Agenda

Threat methods and controls utilized are very comprehensive and effective for those who are typically in the office, but what about the remote workforce of today? Their intent may not be malicious but rather inherent to poor practices.

This presentation is designed to help individuals identify how seemingly “innocent” activity can make them an insider threat, and to help organizations identify existing critical controls needed to develop an Insider Threat Program using a white hat hacking methodology. Through live demonstrations, we will show simple techniques used to bypass various controls.

Objectives:

• Learn the methodologies utilized by individuals within the organization that would be defined as insider threat activity
• How to identify system based behavioral indicators
• Learn which existing or enhanced security layer can provide insider threat profile data
• Learn how areas of the organization, i.e. Legal, Procurement, and HR, are key stakeholders in assisting to identify insider threat activity

Key Takeaways:

• How to identify business processes which can contribute to remote work insider threats
• Enhance current security program on what controls are bypassed by utilizing routine IT procedures
• Enhance procedures required to identify insider threat exposures
• Enhance awareness training to include additional methods of insider threat
• Enhance existing physical and digital security layers to better identify specific insider threat activity

If you think the only way your network and devices can be compromised via email is phishing, think again!

A majority of data breaches are caused by attacks on the human layer, but email hacking is much more than phishing and launching malware. From code execution and clickjacking to password theft and rogue forms, cybercriminals have more than enough email-based tricks that mean trouble for your InfoSec team.

In this webinar Roger A. Grimes, KnowBe4’s Data-Driven Defense Evangelist and security expert with over 30-years of experience, explores many ways hackers use social engineering and phishing to trick your users into revealing sensitive data or enabling malicious code to run.

Roger will show you how hackers compromise your network. You’ll also see incredible demos including a (pre-filmed) hacking demo by Kevin Mitnick, the World’s Most Famous Hacker and KnowBe4’s Chief Hacking Officer.

Roger will teach you:

• How remote password hash capture, silent malware launches and rogue rules work
• Why rogue documents, establishing fake relationships and tricking you into compromising your ethics are so effective
• The ins and outs of clickjacking
• Actionable steps on how to defend against them all

Email is still a top attack vector cybercriminals use. Don’t leave your network vulnerable to these attacks.