Drataverse

Submit your presentation and discuss the summit.

17 Topics

Y
yoavcohenNew Participant
shared in Call for Submissions

How Gong Broke the Tradeoff Between Security and ProductivityNew

Managing access to data can take a huge toll on both admins and users. Inadequate security controls lead to increased risk, reduced productivity and challenges to meet compliance requirements. With the advent of Data Security Platforms, can the tradeoff between security and productivity be broken?Presenter: Yoav Cohen, Co-Founder and CTO of Satori, who helps organizations manage access to their data. LinkedIn: https://www.linkedin.com/in/yoav-cohen-7a4ba23/Takeaways: The challenges of managing access to data in the modern data stack What is a Data Security Platform and how can they help? Gong.io and Satori case-study 

1
D
2 months ago
Elliot at Drata
Elliot at DrataDrata Creative Lead
shared in Call for Submissions

Our call for submissions is officially closed for 2023

The 2023 Drataverse call for submissions are officially closed. We greatly appreciate the effort, quality of submissions, and interest from each and everyone of you. Between Secured and emails, we received more than 30 submissions in the past two weeks. While we may not be able to include everyone this year, we are identifying some spots to hopefully include people on panels.Over the next two weeks we will firm up our program and begin reaching out to confirm if a submission has been accepted. If not, we’ll be extending complimentary passes so that you can still join this year’s experience.

0
Elliot at Drata
2 months ago
Y
yishaibeeriNew Participant
shared in Call for Submissions

Increased Compliance and Happier Devs? Achieve Both by Rethinking Code ReviewsNew

Increased Compliance and Happier Devs? Achieve Both by Rethinking Code ReviewsSpeaker: Yishai Beeri[1], CTO, LinearB[2]The days are gone when the simplistic 4-eyes rule of “all new code must be reviewed” is sufficient for your SDLC. This one-process-fits-all approach results in blocked, unhappy devs, increased toil and mediocre or irrelevant code reviews.This presentation will show how modern dev and compliance teams apply adaptive, context aware review processes to increase compliance while improving developer experience and reducing code review toil. This new “CM” (continuous merge) mode completes the CM/CI/CD loop to drive velocity while enabling continuous compliance.Key Takeaways:How to use automation to improve code review process and quality, reduce toil and make devs happy. Actionable examples you can start deploying today Leveraging automation for evidence collection and auditing  What measures and controls are required to remain compliant when applying a differential review p

0
Y
2 months ago
W
WiasNew Participant
shared in Call for Submissions

Is at-rest encryption just security theater?New

Topic name: Is at-rest encryption just security theater?Target audience for presentation: Geared towards information security and compliance practitioners and officersSummary of the presentation: In this presentation, we will explore the limitations of at-rest encryption.We will discuss how at-rest encryption is often used as a mere checkbox to meet compliance requirements, and provide evidence that it provides minimal security benefits, if any. We will then introduce application layer encryption as a better solution for achieving compliance and enhancing security. We will discuss the benefits of application layer encryption over traditional at-rest encryption and provide best practices for implementing and managing application layer encryption in your organization.Presentation outline:Introduction to the limitations of at-rest encryption and why it’s pure “security theater” Benefits of application layer encryption over at-rest encryption Best practices for implementing and managing ap

0
W
2 months ago
S
Stanley at RabbitSignNew Participant
shared in Call for Submissions

How compliance helped a startup open doors (and get featured in an AWS case study)New

Title: How compliance helped a startup open doors (and get featured in an AWS case study) Themes/TopicsAs a startup founded by a high schooler, RabbitSign went from resisting compliance programs to embracing them. This presentation will cover Why compliance can be a startup’s best tool to gain credibility. How a large part of compliance can be accelerated using the right tools. How automation is making compliance more accessible to startups. How achieving HIPAA compliance contributes to RabbitSign’s social mission of bringing free e-signing to everyone and helping lower America’s healthcare costs. How ongoing work on SOC 2, ISO 27001, and 21 CFR Part 11 will further RabbitSign’s social mission.  How compliance helped RabbitSign earn high remarks in an AWS Well-Architected Review and get featured in an AWS case study. PresenterStanley ZhongFounder & CEO of RabbitSign, Inc. 3 takeawaysInstead of being viewed as an overhead, compliance can help startups gain credibility and open up ne

0
S
2 months ago
K
Kyle ShillingstadNew Participant
shared in Call for Submissions

Accelerate Contracting: How Drata helps Telemetrix expedite compliance reviewsNew

This will cover how we use Drata to manage compliance for our organization. We will discuss our previous strategy for handling security reviews and how Drata streamlined our operations. We will also discuss how we use Drata to manage/monitor employee/device/cloud compliance today.  Kyle Shillingstad, CIO, Telemetrix and Nancy Beale PhD RN-BC Chief Nurse Executive/Chief Clinical Informatics Officer Takeaways Security reviews were time consuming and inefficient prior to adoption of Drata, contracting took longer due to this.  Maintaining employee compliance standards was difficult without Drata. We would not have been able to onboard employees efficiently as we grew without Drata. Tracking our vendors and resources (both on prem and in the cloud) was difficult. Having automated alerts from Drata keeps our teams to focused on new build/feature development.  Additionally, we signed with Drata when prior to starting reviews/audits for any compliance frameworks. Drata was critical to help

0
K
2 months ago
B
barradvisoryNew Participant
shared in Call for Submissions

Top 6 Cybersecurity KPIs: How to Measure and Improve Your Security ProgramNew

Presentation Description: How can you tell if your cybersecurity program is effective? While audits give you a deep dive over your program at a point in time, cybersecurity needs to be continuously measured. Think of audits like an annual doctor’s exam: you might get your annual exam and all of your vitals look good, but if a few days later you broke your leg falling down the stairs, you wouldn’t wait until your next annual exam to get an X-ray and cast. Unfortunately, this is how we treat our cybersecurity programs! That’s where cybersecurity scorecards and key performance indicators (KPIs) come into play. This presentation will explain how organizations can set up and use cybersecurity scorecards: an evaluation tool with a collection of metrics that can be used to measure the overall effectiveness of a cybersecurity program from a high level. The presentation will explore six critical cybersecurity KPIs that all organizations should measure, as well as step-by-step instructions on ho

0
B
2 months ago
R
rhlavkaNew Participant
shared in Call for Submissions

A Developer’s Perspective on filling the Compliance GapsNew

Abstract: It’s rare that a developer understands the intricacies of compliance. Drata solves this big problem for developers by surveying the application and infrastructure in the context of SOC2, ISO27001, PCI, GDPR, or some other framework. When all controls have been met, things are great, but when Drata uncovers the blindspots in your app and exposes gaps in compliance, it can take considerable work and developer time to address the findings. This is especially true when your development team is short-staffed and there is the never-ending pressure to release new features. It’s painful addressing findings. This is where the new concept of SPaaS can help. SPaaS stands for Security Platform as a Service, and is similar in nature to other PaaS offerings coming from companies such as AWS for infra, Twilio for communications, and Stripe for billing. When you’re a developer and you need secure authentication, proper key and secrets management/rotation, granular access controls, and other

0
R
2 months ago
L
LielaniRNew Participant
shared in Call for Submissions

Accelerating Compliance in the Cloud with DevOps and Compliance Automation PlatformsNew

For Panel DiscussionPanel Participants:  Venkat Thiruvengadam, CEO and Founder DuploCloud                                      Theja Birur, CTO and Founder, 4L Data Intelligence                                      Anna Kropf, AWS Partner Strategist  Abstract:  Achieving compliance can be a long painful ordeal especially when you’re a small startup with already limited resources.  But is there a better way to ensure that your business is compliant to even the strictest regulatory requirements without spending a fortune?  How does automation work to speed up the process? Takeaways:  In this panel discussion, you will learn how a DevOps automation platform like DuploCloud and a Compliance automation platform like Drata work together to ensure that your business achieves continuous compliance. Get a better understanding of the whole DevOps automation process and compliance integration. Hear straight from a customer and learn the benefits of cloud automation for your business to set yo

0
L
2 months ago
R
riskpunditNew Participant
shared in Call for Submissions

Why bother with cyber risk quantification?New

My title at Monaco Risk Analytics: Chief Client Officer.Cyber Risk Quantification is still a young field with no “standard” model. Traditional decision support tools using tables, matrices, decision trees, attack trees, or bowtie diagrams do not adequately capture cybersecurity’s complexity of controls, threats, and attack paths.An approach specifically for Control Optimization is needed that:Helps security teams prioritize control investments Helps CISOs collaborate with business leaders to justify cyber budgets by connecting control efficacy to risk reduction expressed in dollars Resolves tension between compliance requirements and security needs Enhances collaboration between security teams that select controls and the IT teams that implement them.

0
R
2 months ago
N
noodledennisNew Participant
shared in Call for Submissions

Presentation - ISO 27001: Putting Threat Intelligence Into ActionNew

With the new ISO rules, this is a great opportunity to discuss how to build a threat intel program. Title: ISO 27001: Putting Threat Intelligence Into ActionPresenter: Neal Dennis, Ex-NSA, current Threat Intelligence AnalystIn today's fast-evolving threat landscape, building a robust threat intelligence strategy is crucial for organizations to mitigate the risk of cyberattacks and data breaches. In this session, I'll discuss developing a comprehensive threat intelligence program that aligns with the new ISO 27001:2022 standard. We will also examine the benefits of using threat intelligence to enhance an organization's security posture, including detecting, preventing, and responding to cyber threats.Key takeaways:Understanding the ISO 27001:2022 standard and how it relates to threat intelligence: We will explore the key changes in the latest version of the ISO 27001 standard and how threat intelligence can help organizations comply with these requirements. Building a threat intelligenc

1
Elliot at Drata
2 months ago
A
alexaovenshire
shared in Call for Submissions

Panel - Compliance Uncomplicated LiveNew

So excited for Drataverse! Here’s my idea for a fun, informative live panel below. Title: Compliance Uncomplicated LiveType: Live PanelDescription: Drata’s podcast, Compliance Uncomplicated, is focused on how companies and other brands are building trust with customers, scaling their business, and building a culture of security through compliance. I’m proposing we host an episode of Compliance Uncomplicated LIVE where audience members can interact and ask questions during the live session.  By attending this live panel you’ll:Hear firsthand from peers on how they’re using compliance to accelerate business goals Come away with a greater understanding of how compliance can be a business driver for your organization  Get tips on how other companies are cementing a security-first company culture and how your organization can do the same

1
Elliot at Drata
2 months ago
Elliot at Drata
Elliot at DrataDrata Creative Lead
shared in Call for Submissions

Workshop - Compliance & MocktailsNew

I’ll get this idea machine started with a real session I’d like to gauge interest on and feel it would make great use of our venue (more details on that soon). Title: Compliance & MocktailsType: WorkshopDescription: To build a strong foundation and culture of security for startups, it takes quite a few ingredients. It’s not just the number of ingredients, but a balance of flavor (amount/prioritization), how they are added, and when they are introduced. With this in mind, I’m proposing a hands on workshop that offers one part mixology and one part @Troy_Fine compliance 101. By attending this workshop you’ll:Come away with a greater understanding of the role compliance plays for fast growing startups A hands-on learning experience mapping beverage ingredients to your risk and compliance strategy Drata-flavored compliance mocktail (depending on hour) 

4
Troy_Fine
3 months ago
Elliot at Drata
Elliot at DrataDrata Creative Lead
shared in Call for Submissions

Submission Example: 2023 Compliance TrendsNew

This is an example submission, please do not vote for it. Use this as a reference when crafting your idea for presentations or panels. Presentation Title: 5 Compliance Trends to Look Out For in 2023 and BeyondPresenter: Troy Fine, Compliance Expert, DrataBrief Description: There’s a mind shift on the horizon, and the way organizations implement risk and compliance programs will significantly change for the better. Currently, manual or point-in-time compliance is perceived as a box to check and occasionally a burden. This is not surprising as companies spend an average of 4,300 hours annually achieving or maintaining compliance, and their perception is based upon their outcomes.Fortunately, in the past few years, compliance programs have seen great strides in scalability, better alignment with cybersecurity concepts, trust-building capabilities, and enabling sales teams. The rise of continuous compliance leads this shift. Takeaways: Gain a deeper understanding of the latest trends and p

0
Elliot at Drata
3 months ago
Elliot at Drata
Elliot at DrataDrata Creative Lead
shared in Call for Submissions

Drataverse Call For Speakers DetailsNew

Greetings, and thank you for your interest in speaking or presenting at Drataverse in June! Bringing the risk and compliance community together one of the most important aspects of the summit, and we are thrilled you are interested in sharing your expertise.We’ll create the experience, you bring the knowledge!To get things started, there are a few things we’d like to bring to your attention prior to submitting your idea. About DrataverseOn Thursday, June 22, 2023, Drata will hold a one-day conference in San Francisco to discuss the current and future state of risk, compliance, and cybersecurity. The goal is to bring our community together, share expertise and experiences, and develop a program that can’t be experienced anywhere else. This Year’s Theme: AccelerateThis year’s summit theme is Accelerate. All sessions will revolve around continuous compliance’s impact on accelerating trust, risk management, compliance, business goals, and revenue. If you have stories, experiences, use case

2570
Elliot at Drata
3 months ago
Elliot at Drata
Elliot at DrataDrata Creative Lead
shared in Call for Submissions

Guidance on Submitting a PresentationNew

On Thursday, June 22, 2023, Drata will hold a one-day conference in San Francisco to discuss the current and future state of risk, compliance, and cybersecurity. The goal is to bring our community together, share expertise and experiences, and develop a program that can’t be experienced anywhere else.Please read our guide before you submit a presentation idea. This Year’s Theme: AccelerateThis year’s summit theme is Accelerate. All sessions will revolve around continuous compliance’s impact on accelerating trust, risk management, compliance, business goals, and revenue. If you have stories, experiences, use cases, or other creative ideas, we’ll have a room full of attendees ready to absorb your information. Presentation ScopePresentations will consist of 1-2 experts who will delve into a specific topic. Sessions will last a maximum of 50 minutes and loosely follow this format: Introductions and expert background [5 minutes max] Presentation [40 minutes max] Optional Q&A from at

1540
Elliot at Drata
3 months ago
Elliot at Drata
Elliot at DrataDrata Creative Lead
shared in Call for Submissions

Guidance for Submitting a Panel

On Thursday, June 22, 2023, Drata will hold a one-day conference in San Francisco to discuss the current and future state of risk, compliance, and cybersecurity. The goal is to bring our community together, share expertise and experiences, and develop a program that can’t be experienced anywhere else.Please read our guide before you submit a presentation idea. This Year’s Theme: AccelerateThis year’s summit theme is Accelerate. All sessions will revolve around continuous compliance’s impact on accelerating trust, risk management, compliance, business goals, and revenue. If you have stories, experiences, use cases, or other creative ideas, we’ll have a room full of attendees ready to absorb your information. Panel ScopePanels will consist of 3-4 experts and a moderator. Drata can supply a moderator who will MC the panel, ask questions, and optionally open up questions to the room. Panels will last a maximum of 40 minutes and loosely follow this format: Introductions and expert backgroun

530
Elliot at Drata
3 months ago

Badge winners

  • Convo Starter
    Jamiehas earned the badge Convo Starter
  • Convo Starter
    LWWhas earned the badge Convo Starter
  • Innovator
    LWWhas earned the badge Innovator
  • Responder
    LWWhas earned the badge Responder
  • Responder
    NicoleHerehas earned the badge Responder
Show all badges
Terms & ConditionsCookie settings