Loading Events

  Presents

Tactics for Web App Security Using Zero Trust Architecture

In partnership with

January 26, 2023, 1:30-2:30 PM ET 

1 CPE Credit Available for this Event*** 

Panel: A Tactical Approach to Zero Trust Architecture for Web Application Security in Government

Zero trust architecture at its core increases cyber defenses and reduces threats to data exposure, which is more critical than ever as web applications remain a top attack vector for gaining access to sensitive systems and information; attacks on web apps increased from 31.5% in 2020 to 53.6% in 2021, according to Kapersky.

Fortunately, new guidance from the Department of Defense (DoD) presents seven pillars that are critical to ZTA success – of which web application security (AppSec) and data protections are fundamental. Rethinking the implementation of security access requires a dynamic, multi-pronged approach, especially as more agencies make the migration to cloud services to accelerate software development and technology acquisition. As agencies fine-tune their strategies for implementing ZTA, there are fundamental steps they should take to ensure that they’re improving risk posture as effectively as possible, especially when designing strategies to protect web applications and data.

Join this webinar for tactical guidance that includes:

  • Which pillars are most critical to focus on for AppSec, especially when integrating and automating vulnerability management across the software development lifecycle.
  • Steps agencies can take to create an action plan following the DoD’s ZTA guidance, as well as guidance from the Cybersecurity & Infrastructure Security Agency (CISA).
  • How modern AppSec tools can assist with providing greater visibility into an agency’s overall risk posture, including analytics that provide deeper guidance.
  • Why automation is vital for vulnerability validation, and how modern AppSec tools can help with orchestration for smoother workflows and processes.
Grant Dasher

Grant Dasher

Identity and Access Management Expert, Cybersecurity and Infrastructure Security Agency

Martin Stanley

Martin Stanley

Strategic Technology Branch Chief, Office of the Chief Technology Officer, Cybersecurity and Infrastructure Security Agency

Beau Houser

Beau Houser

Chief Information Security Officer, Office of the Chief Information Officer, U.S Census Bureau

Ted Rutsch

Ted Rutsch

Head of Public Sector, Invicti

Moderator: Kiersten Patton

Moderator: Kiersten Patton

Consultant, ATARC

Watch On-Demand:

Zoom for Government enables ATARC remote collaboration opportunities through its cloud platform for video and audio conferencing, chats and webinars across all devices. Allowing for individuals from all areas of government, industry and academia to communicate directly. 

*** ATARC is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.nasbaregistry.org. Program Level: Overview, no prerequisites required. Advance preparation: none. Delivery Method: Group Internet Based. Field of Study: Information Technology. Registration #140762. In accordance with the standards of the National Registry of CPE Sponsors, CPE credits have been granted based on a 50-minute hour. Refund, cancellation and complaint resolution policy.