Nth Generation: Security | Two-Part Series

Business Continuity, Cybersecurity IR, and DR Planning
- Demystified

Do you have a solid Business Continuity Program in place? Are you able to test your recovery plans at least once or twice per year? Have you conducted a formal Business Impact Analysis to determine your true Recovery Time and Point Objectives (RTPO) for critical assets? 

IT resources, business applications, and processes need to be resilient against attacks and any type of outages (eg, fires, floods, power outages, etc.) based on prioritized risk management.

This session will cover an approach to Business Continuity Program Management, such as: from Business Impact Analysis (BIA), Business Continuity Planning (BCP), Disaster Recovery (DR) Planning, Cybersecurity Incident Response (IR), tabletop exercises, and actual failover testing without disrupting production.

Lastly, we’ll provide an example of a platform to help systematically document and maintain these BCP/IR plans, keeping them up to date.

​

Arctic Wolf

Security At Scale, Arctic Wolf Security Operations

As company’s invest further into their security posture, their tools and technology can become increasingly complex. This results in the unfortunate side effect of alert fatigue and missed detections. So how does Arctic Wolf ingest over 350 billion events per day process this down to less than five tickets per week per customer? This session will get a better look at how Arctic Wolf provides security operations at scale in our mission to end cyber risk.

​

Hewlett Packard Enterprise: Secure Solutions

How does HPE Secure the infrastructure stack from the Adversary?  – The HPE Edge to Cloud Security Overview

Learn about HPE’s innovative and market leading Security Solutions and Services helping our customers reduce, risk, exposure and vulnerability in today’s threat landscape. Highlighting the HPE secured Infrastructure stack, HPE Data Protection and Ransomware and Project Aurora offerings as well as the three key security services from HPE Point next SRC (Security, Risk and Compliance) Advisory services division.

Fortinet

Zero Trust Should Apply Everywhere:  Improving Application Access & Security with Fortinet ZTNA

A quick but in-depth overview of Fortinet’s Zero Trust Network Access (ZTNA) control method that uses client device identification, authentication, and Zero Trust tags to provide role-based application access.  It gives administrators the flexibility to manage network access for On-net local users and Off-net remote users. Access to applications is granted only after device verification, authenticating the user’s identity, authorizing the user, and then performing context-based posture checks using Zero Trust tags.

Nth Generation: Nth Security

Why was my Security Technology Not Enough to Pass my Audit or Assessment?

Assessing security controls is an important part of ensuring that your organization's security program is mature and appropriate. Too often the work you've put in is still not sufficient to pass an audit or assessment. Or maybe your insurance carrier said the control was not sufficient to reduce your premium. In this session we will use the lessons learned from the CIS assessments conducted by Nth Generation to show the common pitfalls that prevent organizations from having robust controls; as well as how to make your next or first assessment meaningful.

​

Cohesity

Defend your Data Refuse the Ransom

Despite a minor slowdown in Ransomware activity in the first half of 2022, Ransomware is alive and well. Cyber threat actors have simply reset and retooled. Hackers are getting more cleaver and not only encrypting your data but stealing customers data. Costs are increasing for Cyber Insurance, and we know that Ransomware will be a preeminent threat for years to come. Protect your data with Cohesity and refuse the ransom.

​

Tanium

Converged Endpoint Management

Forty years of more and more atomic uses cases has resulted in point solution sprawl, increased security risks and an inability of companies and governments to manage their operations and security teams. We will share how Tanium's unique converged endpoint management solution can help organizations rectify this legacy and modernize their ability to find and fix, in near-real-time, patches and new vulnerabilities. Tanium's unique infrastructure-less platform enables customers to, in near real time, find vulnerabilities, fix them immediately and discover every IP assigned endpoint in a network.

​

SentinelOne

Endpoint Security Market – AV/EDR Consolidation

​

Varonis

Stopping Ransomware Before it Starts

Cyber crime is on the rise thanks to automated tools, hackers for hire, and new tactics around ransomware. Once it hits, the damage is already done. Varonis can help identify these actors before they are able to launch the ransomware attack, which is the final phase of the whole attack. We explain how.

11:11 Systems

Increase cyber resiliency with Zerto DRaaS Abstract:

Cyber criminals attack businesses every 11 seconds. This year, like the last couple of years, ransomware attacks are increasing and will cost tens of billions of dollars. Merely hoping that your business won’t get hit is not a good strategy. What is? Defending against cybercrime and ransomware requires a multi-layered approach to achieve resiliency. Setting up security across your organization is a critical first step. But you also need to make sure your business has several levels of protection. During this presentation, we’ll discuss: What you can do to quickly create a first line of defense with immutable, cloud-based backup and why a disaster recovery solution may be the difference between your business surviving an attack – or not.

​

Blackberry|Cylance

AI Prevents Ransomware to Keep Bad Guys Out

"A Zero Trust security model trusts nothing and no one by default – including users inside the network perimeter.  Every user, device, and network are assumed to be hostile.  Zero Trust offers a proactive approach and a hardened defense.

​

Proactive organizations are working to detect and identify cyberattacks before damage can be done.  Reducing the attack surface is one approach analogous to going paperless.  Many of these organizations already use some aspect of zero trust across applications, devices, and access.  This approach provides advantages in terms of security and compliance as compared to how VPN’s are used today.

​

Striking a balance between the needs of the Security team and the wants of the users/employees will be an evolving challenge.  As AI technology enters the organization to enforce security and compliance policies, what can we do to find that middle-ground and turn the vision into a reality?"

​

Verkada

Hybrid-Cloud Physical Security

Organizations are rapidly moving to the cloud to enable remote access, support greater scale, and improve usability of video security systems. Verkada’s plug and play video surveillance solution seamlessly integrates with cloud-based access control, alarms, and environmental sensors to save organizations on outrageous server, storage, maintenance, and false alarm costs as well as provides remote accessibility, powerful analytics, and live alerting during unusual activity.

​

Nth Generation: Nth Security

Evolving Beyond Simple Pentesting to
Full Red Team Engagements

Penetration Testing has become a standard requirement. Many IT & Cybersecurity teams typically outsource this service at least once a year on average. But is Penetration Testing enough in current times, considering the drastically increased cyber threats and level of sophistication? Have you considered engaging in a Red Team exercise? Where do Blue Teams and Purple Team engagements fit in this picture?

This session will focus on what a Red Team engagement is all about. An Nth Senior Security Practitioner will start with an engagement overview, followed by the execution phases, and one of the most important parts -- the executive and technical reports. The speaker will draw from his decades’ long experience from testing numerous IT/cybersecurity environments to share important specific differentiators of an Nth full Red Team engagement.