SANS Certified Instructor Mark Bristow asked some critical questions about current threats and challenges for OT security in this years OT/ICS Survey. The webcast will explore actual and perceived risks, threats, information sources and operational implementation challenges as well as levels of investment in this important topic, building on results from past SANS ICS surveys that have been leveraged to drive the industry into to new areas of...

As organizations continue to deal with emerging threats in the malware space, its easy for some to take a complacent view and say, Malware, haven't we done this already? We've been dealing with this for decades. And while people who take this view aren't necessarily wrong, ransomware continues to be one of the most popular cyber attacks among organizations. With malware and ransomware becoming more sophisticated and threatening than ever befor...

The 2020 Automation and Integration Survey provided an overview of where organizations are in their automation/integration journey. This new 2021 survey builds upon its predecessors by identifying those areas where organizations feel they have achieved the benefits of security automation and integration (SOC, IR, other) and then exploring why they feel this way: How mature do organizations feel their use of automation is this area? What are th...

This webcast will explore how users protect their phones at a device and/or application level and gain insights on how organizations secure their company-provided, enterprise devices. Security is more than just a simple device today, so we aim to cover the best practices for protecting your personal and company-owned data.

Today, defenders have in their arsenal faster and more capable technology than ever before. We can build robust prevention, detection, and response processes that augment and empower security analysts. In this solutions forum, we’re going to look at four areas of technology that deliver these improvements and help bolster an organization’s security posture: Zero Trust Endpoint Detection and Response Identity and Access Management R...

In the SANS 2021 Top New Attacks and Threat Report, John Pescatore provides insight into the threats highlighted during the SANS panel discussion at the 2021 RSA Conference. On this webcast, John will take a deeper dive into the paper in a conversation with sponsor representatives.

There are many stages in the attack lifecycle in which we can detect or prevent an (advanced) attacker from getting closer to their final objectives. One thing we always come across however is that the attacker likes to persist in your environment, be it for two days, two months, or two years. It is important from a blue team perspective to understand the techniques employed by the attackers to remain in your environment for a longer period of...

Insider threats are some of the more difficult threats to detect from both a human and technology perspective. Understanding the problem, risks, and methods to prevent insider threats is the first step in ensuring this toxic risk does not affect your organization. Join SANS Senior Instructor Heather Mahalik, and BlackBerry VPs Pooja Kohli (Product Management), and Tony Lee (Global Services Technical Operations) to learn how insider threats and...

Modern businesses have seen an increasing reliance on the cloud for collaboration, communication, and data storage. SaaS platforms like Microsoft 365 have hugely diminished the pain of moving to remote work, but this shift can leave significant openings for potential loss of essential data. Does your data storage and disaster recovery plan cover the hidden vulnerabilities of your SaaS platform? It is true that cloud storage is often more secur...

In the SANS 2021 Top New Attacks and Threat Report, John Pescatore provides insight into the threats highlighted during the SANS panel discussion at the 2021 RSA Conference. This webcast will include practical advice from the paper, including insights from SANS instructors Ed Skoudis, Heather Mahalik and Johannes Ullrich on the critical skills, processes and controls needed to protect their enterprises from these advanced attacks.