The Importance of Testing your Response with Real-World Scenarios to Uncover and Close the Gaps in your Security Posture

Plans Are Great—Until Reality Hits

Mature organizations recognize that no single approach can provide all of the answers or uncover all of your gaps to validate security controls, plans and processes. Strategic security reviews such as tabletop exercises, security assessments and incident response planning are incredibly effective at setting a baseline of security health and mitigation. By adding practical hands-on testing methods such as penetration testing, red teams, bug bounties, and attack surface management tools, you can gain the visibility needed to uncover and address issues that strategic security reviews alone cannot fully capture.

In this webinar, learn the importance of pairing strategic security reviews with practical, hands-on testing to ensure your security posture is robust not just on paper, but in the face of real-world threats to build and maintain cyber resilience.

Key Takeaways

• How ‘Perception vs Reality’ gaps arise within an organization
• How hands-on testing can help uncover detection, response, visibility and integration gaps to validate a true security posture
• Common response process challenges that can be assisted with proper testing
• The value of combining threat modeling and AI red teaming to create a more comprehensive approach to secure AI systems

Speakers

Erik Nost, Independent Senior Analyst
Erik is a senior analyst at Forrester serving Security and Risk (S&R) professionals. His coverage includes vulnerability risk management, attack surface management, breach and attack simulation, and security testing and validation. Erik helps Forrester clients build strategies to increase cybersecurity maturity and decrease risks in their environment.

Adam Bixby, Managing Director and Proactive Security Leader, Cyber Solutions, Aon
Adam is the Managing Director and Proactive Security Leader at Aon, bringing more than 20 years of experience in the cybersecurity industry, and extensive expertise in penetration testing, red teaming, secure code reviews and secure development consulting. He joined Aon through the acquisition of Gotham Digital Science (GDS), a global leader in security testing. His passion for cybersecurity extends beyond the field, as he has served as a technical consultant for TV shows and films, including Mr. Robot and Ocean’s 8.

Nick Belanger, Vice President, Security Advisory Services, Cyber Solutions, Aon
Nick is the Vice President of Security Advisory Services at Aon, where he has concentrated on helping clients build their incident response readiness and assess and define information security programs and risk management strategies. He proactively assists clients to build information security programs, such as Security Operation Centers (SOC) and Insider Threat Management, as well as assess and test these programs through Cyber Threat Exercises and large-scale War Games.

Stephen Komal, Managing Director and Practice Leader, Penetration Testing & Red Team Practice, Cyber Solutions, Aon
Stephen is a Managing Director and Practice Leader for the Penetration Testing and Red Team Practice at Aon. His team delivers a wide range of offensive security services, including application, network, and cloud penetration testing, source code reviews, and full-scope red team engagements. They also collaborate across practices to provide pen testing support for incident response cases and integrate their offensive testing with assessments from the Advisory and Threat Intelligence teams.