2019 CYBER SECURITY TRENDS REPORT REVIEW

El panorama de amenazas en evolución basado en nuestro ISTR (Reporte de Anual de Amenazas en Internet Vol. 24) recientemente publicado, refleja las últimas tendencias y cómo se aplican a Colombia y América Latina. Las principales tendencias de transformación digital, como la nube y la movilidad, junto con los nuevos desafíos de seguridad han cambiado el panorama de ciberseguridad por lo que la estrategia debe enfocarse en términos de riesgos clave, regulaciones y hallazgos sobre la madurez de la seguridad. Recomendaciones para enfocar y mejorar las posturas de ciberseguridad para abordar estas tendencias, incluidos los marcos clave, las tecnologías, los procesos y los cambios culturales son parte integral de los pasos a seguir.

The document appears to be a sales presentation from Check Point Software Technologies promoting their new "Infinity Total Protection" product. The summary includes: 1) Check Point is introducing a new consolidated cyber security architecture and all-inclusive consumption model called "Infinity Total Protection" that provides threat prevention across networks, cloud, and mobile from a single vendor. 2) Infinity Total Protection offers simplified per-user pricing and promises to adapt to customers' business needs with a focus on threat prevention and consolidated management. 3) The presentation outlines the various security components that would be included with Infinity Total Protection, such as network security, cloud security, endpoint security, mobile security, and security management products.

The document provides an overview of an incident response concept and framework. It discusses the benefits of incident response, common incident response structures and lifecycles. It also outlines the key steps in an incident response process including preparation, detection, analysis, containment, eradication, recovery, reporting and lessons learned. Specific approaches and activities at each step are also described for a company's incident response implementation.

This presentation looks at the core component of an Incident Response plan (NIST 800-61) as well as custom practical implementation framework developed by ELYSIUMSECURITY based on NIST and FIRST.

The document discusses security trends seen over 2017, including growth in cloud services and complexity, the evolving role of humans in security, and hacker behaviors. Specifically, it notes that the expanding cloud attack surface contributed to more attacks, while complexity increased due to factors like containerization, vendor options, and regulations. It also highlights how most breaches are still caused by human errors and weaknesses rather than sophisticated attacks. The document provides recommendations around gaining unified visibility, intelligent spending, and solutions that can handle high data volumes.

This document discusses Mandiant's incident response methodology and technology. It covers their evolution of incident response approaches over time from disk forensics to memory forensics to live response. Mandiant's current approach involves hunting across endpoints and networks using indicators of compromise to identify compromised systems. They deploy network and host sensors to gain visibility and conduct deep analysis using tools like Mandiant Incident Response and Network Traffic Analysis Platform. The document also outlines Mandiant's incident response services and how they help organizations understand risk, identify compromises, and prepare for future incidents.

En la economía digital, la transformación digital ya no se trata de interrupciones. Es supervivencia. Cyber Exposure es una disciplina emergente para administrar y medir su superficie de ataque moderna para comprender con precisión y reducir su riesgo cibernético. Si estás volando a ciegas ante una creciente brecha de exposición cibernética, eso es insostenible

This document discusses Cisco's cybersecurity solutions, including its FirePOWER next-generation firewall and network security platform. It provides an overview of FirePOWER's key capabilities such as advanced threat prevention, application control, user awareness, automated policy recommendations, and integration with other Cisco security products. The document also presents examples of how FirePOWER's contextual policies and automation features can help organizations better detect, prevent, and respond to cyber threats.

Most organizations have good enterprise-level security policies that define their approach to maintaining, improving, and securing their information and information systems. However, once the policies are signed by senior leadership and distributed throughout the organization, significant cybersecurity governance challenges remain. In this workshop I will explain the transforming organizational security to strengthen defenses and integrate cybersecurity with the overall approach toward security governance, risk management and compliance.

Looking at the different components an organisation should consider to fight Phishing attacks and build a successful Phishing protection program

This document discusses strategies for organizations to get ahead of cybercrime based on EY's Global Information Security Survey 2014. It outlines a three stage process for cybersecurity maturity: Activate to establish foundations; Adapt to dynamically respond to changes; and Anticipate to proactively prepare. Many organizations still need to improve their abilities to activate foundational security, adapt quickly to changes, and anticipate future threats. The document recommends specific actions organizations can take at each stage to improve their cybersecurity posture and get ahead of cyber attackers.

The document discusses cybersecurity and the work of NRD Cyber Security, a company that builds cybersecurity centers (CSIRTs/SOCs) globally to confront cyberattacks and cyber crime. It notes that NRD Cyber Security is controlled by INVL Technology, which implements projects in over 50 countries worldwide. The document provides an overview of NRD's mission to partner with countries in constructing cybersecurity centers, lists some of the countries it has worked with, and discusses establishing trusted cybersecurity networks around the world.