Complete Cloud Security

As organizations move to the cloud to reach new heights of productivity and to better serve customers, their security infrastructure is under pressure to reduce risk. Companies face the challenge of securing an ever-changing attack surface across multiple cloud-native applications components including APIs, containers, VMs, serverless functions and open source software. As development teams grow and achieve faster release cycles, companies must scale security with the volume of releases while teams are vastly outnumbered.

Learn more about key trends and best practices to face the current challenges and manage cloud-security risk in this keynote session.

According to Statista, a global market and consumer data provider, between 2021 and 2023, the percentage of organizations adopting a multi-cloud strategy will grow for midsize companies from 76% to 84%, and for large enterprises from 90% to 94%.

Cloud providers offer many security monitoring and threat detection options, but what if you subscribe to more than one? Adopting security monitoring tools from each provider can increase complexity and bring significant overhead to security operations teams.

For years, security information and Event Management (SIEM) solutions have been collecting and consolidating data from multiple sources for centralized threat detection. Still, multi-cloud brings a new scenario with different data sources, higher volumes, and unknown threats. How does SIEM have to evolve to adapt to this new reality?

Join Augusto Barros, VP of Solutions and Cybersecurity evangelist, and Brian Robertson, Senior Product Marketing Manager at Securonix, to learn about:

· Why is it hard to perform security monitoring in a multi-cloud scenario?
· What are the limitations of traditional SIEMs to support multi-cloud needs?
· What do you need to look for in a new approach and architecture that enables the SIEM to be the right solution to detect threats in a multi-cloud world?

Speakers:
Augusto Barros was most recently the Research VP in the Gartner for Technical Professionals (GTP) Security and Risk Management group. He has over 20 years of experience in the IT security industry as an analyst and a security architect and officer for large enterprises.

Brian Robertson has over 20 years of experience helping organizations solve critical application delivery, network, cloud, and security challenges working with industry leaders who not only are looking at the challenges of today but are looking at the horizon for the challenges of tomorrow.

Secure access to cloud is broken. By now, you must already know that the traditional VPNs are the weakest links when it comes to secure access into your mission critical infrastructure. This is due to two fundamental flaws.

VPN aka virtual private network, as it suggests, provides a virtual network extension over a secure link. That means, if the endpoint that is connecting over the VPN, is compromised, an attacker can gain secure access your infrastructure.

Once insider your network, the intruder now has the license to roam within the subnet/VLAN and, unless you have an error free setup, perhaps the intruder has the license to roam across the enterprise.

Time and again, we have witnessed VPNs being exploited by the adversaries and, if you want to stay protected, please ensure that you get off the traditional VPN train first.

The modern-day alternative to VPNs is called Zero Trust Network Access (ZTNA). However, the ZTNA solutions lack end to end segmentation. That means, if the attacker somehow gains access to one of your hosts over ZTNA, the attacker will then be able to roam laterally withing your organization. This is the predominant way for Ransomware to spread and compromise most of your assets.

What you need is a combination of modern Secure Access technology coupled with an agentless micro-segmentation solution and a potent incident response tool.

This will be the focus of our session. In this session, you’d learn how to
• Provision agentless segmentation at scale across your organization for all your assets – TV, Toaster, Laptops, VMs, Servers, and even containers
• Gain end-to-end visibility and control for all traffic
• Secure high value assets distributed across your organization
• Deploy a Ransomware Kill Switch™ that prevents ransomware spread

Forcepoint ONE is the answer to the problem you don’t know you have – a converged cloud security platform that brings together CASB, SWG and ZTNA services. So what is the problem? In a word, complexity – Complexity caused by access to hundreds, sometimes thousands of clouds apps. Complexity caused by your people being everywhere and using multiple devices. Complexity caused by disparate security products, creating gaps and overburdening IT.

In this webinar, VP of SSE platforms Shane Moore, is joined by Consulting Solutions Engineer Nick d’Amato, to take a problem first approach; breaking down the key security challenges your business faces and exploring the key areas of risk created by your people as they simply go about getting their work done.

By demoing key risky activities, they will show how to:

- Prevent sensitive cloud data misuse when accessed by unmanaged devices.
- Safeguard company data on trusted devices.
- Provide Zero Trust access to company apps for the home user.
- Plus share a high-level overview of the Forcepoint ONE platform.

Join us and see how you can beat complexity and simplify your security.

John Christly, VP and CISO at Core Business Solutions joins BrightTalk to discuss some best practices as it relates to protecting your systems and data in the cloud. As more and more companies seek to migrate to the cloud and as data breaches and issues such as ransomware continue to create havoc for companies, the need to protect these systems becomes a major issue that needs careful consideration.

This session will explore solutions to this challenge and offer some best practices that should be deployed to give you, your company, and your customers better piece of mind.

Cloud adoption has witnessed exponential growth over the past few years. It provides many advantages for both individuals and organizations.

However, at the same time, many new cyber security risks have arisen due to this rapid growth of cloud adoption. These new security risks can be mitigated by adhering to cloud adoption good practices. One of those steps is monitoring the cloud entities once the workloads have been deployed. Unfortunately, this is perhaps the most overlooked aspect of cloud security, thus enabling Threat Actors to launch Cyber Attacks against deployed workloads.

In this presentation we will discuss:

• Importance of monitoring your cloud entities
• How cloud monitoring helps with threat detection
• Steps to keep cloud entities safe

Threats have changed over the years and so have the targets. It’s not just your perimeter that is at risk, it’s your customers, your supply chain, your employees and your business reputation that could be easily tarnished with just one breach. In this session, we’ll cover how and why you should consider an integrated approach to IT security, with an ecosystem of vendors that work together for the greater good. One solution will not solve all the threats, a layered approach is better but deep integration with the sharing of threat data at speed is a modern necessity.

In the session we will cover:

• How to look at an integrated approach to IT security.
• Why a layered approach is good but integrated is better.
• Integrations and Mimecast 1+1=3

Cloud Security Operations teams have a multitude of responsibilities, including vulnerability management, threat management, security and infrastructure configuration and management, as well as incident response. Clearly, they need modern tools to help them manage and make sense of the volume of data and work across their complex environments. However, the fractured and disconnect enterprise security ecosystem makes this difficult or impossible in most environments.

Zero Trust security brings with it the possibility of applying a holistic and unified policy model across these heterogeneous environments. Zero Trust has become mainstream, even being mandated by the recent US Presidential executive statement ordering such an approach for US government agencies. So, how does Zero Trust apply to cloud SecOps environments?

In this fireside chat, two industry experts share their thoughts and insights on this topic. Attendees will learn:

• What is Zero Trust, and how does it apply to Cloud SecOps?
• Why automation is critical to a successful Zero Trust program, and even more important for Cloud SecOps
• Why Zero Trust policies are so important in cloud environments
• Ways in which workload metadata and user attributes are used in Zero Trust policies
• How organizations can implement “security as code” with a Zero Trust approach

Attack surfaces are growing due to cloud migrations and widespread outsourcing. But security teams don’t know where they’re vulnerable—and can’t keep up with emerging threats in their supply chain. Watch this recording of HackerOne’s CISO, Chris Evans, to learn how ethical hackers help security teams gain control, even in the most highly regulated industries.

Chris provides expert context for the findings in the latest Hacker-Powered Security Report: Industry Insights. Watch the session to:

Understand how you can use the report to reduce your application exploitability
Find out how and why the OWASP Top 10 vulnerabilities are changing—and what that means for your security priorities
Learn which strategies work best for your industry, based on data from HackerOne’s global customers
Get your questions about application security, vulnerabilities, and bug bounty trends answered by an industry veteran

It's no longer news that we need to support and secure increasingly distributed organizations. As companies look for long-term solutions for their hybrid and fully remote workforces, one thing is clear - identity is the new perimeter for businesses today. An identity-first approach to security reduces today's cybersecurity risks and provides the foundation for a zero trust security strategy. A modern Identity solution can also help you tie the complexities of protecting people and assets together in a seamless way.

Join this session to learn:

• How to enable and secure a hybrid workforce
• How identity can lay the foundation for any zero trust security initiative
• What zero trust projects your peers are thinking about now and into the next 12-18 months

Considering how much—and frequently—security shifts in the customer landscape, we believe Identity Management is at the epicenter of digital transformation and the next generation of enterprise IT. The changes in identity systems and services over the next five years are expected to be as disruptive as the new business models, applications and ecosystems they are supporting.

In our presentation we will look ahead to the future of identity & access management, talk about specific projections as to where we believe Identity Management will be going over the next five years and describe a model for identity abstraction that provides an extensible services oriented architecture. We include newer disruptive models such as DevOps/microservices in identity systems, cloud-based IAM, self-sovereign identity leveraging blockchain, IoT support, evolving privacy regulations, and new governance and provisioning models.

It's no longer news that we need to support and secure increasingly distributed organizations. As companies look for long-term solutions for their hybrid and fully remote workforces, one thing is clear - identity is the new perimeter for businesses today. An identity-first approach to security reduces today's cybersecurity risks and provides the foundation for a zero trust security strategy. A modern Identity solution can also help you tie the complexities of protecting people and assets together in a seamless way.

Join this session to learn:

• How to enable and secure a hybrid workforce
• How identity can lay the foundation for any zero trust security initiative
• What zero trust projects your peers are thinking about now and into the next 12-18 months

How do you extend your current identity provider to connect to multi-cloud environments? How do you use your current user store to single sign-on (SSO) into private servers?

We all know that SAML lets you single sign-on to SaaS apps. But how do you extend those same enterprise identities to securely connect and SSO into sensitive resources such as production servers, remote desktops (RDP), terminals (SSH), databases (SQL) and homegrown web apps?

Join this session to learn:
• Why identity based access policies are key to securing access for any user
• How Zero Trust Network Access (ZTNA) architectures tighten enterprise security
• Privileged access management (PAM) for DevOps access to multi-cloud
• Perks of ZTNA for BYOD and third parties
• Operational and auditing efficiencies offered by ZTNA for private access

Stay one step ahead with the latest innovations in secure multi-cloud access!