Name: Simplifying Compliance: Secrets Management for DORA, C5, and NIS2
Start: 2024-11-12T15:00:00Z
End: 2024-11-12T15:01:00.000Z
Location: BrightTALK
Rating: 0

Today’s enterprises depend on the cloud, data and software in order to make decisive decisions. That’s why the most respected brands and largest organizations in the world rely on Thales to help them protect and secure access to their most sensitive information and software wherever it is created, shared or stored – from the cloud and data centers to devices and across networks. Our solutions enable organizations to move to the cloud securely, achieve compliance with confidence, and create more value from their software in devices and services used by millions of consumers every day.

We are the worldwide leader in data protection, providing everything an organization needs to protect and manage its data, identities and intellectual property – through encryption, advanced key management, tokenization, and authentication and access management. Whether it’s the securing the cloud, digital payments, blockchain or the Internet of Things, security professionals around the globe rely on Thales to confidently accelerate their organization’s digital transformation. Thales Cloud Protection & Licensing is part of Thales Group.

No setor de serviços financeiros, proteger informações confidenciais é fundamental para manter a confiança e a conformidade. Exploraremos os desafios únicos que as instituições financeiras enfrentam no gerenciamento de segredos, incluindo chaves de API, credenciais e chaves de criptografia. Especialistas do setor discutirão as melhores práticas, requisitos regulatórios e estudos de caso que destacam a importância do gerenciamento de segredos na proteção de dados do cliente e na manutenção da integridade operacional. Os participantes obterão insights acionáveis para fortalecer seus processos de gerenciamento de segredos, garantindo conformidade e resiliência em um cenário em rápida evolução.

O Papel crítico da Gestão de Segredos em Serviços Financeiros

NIST recently announced the finalization of post-quantum cryptography (PQC) standards marks a pivotal moment for organizations aiming to future-proof their data security against quantum threats. Organizations need to prepare for a quantum-safe strategy to enhance the cyber security posture by understanding the challenges and becoming cryptographically agile in the quantum era today. 
In this webinar, our experts discuss the challenges and recommendations to enhance security resiliency against quantum threats:
• Uncover the risks from quantum computing such as Harvest Now Decrypt Later
• Understand the upcoming regulations 
• Practical steps to prepare for PQC adoption 

Join us now to safeguard your organization with the PQC adoption.

Securing Tomorrow Today: Guide to Quantum-Resilient Security with PQC

Thales and Oracle are joining forces to present the latest data security trends, challenges and recommendations for critical infrastructure organizations. Successful cyberattacks against organizations in industries such as utilities, energy, and communications represent significant risks to national security, economic prosperity, and public safety. 
The 2024 Thales Data Threat Report Critical Infrastructure edition explores the perspectives of over 300 critical infrastructure respondents in 18 countries regarding their understanding of the evolving security threat landscape, and challenges and strategies for protecting data, whether in the cloud, on-premises or across multicloud and hybrid environments. Among the highlights from the report we found that: 

• 93% of critical infrastructure organizations said they experienced an increase in attacks last year. 
• 24% experienced a ransomware attack. 
• 90 is the average number of SaaS platforms used by critical infrastructure organizations. 
• 26% plan to integrate GenAI into their security products/services in the next 12 months. 

Attendees will receive a free copy of the 2024 Thales Data Threat Report Critical Infrastructure Edition.

Key Findings from the 2024 Critical Infrastructure Data Threat Report with Thales and Oracle

Which is the best secret management solution out there? Join us for an enlightening session on avoiding pitfalls when choosing the best secrets management solution for your organization. In this webinar, we will delve into how CipherTrust Secrets Management security’s approach stands out in the realm of secrets management and  the key requirements for choosing the ideal solution for your organization. 

Discover how CipherTrust Secrets Management powered by Aykeless (CSM) simplifies your secrets management by eliminating the complexity and cost associated with managing multiple vaults across different platforms. With up to 70% lower total cost of ownership (TCO), you’ll learn how to cut costs by reducing the overhead of deploying, managing, scaling, and maintaining vaults. 

Experience enhanced security and functionality through patented technology and automated secrets rotation, which provide seamless and fortified security for your sensitive data. Explore top features unique to CSM, including automated secret rotations, dynamic secrets with extensive third-party connections, and universal secrets management. 

In this session, we will also highlight innovative capabilities such as automated secrets migration, a universal identity UID, and advanced reporting tools that enhance operational efficiency and security. Whether you’re looking to streamline your secrets management processes or enhance your security posture, this webinar offers valuable insights and practical tips to help you compare to other solutions.

Avoid pitfalls in choosing the best secrets management solution

Collaborative ecosystems have been widely used in business models for multiple industries to support today’s fast-moving innovations, complex supply chains and interconnected go-to-market partners. Managing different levels of trust efficiently and securely in collaborative ecosystems is critical for productization and time-to-market.

Join our industry experts from Thales and RSM US LLP to discover the dynamic landscape of ecosystem collaboration, underpinned by the critical role of Business-to-Business Identity and Access Management (B2B IAM). Backed by the latest findings from S&P Global’s B2B-IAM analyst research, we will use real world examples in advanced industrial manufacturing to navigate the challenges, imperatives, and transformative potentials surrounding collaboration with external suppliers, partners, and contractors.
 
In this panel discussion, we will focus:
• How efficient ecosystem collaboration is driving innovation and improving operational efficiency.
• Discuss challenges and bottlenecks caused by using legacy or home grown IAM to manage complex external identities and increasing supply chain vulnerabilities. 
• Uncover the transformative potential of B2B IAM in reshaping the manufacturing landscape and fortifying collaborative practices.

Speakers
- Ward Duchamps, Director of IAM Strategy & Innovation, Thales 
- Jim McDonald, Director of Risk Consulting, RSM US LLP

Unleashing the Power of B2B IAM in Building Secure Collaborative Ecosystems

Many enterprises have complex IT environments with multiple identity providers and sign-in processes. These systems operate in silos, creating security weaknesses, inefficiencies, and inconsistent user experiences. Thales and Microsoft discuss the options given to organization moving to the cloud to combine a cloud identity Provider such as Microsoft Entra ID with an external authentication methods provider such as SafeNet Trusted Access to deploy MFA everywhere.

Speakers:
- Pooja Jain, Senior Product Manager IAM at Thales 
-  Eleanor Falla, Senior Product Manager at Microsoft Security

Moderator:
- Sarah Lefavrais, Product Marketing Manager IAM at Thales

Deploying Passwordless Multi-Factor Authentication across Diverse IT Landscapes with Thales and Microsoft

In this session, our speakers will discuss ways to build a future-proof data security strategy for the evolving cyber landscape, combining a vision of possibility while staying grounded in reality.

Join this webinar to learn about:

- Future-proof data security strategies and risk-based essentials needed to protect against threats and enforce compliance across the organization.
- Key use cases for unifying data visibility and control on-premises, cloud data stores, data lakes, and storage systems.
- Thales Data Security innovations to address the dynamic challenges of the modern threat landscape while keeping your organization digitally resilient.

The Power of a Future-Proof Data Security Strategy

Third-party identities present both opportunities and risks, opening doors to new business while also posing security challenges. The latest report from S&P Global Market Intelligence, commissioned by Thales, highlights the crucial role of Business-to-Business Identity and Access Management (B2B IAM) in securing the extended enterprise. 

Legacy Access Management or IGA systems are not built for B2B IAM needs, leading to IT overheads and a complex web of custom developments. In this webinar, learn from our panel of experts about how B2B IAM strengthens security by managing complex relationships with partners, vendors, and other external entities. 

Attendees will gain insights into the unique challenges and emerging trends in B2B IAM, discover how it bridges internal and external identity management, and understand its vital role in establishing identity trust in today's interconnected business environment.

Speakers:
- Marco Venuti, Business Acceleration Director for Identity and Access Management, Thales Group
- Amy Chaney, Executive Risk Officer, Huntington National Bank

Moderator:
- Dustin Sachs, Chief Technologist and Sr. Director of Programs, CyberRisk Collaborative

Navigating Complex Third-Party Identities: The Hidden Value of B2B IAM

In today's rapidly evolving digital landscape, managing secrets such as API keys, credentials, and other sensitive information is crucial for maintaining security and operational efficiency. The "Secrets Management 101" webinar will provide a comprehensive overview of the challenges associated with secrets management and present effective solutions to address these issues.

We will explore common problems such as hardcoded credentials and insecure storage and discuss how modern secrets management solutions offer centralized control, enhanced security, and streamlined processes. Attendees will learn about the benefits of implementing a robust secrets management system, including improved protection against unauthorized access, regulatory compliance, and operational efficiency.

Join us to gain valuable insights into best practices for managing secrets, discover real-world success stories, and understand the steps required to integrate a secrets management solution into your organization. This webinar is designed for IT professionals, security experts, and anyone interested in safeguarding their sensitive information.

Secrets Management 101: The Key to Security

Europe’s Digital Operational Resilience Act (DORA) enters into effect on 17 January 2025. Financial entities need to accelerate the deployment of a comprehensive compliance plan with technical, organisational and contractual measures to address the most important DORA requirements from day one. From a cryptography management standpoint, DORA provides clear instructions. In this webinar Deloitte and Thales join forces to outline some of the most important provisions of DORA and how they affect everything from the use of cryptography to the adoption and management of cloud services. We will cover:

• A brief description of DORA main objectives and key pillars.
• The impact of DORA on digital transformation and the use of cryptography. 
• How DORA is going to drive action towards crypto resiliency to mitigate specific risks and facilitate incident response.
• Conclusion: Key priorities to achieve ICT risk management, ICT 3rd party and incident response.

The impact of DORA on cryptography management and digital transformation

With increasing cyber risks and heightened regulatory scrutiny, protecting Personally Identifiable Information (PII) data becomes imperative, necessitating a comprehensive protection approach. Join us for an insightful webinar that delves into the intersection of data security, privacy, and compliance within the realm of big data.

Join our webinar to explore how the combined power of tokenisation and PII anonymisation can revolutionise data protection practices in data warehousing.

Webinar highlights:
- Discover how to enhance data protection practices and compliance in data warehousing operations.
- Explore strategies for seamlessly integrating tokenisation and PII anonymisation solutions with popular data warehouse platforms.
- Learn how to maximise data security and privacy while upholding data integrity and performance.

Language: Cantonese/ Mandarin

Big Data Tokenization and PII Anonymization in Data Warehouses

In today's digital landscape, enterprises are constantly challenged with effectively safeguarding their data in cloud environments. Cloud, data and access is the top-ranked security priorities; nearly two-thirds of respondents (65%*) identify it as a current concern and even more (72%) say it is a future concern.
Our webinar - Data Protection in the Cloud with a focus on the Asia-Pacific region is a collaboration between ABI Research and Thales to unveil valuable insights into the challenges to protecting data in the cloud and how organizations address the issues, it covers: -  
• Data Protection Regulation in Asia-Pacific
• Enterprise Cloud Adoption
• Limitations of Cloud Platforms
• Impact of Regulation on Cloud Migration
• Overcoming the challenges with basic prerequisites
Discover more and to fortify data security in the cloud data now!
*Thales Cloud Security Report 2024 - https://cpl.thalesgroup.com/cloud-security-research

Elevate Your Data Protection Strategy in the Cloud

Join us for an eye-opening webinar as we go behind the scenes with real-life ransomware stories from a ransomware protection Engineer. Gain unique insights from an expert on the front lines of ransomware defense. Discover the challenges faced, strategies employed, and lessons learned from real-world ransomware incidents. 

Whether you're looking to strengthen your organization's defenses or understand the evolving threat landscape, this webinar promises valuable perspectives and practical takeaways for cybersecurity professionals and decision-makers alike.

Behind the Scenes: Ransomware Stories from a Ransomware Protection Engineer

FIDO (Fast Identity Online) has emerged as a pivotal solution in the realm of authentication, widely regarded as the benchmark for phishing-resistant multi-factor authentication (MFA) while enhancing user convenience. However, many organizations remain apprehensive about the lifecycle management of FIDO authenticators, which impedes full-scale adoption of FIDO as their primary method for phishing-resistant MFA. 

In this presentation will delve into: 

- The specific challenges faced by IT security leaders in deploying FIDO keys within their organizations. 
- The implications of new standards, such as CTAP 2.1, for organizational deployment. 
- Advanced strategies beyond the standard: best practices for the efficient and secure deployment and management of FIDO keys at scale. 

Join us to explore practical solutions and gain insights into effectively integrating FIDO into your organization's security infrastructure. 

Speakers: 
Gregory Vigroux, PKI/FIDO Product Manager at Thales
William Houry, VP of Worldwide Sales at Versasec

Passwordless 360°: FIDO Deployment Challenges & Best Practices for FIDO Key Lifecycle Management

Join us for a thought-provoking fireside chat, "Unlocking Secrets Management: Streamlining DevOps Security". In this webinar, see how Thales and Akeyless are revolutionizing secrets management security practices in DevOps environments.

Discover how to simplify the lives of DevOps professionals by seamlessly integrating security into their workflows. Our experts will explore key topics such as not hardcoding security updates, automated secrets lifecycle management, and the essential role of secrets management in enhancing overall DevOps security posture.

Whether you are new to secrets management or looking to optimize your current practices, this webinar will provide valuable insights and practical strategies. Join us as we discuss real-world applications, industry best practices, and how to securely accelerate their CI/CD pipelines across diverse cloud and on-premises environments.

Don't miss this opportunity to gain expert perspectives and engage in a lively discussion that aims to elevate your understanding of secrets management within DevOps. Register now and be part of the conversation that shapes the future of secure DevOps practices.

Unlocking Secrets Management: Streamlining DevOps Security

Hybrid Cloud deployments are becoming increasingly prevalent as organizations and governments worldwide grapple with security compliance and data sovereignty regulations. To address these challenges, Thales has partnered with HPE to provide comprehensive data security, data sovereignty, and compliance solutions for Hybrid Cloud estates.
In this webinar, we will explore the complexities of data sovereignty and security compliance in the modern landscape. With the rise of data silos, stricter compliance regulations, escalating cybercrime rates, and the need for data sovereignty, organizations are looking for robust data protection technologies, such as centralized key management and encryption.

Simplifying Digital Trust and Compliance in Hybrid Cloud Deployments

Organizations rely on Unified Communications-as-a-Service (UCaaS) platforms for their communications needs to scale business and streamline operations. UCaaS security needs are often complex, both technically and in terms of compliance, especially across multi-cloud and hybrid-cloud deployments. Furthermore, Data Sovereignty regulations and subsequent customer needs have led to the rise of Sovereign Cloud initiatives. 

Join Thales, Zoom, and AWS as we review how organizations can protect sensitive customer data on their UCaaS platforms, adhere to Security regulations, and comply with Data Sovereignty requirements.

Thales, Zoom, and AWS discuss Sovereign Clouds and UCaaS Security Compliance challenges

In an increasingly complex regulatory environment, organizations must prioritize effective secrets management to protect sensitive information and comply with frameworks like the Digital Operational Resilience Act (DORA), Cloud Computing Compliance Controls Catalog (C5), and the Network and Information Systems Directive (NIS2). 

This webinar will explore the critical role of secrets management in maintaining operational integrity, enhancing security postures, and meeting compliance requirements. Industry experts will discuss best practices for implementing secrets management solutions, including access controls, encryption, and monitoring. 

Participants will gain actionable insights on navigating the compliance landscape while safeguarding their organizations against potential threats.

Simplifying Compliance: Secrets Management for DORA, C5, and NIS2

secrets management

Compliance

Data Security

DORA

NIS2

Network and Information Systems Directive

Cyber Security

Data Protection

Encryption

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Simplifying Compliance: Secrets Management for DORA, C5, and NIS2

Presented by

About this talk

More from this channel