UPCOMING WEBINARS

Accelerating the Adoption of EHR Virtual Seminar

September 14th 6am ET

Healthcare IT experts reveal actionable strategies to optimize your infrastructure performance and scalability, expand server and storage capacity and take advantage of mobile health care applications to meet meaningful use mandates and accelerate EHR adoption. Don’t miss this complimentary virtual seminar.

Addressing “The Unlucky Seven” - Security and Compliance Issues That Matter Most to the Mid-Market

On Demand Webinar

This webinar will go through the most critical challenges faced by mid-market companies, and illustrate how collecting and analyzing event data across the enterprise can address those challenges in the context of budget and staff constraints.

ArcSight Logger Technical Overview

On Demand Webinar

Traditional log management solutions have failed to simultaneously meet the needs of security, compliance and IT operations teams. Fast mutating cyber-threats increasingly require consolidation and analysis across all structured and unstructured event data. Attend this webinar to learn how to cost effectively combat cybercrime, demonstrate compliance and streamline IT operations using all-in-one log management solution.

Current Trends in Security and Compliance Monitoring

On Demand Webinar

Learn about the current trends in security and compliance monitoring, why those are changing customer needs for SIEM, and how the ArcSight SIEM platform meets these evolving requirements.

HOT TOPICS

Anatomy of an Attack - Detecting and Responding to Fraudulent Activity

Exploring fraud-related trends as well as ways to address those trends including: real-time and forensic analysis, pattern investigation and advanced correlation.

At the SOC - Tips to Managing Cyberthreats

1 hour duration

Get the most from your SOC services by fully utilizing your existing security tools and solutions. Join this session and you will learn how to:

- Decrease response times by modeling your network
- Increase relevance by integrating vulnerability scan data
- Prevent work duplication by using effective workflow
- Stay current with the latest threats by integrating security intelligence

Automated vs. Automatic Threat Response Systems

You no longer need to implement a costly and time-consuming NAC solution for DOS, DDOS, viruses, worms or even BOTNET-based attacks. Learn how Boston Medical Center has eliminated troubleshooting and saved vast amounts of time and money with an automated attack response time of less than two minutes.

Could a Cyber Attack Bankrupt your Company?

What would happen to your business if your company's intellectual property, records or customer data were stolen? How much would it cost your firm to recover?

A new report from the Ponemon Institute, The First Annual Cost of Cyber Crime Study, published in July 2010 found in a benchmark study of 45 global companies that successful cyberattacks now cost large enterprises on average $6M a year. In today's threat environment good governance practices and complete business protection is essential. Join this exclusive Computerworld webinar and hear from Dr. Larry Ponemon, founder of the Ponemon Institute, as he discusses his latest study findings.

Counter Cyber Espionage:  A Strategic Approach to Defend Your Organization

Cyberthreats are evolving significantly in both sophistication and variability, and the persistent threat posed by cyberespionage may be the most harmful of all for many organizations. Join this webinar to learn about the current state of cyberespionage threats and countermeasures. This session will also cover the advanced methods of infiltration and exfiltration used by cyberspies, as well as the technologies, policies, and procedures that can reduce an organization’s risk of compromise.

Current Trends in Security and Compliance Monitoring

Learn about the current trends in security and compliance monitoring, why those are changing customer needs for SIEM, and how the ArcSight SIEM platform meets these evolving requirements.

Detect and Address Worms and Malware

Join this ArcSight/Unisys webinar to learn about the methods used by Unisys security experts to detect and stop Conficker using ArcSight SIEM. We will review the specific rules as well as firing conditions used to prevent false positives, and practical techniques for securing your networks from the Conficker worm using a SIEM solution.

Detecting and Stopping Modern Botnets with Damballa and ArcSight

Modern malware is more sophisticated and aggressive than ever before. Botnets can infiltrate any organization, compromising security and confidentiality. They can be difficult to detect, and even harder to fully eradicate, leaving companies at risk. However, equally sophisticated and aggressive solutions exist for stopping the botnet threat. Industry leaders Damballa and ArcSight deliver integrated solutions for detecting and eliminating modern botnets. This webinar describes the modern botnet problem and how Damballa and ArcSight solve that problem.

Five Essential Steps for Protecting Your Organization from Insider Threats

Will you be held hostage or have implemented a prevention, detection and response plan? Listen in as we discuss the controls required to mitigate risk.

Getting It Right! Best Practices in Selecting a Log Management Solution That’s Right for You

An effective Log Management solution must support quick and easy analysis across large log volumes. What about audit quality and deployment flexibility? What else needs to be considered when making a Log Management investment?

Hacking 2010:  Understanding the New Wave of Cyberattacks

In the past year, we've seen more new and sophisticated cyberattacks -- spreading at a faster, more widespread rate – than the industry has ever seen before. The bad news? Hackers are getting better at their jobs every day. Attend "Hacking 2010: Understanding the New Wave of Cyberattacks," an all-day virtual event that combines the in-depth expertise of two of the industry's best-known security resources -- InformationWeek and Dark Reading – with insights from some of the industry's most respected security researchers and experts.

Hacking the Odds - Gaining a “House Advantage” Over Modern Threats

21st Century businesses are highly dependent on digital technologies and they have more to do than ever to beat the odds against a coordinated cyber attack. In recent years, cybercrimes have dramatically increased in quantity, diversity and sophistication. In 2008 alone, over 20 million malicious programs such as viruses, worms and Trojans were created and over 45,000 different botnets were involved in cybercrimes. Join ArcSight CEO, Tom Reilly, and his guests as they discuss some of the architectural issues that enable modern security threats as well as techniques for shutting them down and new solutions for detecting and stopping cybercrimes.

Guests:
- Joseph Menn, Author of the new book - Fatal System Error
- Dr. Nir Kshetri, Author of the new book - The Global Cybercrime Industry
- Barrett Lyon, CEO, 3Crowd Technologies and Computer Wizard who penetrated both the Russian cyber-mob and American Mafia
- Andy Crocker, COO, Cybersecurity Shield and former investigator with the National Hi Tec Crime Unit at the National Crime Squad in the UK
- Dr. Prescott Winter, CTO for Public Sector, ArcSight

How many Log Management Solutions do you ideally need?

Some would say you need a software solution, others might stress on an appliance-based solution, and some might suggest a cloud version. Based on the use cases, some solutions were designed for security, some for compliance and some for IT operations. So, how many log management solutions do you ideally need? The answer is just ONE – A Universal Log Management Solution. Come attend this webcast to find out how to select The Universal Log Management Solution.

Identity Monitoring in an Imperfect World

Despite the billions of dollars that enterprises have invested in identity and access management technologies, access control problems are getting worse, not better. As more companies turn to contractors and Cloud services, IT security departments face even greater difficulty deploying identity management technologies and role managers to control, revoke and apportion access rights. And yet the burning question still remains, can you ever perfectly monitor everyone in an imperfect world?

Attend this session and learn how leading enterprises are using identity monitoring solutions to:

• Mitigate security and compliance risks
• Provide a window into user activity that solves many of the risk and compliance challenges caused by imperfect access governance
• Effectively monitor what their key system administrators, contractors and other employees are doing with the access rights they’ve been given

Integrate Enterprise and Cloud Security for a 360-degree View of User Activity

Organizations of all sizes are looking at cloud services as a way to cut costs and increase efficiency. However, as parts of your IT infrastructure move off of your network, how will you monitor security in a hybrid environment? Monitoring users as they access internal applications and databases plus cloud services can reduce many security risks. Join ArcSight and Ping Identity to understand how leading organizations are securing their operations while cutting costs via the cloud.

Join this session and learn how to:
• Maintain enterprise access control while embracing cloud based apps
• Establish proper audit trails for compliance and regulatory requirements quickly and easily
• Implement plans that strengthen security, simplify user access, and are easily managed by IT

Mitigating Fraudulent Application Transactions.

This Webinar will explore the various problems associated with protecting financial organizations from fraudulent activity. Several solutions will be outlined and case studies will be explored that illustrate the advantages of leveraging a more holistic approach to incident detection and response.

Outsiders vs. Insiders: Who should manage your security events?

MSSPs provide an extremely valuable service to companies in helping to alleviate security operations from an internal staff. However, do the benefits outweigh building your own SOC? In this session, we’ll look at the benefits of using an MSSP versus building your own SOC.

SC Magazine Webinar: Averting data breaches in a bad economy

SC Magazine editor in chief Illena Armstrong extrapolates mounds of data from the recent survey - Guarding Against a Data Breach - to determine the imperatives and trends in the security industry. She discusses the survey answers with nearly a dozen recognized leaders to analyze and assess the findings. What she unveils is that the technology to help is out there, and a number of dedicated security personnel are in place, but many are up against budget shortfalls, limited assistance, embroiled in regulatory mandates and compliance requirements.

SC Magazine Webinar: The Better CSO

What does it take to be a strong CSO with a voice, budget, support and resources - especially as cyberthreats continue to evolve and corporate budgets still are tight? What training is necessary and what professional traits will go a long way? With whom should the CSO make alliances and what departments will be integral to making information security work for the entire organization? What does it mean to "get it right" as a successful CSO? We find out.

Security Operations: Getting Over the Waterfall

Agile software development methodologies have revolutionized software engineering. These same principles and tools can be adapted for building a flexible and dynamic security operations. Learn how to take wikis, scrums, and user stories and utilize them in incident responses, shift turnovers, and ArcSight use cases.

Security Operations for Sale

You believe that your organization would benefit from building its own SOC to help mitigate risk and monitor cybercrime, but your management doesn’t want to spend money on “foot apparel” (SOCs). This session will cover the key business requirements, show how to manage and structure the costs, and help you transform the ‘no’ into an executive “yes.”

Security Stories from the Trenches

Today's IT environments are dynamic and complex. Security Information and Event Management can automate the process of event collection, analysis and storage. Attend this webinar to hear customer success stories and find out how you can leverage your existing IT infrastructure to improve your security posture.

SIEM & SAML- Secrets to Securing the Cloud

While CIOs and CISOs are weighing through a broad range of cloud services to cut costs and streamline operations, they all share one common concern: how to retain visibility over user activity when applications move to the cloud?

Join SIEM market share leader ArcSight’s Vice President of Product Marketing Rick Caccia and Internet Identity Security market leader Ping Identity’s CTO Patrick Harding in a free Webinar in which they will discuss best practices for better security and compliance in the cloud.

SIEM as a Tool for Fraud Prevention

Online fraud is becoming increasingly sophisticated, relying on misdirection and gaps in detection systems. As a fraud detection technology, security information event management (SIEM) is uniquely suited to correlating transaction information to detect fraud. While many financial institutions have deployed channel-specific fraud prevention products, correlating across these and across channels remains difficult.

In this webinar, we will discuss ways that SIEM technology can be used to detect sophisticated online fraud, as well as real-world examples of fraud prevention using the ArcSight SIEM platform.

Signs of Growth - Is Your SOC Maturing?

Security operations is rather new in the plethora of IT services especially when dealing with ongoing threat of cybercrime. While you may know how to determine whether your mainframe or distributed operations are mature, relatively few groups assess the overall maturity of security operations. In this session, you will learn how to discover whether your people, processes, and SIEM technology have matured.

Stop New Security Threats on Day Zero

Conducting business in a networked world seems to be more dangerous than ever. New malware, botnets, and hackers are causing new security breaches at a rapid pace. Traditional defenses are not working well, but new solutions exist for detecting and stopping zero-day outbreaks.

Join ArcSight experts as they present in this webinar, some of the architectural issues that enable modern security threats; as well as techniques for shutting them down.

Top 10 Security Breaches

A review of the top ten security breaches and proactive steps to limit damages.

2008 was a record year for security breaches and 2009 already has started with several high-profile incidents. This presentation covers a list of the top 10, how the list is created, and some of the important lessons that can be learned to help keep your company out of the headlines.

Top 10 Ways to Ensure Your Security Operation Center Fails

The business of running a Security Operations Center (SOC) is a difficult one. Who has the time to retain the right people, build comprehensive processes and procedures, and implement a robust Security Event and Information Management (SIEM) infrastructure? Those tasks require time, expertise and experience. Would you like to take a shortcut? This session will give you the tips and tricks based on actual client engagements that you’ll need to side-step, bypass, and throw out the rigorous project needed to make a successful SOC. Need a SOC up and running in two weeks, but don’t necessarily care about it running one year from now? This session is for you.

What Happens in Your Enterprise, Stays in Your Enterprise

Attend this SC Magazine webinar to learn how to convert digital fingerprints into a single pane of glass for:

* Combating cybercrime
* Demonstrating regulatory compliance
* Streamlining IT operations

WhiteHatWorld.com: Late Breaking Computer Attack Vectors Webcast hosted by Paul Asadoorian

This lively session will discuss recent and anticipated computer and network attack vectors, highlighting the current trends in information security and hacking.

WhiteHatWorld.com: Top 10 Security Breaches

A review of the top ten security breaches by WhiteHatWorld.com and Davi Ottenheimer - Director of Compliance Solutions at ArcSight.

TECHNOLOGY SOLUTIONS

SIEM | Log Management | User Monitoring

SIEM

(ISC)2 ThinkT@nk Roundtable: Using SIEM/Log Management to Achieve Significant ROI

In today’s tough economic condition where resources are shrinking and logs are exploding, enterprises are seeking ways to utilize logs to ensure high ROI, short payback times, less investment, simple deployment and lowering ongoing administrative cost. On June 23rd, 2009, (ISC)² and ArcSight will present a ThinkTank Roundtable on SIEM/Log Management ROI. Brandon Dunlap of BrightFly will moderate a panel of experts including A. J. Wright, Chief Architect University of Tennessee’s Technical Review Board and Varun Kohli, Sr. Manager of Product Marketing at ArcSight that will look at three key use cases of SIEM/Log Management solutions that can aid in huge savings which include Storage, Compliance and IT Security and IT Operations.

(ISC)2 Member ID required.

Counter Cyber Espionage:  A Strategic Approach to Defend Your Organization

Cyberthreats are evolving significantly in both sophistication and variability, and the persistent threat posed by cyberespionage may be the most harmful of all for many organizations. Join this webinar to learn about the current state of cyberespionage threats and countermeasures. This session will also cover the advanced methods of infiltration and exfiltration used by cyberspies, as well as the technologies, policies, and procedures that can reduce an organization’s risk of compromise.

Demonstrating Return on Investment for SIEM

The need to secure systems, applications and data have increased as networked environments get larger, more complex and more transparent to outsiders. However, security professionals such as yourself often struggle to justify security investments to business owners.

Join the ArcSight security experts and learn how to define Return on Investment (ROI) for SIEM projects. We will showcase how several organizations have successfully realized high returns on their SIEM investment. The companies profiled in this webinar saved millions of dollars through automation while increasing their ability to secure their corporate networks. More importantly, these companies demonstrated these savings via hard dollar amounts to internal stakeholders.
Register today and learn how you can measure the ROI of a SIEM investment.

Detect and Address Worms and Malware

Join this ArcSight/Unisys webinar to learn about the methods used by Unisys security experts to detect and stop Conficker using ArcSight SIEM. We will review the specific rules as well as firing conditions used to prevent false positives, and practical techniques for securing your networks from the Conficker worm using a SIEM solution.

Hacking 2010:  Understanding the New Wave of Cyberattacks

In the past year, we've seen more new and sophisticated cyberattacks -- spreading at a faster, more widespread rate – than the industry has ever seen before. The bad news? Hackers are getting better at their jobs every day. Attend "Hacking 2010: Understanding the New Wave of Cyberattacks," an all-day virtual event that combines the in-depth expertise of two of the industry's best-known security resources -- InformationWeek and Dark Reading – with insights from some of the industry's most respected security researchers and experts.

SC Magazine Webinar: The Better CSO

What does it take to be a strong CSO with a voice, budget, support and resources - especially as cyberthreats continue to evolve and corporate budgets still are tight? What training is necessary and what professional traits will go a long way? With whom should the CSO make alliances and what departments will be integral to making information security work for the entire organization? What does it mean to "get it right" as a successful CSO? We find out.

SIEM & SAML- Secrets to Securing the Cloud

While CIOs and CISOs are weighing through a broad range of cloud services to cut costs and streamline operations, they all share one common concern: how to retain visibility over user activity when applications move to the cloud?

Join SIEM market share leader ArcSight’s Vice President of Product Marketing Rick Caccia and Internet Identity Security market leader Ping Identity’s CTO Patrick Harding in a free Webinar in which they will discuss best practices for better security and compliance in the cloud.

SIEM 3.0: The Next Generation of Security and Compliance Monitoring

Learn about the current trends in security and compliance monitoring, why those are changing and what a next-generation solution will look like. If you are considering a SIEM solution, this webinar is a can't-miss and will change the way you evaluate monitoring technology.

SIEM as a Tool for Fraud Prevention

Online fraud is becoming increasingly sophisticated, relying on misdirection and gaps in detection systems. As a fraud detection technology, security information event management (SIEM) is uniquely suited to correlating transaction information to detect fraud. While many financial institutions have deployed channel-specific fraud prevention products, correlating across these and across channels remains difficult.

In this webinar, we will discuss ways that SIEM technology can be used to detect sophisticated online fraud, as well as real-world examples of fraud prevention using the ArcSight SIEM platform.

SIEM Thought Leadership Roundtable

Most IT security departments are swamped. On one hand they’re contending with a highly dynamic threat landscape and an ever-expanding technology portfolio that requires protection. At the same time they’re doing what they can to help fulfill a burgeoning list of audit and regulatory compliance requirements. And on their third hand … if only that were possible! Fortunately, Security Information and Event Management (SIEM) – which has long offered IT Security the prospect of re-gaining control – is possible. In this Thought Leadership Roundtable, we’ll get to the bottom of what makes SIEM different from other security management solutions as well as what level of investment is required to make it work.

Stop New Security Threats on Day Zero

Conducting business in a networked world seems to be more dangerous than ever. New malware, botnets, and hackers are causing new security breaches at a rapid pace. Traditional defenses are not working well, but new solutions exist for detecting and stopping zero-day outbreaks.

Join ArcSight experts as they present in this webinar, some of the architectural issues that enable modern security threats; as well as techniques for shutting them down.

Log Management

(ISC)2 ThinkT@nk Roundtable: Using SIEM/Log Management to Achieve Significant ROI

In today’s tough economic condition where resources are shrinking and logs are exploding, enterprises are seeking ways to utilize logs to ensure high ROI, short payback times, less investment, simple deployment and lowering ongoing administrative cost. On June 23rd, 2009, (ISC)² and ArcSight will present a ThinkTank Roundtable on SIEM/Log Management ROI. Brandon Dunlap of BrightFly will moderate a panel of experts including A. J. Wright, Chief Architect University of Tennessee’s Technical Review Board and Varun Kohli, Sr. Manager of Product Marketing at ArcSight that will look at three key use cases of SIEM/Log Management solutions that can aid in huge savings which include Storage, Compliance and IT Security and IT Operations.

(ISC)2 Member ID required.

Driving Compliance with Log Management at Tyson Foods

Get More Out of Your ESM Investment with ArcSight Logger

This webinar will review the architecture, benefits, and capabilities of ArcSight Logger with an emphasis on its complementary value and bi-directional integration with ArcSight ESM.

How many Log Management Solutions do you ideally need?

Some would say you need a software solution, others might stress on an appliance-based solution, and some might suggest a cloud version. Based on the use cases, some solutions were designed for security, some for compliance and some for IT operations. So, how many log management solutions do you ideally need? The answer is just ONE – A Universal Log Management Solution. Come attend this webcast to find out how to select The Universal Log Management Solution.

Is Your Log Management Solution Obsolete?

Find out how ArcSight Logger revolutionizes and redefines log management by joining us for an exclusive, complimentary webinar.

Log Management in 2010 and beyond …

Attend this webinar and learn how log management will change the course of fighting cybercrime in the next decade. Instead of choosing point solutions, global organizations are choosing a single log management platform to simultaneously handle the needs of cybersecurity, compliance and IT operations. Join the industry experts and learn how ArcSight Logger 4 enables leading organizations to combat cybercrime, demonstrate regulatory compliance and streamline IT operations

Navigating the Data Stream without Boiling the Ocean: Case Studies in Effective Log Management

What makes a log management program effective? Log management activities must be prioritized in order to operate your security team effectively. We will review and analyze best practices for implementing log management programs as well as address SIEMs’ influence on the goal of optimization. This virtual discussion is ideal for risk, compliance, and security managers, as well as anyone looking for new approaches to gain intelligence from their log data.

SANS Fifth Annual Log Management Survey

The SANS Analyst team hasfinished the 2009 survey of the Log Management Industry. Register for insight into why people use logs, what the problems are with log management, and what companies would like to see from vendors.

SANS Sixth Annual Log Management Survey, Part I More Log Data, More Uses

For the past six years, SANS has been monitoring the evolution of log management and log usage through its annual Log Management Surveys. In this webcast, we release the results of our sixth annual log management survey, written by SANS Analyst Jerry Shenk, who will reveal trends reported by respondents this year and compare to years past.

SANS Webcast: Log Management for Security Monitoring and IT Operations

SANS Webinar: Log Management Requirements, Drivers & Trends

This webinar will cover drivers and basic requirements when adding to, developing or acquiring log management systems, followed by an overview of the ArcSight Log Management system.

Stop New Security Threats on Day Zero

Conducting business in a networked world seems to be more dangerous than ever. New malware, botnets, and hackers are causing new security breaches at a rapid pace. Traditional defenses are not working well, but new solutions exist for detecting and stopping zero-day outbreaks.

Join ArcSight experts as they present in this webinar, some of the architectural issues that enable modern security threats; as well as techniques for shutting them down.

Tackle Security, Privacy, and Compliance in the Healthcare Payer Sector

The growing incidence of data breaches and regulatory oversight have made security and privacy a top priority for healthcare payers. Join this webinar to learn how Priority Health, a major healthcare payer, utilizes the ArcSight SIEM platform and effectively addresses regulatory compliance, privacy, and security challenges through comprehensive event and log monitoring. Register today and also find out how Priority Health streamlines regulatory audits and protects their organization against a variety of external and internal threats.

User Monitoring and Improved Medical Data Privacy for Clinical Applications

The growing incidence of medical data breaches and the ARRA HITECH Act of 2009 have raised the importance of monitoring healthcare provider infrastructure and clinical applications.

Find out how the ArcSight and FairWarning joint solution can enable 360 degree user monitoring and improve medical data privacy.

Using Logs To Investigate Cyber Threats In The Enterprise

When security professionals suspect a security breach or infection in their enterprises, they begin an investigative process that is often complex and time-consuming. Combing through system and application logs to find clues on the source of the breach is a tedious and difficult process -- at a time when speed is of the essence. How can IT workers find the information they need to resolve these business-threatening security events -- with a minimum of delay?

Together with ArcSight expert Ansh Patnaik, Director of Industry Solutions, the Dark Reading team will discuss these key topics:

* Current trends in attacks and breaches
* Best practices for detecting potential security compromises
* Key methods for responding to a potential breach
* How to efficiently scan and analyze logs to find the source of a compromise
* Tips for monitoring logs to speed future incident response

What Happens in Your Enterprise, Stays in Your Enterprise

Attend this SC Magazine webinar to learn how to convert digital fingerprints into a single pane of glass for:

* Combating cybercrime
* Demonstrating regulatory compliance
* Streamlining IT operations

WhiteHatWorld.Com - Log Management Thought Leadership Roundtable Webinar

Join Mark Bouchard and Rich Mogull as they gather industry visionaries, such as Hugh Njemanze of ArcSight, around a virtual table for a lively discussion on a wide range of current IT Security trends.

Attendees gain a fresh, unedited perspective of the emerging security technology trends directly from those responsible for their development.
Our vendor partners use this platform to communicate their organization's vision and direction in a marketplace.

User Monitoring

ArcSight + Oracle for a 360 Degree View of Users, Roles and Activities

Combining the strength of ArcSight SIEM Platform with the Identity & Access Management Suites from Oracle, you can correlate events and actions with specific identities, roles, and authentications to identify and rapidly mitigate fraud, risk and compliance violations.

This session will demonstrate how Oracle Identity Management enhances your ArcSight Investment.

Counter Cyber Espionage:  A Strategic Approach to Defend Your Organization

Cyberthreats are evolving significantly in both sophistication and variability, and the persistent threat posed by cyberespionage may be the most harmful of all for many organizations. Join this webinar to learn about the current state of cyberespionage threats and countermeasures. This session will also cover the advanced methods of infiltration and exfiltration used by cyberspies, as well as the technologies, policies, and procedures that can reduce an organization’s risk of compromise.

CSI Webinar Series: Using Identity Data to add Context to Security Information Management

The sources of log and real time data have multiplied, and correlation of current with archived events has made fully integrated log management much more desirable. With these trends has come a need for more context than that offered by the logs themselves. By better integrating data, security professionals get more context about what is right, what is questionable and what is clearly wrong at any given time. Join us to to get the full picture.

Hacking 2010:  Understanding the New Wave of Cyberattacks

In the past year, we've seen more new and sophisticated cyberattacks -- spreading at a faster, more widespread rate – than the industry has ever seen before. The bad news? Hackers are getting better at their jobs every day. Attend "Hacking 2010: Understanding the New Wave of Cyberattacks," an all-day virtual event that combines the in-depth expertise of two of the industry's best-known security resources -- InformationWeek and Dark Reading – with insights from some of the industry's most respected security researchers and experts.

ID Management: More than a people problem

This webinar will delve into the need for agencies to manage the identity of not only computer users, but also the computer devices themselves to ensure hackers can't "spoof" a device to gain access to the network, and corrupt systems don't wreak havoc on networks.

Identity Monitoring in an Imperfect World

Despite the billions of dollars that enterprises have invested in identity and access management technologies, access control problems are getting worse, not better. As more companies turn to contractors and Cloud services, IT security departments face even greater difficulty deploying identity management technologies and role managers to control, revoke and apportion access rights. And yet the burning question still remains, can you ever perfectly monitor everyone in an imperfect world?

Attend this session and learn how leading enterprises are using identity monitoring solutions to:

• Mitigate security and compliance risks
• Provide a window into user activity that solves many of the risk and compliance challenges caused by imperfect access governance
• Effectively monitor what their key system administrators, contractors and other employees are doing with the access rights they’ve been given

Integrate Enterprise and Cloud Security for a 360-degree View of User Activity

Organizations of all sizes are looking at cloud services as a way to cut costs and increase efficiency. However, as parts of your IT infrastructure move off of your network, how will you monitor security in a hybrid environment? Monitoring users as they access internal applications and databases plus cloud services can reduce many security risks. Join ArcSight and Ping Identity to understand how leading organizations are securing their operations while cutting costs via the cloud.

Join this session and learn how to:
• Maintain enterprise access control while embracing cloud based apps
• Establish proper audit trails for compliance and regulatory requirements quickly and easily
• Implement plans that strengthen security, simplify user access, and are easily managed by IT

Preventing Fraud and Data Theft with SIEM Technologies - A Gartner Webcast

Discover how to control of your intellectual property and hear how Security Information and Event Management (SIEM) protects your assets and complies with government and industry mandates.

Protect Your Business with User Activity Monitoring

Join the ArcSight security experts as they discuss the internal security issues that arise from employees, contractors and third parties' ability to access confidential information within their organisations. Learn how ArcSight enables business efficiency by allowing both internal and out-of-house staff full access to the data they need to perform their jobs, while seamlessly maintaining security, as well as providing compliance posture for their organisation.

SC Magazine Webinar: The Better CSO

What does it take to be a strong CSO with a voice, budget, support and resources - especially as cyberthreats continue to evolve and corporate budgets still are tight? What training is necessary and what professional traits will go a long way? With whom should the CSO make alliances and what departments will be integral to making information security work for the entire organization? What does it mean to "get it right" as a successful CSO? We find out.

Secure the Business with a 360-Degree View of Users, Data, and Application Activities

See how event correlation, integrated with user and data monitoring, can help secure and control the enterprise network.

Security Operations: Getting Over the Waterfall

Agile software development methodologies have revolutionized software engineering. These same principles and tools can be adapted for building a flexible and dynamic security operations. Learn how to take wikis, scrums, and user stories and utilize them in incident responses, shift turnovers, and ArcSight use cases.

Security Operations for Sale

You believe that your organization would benefit from building its own SOC to help mitigate risk and monitor cybercrime, but your management doesn’t want to spend money on “foot apparel” (SOCs). This session will cover the key business requirements, show how to manage and structure the costs, and help you transform the ‘no’ into an executive “yes.”

SIEM & SAML- Secrets to Securing the Cloud

While CIOs and CISOs are weighing through a broad range of cloud services to cut costs and streamline operations, they all share one common concern: how to retain visibility over user activity when applications move to the cloud?

Join SIEM market share leader ArcSight’s Vice President of Product Marketing Rick Caccia and Internet Identity Security market leader Ping Identity’s CTO Patrick Harding in a free Webinar in which they will discuss best practices for better security and compliance in the cloud.

User Monitoring and Improved Medical Data Privacy for Clinical Applications

The growing incidence of medical data breaches and the ARRA HITECH Act of 2009 have raised the importance of monitoring healthcare provider infrastructure and clinical applications.

Find out how the ArcSight and FairWarning joint solution can enable 360 degree user monitoring and improve medical data privacy.

COMPLIANCE

Basel II | HIPAA | NERC | PCI | Red Flags | SOX

Basel II

Addressing Basel II Requirements with SIEM

Basel II compliance requirements may seem complex but banks can gain a competitive advantage by using a security information and event management solution to achieve the operational objectives. Covered institutions need to collect and maintain detailed audit records and logs. Join this webinar to find out how compliance automation solutions can take financial information technology sources to pinpoint errors and provide transparency to risk.

HIPAA

Five Compliance and Security Lessons You Can Learn from Recent HIPAA-Related Incidents

This presentation will discuss recent events in healthcare compliance and provide several easy steps for securing Electronic Protected Health Information (EPHI) to meet the latest enforcement of HIPAA and new regulations.

Has HIPAA gone HITECH?

The HITECH (Health Information Technology for Economic and Clinical Health) Act, a section of the American Recovery and Reinvestment Act, allocated tens of billions of dollars to develop and enhance secure electronic health records. What does this mean for investment in security technology and changes to the existing HIPAA Privacy and Security Rules? Join this webinar to learn about the new rules for information security management in healthcare, from managing logs and breach notification rules to penalties for non-compliance.

Solving Security and Privacy Concerns in Today’s Healthcare System

The increased occurrences of PHI breaches coupled with the reinforcement of HIPAA by the Federal Stimulus Package (ARRA / HITECH Act) have made security and privacy a top priority for healthcare providers across the nation. Register now and discover how Weill Cornell Medical College, a top-ranked clinical and medical research center in the country, successfully manages the closely linked goals of regulatory compliance, privacy, and security in the healthcare provider sector.

Tackle Security, Privacy, and Compliance in the Healthcare Payer Sector

The growing incidence of data breaches and regulatory oversight have made security and privacy a top priority for healthcare payers. Join this webinar to learn how Priority Health, a major healthcare payer, utilizes the ArcSight SIEM platform and effectively addresses regulatory compliance, privacy, and security challenges through comprehensive event and log monitoring. Register today and also find out how Priority Health streamlines regulatory audits and protects their organization against a variety of external and internal threats.

User Monitoring and Improved Medical Data Privacy for Clinical Applications

The growing incidence of medical data breaches and the ARRA HITECH Act of 2009 have raised the importance of monitoring healthcare provider infrastructure and clinical applications.

Find out how the ArcSight and FairWarning joint solution can enable 360 degree user monitoring and improve medical data privacy.

NERC

Automation for SOX and NERC compliance

Responsible entities face numerous regulatory requirements such as NERC CIP and the Sarbanes Oxley Act (SOX). Creating documentation and reporting on compliance is labor and capital intensive for each, which has led to centralized solutions with automation that can handle multiple regulations. Automation not only frees valuable resources to focus on core business, but also helps reduce the risk of human error. Attend this webinar to learn how to build an integrated approach for CIP and SOX compliance using Security Information and Event Management (SIEM) and log management products.

Cybersecurity Solutions for NERC CIP-002 to CIP-009

The Federal Energy Regulatory Commission (FERC) recently approved eight new mandatory critical infrastructure protection (CIP) cyber security standards developed by the North American Electric Reliability Council (NERC). Are you prepared?

Eight Steps to NERC CIP CyberSecurity Compliance

The NERC cybersecurity requirements for June 2009 and June 2010 are fast approaching. Do you have the necessary analysis and implementation plans to meet a demanding compliance schedule?

ArcSight has teamed with Coalfire Systems, a leading CIP compliance auditor, to provide an in-depth review of compliance requirements, deadlines and solutions to accelerate any NERC CIP compliance program. We will provide real-world examples from past projects to help guide your program to meet or exceed the intent of CIP-002-1 through CIP-009-1.

Has your NERC CIP program become a big gulp?

Maintaining compliance with the NERC CIP (Critical Infrastructure Protection) standards requires organizations to implement and validate strong security controls for cyber assets. Yet, interpreting the requirements, selecting the appropriate controls, and measuring their effectiveness remain a challenge for many utilities.

This session will address those challenges and provide a blueprint for effective NERC CIP compliance.

Powerful Cybersecurity Lessons: A cost-effective approach to NERC compliance

The cyber security of the North American electricity grid is under increased scrutiny by elected representatives as well as the public.

This presentation will review accelerated bulk power cyber security compliance steps, lessons learned, and how to meet or exceed regulator, legislature and even customer requirements without breaking the bank.

PCI

How McAfee Security Innovation Alliance program helps with PCI Data Security Standards

Log Management, Identities and PCI DSS 1.2

The PCI Security Standards Council has released a new version of the Data Security Standard. Are you ready? Have you anticipated these changes or will you need time to adjust? Join us and find out!

McAfee Security Innovation Alliance Program Helps with PCI DSS

PCI Compliance Made Easier: The Value of Security Information and Event Management

PCI Compliance Made Easy for Level 2 through 4 Merchants

See how level 2 through 4 merchants can: Reduce the cost of PCI compliance through automated monitoring, enable quick and easy forensic investigations into PCI violations, and extend to broader security and compliance initiatives.

SANS Webcast: Be a Perfect 10: Nail the PCI Requirement

SC Magazine PCI eConference & Expo

The PCI Race for Level 1 and Level 2 Merchants: A Sprint or a Marathon?

Red Flags

Are You Ready for the Red Flags Rule?

Government agencies including the FTC have issued a new rule to help detect, prevent and mitigate identity theft. Are you ready?

SOX

Addressing Multiple Regulations with a Broad Set of Compliance Controls

This presentation will show how an IT governance framework can be used to achieve and manage multiple compliance regulations efficiently with a consolidated view across an entire organization.

INDUSTRIES

Finance | Government | Healthcare | Retail | Utilities

Finance

Addressing Basel II Requirements with SIEM

Basel II compliance requirements may seem complex but banks can gain a competitive advantage by using a security information and event management solution to achieve the operational objectives. Covered institutions need to collect and maintain detailed audit records and logs. Join this webinar to find out how compliance automation solutions can take financial information technology sources to pinpoint errors and provide transparency to risk.

Are You Ready for the Red Flags Rule?

Government agencies including the FTC have issued a new rule to help detect, prevent and mitigate identity theft. Are you ready?

Breaking the Bank - Online Fraud Detection and Prevention

This webinar will explore fundamental fraud concepts relating to e-Commerce, including banking, online wealth management and healthcare. We will take an in-depth look at the most prevalent threats for the coming years as well as advanced detection mechanisms. This topic is relevant to not only e-Banking but any organization where transactions can take place through an online system. This includes both internal employees as well as the external customers accessing systems through web portals. During these tough economic times, it is more important than ever to protect the business.

Webinar: Detect Advanced Cybercrime In The Financial Sector

Professional cybercrime is no longer a scale game in which hackers sell large quantities of credit card data online for ever-diminishing prices. Instead, cybercrime is evolving significantly in both sophistication and variability, and the risks are greater than ever.

Join ArcSight experts as they present in this webinar, new developments in cybercrimes against financial services organizations, as well as counter-measures that can be used to detect and defeat these new techniques.

Government

An Effective Approach to Continuous Monitoring Requirements under FISMA

It is expected by the Fall of 2010 that government agencies will begin reporting on the security performance metrics. Among other things, the new metrics call for automated “real-time cybersecurity situational awareness” through a Security Information and Event Management (SIEM) solution. In fact, log sources that must be within scope are explicitly called out. These sources include IDS, IPS, AV, patch, vulnerability, and configuration management as well as system and application log data. The proposed metrics represent a landmark shift away from lagging security indicators and point-in-time audits to continuous monitoring and visibility.

Join this exclusive webinar to hear from ArcSight security industry experts and learn more about the:
* Proposed FISMA security metrics
* Challenges and obstacles to continuous monitoring
* Capabilities that SIEM solutions must offer to enable continuous visibility into cybersecurity threats
* And how this can affect your organization

Government Executive.com Webinar: Cyber Security: What’s Coming Next & How To Prepare

President Obama has put an unprecedented emphasis on cyber security in the White House, holding a press conference in May to discuss the problems agencies face in trying to protect their networks from constant attack.

Join us for a webinar that will provide listeners with insights about what your agencies can expect in the coming months from the administration and how you can prepare for what will certainly be a hot spotlight on protecting information.

Impact of Obama’s Cyberspace Policy Review on Government IT Operations

The Nation’s approach to cyber-security has failed to keep pace with developing threats. An effective SIEM/Log Management solution can address most of the guidelines laid out in the 2009 Cyberspace Policy Review. Join Government Security News and ArcSight to learn how are your peers achieving a “safe, secure and resilient digital environment”

Healthcare

Five Compliance and Security Lessons You Can Learn from Recent HIPAA-Related Incidents

This presentation will discuss recent events in healthcare compliance and provide several easy steps for securing Electronic Protected Health Information (EPHI) to meet the latest enforcement of HIPAA and new regulations.

Has HIPAA gone HITECH?

The HITECH (Health Information Technology for Economic and Clinical Health) Act, a section of the American Recovery and Reinvestment Act, allocated tens of billions of dollars to develop and enhance secure electronic health records. What does this mean for investment in security technology and changes to the existing HIPAA Privacy and Security Rules? Join this webinar to learn about the new rules for information security management in healthcare, from managing logs and breach notification rules to penalties for non-compliance.

Healthcare 2010: Healing Security, Privacy, Compliance and Fraud Pains

On-demand webinar
1 hour duration

The HITECH Act, medical fraud, and medical data breaches have made security and privacy a top priority in healthcare. View this on-demand webinar to learn how comprehensive monitoring can effectively tackle HIPAA audit requirements and detect internal and external threats to security or privacy in the healthcare sector. View this on-demand webinar and you will learn about:
• Security, Privacy, and Compliance Challenges in Healthcare
• Unique monitoring requirements of providers vs. payers
• Requirements for a comprehensive monitoring solution

Protecting Electronic Information - Challenges and Solutions for Today’s Healthcare Providers.

This presentation focused on striking a balance across efficiency, privacy and security. A methodological approach to application, data, identity and IT infrastructure monitoring will be explored in addition to several healthcare provider use case examples.

Solving Security and Privacy Concerns in Today’s Healthcare System

The increased occurrences of PHI breaches coupled with the reinforcement of HIPAA by the Federal Stimulus Package (ARRA / HITECH Act) have made security and privacy a top priority for healthcare providers across the nation. Register now and discover how Weill Cornell Medical College, a top-ranked clinical and medical research center in the country, successfully manages the closely linked goals of regulatory compliance, privacy, and security in the healthcare provider sector.

Tackle Security, Privacy, and Compliance in the Healthcare Payer Sector

The growing incidence of data breaches and regulatory oversight have made security and privacy a top priority for healthcare payers. Join this webinar to learn how Priority Health, a major healthcare payer, utilizes the ArcSight SIEM platform and effectively addresses regulatory compliance, privacy, and security challenges through comprehensive event and log monitoring. Register today and also find out how Priority Health streamlines regulatory audits and protects their organization against a variety of external and internal threats.

User Monitoring and Improved Medical Data Privacy for Clinical Applications

The growing incidence of medical data breaches and the ARRA HITECH Act of 2009 have raised the importance of monitoring healthcare provider infrastructure and clinical applications.

Find out how the ArcSight and FairWarning joint solution can enable 360 degree user monitoring and improve medical data privacy.

What Happens in Your Enterprise, Stays in Your Enterprise

Attend this SC Magazine webinar to learn how to convert digital fingerprints into a single pane of glass for:

* Combating cybercrime
* Demonstrating regulatory compliance
* Streamlining IT operations

Retail

How McAfee Security Innovation Alliance program helps with PCI Data Security Standards

Log Management, Identities and PCI DSS 1.2

The PCI Security Standards Council has released a new version of the Data Security Standard. Are you ready? Have you anticipated these changes or will you need time to adjust? Join us and find out!

McAfee Security Innovation Alliance Program Helps with PCI DSS

PCI Compliance Made Easier: The Value of Security Information and Event Management

PCI Compliance Made Easy for Level 2 through 4 Merchants

See how level 2 through 4 merchants can: Reduce the cost of PCI compliance through automated monitoring, enable quick and easy forensic investigations into PCI violations, and extend to broader security and compliance initiatives.

SANS Webcast: Be a Perfect 10: Nail the PCI Requirement

SC Magazine PCI eConference & Expo

The PCI Race for Level 1 and Level 2 Merchants: A Sprint or a Marathon?

Utilities

Automation for SOX and NERC compliance

Responsible entities face numerous regulatory requirements such as NERC CIP and the Sarbanes Oxley Act (SOX). Creating documentation and reporting on compliance is labor and capital intensive for each, which has led to centralized solutions with automation that can handle multiple regulations. Automation not only frees valuable resources to focus on core business, but also helps reduce the risk of human error. Attend this webinar to learn how to build an integrated approach for CIP and SOX compliance using Security Information and Event Management (SIEM) and log management products.

Cybersecurity Solutions for NERC CIP-002 to CIP-009

The Federal Energy Regulatory Commission (FERC) recently approved eight new mandatory critical infrastructure protection (CIP) cyber security standards developed by the North American Electric Reliability Council (NERC). Are you prepared?

Eight Steps to NERC CIP CyberSecurity Compliance

The NERC cybersecurity requirements for June 2009 and June 2010 are fast approaching. Do you have the necessary analysis and implementation plans to meet a demanding compliance schedule?

ArcSight has teamed with Coalfire Systems, a leading CIP compliance auditor, to provide an in-depth review of compliance requirements, deadlines and solutions to accelerate any NERC CIP compliance program. We will provide real-world examples from past projects to help guide your program to meet or exceed the intent of CIP-002-1 through CIP-009-1.

Has your NERC CIP program become a big gulp?

Maintaining compliance with the NERC CIP (Critical Infrastructure Protection) standards requires organizations to implement and validate strong security controls for cyber assets. Yet, interpreting the requirements, selecting the appropriate controls, and measuring their effectiveness remain a challenge for many utilities.

This session will address those challenges and provide a blueprint for effective NERC CIP compliance.

Powerful Cybersecurity Lessons: A cost-effective approach to NERC compliance

The cyber security of the North American electricity grid is under increased scrutiny by elected representatives as well as the public.

This presentation will review accelerated bulk power cyber security compliance steps, lessons learned, and how to meet or exceed regulator, legislature and even customer requirements without breaking the bank.

User Monitoring and Improved Medical Data Privacy for Clinical Applications

The growing incidence of medical data breaches and the ARRA HITECH Act of 2009 have raised the importance of monitoring healthcare provider infrastructure and clinical applications.

Find out how the ArcSight and FairWarning joint solution can enable 360 degree user monitoring and improve medical data privacy.