CIO & CISO Belgium Virtual Round Table

Threat Hunting and Understanding Vulnerabilities

Even the most well-regarded and robust security systems sometimes have a threat slip through the cracks and make a big impact. This can often happen at a weak point that was considered non-critical or in an area that was simply overlooked. Threat hunting aims at identifying threats that manage to get past an organization’s initial defenses and remain hidden somewhere within the environment. Successful threat hunts may uncover such lingering threats or identify weaknesses that need to be addressed before a threat becomes an issue.

Learning Outcomes

• Understand why threat hunting is important for your organization
• How to define objectives for threat hunting
• How to shift from a reactive culture of reacting to threats into a proactive culture of seeking them out

Risks Associated with Cloud

Cloud computing has ushered in a new era of increased flexibility, scalability, and agility for organizations across the globe as they have partnered with third-party providers to store their data and make it accessible over the internet. But these benefits come at the cost of limited data control and visibility as well as questions over whether the data is being properly secured. Regardless of the type of cloud service an organization implements, there must be a strategy for keeping data protected from security threats and controlling how it is accessed.

Learning Outcomes

• Recommendations for mitigating the top cloud security risks
• How to decide whether to allocate resources to a public vs. private cloud
• How to implement best practices to secure cloud workflows

A Holistic Approach to Cybersecurity

In the age of digital transformation, businesses are evolving faster than ever. An ever-growing list of applications are being deployed that may run on any number of clouds, while nascent technologies such as the Internet of Things and artificial intelligence are becoming important aspects of many business’s competitive strategies. CISOs must take lead in this transformation process to help balance the risks of new digital technologies with their potential benefits.

In the past, effective cybersecurity strategies primarily relied on defensive processes and technologies. But as the boundaries of the network have become blurred with the proliferation of mobile devices and connectivity virtually everywhere, cybersecurity has become far too complex to rely on defensive solutions alone. Instead of the traditional firewall, what may be required is more of an immune system that responds to threats as they emerge and addresses any ill effects before they severely weaken the business as a whole.

Since attacks are inevitable, CISOs must be proactive to ensure their organizations are prepared. By focusing on alignment throughout the organization to build an understanding of how the whole system is connected, weak points can be addressed and processes improved before serious threats do long-term damage.

Panel Questions:

1. How can security leaders effectively collaborate with operational leaders to create better outcomes for the organization?
2. How can security leaders enable innovation without creating new security vulnerabilities?
3. What are the best practices and tools to assess your organization’s overall risk profile?