Developing a Rugged DevOps Approach to Cloud Security
Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.
Using Behavior to Protect Cloud Servers
Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.
Keeping Secrets - Emerging Practice in Database Encryption
Explore emerging database encryption practices for high-sensitivity workloads, covering threat models, production ops, data in-use protection, and blind administrator approaches.
Transparency in the Software Supply Chain - Making SBOM a Reality
Explore the concept of Software Bill of Materials (SBOM) and its potential to enhance transparency in the software supply chain, discussing benefits, challenges, and implementation strategies.
Surviving the Modern Compliance Minefield
Navigate the complex landscape of modern compliance with insights on legal actions, data protection, and evolving standards for cybersecurity professionals and organizations.
A Day in the Life of a Security Analyst
Explore a day in the life of security analysts, covering key aspects like governance, compliance, data access, and security controls implementation.
NIST Cybersecurity Framework and PCI DSS
Explore the mapping between NIST Cybersecurity Framework and PCI DSS, understanding similarities, relationships, and benefits for compliance across multiple standards.
The Future of Privacy
Explore the evolving privacy landscape, its impact on technology, and future implications. Gain insights on balancing compliance and innovation in this rapidly changing field.
Building a Data-Driven Security Strategy
Learn to develop a data-driven security strategy aligned with organizational goals. Explore strategy options, implementation processes, and efficient resource allocation for minimizing friction and maximizing security effectiveness.
GDPR's Information Security Requirements - What Exactly is 'Appropriate'?
Explore GDPR's 'appropriate' security measures, considering factors like cost, risk, and technology. Learn to determine and justify suitable data protection strategies for your organization.
NIST Privacy Framework IRL - Use Cases from the Field
Explore real-world implementations of the NIST Privacy Framework through case studies from Okta and Equifax. Learn about challenges, successes, and adoption strategies for enterprise risk management.
Designing a Secure Software Development Lifecycle with DevOps
Designing a secure SDLC for regulated organizations using DevOps and security techniques, ensuring compliance, provable processes, and audit trails.
The Road to Building Defendable Systems
Explore challenges faced by CISOs, including threat landscapes, expertise shortages, and compliance burdens. Learn effective strategies for building defendable systems and functioning on the razor's edge of cybersecurity.
The CISO's Dilemma
Exploring CISO challenges: threat landscape, expertise shortage, product obsolescence, and compliance burdens. Insights from effective CISOs on navigating these complexities in enterprise defense.
Starting a Security Program - Thrills and Spills
Insights on building a security program, emphasizing emotional intelligence, cross-team collaboration, and shared responsibility to achieve compliance and meet customer demands.
Slack App Security - Securing Your Workspaces From a Bot Uprising
Explore Slack app security, risks, and safeguards. Learn about the app directory, unique challenges, and Slack's efforts to enhance workspace protection against potential threats.
Vibe Check - Why Students May Shy Away From Cyber in a Surveillance State
Explores impact of surveillance and strict laws on cyber talent in Asia Pacific, discussing challenges for ethical hacking and threat research in a censorship-heavy environment.
Vendors, and Risk, and Tigers, and Bears, Oh My - How to Create a Vendor Review Process From the Ground Up
Learn to create a vendor review management process from scratch using simple tools like email and Google Forms, without expensive software or large teams.
Building Production-Grade End to End Encrypted Applications
Insights on building end-to-end encrypted applications, addressing challenges in security, compliance, abuse prevention, availability, and observability for privacy-focused collaborative products.
Securing Sensitive Data - A Strange Game
Learn strategies for securing sensitive data, exploring compliance, P2PE, and potential drawbacks in this informative talk on data protection challenges and solutions.
GDPR - Getting Data Privacy Right
Explore data privacy regulations, ethical obligations, and practical strategies for developers and architects to protect personal data and comply with GDPR and ePrivacy laws.