Presented by
Array
About this talk
Privileged access management is a cornerstone of security. Permissive access is just what the cyber criminals are looking to gain and exploit, or what can accidentally be misused and cause significant damage.
In this session, Peter Crumpton (Information Security Manager at NFU Mutual) shares a case study of an organisation's journey from recognising the exposure and risk associated, to defining a target operating model‘, gaining funding and implementing improvements to move closer to the goal of least privilege and zero trust. As with most companies, there is a mix of on-premise and cloud SAAS, PAAS, IAAS, with new and legacy technology, so the answers are not uniform.
Join the session to discover:
- The journey from recognising a gap in control and understanding the risk it presents to designing the programmes of work to address it.
- Key lessons learned from implementing planning and improvements.
- How to deal with the mixture of technology and legacy products to optimize privileged access security.
- And more...
About the Speaker
Peter is a passionate and dedicated security manager, he strongly believes in the sharing of information and approaches to help each other and the industry progress, to protect ourselves against the common threats we face. He started by implementing an ISMS to comply with ISO27001, and grew into all aspects of information security management over more than 15 years working in various industries such as government, telecoms and finance sectors, implementing risk management and control effective across the organisations. He holds CISSP, CISM and CRISC certifications.
