Name: Episode 4 – Voices from the Cloud: Stories, Strategies & Successes
Start: 2025-12-18T13:00:00Z
End: 2025-12-18T13:01:00.000Z
Location: BrightTALK

Join us for this informative technology series for insights into emerging security trends that every IT professional should know. These brief sessions will give you an opportunity to discover best practices from market leaders as well as hands-on advice from industry experts on a variety of security and compliance topics.
 
Let Qualys help keep you up-to-date with cost-effective and efficient technology trends. Choose the topic that interests you or plan to attend the entire series to make sure you stay ahead of the curve.

With 74% of breaches involving credential misuse, identity has become the most exploited and least quantified attack surface. Yet most tools treat identity risk separately from asset risk, leaving security teams to stitch together fragmented visibility and incomplete risk signals.

Join us on Dec 16, 2025, at 10 AM PT for this exclusive session introducing Qualys ETM Identity — the newest capability within Qualys Enterprise TruRisk™ Management (ETM) — designed to make identity risk measured, communicated, and eliminated within the same platform you already use for vulnerability, compliance, and asset risk.

In this webinar, we'll learn how to extend your Risk Operations Center (ROC) to the identity perimeter and reduce your identity-driven attack surface faster by:

- Learning why identity can’t be a separate swim lane in 2025.
- Bringing identity posture and exposure directly into ETM with consolidated identity and asset risk
- Finding and prioritizing the most exploitable routes with Attack Path Analysis and Domain Trust Mapping.
- Executing closed-loop remediation with risk response orchestration workflows, validation and auto-rescoring.
- Reporting with audit-ready dashboards aligned to DISA/CIS and more along with continuous integrity monitoring for “who changed what, when, where."

Extending Your Risk Operations Center with Qualys ETM Identity

Please join the Qualys research and product teams for the “This Month in Vulnerabilities and Patches” webinar on December 11, 2025.

We will discuss this month's high-impact vulnerabilities, including those that are part of November 2025 Patch Tuesday. We will walk you through the steps to address the key vulnerabilities using Qualys VMDR and Patch Management.

We will cover:

• The significant vulnerabilities published this month:
• Microsoft Patch Tuesday, November 2025 
• Other Significant Vulnerabilities

An action plan to quickly identify and remediate vulnerabilities:

• Learn how to use Qualys Patch Management to remediate vulnerabilities.

Patch Tuesday Webinar December 2025: This Month in Vulnerabilities and Patches

Please join the Qualys research and product teams for the “This Month in Vulnerabilities and Patches” webinar on November 13, 2025.

We will discuss this month's high-impact vulnerabilities, including those that are part of October 2025 Patch Tuesday. We will walk you through the steps to address the key vulnerabilities using Qualys VMDR and Patch Management.

We will cover:

• The significant vulnerabilities published this month:
• Microsoft Patch Tuesday, October 2025 
• Other Significant Vulnerabilities

An action plan to quickly identify and remediate vulnerabilities:

• Learn how to use Qualys Patch Management to remediate vulnerabilities.

Patch Tuesday Webinar November 2025: This Month in Vulnerabilities and Patches

Containers and Kubernetes have become a a critical component of modern cloud-native environments and a new way to approach software delivery, but they also introduce new layers of complexity.

Tailored for vulnerability management teams, this session will explore the unique risks containers introduce, how to secure them throughout the CI/CD pipeline, and how to gain visibility into container vulnerabilities at runtime.


Join us to learn how to integrate container security seamlessly into your existing vulnerability management program, ensuring scalable and consistent protection across dynamic cloud workloads.

What you’ll learn:

 - The fundamentals of container security: why it involves securing images, runtimes, environment settings, orchestration layers and networks.
 - Why container security is challenging due to increased attack surface and lack of visibility, and how specialised tools provide insight into container activity.
 - How DevSecOps embeds security into CI/CD pipelines, enabling early detection of vulnerabilities and fostering crossfunctional collaboration.
 - Best practices for collaborative container security, such as enforcing least privilege, using trusted images, continuously monitoring every layer and establishing automated security testing.
 - The rising importance of Kubernetes Security Posture Management (KSPM) as Kubernetes displaces cloud native solutions.

Episode 3 – Containerisation in Practice: The Developer/Security Relationship

Join Qualys and GigaOm experts for an exclusive webinar focused on the future of container security. As containers fuel AI pipelines, data-intensive applications, and critical business services, traditional “scan and alert” models fall short. Gain clarity, actionable strategies, and an innovation-driven roadmap for elevating your container defenses. 

This dynamic session will empower you to move beyond detection-heavy security, with expert guidance on building remediation-driven practices and unlocking the power of runtime-first defense using eBPF-powered visibility. 

Date: Thursday, November 6, 2025 
Time: 11:00 AM PT | 2:00 PM ET 

In this webinar, you will learn:

- Next-Gen Container Risks: Understand how runtime exploits, hidden secrets, and new attack paths are reshaping the threat model. 
- Remediation-Driven Security: Chart a path from detection overload to streamlined, effective remediation tactics. 
- eBPF-Powered Visibility: See how runtime-first defense delivers end-to-end visibility and proactive threat response for containerized workloads. 
- Actionable Insights from GigaOm’s Radar: Leverage exclusive findings from the GigaOm 2025 Radar report to benchmark and future-proof your container security program. 

Expert Speakers

Bill Reed
An industry veteran renowned for his strategic analysis and insight into container and cloud-native security. Bill provides organizations with a decisive edge in navigating emerging threats and technology shifts.

Abhinav Mishra
A leading technologist focused on practical, innovative solutions for securing containerized environments. Abhinav drives forward-thinking strategies that address enterprise-scale security demands. 

Live Q&A 
Engage directly with our speakers in a live Q&A session. Bring your toughest questions around modern container security, runtime defense, and leveraging GigaOm’s research to inform your strategy.

GigaOM 2025 Radar: The Next Era of Container Security

Join Spencer Brown, Principal Product Manager at Qualys, for an insightful webinar on how Manifest Version Control (MVC) in the Qualys TruRisk Platform transforms update management from a reactive, risky process into a controlled, risk-aware strategy. Learn how organizations can deploy updates safely, stage rollouts, and maintain operational stability without sacrificing speed or security.

This session covers: Qualys experts will demonstrate how MVC provides visibility, control, and resilience, ensuring updates protect endpoints without introducing instability.

What you'll learn: 

Delay and Stage Manifest Updates: Introduce controlled buffers between release and deployment, test updates in non-production environments, and prevent unintended disruptions in production systems.

Prevent and Control Deployment: Temporarily block problematic manifests, validate changes in dev/test environments, and safely re-enable updates when ready for enterprise-wide adoption.

Operational Confidence: Treat manifest updates as a fully managed, risk-aware process, reducing the risk of outages while keeping endpoints protected.

End-to-End Resilience: See how MVC works alongside self-healing agents and TruRisk Labs’ real-world validation environments to ensure updates perform reliably across diverse and complex setups.

Scalable Enterprise Control: Create profiles for production and non-production environments, stage updates in waves, and align rollout strategies with organizational policies for enterprise-wide reliability.

Built-In Resilience for Safer Updates: Mastering Manifest Version Control in the Qualys TruRisk Platform

Would you like to streamline your risk operations to continuously reduce exposures and maintain compliance while reducing complexity and overall costs? Would you like to augment your team with a digital workforce of cyber risk AI agents that help you move with speed and scale that supports the business needs? 

Join us for an educational session on how you can enable an AI-native Risk Operations Center that dramatically improves your security posture. 
<ul><li>Discover how Qualys Enterprise TruRisk Management with Agentic AI makes managing cyber risk simpler (and smarter!).</li><li>See the Cyber Risk AI Agents in action during a demo as they unlock access to all your exposure data and surface actionable insights, prioritize risks with business context and real-time threat intel, and remediate risks at the speed of detections.</li><li>Learn how AI-driven strategies can elevate your cyber defense and free you for more strategic work.</li></ul>

Modernize Your Cyber Risk Management with Agentic AI

Join us for an exclusive deep dive into Qualys Patch and the evolution toward TruRisk™ Eliminate. In this session, our Principal SME Mukesh Choudhary will walk through proven best practices, tips & tricks, and real-world use cases to help you get even more from your current Patch deployment. Then, Padmanabh Sahasrabudhe, Senior Principal Product Manager for Remediation & Mitigation, will present the latest roadmap, spotlighting the key innovations and unique value propositions of Eliminate. Whether you're already using Qualys Patch or considering the migration, this webinar will open your eyes to what's possible when patching meets risk elimination.

Unlock deeper value from your Qualys investment. Learn how to patch smarter today and prepare for the future of risk elimination.

Why Attend
Many organizations deploy Qualys Patch, but few tap into its full potential. Even fewer understand how it evolves into TruRisk™ Eliminate. This webinar bridges that gap.

What You’ll Learn:
- Patch Best Practices & Tips
- What’s New in Qualys Patch
- Eliminate Roadmap & Unique Value
- Migration Path & Decision Framework

Who Should Attend:
- Current Qualys Patch users
- IT Ops / SecOps teams evaluating the shift to Eliminate
- Technical leads, vulnerability managers, remediation leads

Speakers:
- Mukesh Choudhary, Principal SME, Qualys
- Padmanabh Sahasrabudhe, Senior Principal Product Manager, Qualys

Bonus: Attendees receive checklist, migration readiness worksheet, and early access preview.

Best Practices of Using Qualys Patch: What’s New & Where We’re Going with Eliminate

Please join the Qualys research and product teams for the “This Month in Vulnerabilities and Patches” webinar on October 16, 2025.

We will discuss this month's high-impact vulnerabilities, including those that are part of September 2025 Patch Tuesday. We will walk you through the steps to address the key vulnerabilities using Qualys VMDR and Patch Management.

We will cover:

• The significant vulnerabilities published this month:
• Microsoft Patch Tuesday, September 2025 
• Other Significant Vulnerabilities

An action plan to quickly identify and remediate vulnerabilities:

• Learn how to use Qualys Patch Management to remediate vulnerabilities.

Patch Tuesday Webinar October 2025: This Month in Vulnerabilities and Patches

Join the Qualys Cloud team as we take a deeper dive into the alphabet soup with Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP).

This session will explore how to identify and remediate misconfigurations, enforce cloud compliance, and protect workloads across multi-cloud environments.

Attendees will gain practical knowledge and hands-on strategies to strengthen their cloud security posture and integrate CSPM and CWP into a comprehensive vulnerability management program.

What you’ll learn:

 - Why traditional vulnerability management approaches are insufficient for cloud native environments and how factors such as dynamic workloads, expanded attack surfaces and CI/CD acceleration drive the need for a new approach.
 - How cloud native vulnerability management emphasises continuous monitoring, realtime scanning and context, combining identity, configuration and threat intelligence information to prioritise risks.
 - Practical steps to initiate a cloud native vulnerability management programme: start with comprehensive asset visibility, embed security into CI/CD workflows and adopt automation for remediation.
 - Why shared responsibility in the cloud means organisations must understand their obligations and complement cloud provider controls with their own vulnerability management strategies.
 - A look at Qualys TotalCloud and how it delivers CNAPP capabilities for organisations of all sizes in EMEA.

Episode 2 – Rethinking Cloud Security: A Deep Dive into Cloud-Native Vulnerability Management

The U.S. federal government and its partners face mounting pressure to secure high-impact systems, protect sensitive unclassified data, and comply with increasingly stringent mandates such as NIST RMF, CDM, CISA BODs, and OMB’s Zero Trust strategy. 

Qualys is proud to announce that the Qualys Government Platform is now FedRAMP High Authorized — placing it among a few platforms validated against 421+ NIST 800-53 High controls and trusted to handle the government’s most sensitive workloads.

In this webinar, our experts will break down what this authorization means for federal agencies, systems integrators, SaaS providers, and regulated enterprises, including:
- How FedRAMP High authorization accelerates ATO processes with validated control inheritance.
- Why authoritative asset baselines are critical for CDM and Zero Trust maturity.
- How closed-loop remediation and TruRisk™ prioritization shrink POA&M backlogs and MTTR.
- What this milestone means for supply chain trust in both public and regulated commercial sectors.

Join us on October 08, 2025, at 10 AM PST to learn how you can leverage the only FedRAMP High-authorized, unified risk management platform to streamline compliance and sustain ongoing ATO with confidence.

Operationalize Cyber Risk Reduction with FedRAMP High-Authorized Qualys Government Platform

Traditional vulnerability management can’t keep up with today’s containerized environments - where images are immutable, instances are short-lived, and risks can spread across hundreds of replicas in seconds.


Join Qualys cloud security experts for a Fireside Chat on October 6th at 11 AM PT and see how Qualys TotalCloud with TruRisk™ transforms container vulnerability management - helping you cut through noise and focus on true business risk, not just CVE counts.

How to evolve from 'scan everything' to strategic risk management?

1. Ways to correlate vulnerabilities with runtime behavior, network exposure, and business context
2. Correlate vulnerabilities with runtime behavior, network exposure, attack paths, and business context
3. Best practices to embed security into your CI/CD pipeline with SBOM validation and policy enforcement

What's more? Get real insights into Qualys TotalCloud CSPM Integration with ServiceNow Configuration Compliance.

Strengthening Container Vulnerability Management with Unified TruRisk™️Insights and Attack Paths

Steps 1 through 4 built the foundation: mapping assets, prioritizing threats, and communicating risk. Step 5 is where leadership turns into execution — the moment teams shift from planning to action.

This final step focuses on eliminating threats, reducing risk, and aligning execution to strategy. Security, remediation, and compliance teams act in sync, isolating systems, closing gaps, and taking action at the speed of conflict.

Key takeaways include:
1. How to eliminate threats through confident, prioritized, data driven execution.
2. Highlighting some NEW Eliminate, Mitigate, and Isolate features being leveraged to de-risk, automate and assign.
3. How a centralized remediation cockpit drives task assignment, team alignment, and measurable risk reduction across the platform

Register now and lead with confidence.

Steps To TruRisk: Step 5 Eliminate Risk – Lead with Confidence

Cyber risk now carries a balance sheet. The ability to put a dollar value on risk, and a return on remediation, is becoming the difference between organizations that move with confidence and those that stall under uncertainty. The opportunity lies in achieving clarity. Amid endless data points, cyber risk leaders are learning to distinguish true risk signals from background noise. AI and unified models are helping translate those signals into decisions that are faster, more precise, and easier to explain in business terms. The Cyber Risk Series: Risk Management Edition brings together industry experts to share how organizations are building this clarity into their programs. The focus is practical: how to measure, prioritize, and communicate risk in ways that guide strategy, secure investment, and strengthen trust.

Why Attend:

- Learn how to quantify risk in financial and operational terms that resonate at the board level.
- See how AI and automation bring precision by surfacing signals that matter. 
- Explore approaches to prioritize action with business alignment. 
- Gain language and frameworks to demonstrate ROI on risk reduction with confidence.

Qualys Cyber Risk Series - Risk Management Edition: Where Risk Meets ROI

Cyber risk now carries a balance sheet. The ability to put a dollar value on risk—and a return on remediation—is becoming the difference between organizations that move with confidence and those that stall under uncertainty.

The opportunity lies in clarity. Amid endless data points, cyber risk leaders are learning to distinguish true risk signals from background noise. AI and unified models are helping translate those signals into decisions that are faster, more precise, and easier to explain in business terms.

The Cyber Risk Series: Risk Management Edition brings together industry experts to share how organizations are building this clarity into their programs. The focus is practical: how to measure, prioritize, and communicate risk in ways that guide strategy, secure investment, and strengthen trust.

Why Attend:

 - Learn how to quantify risk in financial and operational terms that resonate at the board level.
 - See how AI and automation bring precision by surfacing signals that matter.
 - Explore approaches to prioritize action with business alignment.
 - Gain language and frameworks to demonstrate ROI on risk reduction with confidence

Q3 2025 CRS: Risk Management Edition Where Risk Meets ROI - APAC

What does security best practice look like in the cloud? How do I understand what my risk looks like in AWS, Azure or GCP? Why does every solution have to be an acronym?
Join the cloud security experts at Qualys as we discuss how to effectively manage vulnerability management (VM) in cloud environments. We will discuss practical insights, best practices, and real-world strategies to help security teams stay ahead of evolving threats.  

Whether you're new to cloud-based VM or looking to optimize your current processes, this webinar will provide valuable guidance and show how customers are solving these challenges today by partnering with Qualys.

What you’ll learn:

 - The core components of a CNAPP and why unifying vulnerability management, compliance and threat detection matters.
 - How CNAPPs give security teams visibility across multicloud environments and help prioritise the vulnerabilities that matter most.
 - Key challenges CNAPPs solve, such as poor visibility, communication gaps between security and development, and slow remediation, and how automation helps accelerate risk reduction.

Episode 1 – Demystifying the CNAPP: Vulnerability Management in the Cloud

Cybersecurity leaders are under pressure to not only identify risks but also demonstrate their impact on the business in measurable terms. It’s a new paradigm where exposure becomes a measurable currency — with costs, premiums, and dividends — demanding the same financial discipline applied to supply chains, talent, or capital allocation. 

Through a series of expert speakers, attendees will learn how organizations can move beyond reactive alert management to operationalize risk reduction across the enterprise. Attendees will learn how to embed risk-based processes into security operations, align security metrics with business value, and prioritize actions that reduce the greatest exposure at the lowest cost. By operationalizing risk in this way, security teams can strengthen resilience, optimize resources, and provide executives with a clear, financial view of cyber risk.

Cyber Risk Series: Risk Management Edition

Qualys EMEA Cloud Security Series

In this special episode of the Qualys EMEA Cloud Security series, you’ll hear from practitioners and strategists from Qualys partners and real-world examples of Cloud Security in practice from our EMEA customers.

Our discussion will explore what best practice looks like in production cloud environments, covering practical strategies, lessons learned, and proven approaches to securing complex cloud architectures.

Through real examples of success, you’ll gain actionable insights to elevate your own cloud security programs and better integrate security into dynamic, modern infrastructure. 

What you’ll learn:

 - Concrete examples of how organisations overcame vulnerability management challenges by adopting integrated cloud security solutions.
 - The business benefits of continuous vulnerability monitoring, including improved operational efficiency, regulatory compliance and enhanced client trust.
 - Strategies these organisations used to integrate vulnerability management into their services—such as leveraging automation and building a business riskbased approach.

Episode 4 – Voices from the Cloud: Stories, Strategies & Successes

cloud security best practices

cloud data security best practices

cloud security guidelines

cloud best practices

Cloud

Security

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Episode 4 – Voices from the Cloud: Stories, Strategies & Successes

Presented by

About this talk

Qualys