Minneapolis Cybersecurity Conference

Cyber asset attack surface management (CAASM) is the process of identifying, analyzing, and mitigating potential vulnerabilities in an organization’s systems, networks, and devices.

In this presentation, we will discuss:

• The role of CAASM and attack surface management (ASM) in the future of risk management technologies
• Key steps including, asset discovery, risk analysis, and implementing controls to reduce the likelihood of a successful attack
• Different methods of ASM and benefits of automation for continuous management

Red teaming is a proven methodology for identifying vulnerabilities and improving organizational resilience. However, organizations often misunderstand red teaming, resulting in suboptimal outcomes. This talk will provide an executive guide to red teaming to demystify this powerful technique and equip leaders with the knowledge and tools to leverage it effectively.

We will begin by clarifying the meaning of red teaming and outlining what it involves and doesn’t. We will delve into the various components that make up red teaming, encompassing activities such as penetration testing, physical security testing, and adversarial simulations, and analyze the circumstances in which each is most suitable. Also, we will underscore the importance of setting up defined goals, properly scoping the project, and choosing the best team members.

Last but not least, we will tackle the cultural and organizational factors that can influence the outcome of red teaming. We will focus on fostering a culture of ongoing enhancement and employing red teaming to stimulate innovation and strategic planning. Furthermore, we will emphasize the significance of creating an environment of confidence and openness with relevant parties while ensuring seamless integration of red teaming into broader risk management applications.

Moving Towards a Zero Trust Mindset focuses on the shift from a traditional perimeter-based security to a more granular and adaptive approach. By implementing robust authentication/authorization mechanisms and dynamic access controls, organizations can fortify their defenses against evolving cyber threats and safeguard sensitive data effectively.

To build an effective cyber defense, you must understand the offense you will likely face. Who is the adversary? What are their methods? How are they having success? What techniques are they leveraging? In this session, Arctic Wolf will review a summary of their 2024 Threat Report. This recently released report is based on research conducted by the Arctic Wolf Labs Threat Intelligence team and provides a summary of the thousands of IR cases they have performed. After this session, please visit our booth to learn how Arctic Wolf can help you defend against these adversaries and their methods