Beyond the Firewall

Beyond the Firewall

di MetaCompliance

Stagione 1

Cyber Resilience In An Era of Geopolitical Risk

In the wake of the Ukraine crisis, pandemic challenges, inflation spikes and fragile global supply chains, organisations are faced with a magnitude of risk and uncertainty. To tackle the threat, organisations must exercise vigilance in understanding emerging risks and in acting to reduce exposure and limit damage. Our upcoming webcast ‘Cyber Resilience in An Era of Geopolitical Risk’ explores how organisations can improve their cyber resilience, threat detection and incident response in an increasingly hostile world. This 35-minute podcast will discuss: · The importance of Policy Management within the macro environment · Engaging users and improving consumption of policy communications · The significance of policy-related training · Issue reporting and minimising the impact of an incident · Best practice approaches to managing third-party risk Special guest, Internationally recognised GRC pundit, Michael Rasmussen.

Beyond Awareness Training: Cultivating a Security Culture

The effectiveness of a Security Awareness Training program ultimately depends upon improving the security behaviours of staff. However, security training alone will not change employee behaviours. Until and unless awareness training affects how staff feel about the need to secure information, and their security instincts, organisations will continue to be vulnerable to cyber risk. Our upcoming webcast ‘Beyond Awareness Training: Cultivating A Security Culture’ explores why organisations must go beyond awareness training and instil a security mindset that transforms staff into their frontline defence against cyber attacks. This 45-minute webcast will discuss: • Changing how staff perceive, think, and feel about information security • Ingraining default security behaviours that point staff towards the right course of action • Understanding the “why” and communicating this across the board • Embedding a security subculture into the organisational culture• Knowing your audience and making culture-change stick Guest speaker - Lauren Zink, Cyber Awareness and Culture Manager at Indeed

Resistance to Cyber Resilience

In today’s fast-changing, digital world, cyber threats are rapidly evolving. The adoption of new technologies and new ways of working has increased the opportunities for cybercriminals to target employees and launch crippling attacks - which can result in significant operational disruption, financial loss, and reputational damage. As cyber attacks become more destructive and unpredictable, organisations must build a cyber-resilient posture to effectively prepare, respond, and recover from inevitable cyber disruptions.Our upcoming webcast ‘Resistance to Cyber Resilience’ explores how organisations can remain cyber resilient, overcome inertia and drive behaviour change. This 40-minute podcast will discuss: • The challenges organisations face when changing their defence against cyber threats • The human resistance to change • The effects of influence, senior support and executive buy-in on cyber security • Addressing resistance and motivating cultural change Guest speaker: Greg van der Gaast, CISO at Scoutbee

Role of Privacy in the 'S' In ESG

ESG – Environmental, Social, Governance – is getting a lot of attention, and it is time for organisations to build a strategic ESG plan for reporting in 2022. In this new era of ESG, organisations have a renewed focus on privacy. Privacy is more than complying with laws and regulations. Privacy is about the integrity and accuracy of data, the right of individuals to control and have access to their personal data, appropriate and approved use, and data protection. Our podcast, with internationally recognised GRC pundit, Michael Rasmussen, titled, ‘Role of Privacy in the S in ESG’ explores privacy in the context of: • Regulations, what organisations should expect from current and pending privacy regulations • ESG, the role of privacy in an organisation's ESG program • Extended Enterprise, how to manage privacy across distributed third-party relationships • Best Practices, what is needed to manage privacy to be efficient, effective, and agile

Fighting Cybercrime in the Financial Services Sector

When it comes to cybercrime, no industry is safe. However, the financial sector continues to be heavily targeted and is a highly lucrative target for cybercriminals because their data is more valuable. For financial institutions, the potential damage from cyber attacks extends beyond simply stealing money from customer accounts but also costs firms their revenue, reputation and customer base. To protect themselves and their customers in an increasingly dangerous digital environment, cyber security has become a vital investment for financial institutions. Our upcoming webcast, titled ‘Fighting Cybercrime in the Financial Services Sector’, explores the financial industries evolving threat landscape and how it can mitigate cyber risk. This 50-minute webcast will discuss: • How cyber risks have evolved as the financial services industry has evolved • The unique challenges that financial service organisations face • Cyber training that serves the specific, and changing needs of the financial services industry • How financial services leaders can keep their operations cyber-secure

The Realities of Getting Staff Security Training Right

Despite the ongoing threat of cyber attacks, Security Awareness Training remains a major challenge for management teams. Identifying what training needs to be delivered, who needs to be trained and a lack of employee engagement are all common obstacles that organisations face when it comes to implementing security awareness training. As every organisation knows, change management is notoriously difficult. The best security awareness programs approach the task in the same way as other organisational change projects. Change isn’t a given; it takes time and effort. The reality is cyber security can be a dry topic. As such, it’s vital you find ways to engage your staff if you want to positively impact behaviour within your organisation, raise awareness of cyber security threats, and embed a culture of compliance. This podcast will explore: -How to implement staff security training that maintains momentum and encourages engagement -The importance of getting buy-in in the boardroom -Tailoring cyber security awareness training for your audience -Using storytelling to breathe life into your cyber security awareness campaign Special guest: Ravi Sankar, CISO, ItsDone

The Power of Company Personality in a Cyber Awareness Program

User participation is one of the key measures of success in a cyber awareness program. All too often, organisations adopt a one size fits all solution that fails to resonate with the end-user. Incorporating company personality into your cyber awareness program is an effective way to tailor training to suit your audience and develop a campaign that engages employees. This podcast will explore: -The role of company personality in your cyber awareness program -Analysing your audience to create an awareness campaign that resonates -How to make your cyber awareness program relatable for your employees -Embedding storytelling to create a culture of cyber security awareness in your organisation -Localisation and other practical steps to engage users in cyber awareness activities

Insider Threats: The Dangers Within

Whether accidentally or deliberately, employees can put organisations at significant risk of a cyber attack. The task of defending against such threats is difficult because insider threats are often difficult to detect. The pandemic and the shift to remote working have contributed to the growing rate of insider threats in recent years and will continue to be an ongoing challenge for organisations. This podcast will discuss: • Internal threats versus external threats • Types of insider threats and their motivating factors • The risks that insiders pose • How to protect your organisation by detecting, deterring, and disrupting insider threats Special guest: Jake Moore, Global Cyber Security Advisor and Spokesperson at ESET

The Data Breach Blame Game: Employees or Employers?

With cyber security lawsuits on the rise, the probability and financial impact of cyber incidents are ever-growing for organisations. The aftermath of a data breach can have crippling consequences across all aspects of an organisation and there is inevitably a blame game that follows any cyber incident. This podcast will discuss: -The role of leadership and setting the tone from the top -Mitigating the risk of a data breach and limiting the damage if a data breach occurs -Why data breach prevention is the job of everyone and cyber security is more than an IT issue -Creating a culture of collective accountability and cyber security awareness -Finding innovative ways to keep cyber hygiene on the agenda

Security Awareness Training: Why So Serious?

There’s no denying it - cyber security is serious stuff. The problem is that many organisations believe that because of the dangers of cyber attacks, Security Awareness Training must also be delivered in a serious manner. But this approach can cause fatigue among a workforce, hurting more than it helps – which is no laughing matter. One of the best ways to educate staff and ensure key messaging is retained is by incorporating entertainment and humor into Security Awareness Training. This allows organisations to break down barriers, open conversations, make emotional connections, and win hearts and minds. This podcast will discuss: • The natural aversion to cyber security training among users • Making training ‘click’ before employee burnout • Cybercriminals have no boundaries, and neither should security awareness training • Taking risks to create security awareness training which users will remember • Dealing with negative user responses to content Special guest: Dana Mantilia, Cyber Security Expert

2 di 3