agenda

Think Tank

Supply and Demand: Closing the Growing Gap in Cybersecurity Skills

At a time when the threat landscape ever expanding, two out of three organizations worldwide claim to have a lack of the IT security staff needed. The need for cybersecurity professionals is at an all-time high. The deficit of qualified individuals has made the need for automated security tools more of a requirement than a desire in order to maintain a strong security foundation. Today's products and technologies can enable even small teams to appropriately secure multiple websites and applications, offering potential answers to the pressing recruitment issues. 

Takeaways:

Think Tank

The Elephant in the Room, Data Breaches

In 2019, data breaches endured yet again as the largest security threat noted by organizations and IT security professionals alike. If data remains as a high valued commodity, ensuring data privacy and securing personal data will continue to be at the top of the list of an organization's concerns. The increases in privacy legislation, such as GDPR and CCPA, and the understanding of the ramifications stemming from a breach have allowed these concerns to remain heavily in the spotlight. Web application flaws have been identified as the top cause of data breaches. As such, establishing and maintaining web application security has developed into a high priority for all organizations. 

Takeaways:

Think Tank

Combating the Rise in Cloud-based Threats

As the cloud migration continues, securing data and critical infrastructure is going to require new approaches. Organizations have struggled to maintain control of critical data and ensure real-time threat intelligence, giving cloud-based threats the ability to multiply. Data buckets being misconfigured, or inadequately secured increases the risk of a breach. Being able to manually manage security for large web application infrastructures has become a thing of the past. As such, organizations are being pushed to reevaluate their approach to web application security. 

Takeaways:

Think Tank

Automating Cybersecurity

IT security professionals all face one major issue: being asked to do more, with less resources. Automation and integration are a necessity in order to meet the demands of an organization's security needs. Managing risk without diminishing the speed and quality of development is achievable by integrating security into agile processes, like DevOps or CI/CD. Since most security teams are understaffed, automated solutions are becoming a requirement, rather than an option to properly manage the ever-increasing workload. 

Takeaways:

Think Tank

IoT Devices and the

Hard-coded credentials, insecure wireless communication, unencrypted personal data, unverified firmware updates, vulnerable web interfaces - the list goes on. Every organization is in a race to be the first to deliver new products and technologies. Unfortunately, to properly secure this is never the first thought. It's not shocking that the flourishing IoT space has generated an abundance of security issues. Compromised IoT devices can allow access to data, be used as points of entry for future attacks, or act as DDoS attack drones. Home automation products and wearables open the door for personally identifiable information and other valuable data to be stolen. 

Takeaways:

Think Tank

AI: Friend or Foe?

Advances in artificial intelligence (AI) are introducing new technologies to a wide array of products across every industry, especially cybersecurity. Facial recognition and natural language processing have become a reality thanks to deep learning algorithms, however, there is a dark side to these advancements. Cybercriminals have managed to weaponize AI to create extremely intricate malware and attack methods. This has forced organizations to use advanced heuristic solutions rather than counting on known vulnerability and attack signatures.

Takeaways:

Think Tank

Going Mobile, Securely

The average employee uses at least 3 different mobile devices to access business data. This number has risen and so has the amount of company data that is being stored on each device. Each device represents another endpoint that needs to be secured. While mobile malware threats are low, it's expected that there will be a rise in data breaches directly related to mobile devices. Providing access to company data via a secure web application infrastructure with real-time vulnerability management is one way of reducing risk with mobile devices. 

Takeaways:

Think Tank

Security in the Crosshairs - The Future Comes into Focus

All organizations, regardless of size, are continuously evolving through modern technologies. Having an incident response plan and an effective cybersecurity strategy is not a luxury, but rather a requirement. Finally, security training for employees to improve their awareness is becoming the rule instead of the exception. Security is now establishing a permanent footprint within the software development lifecycle, with SecDevOps/DevSecOps processes to incorporate security at all layers of development. 

Takeaways:

Presented by: