ISSA-LA Security Summit 2024

IAM and SSO platforms are static and binary – users either pass for access or they do not. "Contextual entitlements" is a concept that refers to the system access and processing rights and privileges that users, services or groups have within specific contexts or situations. These entitlements can vary based on the environment, the role of the user or group, device trust, and legal or regulatory frameworks.

In this session, participants will be able to explain the concept of contextual entitlements for cloud and on-premise access, and how it differs from traditional static and binary Identity Access Management (IAM) and Single Sign-On (SSO) platforms. They will understand how entitlements can vary based on context, and they will be able to identify and analyze the various factors that influence contextual entitlements.

Finally, participants will be able to apply the concept of contextual entitlements to real-world access management scenarios leveraging Cloud Reverse Proxy, CASB, and SASE platforms, incorporating access and data loss prevention policies to achieve contextual entitlement faculties. They will be able to design access control policies that dynamically adjust entitlements based on changing contexts, ensuring a more nuanced and secure approach to managing system access and user privileges.

Learning Objectives:
Understand the concept of contextual entitlements.
Analyze the factors influencing contextual entitlements.
Apply contextual entitlements in access management scenarios. Define, and then identify!

Consistency: Driving Security to Protect Against a Breach

Whether you are an SMB, Enterprise, or MSSP, you need to know what your endpoints are running. You need to know your endpoints are secured and have not drifted from running approved software. You need to know your endpoints have the proper patches for the OS, software, and even device drivers. This is only possible with solutions that are dedicated for such tasks. Let 20X Microsoft MVP Derek Melber describe the ideal scenario that every organization can create to help them establish endpoints that can withstand some of the most brutal attacks.

The panel will discuss question such as:

•  How did you achieve your current position, and who has been the most influential in helping you get here?
• What has been the biggest obstacle you've faced in reaching your current role?
• In what ways have men contributed to your journey to where you are today?
• What is the best and worst advice you could give to another woman aspiring to enter the field of cybersecurity?

TBD

Join us as we hear from our Law Enforcement agencies on the latest cyber threats and some of the strategies we can use to counter them. They will also share some fascinating war stories to keep us all enthralled.

Live recording of CISO Series Podcast
We're back! David Spark and his CISO guests return to the ISSA LA Summit for a third year to record an episode of their popular show; the show that launched the CISO Series media network. We'll have insightful discussion about security leadership, hiring, dealing with cyber threats, and we'll answer your cyber questions. Plus, we'll play games such as "What's Worse?!" and "What Is Dave's Mom Talking About?" Guaranteed fun!

Guests, Sasha Pereira, Head of Infrastructure, Security and Operations, WASH
Cyrus Tibbs, CISO, PennyMac

You could leave with prizes and gift cards, so stick around.