Topic: Information Security

Seminar Topics

Talent by Design: The Cybersecurity Workforce Lifecycle and Challenge

  Presented by Cloud Security Alliance North Texas Chapter

Cloud security and the evolving cybersecurity technologies require different skill sets than 15 years ago. Many companies and leaders talk about the talent shortage, skills gap, and necessity for the right kind of training for the right kind of talent.

People who are earning cross-certifications that combine skills – such as the Certified Cloud Security Professional (CCSP) co-created by (ISC)² and Cloud Security Alliance – are seeing a big boost in pay. If you have those skills, you’re in a good position to command those higher salaries.

But what steps can we as the industry take to bring our community closer together to build the foundation early and have a starting point for new entrants – whether just out of college, coming out of a specialized program, out of the military, etc.

During this session, dynamic experts will share ideas on how we can leverage all the education, mentorship programs, and training and leadership skills-based workshops available to better contribute to the workforce in an evolving cybersecurity landscape.

You Are No Longer Forgotten: The Small Business Security Challenge

  Presented by Chris Roberts • HillBilly Hit Squad

Most of the security industry is chasing “around” 31,000 larger enterprise sized companies for their business. The list is well known, circulated and targets are on the backs of ALL the C-Suite, most of the technical folks and the MSP/VARS that support them. The Security industry circles them like packs of hyena or vultures waiting for one of them to fall, get breached, or for a vendor to be thrown out… pouncing on the fresh kill with glee…

Meanwhile, you’re sitting there getting slaughtered by every adversary known to mankind because you ARE the forgotten, you’re too small for the multi-billion $$ cyber companies whom IF they decide to deal with you will flood you with MSA’s, SOW’s and NDA’s that would take a week’s worth of lawyer time JUST to understand, let alone realize that they’re not accountable for anything, unlikely to want to support you and in all honestly you’ll get a 1-800-YOU-AREN’T-SPECIAL number as your sole source of support.

We’re going to address the current situation, the state of play, and give you some thoughts, suggestions, ideas AND plans. We’ll provide resources on HOW to evaluate, where to look, what to do AND importantly we’ll do it because it’s what we’re doing. We live, breath and deal with this daily. We’ve sat in the meetings when the large cybersecurity companies state, “we’re done dealing with the SMB market” and we’ve got the battle scars from dealing with those subsequent consequences.

Enduring from Home: COVID-19’s Impact on Business Security

  Presented by Malwarebytes

All of us are living in the new Work from Home normal caused by the rapid transmission and spread of COVID-19. While people everywhere have been worried about stopping the spread of COVID, malicious threats have not only continued to propagate but they have exploded in new and interesting ways. During this presentation we will review some of the more creative ways hackers have targeted business and individuals during the age of Work from Home and some ways to protect yourself from them.

Automating the Analyst

  Presented by Darktrace

Alongside the rise of today’s dynamic workforce, the speed and scale of sophisticated cyber-attacks is rapidly increasing. As the cybersecurity industry continues to endure an ongoing skills shortage, over-worked and under-resourced teams urgently need augmentation in order to defend against evolving, sophisticated threats.

For over three years, Darktrace experts have been working to meet this challenge, investigating whether they could teach AI to think like a cybersecurity analyst. It takes subtle, nuanced skills and implicit knowledge for an analyst to detect genuinely threatening activity, and the creation of the world-first Cyber AI Analyst took analyzing over one hundred of the world’s top threat analysts and complex machine learning algorithms.

Staying Secure While Working from Home

  Presented by Trend Micro

Working from home has become almost ubiquitous in these times of COVID-19. Quarantining your devices while away from the office is not an acceptable solution to the many risks that exist outside of your corporate network. Please join Trend Micro to discuss the many ways you can help ensure that working from home does not compromise the security posture of your organization.

Responsible Administration: The Admin Insider (Threat)

  Presented by One Identity

System Administrators are critical people to every organization. They design, build, and maintain all the parts and pieces that enable business, whether that’s retail, healthcare, or even a government agency. Ensuring sysadmin tasks are performed as securely as possible without hampering their ability to keep our business running is a delicate balance. These “insiders” not only know how the systems operate but have the credentials and privileges to operate them.

In this session, we will demonstrate an Active Directory breach using pass-the-hash and discuss ways to enable the System Administrators to operate in a way that not only protects the business from threats but also enables them to perform the intricate tasks they accomplish daily to keep business flowing under the covers.

Own Your Data

  Presented by Commvault

Take ownership of data that already belongs to you.

Today organizations are storing their corporate data across multiple locations and platforms. On prem data centers, co-lo facilities, hybrid/multi cloud, SaaS and endpoint devices. With company data being so widely dispersed it’s difficult to know if you have full visibility, access and the flexibility to move data and workloads across locations and platforms. Protecting your data is only one component to maintaining ownership of your data. Along with having a robust data protection platform for on prem data you would also need the same level of control/protection of data assets that live outside the data center.

To truly own your data you must:

  • Protect and secure your data regardless of location or platform
  • Have access to it all
  • Have the tools to move your data/workloads where it makes sense for the business today and the flexibility adjust as business circumstances change.
    (On-Prem, hybrid/multi cloud, SaaS)
  • Have insight into your data, not only to understand the “what and where” but to provide governance and compliance

We will discuss what this all means and why you should rethink your approach to data management.

2020 Aftermath and Beyond: Top Focus Areas on Cybersecurity, Privacy and Business Risk

  Presented by INTERFACE Advisory Council

2020 has been a transformational year. The COVID-19 pandemic certainly has made a big impact and expedited our business-IT efforts in different areas within our organizations. Cybersecurity, privacy, business risk received more attention from leadership. So, what happened and what is next? Join to our highly distinguished panel for an engaging discussion and walk away with valuable insight on top focus areas that every business executive needs to know and be prepared for in this coming year.

Moderated by:

Tolgay Kizilelma PhD. • Chief Information Security Officer, UC Merced

Panelists:

Jack Freund PhD. • Head of Cyber Risk Methodology, VisibleRisk

Jimmy Sanders • Head of Information Security, Netflix

Melissa Bendana • Information Security, Governance and Risk Management, Blue Shield of CA

Rand Morimoto PhD. • CISSP, Convergent Computing

Read more
about our Moderator and Panelists >>

Adding Anomaly Detection to Your Secure Access Strategy

  Presented by Cisco

Security analytics are a double-edged sword: while the information they provide can be vital to identify potential issues or anomalies before they become problems, the quantity of data collected, and alerts generated can overwhelm even the most experienced security team. As an admin, you want to efficiently focus on the likely risks and remediate them. How can we best filter the noise of routine authentications and highlight anomalous logins that may require attention? Join Cisco’s Ted Kietzman to explore anomaly detection and secure access.

Zero Trust and the Flaming Sword of Justice

  Presented by Cisco

Security breaches pervade the headlines. What was seen as a rare instance just 5 years ago now seems to occupy the daily news cycle. A lot of these data breaches are made possible due to missteps and misconfigurations. There are many security issues introduced into website authentication mechanisms that further compound the security issues in addition to enforcing bad behavior by the end users. Security debt is a real problem for the vast majority of organizations in the world today and the attackers will utilize this to their advantage. In addition to keeping system hygiene at the front of the mind, defenders need to focus on proper network zone segmentation or, as it is a more popular term these days, zero-trust networks. The old conceptual style of a castle wall and moat to defend a network was deprecated several years ago. As a result of the dissolution of the traditional perimeter, a stronger focus has to be placed on the strength of authentication, authorization, and trust models for the users.

The antiquated notion of an information security practitioner running through the office brandishing their flaming sword of justice above their heads screaming “thou shall not pass” has at long last reached the denouement. Whether you are responsible for the security in a financial organization or one that makes teddy bears it is necessary to adapt and learn to trust, but verify.”