See All Locations
For many years complying with government standards and industry regulations has been seen as a check box in the lengthy list of IT security tasks. However, most recent changes in the ecosystem (e.g., increased cyber security threats) have led to a rethinking of this approach. More and more organizations realize that instead of looking at Governance, Risk, and Compliance from a centralized perspective, it is more efficient to let business operations drive these efforts as that's where the organization's risk knowledge resides. Join this webcast where we reveal how to tackle risk and its associated controls by business unit and how to automate your efforts.
Fulfilling regulations is just one part of this approach – not doing so is also about risks. But organizations have to understand how to use risk scores and controls as the standard approach for driving their IT security efforts.
Martin Kuppinger, founder of KuppingerCole, will talk about “the need for risk management” and the benefits of taking a risk-driven approach. These benefits go well beyond identifying what to do first – thinking in risks is also a vital element in closing the communication gap between business and IT. In the second part of the session, Dr. Torsten George of Agiliance then will focus on how to implement a risk concept and act upon risks to not only fulfill regulatory compliance but to help organizations in better driving their business organization.
On January 1, 2011 the Payment Card Industry (PCI) Data Security Standard (DSS) version 2.0 took effect. The new requirements represent a daunting task when it comes to improving an organization's existing security policies to include virtualized environments, policy governance, risk remediation, and 100% asset coverage. While the media has been very light on detailing how significant the changes in PCI DSS 2.0 are and how they impact organizations, the PCI Security Standards Council must have recognized the significance of these modifications, since they provided a timeline that allows organizations to work for a full year before having to demonstrate compliance with PCI DSS 2.0.
However, if you haven’t started to prepare for PCI DSS 2.0 your time is running out soon. Join us for this webcast where we reveal the impacts of PCI DSS 2.0 on your organization’s strategy, information technology, and security operations as well as outline ways to enable you to certify faster and at lower cost.
The most recent wave of cyber security attacks revealed major shortcomings in today’s threat and vulnerability management approach. How vulnerable is your organization? Join us for this webcast where we showcase a pro-active security risk management strategy that enables organizations to reduce risk by making threats and vulnerabilities visible and actionable, enabling them to prioritize and address high risk security exposures before breaches occur.
As computer software has become the backbone of modern civilization, organized cyber criminals, so-called hacktivists, state sponsored cyber attackers, and terrorist organizations try to exploit design flaws and weaknesses in the applications in order to generate revenue and carry out criminal activities. The growing number of cyber attacks has become one of the most serious economic and national security threats organizations are facing.
Most recent cyber attacks and associated data breaches of Google, Epsilon (a leading marketing services firm), and RSA (the security division of data management giant EMC) are just the tip of the iceberg. However, these incidents reveal the dilemma that organizations are facing as their current vulnerability measures are unable to keep up with the evolving exploits, including perimeter intrusion detection, signature-based malware, and anti-virus solutions. How vulnerable is your organization? In this webinar, KuppingerCole's co-founder and Principle Analyst Martin Kuppinger will talk about the key elements of a pro-active security risk management strategy. Then, Dr. Torsten George from Security and Operational Risk Management pioneer Agiliance will describe the elements of a properly planned and implemented security risk management program that enables organizations to reduce risk by making threats and vulnerabilities visible and actionable, enabling them to prioritize and address high risk security exposures before breaches occur.
The number of regulations that affect organizations can easily exceed a dozen in most regulated industries; proving even more challenging, when organizations operate globally. In this context, many companies struggle to map multiple frameworks and specifications across configurations settings, leading to cost-inefficiency, inaccuracies, and often audit fatigue. How do you address these challenges?
In this webinar, KuppingerCole's co-founder and Principle Analyst Martin Kuppinger will give you an overview on how to stay compliant in a multi-regulatory environment. Following to Martin´s presentation, Cognosec CEO Oliver Eckel will reveal best practices of managing compliance in today's multi-regulatory world. Oliver, who formerly used to be the Head of Corporate Security at Bwin Interactive Entertainment AG, will describe to you in detail, how he has been able to manage multi-regulatory compliance in one of the most heavily regulated industries out there, the gaming industry.
