Inside Threat Trends and Security Strategies APAC

Organizations face a constant barrage of cyber threats that could lead to business disruption, intellectual property theft, and reputation damage. But preventing such attacks has become increasingly challenging due to business factors like supporting the remote worker population, connecting IT to third-party partners, and developing new types of applications for digital transformation.

How can CISOs balance the need for aggressive IT initiatives for business enablement while managing and mitigating cyber risk? ESG Senior Principal Analyst and Fellow, Jon Oltsik, will discuss best practices for cyber-threat and breach prevention that can protect and support the business.

At present, Insider threat issues are a significant risk to organizations. In this talk, I will cover the methods of educating employees on mitigating risks from insider threats.

Key Take-Away:
• Insider Threat and Types?
• Indicators of Insider Threats
• Mitigation Techniques to prevent Insider Threats

According to a report from ESG, adopting a Zero Trust Segmentation can save more than $20 million in app downtime, averts 5 cyber disaster and accelerates 14 digital transformation projects. As organisations struggle to do more with less, and build their security architecture with the post COVID world in mind, there is increased focus on delivering a Zero Trust environment, and doing so cost effectively while consolidating vendors.

In this discussion, we will explore how your organization can:
1) Implement a Zero Trust architecture
2) Improve Governance, Risk and Compliance while focusing on cost control.

Cybersecurity has not only become a regular boardroom topic, but may soon be a requirement. If proposed SEC legislation takes hold, all publicly traded companies must have a process in place to disclose cybersecurity incidents and more importantly, must actively identify and manage cybersecurity risks with board of directors’ oversight. This legislation will likely have a trickle-down effect on many private companies as well.

While some organizations have already undergone this journey, we expect that numerous companies are late to the party and haven’t begun to determine what this change means for them. This session will help you develop a game plan to right-size security for your organization by addressing the following key issues:

• Who should fill this role?
• Where to start?
• The art of incident response and reporting.
• What are some of the functionalities the SEC will be looking to include:
o Controls to prevent unauthorized access
o Monitoring
o Measures to detect, mitigate, and remediate cybersecurity threats
o Third-party risk management
• Coordination with legal counsel and financial advisors.