ISSA-LA Security Summit 2024

IAM and SSO platforms are static and binary – users either pass for access or they do not. "Contextual entitlements" is a concept that refers to the system access and processing rights and privileges that users, services or groups have within specific contexts or situations. These entitlements can vary based on the environment, the role of the user or group, device trust, and legal or regulatory frameworks.

In this session, participants will be able to explain the concept of contextual entitlements for cloud and on-premise access, and how it differs from traditional static and binary Identity Access Management (IAM) and Single Sign-On (SSO) platforms. They will understand how entitlements can vary based on context, and they will be able to identify and analyze the various factors that influence contextual entitlements.

Finally, participants will be able to apply the concept of contextual entitlements to real-world access management scenarios leveraging Cloud Reverse Proxy, CASB, and SASE platforms, incorporating access and data loss prevention policies to achieve contextual entitlement faculties. They will be able to design access control policies that dynamically adjust entitlements based on changing contexts, ensuring a more nuanced and secure approach to managing system access and user privileges.

Learning Objectives:
Understand the concept of contextual entitlements.
Analyze the factors influencing contextual entitlements.
Apply contextual entitlements in access management scenarios. Define, and then identify!

Corporate culture in America is fraught with the stifling of creativity. The fear of failure is preventing many from reaching their full potential. It is time for all of us to embrace stretching the envelope and getting uncomfortable. We all have so much to offer, that will lead to innovation and better ways to solve problems, if only our culture would stop judging and beating down good ideas that just happen to fail. We will learn more from failure than success, and until we can get past that fear of failure, we will never realize our full potentials.

TBD

The once clear-cut world of cybersecurity is now a complex maze of data breaches and privacy regulation that has caused a surge in litigation and enforcement.
 
The culprit? Data and information.
 
The Economist declared that the world’s most valuable resource is not oil but data. Data can be used for marketing and advertising, medical care, banking and finance, hospitality, product development, and anywhere business intelligence and the delivery of products and services are needed.
 
However, as businesses develop ways to monetize this data, CISOs and leaders are under tremendous pressure to protect sensitive data from misuse and theft. What data is collected, stored and secured, used, and disposed of is currently under scrutiny by regulators, governments, and litigators.
 
This presentation will explore the alarming shift from the server room to the courtroom as we face the new adversaries of the digital age - regulators and litigators. We'll delve into the challenges of litigation response in DFIR, the intricacies of e-discovery, and the current regulatory landscape. We'll also enable you with the latest strategies and skills that CISOs must adopt to survive in the courtroom. Join us for a journey through the changing legal terrain for CISOs and leadership, where the threats moved from hackers in hoodies to those in suits and ties.

Come hear the experiences and advice of a panel of Cybersecurity Leaders, as they share their insights on important topics that keep them up at night.

Join us as we hear from our Law Enforcement agencies on the latest cyber threats and some of the strategies we can use to counter them. They will also share some fascinating war stories to keep us all enthralled.

TBD

TBD