As organizations migrate workloads to cloud computing, they benefit from flexibility and agility, but security operations grow increasingly difficult, especially when it comes to ensuring adherence to critical regulations, such as PCI-DSS, NERC or the EU's GDPR. Gaining the needed visibility into cloud environments...
In this session, a security technologist discusses and reviews the anatomy of a breach, including the effects a breach has in real and soft money. He also reviews attacker motivations and how threat intelligence can correlate activities to help highlight indicators of compromise and analyze and mitigate the damages of...
The Canadian payment card industry has experienced first-hand the impact of chip and PIN deployment, and how fraudsters have responded. During this session, Gord Jamieson, head of risk services for Visa Canada, will explain why security must be a 24/7 concern, how security is moving at the speed of innovation, and...
This session shares the empirical findings of the CERT Insider Threat Center's more than 15 years of research into both malicious and unintentional insider threats. The findings demonstrate how pervasive the insider threat is in all sectors, both private and public. The session also outlines what types of threats are...
In the last year, we've seen a significant increase in cyber activity, from propaganda through "information warfare" to mass-scale cybercrime. Increasing political tensions complicate an already complex international response. Differing approaches to cyber and privacy risk in Europe and the United States have caused...
Status check: With just several months to go until any organization that handles Europeans' personal data must comply with the EU's General Data Protection Regulation, or GPDR, how prepared are organizations? While the May 25, 2018, enforcement date is fast approaching, EU privacy watchdogs are continuing to issue...
When IT isn't the main focus of your business, the perspective on security changes, but the threats are often the same. It's often not fiscally feasible to expend resources "hunting" threats, which makes obtaining the right kind of threat intelligence crucial. Catherine Buhler, CISO of BlueScope Steel, will discuss...
Many organizations are undergoing a transformation to support digital platforms and stay competitive; but in order to maintain security, they have to ensure that access to these platforms is limited and that security remains a priority. New vulnerabilities to cybercrime are being introduced through hybrid...
Security teams are under intense pressure to not miss attack signals. Separating the signal from the noise is difficult. But few organizations have carte blanche to hire large teams. How can you build a tight and effective security group? Ben Chung, CISO of NTT Communications ICT Solution, will talk about how to...
After several years of discussion, Australia's Parliament passed a mandatory breach notification/disclosure law in February. It requires organisations to notify affected consumers and regulators, ensuring transparency in an era of ever-increasing cyberattacks. Although large organisations generally follow the advice...
The financial risks to organizations from data breaches come from a variety of angles, from share price hits to class-action lawsuits to fines from regulators to reputational damage. As such, the insurance industry has jumped full steam into cyber. Larger insurers are already helping companies spot and mitigate...
While the Internet of Things is offering new ways for enterprises to collect data to improve their businesses, it has a dark side: security. Over the past year, IoT devices have been used for devastating distributed denial-of service attacks. IoT manufacturers have been blamed for poor security controls, and companies...
Many organisations understand that in today's enterprise technology landscape, the traditional network perimeter approach to defending against cyber threats is not enough to ensure a cyber resilient environment. This has given rise to the concept of identity being a key focal point in any cybersecurity strategy. Ian...
Too many organizations continue to address breach response from a reactive mode - having a crude disaster-recovery plan in place in case something "does" happen, rather than accepting that something "will" happen and proactively preparing for it. In this session, a panel of legal, technical and law-enforcement experts...
Detective Chief Inspector Jason Tunn with the Metropolitan Police Service in London, who is the department's lead anti-fraud and cybercrime investigator, walks us through a high-profile case involving the arrest, and recent conviction leading to jail time, of two cybercriminals with connections to a Russian crime...
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing ffiec.bankinfosecurity.com, you agree to our use of cookies.
