Category: Events

Year 2020 is over. Welcome 2021.

In this year Cloud Security Alliance Hong Kong & Macau Chapter will continue to adopt the “New Normal” arrangement for our activities. In fact, with all your support in the last few months, it seems that with the new method, communication channel and sharing session time, more members and participants can enjoy the power of cloud computing. This year we will arrange more sharing both from cloud customers, cloud service providers and other experts.

“Start Big is always better to start with Big CSP player”. As you all know, Azure Cloud is one of the largest Cloud Service Providers, we have arranged the first sharing event with Microsoft Cloud Solution Architect in Hong Kong to cover DevOps Security Best Practices in Microsoft Azure.

Ms. Wai Man HUI, cloud solution architect will lead us through Azure’s DevOps Security Best Practices. During the talk, Wai Man will tell us more about DevOps with GitHub and Azure, how to protect secrets properly in Azure cloud environment. She will also tell us how to enhance security in Azure environment through demonstration in real life too.

The topics include :

– DevOps with GitHub And Azure
– Best practices for strong secret management
– How Vault can be used to enhance the security of your Azure environment

Please do not miss this opportunity to learn from the expert and get connected with your peers.

This is just the beginning of our cloud security journey in 2021. More sharing and event will be coming.

Participants will claim 1 CPE.

DATE: 28 January, 2021 (Thursday)

TIME: 12:30 – 01:30 pm

VENUE: Webinar (in Cantonese)

SPEAKER: Wai Man HUI, Cloud Solution Architect, Microsoft, Hong Kong

TOPIC: DevOps Security Best Practices with Microsoft Azure 

THE SPEAKER:

Wai Man HUI is a Cloud Solution Architect in Microsoft (Hong Kong) team that specialised in DevOps area. She worked on development and implementing business solution for company size from 50+ employees to 50,000+ employees. She also helps company in transforming their development and development workflow from traditional environment to cloud platform.

REGISTRATION: https://csahkmkse2101.eventbrite.hk

Christmas is coming and we all wish Covid-19 will be over soon. Cloud Security Alliance Hong Kong & Macau Chapter is arranging another Knowledge Sharing Event on December 17, 2020, a week before Christmas.

As a continuation of the last two Knowledge Sharing Event, we continue to focus on hot cloud security topic – PaaS and Microservices Security topics.

Security microservices provide security functionality, such as encryption and authentication, to calling applications. As microservices (e.g. ‘serverless’ RESTful JSON APIs) become more common in both the cloud and internal architectures, there is a trend towards including hardware security module (HSM) based services, making strong security functionality readily available to applications. In this session, you will learn:

* Why microservices are becoming fashionable
* How security microservices make security easier
* Examples of security microservices

This talk will be delivered by Ian Christofis, Principal Managing Consultant, nCipher Security (an Entrust company).

Please do not miss this opportunity to learn from the expert and get connected with your peers.

Participants can claim 1 CPE.

DATE: December 17, 2020 (Thursday)

TIME: 12:30 – 01:30 pm

VENUE: Webinar

SPEAKER: Ian Christofis, Principal Managing Consultant, nCipher Security (an Entrust company)

TOPIC: Security Microservices – A New Trend

THE SPEAKER:

Ian Christofis is a specialist in information security, including cryptographic security, Public Key Infrastructure (PKI) and identity & access management. He combines a strong understanding of the commercial and strategic business issues with a detailed knowledge of the technology.

He is a Certified Information System Security Professional (CISSP), a Founding Board Member of the Cloud Security Alliance (CSA) Hong Kong & Macau Chapter, sits on the Editorial Board of the Professional Information Security Association (PISA) Journal, and a member of the International Association for Cryptologic Research (IACR).

WATCH PRESENTATION: https://youtu.be/dga_gxwfftQ

PRESENTATION FILE: https://bit.ly/2KvbKM2

In last month’s knowledge sharing event, we focused in the methodology to develop and secure our PaaS environment. Do we still need to secure the cloud stem? Do we still need to secure the cloud architecture? How to secure that environment?

The common security challenges faced in the cloud stem from misconfiguration, compliance, and an exploding set of cloud infrastructure services. This session will cover how to combat these challenges and gain visibility into security, compliance, and governance vulnerabilities on your public cloud infrastructure.

We will go over the latest security offering that helps teams build a better cloud architecture. You can also look forward to hundreds of out-of-the-box, step-by-step remediation guides, enabling DevSecOps teams and cloud architects to quickly resolve vulnerabilities.

This upcoming knowledge sharing event, we invited Tony Lee, Head of Consulting of Trend Micro will lead us to the “Cloud operational excellence – Guardrails to build exceptional architecture & avoid misconfigurations“.

Please do not miss this opportunity to learn from the expert and get connected with your peers.

Participants can claim 1 CPE.

DATE: November 05, 2020 (Thursday)

TIME: 12:30 – 01:30 pm

VENUE: Webinar

SPEAKER: Tony Lee, Head of Consulting of Trend Micro

TOPIC: Cloud operational excellence – Guardrails to build exceptional architecture & avoid misconfigurations

THE SPEAKER:

Tony Lee is the Head of Consulting at Trend Micro – a global leader in cyber security solutions. He is responsible for the provision of security advice and solution consultation for large scale IT users and key channel partners in Hong Kong.

Tony has more than 13 years experiences in strategic planning and requirements analysis, with special focus on cloud security deployment, cyber threats response and emerging technologies analysis. As a technology evangelist for Trend Micro, he has been acting as a high profile speaker for major industry events in the region, specialized in evolving cyber threats such as ransomware and APT attacks.

Tony is a graduate of the Hong Kong Baptist University, where he received a Bachelor of Science degree in computer science.

REGISTATION: https://csakse2011.eventbrite.hk

Earning the globally recognized #CCSP cloud security certification is a proven way to build your career and better secure critical assets in the cloud. Join ISC2’s 60-min live info-session on September 10 (Thursday) at 14:00 to learn more about the CCSP, its exam domains, experience requirements and available study resources. And, get to ask any question that will support your certification journey!

(ISC)² Info Session

Topic: CCSP – The Industry’s Premier Cloud Security Certification
Date: September 10, 2020 (Thursday)
Time: 14:00-15:00

Register now: https://www.isc2.org/News-and-Events/Webinars/APAC-Webinars?commid=432478&utm_source=csahk

Our knowledge-sharing session resumed since August 2020, more events will be coming. When we think about security, many of us would like to know how we train up our attack and defense skills through practice. One of the best methods is to perform a pre-defined exercise through CyberRange. But how can we ensure CyberRange is secure? So we can start to learn from one of the best CyberRange SaaS service providers – CyberBit.

This month we invited Mr. Ralph WU, Security Architect of Cyberbit – North East Asia to cover the topic: “Are you ready for Cyber War? – Training on Cloud Range Simulation platform”.

During the talk, Ralph to talk about:

1. How Hacker make the damage ?
   1. Understand MITRE ATT&CK, why it is important to Cybersecurity Training
2. Where is the skill gap?
   1. Leverage NICE framework as guideline of training objectives
3. Cyberbit Cloud Range Platform
4. 1. Architecture
   2. Differences between Legacy Training and Range-based Training?
   3. Doing Drill Test on Cybersecurity Scenario

Please do not miss this opportunity to learn from the expert and get connected with your peers.

Participants can claim 1 CPE.

DATE: September 03, 2020 (Thursday)

TIME: 12:30 – 01:30 pm

VENUE: Webinar

SPEAKER:

Ralph Wu, Security Architect of Cyberbit – North East Asia

TOPIC:

Are you ready for Cyber War? – Training on Cloud Range Simulation platform [Recorded Presentation]

THE SPEAKER:

Ralph Wu is the Security Architect of Cyberbit – North East Asia. He is helping different Enterprises to embraces Cyber Range platform to gear up Cyber Security Warriors get prepare for different potential outbreaks.   Ralph has more than 20 years in Infrastructure and Cybersecurity domain. Prior joining Cyberbit, he is Pre-Sales of another Israel security vendor – CyberArk which focused on Privileged Account Security on On-Prem and Cloud environment. Ralph has taken team manager role in HKT and lead a team of network and security professional to design network and security architecture for various enterprise customers in HK.

 

 

To support continuous professional development for InfoSec and CloudSec professionals in the region, ISC2 will be running an information webinar for CCSP certification on November 7 at 14:00 HKT.  In this 60-min info session, you will learn:

• Current trends in the cloud security space
• Reasons why you should pursue the CCSP certification
• Overview of the recent updates to the CCSP domains
• How to earn the CCSP certification, including exam and experience requirements
• And you have the opportunity to ask any question that you may have

Do not miss the opportunity and register at: https://www.isc2.org/News-and-Events/Webinars/APAC-Webinars?commid=372419&utm_source=csa_hk#

Cloud Security Alliance Hong Kong & Macau Chapter is a supporting organsiation for the CTF Open 2019.  This will probably be the first CTF competition ever held in Hong Kong open to both students and general public.

Semi-Final Round

• Date : October 5-6, 2019
• Time : 12:00 pm October 5 to 6:00 pm October 6
• Duration : 30 Hours
• Style : Online Jeopardy
• Category : Student (Hong Kong Full-Time Undergraduate Students) and Public (Open to everyone)
• Teams : Each team must have 2 – 4 members

Grand Final Round

• Date : October 19, 2019
• Time: 10:00 am to 4:00 pm
• Venue : Deloitte (35/F, One Pacific Place, 88 Queensway, Hong Kong)
• Duration : 6 Hours
• Style : On-site Jeopardy
• Participants must bring and use their own personal computing devices

For details and registration, please visit: https://www.eventbrite.hk/e/hk-ctf-open-2019-opening-and-cyber-security-seminar-of-red-vs-blue-tickets-73305311159