Presented on August 17, 2022

Watch this webinar to hear from Osterman Research who conducted the benchmarking study and the architect of the Ermetic maturity model as they discuss the significance of the key findings and explain how you can use the model and the benchmark to improve your own cloud security maturity.

Among the findings they will explore are:

• Demonstrable ROI: 42% of companies investing more than 50 hours per week on cloud security are achieving the highest levels of maturity (Levels 3 and 4)
• Bigger not better: Only 7% of companies with more than 10,000 employees were at level three or four in terms of maturity, compared with 18% for companies with between 2,500 and 9,999 employees, and 24% for companies with 500 to 2,499 employees
• Shared blindspot: 81% of organizations lack full visibility into all resources that are directly accessible from the Internet

Register and watch the webinar

Read the report: State of Cloud Security Maturity 2022

Published May 2022

Duality Technologies published a blog post we wrote on zero trust data collaboration:

Data is the foundation of the information revolution and the knowledge-based economy. The right data, in the right hands, at the right time, has become a highly valued commodity across industries. Data is at the root of uncovering new business opportunities and defining new and more innovative products., The tech giants of today  have built their businesses and value on data versus goods—e.g., Google, Facebook, Twitter, and Airbnb.

Read more on the Duality Technologies blog.

Recorded on May 11, 2022

We participated in an episode of the Archive360 podcast, discussing all things data security for 2022 and beyond:

In our latest episode Michael Sampson, Senior Analyst, Osterman Industry Research discusses the recently published Zero Trust white paper. This podcast will cover the differences in infrastructure security and data security which have been brought to the forefront over the last several years due to the rise in cyber attacks, ransomware and the newer more dangerous extortion wear variants. In this episode we also discuss the effects that COVID-19 has had on much of the remove workforce with less secure technology capabilities than in-person offices.

Archive360

Presented on February 28, 2022

Today’s networks have never been more diverse and distributed. Zero-trust architecture offers a modern approach for security to meet modern work designs and tackle the cybersecurity challenges facing organizations. Survival and continued growth often mean expanding services beyond traditional areas, being more agile and embracing work-from-anywhere policies. Most organizations expect to be fully deployed with a zero trust architecture within two years.

Hear from Osterman Research and SonicWall security experts as we discuss the importance of Zero-Trust. Learn about:

• Threats, trends, and current issues elevating the need for zero trust
• How organizations are planning and deploying a zero-trust architecture
• Best practices and solutions to support the move to zero-trust

Register and watch on BrightTalk

Presented on December 2, 2021

Government entities face a plethora of cybersecurity challenges. Ransomware, especially against critical infrastructure, is of the utmost importance to protect against. Because traditional cybersecurity solutions leave governments in reactive mode, many agencies are underprepared for the challenge. 

Join this discussion with Virsec’s Kevin Jones, and Osterman Research’s Michael Sampson, to explore the current state of cybersecurity threats, preparedness, and protection capability in the government sector. Learn how Virsec can help protect your agency against ransomware attacks that target runtime. We’ll share how Virsec Security Platform takes a deterministic approach to protect software, locking out the attacker before they can execute their malicious intent.

Presented on November 17, 2021

Zero Trust architectures address a fundamental shortcoming in traditional security models: namely, that people and devices inside the network or a given security perimeter are assumed to be trustworthy. Join this discussion on why Zero Trust is important as we take a deeper look at the in-depth survey of 125 IT and security decision-makers in mid-sized and large organizations (average employees 11,992, median employees 1,500), all of whom are knowledgeable about how their organization was using or planning to use a Zero Trust architecture, or why their organization had intentionally chosen not to do so.

Presented on October 20, 2021

Government entities face a plethora of cyber threats that are becoming more sophisticated and targeted. The threat of the highest concern is ransomware attacks against critical infrastructure organizations. For example, this year we’ve seen attacks on gas supply with the Colonial Pipeline attack, on meat supply with the JBS attack, and on public transportation with the New York City Metro attack. 

Governments around the world are now taking a more activist approach to managing cyber threats. In the US, Biden’s cybersecurity EO is pushing government agencies and private organizations to improve their cybersecurity postures and act rapidly to implement Zero Trust. This means investing in cybersecurity solutions and adopting stronger approaches to identity access management (IAM), such as multi-factor authentication (MFA), single sign-on (SSO), adaptive authentication, and biometrics. 

In this webinar, we will explore the current state of cybersecurity threats, preparedness, and response capability in the government sector, and offer solutions for improving cybersecurity in government. 

Michael Sampson, senior analyst at Osterman Research, talks with Kimberly Johnson, VP of Product Marketing at BIO-key International, on the IAM Pulse podcast about cybersecurity and education.

Topics of discussion include how the sector is under siege with a plethora of cyber attacks, and the cybersecurity solutions that should be considered to prevent them.

Listen to the podcast on BIO-key’s web site

Sponsored by Backupify, Mimecast, Quest Software and Yubico

Executive Summary

Microsoft 365 delivers a range of long-offered and new style productivity and collaboration tools, ranging from cloud-enhanced versions of the original Word, PowerPoint and Excel suite, along with cloud-delivered editions of Exchange and SharePoint that negate the need for on-premises servers, the new Microsoft Teams application, and a plethora of less adopted services such as Microsoft Planner and Yammer. It’s a capable offering that’s been widely embraced by organizations across the world.

Equally, however, is the reality that Microsoft 365 comes with some shortcomings in the areas of security, archiving, backup, data protection, eDiscovery, and other key aspects of the offering. Relying solely on the native capabilities in Microsoft 365 can lead to challenges, such as missed security threats, duplicate efforts to perform eDiscovery across an organization’s data landscape, and the inability to recover accidentally deleted data. The use of third-party solutions in parallel with Microsoft 365 can address many of the platform’s shortcomings. Many third-party vendors build best-of-breed offerings rather than taking a broad-stroke approach to features.

Request a Copy