When it comes to cyber incident response, it truly is a matter of: It's not just what you know, it's who know. Proper response requires a proper team, and renowned attorney Lisa Sotto is often  on the receiving end of a 2am emergency incident response call.  In this exclusive ISMG summit session, she shares insight on:

• When incident response actually begins (hint: long before your attackers gain entry)
• Common gaps even in updated and tested plans
• Step by step – what happens after the call is made

When CNA Financial – a top U.S. insurance company – was struck by ransomware a year ago, it reportedly paid $40 million in ransom to restore access to its network and data. How do record-high ransomware incidents – and ransoms – affect the cyber insurance sector? What are the emerging standards for coverage, as well as legislative trends affecting the practice?

This exclusive panel tackles these questions as well as:

• Proving cyber insurance value; 
• Partnering to build resiliency; 
• The rising bar for entities to qualify for cyber insurance.

The Log4shell vulnerability found in the Log4j logging framework has been recognized as one of the most critical vulnerabilities ever, open source or otherwise. And while the dangers of the Log4j vulnerability remain high, the situation has highlighted an even bigger issue that is plaguing security professionals and developers: If you don’t know what’s in your software supply chain, you’re already behind.

When a flaw is disclosed, companies are instantly thrust into a race against time to fix it before it can be exploited by an attacker, meaning every minute counts. If you don’t know what’s in your software, you’re effectively giving hackers a huge head start.

While this outlook might seem bleak, there are easy steps you can take to significantly mitigate risk. This session will help you do that by answering:

• Why the Log4j vulnerability is so severe and common remediation measures companies took to secure their code
• How you can improve your security posture with automation and SBOMs, and better prepared for the inevitable next open source vulnerability that comes along  

A ransomware attack strikes every 11 seconds.

Despite thick firewalls, the bad guys will get through. Some businesses pay the ransom but most want to recover, so they don’t let the bad guys win.

A payout isn't the only way out.

If hackers exploit your backups, you pay the ransom. If your backups survive, you need to know what to recover and how long it will take. If you don't, you pay the ransom. But even with a decryption key, recovery takes days or weeks and the hackers may not return all the data.

Recovery from a clean backup is the only way to beat hackers. Data managed by Rubrik can’t be encrypted after the fact. Once ingested, no external or internal operation can modify it. So, your data is immune to ransomware. Since data can’t be overwritten, even infected data ingested by Rubrik can’t infect existing files/folders.

We'll discuss how to:

• Analyze backup metadata for unusual behavior
• Quickly identify what data was encrypted and where it lives
• Locate PII that may have been exposed to a data exfiltration attack
• Automatically protect new workloads and lock retention to prohibit deletion of backup data.

A banking revolution is underway in the form of a new financial transparency. A focus on third-party access and straightforward payment options is forcing compliance and regulation mandates on a global scale. The critical technology for this shift is the open API. What does this mean for service providers worldwide?

In this session, attendees will learn about the importance of securing customer identity, protecting APIs and enforcing authentication.

The Zero Trust framework is based on the principle of "never trust, always verify." Join us to learn about Zero Trust, how to adopt it, and the technologies you need to take control of your environment in the fight against ransomware.  

Digital transformation promises business growth by providing value to customers by leveraging emerging technologies and supporting skills for new business models. At its core, data-driven decisions are the lifeblood of digital transformation. When data is poisoned, stolen and misused for malicious intent, progress slows, resulting in poor customer experience and satisfaction.

In this session, we will explore how sophisticated bot attacks are contaminating top digital transformation trends related to automation, data analytics and application architectures that should be part of every security strategy to solve in 2022.

The financial services industry often struggles with perceived commoditization among customers, but organizations can set themselves apart by offering strong security. Fraud associated with account takeover is largely driven by weak authentication, such as usernames and passwords, security questions and mobile-based authentication - OTP, SMS and push notifications. Modern strong authentication offers end customers highest-assurance security along with ease of use and can create meaningful differentiation and value to drive new customer acquisition and customer retention. Attend this panel discussion to hear the current challenges related to authentication and best practices to implement moving forward.