• How to determine the best fit for TI in your organization
• Where to find or how to create actionable threat intelligence
• How to use threat intelligence to reduce false positives and gain insight to prioritize your team’s efforts - regardless of your team size
• How threat intelligence can fuel automation and orchestration when you don’t have a dedicated TI team
• How to manage risk with strategic intelligence and enable proactive threat hunting

But organizations can still win the war with the right technology on their side. Deploying solutions designed to combat Ransomware in parallel with a comprehensive company-wide strategy can go a long way to reduce the risk of a Ransomware attack. 

Join us for this webinar as we share the results of this independent research conducted by IDC and discuss:
• What return on investment a typical organization can expect from implementing the RSA Archer business risk management suite
• Identify the components of return on investment they can expect from a mature program implementation
• Hear examples of the many tangible and intangible benefits these organizations are deriving from their RSA Archer investment.

We’ve seen it happen too many times. An employee has too much on their plate for one day so they need to take work home with them. Unfortunately, the files they need to work on are confidential or otherwise protected on the network so the employee just copies them to a thumb drive. An executive might take confidential data home for non-malicious reasons. For goodness sake – if the CIA can fall victim to a non-malicious insider attack by its director, anyone can. But not all inside attacks are accidental or non-malicious. This 20/20 webcast looks at techniques you can use to identify insider attacks and distinguish a malicious attack from a non-malicious one.

Join Jon Oltsik, Senior Principal Analyst at the Enterprise Strategic Group, as he shares his observations around how organizations are rethinking processes and solutions for security incident response using automation. Listen as he outlines the essential capabilities for an effective enterprise threat response architecture and sheds light on:

·  Why incident response automation projects are finally making CISOs’ short lists

·  Why Incident response is “growing up”, leaving behind manual processes and home-grown software

·  The essential functionality for an effective enterprise security response platform

·  The future: Moving from reactive to proactive incident response

We’ve seen the damage a DDoS attack can do. A variety of major web sites have been taken to their knees due to the new techniques attackers are using to crash even well-defended sites. Today’s 20/20 looks at some of these modern attacks, discuss how they work, and why some organizations are better able to defend against them than others.

There are a lot of upsides to migrating firewalls – better performance, enhanced features, more unified security – but the actual process of moving data from one firewall to the other isn’t one of them.Before you migrate your next firewall – attend this webinar from Tim Woods, FireMon VP of Customer Technology. He’ll outline the best practices you should follow to ensure a smooth, efficient firewall migration that doesn’t disrupt performance or security.

Learn how Identity serves as the foundation for IoT security, and how Public Key Infrastructure (PKI) provides a scalable way for IoT devices, platforms, and applications to achieve security and data integrity.

IoT is a disruptive force. With its proliferation in critical infrastructure and equipment comes advanced levels of risk, capable of taking down companies and services, and affecting the lives of many. Securing these devices and your IoT infrastructure is a critical step, best addressed at project onset to ensure success and sustainability. The sheer volume of IoT devices can make that a formidable task though.

SIEM has been a cornerstone of cyber security for years, but its future as a stand-alone product might well be in question. As advanced threat intelligence platforms, search engines and other advanced tools come to market, we might well be seeing a consolidation in how tools are packaged and marketed.

Data-driven security is the future, but alarm fatigue and data overload continue to hold Security Operations teams back. Fortunately, there are some easy ways to organize and correlate data so you can simplify the threat hunting process and free up your resources to better detect, respond and neutralize advanced threats. 

In this webcast, Greg Foss, security architect at LogRhythm, and Chris Berninger, seniority systems engineer at Carbon Black, discuss how to proactively search for and detect threats in your network.

You’ll learn:

·    To use endpoint data to gain visibility into your network and understand what’s really going on

·    How LogRhythm SmartResponse can help orchestrate security operations

·    Threat hunting techniques using Carbon Black within LogRhythm

Register for this webcast to discover how to use insights from endpoint data to best protect your organizations from advanced attacks.

It’s the biggest vulnerability of 2015 that didn’t get a brand name. The deserialization vulnerability in the Apache Commons Collections library that resulted in the patching of nearly every major commercial and open source web server also impacted the build server that powers most software developers and a half dozen other key pieces of the shared Java software infrastructure. But the failure of secure coding that resulted in this vulnerability isn’t isolated to a single open source library, and the faulty coding technique used is more widespread than you might guess.

This presentation reviews data from over 200,000 application security scans to help defenders better understand the risk of Java deserialization vulnerabilities, starting with the likelihood that they’ll see one. We look at vulnerability prevalence both overall and by industry vertical, the probability that your application has a similar vulnerability (hint: higher than you’d think) and the challenge of securing applications in the most commonly used software language. We’ll also talk about options and challenges for addressing deserialization vulnerabilities across large numbers of applications, looking at real world guidance for setting security policies and coordinating with developers to get issues fixed.

While many organizations have technical testing performed a couple of times a year for a number of reasons: such as identifying network vulnerabilities or satisfying industry compliance requirements, the results and lessons learned are typically limited. However, wouldn’t it be nice to see what tactics and techniques some of the most skilled testers out there are utilizing across all industries in all different levels of scope? Think of it as opportunity to learn from the good guys simulating the bad guys without having to have it done to your organization.

Join this webcast and hear from some of SecureWorks most skilled technical testers, Nate Drier and Trenton Ivey, who will talk about lessons learned from some of their most challenging engagements and the trends they are seeing with clients and their defense practices.

Key topics covered include:

- Examples of real-world engagements

- Tactics and techniques commonly used to achieve their objectives

- Trends and weaknesses they are seeing in defenses

The results - Enterprise spending to protect data is up sharply, compliance requirements as well as data privacy and security regulations keep increasing, but the breaches still keep coming.  In this webinar Garrett Bekker, Principle Analyst for Information Security at 451 Research, reviews the detailed findings of the just released 2017 Thales Data Threat Report about data threats that enterprises are experiencing, what they are doing to secure their data today, and moves on to actionable recommendations that enterprises can use today to secure their sensitive data from internal and external threats.

We hear a lot of talk about threat intelligence and about how important it is to implement it, but we don’t get a lot of useful guidance on how a company that has yet to employ the technology can integrate it into an existing network. It is not sufficient to generate reports that have nuggets of crucial data mixed amongst the noise of network activity. You need to have staff that can analyze these reports and identify the crucial data, along with technology that makes it easier for crucial data to stand out.

Distributed denial of service attacks are one of the most common types of attacks used by those who are not interested in stealth but rather simply causing a web site extreme grief. This 20/20 webcast looks at the state of the DDoS market, some of the factors that are causing it to expand and some recommendations for companies to defend against these attacks.

•        Quickly analyze and understand network security events and their potential impact 
•        Proactively investigate malicious data sources and identify threat patterns
•        Present security analysts with real-time insights from vast amounts of data for better, faster decision-making
•        Identify real, high-priority threats for prioritized corrective action 

Ready for a new approach to fighting cybercrime? Join us on January 23 to learn how cognitive security can give your organization the ability to quickly prioritize threats and respond with speed, accuracy and precision.

SIEM is costly, complex and resource intensive. MSSPs can be overwhelming for mid-market companies with no customization. SOC-as-a-Service combines best of both, but can you really afford it? Let’s discuss in this webinar the top 5 tips to choose between SIEM, MSSP, or a SOC-as-a-Service company for your security.

Americans like things Fast: fast Internet access, fast food and fast payments. But is fast always better? Fast internet access is good; fast food might clog your arteries, and fast payments might make it possible to lose your money much more quickly. So is fast better — not necessarily.  Even though countries around the world are implementing real-time or near real-time payments, potential fraud is still a factor. Today’s 20/20 webcast looks at the challenges faced by real-time payments versus the risk companies face from delayed payments.

• How to leverage data and intel to identify adversaries
• How to make sense of threat intelligence through context and relevance
• How you can block FANCY BEAR and other adversaries using a cybersecurity platform

• PKI best practices that enterprises are adopting
• The latest trends in PKI deployment — from internal to managed to the cloud and more
• How hardware security modules (HSMs) are being used to improve the trust and assurance level of mission-critical PKIs

• Password management through the lens of CTO at a cybersecurity analyst firm
• A case study on how a mid-sized credit union fights cyber theft
• Live demonstration of the Keeper password management solution

• The impact of digital transformation on your organization
• Bringing digital and transformation together
• Security strategies for a cloud-first enterprise
• Best practices that every CIO or CISO should know

• Learn the importance of selecting a reliable Certificate Authority for all your digital certificate needs.
• Discuss what to look for when choosing your certificate provider.
• Explore the components of a good certificate management solution and how it implements a Secure Service Lifecycle.

Specific topics addressing the threat of data breaches to be discussed include:

• The organizational gaps that both security and development teams are currently tackling with regards to data breach prevention
• Practical steps both teams can take to transition to a secure DevOps environment
• Leveraging technologies such as Web Application Scanning which enable teams to discover and address vulnerabilities during the production and pre-production phases of the software development lifecycle

The era of the megabreach is upon us.  And it’s had a seismic effect on global businesses.  Many name-brand organizations are spending millions dealing with the aftermath of losing customer data or intellectual property, and others are working as hard as they can to avoid the type of media attention that no one wants.

The core issue is that security teams are overwhelmed and lack the speed and agility to effectively stop a breach. The only way to make security teams more effective at stopping breaches is to automate security incident response processes.  

Join guest speaker Joseph Blankenship, Forrester Senior Analyst and Piero DePaoli, Senior Director from ServiceNow’s Security Operations team as they discuss and demonstrate the following. 

•      The need for rules of engagement to defend against breaches

•      Defining policies and workflows to automate much of incident response

•      Best practices for creating a response index

•      Six game-changers for efficient security incident response - in action

It’s the age-old question: build or buy your security infrastructure and management. Do you invest in acquiring additional infrastructure, along with trained staff and the ongoing expenses for security, or do you hire a managed security services provider and do your security in the cloud? Today’s 20/20 webcast looks at the pluses and minuses for each approach and tries to makes sense out of the build-vs-buy dilemma for security services.

• Why these attacks are so successful
• Common ransomware attack paths
• Critical security features to stop ransomware
• Nine practical steps to protect your organization

Ask a security expert what the most vulnerable cog in the security wheel is and they will tell you it is the user. A company with the most detailed policies and procedures and best-in-class security hardware and software is still vulnerable if a user decides to take an action potentially compromises data, such as copying a confidential file to a thumb drive to work on it at home, opening a spearphishing email and clicking on the attachment, or deciding to check out their favorite YouTube channel from a workstation attached to the corporate network. This 20/20 webcast looks at necessity for on-going security awareness training, how it can be incorporated into the workday, and the kinds of user activities that can be changed through such training.

As most organizations have moved their Email, File Sharing, and other applications to SaaS, hackers are also shifting their focus and are starting to hack SaaS applications with threats ranging from malware and ransomware attacks, phishing and compromised credentials; to data loss, unauthorized file-sharing and compliance violations. This webinar will show you an entirely new approach to protect your SaaS applications with the the vendors you trust like FireEye, Cylance, Check Point, Symantec, McAfee, Palo Alto Networks and more. No traffic redirection or proxy needed - all via API and with one click. Join to learn how!

Today’s cybersecurity professionals have evolved well beyond simply reacting to data breaches. Certainly every bit akin to James Bond's 007 agent in the battle against corporate cyberattacks, state-sponsored assaults on corporate data or targeted, criminal data breaches, executive leaders like you must now be prepared to not only mitigate attacks but have some data prior in order to better fend off these onslaughts. As such, threat intelligence is no less essential in defending against today’s cyberattack than political intelligence is needed in the world of global affairs of state. This webcast looks at the changing landscape in threat intelligence and how to create actionable defenses from the multiple data streams available today.    

Join Wombat Security CTO Trevor Hawthorn as he discusses the Wombat Security 2016 Beyond the Phish Report. The webinar will discuss end-user readiness, current trends, as well as strategies and tips for identifying and preventing security threats beyond the phish that can put your company at risk if left unaddressed. Key threat vectors discussed include social engineering, password security, mobile/BYOD security, and working safely outside the office.

Mobile security continues to be a challenge for corporate IT departments. Even though the Apple and Android stores claim to be very careful about the applications they allow to be distributed through those stores, many of those applications are found to have malware preinstalled or serious security vulnerabilities. In some cases, IT departments require that software be downloaded from the vendors directly, but that’s no promise of security either. This 20/20 will look at mobile application security issues and how to address them.

Join us and discover:  
• The most vulnerable information – what types of files are regularly shared externally that pose the greatest risks.
• Industry and analyst views on where shared sensitive data needs protecting, and what defences are most effective.
• How next-generation data-centric security is enabling organizations to embrace technology innovations such as file synch and share and the use of personal devices with less risk.
• What to look for in a data-centric security solution to ensure a successful implementation.

Join this webinar and gain practical information on how to best design a comprehensive Data-Centric Security Strategy for shared information that will protect data, meet compliance regulations and reduce your risks. This webcast is for anyone who manages or handles the security of documents that are shared externally, whether you are in IT, Security or a Business Unit.

No company is too small to get attacked. Every company is a target for an attack. Most large companies protect their business & IT through comprehensive, 24x7, security operations. However, using just a cloud/ SaaS/ co-managed SIEM will not help you detect or manage attacks. In fact, using SIEM as a product may cause more harm or damage than you think. Let’s discuss the top 5 reasons why SIEM as a product is a bad idea for your business. We will cover the upfront costs, resources, expertise, and long deployment cycles of SIEM. We will also cover the alternate options to safeguard your small or medium sized business like Fortune 500 companies, but in an efficient and economical way.

While individual users were once the preferred target of ransomware, perpetrators have increasingly set their sights on businesses and organizations. And you can bet that with larger targets, the ransom demands will increase accordingly.Are you prepared for such an attack?

Join Bil Harmer, Strategist, Office of the CISO, Zscaler Inc., for a compelling webcast highlighting how ransomware can impact your business and why legacy security solutions don’t stand a chance against such threats. Bil will also cover:
• How has ransomware evolved
• Lessons learned from the recent attacks
• Why is cloud sandboxing so important
• How ransomware can be mitigatedgoes

In this webinar, Tim Jarrett, Senior Director, Enterprise Security Strategy of Veracode, shares insights about the current perceptions and practices organizations are reporting regarding their approach to application security. 

Topics to be discussed will include:
•      Trends related to application security risk within these organizations
•      How organizations are currently addressing these risks
•      Changes to strategy and budget priorities to address application security concerns
•      The primary obstacles organizations face in adopting an application security strategy and program and how they can overcome them

In healthcare, medical professionals use triage procedures to quickly assess, prioritize and allocate the right resources to treat patients, adjusting their response to the severity of the situation. Similar to healthcare, today’s cyber security teams dealing with a constant barrage of alarms must utilize the concept of triage to gain control of their IT environment.

In this webinar, Paul Davis, director of advanced threats security solution architects at Cisco, and Seth Goldhammer, director of product management at LogRhythm, will breakdown how to artfully perform IT Security triage to increase productivity and reduce alarm fatigue.

You’ll learn:
• Challenges your peers are facing around alarm fatigue
• What triage is and how you can apply the concept to your environment
• How AMP Threat Grid can provide intelligence into your disparate events
• How LogRhythm can turn triage and intelligence into actionable response
Register now to learn how LogRhythm and Cisco AMP Threat Grid can help you streamline your prioritization and response to events.

When it comes to cyber security, you’ll find there’s no shortage of experts with information as to how to prevent breaches from happening. But what does an impending attack look like from a threat actor’s perspective?

In this enlightening webinar you will hear from both sides – hacker vs. defender, exploitation vs. prevention, exfiltration vs. remediation.

Join us and you will get the backgrounds of recent data breaches, plus:

Hear a “threat actor” perspective:
•         How they observe and select the target – the “slow gazelle”
•         Why they select certain targets
•         Their definitions of an opportunistic vs. targeted victim
•         How they complete the kill chain (attack structure)
 
Hear a “defender” perspective:
•         How they detect and remediate; disrupting the kill chain
•         How they purge any path the threat actor sets up for future access
•         How they apply the security measures to recent data breaches and how these breaches could have been prevented

The first problem is that organizations don’t really know where their sensitive data is – because their data is pretty much everywhere: on premise, in the cloud, and on a diverse range of platforms and devices. The second difficulty is ensuring people and processes make the right decisions about how data should be handled. Both of these challenges need to be addressed before it is possible to make decisions about the various technical means for data protection (e.g., access controls, monitoring, encryption, right management)

In this webinar, learn how to:
• Discover your data at rest, and intercept your data in motion
• Analyze both your data and your user behaviors to monitor trends, and to identify areas of risk
• Classify your data, and inform policies for how it should be protected
• Implement mechanisms to allow people and processes to make better day-to-day decisions on how data should be handled

Groundbreaking research from Thycotic and Cybersecurity Ventures indicates 52% companies fall short in protecting privileged credentials

It’s shocking to realize how many organizations today are still struggling with securing their privileged account passwords. Especially since privileged credentials are prime targets for hackers and malicious insiders to gain access to your most critical and sensitive data.

How do you think your organization compares to these PAM Benchmark Survey results?

• 60% still rely on manual methods to manage privileged accounts and credentials
• 20% have never changed their default passwords
• 70% don’t require approval to create privileged accounts

Join us in this information packed webinar and you will learn:

• Results of our groundbreaking research conducted with 500+ organizations world-wide
• Current limitations in privilege account management fundamentals
• How to identify if your organization has security risks in your privileged account management practices
• Best practice recommendations you can immediately implement to improve your security posture

Special incentive: All attendees will be given free access to an online PAM benchmark to learn how their organization’s privileged account management practices compare to their peers.

Using Okta for single sign-on and a centralized view of your cloud apps isn’t nearly enough. The average customer needs to deal with many inbound asks to provision applications to different user types, with different lifecycles, and sometimes this requires a complex business process.

Attend this webinar for a live demo of Okta’s new Access Request Workflow and Access Discovery Report features, and learn how Okta Lifecycle Management can help automate your IT and business processes. Securely delegate to business application owners all inbound requests for access in the organization, and have the ability to easily detect when users have access to an application when they shouldn’t. You’ll learn:

• What is Okta Lifecycle Management
• What new roadmap features Okta announced at Oktane around lifecycle management

In this webinar, George Gerchow and Mark Bloom will be discussing:
• Tips and tricks to get deep visibility into your AWS Logs
• Leveraging log management solutions for cloud security analytics and visualizations
• Tips, tricks and best practices to maximize the value derived from your investments
• Challenges encountered in the journey and how they were addressed

Ransomware, a familiar–and unwelcome–issue in IT security circles, has risen sharply in recent months to become one of the top enterprise cyber security threats of 2016. Ransomware threats in 2015 were up 165% over the previous year, according to a recent study by professors at Northeastern University. Experts say that Ransomware has a lot to do with exploitation of the human element – like employees, customers, and suppliers. But organizations can still win with the right technology on their side.

Deploying tech offerings and tools designed to combat Ransomware alongside comprehensive company-wide strategies can go a long way in preventing – and in the worst case – mitigating a Ransomware incident’s impact. Learn what you need to become a Ransomware expert. In this webinar we will discuss:

• How Ransomware has evolved
• What Ransomware might do next
• Best in class Ransomware solution

Studies show that IT security budgets and access to experienced security personnel is lacking within SMBs.  The challenge for these organizations is to get a clear understanding on where the greatest vulnerabilities exist and then leverage proven best practices and technologies that provide high risk mitigation potential, are cost effective and easy to implement.

On this webcast, three cybersecurity and privacy experts will provide you with the following:

• Exclusive research: SMB cybersecurity trends, emerging threats and best practices

• Case study: How one CIO defends his organization against cyber theft

• Live solution demonstration: See how Keeper Security is transforming the way businesses and individuals protect their passwords and sensitive digital assets to significantly reduce cyber theft

Are you moving applications from your data center to AWS? If so, you have a new set of challenges around securing those workloads. While AWS provides strong security for their underlying compute and networking infrastructure, you are responsible for security of your workloads, data and apps. Doing that in an environment that is dynamic and elastic — like AWS — calls for a modern approach to security. 

The FBI just called to tell you your data is plastered across the dark web. What do you do now? Whom do you call first? Do you hit the power switch on the servers or start a forensic investigation? This 20/20 looks at the steps you need to take to launch an incident response and how to develop your incident response plan. (Spoiler alert -- don't turn off that server!)

Despite Next Gen Firewalls and some of the latest User Behavior Analysis solutions, organizations still struggle with preventing breaches and identifying insider threats. One cannot respond to threats and the other does not understand user behavior. Enterprises need a more automated way of responding to emerging threats, by analyzing user behavior, without overwhelming the security organization.

The Preempt Behavioral Firewall is changing how security teams improve enterprise security in real time. Register now to learn how organizations are using Behavioral Firewalls to improve visibility, gain security insights, instantly verify user identity and automatically respond to threats. 

• How open source vulnerabilities can appear in your codebase
• Why traditional security testing approaches often miss open source vulnerabilities and what you can do about it
• Best practices in mitigating open source vulnerabilities throughout the development lifecycle

File sharing demand has ushered in the age of Bring Your Own Collaboration (BYOC), as well as a complex array of data protection and privacy compliance challenges for IT to manage. From network files shares and e-mail to new cloud-based file sharing platforms, once a file containing sensitive, regulated or confidential data is obtained by an authorized employee or third-party, data leakage liabilities begin to mount.

What are the key operational and legal measures to consider to balance business needs with compliance mandates?

Join a distinguished panel of seasoned information security experts and practitioners to gain pragmatic file collaboration security and compliance insights as this roundtable tackles:

• How to prioritize legal file data privacy and protection obligations?
• How to avoid common file access and sharing control oversights?
• When to involve which constituents when upgrading file security policies and controls?
• What file security caveats exist in cloud-based file sharing platforms?
• Where can file protection controls breakdown or are impractical?
• How best to prepare for and respond to the imminent file data leakage incident?

• Liability exposure for C-level executives and board members tied to financial reporting;
• Clear prioritization of where to invest IT resources to prevent breaches and maintain shareholder value;
• Metrics that substantiate and validate efforts to reduce and mitigate the impact of a breach;
• Calculations to help evaluate risk posture organization-wide.

Distributed denial of service attacks are one of the most common types of attacks used by those who are not interested in stealth but rather simply causing a web site extreme grief. This 20/20 webcast looks at the state of the DDoS market, some of the factors that are causing it to expand and some recommendations for companies to defend against these attacks.

Hadoop Environments are holding and analyzing an incredible and growing amount of data for most organizations.  This data represents intellectual property, monetized product, and is increasingly holding regulated data.  These facts are making big data environments prime cyber threat targets and a challenge for both security compliance offices. 

Join this webcast for live and interactive access to an esteemed panel of security thought leaders who will answer your questions and discuss live polling results on current best practices and the direction of Hadoop data protection. 

It’s common knowledge that there over 1 million new forms of malware being introduced per day. Security practitioners know that on a given day, an enterprise class network can have thousands of vulnerabilities.  And yet, security teams are MASH units at best.  But, there is a better way.  Cyber Advanced Warning SystemTM (CAWS) identifies active exploits, their application targets and whether or not specific security products can stop them.  

Join our webinar to get a full review of exploits that were used so far in the first half of 2016 by cyber attackers.  Details on what assets they have in the cross hairs and how security product categories have fared against them.  You might be surprised at where your security teams should be focused. 

In November 2015, Centrify commissioned Forrester Consulting to examine how IT decision-makers both secure and grant privilege to identities in cloud-based environments. Centrify has invited Andras Cser, Principal Analyst and VP at Forrester, to comment on the results and discuss:

• How firms are employing cloud services to store sensitive data and drive vital workloads
• The extent to which firms are engaging in outsourcing and allowing remote access to employees
• How privileged identity management (PIM) is more important than ever in this environment
• The benefits gained by a selection of firms who have chosen PIM-as-a-service to manage identify

Three drivers that are key to the success of your NGFW solution deployment include: Integration with security workflow, low total cost of ownership, and security effectiveness in your increasingly complex threat landscape. How do you know which solution will work best for your distributed enterprise environment?

In this data-rich webcast, NSS Labs, the world’s leading security insight company, shares its methodology for testing NGFW capabilities, including key features to consider when selecting a network security solution. Forcepoint Stonesoft shares its insights on the NGFW testing process and how its products align with the needs of your enterprise.

SMBs have the same security needs and requirements as enterprises, but rarely have the resources or personnel that their larger competitors have. What are some strategies SMBs can take when it comes to next-generation firewalls, intrusion-protection systems, intrusion-detection systems, and other hybrid approaches? (This question can be addressed either by security consultants that specialize in SMB markets or by Secure Web Gateway vendors)

• Reduce ransomware infections across your organization
• Identify the infrastructure used by attackers to connect, control and transfer the encryption keys
• Protect medical IoT endpoints, patients’ devices and even devices that don’t run agents, like heart monitors and infusion pumps

We are at a turning point where IT teams must say “yes” to remain relevant, and intelligently select security solutions that will still allow for compliance. For far too long, IT have been getting away with being inflexible to the requests of their workforce.  

The reason was simple – they set the rules and workers followed them with data security being the key justification, like it or not.  But to harness the productivity of the new breed of tech savvy workers along with cloud services, personal devices and internet enabled things, traditional IT has to transform into HybridIT, they must be flexible yet retain a level or risk comfort.

Can we switch the tone here to be more positive?  How does IT Security adapt to this new world, and bring the paradigms of strong auth and device compliance that the enterprise needs to manage risk to the new Hybrid IT architectures of Mobile and Cloud while making apps easy to use and respecting employee privacy?

While the sensitive information of an organization IS its value, most struggle knowing where it is and it’s risk of its misuse or breach.  And denial is common in many organizations, as they don’t know what they do not know.  

Attend this webinar and see the latest international research of executive IT and security professionals, and what they actually know about their sensitive data.  Dr. Larry Ponemon, Chairman and Founder of Ponemon Institute and Bill Burns, CISO and Interim CIO of Informatica will join together to explore how you can tackle this daunting problem and gain support for data security intelligence across your enterprise.

Specifically, you will:

1.      Learn about the dangerous knowledge gap of sensitive data

2.      Hear what keeps your IT and security peers up at night

3.      Get in the trenches advice on how to tackle data security intelligencec

• effectively reduce risk and support compliance
• better manage distributed endpoints, both on- and off-network
• deliver necessary IT services and support with minimal disruption
• reduce the labour and processes required to manage and secure endpoints

Ransomware is hardly new but it has evolved into a very dangerous trend. A recent Flash alert from the FBI that raised concern about a new breed of ransomware is in the wild and attacking US corporations is just the latest in a series of warnings and advisories from the Dept. of Justice.

Today’s 20/20 webcast looks at some of the ways ransomware attacks are conducted, why they can be so devastating, and how to defend against those attacks.

• What technology and business criteria your application security testing (AST) vendor should satisfy?
• What AST technologies you should adopt?
• What technologies should complement your AST choice? 
• How to optimize your AST choice?

In the constantly changing landscape and myriad of sources behind cyber risk, executives and board members are increasingly forced to take ownership and accountability. Yet many lack the critical knowledge to make effective risk management decisions and incorporate them into their overall business strategy. This inevitably leads to security strategies that are ineffective and reactionary.

The success and failure of modern enterprises is dependent on the ability to quantify cyber risk and make informed decisions within an organizations cyber risk appetite. Those who do so effectively will be better positioned to enable continued growth and those who do not, will expose their organization to risks with potential calamitous implications. Without having a foundational, solid understanding, determining how and where to allocate human, financial, and technology resources is a complicated calculus. 

Join RSA for this informative session as we discuss practical steps for identifying and categorizing cyber risk with your key business stakeholders and technical owners of risk. Attend this session to calculate your own organizations cyber risk appetite.

• An insider turns against your organization
• A cyber-attacker steals a user’s credentials
• An administrator abuses account privileges

1. Why detecting user threats is so important—and so difficult
2. Different approaches to UBA
3. The value of data from across your enterprise
4. How to maximize the efficiency of your analysts

Breaches disclosed in the media foster conversations within organizations on how to protect critical assets and enterprise infrastructure.  Loss of intellectual property, financial data and customer confidence have produced tangible evidence of an evolving threat landscape that, in turn, has elevated the conversation to the board room.  This cyber awakening has many organizations evaluating current security measures including tools and technology – and the options available in the market are endless!    

 As Chief Technologist for Lockheed Martin’s commercial cyber business, Aaron Shafer is responsible for leading technical innovation with a focus on evaluating the latest cyber technology available in the market and advancing the Intelligence Driven Defense® tradecraft.  In this session, Aaron will share his point of view on the latest security technologies to hit the marketplace including: endpoint detection and response solutions, malware analysis, insider threat and threat intelligence platforms. 

• The impact of rapid SSL/TLS adoption by cloud-based applications
• The implications of decryption – do your Legal and HR teams approve?
• The challenges and benefits of implementing a holistic encrypted traffic management solution
• Strategies you can deploy immediately to reduce your risk and prepare for the day when 100% of your network traffic is encrypted

Threat intelligence can help you defend against the two key attack vectors used by ransomware — malicious emails and malvertising.

In this webinar, you will learn:

• The four recent vulnerabilities in Adobe Flash Player and Microsoft SilverLight which allow exploit kits such as Angler to deliver ransomware in malvertising campaigns.
• How threat intelligence enables faster verdicts on key technical indicators associated with malicious emails with ransomware such as Locky.
• The rising popularity of ransomware over the past four years and top ransomware families as shown by trend analysis.
• Best practices on applying threat intelligence to help prevent ransomware infections.

On February 29, 2016 the Cloud Security Alliance (CSA) Top Threats Working Group released a report titled, “The Treacherous 12: Cloud Computing Top Threats in 2016.” In this report, the CSA concludes that although cloud services deliver business-supporting technology more efficiently than ever before, they also bring significant risk. 

Regardless of whether the IT department sanctions new cloud services or not, the door is wide open for the Treacherous 12. The CSA report points out that businesses need to take security policies, processes, and best practices into account. 

At the same time, Gartner predicts that through 2020, 95 percent of cloud security failures will be the customer’s fault. This does not mean that customers lack security expertise. It does mean, however, that it is no longer sufficient to know how to make decisions about risk mitigation in the cloud. Automation is the key. 

Cloud security automation is where Cloud Access Security Brokers (CASBs) come into play. A CASB helps automate visibility, compliance, data security, and threat protection for cloud services. 

In this free, live webinar you will learn about:

• ·        The CSA Working Group's definition of the top cloud computing threats in 2016
• ·        The role of CASBs in protecting you from the Treacherous 12

Far too many organizations fall into the “what can I buy with my budget” approach to security as opposed to taking a real hard look at tactical and strategic approaches. The annual Global Threat Intelligence Report (GTIR) from NTT Group offers a different approach, hoping to persuade readers into mitigating attacks by providing a roadmap to address threats.

This webinar will review the following from the 2016 GTIR:

• Global Data Analysis Findings from 2015
• Threat Intelligence – Attribution and Source Confidence
• Vulnerabilities, Attacks and Exploitations
• How to Use the 7 Steps of the Kill Chain and Critical Security Controls 

SIEM might be old hat for large enterprises, but the explosion of threat intelligence technology is fueling the SIEM market -- even for companies that might not have considered it essential in the past. This can be a challenge, especially for companies without the financial and personnel resources. This 20/20 webcast looks at some of the issues companies face as they embrace SIEM for the first time.

SOCs, or Security Operations Centers,; You’ve seen them in the news, the movies, even on TV.  But what really happens on the inside? What are they showing on those screens when the cameras aren’t rolling? If you think it’s all about the screens and even more screens you only know half the story. In this webinar you’ll get to know what SOC analysts actually do on a daily basis when they aren’t browsing Reddit or cursing the existence of Flash.

Join this webinar to learn:

• What happens in a SOC on a typical day, when there aren’t “incidents”
• Roles, responsibilities and skillsets of successful SOC teams
• Why teamwork is essential to a SOC

We'll finish up with a demo of AlienVault USM to show how it can help SOC analysts speed up threat detection and incident response.

Today, cloud and mobile computing has changed the nature of the network perimeter. The threat of a data breach has grown. CISOs are faced with a monumental challenge: Securing information wherever it resides, without interfering with the productivity of the mobile, connected workforce.

In this webinar, we discuss the importance of securing the identity perimeter and gathering deep insights into authentication activity. Accurately tracking the who, what, where, when, and why (along with how and how much) of data access can mean the difference between shutting your entire network down, or just shutting a hacker out.

Key takeaways:

• How adopting cloud solutions improves your security posture
• Why effective security measures start with a great user experience
• Why contextual user access data is the key to unlocking smarter security policies

IT Administrators and CISO’s have to juggle tons of tasks every day while balancing security policies with productivity goals in order to keep our systems running, updated, and secure---and make sure users have what they need to get their jobs done.  From needing an admin password to fix an employee’s workstation or managing employee turnover, to scanning the network for vulnerabilities, how your privileged credentials are managed by these teams can enable instantaneous action or create bottlenecks that hamper both security and productivity.

Join Thycotic as we walk through a day in the life of an IT Admin and CISO, where we demonstrate how many of the most demanding IT challenges can be solved in minutes with the proper tools to automate privileged account management and security.

It’s a business’s worst nightmare. Hundreds of thousands, or even millions, of dollars have been transferred out of company accounts and into a scammer’s hands.

Business email compromise (BEC) also known as “CEO fraud,” attempts to trick employees into carrying out large wire transfer payments by impersonating upper management. These types of scams are becoming extremely sophisticated through usage of social engineering or computer intrusion techniques and are an emerging global threat. The FBI reports that over 12,000 victims have lost $2 billion in the last two years.

Join Tom Kemp, CEO of Centrify, as he shares his firsthand account as a target of this scam and tips to avoid becoming a victim of a BEC scam.

Tokenization is changing how we solve security problems. Long considered a stop-gap security measure for PCI compliance, recent innovations of vaultless tokenization help solve emerging use cases for desensitizing sensitive data at scale. 

As the new year begins, we can expect the size, severity and complexity of cyber threats to continue to increase in 2016. Attacks will continue to evolve, forcing organizations to expand their focus and be flexible to withstand unexpected, high impact events. Some of the notable predictions include cyber criminals leveraging personally identifiable information (PII), trusted partner networks, hacktivism, ransomware for corporations, and many more.

What are the top 10 security predictions for 2016 that you should care about?

Join Michael Sutton, CISO, Zscaler, Inc., for a comprehensive overview of what to expect in 2016, including:

• The top 10 security predictions for 2016
• How these key trends will impact your organization
• Critical takeaways for a comprehensive security strategy in 2016

• Key strategies for taking a proactive stance against advanced attacks
• How behavioral analytics effectively detects and surfaces targeted attacks
• Addressing the inside threat – compromised accounts and malicious employees
• How analytics can be successfully operationalized in an information-protection program

Join this webcast and learn:
• How DNS can be used for security beyond the firewall
• How easy it is for enterprises to deploy this additional layer of network security worldwide

Web Application Firewall security is evolving. Join John Graham-Cumming, CTO of CloudFlare, as he shares the latest trends and changes in Web Application Security. This talk will give details of the big trends in web application security seen in 2015, and how to defend against these threats and talk about the evolving web application security landscape. 

How safe are you from an insider attack? Despite the numerous press reports of devastating outsider attacks, insider attacks, deliberate or accidental, put a lot of corporate data at risk. Often companies don’t even know how much data they have at risk. This 20/20 webcast will look at the challenge of a variety of insider threats and what you can do about it.

• The early indicators of Ransomware
• Automated defenses that you can put in place to thwart the attack
• The steps that must be followed (with robotic precision) to make a mole hill out of the possible mountain

• Trends impacting data security and increasing identity-related risks
• How to reduce the risk of security breach by minimizing your attack surface & stopping in-progress attacks
• Best practices for managing and governing privileged identities in the modern enterprise

Bad guys are lurking in your network neighborhood, kicking doors and testing entry points, all the time. Threatscape 2016 is evolving rapidly, but your resources and staff may not be enough to meet these challenges. Most IT security heads and admins are so busy managing operations and ensuring the company's ongoing security efforts that "detection deficit" sets in and they miss key indicators that their network has been compromised.

 In this webinar, A.N. Ananth, co-founder and CEO of industry award-winning EventTracker, shows you how a blend of technology, experts and process simplify your already complex life. See practical examples from a team that reviews more than a billion logs daily.

• They have less robust cybersecurity and limited staff
• Lack budget and resources for a comprehensive cybersecurity plan
• Lack access to advanced security tools and best practices

• Cyber attack detection and prevention data showing that most companies do not even know they have been breached
• Security monitoring options for mid-market companies ranging from SIEMs to managed security service providers
• Overview of the differences between traditional managed security services and a SOC-as-a-service

Fifteen years ago, Jeremiah Grossman founded WhiteHat Security to help secure the web by enabling organizations to find and fix application vulnerabilities before the bad guys could exploit them. With the knowledge and perspective that comes from being an application security leader for a decade and a half, Jeremiah will provide perspectives on:

• How the types of threat actors have changed and what they now target
• The intersection of security guarantees and cyber-insurance
• Easing the burden of vulnerability remediation
• Measuring the impact of SDLC security controls
• Addressing the application security skill shortage

There is no stopping the ubiquity of tablets and smartphones. Your employees are only going to use them more and more in their jobs — and customer service levels, enterprise agility, and overall profitability will improve because of it. The challenge posed by this new mobile world is security. Traditional identity and access controls built around desktops and laptops won’t work. Passwords are too vulnerable, hardware tokens are too cumbersome, smart cards don’t fit and any approach that causes most employees trouble will lead them to circumvent friction.

With data breaches on the rise, businesses are heavily investing in solutions to safeguard sensitive data. However, businesses too often fail to secure confidential information in environments used for development, testing, training, and analytics. These so-called non-production environments can represent over 80% of the surface area of risk for breach.

Data masking has emerged as the de facto standard for protecting these environments from insider and outsider threats alike. Masking replaces sensitive data with fictitious yet realistic data, preserving its value for non-production use while completely eliminating the risk of breach. Moreover, a new generation of solutions couples data masking with advanced virtualization technology to secure and deliver data — without the slowdown caused by traditional methods. Join this webinar to learn:

• The key reasons why next-generation data masking reduces risk of breach
• How masking compares to other security approaches such as encryption
• Why next-generation masking is essential for businesses that must comply with HIPAA, PCI DSS, and SOX

Your mobile employees get work done using Office 365, Salesforce, Box, and other cloud-hosted business apps, which means they don’t turn the VPN on. OpenDNS’s cloud-delivered network security service is a new layer of breach protection and Internet-wide visibility on and off the corporate network. You can even extend existing threat protections beyond your perimeter using our API-based integrations.

Learn why companies are shifting security to the cloud. And why it takes only 30 minutes to protect any device, anywhere.

We will discuss how secure server configuration for SSL protects your sites from online threats and: 

• Implement the Proper Configuration: Learn which SSL server configuration options mitigate against known problems 
• Enhanced Security Features: Discuss enhanced security features and the benefits they provide 
• Tools For Configuration: Get a demonstration of available services that will help administrators assess the security configuration of their SSL web server

• Detecting malware leveraging behavioral techniques rather than signatures
• Linking low confidence events to correlate high confidence events
• Achieving deep endpoint visibility and real-time alerting
• Using intelligent, risk-level scoring system to prioritize threats
• Confirming infections quickly and blocking with precision in real time
• Gathering relevant investigation data quickly

Join AlienVault for this practical session covering:

• How to evaluate threat intelligence sources
• How to get started with threat intelligence
• How to simplify the integration of threat intelligence into your daily operations
• Practical use cases for mid-market organizations

• Key considerations and requirements for securing enterprise Cloud applications.
• How to lay a foundation to monitor the entire Cloud environment, from IaaS to SaaS.
• Best practices for monitoring and securing users, data and workloads in the Cloud.

It’s also a good example of why networking and security teams need to go beyond traditional perimeter defenses to address what happens once malware gets inside the network. Taking a DNS-centric approach to security can help address the variety and sophistication of threats aimed at taking down network infrastructure and stealing data. 

 Attend this webinar to learn about:

• The latest Infoblox DNS Threat Index, and what it has revealed about the threats to your critical infrastructure and data
• The top DNS threats
• Best practices for improving security through DNS

•         Become aware of the different types of insider threats, including their motives and methods of attack
•         Understand why conventional security tools like firewalls, antivirus and IDS/IPS are powerless in the face of the insider threat
•         Gain clarity on the various technologies, policies and best practices that should be put in place to help detect and thwart insider threats
•         Discover how network logs, particularly NetFlow, can be used to cost-effectively monitor for suspicious insider behaviors that could indicate an attack
•         Know about emerging attack methods such as muleware that could further escalate insider threats in the coming years

Cyber threat intelligence is one of the hottest, most talked about topics in security today.  Security teams are trying to get a handle on whether their intelligence programs are on target with the latest advances.  What does it all mean? What are the best practices that enterprises are leveraging?  Am I getting value out of my current security investment?

In an extensive survey, we were able to take the mystery out of how organizations are using threat intelligence and how ThreatStream can help solve the pain points enterprises face today.  

 Tune into this informative webinar to learn:

• What security issues will be at the forefront in the coming year?
• How the vendor landscape is changing and the impact to your security strategy.
• Best practices to help your organization future-proof your security investments.

The world of containers and micro services is very exciting as it is disrupting the way we all develop and deploy software at an amazing pace.  However, many like you are trying to get to the bottom of what security in Docker means, and how you will operationalize security with containers.  Security professionals must be ready to protect their companies that are rushing to optimize their development and resource utilization with containers. 

Join Vormetric’s Chief Security Officer, Sol Cates, to explore Docker’s architecture, and how organizations are shoring up the gaps that this amazing new model is presenting.

• Provides a rich set of contextual access policies to protect access to your applications
• Offers a comprehensive set of second factors to secure access for all your users
• Integrates with all your apps and VPNs to eliminate coverage gaps

“By 2020, 60% of enterprise information security budgets will be allocated for rapid detection and response approaches,” according to Gartner Research.

This shift in investment highlights the fact that organizations require a new security model designed to rapidly detect and neutralize cyber-threats that have penetrated the enterprise perimeter or originated from within.

In this webcast, LogRhythm and Cisco will share some of the latest techniques used by attackers to penetrate networks. The webinar will also cover how you can use next-generation security solutions to detect, respond to and neutralize these threats to reduce the risk of a material breach or cyber incident.

You will learn how machine data generated across your network—including contextual identity and access telemetry from the Cisco Identity Services Engine (ISE)—can be leveraged by LogRhythm’s security intelligence and analytics platform to provide organizations with highly corroborated risk-based alerts and enable immediate automated response to contain threats by interfacing with Cisco pxGrid to take protective action.  

Join this webinar to learn:

• Common ways hackers get into your network
• How threat actors attempt to avoid detection
• Tips on finding the hacker trail: how to look in the right place
• How to expand and accelerate your organization’s mean-time-to-detect (MTTD) and mean-time-to-respond (MTTR)

Take a deeper dive into mobile identity, system architecture, threats and best security practices for mobile application development.

This webinar will help you understand how mobile incorporated into your existing enterprise environment. Entrust Datacard’s Jason Soroko will take a deeper dive into mobile identity, system architecture, threats and best security practices for mobile application development.

Key Benefits:

·         What Makes Mobile Different — Define the major differences between mobile architecture and that of a desktop.

·         Applications for an Enterprise Environment — Probe into mobile applications and their uses in a modern mobile business environment.

·         Staying Ahead of Threats — Uncover the threats to mobile that may affect your business environment.

·         Best Practices – Find out how to securely develop mobile applications.

·         Look to the Future — Get an outlook on the capabilities of mobile technology in the pipeline.

Bad guys are lurking in your network neighborhood, kicking doors and testing entry points, all the time. Threatscape 2015 is evolving rapidly, but your resources and staff may not be enough to meet these challenges. Most IT security heads and admins  are so busy managing operations and ensuring the company's ongoing security efforts that "detection deficit" sets in and they miss key indicators that their network has been compromised. 

 In this webinar, A.N. Ananth, CEO of industry award winning EventTracker, shows you how a blend of technology, experts and process  simplify your already complex life.  Learn about:

• Rogue process detection
• Evidence of persistence
• Suspicious traffic
• Unknown processes
• Unusual OS artifacts

Protect your network now.

According to the Verizon Data Breach Report, “97% of breaches are avoidable through standard controls.” If the key to eliminating APTs and other high-cost, high-profile breaches is implementing common-sense, standardized controls, what should CISOs do to bring their risk management to the next level? What trends can we expect to see in 2016 that will address the vulnerabilities that have led to major breaches over the past few years? Today’s 20/20 webcast will address how companies can increase the visibility of potential vulnerabilities through better use of tools, intelligence and analytics.

We all know that security gaps are widening due to technology shifts and advanced threats. Whether you are in finance, energy, tech, or manufacturing, the infosec challenges are much the same.

Chart Industries — a global manufacturer with 5,000 employees and 45 locations — was facing a huge volume of malicious activity every day resulting in excessive break-fix work for their small security team.

They needed a new layer of malware and breach protection. But it also had to be a painless deployment and it needed to be a transparent experience for their employees and guests.

Hear directly from Jack Nichelson, Chart’s Director of IT Infrastructure and Security to learn:

•  why they use a layered approach to security
• how his security analyst, Kevin Merolla, quickly responds to incidents or false positives 

The attacker defender asymmetry is well known. While it’s impossible to defend all possible places of network compromise, defenders can shift the balance in their favor once the attacker has breached an endpoint. Doing so requires a focus on the inside of networks and all the data that passes back and forth there. With the security architecture to continuously monitor and analyze network data, organizations can uncover the patterns of that telegraph attacker lateral movement and malicious communication before data is stolen or lost. Attendees of this webcast will get recommendations on building the kind of security architecture that shifts the power balance toward defenders.

They will get practical advice for:

• Security architecture re-design
• Leverage of network-wide visibility for attack detection
• Sustaining and scaling multi-tiered security environments

The promise of SIEM is clearly an essential one – aggregate, correlate & analyze all of the security-relevant information in your environment so that you can:

• Identify exposures
• Investigate incidents
• Manage compliance
• Measure your information security program

However, going from installation to insight with a SIEM can be a challenge. Tune in for this webcast to learn 6 practical steps every IT admin should take before embarking on a SIEM deployment.

Threat intelligence is a broad subject and the natural tendency is to produce intelligence on any topic or event regardless of its applicability to the company. True success in threat intelligence depends on focusing intelligence efforts to very specific business objectives, which removes the large surface area and leaves only a challenging sliver of ultra-high value to pursue. This webinar will reveal critical concepts and practical details, where necessary, to produce a world-class threat intelligence capability from scratch.

The stakes have never been higher as businesses attempt to protect their assets from a barrage of threats that continue to grow in frequency and sophistication.

However, even the most advanced cyber security teams acknowledge that user accounts, systems and networks WILL be compromised, regardless of the prevention measure in place.  It’s amidst this reality that organizations are exploring new, more effective ways to detect and respond when the inevitable occurs. 

In this webinar we will explore how unified security intelligence is empowering organizations to accelerate their mean-time-to-detect (MTTD) and mean-time-to-respond (MTTR) to compromises and avoid material breaches.  

Chris Kissel, industry analyst from Frost & Sullivan will start with a quick update on the state of SIEM and how next-gen SIEM has evolved to deliver true security intelligence through a number of new capabilities including behavioral analytics, network and endpoint monitoring and analytics, as well as advanced search capabilities.

Attend this webinar if you:

• Are seeking to reduce your organizations meantime-to-detect (MTTR) and meantime-to-respond (MTTR) to cyber threats
• Struggle to find the needle in the haystack of security events
• Believe your current incident response process lacks adequate automation and efficiency
• You have a first-gen SIEM platform deployed and are frustrated by its complexity or feel that you still have significant blind spots

We know that “What happens in Vegas, stays in Vegas” is not a winning network security strategy. Yet how would you know what happens on the Internet when your employees are off the corporate network? If you’re thinking VPN? Think again. Why would employees VPN when they’re working in Office 365 or Google Docs?

We need visibility everywhere. It is the foundation for security. We also need consistent enforcement of our policies and protections. But we’ve lost both these days, now that employees work anywhere, anytime.

Learn how...

●      Unlike VPN’ing, we do not add latency, hog memory, or burden the end-user.

●      Unlike endpoint protections, we block threats before the first victim is hit.

The rate at which new data breaches are announced in the headlines should alarm every company with sensitive data to protect. From OPM to Ashley Madison to Machine Zone video games, data breaches are going undetected by existing security technologies and processes.

It is time to look for new approaches in the fight to protect sensitive data.  In this case the new ally is data science and the new approach is behavioral analytics.  Learn how combining math with big data will compress millions of events (most normal, some bad, some very bad) down to an accurate and prioritized short list of true threats that your security team can actually deal with in a timely manner.  See  how one company put this new and innovative technology into practice to protect their critical R&D project plans, test data, process methodologies and proprietary formulas from both insider and targeted outside attack.

Join Paul Calatayud, CISO at Surescripts, and Stephan Jou, CTO at Interset for a discussion on how behavioral analytics effectively detects and surfaces targeted attacks and how it can be successfully operationalized in an information protection program.

Sign up for our upcoming webinar where we will discuss how behavioral analytics:

• Accurately detects and surfaces advanced attacks while they are happening
• Reduces noise and false positives through advanced  analytics enabling your security team to focus on true threats
• Uses machine learning and advanced statistical analysis to find employees, contractors, and compromised accounts that are attempting to steal sensitive data
• Integrates with and greatly improves the performance of your existing security tools, and

Discuss the specific challenges facing organizations today, and why behavioral analytics is the first step in helping achieve information protection.

Data is at the core of every business, and data theft is one of the most potent risks enterprises face. According to a 2015 Ponemon Institute study, the average consolidated cost of a data breach is $3.8 million, which includes investigative and forensic efforts, resolution, and the consequences of customer defection.

Hackers often use DNS as a pathway for exfiltrating data to avoid detection by standard security controls that primarily focus on Web and email. They can accomplish this using off-the-shelf DNS tunneling toolkits—or custom techniques that are far more sophisticated and harder to detect. Mitigating these threats effectively requires applying the right technique based on the exfiltration method used.

Join this webinar to learn about:

• Various ways data can be stolen over DNS  
• Signature-based techniques for mitigating DNS tunneling
• The use of query analytics to stop data exfiltration over DNS queries

Traditional security controls don’t effectively secure DNS, and closing this critical gap is key to protecting your data. DNS is ubiquitous, and it is close to your endpoints. Attend this webinar and learn how you can use it as an optimal detection and enforcement point to strengthen your network security.

Data Breaches in 2015 are on pace to break all records. 2014 saw a record 783 breaches with over 85 million records compromised. So far in 2015, there have been 551 confirmed breaches, with over 150 million compromised records, with the “detection-deficit” between the good and bad guys is growing.  In 60% of cases, attackers are able to compromise within minutes, while organizations take days or months to detect these breaches. Traditional methods of detecting breaches only enable enterprises to react once an alert indicates that an attacker is in the network. A proactive strategy is needed to eradicate an attacker early in their mission to prevent exfiltration of data.

How effective is your security strategy at hunting and detecting signs of compromise?

A new approach is needed – one that turns defense into offense. Join Dan Maier, Sr. Director Product Management, Zscaler, for a thought provoking webcast addressing;

• Best practices hunting and detecting the signs of compromise
• Why the vast majority of targeted attacks aren’t ever uncovered by the victim enterprise
• Tools and processes needed to identify and mitigate such threats before any real damage is done
• Insights into the mindset of today’s cyber criminals, who continuously manage to adapt their defenses as quickly as organizations deploy them

When it comes to protecting your organization’s intellectual property (IP), a single click by an end-user can either lead to a disastrous result (a data breach) or a great result (data protection). 

Organizations need to educate and utilize employees to assist in the protection of IP and other sensitive information. By providing your users with tools for identifying and classifying data, your organization can effectively protect high-value, high-risk assets. 

Join our webinar "Strategies for Effectively Protecting Intellectual Property" on October 1st at 2PM ET. In this session, experts from Dell, 451 Research and TITUS will discuss use cases and share best practices. Key takeaways:

• Understand the challenges of protecting IP
• Learn how organizations can educate and use their own employees to assist with IP protection
• Hear how automating security policies can help to prevent data breaches
• Case study and practical advice from Dell

Honeypots are really useful for collecting security data for research, especially around botnets, scanning hosts, password brute forcers, and other misbehaving systems. They are also the cheapest way collect this data at scale. Deploying many types of honeypots across geo-diverse locations of the Internet improves the aggregate data quality and provides a holistic view. This provides insight into both global trends of attacks and network activity as well as the behaviors of individual malicious systems. For these reasons, we started the Modern Honey Network, which is both an open source (GPLv3) project and a community of hundreds of MHN servers that manage and aggregate data from thousands of heterogeneous honeypots (Dionaea, Kippo, Amun, Conpot, Wordpot, Shockpot, and Glastopf) and network sensors (Snort, Suricata, p0f) deployed by different individuals and organizations as a distributed sensor network. The project has turned into the largest crowdsourced honeynet in the world consisting of thousands of diverse sensors deployed across 45 countries and 6 continents worldwide.  Sensors are operated by all sorts of people from hobbyists, to academic researchers, to Fortune 1000 companies. In this talk we will discuss our experience in starting this project, analyzing the data, and building a crowdsourced global sensor network for tracking security threats and gathering interesting data for research. We've found that lots of people like honeypots, especially if you give them a cool realtime visualization of their data and make it easy to setup; lots of organizations will share their data with you if it is part of a community; and lots of companies will deploy honeypots as additional network sensors, especially if you make it easy to deploy/manage/integrate with their existing security tools.

This year over 85% of large organizations were targeted by advanced attackers according to Symantec’s 2015 Internet Security Threat Report. Was your organization one of them?

With targeted attacks on the rise, organizations need to leverage adversary and threat intelligence with advanced security analytics to accurately detect and respond to early indicators of compromise and avoid the risk of experiencing a high impact breach.

In this webinar, Security experts from LogRhythm and Symantec explain common ways networks are targeted and explore best practices for effectively prioritizing and responding to threats that have penetrated the network. They will also discuss how actionable adversary and threat intelligence generated by Symantec DeepSight can be automatically consumed by LogRhythm’s Security Intelligence Platform to correlate external threat data with other high risk events recognized across the IT environment to immediately expose highly concerning activity.

Key themes to be covered include:

·         Emerging attack motives and strategies

·         Maximizing prevention, detection, and incident response

·         Corroborating external threat intelligence with behavioral changes on the network

·         Prioritizing threats to prevent attack propagation  

Customers are doing more and more business online. Nearly 80% of the U.S. population shops online and half bank online. However, websites are constantly under attack. 71% of consumers feel it is up to the online stores to ensure the protection of their information, making website security a top priority for many businesses.  In the last year, new vulnerabilities have been uncovered that allows malicious attackers to undermine security that organizations put in place to protect themselves and their end users sensitive information. This webinar will explore protecting your business and your reputation from website security hiccups.

Learn how website security contributes your overall brand reputation, how to properly secure your online applications/ servers and discuss:

• SSL/TLS best practices and certificate suggestions for secure domains
• Secure server communication and encryptions
• Using SSL/TLS to mitigate against malware, attacks and vulnerabilities
• The importance of vulnerability identification and management
• Adoption of preventive technology solutions to block attacks

This webinar will examine the business risks and regulatory compliance requirements associated with file transfers.  We’ll show how to effectively manage the broad range of compliance requirements by focusing on standard IT controls and how that approach can be used to select appropriate security technology, such as Managed File Transfer service to ensure your organization is protected and in compliance.   

The webinar introduces a new Capability Maturity Model to enable organizations to position their own capability against the critical success factors and best practices presented in the webinar, including:

• Policy
• Risk Mitigation
• Automation
• Agility

The webinar will reveal the results of a recent survey of IT professionals globally of how organizations rate their own existing capability against the new Capabilities Maturity Model.

Based on our research, it takes 100-200 days for most organizations just to detect a new threat—before any action can be taken. How many more days go by before new threat intelligence is enforced? 

Where are you gathering this intelligence from? Where and how are you enforcing it? Feed providers, network appliances, endpoint agents, or everywhere? 

In this webinar, you'll learn how...

• Both time-to-detection and attack dwell time is reduced by orders of magnitude through security automation.
• Integrating threat analytics in your security stack creates intelligence specific to your organization.
• A turn-key integration between AMP Threat Grid and OpenDNS automatically blocks newly discovered malicious domains at the DNS layer, both on and off the corporate network.
• You'll prioritize investigating malicious domains and files involved with severe threats compromising critical systems.

OpenDNS is now part of Cisco, and together, our cloud-delivered, API-based services enforce security everywhere. The Threat Grid integration is the first of many upcoming innovations that enables you to stay ahead of attacks. 

The Federal Financial Institutions Examination Council (FFIEC) recently released the Cybersecurity Assessment Tool (CAT) to help financial institutions identify their risks and determine their cybersecurity preparedness. The CAT will no doubt be relied on by examiners from the OCC, FDIC and other agencies as they assess banking institutions’ cybersecurity readiness.

Join us for an informative webinar as Jennifer Allen, InfoSec Compliance Specialist, digs into what you need to know about the CAT. Jennifer will explore the key components of the tool using the inherent risk profile and the 5 cyber security assessment maturity domains, and highlight the key takeaways from each. She’ll then detail a case study based on real-world data which compares a national bank’s preparedness profile based on different technology approaches.

Security practitioners might not like to admit it, but they've been playing games with adversaries for years. Whether it's whack-a-mole, cat-and-mouse or chutes and ladders, the security game has always been reactive in nature or one that has us alternating between steps forward and steps back. A market full of point products with steep learning curves have left many security organizations feel like they can never hire enough staff. There is good news, however! This presentation will share some positive trends we're seeing in the security marketplace that are finally addressing challenges as old as the security discipline itself.

What do IT security managers want from the IT security products that they own?  What are they actually getting?  Listen to the results of market research commissioned by ForeScout and distributed on the company's behalf to the readers of SC Magazine, that shows a huge gap between what IT security managers want and what they are actually getting from their IT security products. The survey explored the ability of IT security products to work together by sharing information and automating incident response.

As cloud apps and mobile devices move your data and systems access outside the firewall, how secure are you from cyber threats? While reliance on cloud apps like Office 365 and Salesforce is growing, breaches from compromised identities are in the news regularly. Do users have to deal with yet another username and password for each app and more restrictive policies? How will IT support provisioning, de-provisioning and even more forgotten password calls?

Get an inside perspective on proven approaches for improving user productivity and satisfaction, while simplifying and automating identity management. Learn how cloud-based identity management with full featured enterprise mobility management enables enterprises to:

• Drive cloud app adoption, eliminate password sprawl, and close security holes
• Centralize, standardize and automate access management – across apps and devices
• Simplify with a Microsoft-validated alternative to AD FS, DirSync, and Azure Active Directory

Put experience and innovation to work for you – register now to get ahead of cloud challenges and simplify deployment of Office 365, Salesforce and other cloud applications.

The overwhelming volume and complexity of data is creating widespread opportunity for fraudsters. Organizations in the healthcare industry, financial services and even government departments have fallen victim as they've been unable to get a clear understanding of patients, customers or citizens. Learn how governance technologies are becoming a primary weapon in the war against fraud, while providing the foundation for simplified data management.

Cyber security is now a topic of discussion at the majority of board meetings, according to a recent NYSE/Veracode survey. It is no longer just an IT issue, a policy or compliance issue – it is a corporate risk issue. KPMG states that CEOs are now mainly held responsible for data breaches – a shift from it solely being the responsibility of the CISO. According to Gartner, any lapses will cost executives their job. The stakes are very high and getting it wrong has significant consequences, including:

• Brand damage due to customer loss
• Loss of competitive advantage due to corporate espionage
• Cost of responding to breach

How prepared is your organization to handle a security breach and discuss this in the boardroom?

Join Kevin Peterson, CISSP, Director, Security & Network Transformation, Zscaler, for a compelling webcast that will address cyber-security priorities being discussed at the boardroom level, including:

• Managing security risk in today’s digital world
• Securely leveraging key technologies such as cloud, mobile and analytics
• Addressing security gaps across the ecosystem of customers and suppliers
• Effectively engaging at the boardroom level, reviewing key metrics and aligning strategy with business priorities

Don’t miss this event. Register today!

Companies of all sizes are realizing the benefits of moving to private, public and hybrid clouds, but traditional security tools simply aren’t working well in these environments. The fact is traditional solutions don’t scale well or deploy automatically on systems that are spun up. Many organizations focus on securing their corporate networks, and hope cloud providers have security covered. Or they end up picking and choosing which servers receive a full set of security tools. This leaves the majority of their cloud servers vulnerable to attack with no way to see it coming. Getting visibility into cloud infrastructure to keep critical data secure is the topic of this 20/20. 

By now you've probably heard about new ransomware threats like CryptoWall, which encrypts your data and demands payment to unlock it. These threats are delivered via malicious email attachments or websites, and once they execute and connect to an external command and control server, they start to encrypt files throughout your network. Therefore, spotting infections quickly can limit the damage.

AlienVault USM uses several built-in security controls working in unison to detect ransomware like CryptoWall, usually as soon as it attempts to connect to the hackers’ command and control server. How does it all work? Join us for a live demo that will show how AlienVault USM detects these threats quickly, saving you valuable clean up time by limiting the damage from the attack.

You'll learn:

• How AlienVault USM detects communications with the command and control server
• How the behavior is correlated with other signs of trouble to alert you of the threat
• Immediate steps you need to take to stop the threat and limit the damage

• Common PCI DSS compliance challenges
• Questions to ask as you plan and prepare
• Core capabilities needed to demonstrate compliance
• How to simplify compliance with a unified approach to security

IT security is more challenging than ever. IT departments are tasked with managing a roaming workforce with limited resources and budget. Security solutions need to be effective yet approachable, especially for mid-sized companies. 

Join us for a live webcast featuring Sophos Cloud SVP and GM Bill Lucchini as he demonstrates how cloud-managed security offers simpler, better protection for your organization.  

• Simple, user-centric management
• Complete endpoint, mobile and web security
• Powerful next-generation protection

DNS is used by every device on your network. But are you leveraging it in your security stack? DNS can see every connection destined to anywhere on the internet, whether on or off the corporate network. In fact, Verizon’s highly regarded Data Breach Investigation Report stated that “[DNS is] among the single best sources of data within your organization.”

OpenDNS provides a network security service that can deliver you the quickest “WIN” to improve your security stack. From small businesses without dedicated security professionals to multinational enterprises with complex environments, it takes mere minutes to gain a new layer of breach protection and Internet-wide visibility on and off your network.

OpenDNS’s CEO, David Ulevitch, will discuss:

• Where you have compromised systems and data exfiltration blind spots today.
• Why signature-based antivirus, firewalls, and proxy gateways miss most command & control (C2) callbacks.
• How we prevent (vs. detect) threats with a painless deployment and transparent experience.

• Are seeking to reduce your organizations meantime-to-detect (MTTR) and meantime-to-respond (MTTR) to cyber threats
• Struggle to find the needle in the haystack of security events
• Believe your current incident response process lacks adequate automation and efficiency
• You have a first-gen SIEM platform deployed and are frustrated by its complexity or feel that you still have significant blind spots

• The October deadline to migrate to EMV-enabled technology or face increased liability
• PCI DSS 11.3 (penetration testing methodology) is now a requirement instead of a “best practice”
• More POS systems than ever before now rely on end-of-life systems, including Windows XP and Windows Server 2003

If one AV is good, are two AVs better defense against APTs, ransomware and other sophisticated malware? That’s the way we used to do it back in the ‘80s and ‘90s, but does this approach still work? Is this what is meant by “defense-in-depth”? This question was recently posted in a popular IT community forum, and elicited a rash of responses.

In this webinar, we’ll explore the hows, whys and wherefores of layered defense, and suggest how you can implement a practical defense-in-depth strategy for your endpoints. Come with your questions, and we’ll arm you with ways to improve endpoint defenses and performance, and overall business resilience.  

• What attackers do before the kill chain
• How you can spot their activity
• How you can leverage this information to stay ahead of attacks

• The state of the Union on cyber security
• The risks of entrusting security to the feudal lords (cloud providers)
• The challenges of a status quo approach to security
• Innovative approaches to regain control

Wow! 2014 was a busy year in the email marketing space. Increased reliance on data-driven marketing, the emergence of Google Inbox, and the implementation of the Canadian Anti-Spam Legislation (CASL) was enough to challenge even the most seasoned email professionals.

So what practices will continue to be impactful in 2015? And what should marketers prepare for in the New Year?

Attend the webinar and position yourself to capitalize on today’s email trends and find out how to boost your marketing ROI this year. Join Ryan Phelan, named one of the top 30 digital strategists by the Online Marketing Institute, as he shares what impacted email last year, as well as his predictions for 2015.

Walk away with insight, including:

• Digital marketing trends to be on the lookout for in 2015
• How to make conversations with your customers even more personal
• The true value of the “always addressable” customer
• How to prep for the next big thing in email marketing