in the world rely on Thales to help them protect and secure access to their most sensitive information and software wherever it is created, shared or stored – from the cloud and data centers to devices and across networks. Our solutions enable organizations to move to the cloud securely, achieve compliance with confidence, and create more value from their software in devices and services used by millions of consumers every day.

We are the worldwide leader in data protection, providing everything an organization needs to protect and manage its data, identities and intellectual property – through encryption, advanced key management, tokenization, and authentication and access management. Whether it’s the securing the cloud, digital payments, blockchain or the Internet of Things, security professionals around the globe rely on Thales to confidently accelerate their organization’s digital transformation. Thales Cloud Protection & Licensing is part of Thales Group.

The National Institute of Standards and Technology (NIST) released Version 2.0 of the cybersecurity framework (CSF) on February 26, 2024. The NIST CSF is a set of cybersecurity guidelines, standards, and best practices to help organizations understand cyber risks and improve their defenses. Version 2.0's scope has been refreshed to reflect its use by all organizations—not just critical infrastructure, its original target audience—to manage and reduce risks. 
As organizations navigate the ever-evolving cybersecurity landscape, the NIST CSF 2.0 provides a roadmap for staying ahead of the curve, achieving regulatory compliance, enhancing risk management practices, and strengthening overall cyber resilience.
Join our webinar to uncover: 
- An overview of the changes of the NIST CSF version 2.0 and its significance for organizations
- How organizations align with the framework and enhance cybersecurity posture with a data security perspective 
- Practical steps and strategies to implement to meet the guidelines effectively

Don’t miss this opportunity to ensure your organization is prepared for the future!

Master the NIST CSF2.0 to Mitigate Cyber Risks

Europe’s Digital Operational Resilience Act (DORA) enters into effect on 17 January 2025. Financial entities need to accelerate the deployment of a comprehensive compliance plan with technical, organisational and contractual measures to address the most important DORA requirements from day one. From a cryptography management standpoint, DORA provides clear instructions. In this webinar Deloitte and Thales join forces to outline some of the most important provisions of DORA and how they affect everything from the use of cryptography to the adoption and management of cloud services. We will cover:

• A brief description of DORA main objectives and key pillars.
• The impact of DORA on digital transformation and the use of cryptography. 
• How DORA is going to drive action towards crypto resiliency to mitigate specific risks and facilitate incident response.
• Conclusion: Key priorities to achieve ICT risk management, ICT 3rd party and incident response.

The impact of DORA on cryptography management and digital transformation

Join us for an eye-opening webinar as we go behind the scenes with real-life ransomware stories from a ransomware protection Engineer. Gain unique insights from an expert on the front lines of ransomware defense. Discover the challenges faced, strategies employed, and lessons learned from real-world ransomware incidents. 

Whether you're looking to strengthen your organization's defenses or understand the evolving threat landscape, this webinar promises valuable perspectives and practical takeaways for cybersecurity professionals and decision-makers alike.

Behind the Scenes: Ransomware Stories from a Ransomware Protection Engineer

FIDO (Fast Identity Online) has emerged as a pivotal solution in the realm of authentication, widely regarded as the benchmark for phishing-resistant multi-factor authentication (MFA) while enhancing user convenience. However, many organizations remain apprehensive about the lifecycle management of FIDO authenticators, which impedes full-scale adoption of FIDO as their primary method for phishing-resistant MFA. 

In this presentation will delve into: 

- The specific challenges faced by IT security leaders in deploying FIDO keys within their organizations. 
- The implications of new standards, such as CTAP 2.1, for organizational deployment. 
- Advanced strategies beyond the standard: best practices for the efficient and secure deployment and management of FIDO keys at scale. 

Join us to explore practical solutions and gain insights into effectively integrating FIDO into your organization's security infrastructure. 

Speakers: 
Gregory Vigroux, PKI/FIDO Product Manager at Thales
William Houry, VP of Worldwide Sales at Versasec

Passwordless 360°: FIDO Deployment Challenges & Best Practices for FIDO Key Lifecycle Management

Join us for a thought-provoking fireside chat, "Unlocking Secrets Management: Streamlining DevOps Security". In this webinar, see how Thales and Akeyless are revolutionizing secrets management security practices in DevOps environments.

Discover how to simplify the lives of DevOps professionals by seamlessly integrating security into their workflows. Our experts will explore key topics such as not hardcoding security updates, automated secrets lifecycle management, and the essential role of secrets management in enhancing overall DevOps security posture.

Whether you are new to secrets management or looking to optimize your current practices, this webinar will provide valuable insights and practical strategies. Join us as we discuss real-world applications, industry best practices, and how to securely accelerate their CI/CD pipelines across diverse cloud and on-premises environments.

Don't miss this opportunity to gain expert perspectives and engage in a lively discussion that aims to elevate your understanding of secrets management within DevOps. Register now and be part of the conversation that shapes the future of secure DevOps practices.

Unlocking Secrets Management: Streamlining DevOps Security

Hybrid Cloud deployments are becoming increasingly prevalent as organizations and governments worldwide grapple with security compliance and data sovereignty regulations. To address these challenges, Thales has partnered with HPE to provide comprehensive data security, data sovereignty, and compliance solutions for Hybrid Cloud estates.
In this webinar, we will explore the complexities of data sovereignty and security compliance in the modern landscape. With the rise of data silos, stricter compliance regulations, escalating cybercrime rates, and the need for data sovereignty, organizations are looking for robust data protection technologies, such as centralized key management and encryption.

Simplifying Digital Trust and Compliance in Hybrid Cloud Deployments

Organizations rely on Unified Communications-as-a-Service (UCaaS) platforms for their communications needs to scale business and streamline operations. UCaaS security needs are often complex, both technically and in terms of compliance, especially across multi-cloud and hybrid-cloud deployments. Furthermore, Data Sovereignty regulations and subsequent customer needs have led to the rise of Sovereign Cloud initiatives. 

Join Thales, Zoom, and AWS as we review how organizations can protect sensitive customer data on their UCaaS platforms, adhere to Security regulations, and comply with Data Sovereignty requirements.

Thales, Zoom, and AWS discuss Sovereign Clouds and UCaaS Security Compliance challenges

Join us for an insightful webinar on "Enhancing Security and User Experience for workforce". In this webinar, we will explore the shift towards passwordless authentication in Windows environments and its impact on security, user experience, and IT management. Our expert speakers will delve into the benefits, implementation best practices, and the future of passwordless logon in the context of evolving security landscapes. Don't miss this opportunity to learn about the latest innovations in authentication and how your organization can benefit from a passwordless future. 
 
Key Takeaways for a Webinar on Passwordless Windows Logon: 

 - Passwordless authentication is a transformative solution to address the fundamental issues with traditional password-based authentication. 

- The costs of data breaches, compliance violations, and lost productivity due to password struggles are staggering, and there is a growing demand for a secure and frictionless approach to digital interactions. 

-Organizations face significant challenges in implementing passwordless authentication, often leading to siloed and piecemeal implementations that fail to deliver on the passwordless promise. 
 
- Maximizing the benefits of passwordless requires a holistic approach - known as Passwordless 360°. 
 
- This approach aims to empower IT professionals, security leaders, and business owners with a better understanding of the benefits of adopting a proactive, holistic approach to passwordless authentication and how to transition to this model. 
 
These key points will provide a strong foundation for discussing the importance and implementation of passwordless Windows logon in the webinar.

Speaker: 
- Michael Dybek Sr Solutions Consultant IAM at Thales
- Amit Prakaash Sr Product Manager IAM at Thales

Moderator: 
- Paige Elliot Product Manager IAM at Thales

Passwordless 360°: Enhancing Security and User Experience for Workforce

In today's digital landscape, traditional password-based authentication is increasingly challenged by the need for more secure, efficient, and user-friendly methods. The shift towards passwordless authentication is reshaping how users interact with digital services, promising enhanced security and improved user experiences across various sectors.

Modern technology offers innovative solutions to implement passwordless authentication comprehensively. By leveraging biometrics, passkeys, hardware tokens, and behavioral analytics, organizations can create a seamless and secure authentication process that spans across different user groups, including consumers, employees, and partners.

Alejandro Leal, Research Analyst at KuppingerCole, will explore the technological advancements and market dynamics driving this significant shift. He will offer practical insights into deploying passwordless solutions and examine the challenges associated with traditional authentication methods.

Haider Iqbal, Director of Product Marketing for Identity & Access Management at Thales, will present Thales' new approach that allows organizations to use one solution provider to meet all their authentication needs. He will demonstrate how this 360° approach can be implemented across customers, workforce, business customers, partners, and suppliers' ecosystems.

Join this webinar to:
• Understand the benefits and challenges of implementing passwordless authentication
• Learn about the latest technological advancements in passwordless solutions including passkeys
• Gain insights into market trends and consumer expectations for authentication
• Discover how to implement a holistic passwordless strategy across various user groups
• Explore Thales' 360° approach to passwordless authentication
• Understand best practices for transitioning from traditional to passwordless authentication
• Learn how to enhance security while improving user experience through passwordless methods

Passwordless 360°: A Game-Changing Approach to Authentication within your Business

Join us for an insightful fireside chat exploring the vital role of centralized secrets management in the realms of DevSecOps and IT Security Infrastructure. Gain valuable perspectives from a customer who successfully implemented a centralized secrets management solution. Learn firsthand about the pivotal factors influencing their decision-making process, including key requirements and alternative solutions considered. 

Throughout the session, we'll delve into the critical importance of centralized secrets management for safeguarding sensitive information like passwords, certificates, and API tokens. Discover how secrets management reinforces security measures to thwart unauthorized access and mitigate potential breaches. 

Furthermore, we'll explore how a secrets management solution seamlessly integrate within DevOps workflows, optimizing processes and ensuring secure access to secrets throughout the software development lifecycle. Don't miss this opportunity to glean actionable insights from a customer’s perspective and fortify your secrets management practices.

Unlocking Secrets Management: Customer's Journey from Decision to Implementation

Organizations need to prepare for a quantum-safe strategy to enhance their cyber security posture by understanding the challenges to become cryptographically agile in the quantum era. 
In this webinar, our experts discuss the following about quantum threats to data in motion and how to prepare for them:
• Discover the risks today from quantum computing such as Harvest Now Decrypt Later 
• Understand the upcoming regulations 
• Building a future-proof quantum strategy and what you can do to get started today 
• Share use cases

Join us now to safeguard your organization for the quantum era.

Start preparing your network for Quantum-safe security now

Legacy Customer Identity & Access Management (CIAM) systems contradict insurance companies' digital goals, hindering user experience with slower, less secure methods. 
These old technologies fragment the user journey and impede operational excellence with high costs, limited scalability, and security risks. 
Insurers must embrace modern CIAM to remain competitive.

Watch this on-demand webinar to discover: 
- Why insurance companies need to modernize their identity systems to remain competitive in the digital age
- The benefits of future-proof CIAM technology for insurance, such as improved user experience and operational efficiency
- The challenges insurers may face when implementing modern CIAM and how to overcome them with confidence                                                                                                                   

Save your spot today!

Break Free from Legacy CIAM to Unlock Your Insurance Company's Digital Potential

In today's digital age, Customer Identity and Access Management (CIAM) has become critical for organizations looking to secure and enhance user interactions. As businesses strive to deliver seamless digital experiences while safeguarding sensitive information, the need for robust, future-proof identity management strategies is more pressing than ever. 

Whether you attended or missed Identiverse on May 28-31, 2024 in Vegas, join us for our insightful discussion where industry leaders and experts will delve into the winning strategies and latest advancements for future-proof identity management. 

Our first panel discussion "Delivering Seamless User Experiences with Optimized Security Measures” explores how organizations can strike the right balance between personalization and security to win customer trust and boost conversion.

Whether you're an IT professional, security expert, or business leader, this discussion provides valuable perspectives and real-life use cases to help you stay ahead in the ever-evolving world of identity management. 

Key Discussion Points
• Enhancing Digital User Experiences 
• Strengthening Security Measures

CIAM Strategies 01: Delivering Seamless User Experiences with Optimized Security

The European Union’s Network and Information Security Directive 2 (NIS 2) is arguably the most important cyber resilience regulation in the world. NIS2 requires operators of critical infrastructure in 19 different industries ranging from healthcare and public services to utilities and manufacturing to implement appropriate security measures and report any incident to the relevant authorities. 
The Directive addresses the security of supply chains, streamlines reporting obligations, and introduces more stringent supervisory measures and strict penalties. By October 17, the European Union’s 27 Member States are expected to transpose the NIS2 Directive into applicable, national laws. 
A critical cybersecurity strategy aimed at complying with NIS 2 and increasing cyber resilience must include the protection of sensitive data, as well as identities, access, applications, and systems essential for its operations. In this webinar we will cover:
- How the NIS 2 expands the scope and security requirements for cyber resilience.
- The impact of NIS 2 on cloud services and their customers.
- How application, data and identity security are key to compliance.
- How to organizations can simplify compliance with NIS 2 and other regulations with Thales.

The Challenges of the NIS 2 Directive and How Thales Can Help

You've likely seen the headlines about ransomware attacks and the monumental challenges they pose for organizations. But what should you do when an attack occurs? Join us for a candid conversation on how to handle various types of ransomware attacks. 

In this webinar, we'll explore multiple scenarios and provide actionable strategies to protect and help you recover as quickly as possible. Don't miss this opportunity to learn from experts and arm yourself with the knowledge to bounce back from a ransomware attack.

Bouncing Back: How to Protect and Recover After a Ransomware Attack

Based on the 2024 Thales Cloud Security Study with analysis by S&P Global Market Intelligence, this webinar draws on research from a survey of 3,000 IT professionals from 18 countries across more than 30 industries. Along with its sister report, the Thales Global Data Threat Report, the 2024 Thales Cloud Security Study looks into aspects of cloud security and revisits the impact of a dynamically expanding and complex attack surface.

Key Findings from the 2024 Thales Cloud Security Study

Did you know that 80% of consumers want brands to offer MFA (Multi-Factor Authentication) as a means for them to establish trust in the brand?* 

While this used to add friction in the past, there are new ways to deliver MFA and passwordless authentication experiences through passkeys. 

In this episode, Pedro Martinez from Thales and Megan Shamas from FIDO Alliance will delve into best practices and real-world examples for implementing passkeys and Strong Customer Authentication (SCA). Join us for insights from industry leaders on enhancing security and user experience.

Key takeaways:
- MFA and friction: The end consumer’s perspective and rising expectations around authentication and how to offer a seamless authentication experience
- Passkeys will replace passwords, the shift is inevitable, momentum is strong – are businesses ready?
- How businesses can implement passkeys, including best practices, for strong authentication

Speakers:
- Pedro Martinez, Business Owner for Digital Banking Authentication at Thales
- Megan Shamas, Chief Marketing Officer at FIDO Alliance

Moderator: Ammar Faheem, Product Marketing Manager CIAM at Thales

*Thales Digital Trust Index 2024 Research

Ensure Secure & Frictionless User Experiences with Passkeys

PCI DSS 4.0 was introduced in 2022 to address emerging threats and technologies and enable innovative methods to combat new threats. With the timeline to implement future-dated requirements set for March 2025, now is the perfect time to evaluate and address these new technical standards.

In this webinar, Qualified Security Assessor (QSA), along with Data Security and Application Security Experts from Thales, will share practical considerations as well as recommendations to prepare your organization for the future-dated requirements in v4.0 including:

 
• Challenges in Complying with PCI DSS v4.0: Understand the common obstacles faced by organizations
• Top Considerations for Future-Dated Requirements: Key factors to address new compliance standards
• Risk Reduction and Compliance Strategies: Effective recommendations to minimize risks and achieve compliance

Join this webinar and be compliant today!

Simplify Your Pathway to PCI DSS 4.0 Compliance with QSA Recommendations

#datasecurity

appsec

PCI Compliance

PCI DSS

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Simplify Your Pathway to PCI DSS 4.0 Compliance with QSA Recommendations

Presented by

About this talk

More from this channel