Dedicated to serving the information security community, in person, in print and online.

Did you know that natural disasters, such as hurricane or flood only account for approximately 3% of all business disasters while hardware failures and human error account for more than 70%? Join us for this webinar as we discuss the potential disasters within a disaster recovery plan and how you can avoid them and become the calm within the storm.
 
Let’s face it, as an IT professional, anything that interrupts normal business operations could form the basis of disaster for you. Just remember, whatever the cause of your interruption, how you prepare to respond that will decide the fate of your business. So, are you prepared? Even the best disaster recovery plans have the potential to fail. Until they are tested against an actual disaster it is difficult to know where the potential weaknesses are.

5 Reasons Why Disaster Recovery Plans Fail & How To Fix Yours

How do you know what devices are accessing your network?
How do you detect a rogue device?
What can you do to prevent a threat in your network and minimize the risk?

With workforce mobility, bring your own device (BYOD) into the workplace, and guest access into your network, enterprises are realizing how important it is to track and monitor who and what is accessing the network.  We’ve recently seen examples of how rogue devices have caused significant damage through gaining access to corporate infrastructure through network vulnerabilities.  And, it’s alarming how easy it is for this to happen.  A rogue or unknown device connects onto what you thought was a protected network, gains access and proceeds to cause often irrevocable damage which can result in millions of dollars to your business.  Can you afford for this to happen?  Attend this webinar, which focuses on how to manage this threat, reviewing the potential risks, and how technology can be applied to proactively eliminate the issue.  

The panelists will look at how Network Access Control (NAC) or Endpoint Visibility, Access, and Security (EVAS) is being implemented by enterprises worldwide to address network security while continuing to support current infrastructure and the expanding mobile workforce.   

Topics of discussion will include:

How to gain complete network visibility and control of all network devices from a cost effective, centralized deployment

How to manage endpoints and deal with BYOD, Rouge Devices, and Corporate Mobile devices

Achieving interoperability with third party security systems, such as patch management, endpoint compliance and SIEMs, to automate security control platform that uses contextual security decisions to make endpoint control actions.

Gaining control over BYOD, wireless systems, and unwanted applications and have the ability to black and/or white list these devices and/or applications

Take Back Network Control: Taming the Rogue Device Threat

As 2013 draws to a close, join Infosecurity magazine as we discuss the year that was and what may be in the world of cloud security. 

Among the topics we will cover are events over the past year that have impacted the cloud computing landscape – from regulations to revelations. Edward Snowden and the NSA were not the only players of note in 2013, so join our panel of experts as they discuss the trends impacting this space, and what tools became available to security practitioners over the past year. 

We will wrap up the session as our panel predicts what’s ahead for 2014, and the biggest trends in cloud security we can expect to unfold.

Five Cloud Security Trends for 2014

Cyber-attacks are a business reality, and they are question of when your organization will be compromised, not if. Well-executed, better-coordinated attacks are today’s norm, and organizations must now take a different approach to protecting their people, assets and IP.

At the same time, security leaders want to minimize business disruption and control risk. Yet most organizations don’t have a comprehensive security approach to enable this. With a holistic and proactive approach, organizations can detect threats earlier, enabling better optimization of resources for mitigation. And when an attack takes place, discovery time for the cause can be significantly reduced if your organization has full visibility of the security and network environment.  

Join Infosecurity magazine, as our panel explains why organizations need to think differently and adopt a complete approach to security that assesses risk, detects threats earlier, proactively protects and enables a fast response when a breach occurs.

Hitting the Reset Button: Developing a Proactive, End-to-End Security Strategy

In today’s online world, where new technologies bring benefits, but also give rise to new threats, businesses need to stay a step ahead of the criminals.

One vital tool is frequent penetration testing. In the past, businesses had point-in-time testing performed – testing that occurred once or twice a year – but nowadays that strategy is no longer the most effective in preventing data breaches.

But what are the ethics, legalities, and practicalities of pen testing, and how should it fit organisations' IT security models?

This webinar aims to answer those questions and will cover:

The evolution of penetration testing from 'test and forget' to a structured assessment of vulnerabilities;
The professionalization of the penetration testing industry;
The changing legal and regulatory landscape

Penetration Testing: Staying a Step Ahead of the Hackers

Traditional perimeter security is failing. The threat from advanced persistent threats shows no sign of easing, every business in its path.

One key ingredient of APTs is obtaining access to privileged user accounts.

This fundamental flaw in distributed systems enables attackers to compromise data. Monitoring and detection are critical, but preventing privileged users and their access from being used against your organisation to compromise data is vital.

Most organisations don’t even know when they have been targeted. The average number of days before detection was over a year: 416 days.

In this webinar, we will look at:

How APTs and other intrusions exploit privileged user accounts;
How to protect those accounts without hindering IT operations;
How to detect APTs and vitally, how to protect the organisation from the consequences of an exploit.

APT Protection via Data-Centric Security

Every two months, our Patch webinar gives listeners a chance to stay up to date with the latest security updates and patches, and to look deeper at some of the issues around patch management.

In each webinar, we start with a look at Microsoft's Patch Tuesday releases and round up the main security updates and patches from other software and operating systems vendors. We then look at the key "out of band" patches, and our expert panel will discuss these and developing issues in the field of security updates and patching.

And, in each session, we will conclude with audience questions: your chance to quiz our experts on the best ways to keep your infrastructure secure.

October Patch Update - Sponsored by Qualys

The Poison Ivy remote access tool (RAT) has been used in several high-profile malware campaigns, most famously, the 2011 compromise of RSA SecurID data. In the same year, Poison Ivy powered a coordinated attack dubbed “Nitro” against chemical makers, government offices, defense firms, and human rights groups.

Posion Ivy is so widely used that security professionals are having a harder time tracing attacks that use the RAT to any particular attacker.

Join this webinar to learn exactly how Poison Ivy works, why it remains one of the most widely used RATs and discover free tools that can be used to combat it.

Poison Ivy: Sniffing out the RAT

Today's businesses need to secure the user reliably, and securely, in an environment where BYOD is replacing company issued computing.

Location-based information can add a valuable extra level of information to security teams too, but how do businesses balance the demands for ubiquitous access to the network – from any place and any device – with robust security?

In this webinar we will look at:

The drivers for BYOD
BYOD's business advantages – and security challenges
The role of WiFi networks in security
How security teams can tap into location and usage information to deploy new devices flexibly, and safely.

WiFi, BYOD and Security: Where are the Devices, and Where are the Users?

In business, sharing information within, and between, organisations is more important than ever.
 
But with the growth of both mobile workers and of mobile devices, can information transfer ever be secure?
 
This webinar will discuss:
 
How to “size” the problem and assess the risks around how data is transferred;
The importance of management, control and visibility of information within the organisation;
How to ensure compliance and minimise any data loss risk and keep the benefits of mobility and closer collaboration.

Security, Mobility and Compliance: Can An Organisation Have It All?

Sensitive data is shared more than ever, through cloud services and via remote access as more and more employees use their mobile devices for work.

This brings practical advantages, but brings more risk of identity theft, data breaches and outages.

A security challenge faced by enterprises is that passwords are not enough. Multi-factor authentication is critical. But businesses looking to implement multi-factor identification need to balance improved security with its costs and the potential burden on the IT department.

In this webinar we will examine:

• The different existing methods of two-factor authentication with their pros and cons;
• The benefits of using digital certificates (Certificate-based authentication provides users with the strength and benefit of two-factor with no additional effort required) and how it works;
• How to implement a secure access to all users for internal networks, cloud services and mobile devices;
• How to implement a strong identity verification in a scalable manner to accommodate growth.

How to Make Access to your Sensitive Data More Secure - The Easy Way

Female information security pros account for less than 10% of the industry’s professionals, yet talent is rife amongst those that have entered the world of information security. This webinar will take a look at the reasons for this deficiency, the career paths of a couple of extremely successful female information security professionals, and highlight initiatives set up to enable mentoring, support and collaboration amongst female information security professionals.

Women in Information Security - In Association with (ISC)²

Industry experts are almost unanimous in their acceptance of authentication as the unsolved problem facing the information security industry. Passwords are both forgettable and inadequate, memorable information is easily sought out via social networking sites, two-factor authentication can be inconvenient, three-factor authentication is inconvenient, biometrics are treated with suspicion…As an industry, the authentication problem is yet to be cracked, and the consequence is enormous. Authentication is at the heart of anything meaningful we do online, and the ability to authenticate online in a secure, timely and convenient way is crucial in today’s world. This webinar will take a look at the problem, the existing offerings, and potential future solutions.

Access Denied: Is Authentication the Unsolvable Information Security Problem?

Edward Snowden has become a household name through his whistleblowing, but looking beyond the game of ‘Where’s Snowden’ that the world’s media seem to be playing, are questions about the UK and US government’s acquisition of data, and the reasons for the collection of data. This webinar will look at the ways that governments are sharing data and what measures – or lack of – are in place to protect this information. It will also take into the account the motivations or considerations of the companies who are holding the data that governments are requesting – ISPs, telecoms, search engines and e-commerce sites. This webinar will also take a look at the technology and protocols that should be in place to ensure that the data government is collecting – rightly or wrongly – is protected and secured.

Government Data Collecting, Sharing, and Protection

The proliferation of hacking tools known as zero-day exploits is raising concerns at the highest levels in the information security industry and in government, even as U.S. agencies and defense contractors have been named as the “biggest buyers of such products”. As one data breach after another is the result of a zero-day attack, the industry needs to continue its research on the blueprint of a 0-day and continue to evolve defense technology. This webinar will also address the use of 0-day exploits in the increasingly publicized ‘hack back’ movement.

Zero-day Attacks for Defense and Attack - Sponsored by Fortinet

2013 has been the year where there has been a real sea-change in the way the industry perceives data protection and data breaches. In the past, the focus has been on prevention, but it is now more widely accepted that the question of if you will suffer a data breach is now when you will suffer a data breach. As a consequence, the information security industry is shifting its focus to detection and remediation. This webinar will consider the aftermath of a data breach. Experts will discuss the impact of disclosure, and take a look at strategies for PR, business continuity and forensics.

Data Breach Detection and Remediation - Sponsored by Tripwire

In today’s cyber threat landscape, identifying your enemy is a crucial piece of any defense plan. 

Finding out who your attackers are, how they work, and what they want is critical to protecting your data and intellectual property

Drawing on results from a sample of nearly 1,500 campaigns tracked by FireEye, this webinar explores and discusses the common facets of malware attacks and what they often reveal about the culprits.

By examining these areas, security professionals can make great strides in identifying threat actors 
and better defend their organizations against future cyber assaults.

In this webinar we will cover:

•The seven clues to identifying attackers
•Key sources of attack information
•How to use this intelligence for greater protection

Advanced Cyber Attacks: Identifying The Culprits

...A Year From Now You May Wish You Had Started Today
 
We’ve all developed very personal relationships with our smartphones and tablets. As we use them at work, at home, and on our travels, it’s only natural to see these useful gadgets as entirely benign.

Unfortunately this is not the case. Too many people, including C-level executives and privileged users, make irrational judgments, when it comes to mobile devices. As a result, they overlook the need to protect them – and the data they carry.

In this webinar we will:

Assess the growing threat posed to, and by, personal devices;
Examine the role mobiles can play in data loss, and how to prevent it;
look at the different strategies for dealing with personal and company-owned devices;
Discuss steps businesses can take to reduce and mitigate data loss and security risks, and to “harden” personal devices against attack.

Creating a Mobile Security Action Plan...

Presented by

About this talk

More from this channel