Name: Improve Incident Detection and Response Governance with NIST CSF v2.0
Start: 2024-07-11T22:00:00Z
End: 2024-07-11T22:00:41.000Z
Location: BrightTALK
Rating: 4.2

This channel features presentations by leading experts in the field of information security. From application, computer, network and Internet security to access control management, data privacy and other hot topics, you will walk away with practical advice for your strategic and tactical information security initiatives.

In the ever-evolving landscape of DevOps, the paradigm is now shifting - where security is taking the central stage. With vast surface areas including containers, cloud, repositories and third-party components, cyber threats became more prominent than ever before in DevOps.

This presentation will delve into the evolution from traditional DevOps to the advanced usage of artificial intelligence (AI) technologies to automate and optimize the software development and delivery processes. This includes automating code scanning, testing and deployment processes while eliminating the threats in each possible way in the cycle. 

In this session, join Jyotirmayee Pradeep Kumar (Vice President - Cloud DevOps at a well-known global bank) as she unravels the stages of integration of AI at each phase of DevOps. Topics for discussion include:
- Types of AI used in DevOps. 
- Benefits of using AI in DevOps.
- Implementation of AI in DevOps.
- Best practices for using AI in DevOps.
- Eliminating security threats using AI in DevOps.

Security Risks to Consider with AI Integration: AI in DevOps

In a world where the vast majority of cyber attacks leverage access-based methods to gain entry to an organization's resources, how can you be sure your organization remains secure?

This session explores best practices for ensuring all employees have the access they need, while ensuring that access is revoked promptly when they no longer need it. It starts with the reality that most enterprises have grown to large to rely on manual efforts, needing a combination of identity access management tools, implemented appropriately, and includes:
- The importance of creating a role-based access provisioning program that follows employees through their entire organizational lifecycle, from onboarding, through job changes, transfers and eventually, separation from the organization
- Automating and integrating the need for privileged access with the organization's change management process 

Be prepared for a primer in how to get started on this journey and make it successful over the long term.

Stay Safe: Managing Employee Access from Cradle to Grave

Remote and hybrid work remains a mainstay of most work environments post COVID-19 pandemic. Contrary to initial worries, the much-hyped IT security issues that most people dreaded from a remote and hybrid work setting did not adversely impact their organizations. This is due to the robust application of relevant IT governance, risk and compliance or IT GRC frameworks. 

In this presentation, Ralph Villanueva will speak about some of these frameworks, and why weaving them together can act like a protective web around the remote and hybrid IT ecosystem of the organization.

Applying IT GRC Solutions to Remote and Hybrid Work Security Issues

Senior management often has a fundamental question regarding cyberattacks: How would cyberattacks affect our organization?  Business impact analyses (BIA), as they have been performed for decades, are inadequate.  The determination of desired recovery times and recovery points may be meaningless in the face of stolen information and ransomware attacks that reflect what business leaders would like to be done rather than what IT can do.  Moreover, new government rules require analysis and disclosure that necessitate an understanding by executive management of what the impact of a cyberattack would be if an attack were to occur.  This session provides an approach to determining what the impact of a cyberattack would be.

Tune in to this webinar to learn:
- How cyberattacks change the context of BIA.
- What are the potential financial, operational, reputational, regulatory and societal impacts of cyberattacks.
- How to conduct a cyber impact analysis.
- How a cyber impact analysis can drive cyber resilience strategy.

Determining the Impact of Cyberattacks

Ransomware risks has the potency to affect the critical assets of organizations and wreak devastating consequences if left un-checked. This session from consultant and industry thought leader Vincent Amanyi will provide a clear strategy for managing the Ransomware-as-a-Service (RaaS) model effectively to stem better control and establish high entry barrier for cybercriminal.

Key Takeaways
- Understand when to plan and implement ransomware control strategies.
- Definition of process map to incident response plan.
- How to map gap to internal research.

Roadmap to an Iron-Clad Ransomware Defense System

Ransomware continues to be a major source of risk for virtually every industry and vertical in every country. From education, government, and healthcare, to finance, consulting, and manufacturing. For-profit companies are as much a target as not-for-profit. 

The question most CIOs and CISOs are asked by the Board and the Executive Team is, “Are we protected from a ransomware attack?” 

As a security leader, the answer you want to give to that question is, “Yes we are!”

But how do you protect yourself from a ransomware attack? You know you want to do more than have a great 3-2-1 backup strategy. Great backups are table stakes in the ransomware defense playbook. With great backups you can recover quickly from an attack. 

What you really want is to have a way to prevent or at least limit the blast radius if an attack happens. 

A good strategy to reduce the risk of a successful ransomware attack is to implement the family of principals and controls outlined in the NIST Zero Trust Architecture (SP 800-207). 

Remember, the goal of the criminals in a ransomware attack is to steal and encrypt your data. They want to attack the availability leg of our CIA triad, namely the availability of your data. 

In this presentation, industry thought leader John Bruggeman will review the general components of zero trust, review how you can do a readiness assessment that will let you know where you are in your ZT journey, and how a ZT framework reduces your risk of a ransomware attack.

Reinforce Your Data Fortress: How Zero Trust Can Help Reduce Your Risk of a Ransomware Attack

Ransomware attacks are one of the most terrible outcomes of cyber breach. Whether you believe in paying ransom demands or not, you must understand the need for a negotiator in such difficult situation. We will discuss challenges, pitfalls, and factors of success that a ransomware negotiator can bring to crisis.

Key Takeaways:
- Understand components of a ransomware attack.
- Recognize intricacies of ransomware negotiations.
- Avoid mistakes frequently made during ransomware attacks.
- Recognize red flags common during ransomware attacks.

Ransomware Negotiations: Everything You Need to Know

Snippet question: There is a blurring of the lines between CISOs and Chief Data Officers, or CDOs: With the roles of CISOs and Chief Data Officers (CDOs) increasingly overlapping, particularly in the realm of data protection and recent breaches, there can be friction despite a shared goal of safeguarding enterprise assets. Toby, what are some of the things your organization is doing to stay aligned around data security?

Black Hat 2024 Snippet Video with Toby Foss, Senior Director of Information Security, Informatica

Snippet question: How have you managed or improved the relationship with your CDO? Where do you find a win-win?

Black Hat 2024 Snippet Video with Brett Price, Lead Cybersecurity Consultant, vCISO, AccessIT Group

Snippet question: The convergence of data and security - Does the CDO become the new CD+SO?

Black Hat 2024 Snippet Video with Matt Murphy, Lead DevSecOps Engineer & Cyber Security Architect, Beyond Finance

Snippet question: What does LevelBlue’s latest report reveal about how the C-Suite sees cyber resilience?

Black Hat 2024 Snippet Video with Theresa Lanowitz, Chief Evangelist, LevelBlue

Snippet question: What do you predict will be the most significant change in the Application Security (AppSec) space, and what do you see as the biggest challenge for companies striving to reach the next level of maturity?

Black Hat 2024 Snippet Video with Boaz Barzel, Evangelist & Director of Technical Enablement, OX Security

Snippet question: What is the most important thing to know about securing your machine identities?

Black Hat 2024 Snippet Video with Uzi Ailon, VP, DevSecOps Solutions, CyberArk

Snippet question: Given the increasing complexity of the software supply chain, what challenges do you believe cause the most pain when trying to mitigate risks and ensure the integrity and security of not only your application portfolio but also the underlying software factory?

Black Hat 2024 Snippet Video with Joe Nicastro, Field CTO, Legit Security

2024 RSA Highlight Reel - Studios

2024 RSA Highlight Reel - TechTarget Editorial

2024 RSA Highlight Reel - Enterprise Strategy Group

2024 RSA Snippet Video with Rich Vibert, CEO and Co-Founder of Metomic

Identifying and Building the Foundation of a Threat Program

Real-World Applications for Better Security: Adlumin’s Threat Research Insights

Ensuring Threat Intelligence Remains Intelligent

Elevating API Security

Threat Intelligence: The Dark Side of Threat Detection

Cybersecurity Evolved: The Impact of AI and ML on Backup and Recovery

Fast-Track Cloud-Native Investigations: Win the Race Against Bad Actors

Beyond the Horizon: Use AI to Expand Threat Intelligence for Proactive Security

End to End Immutability

The Processes to Deliver Effective Threat Detection and Response

Use AI to outsmart threats and speed operations

Enabling Effective Threat Detection and Response

The National Institutes of Science and Technology recently launched a new version of their cyber security framework, NIST CSF v2.0 to provide both government organizations and private industry a comprehensive set of cyber security guidelines. Better yet, this version can easily be integrated into existing frameworks and tools. 

In this session, Hilton analyst Ralph Villanueva will point out how the newly added governance aspect of this framework can boost the detection, respond and recover capabilities of any organization in the event of a cyber-security incident.

Improve Incident Detection and Response Governance with NIST CSF v2.0

Threat Detection

Incident Detection

Incident Response

Disaster Recovery

Incident Resolution

Governance

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Improve Incident Detection and Response Governance with NIST CSF v2.0

Presented by

About this talk

More from this channel