Demystifying Segmentation: Real-World Solutions for Network Security
Apr
18

Demystifying Segmentation: Real-World Solutions for Network Security

Join GRF and Zero Networks' Nicholas DiCola for a presentation on network segmentation.

The need for network segmentation has been punctuated by evolving regulatory and compliance requirements, and new zero trust guidance from the NSA and CISA. While network segmentation has historically been reserved for large and/or mature organizations due to complex and costly implementations, there are practical steps organizations of all sizes and maturity levels can take to secure their networks.

Join us for an actionable segmentation strategy session with real world examples of how organizations have effectively defended against ransomware and lateral movement, while satisfying compliance requirements.

This complimentary webinar is TLP: CLEAR

View Event →
BRC Overview, Activities, and Resilience & Security Updates
Apr
3

BRC Overview, Activities, and Resilience & Security Updates

Join the GRF Business Resilience Council (BRC) for an overview of the BRC, a discussion and call to action for upcoming activities and focus, and a presentation on the latest security, resilience and geopolitical threats.

This event is TLP: CLEAR

In addition to the above, we invite you to register for a free Payments Disruption Exercise examining the operational resilience of organizations when faced with a wiperware attack that disrupts payments processors.

View Event →
Semiannual Ransomware Report & Geopolitical Updates
Feb
28

Semiannual Ransomware Report & Geopolitical Updates

Join the GRF Business Resilience Council (BRC) for a briefing on the soon-to-be-released Semiannual Ransomware Report – GRF’s popular biannual report on ransomware gangs, successful sector attack statistics, and trend analysis pulled from open sources and closed criminal forums. Analysts will also provide geopolitical updates as time permits.

This event is TLP: CLEAR

View Event →
Stop VPNs from becoming Virtual “Public” Networks
Feb
20

Stop VPNs from becoming Virtual “Public” Networks

Join GRF and Zero Networks' Nicholas DiCola for a presentation on VPN security.

According to Top10VPN, in 2023 alone, 133 VPN vulnerabilities were disclosed and at least 20 are known to have been exploited – as evidenced by recent headlines involving Cisco, Ivanti, and others. The period from when these vulnerabilities are disclosed to the point they are patched (if at all), poses a major potential security risk for many organizations.

Join this webinar to:
• Better understand why VPNs are explicitly targeted.
• Consider several of the underlying flaws common to most VPNs.
• Discuss risk mitigation strategies and alternative solutions.

This complimentary webinar is TLP: CLEAR

View Event →
Business Impacts From Civil Unrest, Activism and Extremism Entering the 2024 US Presidential Election Cycle
Jan
24

Business Impacts From Civil Unrest, Activism and Extremism Entering the 2024 US Presidential Election Cycle

Join the BRC on January 24th at 2pm ET for a webinar on the potential for civil unrest, activism and extremism surrounding the 2024 US Presidential Election cycle. 

Foresight Chief Analyst Harris Stephenson will provide a forecast on civil unrest, activism and extremism, as well as potential business implications.  He'll cover how to monitor these threats and how to protect your organization and personnel. Stephenson will take questions at the end of his presentation.

In addition, BRC analysts will provide geopolitical analysis and present on an upcoming complimentary tabletop exercise examining operational resilience of business processes in the face of cyber disruption.

This webinar is TLP: CLEAR

View Event →
Operations Disruption Exercise Development Meeting
Dec
13

Operations Disruption Exercise Development Meeting

GRF Business Resilience Council members are invited to join this meeting to provide input in the development of a new exercise to test the operational resilience of sectors as they disburse and collect payments. This meeting will explore the impacts to businesses in the event that an attack were to disrupt the payment systems tools and processes.

Your input is vital to building an exercise that will ultimately help protect your organizations’ ability to maintain minimal viable service levels for accounts payable and accounts receivable systems during a major attack against the banking system.

Members will be emailed the link to participate, the link will also be published to your community portals.

Partners and interested non-members can contact Chris Denning for more information on participating: cdenning@grf.org

View Event →
The Evolution of Secure Connectivity
Dec
7

The Evolution of Secure Connectivity

Join GRF and Cyolo for a presentation on the evolution of secure connectivity. Learn effective strategies for managing access risks, including how and why to prioritize, and how to adapt to a changing digital landscape. During the webinar, we will cover three critical topics:

1. Understanding the behavior and tactics of hackers and malicious actors

2. Insights into the current state of corporate access security

3. Effective strategies to combat current and future threats

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
The Game of IT/OT Security: Unveiling New Developments in Our Critical Infrastructure Threat Landscape
Nov
16

The Game of IT/OT Security: Unveiling New Developments in Our Critical Infrastructure Threat Landscape

Senior Security Researcher Adam Robbie, from Palo Alto Networks, will share new highlights from research data collected from ten thousand organizations in fifty countries over the past three years. The data has illuminated some interesting findings that will be shared about ICS network intrusions, and how zero trust architecture can be an effective tool to stop many of these threats.

Register to Watch the Event

View Event →
Operations Disruption Exercise Development Meeting
Nov
15

Operations Disruption Exercise Development Meeting

GRF Business Resilience Council members are invited to join this meeting to provide input in the development of a new exercise to test the operational resilience of sectors as they disburse and collect payments. This meeting will explore the impacts to businesses in the event that an attack were to disrupt the payment systems tools and processes.

Your input is vital to building an exercise that will ultimately help protect your organizations’ ability to maintain minimal viable service levels for its accounts payable and accounts receivable systems during a major attack against the banking system.

Members will be emailed the link to participate, the link will also be published to your community portals.

Partners and interested non-members can contact Chris Denning for more information on participating: cdenning@grf.org

View Event →
Third-Party Risk Management: TPRA Guidebook & GRF Security Connection
Nov
9

Third-Party Risk Management: TPRA Guidebook & GRF Security Connection

Join Global Resilience Federation and the Third Party Risk Association (TPRA) for a complimentary joint webinar that outlines the new TPRA Guidebook covering phases of the TPRM lifecycle and practical tools and examples for implementation, and GRF’s Third-Party Security Connection, a place for company vendors to gather to engage industry and help with mitigation in the event of a security breach.

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
Leveraging AI to Defend Against Back to School Threats
Sep
12

Leveraging AI to Defend Against Back to School Threats

Join the K12 Security Information eXchange (K12 SIX) and Microsoft for the second in a series of informational webinars focused on cybersecurity preparations for the new school year.

Maintaining security across today’s vast digital ecosystem is a team effort. In this new era of AI, data insights and machine learning are helping school systems detect threats quickly and respond effectively. Yet we all know that the best defense still requires human wisdom and experience. In this webinar, join us as we discuss some of the latest cybersecurity guidance as well as innovations across security, compliance, identity, management, and privacy.

With Corey Lee, Microsoft Chief Zero Trust Architect, we’ll cover important topics like understanding the AI threat landscape, how Microsoft defends itself and customers using AI, and how schools can harness the future of AI and cybersecurity in Education.

This webinar is sponsored by Microsoft. Unless you elect to opt out, you will receive information, tips, and offers about Microsoft products and services. Privacy Statement: http://go.microsoft.com/fwlink/?LinkId=521839.

Register to Watch the Event

View Event →
2023 Ransomware Report Highlights
Aug
30

2023 Ransomware Report Highlights

Join GRF analysts for a review of the most recent GRF ransomware report, covering the first half of 2023. In this reporting period, analysts tracked 1,650 attacks based on public sources and conversations of threat actors in closed criminal forums.

Some findings that will be elaborated on in the session:

• Critical Manufacturing was the most targeted industry followed by Financial Services, IT, and Commercial Facilities

• June saw the most victims in a single month since the beginning of this series

• Most attacks were committed by LockBit ransomware

• The US experienced the majority of ransomware attacks, followed by the EU and UK

• This period saw extensive use of zero day vulnerabilities and increased use of Living off the Land attacks

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
2023 Hurricane Season Forecast
Aug
23

2023 Hurricane Season Forecast

GRF’s Business Resilience Council will host Ryan Truchelut Ph.D, President and Chief Meteorologist at Weather Tiger LLC, for an update on the 2023 hurricane season and an assessment of potential impacts to infrastructure and businesses.

The meeting will also feature a presentation and discussion on GRF’s Operational Resilience initiatives and tools including a maturity model and upcoming implementation exercise.

Relevant geopolitical, physical and cyber updates will be covered as time permits.

This meeting is TLP: Clear

Register to Watch the Event

View Event →
Timing is Everything: Senior Cybersecurity and AI Leaders Discuss Strategies for Staying Ahead of AI Risk
Aug
17

Timing is Everything: Senior Cybersecurity and AI Leaders Discuss Strategies for Staying Ahead of AI Risk

This session will provide a strategic view of the challenge of securing AI, from the perspective of cybersecurity & AI leaders across industries. Insights on the broadening and ever-changing AI threat landscape will be captured through questions posed to each of the panelists. The webinar will cover how organizations prepare for and respond to unpredictable AI disruptions that threaten business continuity and system security.

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
Leveraging AI to Uncover Hidden Cyber Risks at Your School
Aug
15

Leveraging AI to Uncover Hidden Cyber Risks at Your School

Join the K12 Security Information eXchange (K12 SIX) and Microsoft for an informational webinar focused on cybersecurity preparations for the new school year.

K-12 school systems face increased challenges in maintaining safe & operational IT environments during the back-to-school season. As a result of evolving cyber-threats and ransomware attacks, schools disproportionately experience disruptions to school operations during this time frame, leading to significant financial losses and sensitive data exposure. Given that cybercriminals often exploit school vulnerabilities using stealthy techniques that are difficult to detect and correlate with limited staff, legacy security tools and siloed solutions may exacerbate problems, resulting in limited visibility and delayed response times.

Join K12 SIX Director Doug Levin and Corey Lee, Microsoft Chief Zero Trust Architect for the first in a series of two webinars to prepare for back-to-school and learn how to:

Enhance back-to-school cyber readiness

Leverage AI insights to uncover common cyber risks

Explore easy-button automations for responding quickly to cyber threats

This webinar is sponsored by Microsoft. Unless you elect to opt out, you will receive information, tips, and offers about Microsoft products and services. Privacy Statement: http://go.microsoft.com/fwlink/?LinkId=521839.

Register to Watch the Event

View Event →
Wagner Group’s Rebellion
Jun
28

Wagner Group’s Rebellion

Join GRF’s Business Resilience Council (BRC) for a complimentary briefing on Wagner Group’s weekend assault into Russia.

The briefing will feature RANE Network's Lead Analyst for Eurasia, Matthew Orr, who will speak to what happened, the parties involved, and motivating factors. Orr will also address expected impacts on the war in Ukraine and further geopolitical and business shifts.

Afterwards, GRF Cybersecurity Analyst Richie Acuna will present updates on MOVEit exploits and recent malicious, pro-Russia cyber actions by REvil, Killnet, and Anonymous Sudan.

Watch the Event

View Event →
Manufacturing at Risk: The Growing Threat of Ransomware
Jun
28

Manufacturing at Risk: The Growing Threat of Ransomware

Leaders from Manufacturing ISAC, Drago’s and OT-CERT will discuss the landscape of ransomware targeting manufacturing, cybersecurity maturity in the manufacturing supply chain, and dive into victimology, trends and insights for the sector.

Panelists will discuss available education, training and self-assessments, as well as collective defense opportunities.

There will be time for Q&A at the end of the call.

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
The AI Security Balancing Act: Determining the Sweet Spot Between ROI and Risk
Jun
22

The AI Security Balancing Act: Determining the Sweet Spot Between ROI and Risk

The webinar will showcase the current challenges and opportunities for practitioners in securing Artificial Intelligence in their organizations. Representatives from across major industries will discuss the five critical areas their AI working group has covered, from defining what AI security means for organizations, to tactical areas of risk & compliance, policy & governance, AI Bill of Materials, and trust & ethics. The group will identify collective better practices, as well as novel approaches to better address AI security governance.

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
Geopolitical Conflict in Asia - Testing Resilience Amidst Supply Chain Disruption
Jun
15

Geopolitical Conflict in Asia - Testing Resilience Amidst Supply Chain Disruption

The GRF Business Resilience Council is proud to announce it will deliver the first in a series of virtual tabletop exercises with Promontory, a business unit of IBM Consulting. The exercise will address supply chain security and business continuity.

As events in Ukraine have demonstrated, regional conflicts can have global impact. If an incident, or full-scale conflict can change the way we do business, we need to be prepared. The initial exercise will focus on geopolitical risk arising in Asia that could create widespread supply chain impacts across many sectors.

The exercise scenario will help an organization evaluate its ability to respond to hypothetical disruptions using real-world injects borrowed from past crises and projected injects from plausible threats to come. The exercise will help organizations enhance resilience, crisis management response, roles, and responsibilities.

Contact Chris Denning with questions at cdenning@grf.org.

Register to Participate

View Event →
2023 Atlantic Hurricane Season Forecast & Implications for Business, Critical Infrastructure
Jun
7

2023 Atlantic Hurricane Season Forecast & Implications for Business, Critical Infrastructure

The GRF Business Resilience Council (BRC) invites you to join a briefing with Early Alert Chief Meteorologist Brian Urbancic. Brian will provide an update on the forecast for the 2023 Atlantic hurricane season, as well as analysis on its potential impacts for businesses and critical infrastructure.

Following Brian’s presentation, the meeting will continue with a discussion of recent and relevant physical, cyber and geopolitical topics which impact businesses and resilience.

This event is TLP: CLEAR

Register to Watch the Event

View Event →
The Emergence of AI: New Opportunities and New Threats
May
3

The Emergence of AI: New Opportunities and New Threats

Join Jonathan Dambrot, CEO of Cranium, Andrew Moyad, CEO of Shared Assessments, and Mark Orsi, CEO of Global Resilience Federation (GRF) for a complimentary webinar on the threats and opportunities that come with increasing access to AI.

AI is emerging at every level of business use and, increasingly, among consumers. This rise brings its own set of challenges. As we’ve seen with other technology shifts, security and trust are often overlooked in early stages, making it harder, less efficient, and more expensive to add in later. With significant operational and security challenges that must be addressed, let’s examine the latest AI pipelines and what businesses (and individual users) should be aware of as they incorporate these tools.

GRF Business Resilience Council analysts will also provide a geopolitical security update following the presentation on AI.

This webinar is TLP: CLEAR

Register to Watch the Event

View Event →
SVB Collapse – Update on Impacts to Business & What Government is Doing
Mar
29

SVB Collapse – Update on Impacts to Business & What Government is Doing

The GRF Business Resilience Council (BRC) invites you to join a briefing with Bill Nelson, Chair of GRF and Philip Aquilino, Partner, Risk Consulting Practice at PwC.

Philip has decades of experience in financial services regulation, strategy and risk consulting, government, and banking with emphasis on agile and innovative solutions. His experience prior to PwC includes 15 years in senior roles at the Federal Reserve Banks of New York and San Francisco, and the Board of Governors, serving as a partner at leading consulting firms like BCG and KPMG, and as a member of the senior executive team at TD Bank where he was the EVP in charge of government and regulatory affairs and a member of the Management Committee.

In addition to the banking situation, the meeting will provide updates on developments surrounding the war in Ukraine, including Vladimir Putin announcing his intent to move “tactical nuclear weapons” into Belarus.

Also covered will be recent significant cyber, physical and geopolitical events with potential to impact business resilience.

This event is TLP: CLEAR

Register to Watch the Event

View Event →
SVB Collapse – Impacts on Business & What Government is Doing
Mar
14

SVB Collapse – Impacts on Business & What Government is Doing

The GRF Business Resilience Council (BRC) invites you to join a special roundtable meeting on the multi-sector business implications of the rapid collapse of SVB and Signature Bank.

The meeting will feature panelists from the financial services sector including a former official from the Federal Reserve Board of Governors Bank Operations Division and former payment systems executives.

They will provide background on the impact of the collapse of SVB and Signature Bank, and what the regulatory authorities are doing to minimize the impact to other sectors.

Panelists will take questions from participants. You are encouraged to circulate this announcement within your organization and with industry partners.

This event is TLP: CLEAR

Register to Watch the Event

View Event →
 FBI Office of Private Sector & Threat Updates
Feb
22

FBI Office of Private Sector & Threat Updates

The GRF Business Resilience Council (BRC) invites you to join a briefing with Mark Wells, from the FBI Office of Private Sector.

Mark will discuss the FBI’s programs to work with the private sector under the authority of PPD 21 on Critical Infrastructure Security and provide an overview of the threat landscape in various sectors including Energy, Finance, Critical Manufacturing and the Defense Industrial Base.

The meeting will also provide updates on the train derailment and chemical spill near the Ohio & Pennsylvania border, the recently announced sanctions impacting Chinese and United States aviation, as well as a cybersecurity update.

We will also officially announce the upcoming Summit on AI Security & Trust in June 2023, report on our recent table top exercise testing supply chain resilience and security, and discuss progress on the development of Operational Resilience Framework (ORF) maturity models.

This event is TLP: CLEAR

Register to Watch the Event

View Event →
Cybersecurity and Risk of Breach Across Critical Infrastructure
Jan
25

Cybersecurity and Risk of Breach Across Critical Infrastructure

Sachin is a frequent writer on cybersecurity and has been featured in the Wall Street Journal, Bloomberg Law, Law360 and other publications. He will brief attendees on findings from a research paper released last week at the World Economic Forum titled “Addressing the Trust Deficit in Critical Infrastructure.” The report includes sector cybersecurity and resilience ratings.

The webinar will also include community announcements as well as physical and geopolitical updates.

*This event is TLP WHITE

Register to Watch the Event

View Event →
North Carolina Electric Infrastructure Shootings & Implications for the Financial Sector & Other Businesses
Dec
15

North Carolina Electric Infrastructure Shootings & Implications for the Financial Sector & Other Businesses

The GRF Business Resilience Council invites you to join a briefing with Glen Kessler, CSIRA Security Director at Wells Fargo. Glen will provide historical insight into the recent shootings of electric infrastructure in North Carolina and other locations. His presentation will include details of that attack and other similar acts, as well as vulnerabilities and implications for the financial sector and other businesses and sectors.

The call will also provide a high level cybersecurity and geopolitical update as time permits.

*This call is TLP WHITE

Register to Watch the Event

View Event →
Accidental Resiliency & Other Updates
Nov
17

Accidental Resiliency & Other Updates

The GRF Business Resilience Council invites you to join a briefing with Art Ocain, VP of Cybersecurity & Incident Response at Airiam. Art will speak on the topic of “accidental resiliency” and how businesses of all sizes have evolved out of necessity. Art will discuss how companies which have faced threats have often aligned themselves with cyber resilience frameworks, used cyber resilience techniques and addressed cyber resilience design objectives without knowing frameworks even existed.  Handling cyber incident after cyber incident, learning to reactively follow good incident response processes, it is natural for defenders to want to shift the process “left of boom” and develop more proactive cyber resilience.

The call will also feature a discussion by GRF analysts on geopolitical and cyber threats relevant to business resilience, and an upcoming exercise with IBM Promontory on supply chain threats.

*This call is TLP WHITE

Register to Watch the Event

View Event →