Agenda

With so many predictions, celebrity threats, and ransomware fiascos, it’s often forgotten that there are key fundamentals of Detection and Response that will help drive significant maturity in your organisation’s infosecurity programs. From knowing what assets and intellectual property you have, who may want it, and how attackers could access it, to what you’re doing as a business to prevent, detect, and respond to threats and breaches. Join Rapid7’s Chief Security Data Scientist, Bob Rudis and Head of Detection and Response for EMEA, Ellis Fincham as they discuss areas where businesses should be focusing their energy to effectively protect their employees and assets. They will also share a few war stories they’ve experienced when this focus lapses! What you will learn:

• How to mitigate common cyber risks and challenges of cloud migration

• Explosion of the edge and the impact of shifting to remote working

• The implications of the growing number of applications to enable workforces and support customers

• Recommendations on what to focus on given the pace of change as you migrate to the cloud

Phil Scully, the CIO at Costa covers the personalisation and payment futures for businesses and identity management.

The future of work remains unpredictable and uncertain. More than ever before, business leaders need to remain confident that their operations can continue securely in the face of global or even regional crises, and while sections of the economy are slowly re-opening, cyber-attackers are ramping up their campaigns.  

As businesses look set to rely on cloud and SaaS tools for the long term, our digital environments are going to be more dynamic than ever. Yet organizations are finding themselves undergoing a delicate balancing act—each new work practice and technology that is introduced also brings unforeseen risk. Static, legacy approaches have become redundant, both unintelligent and ill-equipped to adapt.  

Organizations must rethink their approach to security, and rely on new technologies like AI to achieve much-needed adaptability and resilience. Darktrace is the world leader in cyber AI technology, and leverages unsupervised machine learning to seamlessly adapt and integrate into changing environments, and to detect and respond to attacks in the earliest moments.  

In the face of an uncertain present and future, Cyber AI enables businesses to continue communicating, operating, and innovating.

Andrew Tsonchev

Director of Technology, Darktrace

Andrew is a technical expert on cyber security and advises Darktrace’s strategic customers on advanced threat defense, AI and autonomous response. He has a background in threat analysis and research, and holds a first-class degree in physics from Oxford University and a first-class degree in philosophy from King’s College London. His comments on cyber security and the threat to critical national infrastructure have been reported in international media, including CNBC and the BBC World.

Ransomware is getting worse, and everyone is telling you that you must be prepared, but how? Large enterprises operate 24x7 security operations center – that is not a business option for a small team. Build your own security data lake or deploy a SIEM – we cannot find the people to hire to run them, and if we did, we could not afford it. So what is a small team supposed to do? This presentation will help small teams understand what is essential and offer paths forward to build a more robust cyber security program. Topics covered include:

• The five critical items you need to do now to protect your organization from ransomware attacks

• The strengths and weaknesses of endpoint and network security and where each fit in your defense.

• Emerging services models to boost your defenses, including software as a service, managed security services, and managed detection and response

For mid-and small-sized businesses with limited resources, this webinar will help define what is important and how to better protect your organization.

APIs will account for 90% of attack surface area for web applications this year1. Developers and attackers gravitate towards APIs for similar reasons: they’re flexible, suited for automation, and exchange critical data. As API footprint and functionality grows, so does their appeal to attackers. Proactive API protection must be a key priority in your application security strategy. Security experts Jimmy Mesta and Rob Gibson will demonstrate tactics to stop four common API threats: - Account takeover (ATO) - Enumeration - Content scraping and probing - HTTP verb tampering

– How both spies and social engineers work similarly to target you and your employees to gain access to your organization’s most sensitive data
– How your employees may unintentionally be insider threats
– Unique techniques foreign intelligence officers (spies) and social engineers use
– What motivations and vulnerabilities you have that can leave your company vulnerable
– Why managing the entirety of the employee lifecycle is important to mitigating insider threats
– How your company’s culture can affect insider threat

 If you’re like most organizations, you are heavily invested in the right set of security tools to help you keep ahead of rapidly evolving threats and compliance requirements. However, managing those tools is incredibly complex and time-consuming. How are you able to see coverage gaps with the security tools you are using? How do you know if the tools you have implemented are actually doing what you and your customers think they should be doing? What you need is a single solution that continuously monitors and reports on your security controls that can be easily managed from a single interface, integrates with your cybersecurity tools, and maps to the standards and frameworks that matter to your business.

Join Shimon Becker, VP Product and Co-Founder Cyber Observer, to gain insight into how Cyber Observer with Continuous Controls Monitoring (CCM) empowers you to establish a measurable benchmark of cyber hygiene, continuously close critical security gaps, and advance your cybersecurity posture.