@ RSA Conference 2023 USA

What we are hearing from CISOs, Nick Lantuh, Co-founder & CEO of Interpres Security explains, is that cybersecurity has become too costly, complicated, siloed, and requires significant manual engineering to succeed using current methods. These issues dovetail with the competing objectives to secure your organization from large-scale attacks, while simultaneously optimizing costs in today’s budget constrained environment.

A threat-centric cybersecurity approach holds the key to resolving many of these issues, in which defense surface management is key. Tune in as Lantuh and an ESG analyst deconstruct this topic in the following Fireside Chat.

Additional agenda topics include:
• Why defense surface management is needed in today’s security environments
• Defense Surface Management concept and origins
• Steps organizations can take to validate their security strategies
• How continuous monitoring improves the security posture

Utilizing a Zero Trust framework is a necessity with today’s changing nature of work, dynamic threats, and staunch cloud adoption—one that combines trusted identities across users, devices, apps, and workloads, coupled with strong data protection to secure data in-transit, at-rest and in-use across public and private cloud environments.

And while a Zero Trust project may start with access management, it doesn’t end there. This reality begs the question: how can you start or optimize your company’s Zero Trust journey?

Watch this Fireside Chat with ESG Analyst Jack Poller and Bhagwat Swaroop, President Digital Security Solutions at Entrust, as they illustrate the steps for building a Zero Trust framework, explain the action items for CIOs/CISOs, and reveal how critical crypto agility is to enterprise Zero Trust projects.

The industry has been talking about zero trust for over a decade—so why are we seeing a surge in Zero Trust projects now? And why is the Zero Trust conversation often dominated by access management vendors, when Zero Trust extends beyond just identity and access management (IAM)?

Mark Bowker, ESG Senior Analyst, sits down with Anudeep Parhar, Chief Operating Officer at Entrust and Chad Skipper, Global Security Technologist at VMware to answer these very questions in this session, as well as to thread together the importance of PQ, PKI, and identity to the Zero Trust framework.

Tune in to hear more on this topic and learn:
• How is the role of PKI changing as we move toward Zero Trust networks?
• What level of urgency should IT & infosec leaders put on being quantum ready?
• What is the benefit of preparing for a PQ world today?

The 24x7 threat of a data breach is making more CISOs hyper-focused on securing cloud-resident sensitive data, as this data is a prime target for malicious actors. Its presence poses a huge risk, especially for model-driven organizations with hybrid and multi-cloud environments.  

Join Jack Poller (Senior Analyst at ESG), Bernard Brantley (CISO of Corelight), Rahul Gupta (Head of Security & GRC at Sigma), and Amer Deeba (CEO of Normalyze) in an interactive panel as these security leaders share insights on: 

• Why the security of cloud-resident data is a key concern for CISOs
• How enterprises are shifting security strategies with more emphasis on protecting cloud-resident sensitive data
• Selecting an effective framework for cloud data security
• Top three best practices to help security teams be more effective at protecting sensitive cloud data

Because cloud environments are noisy, nobody has enough resources to pay attention to every single alert. The only way to effectively prioritize risks and detect threats, therefore, is to gain complete visibility and context from code to cloud.

To achieve this feat requires consolidating all previously siloed capabilities—e.g. scanning of cloud accounts for misconfigurations, CSPM, CIEM, KSPM, CWPP, and more—to a single view. Given these myriad components, the path to success is often, well, cloudy.

In this Fireside Chat, ESG Senior Analyst Melinda Marks sits down with Tim Chase, Global Field CISO at Lacework, to examine actionable strategies with which you can cut through the noise to prioritize cloud security risks with precision. Tune in to discover how:

• To strengthen cloud security risk prioritization
• Developers and security pros should collaborate to identify vulnerabilities
• Lacework helps their customers reduce cloud attack surfaces
• And much more

Context is critical as IT professionals are tasked with making sense of vulnerabilities in a cloud-native world. For example, vulnerabilities can happen at any point in the app development cycle (CNAPP), and security pros are staring down the tunnel of information overload with unceasing alerts.

With so much on their plates, how can these pros dial into the security vulnerabilities that are a must-tackle and protect their cloud-native environments?

ESG Senior Analyst Melinda Marks sits down with Papi Menon, VP of Product Management, Emerging Technologies & Incubation at Cisco Panoptica, to discuss this topic and explain:

• Context is critical: why does vulnerability matter?
• How Cisco’s Panoptica helps secure your cloud journey
• Why a trusted partner like Cisco matters in your cloud security

With the ever-increasing number of cyber breaches, a significant question remains: have we accepted or turned a blind eye to the problem? The recent breach reporting mandates and global regulatory requirements make it clear that we need to do more to protect our assets.

Although challenged by the cost of cyber insurance, talent gap, increased complexity, more audits, and deeper analysis by investors, it is still essential to find ways to reduce costs, retain skilled talent, demonstrate risk management, and improve cybersecurity.

Join ESG Principal Analyst Jon Oltsik and Ross Brewer, Chief Revenue Officer at SimSpace, for an exciting Fireside Chat that delves into the world of modern cybersecurity strategies to help you stay ahead of the attack curve. This event will cover:

• Tactics for satisfying investors
• Ways to fill the talent gap while moving from cyber assumptions to cyber certainty
• And how you can put your cybersecurity strategies to the test, balance the checkboxes, and create predictability in a cyber range

While zero trust has been touted as a north star for enterprise security, some experts argue that it may not be effective in all scenarios. With this reservation in mind, how can organizations, like yours, ensure that their Zero Trust strategies are effective, aligned with their security goals, and thwart today’s persistent phishing threats?

Find out by tuning into this Fireside Chat between ESG Principal Analyst Jon Oltsik and Deepen Desai—Global CISO and Head of Security Research & Operations at Zscaler—as they survey how Zero Trust fares against the current threat landscape.

Agenda items include:
• Zero Trust challenges & strategies for effective adoption
• A review of the 2023 ThreatLabz Phishing Report with the latest trends & techniques
• Tactics to pivot for supply chain, IoT, and MFA attacks
• The rise of AI chatbots and their impact on cybersecurity defenders
• And much more