Even before COVID-19, technology staff struggled with the challenges of securely meeting user demands.  As a result of the crisis, companies were quickly forced to balance the responsibilities of controlling the security perimeter and protecting data while providing access to the workplace worldwide.  Malicious actors and state adversaries have taken advantage of the vulnerabilities introduced during these sometimes chaotic, unplanned shifts.  This session will review lessons learned from COVID-a9 related breaches and attacks, how to design an “off-ramp” and remediate security issues and practices and tools organizations can adopt to address ongoing operational or technical flaws in their security posture.