RSA Conference Courses

Bon Appetit - Establishing an Effective Cyber Risk Appetite

Explore foundational principles and emerging practices for developing an effective cyber risk appetite, including guidance on compliance thresholds, KPIs, KRIs, and KCIs for enhanced information security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Mapping the Ransomware Payment Ecosystem and Opportunities for Friction

Comprehensive analysis of ransomware payment ecosystem, exploring collective actions to disrupt operations. Examines information sharing, friction points, and community roles in making ransomware less profitable.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

I Shot a Deceptive Arrow into the Air - A Mock Hearing

Explore legal implications of deceptive cybersecurity techniques through a mock hearing, examining the concept of digital artifacts as attractive nuisances and their potential consequences.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Unveiling The Truth - A Case Study on Zero Trust for Consumers

Explore real-world challenges and lessons in applying Zero Trust to consumer identities, balancing user experience with fraud prevention and detection of malicious actors.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Making oRAT Go Further

Comprehensive analysis of macOS malware oRAT using unconventional methods, revealing its full functionality through custom command and control server interactions.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

REvil - Riches to Rags – The Rise and Takedown of a Cybercrime Empire

Explore the rise and fall of REvil, a notorious ransomware group, through years of research. Learn about cybercriminal empire building, takedown processes, and the impact of public/private partnerships in combating ransomware.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

How to Design and Execute Superior Employee Privacy Practices

Learn best practices for implementing employee privacy rules, understand new regulations, and gain insights into employee privacy expectations to achieve compliance and foster trust.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

Crypto FinTech Systems - Can the Ultimate Trust Machine Be Trusted?

Explore blockchain's security and trustworthiness in Crypto FinTech systems, analyzing technology and social context to inform business and cybersecurity decisions.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Reconsidering Ragnarok - The Cyber Threat Terrain After the Ukraine Invasion

Experts analyze the unexpected absence of cyber Armageddon following Ukraine's invasion, discussing observations, reasons, and future implications for global cybersecurity landscape.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Web3 - Paving a Path to Identity First

Explore how Web3's shift to decentralized systems impacts identity and access management, paving the way for enhanced online security and user experience.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

When Everything Is Critical, Nothing Is - ISA and Mitigation Prioritization

Learn Infrastructure Susceptibility Analysis (ISA) to prioritize cyber vulnerabilities and focus mitigation efforts on critical weaknesses most likely to be exploited, enhancing organizational security.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Destroying Long-Lived Cloud Credentials with Workload Identity Federation

Explore Workload Identity Federation to replace long-lived cloud credentials with short-lived tokens, enhancing security against cloud breaches and improving authentication workflows for external identity providers.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Telling Fairy Tales to the Board - Turn Attack Graphs into Business Stories

Learn to transform complex security issues into compelling narratives for effective board communication. Discover techniques to convert technical attack paths into actionable stories that drive decision-making.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

How to Benefit from Internal Audit

Learn techniques for effective internal audits in cybersecurity, including risk management, control assessment, and reporting cyber maturity. Explore industry standards like CIS Controls and FAIR to enhance your audit practices.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Hybrid Active Directory Attacks - Anatomy and Defenses

Explore Active Directory vulnerabilities and defense strategies for both on-premises and Azure environments. Learn to identify and mitigate common attack vectors to enhance organizational security.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk