Alle afleveringen
222 afleveringen, van nieuw naar oud
-
Ransomware Operators Can Circle Defenses: Proactive Defense Strategies
22 november 2022 · 29 min
Ransomware Operators have not only increased the ransoms they demand but are also using additional coercion techniques to perform multifaceted extortion attacks. Between us, we have worked on several ransomware incidents observing closely the challenges that organizations face while battling and remediating ransomware incidents. Based on the learnings from responding to such incidents, we will share our learnings and thoughts on the ransomware attack life cycle, practical security controls and enforcement measures to defend against and limit the impact of ransomware attacks. Lees meer
Speakers:
Anurag Khanna, Manager, CrowdStrike Services
Thirumalai Natarajan, Senior Manager, Mandiant Consulting
Kacy Zurkus, Content Strategist, RSAC -
Beyond MFA: Why Multi-factor Alone Is Not a Fail-Safe for Identity Protection
15 november 2022 · 23 min
Most organizations have moved beyond the insecure username and password access control a long time ago and started using multifactor authentication. But as Yahoo, Deloitte, and LinkedIn know, MFA won’t always save the company from a data breach. Not only has MFA access been defeated multiple times by attackers, but users hate it. It’s cumbersome, annoying, increasingly exploitable. In this podcast Violet Sullivan and Jessica Smith will discuss the evolution of MFA, why and how it can be exploited, and what organizations can and should do to address access control in a way that keeps their data security and users happy. Lees meer
Speakers:
Jessica Smith, Vice President of Client Services, AllClear ID Health
Violet Sullivan, Esq. CIPP/US, Vice President of Client Engagement, Redpoint Cybersecurity
Kacy Zurkus, Content Strategist, RSAC -
Transcendent Tango: The Role of Cryptography in Establishing Zero Trust Identity
1 november 2022 · 12 min
In the same way that the tango begins with foundational steps, the layering of device, application/workload, and user identity forms the foundation of Zero Trust security. Each intentional step weaving to create an intricately coordinated pattern. Join us as we take a look at the cryptographic dance between keys and identity that forms the basis of and maintains Trust in a Zero Trust world. Lees meer
Speakers:
Karen Reinhardt, Principal Engineer, Cryptographic Services, The Home Depot
Kacy Zurkus, Content Strategist, RSA Conference -
Analyst Experience: SOC Analysts Finally Escape The Shackles Of Bad UX
4 oktober 2022 · 22 min
Security analysts must fight both attackers and the products and services they rely on to drive their detection and response capabilities because of a lack of usability of security tools and processes. This podcast explains an emerging cybersecurity technology trend: analyst experience (AX). Join us to understand how AX can enable your team to find more effective security tools, build better workflows, and help security analysts make faster, more accurate decisions. Lees meer
Speakers:
Allie Mellen, Analyst, Security and Risk, Forrester Research
Jeff Pollard, Vice President & Principal Analyst, Forrester
Kacy Zurkus, Content Strategist, RSA Conference -
September Spotlight: From Hacker Kid to Cyber Pro
27 september 2022 · 15 min
Back in 2017 New America and The Christian Science Monitor hosted then 14-year-old and CEO of VannTechCyber LLC, Paul Vann. He was indeed a rising star in the field, but where is Vann now? Join this RSAC 365 podcast as we shine a spotlight on the making of a cyber professional. We’ll feature Paul Vann, who’s now a senior at the University of Virginia and a Developer at Cyborg Security. Vann will inspire listeners with his story of growing from a “hacker kid” to a developer working on a malware analysis tool as well as his goals and aspirations for a future in the industry. Lees meer
Speakers:
Paul Vann, Student, University of Virginia
Kacy Zurkus, Content Strategist, RSA Conference -
Overcoming Barriers to Intelligence Sharing
27 september 2022 · 15 min
When it comes to defending critical infrastructure from cyber threats, understanding the threat landscape is critical to assessing risk and implementing a robust security strategy. Threat intelligence enables organizations to identify and react to threats, and we know that having the right attack surface intelligence informs the processes and procedures needed to quickly recover. Yet, intelligence sharing remains a problem for defenders. In this podcast we'll explore the value in public/private partnerships, the barriers to threat intelligence, and how organizations can collaborate to overcome those barriers and improve resilience. Lees meer
Speakers:
Erin Miller, Executive Director, NCC/Space ISAC
Kacy Zurkus, Content Strategist, RSA Conference -
What Could a U.S. Federal Data Privacy and Security Law Look Like?
6 september 2022 · 21 min
Congress has tried for years to pass a comprehensive federal data privacy and security law without success, which impacts consumers, industry, and security. Meanwhile, other countries and multiple U.S. states have moved forward with laws. However, the bipartisan, bicameral American Data Privacy and Protection Act (ADPPA) could be an opportunity to change this. This podcast will cover why data privacy and security legislation is important and look at the R Street Institute’s report on reaching consensus on traditional roadblocks, specific aspects of the bill like data security, the bill’s current status and possible next steps, and remaining challenges. Lees meer
Speakers:
Brandon Pugh, Resident Senior Fellow and Policy Counsel, Cybersecurity and Emerging Threats, R Street Institute
Kacy Zurkus, Content Strategist, RSA Conference -
The Cyber Physical War: Does the Investment Match the Hype?
19 augustus 2022 · 18 min
While there seems to be a growing awareness of the threats to the cyber-physical world with cybercriminals increasingly targeting industrial organizations within critical infrastructure, are current investments, regulations, and actions enough to stop attackers. In this podcast, we’ll have a follow up Q&A to the RSAC 2022 session, “The Cyber Physical War—Lessons from the Digital Front Line,” to understand what more must be done to protect industrial organizations. Lees meer
Speakers:
Ian Bramson, Global Head of Industrial Cybersecurity, ABS Group
Kacy Zurkus, Content Strategist, RSA Conference -
"Anatomy of Smart Living” - Limit Cyber Exposure by Embracing Mobility and IoT
11 augustus 2022 · 20 min
We live very “smart” lives equipped to stay connected anywhere, any time. Getting connected is easy, securing it may be a fool’s errand if not approached properly. Say goodbye to the days of signature-based detection and say hello to IoT data anomaly and volatility predictive analysis for advanced “on the go” monitoring, detection and response. In this podcast, we will discuss novel approaches in using data analytics models from financial market trading systems (quant) to determine security volatility when faced with unprecedented and overwhelming volumes of data. We’ll propose potential solutions called the Cyber VIX and engineering concepts to test cyber defenses such as the “shake down test” and where failures and blind spots can be predicted and modeled. Lees meer
Speakers:
Peter Tran, CISO & EVP Global Cyber and Product Security Solutions, InferSight LLC
Kacy Zurkus, Content Strategist, RSA Conference -
Incentivizing Collaboration and Promoting Zero Trust Adoption
14 juli 2022 · 23 min
Our world is becoming increasingly interconnected and more interdependent than ever before. We continue to see an increase in cybercrime, which brings us to an inflection point - who's responsible for addressing security in our integrated digital world and what should be the role of policymakers and industry regulators in promoting good cyber hygiene and incentivizing collaboration? Lees meer
Speakers:
Shinesa Cambric, CISSP, CISA, CISM, CDPSE, Product Manager, Microsoft
Jay Hira, Cyber Security Strategy and Transformation DirectorThis podcast is sponsored by DNSFilter. DNSFilter offers industry leading threat protection for companies across the globe. Utilizing powerful artificial intelligence, we identify and block threats 7 days earlier than competitors.
-
Effective or Confusing: New Structures and Regulations in Cybersecurity
5 juli 2022 · 23 min
Over the course of the last two years, cybersecurity planning and thought leadership have picked up with a parallel increase in regulation, Congressional action, and government reorganization. The Cyberspace Solarium Commission recommended and got a National Cyber Director and incident reporting legislation through the hard work of the SASC, HASC, and HSGAC, but where do these changes leave us now? Is the National Cyber Director leading the federal government effort, or are government turf battles making leadership in cyber confusing? And what about incident reporting - how many new proposals have we seen, and which are the most critical to understand? Join us for a discussion of all of these issues and what the cybersecurity landscape might look like in a year or five years from now. Lees meer
Speakers:
Tatyana Bolton, Policy Director, Cybersecurity and Emerging Threats, The R Street Institute
Kacy Zurkus, Content Strategist, RSAC -
What is DevSecOps and why is it important?
17 juni 2022 · 18 min
Integrating security into the development lifecycle can be a challenge, especially for those who don’t understand why security matters to development and operations. What’s the ROI of DevSecOps? What are the key KPIs? Join us for an insightful conversation that explains why DevSecOps is important while shining a spotlight on some DevSecOps bloopers to avoid. Our guests will also expose the cost of bad DevSecOps and offer suggestions for how to measure developers on security. Lees meer
Speakers:
Keenan Skelly, CEO, Shadowbyte
Stephanie Simpson, Vice President of Product, SCYTHE -
Affirming LGBTQ Populations in Virtual Health through DevSecOps & Software Integrity
2 juni 2022 · 31 min
Virtual health providers create favorable conditions for the LGBTQ population's access to healthcare, an influx of electronic personal health information, and massive increases in cyber threats. Using software flaws, bad actors increasingly target healthcare systems to steal, monetize, and affect availability of data. This session explores software integrity and DevSecOps approaches to secure highly interconnected digital healthcare systems. Lees meer
Speakers:
Safi Mojidi, Head of InfoSec, FOLX Health
Kacy Zurkus, Content Strategist, RSA Conference -
Get Your Head IN the Clouds: SOC Teams Must Live in Clouds to Secure Them
9 mei 2022 · 35 min
Massive cloud proliferation has driven huge increases in IT and security complexity, the vast majority of which come from trying to force fit legacy concepts, processes and even tools, into a cloud context. This will cover the most important considerations and requirements facing organizations to adequately understand and affect their new reality – and evolve their security thinking. Lees meer
Speakers:
Nipun Gupta, Senior Security Leader, Devo
Sounil Yu, CISO and Head of Research, JupiterOne
Kacy Zurkus, Content Strategist, RSAC -
The Cloud First BISO
3 mei 2022 · 30 min
Leading and guiding a data-driven security program as a BISO can be challenging. Data is everywhere and owned by many departments. Once a BISO has found that data they need, they must overcome the challenges of data access, storage, normalization and all the other steps required to turn that data into an actionable story. Fortunately, the Cloud can make this easier and faster. Lees meer
Speakers:
James Binford, Director and Business Information Security Officer, Humana
Ashish Rajan, Host of Cloud Security Podcast & SANS Trainer, Cloud Security
Kacy Zurkus, Content Strategist, RSAC -
How Threats in Today’s Landscape Can Be Exploited (And Avoided)
9 april 2022 · 29 min
What does an attacker need to do to exploit a threat? Join us to discuss the TTPs attackers are using to exploit myriad threats in today’s threat landscape. Our guests will look across different sectors to understand new and emerging threats, how those threats can be exploited, and steps organizations can take to avoid being the next victim of a cyberattack. Lees meer
Speakers:
Jerone Jones, Founder, JustOne Solutions, LLC
Alexiaa Jordan, Cyber Security Consultant, JustOne Solutions -
Defending with Passion: Cultivating a Passion for Evolving as a Cyber Defender
29 maart 2022 · 20 min
The technology we work to secure is ever evolving, as are the threat actors that are out there trying to exploit those technologies. Hence, the challenge we face today with securing and then defending those advances in technology requires people that are just as excited about learning how to defend that new technology as someone once was about creating it. There is absolutely someone out there that is passionate about hacking their way into that new technological advancement, no matter what it is. Join this podcast to learn what motivates hackers and how to help instill a passion for defending against cyber threats in the members of a security team. Lees meer
Speakers:
Tiffiny Bryant, Cyber Security Analyst, Crystal Clear Technologies, Inc
Kacy Zurkus, Content Strategist, RSAC -
SBOM: Where We’ve Come From, and Where We’re Going
21 maart 2022 · 23 min
Across the security world, there’s a growing appreciation about the need to better understand our software supply chain. Transparency won’t solve all our problems, but will lay a foundation for greater resilience and more informed decisions. This discussion will review the basics of SBOM, using the recent log4j vulnerability to understand how SBOM can help across the software ecosystem—and also understand its limits. We’ll also delve into the future of SBOM, exploring some of the gaps, where we need to focus to advance the state of the art. Our ultimate goal should be the integration of SBOM into the broader vulnerability and security data ecosystem through automation. Lees meer
Speakers:
Allan Friedman, Senior Advisor and Strategist, CISA
Kacy Zurkus, Content Strategist, RSA Conference -
Zero-sum Security: Zero Trust is Compromised as Long as Passwords Remain
9 maart 2022 · 34 min
Furthering the White House Cybersecurity EO, the OMB just released a Zero Trust Architecture Strategy with one of its 5 pillars focused on identity, and requiring implementation of strong, phishing-resistant MFA for agency and citizen access. This session explores the gatekeeper role of identity in ZTA, and the business and technology challenges faced in managing access while passwords persist. Lees meer
Speakers:
Mario Duarte, Vice President of Security, Snowflake
Tom (TJ) Jermoluk, CEO and Co-Founder, Beyond Identity
Kacy Zurkus, Content Strategist, RSA Conference -
Beware AI Landmines: Legal and Policy Considerations Revisited
18 februari 2022 · 25 min
In 2021, artificial intelligence emerged as a viable technology, which warranted a conversation about the legal and policy considerations underlying modern society. We’ll look back at the ethical, legal, and policy considerations discussed in May of 2021 and ask where are we now? What more needs to be done in order to maximize a successful implementation and minimize potential risk? Lees meer
Speakers:
Behnam Dayanim, Partner, Global Chair of Privacy & Cybersecurity Practice and Chair, Advertising & Gaming Practice, Paul Hastings LLP
Kacy Zurkus, Content Strategist, RSAC -
The Road to Smart Cities is Paved with Good AI Intentions
16 februari 2022 · 23 min
In a world where the terms “AI” and “machine learning” are used liberally to describe new products and technologies, creating an assessment framework for buyers (and sellers!) to evaluate these products is essential. In this session, we’ll follow the Cost and Vulnerability dimension of MITRE’s AI Relevance Competence Cost Score (ARCCS) Framework and consider the security and privacy implications of AI for smart cities and the humans that travel them. Lees meer
Speakers:
Anne Townsend, Department Manager and Cybersecurity Engineer, The MITRE Corporation
Kacy Zurkus, Content Strategist, RSAC -
What’s Trending in Protecting Data & the Supply Chain
1 februari 2022 · 39 min
Protecting Data & the Supply Chain so deeply intertwined with everything from software to identity. Join Program Committee members Edna Conway and Diana Kelley as they discuss the challenges that folks are struggling with right now and some potential mitigation strategies. We'll explore what’s happening with Log4j and other vulnerabilities as well as the need for a software Bill of Materials (SBOM). Lees meer
Speakers:
Edna Conway, Vice President, Security & Risk Officer, Azure, VP, Chief Security & Risk Officer, Azure Microsoft
Diana Kelley, CTO and Co-Founder, SecurityCurve
Kacy Zurkus, Content Strategist, RSAC -
Cybersecurity? Isn't it really the Data Care industry?
19 januari 2022 · 30 min
Countless conversations with students, politicians, and leaders about cybersecurity suggest that the term ‘cybersecurity’ does not invoke the personal sense of responsibility necessary, nor is it inviting to the majority of the public including minorities, women and young adults who we want to seek a career in this field. How do we change that? Let's start with Data Care. In this podcast, our guests will discuss what’s missing from the term ‘cybersecurity’ and how taking a ‘Data Care’ approach can help us all to build a more secure world. Lees meer
Speakers:
Britta Glade, Senior Director, Content & Curation, RSA Conference
Ron Gula, President, Gula Tech Adventures
Cyndi Gula, Managing Partner, Gula Tech Adventures -
Privacy Tech: The Crossroads of Cybersecurity
10 december 2021 · 24 min
The Rise of Privacy Tech (TROPT) recently released a whitepaper categorizing the privacy tech landscape. It explores privacy tech's relationship to its adjacent industries, which include cybersecurity, identity management, and data governance, among others. Join this podcast for a look at key takeaways and insight into the 8-month-long working group drafting process. Lees meer
Speakers:
Lourdes Turrecha, Founder and CEO, The Rise of Privacy Tech
Kacy Zurkus, Content Strategist, RSAC -
What Do We Owe Each Other? Securing Systemic Dependencies and Beyond
8 december 2021 · 20 min
Recognizing that the security of our interconnected world is as interdependent and fragile as a Jenga puzzle, how do we ensure that the entire system doesn’t fall apart when a single block is pulled? What do we ow each other, and how do we work together to ensure those organizations—be they non-profits, NGOs, or public schools and institutions—have the resources they need to be resilient in the face of a cyberattack? In this podcast, we’ll examine the security poverty line and our systemic dependencies and explore what we owe each other in order to ensure a more secure world. Lees meer
Speakers:
Dr. Kelley Misata, Founder and CEO, Sightline Security
Kacy Zurkus, Content Strategist, RSAC -
Informed Consent in the Age of Big Data
16 november 2021 · 21 min
How much responsibility should people really bear in the big data realm? Does informed consent equate to waiving rights? Is it realistic that they understand how data travels and is there an incorrect underlying assumption that data is their priority when they are consenting to its collection or use? In this podcast, we will examine the reasons people sign consent forms (to access care or information), the limited ability of informed consent to protect people from hacking and cybersecurity breaches, and its irrelevance to compensating people whose data is aggregated, sold, and resold. We will explore the limitations of informed consent in governing data collection and use in the healthcare arena. Lees meer
Speakers:
Anne Zimmerman, Founder, Modern Bioethics
Kacy Zurkus, Content Strategist, RSAC -
Privacy Top of Mind at RSAC 2022
15 november 2021 · 19 min
The Program Committee for the RSAC 2022 Privacy track was challenged with selecting the top session that would make it onto the agenda, but privacy topics were not limited to this one track. So why is privacy trending, and what are this year’s privacy trends? Join two members of the Privacy Program Committee as they reveal their favorite picks and what attendees have to look forward to at Conference. Lees meer
Speakers:
Bernard Brantley, Chief Information Security Officer, Corelight
Francesca Ginexi, Privacy Policy Manager, Facebook
Kacy Zurkus, Content Strategist, RSAC -
Shift-left! Scanning for Security Compliance from Day Zero
12 oktober 2021 · 29 min
Migrating to public cloud introduces new attack surfaces commonly the exploitation of misconfigured resources. In a cloud landscape that contains millions of resources, how do we detect these threats. This session explores the journey from security policy documentation to scanning and detecting security compliance violations in product infrastructure from the start of the development life cycle. Lees meer
Joe McCrea, Cloud Security DevOps Engineer, SAP
Mariam Triki, DevSecOps Engineer, SAP
Kacy Zurkus, Content Strategist, RSAC -
Cloud Security & Cloud Sec Ops: Trends that Matter Most for 2022
8 oktober 2021 · 33 min
The importance of cloud security has, perhaps, never been more critical, following massive shifts to remote workforces and ramped up digital transformation across organizations of all sizes. In this podcast, two members of the Cloud Security & Cloud Sec Ops Program Committee discuss trends observed in their selection process for 2022 RSA Conference and what matters most as organizations look to secure and further mature their multi-cloud and hybrid deployments. Lees meer
Speakers:
Britta Glade, Senior Director, Content & Curation, RSA Conference
Shawn Harris, Director, Information Security, Starbucks
Rich Mogull, CEO/CISO, Securosis -
Turn It Up to 11: MITRE’s 11 Strategies for a World Class Cybersecurity Operations Center (CSOC)
27 september 2021 · 31 min
Refreshed and updated to include the latest technologies and best practices in cybersecurity operations, guests will share key takeaways from the new 11 Strategies for Operating a World Class Cybersecurity Operations Center (CSOC) book that will be coming out later this year. We will discuss the 11 strategies, how to balance the CSOCs core incident response mission with supporting functions such as threat intelligence and threat hunting, the importance of growing staff in house, and why the CSOC can never stop evolving. As with the original book, this new edition will include a free electronic version available to everyone. Lees meer
Speakers:
Kathryn Knerler, Department Manager, Cyber New Professionals Development Program, The MITRE Corporation
Ingrid Parker, Chief Engineer, Homeland Security Enterprise Division, The MITRE Corporation
Kacy Zurkus, Content Strategist, RSAC -
Pay What You Owe: Fiduciary Duty and Ransomware
9 september 2021 · 42 min
In today’s world, data is currency. With that in mind, organizations need to consider the fiduciary duty they owe to data subjects, especially when they suffer a ransomware attack. This session outlines what types of fiduciary duties organizations have, why paying a ransom falls under those duties, how negotiations mitigate harm, and three steps for effectively responding to a ransomware attack. Lees meer
Speakers:
Robert Fitzgerald, Founder and CEO, Arcas Risk Management
Karen Walsh, CEO and Founder, Allegro Solutions
Kacy Zurkus, Content Strategist, RSAC -
Cybersecurity Jobs that Don't Require a Cybersecurity Background
23 augustus 2021 · 26 min
Have you been wondering how to get into Cybersecurity? It may seem that you have to be a security tester or expert. It's not true! There are many paths into Cybersecurity using your existing experience, skills, and schooling. This talk will show the multiple paths people have followed into the Schneider Electric IT Security and Application Security organizations. Lees meer
Cassie Crossley, Director, Product Security Office, Schneider Electric
Kacy Zurkus, Content Strategist, RSAC -
Leveling Up Your Career
13 augustus 2021 · 21 min
You've gotten the job in tech—congrats! So now what do you do? We’ve heard stories from those who struggled with overcoming unexpected obstacles while new to the job. Let’s talk about what you can do to prepare for the unexpected. In this podcast, you’ll hear from an industry expert on ways to level up your career. This talk will provide various tools and resources to help navigate the tech space and make the most of what you have and help you in reaching your future goals. Lees meer
Speakers:
Mari Galloway, Chief Executive Officer and Founding Board Member, Women’s Society of Cyberjutsu
Kacy Zurkus, Content Strategist, RSAC -
Thinking about Android – A Multi-Faceted Discussion
26 juli 2021 · 27 min
Humans engage with Android technology in myriad ways, but how has the technology been used to date and how is it evolving? This podcast will explore the ways in which the Android ecosystem has evolved by looking at Android from a techno-sociological, security, and privacy context. We will discuss dimensions of privacy, the impact Android has had on humans, the kinds of threats we are seeing in the wild, the security challenges that need to be addressed, and the evolution of features like Digital Well Being. Lees meer
Speakers:
Aditi Bhatnagar, Product Security Engineer, Atlassian
Kacy Zurkus, Content Strategist, RSAC -
Trust, but Verify: Maintaining Democracy Despite Информационные контрмеры
22 juli 2021 · 34 min
In this podcast, we discuss how countries have influenced worldwide elections historically and in modern day using cyberwarfare. We explore how countries and critical infrastructure respond to these attacks and how they should respond in the future. By the end, we brainstorm the ways to disrupt a future election in order to understand how to better protect it. Lees meer
Geoff Hale, Senior Cybersecurity Advisor, Cybersecurity and Infrastructure Security Agency
Allie Mellen, Analyst, Security and Risk, Forrester Research -
The Ransomware Paradigm Change — Lessons from Insurers and Breach Coaches
23 juni 2021 · 50 min
Throughout 2020, ransomware was consistently amongst the most challenging cyber exposures for organizations to manage. The insurance market can provide critical insights on how to understand the evolving ransomware landscape, given the volume of insurance claims being seen and emerging data on loss and exposure trends. This session will bring together experts from across the cyber insurance and breach coach space and give end to end insights on the financial and organizational impact of ransomware, risk implications, and challenges that will be seen in the market. Lees meer
Speakers:
Marcello Antonucci, Global Cyber & Tech Claims Team Leader, Beazley
Benjamin Di Marco, Cyber Specialist, Willis Towers Watson
Christina Terplan, Founding Partner and President, Atheria LawThis episode is brought to you by Axonius. Axonius helps organizations immediately know what assets they have, and shows which devices, cloud instances, and users adhere to or deviate from security policies. Try it free at axonius.com/rsac
-
Hunting Sodinokibi: Insights from Tracking the King of Ransomware
6 juni 2021 · 32 min
Drawing on original research, the speakers will dive deep into one of the most prominent ransomware strains today: Sodinokibi/REvil. By tracking its operators’ activity in affected organizations, on the dark web, and through the group’s public blog, we will bring our collective insights to the audience, detailing how Sodinokibi operates, its malware uniqueness, and the damage it has inflicted. Lees meer
Speakers:
Limor Kessem, Executive Security Advisor, IBM Security
Camille Jackson Singleton, Strategic Cyber Threat Lead, IBM
Kacy Zurkus, Content Strategist, RSAC -
Who’s Driving Your Security Architecture Bus?
25 mei 2021 · 36 min
With the increased scale and pace of automated processes along with migrations to the cloud, proper design of security architecture becomes a critical component of your overall IT architecture implementation. Considering this, what should your business prioritize as the ultimate driver for security architecture decisions - and where does risk, privacy and compliance fit into the picture? Lees meer
Speakers:
Shinesa Cambric, CISSP, CISA, CISM, CDPSE, Principal Program Manager, Microsoft
Aparna Murthy, Aparna Murthy, CA, CPA, Principal Risk and Compliance Consultant
Kacy Zurkus, Content Strategist, RSAC -
The Journey Toward a Singular Security Framework: Lessons from Finland
13 mei 2021 · 20 min
Turku Energia - a Finnish energy distribution company - secured its power supply & IT network for the city’s 200,000 citizens. Utility SCADA systems are hacking targets, due to the damage that can be inflicted by sending cities dark or damaging the grids. The utility’s IT team ensured data integrity, visibility, and rapid threat detection and remediation within both IT and OT environments. Lees meer
Speakers:
Vikram Sharma, Senior Engineering Manager, IoT, Cisco
Kacy Zurkus, Content Strategist, RSAC -
The Art & Science of Using Cybersecurity Talent Frameworks & Taxonomies
22 april 2021 · 31 min
Study after study shows cybersecurity job descriptions lack clarity across most roles and industries — stifling talent recruitment, development and retention efforts. Infosec Institute and Aspen Cybersecurity Workforce Coalition will provide data-backed insights into how organizations are aligning job descriptions and training to tools like the NICE Framework, including what’s working and what’s not. Lees meer
Speakers:
David Forscey, Senior Policy Analyst, National Governors Association
Megan Sawle, VP of Research & Marketing, Infosec
Kacy Zurkus, Content Strategist, RSA Conference -
Catch a Hacker if You Can: Social Engineering Meets Risk Mitigation
13 april 2021 · 27 min
Rachel Tobac hacks people based on publicly available information. Camille Stewart encourages people to mitigate risk and defend against Rachel’s methods. We’re bringing these two industry leaders together for this one-of-a-kind podcast that will explore social engineering risks and highlight some best practices to help protect users and organizations. Lees meer
Presenters:
Camille Stewart, Cyber Fellow, Harvard Belfer Center and Head of Security Policy, Google Play & Android, Google
Rachel Tobac, CEO, SocialProof Security, White Hat Hacker
Kacy Zurkus, Content Strategist, RSA Conference -
Fraud on the Rise! An In-Depth Look at the FBI’s 2020 Internet Crime Report
25 maart 2021 · 24 min
The FBI’s Internet Crime Complaint Center received more than 791,000 complaints in 2020—a record number, representing a 69% increase over 2019. Join us for an in-depth discussion as we examine details of the report with FBI’s Cyber Division's Deputy Assistant Director Herb Stapleton. Lees meer
Speakers:
Herb Stapleton, Deputy Assistant Director, Cyber Division, FBI
Kacy Zurkus, Content Strategist, RSA Conference -
Reduce the Cybersecurity Risks for Property Management Systems through Secure Payment Practices
22 maart 2021 · 42 min
Hotel chain data breaches have resulted in huge financial loss and reputational harm. Unlike other consumer-facing businesses, such as retail stores, hotels must hold onto payment card data for extended periods passing this valuable data among many participants in the payment security ecosystem as customers make reservations and complete travel. In this podcast, our guests will identify and discuss how organizations can reduce the risks associated with handling payment card information for hotels and, in turn, begin to strengthen the cybersecurity of the property management system (PMS). For more information, visit NIST’s project on Securing Property Management Systems. Lees meer
https://www.nccoe.nist.gov/projects/use-cases/securing-property-management-systems
Speakers:
John T. Bell, Founder and Principle Consultant, Ajontech LLC
Arshad Noor, CTO, StrongKey
Bill Newhouse, Cybersecurity Engineer, National Cybersecurity Center of Excellence (NCCoE)
Kacy Zurkus, Content Strategist, RSA Conference -
Detect BEC and Vishing Attacks Before the Deal Is Done
16 maart 2021 · 30 min
Business email compromise (BEC) has made a comeback. Vishing calls have proven profitable for cybercriminals as well. How can you stay ahead of these threats and detect fraud before any money is sent? Join us for a podcast that discusses how these attacks work, who they target and why. Our guests will also offer tips on what to do both professionally and personally to limit risk—from small things like training those who are handling the financial transactions to working with the banks and the cyber team. Lees meer
Speakers:
Nicole Beckwith, Staff Cyber Intelligence Analyst, GE Aviation
Ursula Cowan, Threat Research Analyst, FireEye/Mandiant
Kacy Zurkus, Content Strategist, RSA Conference -
Could 2021 Be the Year of Product Security?
22 februari 2021 · 27 min
In the industrial space, we’ve seen more organizations bringing in Chief Product Security Officers—with good reason. Security needs to be baked into the products that companies are delivering to customers, particularly when there is a life/safety impact. But the need for product security extends beyond ICS and OT. Join us with our guests Megan Samford and Patrick Miller who will look at why product security is the new frontier of the cybersecurity industry. Lees meer
Presenters:
Patrick Miller, Founder, Director & President Emeritus, EnergySec and US
Megan Samford, Chief Product Security Officer, Schneider Electric
Kacy Zurkus, Content Strategist, RSA Conference -
Rising Flaws, and Slow to Fix: What’s at Stake for Software Security?
9 februari 2021 · 24 min
The majority of applications contain at least one security flaw and fixing those flaws typically takes months. Automating scanning and scanning via API can help development teams fix faster by a pretty wide margin. Veracode’s Chris Eng and Cyentia’s Jay Jacobs explore what’s driving the volume of code flaws, what factors influence fix rates, how organizations with higher fix rates are tackling the problem successfully, and automation as a best practice for DevSecOps and an action developers can take to "nurture" their apps to better security. Lees meer
Presenters:
Chris Eng, Chief Research Officer, Veracode
Jay Jacobs, Co-Founder and Chief Data Scientist, Cyentia Institute
Kacy Zurkus, Content Strategist, RSA Conference -
How to Apply Pandemic Principles to Battle Cyber Outbreaks
13 januari 2021 · 48 min
Principles of epidemiology can be effectively applied to cyber security, with some adaptations. What do travel quarantines and firewalls, social distancing and port closures have in common? Learn how much cyber incident responders can learn from the recent pandemic that effectively shut down so many of the human connections in the modern world. Lees meer
Presenters:
Steve Faruque, Cyber Security Manager, IBM
Dr. Manisha Juthani-Metha, Associate Professor of Medicine and Epidemiology and Infectious Diseases Specialist, Yale School of Medicine and Yale New Haven Hospital
Kacy Zurkus, Content Strategist, RSACThis podcast is sponsored by Axonius. Axonius is the cybersecurity asset management platform that gives organizations a comprehensive asset inventory, uncovers security solution coverage gaps, and automatically validates and enforces security policies.
-
What's Trending with Hackers & Threats
14 december 2020 · 26 min
The submissions and decisions have been made. The Program Committee’s selections will soon be announced. Before that happens join me and two members of a Hackers & Threats PC to discuss what trends they saw come through in this year's RSA Conference submissions. They'll also give a sneak peak into what attendees of RSAC 2021 have to look forward to on the Hackers & Threats track. Lees meer
Greg Day, VP and Chief Security Officer, EMEA, Palo Alto Networks
Nicole Little, Walt Disney Studios
Kacy Zurkus, Content Strategist, RSA Conference -
The Geopolitics of Cyber (In)security
9 december 2020 · 36 min
TikTok and Huawei are probably two of the most notable Chinese technology companies that are enveloped in policy debates. The US government's most recent actions against TikTok could be an indication of future actions that could be taken against Chinese technology companies. Join us for the important discussion about how geopolitical motivations impact technology regulations and international interference operations. We'll look at how Western businesses are changing their technology development, operations and staffing strategies in Greater China and much more. Lees meer
Gabo Alvarado, Managing Director, Pointe Bello
Katherine Koleski, Program Analyst, Defense Innovation Unit
Aaron Turner, President and Chief Security Officer, HighSide
Kacy Zurkus, Content Strategist, RSAC -
Mind the Gap: Strategies for Finding and Retaining Cyber Talent
12 november 2020 · 31 min
Sometimes the greatest obstacles we must overcome are the ones we put in front of ourselves. It’s no different for businesses or even for an entire industry. In cybersecurity, one of the greatest barriers to entry could be the perception people have of what cybersecurity is. Many outsiders believe a job in cybersecurity equals sitting in front of a screen and coding all day. So, how do we rebrand ourselves in order to develop talent from various diverse sources? Join us to discuss different strategies for addressing the talent shortage. Lees meer