Date: Tuesday, February 6, 2024
Time: 8:00 a.m. - 12:00 p.m. ET
Location: Virtual
Contact: Bill Sieglein, CISO Executive Network, bill@cisoexecnet.com
How confident are you in your security stack? Is it ready to topple over? Was it well planned or built randomly? Come find out what your peers are doing about their security architecture for layered defenses.
Our environments are more complex than ever. We must have visibility and controls at every layer of the stack or our risk remains too high. Members always remind us that being secure all the time is essential as attackers only have to be good once. We will look at how to build a layered defense from the outside in, inside out, and other creative ways to set up a secure defense in depth program. In this series we will talk about the key controls in each of these security stack layers. Getting back to basic hygiene for each area will be our theme. Come prepared to hear about and contribute your best practices for securing the full enterprise. Security Controls Covered: Security Frameworks, Security Assessments, XDR, EDR, NDR, MDR, Application Security, Attack & Breach Simulation, Deception Tools, IAM, Data Protection, CSPM, DSPM
Topics likely to be part of this discussion include:
- Defense in depth strategies
- Layered defense model- how much in-house vs. outsourced
- Proving our layered defenses are working
- Table tops to simulate attacks on our overall defense posture
- Budgeting for layered defense - where do I focus on my limited budget Board metrics and reporting
- Security Maturity Models and Frameworks - NIST, CSF, ISO
- Essential element of a layered defense - what tools we must have Role of cyber insurance in determining what is “insurable”
- Best of breed vs. Suite- the argument is back!