The idea of DevOps, the term the industry had initially decided on for the work between the Application and Operations teams, was coined 15 years ago. To give perspective, the iPhone 3GS came out that year. If we think of what we had to work with in 2009, we now know in hindsight that we have better options, solutions, software, and patterns. We have an iPhone 15; we no longer have BlackBerry OS or Nokia. Windows 8.1? I hope not. Here are a fe...

In its fifth year, SANS Cyber Solutions Fest aims to brings together an ensemble of security professionals, solution providers, gurus and experts ready to share knowledge about the latest developments and innovative technologies in the cybersecurity industry. Join the attack surface & vulnerability management track to hear from chairperson Matt Bromiley and a host of leading cyber security experts as they walk through specific use cases an...

Today, most security professionals are actively architecting and implementing cloud security controls across SaaS, PaaS, and IaaS environments. We’ve learned that what once worked on-premises may not work quite the same in the cloud, and a wide range of new and innovative security platforms and services have emerged and evolved in recent years to address critical cloud security use cases and categories, including: Cloud security monitori...

Is it really over when you are hacked? Or is it only over when our adversary has secured their impact and actions on objective? Perimeters are bound to be broken, but our game-over" scenarios should still be defended. We need to not only protect our inside, but carefully define what exactly are we defending? What has the highest impact on our organization, and from there on carefully architect our defenses to ensure we can always survive, even...

Zywave's renowned Cyber Risk Insights Conference series returns to London for its 12th year. This one-day, multi-track event highlights the pivotal issues confronting risk managers, CISOs, CROs, insurance brokers, underwriters, and other cyber risk professionals. Attend this full day of networking and learning to gain a global perspective on trends in the insurance market, cyber threat landscape, and regulatory arena. This year’s event w...

Join this webcast to explore SANS and GIAC's latest industry-leading training and certifications to help cyber-practitioners, and the organizations they protect, keep pace with dynamic market conditions. Cut through the noise with this comprehensive showcase and discover the skills you and your teams will need to navigate the evolving landscape of cybersecurity. First, Rich Greene ventures into our fresh new training courses, covering topics f...

We're in an era of unprecedented digital interconnectedness. This new connected landscape has helped governments make major advances in service delivery and constituent experiences; it's also shined light on a clear need for comprehensive cybersecurity preparedness. According to the latest study from the National Association of State CIOs, 50% of Chief Information Security Officers (CISOs) report outdated technology as their biggest hurdle in...

Achilles Systems, a fictitious IT service provider to human resources teams in medium and large businesses, has fallen victim to an attack in which sensitive customer data and, potentially, customer networks, have been compromised. Achilles has a small security team who has historically focused on basic controls and compliance. However, it seems clear this attack was the work of a sophisticated adversary capable of circumventing the controls i...

Hands-On Cyber Security Training Taught by World-Renowned Practitioners Attend in New York, NY or Live Online   At SANS New York City Spring 2024, choose from 48 interactive courses with hands-on labs. Practice your skills and compete against your peers during NetWars Tournaments, and network with your instructor and industry colleagues in real-time. Each course includes electronic and printed books, and several courses align with GIAC c...

The world would be such a better place if everyone took information security seriously. Simple misconfigurations and poor security hygiene can lead to catastrophic losses. Education and awareness are the keys to avoiding such disasters. This Community Day, let's pledge to learn something new, or to make a new friend in the community, or find a security management tool to help us make the world a better place. The AWS Community Day features exp...