TCH2304. The Cyber Attack Scouting Report: Trends in Breaches and Cybersecurity

What are the cyber attackers targeting today and what does their playbook look like? This session will explore what bad actors are up to and what is and isn't working to stop them. Specific areas to be covered include: * Highlights of popular cybersecurity and breach trend reports such as: * Verizon's Data Breach Investigations Report * The NSA Cybersecurity Year in Review * IBM's Cost of Data Breach * The Office of the Comptroller of the Currency Cybersecurity and Financial System Resilience Report * Why Business Email Compromise (BEC) attacks continue to be a top revenue generator for the attackers. * How user activity monitoring is an essential element of network defense. * Tabletop exercises: * Developing a roadmap for exercise improvement from year to year (even if you haven't done one yet...) * Adding realism to tabletop exercises and bring them to life! * What does the current threat landscape look like, and what is evolving as a result? * Leveraging the MITRE ATT&CK Matrices

Learning Objectives:

• Identify the cybersecurity threats that currently affect you and your organization.
• Recognize potential indicators of compromise related to current popular attack methods.
• Select and implement the right control procedures to help protect against today's cybersecurity threats.
• Recall how your information security program needs to evolve to keep pace with the current threat landscape.