Johannes Myburgh

Embedding new GRC Technologies into business processes

25 & 26 February 2020
The Forum, Bryanston

senior information security consultant, F-Secure Consulting South Africa

Johannes works primarily in the finance industry, which exposes him to various core banking systems on a daily basis. In addition to determining effective methodologies to assess the security of such systems, Johannes’ current focus pertains to the investigation of effective vulnerability management programs with consideration of how to maximise the benefit clients receive from their penetration testing activities.

Johannes Myburgh will be speaking on the following topic:

15:05

Case Study Risk Priority by Design, for effective technical controls and realistic remediation

The completion of an organisation’s annual penetration test typically exposes their vulnerabilities, revealing the latest ways to compromise critical assets. How does one move from a “what now” perspective to one where we are confident about our defences?

This talk aims to present a new way of thinking about and tackling this problem. It will explore the need to simplify and provide practical, prioritised steps that will have the largest impact on decreasing overall risk. This case study will highlight common issues across large enterprises. It aims to provide guidance on what organisations should be demanding from their pen testing teams to assist with answering these questions.

How to better prioritise your business’s risk.
Recommended approaches for risk reduction on your IT estate.
Strategic guidance regarding how best to approach documented vulnerability findings.