CISO Strategies (APAC Edition)

New strains of ransomware are leaving organizations vulnerable and show no sign of slowing down, security teams lack the ability to respond proportionately to an attack, leading to cyber disruption across the organization. This can affect all industries including manufacturing, critical infrastructure, healthcare, or any organization like yours and mine. Join this session to unpack some of 2022 most advanced ransomware threats and their behavior. Also, you can learn how to deploy Agentless Zero Trust Segmentation can fix network flaws from the core for connected OT/IT/IoT and stop lateral threat movement in every stage of the Cyber Kill Chain. If you have concerns about Zero-Day ransomware exploits or are assigned with Zero Trust initiatives, don’t miss this opportunity to learn how you can take autonomous action with 24/7 availability to stop the threat on its track.

This presentation will discuss:
• Recent ransomware threat trends, including double extortion and RDP attacks in OT and ICS
• How Autonomous Response takes DEFCON action to contain an emerging zero-day attack in rea time with Zero Trust policy enforcement
• Fortune 500 manufacturing and ODM subcontractor case studies on how to segment IT and OT networks with Zero Trust agentless segmentation

About Airgap Networks
Airgap is the only vendor that offers an agentless segmentation solution that protects your organization against ransomware threats. Airgap's "Ransomware Kill Switch" is the most potent ransomware response for the IT organization. And Airgap’s Zero Trust access controls protect enterprise’s high value assets against cyber threats. Proven and specially designed to protect Manufacturing, Healthcare, and Critical Infrastructure, Airgap Security Platform is the easiest to implement and manage. https://airgap.io

Advent of 5G is bringing internet technologies to the forefront and more prominence. Turbulent world events are being exploited more and more by hackers all around the world. Hacking is being weaponized and also being looked as a means for monetary gains. In this vulnerable world, how do you chalk out your course for making your platforms and managed services secure. This webcast will provide pragmatic strategies and approaches for this while minimizing your risk to minimum.

Join our global panel of experts to discuss the current and emerging threat landscape. Are you ready?

• Is your organisation ready to fend off ransomware or social engineering?
• Do you understand common misconceptions about Cloud Security?
• And, how will you stay ahead of the curve now and in the future?

The cyber security threat landscape changes fast, which makes it challenging for organizations to keep on top of the latest trends. Today, barely a day goes by that there isn’t a major attack on a well-known organization somewhere in the world.

We have moved from viruses and worms in the early 2000’s, to botnets and cyber weapons like Stuxnet around 2012, and now we are facing a huge rise in new threats such as next generation DDoS attacks that impact the availability and serviceability of organizations. Ransomware as a service which affects all segments in markets including FSI, Health, Education and Utility companies. Sophisticated Social Engineering attacks that take advantage of global events alongside nation-state-sponsored attacks, organized crime, hacktivists, and disgruntled insiders or angry customers.

Join Yaniv Hoffman, Radware VP of Sales APJ and Ken Toh, Radware Regional Director, ASEAN region with our special group of senior panellists from around the region Mr Kempei Fukuda, the NTT Global Head of Cloud, Mr Hung Huy Khong, the Vice Chairman of Vietnam Information Security Association and Mr Greg Sawyer, the Interim CEO, The Council of Australasian University Directors of Information Technology as we discuss the current and emerging threat landscape.

The cloud and remote work have removed traditional security boundaries. As a CISO, the responsibility rests squarely on your shoulders to prevent compromise, lateral movement of attacks, and data loss. A zero trust approach to your overall security provides the right strategic architecture in place to minimise risk and provide business agility. This session will cover:. 
* The need for organisations to shift to zero trust 

* Aligning a zero trust strategy to business objectives

* Solution building blocks of zero trust

* Deployment roadmap to achieve zero trust

Insider threats continue to be a significant — yet frequently overlooked — cybersecurity threat within organisations. In fact, in the past two years, insider threat incidents increased by 44%, and the annual cost of those threats increased from $11.45 million to $15.38 million.1

Insider threat risks are clearly an area that organisations cannot afford to ignore. So how can you enhance your cybersecurity measures to protect both users and the organisation as a whole.

Join our Proofpoint cybersecurity experts in this live webinar as they review the results of the new 2022 Cost of Insider Threats Global Report and get insights into what the data means for your organisation.

You will learn:
• How to recognise the three insider threat profiles, and why they’re trending up
• The impact of the increase in the number of days required to contain an insider threat incident
• Which industries are being targeted the most (and why)
• How organisations can potentially save millions by implementing a dedicated, people-centric Insider Threat Management program

We all know that password is the most basic and most popular approach towards securing our devices and applications. Can using passwords alone make us secure? In the current evolving cyber threat scenarios in a world where Zero-day threats are becoming the new reality, having even a strong password is not adequate. So, what are various authentication technologies available to secure our IT Infrastructure? “Passwordless Authentication” is a new buzz in this arena.

_______

Bio: Saurabh Sharma is Chief Information Security Officer (CISO) with Petronet LNG Limited. Prior to joining Petronet LNG, he worked with TCS. He has around 18 years of industry experience. His research interests include Cyber Security, Software Development, Project Management. He is a registered PRINCE2 practitioner, EC- Council Certified Security Analyst (ECSA), Certified Ethical hacker (CEH).

He received B. Tech (IT) from IP University and did MBA in IT Management from Jaipur National University. He is Chartered Engineer (CEng(I)), Fellow at Intuition of Engineers (FIE), Senior Member of IEEE, Life Member of Computer Society of India, Member of Association of Computing Machinery (ACM).

Attending this presentation will help you ensure security is the foundation of your strategy and create a multi-cloud that increases your flexibility without making you vulnerable to cyber threats. Because, if your organization wishes to keep assets and data safe in the cloud, multi-cloud security cannot be an afterthought!

The term Multi-cloud refers to when a single organization uses more than one public cloud service provider. Multi-cloud is growing in popularity as companies continue to explore the benefits of working with more than one provider. While multi-cloud offers numerous advantages, relying on multiple vendors and clouds also increases the attack surface and overall risk. But it doesn't have to be!

In this presentation you will be introduced to multi-cloud security and the unique security challenges of this cloud computing approach. I will also speak about the best practices you can apply to design and maintain a safe multi-cloud setup.

Your security team manages risks that affect business units and functions across your entire organization. Security is threaded through every aspect of your business, and your decisions have never mattered more. On a daily basis, you make decisions that affect day-to-day operations, data and system security, executive-level strategy and direction and quite possibly, the future success of your organization. Security leaders straddle the lines of executive, strategic, and tactical decision making, and must be experts at navigating all three of these levels. We're wearing many hats, often switching between them from meeting to meeting, and it's imperative that we can effectively communicate and drive decisions that improve and mature our security efforts across the board.

This session will explore ways to enhance engagement with technical teams, business units and executives alike, while still maturing your security program to be more efficient and effective at managing and mitigating risk. Concepts and topics covered will include:

• The 3 levels of decision making you must navigate on a daily basis and how they impact the rest of the organization
• Applying meaningful metrics to demonstrate value to executives and mature program operations for optimal effectiveness
Finding program gaps where remediation efforts or SLA compliance is lagging, and taking steps to help affected teams improve and succeed
• An example use case from Tenable in how these aligned metrics can demonstrate tangible business value at all levels of the organization

IDC predicts that by the end of 2022, half of the Asia/Pacific economy will be based on or influenced by digital technologies. As a result, organisations will increase leverage of digital technologies to address the rapidly evolving needs of hybrid work, consistent customer experiences and operational autonomy.

Identity management solutions have become the cornerstone to manage user identities better. Identity security was the top area of focus for more than 40% of organisations surveyed in IDC's Asia/Pacific Security Services Survey across 879 organisations in the Asia/Pacific region. Although most enterprises have already implemented low-hanging opportunistic and incremental technologies such as multifactor authentication, about 80% of enterprises intend to continue to retain or increase their spending in advanced authentication/multifactor authentication during 2022. Join us in a session to discover where further gains are expected to bear fruit, and what IDC's expectations on the shift to cloud identity services will look like in the next 5 years.

The Role of the Chief Information Security Officer especially in Gen-Z / Digital enterprises (companies usually born out of the cloud, not more than a decade ago, possibly experiencing a growth spurt) is evolving swiftly. While the CISO still carries the burden of expectations inherited from legacy regulations, standard compliance obligations, and customers on tenterhooks; the path to security is now paved with greater dangers of a wider threat landscape, easily accessible attack vectors, and technology that's developing faster than it can be secured. Today's CISO needs to relook at the strategy to secure this dynamic technology arena which seems to have no boundaries, no trust, and tools that are dime a dozen.

So how does the CISO do it? How does he not give in to the ultimate FUD (Fear, Uncertainty, and Doubt)? Does the solution lie in tools? people? technology?

Here's a set of simple, back-to-basics refreshers on what the CISO needs to REALLY focus on, to sustain, survive and secure the fort.