DIB SCC CyberAssist

Mastering Cybersecurity Asset Management - Once and for All
2020-08-11 12:00 - 13:00 (America/New_York)
Understanding your assets is the foundation of cybersecurity, right? So then why is asset management still such a monster of a problem? As IT environments become increasingly complex, teams are struggling to keep up

GRC Conference Virtual Event
2020-08-17 - 2020-08-19
ISACA and The IIA are pleased to once again collaborate to bring you the 2020 Governance, Risk, and Control (GRC) Virtual Conference.

KRIS FOR IT RISK MANAGEMENT IN A POST-PANDEMIC WORLD
2020-09-10 16:00 - 17:00
The COVID-19 pandemic has forced organizations to adapt to the new realities of remote work, social distancing, and alternative working arrangements. The new policies introduced to govern these situations have stretched the limits of existing technology and operating capabilities—creating increasing exposure to existing and new IT risks

[CMMC Webinar] Get a Handle on CUI Before It's Too Late
2020-09-23 13:00 - 14:00
Controlled Unclassified Information (CUI) is an integral component of any DOD contract, and protecting the security of this information is every DOD contractor’s responsibility.
CUI is critical to managing and protecting our nation’s Intellectual Property (IP). The DOD estimates over $600 billion are lost every year to data exfiltration, and that’s why CMMC and the protection of CUI have become top priorities.
Join us as Leslie Weinstein, President of CMMC Consulting, breaks down and explores CUI, its lifecycle and impact on the defense industrial base. She’ll answer some of your contractors’ most burning questions about CUI, such as:

How do I know if I have CUI?
Where can I find it?
What happens when it’s no longer used in a contract?
How does it flow from the DoD to a Prime, and then to me?

This is a webinar you just can’t miss—our nation’s security might depend on it!

Data Protection in the Cloud
2020-09-29 16:00 - 17:00
Data protection is a core principle of any security strategy and requires visibility into data-at-rest and data-in-motion for effective data loss protection (DLP) policies and rules. Combine this objective with the overwhelming use of cloud apps freely adopted by business units and users, as well as the increasing number of remote workers and the end result is that you need a modern DLP solution that can scale. As legacy, on premises solutions are blind to cloud apps and the majority of data movement, a new protection approach is needed to extend beyond the traditional corporate perimeter.

Lessons From Election Security Challenges
2020-10-01 12:00 - 13:00
2020 is poised to be the most critical security landscape for elections – locally, nationally, and globally – and this issue will continue to grow and become more complex. Voter data is at risk of compromise, misinformation is rampant, and security issues – real or perceived – will remain regardless of regulation. What data analytics, governance, audit, security, and information management lessons can we learn from the challenges of election security?

PCI - 2020 North America Community Meeting
2020-10-06 - 2020-10-09
Don’t miss THE data security event of the year for the payment card industry.
Although we will not be together face-to-face, we will still gather virtually to hear important Council updates, regional insights, startling industry reports and are creating an engaging agenda for this multiday virtual event. The North America Community Meeting continues to be an opportunity to bring the PCI SSC community together to network with colleagues, ask questions, share information and collaborate

The Top 3 Areas Where Today’s CISO Need to Focus
2020-10-08 12:00 - 13:00
The Covid-19 pandemic has had a profound effect on almost every aspect of our life: how we work, how we travel, how we shop and how we interact with our friends and families. Even more jarring is that this change happened in a matter of weeks or months, and we still face a great deal of uncertainty.
During this time the CISO is witnessing their career evolving before their very eyes, with two words dominating their new career paths: resiliency and agility. Although there has already been a seismic shift in the way many businesses operate the tectonic plates have not finished moving. Quite how or even when the ground will settle for the long-term is not entirely clear. What is clear, however, is that the CISO needs to both keep the business safe and be prepared and flexible enough to support the new reality.
Today’s CISO needs to be empowered to deal with their historical technical and process debt, the reality of the situation today, and the business of the future. Register for this webinar and join us to discuss the top 3 areas today’s CISO needs to be focusing on.

Firewall Chat: Best Practices to Block Ransomware
2020-10-13 14:00 - 15:00
Ransomware attacks have come back with a vengeance. More than half of organizations admitted to being hit by ransomware in the last year at an eye-watering average remediation cost of $761,106 per attack.
One of the most effective methods for protecting against ransomware attacks like Ryuk, Sodinokibi, Maze, and Ragnar Locker is to fortify your defenses with a properly configured firewall.
In this chat, we’ll discuss how you can incorporate protections into your organization’s IT security strategy to avoid being held hostage by ransomware.

How to Unlock the Security Benefits of the CIS Benchmarks
2020-10-14 14:00 - 15:00
Adopted globally by governments, private sector enterprises and academia, the CIS Benchmarks are critically important for establishing and maintaining a strong, effective foundation for all of your cyber efforts.
By attending this webinar, you will gain insight into how the CIS Benchmarks are developed, why they matter, and effective strategies and approaches for using the Benchmarks to strengthen your own security program.
Led by experts from the Center for Internet Security and Tenable, topics covered will include:
• Identifying and overcoming common challenges of implementing CIS Benchmarks
• Reducing complexity by strengthening conformance
• Eliminating audit challenges and compliance headaches
• How you can join the CIS community to develop and enhance the benchmarks
• And, answers to your questions during live Q&A
Who should attend?
All infosec and IT professionals who need to understand, employ and optimize the use of CIS Benchmarks are encouraged to attend.

DFARS 7012 Cybersecurity Webinar Series #14: Pacific CMMC Conference Online
2020-10-22 15:00 - 16:30
URGENT UPDATE: THE NEW DFARS INTERIM RULE HAS BEEN RELEASED AND GOES INTO EFFECT NOVEMBER 30, 2020!
Don’t miss this opportunity to get the latest information on the DoD’s new DFARS rules and the rollout of the Cybersecurity Maturity Model Certification (CMMC) program, directly from CMMC program director Katie Arrington.
The Cyber Collaboration Center is producing a Pacific CMMC Conference online event as its DFARS 7012 Cybersecurity Webinar Series #14, featuring guest speaker Katie Arrington, director of the Cybersecurity Maturity Model Certification (CMMC) program. All are welcome to attend this event, produced in partnership with leading Pacific cybersecurity stakeholders including Cyber Hawaii, the Hawaii Chamber of Commerce Military Affairs Council (MAC) and INNOVATE Hawaii (Hawaii’s NIST National Manufacturing Extension Partnership (MEP) National Network Center).
The conference event is online and NOT limited to companies doing business with DoD in the Pacific. The information presented will be relevant to all DoD contractors nationwide. We are starting earlier to allow a slightly longer format at 90 minutes instead of our usual one-hour events, due to the significance of the new developments with DFARS and CMMC.
The new DFARS Interim Rule released Sept 29, 2020, provides a legal framework for the government to collect more information from contractors and require them to take actions that will cost money in order to be eligible for contract awards. The new rules take effect on November 30, 2020 and are expected to impact all contractors doing business with the DoD. Your company’s executives should attend this event to make sure they are aware of the impacts these rule changes are expected to have on the DoD procurement process across the entire supply chain.
This special webinar will provide key updates from the head of the CMMC program, along with experts from eResilience explaining more about the new DFARS rules, including information about what companies should expect and how to prepare.

10th Annual Cyber Security Summit
2020-10-26 - 2020-10-28 | Minneapolis, MN, United States
At the Cyber Security Summit, our mission is to produce a multi-stakeholder consortium that brings together industry, government and academic interests in an effort to improve the state of cyber security on both a domestic and international level.

How to Bridge the NetOps/SecOps Divide
2020-10-27 11:30 - 12:30
In this webinar, we’ll talk about and illustrate how a common set of data can help both teams work and address cybersecurity requirements together. Join us to learn:
• Why packet capture and flow analysis are important to cybersecurity response and remediation
• How to complement existing protection, detection, and response tools using packet capture
• Which data sources can be leveraged to ensure comprehensive performance and threat visibility
• What is ‘enriched’ flow and the added insight it gives you to reduce dwell time for malicious activity

[Webinar] DFARS Interim Rule: What, When, and How
2020-11-03 14:00 - 15:00
According to the recently released DFARS Interim Rule, as of November 30th, all members of the DIB subject to implementation of the NIST SP 800-171 standard must have a current (completed within the past 3 years) DoD Assessment on record in the DoD’s Supplier Performance Risk System (SPRS) to be eligible for an award, subcontract, or contract extension or modification.

According to the recently released DFARS Interim Rule, as of November 30th, all members of the DIB subject to implementation of the NIST SP 800-171 standard must have a current (completed within the past 3 years) DoD Assessment on record in the DoD’s Supplier Performance Risk System (SPRS) to be eligible for an award, subcontract, or contract extension or modification.

It’s a big deal, and we’ve got you covered.
Our industry experts will be on hand to walk you through all the details of this regulation and provide actionable insight, including:

important milestone dates,
how acquisitions will be affected (whether for primes or subcontractors/suppliers),
and what you need to do to comply in time.

We will hear both the the government and a Prime’s perspective on the interim rule, followed by a moderated Q&A portion.

TribalNet 2020 Annual Conference
2020-11-10 - 2020-11-11
As a way to connect with tribal technology decision makers and business leaders, the 2020 TribalNet VIRTUAL Conference & Tradeshow offers an unparalleled number of opportunities. For over twenty years, the event has evolved to become the premier platform for businesses, governments, and employees to connect and explore the latest in solutions, best practices, and technology in tribal gaming, government and health.

11th Annual NICE Conference and Expo
2020-11-16 - 2020-11-18
The annual National Initiative for Cybersecurity Education (NICE) Conference and Expo brings together thought leaders from industry, government, academia, and non-profit organizations to address the community’s cybersecurity education, training, and workforce needs. This event provides an opportunity to share best practices from around the world and across sectors in order to build the workforce we need to confront cybersecurity risks today and in years to come.

AWS re:Invent
2020-11-30 - 2020-12-18
We invite you to join us for keynotes, launches, sessions, and more—presented across 3 weeks from Nov. 30 – Dec. 18.

ISACA Virtual Conference: PRIVACY IN PRACTICE
2020-12-08
Register now to explore best practices in privacy solutions, expand your global network and earn up to 9 CPE credit hours all in one day from the comfort of your home.
Learn how to assess, build, and implement privacy solutions for your organization; stay up to date on evolving privacy laws and regulations; and ensure compliance and mitigate risk.
Join us online for our first-ever privacy-focused conference!

CMMC Accreditation Body January 2021 Town Hall
2021-01-11 18:00 - 2021-01-26 19:30 | Virtual Conference
On behalf of CMMC Accreditation Body Board and all of our partners both within the government and industry, we invite you to participate in the January 2021 CMMC AB Town Hall on the 26th from 6:00-7:30PM ET. The event registration will be on a first come, first served basis and will have a capacity of 3000 attendees. The event will be recorded and a link to the recording will be published after the event. Questions may be submitted in advance of the event by sending them to cmmcsupport@cmmcab.org and use the subject line “Town Hall Question”.

Protecting Customer Data
2021-01-12 14:00 - 15:00 | Virtual Conference
As a small business owner, it’s your job to protect not only your business’ data, but also your customers’ data from breaches and theft. In this webinar, Malcolm Web, Team Lead for Identity and Cyber Protection Services at Generali Global Assistance, will discuss the business need of protecting customer data, the tools you can use to help monitor and protect data, and how to minimize your risk.

The Year Ahead: Making Cybersecurity (More) Predictable in 2021
2021-01-14 12:00 - 13:00 | Virtual Conference
No doubt about it: this year was wildly unpredictable. Every month – heck, every week seemed to be weirder than the next (murder hornets, anyone?).
We may not know what 2021 has in store for us, but we do know there are some things security and IT teams can do right now to make the year ahead more predictable.
Join us on 14 January at 12 p.m. ET as host Andrew Senko, CISSP, CISM discusses:

Leading security experts’ predictions and expectations for 2021
Tips and trends to make the year ahead more manageable for cybersecurity
Practical, tactical steps to take to know whether all assets adhere to or deviate from security policies, regulations, and configuration expectations

COMPLYING WITH THE DOD ASSESSMENT METHODOLOGY AND DIBCAC ASSESSMENT PROCESS", FEATURING JOHN ELLIS, DCMA
2021-01-20 16:00 - 17:00 | Virtual Conference
New DFARS Interim Rules went into effect in December 2020, forcing defense contractors to adhere to new processes and requirements, and placing greater emphasis on compliance with cybersecurity regulations. Contractors who handle Controlled Unclassified Information (CUI) must now conduct self-assessments of NIST 800-171 compliance status in accordance with NIST 800-171A assessment guidance; score themselves on a subtractive, weighted formula as prescribed by the DoD Assessment Methodology scoring system; and report their scores and expected POAM completion dates to the government through the Supplier Performance Rating System (SPRS) in order to remain eligible to win new contract awards that involve handling CUI. In addition, the DCMA’s Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) is now able to mandate more detailed analysis of contractor compliance through Medium and High confidence assessments at the government’s discretion. For Medium and High assessments, DIBCAC personnel may perform detailed reviews of contractor SSPs, or conduct full NIST 800-171A evidence-based assessments of contractor compliance.
In this webinar, John A. Ellis, Director of the DCMA’s Technical Directorate, will provide key information that all defense contractors should understand about what is required, what to expect, and how to prepare for the DoD Assessment Methodology and DIBCAC assessment process; and cybersecurity compliance experts from eResilience will share best practices for prime contractors and subcontractors to assist in navigating compliance challenges.

Risk Management in Action: 4 Key Pillars for Achievable Resilience
2021-01-26 17:00 - 18:00
Resilience demands that we make a conscious commitment to anticipate, prevent, respond, and adapt to adverse events. Join us for an extended play demonstration that walks you through operational processes and innovations to build technology, supplier, workforce, supplier, and process resilience.
In this session we will cover the operational resilience lifecycle to help you define where your organization is today and what to focus on next.
Our experts will walk you through real world scenarios with best practices in key industries (ie Financial Services, Healthcare and Telecom) to illustrate:

How to ‘anticipate’ disruptions by identifying and prioritizing risk and dependencies
‘Prevent’ by establishing indicators, updating response plans, and proactively testing event scenarios
Monitoring to ‘respond and recover’ to support quick response of your action plans
Arming your team to ‘adapt’ by collecting and analyzing data to identify root cause and necessary controls and process improvements

Exploring Privacy Trends, Challenges & Predictions
2021-01-28 12:00 - 13:00 | Virtual Conference
Consumers expect organizations to respect their privacy, and organizations that do not may face severe fines and reputational damage.
The ISACA 2020 State of Privacy survey revealed that privacy is not going anywhere, as boards of directors prioritize privacy, and many survey respondents anticipate privacy budgets to increase or stay the same, despite the financial uncertainty caused by the pandemic.
Join ISACA to learn about privacy workforce trends, privacy program approaches, and the future of privacy. This webinar will also explore areas in which privacy teams can improve, along with examining skills gaps among privacy professionals.

SolarWinds Hack: Fallout, Recovery, and Prevention
2021-02-10 11:00 - 12:00 | Virtual Conference
Summary
The recent SolarWinds incident demonstrated the challenges of securing systems when they are the product of complex supply chains.
Agenda

The recent SolarWinds incident demonstrated the challenges of securing systems when they are the product of complex supply chains. Responding effectively to breaches and hacks requires a cross-section of technical skills and process insights. In this webcast, we will explore the lifecycle of the SolarWinds activity and discuss both technical and risk assessment to prepare organizations to defend against this type of incident.
What attendees will learn:

Technical details regarding the SolarWinds vulnerabilities and exploits
Supply chain risk management principles required to reduce the risk of future incidents
Advice on the core operational capabilities required to respond to and recover from the SolarWinds hack

Who should attend?

Chief Information Security Officer
Director of Information Security
Network Security Operations Manager
Network Security Analyst
Third-Party Risk Manager

[Webinar] From NIST 800-171 to CMMC: The Roadmap to Ensuring DoD Contract Wins
2021-02-11 14:00 - 15:00 | Virtual Conference
As of November 30th, all members of the DIB subject to implementation of the NIST SP 800-171 standard must have a current (completed within the past 3 years) DoD Assessment on record in the DoD’s Supplier Performance Risk System (SPRS) to be eligible for an award, subcontract, or contract extension or modification.
What does that mean for your business? How do you get started?
Our NIST 800-171 and CMMC experts will be on hand to walk you through all the details of this regulation and provide actionable insight, including:

What the Interim Rule says and how it relates to the existing DFARS clause
DoD Assessment Methodology from the government and industry perspective
CMMC Compliance roles and responsibilities
Next steps for the DIB: Assessing, Evaluating, and Planning

There will be a 15 minute moderated Q&A portion following the presentations, so make sure to get your questions in when you register!

Security Fundamentals for Windows Virtual Desktop Environments
2021-02-17 09:30 - 10:30 | Virtual Conference
Watch this free webinar to learn about built-in security capabilities of Windows Virtual Desktop. You’ll also find out how to improve your security posture by integrating your desktop environment with other Azure and Microsoft offerings.
Get technical guidance to help you:

Understand the security controls available in Windows Virtual Desktop.
Use multifactor authentication and conditional access to help keep your users safe.
Configure security tools such as Azure Security Center and Microsoft Endpoint Manager to help protect your infrastructure.

IA Data Analytics & Automation Virtual Conference
2021-02-22 12:00 - 2021-02-25 15:00 | Virtual Conference
Discover how you can utilize Digital Internal Audit across your organization to improve audit quality and manage risk more effectively. In this course, you will gain a deeper understanding of how digital continues to evolve in the marketplace, the technologies supporting digital, and how organizations can effectively begin the journey to implementing a digital capability. You will be able to discuss digital driven audit strategies with knowledgeable Deloitte instructors and your peers, and arm yourself with tools, techniques and thoughtware that will help guide you on your journey to integrating digital into your audit processes.

Define digital in the context of internal audit – common uses, benefits, and impact on business, risk and controls
Understand the technologies used to support digital
Explain various uses of digital, including monitoring, detection, & dashboarding
Identify areas in your enterprise where digital internal audit can be effectively leveraged
Plan and perform an audit utilizing digital concepts
Obtain hands on experience with designing and utilizing data visualizations
Understand and discuss various data science techniques and when to utilize them.
Effectively use visualization to communicate insights.

2021 CMMC AB Town Hall
2021-02-23 18:00 - 19:30 | Virtual Conference
On behalf of CMMC Accreditation Body Board and all of our partners both within the government and industry, we invite you to participate in the February 2021 CMMC AB Town Hall on Tuesday Feb 23rd from 6:00-7:30PM ET. The event registration will be on a first come, first served basis and will have a capacity of 3000 attendees. The event will be recorded and posted here after the event, https://www.cmmcab.org/#townhall. Questions may be submitted in advance of the event by sending them to cmmcsupport@cmmcab.org and use the subject line “Town Hall Question”.
Please register for the Town Hall here:
https://zoom.us/webinar/register/WN_Butq7zbkQYGVfBatx-BkaQ
Sincerely,
CMMC-AB Board of Directors

The Foundations of Automation for IA
2021-02-26 12:00 - 16:00 | Virtual Conference
The Foundations of Automation for IA course is designed to give the Internal Audit professional a foundational knowledge the individual technologies that make up Robotic & Intelligent Automation (R&IA), their purpose and common applications. Additionally, the course will provide a practical framework for identifying risk within R&IA, will discuss where those risks are found and common governance activities for mitigating those risks. Finally, the course will provide an overview of the R&IA Maturity Assessment and Internal Audit’s role in R&IA adoption.
