ISACA November Dinner Meeting

Dinner Meeting Topic:

OWASP API Security Top 10

OWASP Top 10 project has for a long time been the standard list of top vulnerabilities to look for and mitigate in the world of web applications. APIs represent a significantly different set of threats, attack vectors, and security best practices. This caused the OWASP community to launch OWASP API Security project earlier this year.

This presentation will discuss:

• Facilitating a culture that views cybersecurity as a business issue
• Assessing the effectiveness of your cybersecurity program
• Proving that cybersecurity is more than defending against attacks – but also impacts businesses positively from the top-down by aligning security strategies with business opportunities and goals

Pre-Meeting Topic:

Risk and Controls

Understanding risk and controls are key to effective decision making. This session will cover at a high level the relationship between objectives, risks and controls. Attendees will hear about a structured approach to risk assessments, and will gain an understanding of the different types of controls that can be implemented to mitigate identified risks. Also, attendees will learn to implement and evaluate an internal control program by examining roles and responsibilities and practicing how to conduct risk assessments.