In the last year, we’ve seen numerous attacks with global consequences leveraging exploits against well-publicized vulnerabilities with available patches. This presentation will provide Forrester’s perspective on the challenges clients face in the vuln management space and make recommendations for improving how we prioritize and communicate vulnerability risk within our organizations.

Learning Objectives:
1: Outline a long-term strategy for evolving vulnerability risk practices.
2: Use industry examples to demonstrate effective VM prioritization.
3: Provide immediate takeaways to start improving VM processes tomorrow.

Speaker: Josh Zelonis

Josh is a Senior Analyst at Forrester, serving security and risk professionals. He covers security architecture and operations, with a focus on cyberthreat intelligence, detection and response. In this role, he helps clients continuously adapt their architecture, policies and processes to evolving threats while also developing robust incident response capabilities that limit the impact of breaches. His research focuses on threat intelligence, endpoint detection and response (EDR), vulnerability management, malware analysis, pen testing/red teaming, digital forensics and incident response.

Detailed Presentation:

(Source: RSA Conference USA 2018)
 
 
Votes: 0
E-mail me when people leave their comments –

You need to be a member of CISO Platform to add comments!

Join CISO Platform

Join The Community Discussion

CISO Platform

A global community of 5K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.

Join CISO Community Share Your Knowledge (Post A Blog)
 

 

 

Atlanta Chapter Meet: Build the Pen Test Maturity Model (Virtual Session)

  • Description:

    The Atlanta Pen Test Chapter has officially begun and is now actively underway.

    Atlanta CISOs and security teams have kicked off Pen Test Chapter #1 (Virtual), an ongoing working series focused on drafting Pen Test Maturity Model v0.1, designed for an intel-led, exploit-validated, and AI-assisted security reality. The chapter was announced at …

  • Created by: Biswajit Banerjee
  • Tags: ciso, pen testing, red team, security leadership