On Tuesday March 18, we spoke with Eric Schwake, Head of Product Marketing at Salt Security, about the research. The webinar is entitled – API and Application Security: A Critical Investment for Protecting Your Organization in 2025.

Click below to watch the recording.

Presented on July 6, 2023

We met with Audian Paxson, Director of Technical Product Marketing at IRONSCALES, for a chat on the recently released Data Breach Investigations Report by Verizon. The “webinar” was supposed to be an “informal chat” on the main ideas of interest in the report, but after preparing for it, we ended up with over 30 slides and far too much content to fit into the original 25 minute timeframe.

Topics discussed:

• Verizon’s DBIR is a “pot of coffee and sit down to read” not a “quick skim.”
• What the report says about phishing, pretexting, and business email compromise, and what it needs to say better..
• Ransomware.
• Email is a risky place (and the reasons why).
• The prevalence of credential compromise / use of stolen credentials.
• … and a variety of other things, too.

Will be presented on August 25, 2022

There’s no universal approach to information governance. Strategies are diverse and, because they dictate your information governance policies and procedures, getting it right matters. One popular option is a Microsoft-based setup. But how effective is that?

This webinar can help!

Michael Sampson of Osterman Research and Laurence O’Brien from Micro Focus lead a discussion around the pros and cons of using Microsoft 365 to manage your information governance. Among other topics, we’ll cover:

• Correctly classifying every information type in an organization’s data landscape
• Discerning the data requiring special protections from more expendable files
• Deciding how to store and otherwise manage data from the point of creation
• Ensuring only those authorized can access different groupings of data
• Using automated mechanisms to audit access and mitigate over-exposure
• Providing the ability to audit communication for compliance
• Filtering repositories to identify data potentially responsive to eDiscovery requests
• Excluding irrelevant data before creating a collection for external review

Register on BrightTalk

Presented on June 24, 2022

The managed cybersecurity services market is undergoing a significant shift. Organizations are upgrading from alert-oriented Managed Security Service Providers (MSSPs) to action-oriented Managed Detection and Response (MDR) services.

The need for change is evident, and organizations early to embrace MDR services report a higher security posture across multiple dimensions. Those organizations that have not yet upgraded from an MSSP evidence an overwhelming and urgent intent to do so.

Learn about MDR adoption – especially those driven by AI and automation – and how this is expected to more than double in the next 12 months, compelled by an excess of alerts, alert fatigue, a staffing crisis, and a profound increase in the number of advanced threats across any given attack surface.

Register and watch on BrightTalk

Read the report: The Rush to MDR Services

Presented on June 21, 2022

Organizations have proven more adept in protecting their own confidential and sensitive data than the personal and sensitive data of customers and employees. Privacy regulations have become a key tool for regulators and governments to force organizations to pay more attention to the data collected, processed, stored, and shared on individuals—much of it gained through new ubiquitous digital channels.

This webinar highlights the research findings and analytical insights of CyberRes Voltage and Osterman Research’s white paper, Privacy Compliance in the Unites States: Status and Progress in 2022 including:

• What is the current snapshot of privacy compliance?
• Why is privacy compliance important?
• What are the motivators today in the US?
• Are you ready for the next wave of compliance regulations?
• Understand the types of threats posed by employees.

Register and watch on BrightTalk

Presented on May 24, 2022

Organizations have proven to be more adept when protecting their confidential data than their customer’s personal and sensitive data. With information available on 15 billion individuals, from more than 100,000 data breaches, there is a bounty of data available to fuel identity theft, financial fraud and other malicious threats. 

Privacy regulations are a panacea on the horizon, but they haven’t been rolled out universally. For these privacy regimes to be effective regulators and governments need to force organizations to pay more attention to consumer data that is collected, processed, retained, stored and shared.

With the emergence of new privacy regulations — like California’s CPRA — it’s important to understand how organizations are responding.

Tune in as Gimmal’s Dean Gonsowski interviews Michael Sampson, senior research analyst from Osterman Research, who completed a recent white paper on organizational privacy compliance.

Register and watch on Gimmal

Presented on: September 15, 2021

Research highlights hidden vulnerabilities in commonly used commercial off-the-shelf software applications

Commercial off-the-shelf (COTS) software includes prevalent use of third-party and open-source components creating a software supply chain security blind spot. The findings in a recent Osterman Research report present a serious weakness in the software supply chain of many widely used COTS software applications. This webinar will share results of the research report and discuss how organizations can take a more proactive approach to ensuring a stronger enterprise-wide cybersecurity posture.

In this webinar, you will learn:

• Why vulnerabilities in COTS software applications are a cybersecurity threat
• 100% of all analyzed applications with open-source components in five common software categories (web browsers, email, file sharing, online meetings and messaging) contained vulnerable open-source components
• Applications in the meeting and email client categories were the most vulnerable
• Critical vulnerabilities (CVSS 10.0) were found in 85% of these applications
• New ways of analyzing COTS software applications to better reduce your attack surface and potential for compromise

Date: July 22, 2021

Focus of the Webinar

Watch this hour-long webinar where Michael Sampson, Senior Analyst at Osterman research reviews the results of their recent survey of 130 cybersecurity professionals, How to Reduce the Risk of Phishing and Ransomware.

 You’ll learn how organizations view their security posture, including:

• Organizational effectiveness against various threats
• Most popular security incidents
• The concerns keeping security teams up at night
• The most-pressing ransomware concerns
• The capabilities to handle different threats

Register to view the recording

Date: July 21, 2021

Focus of the webinar

As the use of Microsoft Teams has exploded, compliance officers, information governance professionals, and other risk management decision-makers must determine whether they have the right tools to secure the information that comes out of this collaboration tool, for their compliance, legal processes, and internal investigations.

Using a third-party archiving and data protection solution to capture point-in-time and point-in-context actions, enables organizations to take advantage of new capabilities within Teams without undermining their compliance requirements.

Watch the replay with Pierre Chamberland, IPRO Innovation Catalyst and Michael Sampson, Senior Analyst at Osterman Research, who has been consulting on collaboration tools for over 20 years, as they discuss how to evaluate such third-party security solutions and determine requirements for your organization’s specific needs.

Watch the Recording

Date: June 30, 2021

Osterman Research conducted a brand new and independent study on the rise of phishing and ransomware attacks. 130 cybersecurity professionals were interviewed.

With new strains of ransomware and malware threats on the rise, your organization and data is continually at risk. Watch this webinar to learn how you can reduce your exposure to these threats, including:

• The most effective mitigations against phishing and ransomware attacks.
• Five pillars of phishing and ransomware prevention.
• Best practices to reduce the risk of phishing and ransomware.
• Recommendations for improving security and steps to take today.

Register to watch the recording