Course Library

►

Incident Response Plans: Global Compliance Mandates and Obligations

Darrin Kimes - US Secret Service, Sadia Mirza - Troutman Pepper  •  In Development • 

Creating a cybersecurity incident response plan is a fundamental requirement of any cybersecurity program - and a requirement of many global regulations, including GDPR and PCI DSS. During this workshop, Troutman Sanders' Sadia Mirza will discuss the benefits of table top exercises. She then will be joined by law ...

►

Monitor and Identify Malicious Threat Before they Cripple your Organization

Dave Martin - Open Systems  •  November 16, 2030 @ 12:00 AM (EST) •  Available OnDemand for Premium Members • 

Today's threats are more sophisticated than ever and despite significant investment in prevention technologies many organizations continue to suffer damaging attacks. Join Dave Martin, Open Systems' Senior Director of Product Management- Threat Response as he share best practices model to minimize risk that combines ...

►

Moving from Indicators of Compromise to Indicators of Attackers: But Will Attacker Attribution Really Help Us?

Jackie Castelli - CrowdStrike, Richard T. Jacobs - FBI NY, Noam Jolles - Diskin Advanced Technologies, Avivah Litan - Gartner Research  •  Available OnDemand for Premium Members • 

How does attacker attribution help a CISO and an enterprise? The answer: More than most might think. Most organizations don't care who the attacker is. They just want to stave off attacks. But could they do more? By using indicators of compromise, for instance, organizations can strengthen their defenses. IOCs are ...

►

Business-Driven Security: Bridging the Gap between Security and 'The Business'

Peter Beardmore - RSA  •  Available OnDemand for Premium Members • 

Organizations of all sizes today face serious and consequential risk management challenges. Technology is often presented as the ultimate solution. But in many cases, organizations are experiencing not just a technical challenge, but a "language" challenge, especially when it comes to risk management communication ...

►

Insider Threat Detection: Lessons from the Trenches Based on Real Insider Cases

David Pollino - PNC Bank, Randy Trzeciak - CMU  •  Available OnDemand for Premium Members • 

What are the biggest threats to your organization's data? Recent media attention to high-profile cyberattacks would lead an organization to think external threats are its only concern. Unfortunately, this misconception allows another significant threat to your organization's critical assets to stay completely under ...

►

The Growing Dangers of Interconnectedness and Its Adverse Impact on Availability, Reliability and Reputation

David Hahn - Hearst  •  Available OnDemand for Premium Members • 

When an attack strikes, the first task on-hand for anyone working in cybersecurity is to stop the disruption; the second task is to ensure that critical data is protected. And for Fortune 500 companies and other leading U.S. businesses like Hearst Corp. - a media and business information conglomerate with ownership of ...

►

Security Threats vs. Unmitigated Risks

Brian Soldato - NSS Labs  •  Available OnDemand for Premium Members • 

Enterprises have invested extensively to address the evolving threat landscape, but security effectiveness remains a guessing game. The problem is, enterprise security teams cannot be sure of the effectiveness of their security controls once they are in place. At the same time, they are under pressure to quantify ...

►

Faster Payment, Faster Fraud

Kevin Donovan - BioCatch  •  Available OnDemand for Premium Members • 

Following NACHA's new rule for same-day ACH transactions, businesses and consumers are now able to benefit from same-day transaction processing, providing quicker access to payroll, account transactions and more. While beneficial for businesses and consumers, same-day ACH has necessitated that financial institutions ...

►

In the Wake of WannaCry: Creating a Data Security Action Plan that Addresses the Core Elements

Jennings Aske - New York-Presbyterian, Eric Chabrow - ISMG Security Report, David Pollino - PNC Bank, Mitch Zahler - HSBC  •  Available OnDemand for Premium Members • 

In the wake of recent ransomware attacks, such as WannaCry, what lessons do we have yet to learn? Ransomware attacks are nothing new, and while WannaCry was widespread, it was not sophisticated or stealthy, necessarily. So why did it have such an impact? In this session, our panelists will discuss why the "wartime ...

►

Industry and Practitioners in Crisis

Art Coviello - former CEO, RSA Security; Venture Partner, Rally Ventures  •  Available OnDemand for Premium Members • 

The biggest companies often take matters into their own hands when it comes to breach prevention, eschewing long-term relationships with vendors and charting their own courses with a dizzying array of technologies. Meanwhile, smaller companies fall further behind, struggling to find talent and budget, while security ...

►

Rethinking Account Takeover Prevention: Getting to the Root of the Problem

Emma Mohan-Satta - Kaspersky Lab  •  Available OnDemand for Premium Members • 

We all know how fragile our digital identities are, and any business offering digital accounts knows about the risks of account takeover attacks. As more and more businesses undertake digital transformation strategies, account takeover becomes an increasingly lucrative attack option for fraudsters. With strategies ...

►

Major Data Breach Cases in Canada: Lessons Learned from the Legal Perspective

Imran Ahmad - Blake, Cassels & Graydon LLP  •  Available OnDemand for Premium Members • 

How have major Canadian data breaches helped to shape incident response plans and data security at the organizational level? In this session, Imran Ahmad, an attorney who leads the cybersecurity practice at Miller Thomson and wrote the book, "Cybersecurity in Canada: A Guide to Best Practices, Planning and ...

►

Cyber Insurance: A Rising Role in Managing, Mitigating and Transferring Risk

Richard Bortnick - Traub Lieberman Straus & Shrewsberry, LLP, Warren Cooney - AXIS Insurance, Greg Markell - Ridge Canada Cyber Solutions Inc., Ruby Rai - AIG  •  Available OnDemand for Premium Members • 

The financial risks to organizations from data breaches include share price hits, class action lawsuits, fines from regulators and reputational damage. As a result, the cyber insurance market is heating up. Larger insurers are already helping companies spot and mitigate weaknesses as part of their coverage and helping ...

►

Business-Driven Security: Bridging the Gap between Security and 'The Business'

Ben Smith - RSA  •  Available OnDemand for Premium Members • 

Organizations of all sizes today face serious and consequential risk-management challenges. Technology is often presented as the ultimate solution to this problem, but in many cases, organizations are experiencing not just a technical challenge, but a "language" challenge, especially when it comes to risk-management ...

►

Insider Threat Detection: Lessons from the Trenches Based on Real Insider Cases

Michael Theis - Carnegie Mellon University CERT Insider Threat Center  •  Available OnDemand for Premium Members • 

This session shares the empirical findings of the CERT Insider Threat Center's more than 15 years of research into both malicious and unintentional insider threats. The findings demonstrate how pervasive the insider threat is in all sectors, both private and public. The session also outlines what types of threats are ...