Alle afleveringen
222 afleveringen, van nieuw naar oud
-
Increasing Threats to OT/ICS Assets Need a Robust Cybersecurity Program
11 november 2020 · 29 min
What is OT systems management and why is it so critical to protecting our critical infrastructure? What are the necessary controls to ensure ICS/OT cybersecurity? A comprehensive program includes a range of controls and design efforts, In this podcast, industry leaders will discuss the challenges and requirements of protecting Operating Information Technology systems, which includes the need for establishing OT Systems Management, a holistic approach to hardening, updating, maintaining, and monitoring the endpoints and networks in industrial environments. Lees meer
-
Election Security Concerns, Expectations and How You Can Get Involved
22 oktober 2020 · 44 min
Though concerns over election security did not begin with the 2016 Presidential election, new and emerging threats coupled with an expanding attack surface have exacerbated what were already major security concerns for municipalities, states and the federal government. So what is the current risk environment and what has changed in CISA and the FBI’s cyber missions? We’ll answer these questions and offer tips on how the tech community and citizens can get involved in this can’t miss podcast. Lees meer
-
Networking with the Right People
12 oktober 2020 · 33 min
Networking has many advantages and has the potential to open doors of opportunity, but how do you identify the right people to network with? What do you bring to the table and what are you looking for from others? Join us for an engaging exchange with two industry leaders who will share their perspectives on the value of education, experience and relationship building. They’ll share advice on how to meet security practitioners, motivate other, be a well-rounded worker and an industry influencer. Lees meer
-
Zero Trust Architecture: The Defacto Network Segmentation Approach
29 september 2020 · 36 min
Agility is not a strategy, and Zero Trust is not a product you can buy. In a Zero Trust approach as identity becomes more important than ever, managing the lifecycle correctly is critical, during provisioning, use as well as destruction. These are some of the reasons why Zero-trust architecture is becoming the defacto segmentation approach in our digital-first world. Interrelated are the opportunities in both Edge Computing and DevSecOps to help businesses differentiate products and services by transitioning to more collaborative and risk-based security. Join us as we discuss Zero Trust, DevSecOps and Edge Computing with two industry experts who will explore the ways in which these approaches to customer-centric transformation can help businesses stay competitive. Lees meer
-
Proactive Steps to Securely Build for the Future
21 september 2020 · 24 min
COVID-19 has forced enterprises to adopt new ways of working in order to ensure their data remains protected as they navigate the impacts of the global pandemic and manage a distributed workforce. As more employees work remotely and an organization’s attack surface area increases, it’s never been more important to invest in security. At the same time, IT budgets are shrinking and security is at risk of being deprioritized or compromised in this new reality, where many employees are working from home and not on secure corporate networks. The only way to protect organizations is by protecting your endpoints, and in this podcast, we’ll discuss how adopting a zero-trust strategy can help organizations quickly adapt and prepare for a different post-pandemic world. Lees meer
-
How Diversity is Key to Risk Management
25 augustus 2020 · 25 min
As Camille Stewart wrote, “Cyber diplomacy and international cyber capacity building are better served by having diverse representation that understands the cultural nuances that determine how technology will move through a society.” Similarly, when it comes to managing security risk management programs, diversity matters. Risk management has many challenges, which is why a team can only be enriched and strengthened by including those with a vast range of experiences. There is no one-size-fits-all when it comes to risk management, however being attune to issues of race and other forms of discrimination and how they manifest themselves in their work, will result in building better programs. In this podcast, we will hear from esteemed industry experts who will share their different perspectives on why diversity matters to risk management and the consequences of not addressing the lack of diversity in cybersecurity and risk management. Lees meer
-
Why Your Security Organization Needs a Communications Lead
19 augustus 2020 · 30 min
Having a communications person as part of the security organization ensures that the enterprise communicates security not only through awareness programs but also across silos. A security communications lead plays a critical role in developing and executing incident response plans as well as other security policies that impact the business. In order to effectively create a security aware culture, your security organization needs to be able to communicate the risks, the strategies to mitigate risks and the policies that must be followed in the event of a security incident. People need to understand their roles and responsibilities, which need to be clearly communicated. In this podcast, we will hear from industry experts who will help you understand the value of and implement good, clear security communications. Lees meer
-
“Robot Downsizing”—How the Ultimate Solution to Security is Human
21 juli 2020 · 36 min
Security vendors come to the rescue with AI and automation to save the day. But even smart technology can only go so far, and while it can definitely help lessen the noise, it can never replace the intuition, inventiveness and insight of a human.Technology can’t replace humanity in security defense because endpoint lockdowns don’t work, and repetitive scenarios don’t advance anything but boredom. Rather, we need to give users the tools to be skeptical, aware and intuitive. Analysts need to find patterns in the process, not just the results. Security teams need to work together and across an environment to find what can be fixed, not just what individuals can break, and technology needs to assist, amplify and augment human behavior, not lead. Lees meer
-
Researcher Relations: Building Trusted Relations Between Security Researchers and Organizations
9 juli 2020 · 38 min
Security is one of the most evolving and impactful landscapes in the regulatory sphere. Proposed initiatives in the areas of Internet of Things (IoT) security and Coordinated Vulnerability Disclosure (CVD) are among the most active and developing areas of security regulation around the world. The vulnerability disclosure landscape has been rapidly evolving for the past decade, but there’s still a way to go. In this podcast, we’ll talk with industry experts about policy trends and how to build trust and understanding so that developers, researchers and vendors can all work in harmony toward the goal of promoting security. Highlights will include researchers’ collaboration, IoT Security, anti-hacking laws. We will also talk about bug bounties and vulnerability disclosure programs, what are some of the industry's best practices in this area, and how to implement programs at your organization to foster security, collaboration and transparency. Lees meer
-
Contact Tracing: Ethics in Privacy and Technology in a Post COVID World
1 juli 2020 · 35 min
As the world continues to navigate what a “return to work” environment will look like and how that will play out for businesses, many are concerned about contact tracing, their role in becoming a point of contact and the privacy concerns inherent in the collection of all that data. In this podcast, we will be talking with privacy experts who will discuss how legislative proposals are responding to specific trends/worries in pandemic data response. While both are a bit bearish on any actual legislation being passed at the state/federal level, there are generalized privacy concerns that companies and employers would be wise to consider as we try to open post-COVID. Lees meer
-
We're Facing a Remote Working Future and It's a Security Opportunity
15 juni 2020 · 32 min
Pieter Danhieux and Fatemah Beydoun both have a long history of working remotely, but as their company moved to a completely remote work environment in response to the COVID-19 global pandemic, it presented its own set of challenges... along with some very compelling benefits. This unprecedented situation has shown many companies that remote work is not only possible, it's the future. And it's a great opportunity to improve cybersecurity and general security awareness. Lees meer
In this podcast, Pieter and Fatemah detail how remote teams can be effective and secure, the benefits of access-anywhere collaboration tools and cybersecurity training, and how the time won back from eliminating commutes can be used to bolster a workforce to weather larger storms, including improving development practices and considering security much earlier. With cyberattacks on the rise, it's a great time to assess and improve your security culture.
-
Do This, Not That! How Remote Workers Can Secure Home Networks
29 mei 2020 · 32 min
Yes, there are enterprise tools security teams are using to mitigate the vulnerabilities of a remote workforce, but with all the connected devices in a given home, they need to help of their employees. In this podcast, we will talk with consumer-facing security pros who can provide steps your remote workforce can take to shore up their home networks, making their homes and your business less vulnerable to cyber attacks. Lees meer
-
Finding Balance Between Surveillance & Safety
29 mei 2020 · 38 min
As countries across the globe work through various phases of opening and trying to return to a new COVID-19-tinged normal, contact tracing is a core tenant to many plans. The slippery slope of providing data to authorities to understand if shelter at home guidance is being followed to potentially using this data to alert individuals to potential exposure can serve a short term good to public safety measures, but this data is persistent, so what are the longer term downsides to increased surveillance activities. Who is the custodian of this data? How might it be utilized? How should it be governed? Many new shades of grey have emerged in the last few months will be explored in this podcast. Lees meer
-
Finding Balance for Cybersecurity Pros
19 mei 2020 · 34 min
Life can be downright overwhelming at times. With the stress of work and home life, one’s personal well-being can often take a back seat—but it shouldn’t. When you’re not sleeping well or sleeping at all, it has a dramatic effect on your job performance and your overall mood. Join us in this open and frank discussion why cybersecurity professionals need to take a step back and evaluate their own physical and mental health in order to find balance. Lees meer
-
Will You Emerge as a Leader in Your Organization by Enabling Innovation?
5 mei 2020 · 19 min
Right now we are in what Matthew Chiodi, CSO Public Cloud, Palo Alto Networks, calls the Opportunity. There is a temptation when events like this happen to be narrowly focused on just keeping the lights on. The Opportunity Zone presents three unique opportunities: Time to reflect, Time to transform and Time to experiment. In this podcast Chiodi will dive a little deeper into how you can take advantage of the Opportunity Zone in order to enable innovation and emerge as a new leader in your organization. Lees meer
-
Communications Tips for Managing an Incident
4 mei 2020 · 22 min
When managing an incident, communication is critical. In this podcast Kim Albarella Senior Director, Global Security Organization Security Advocacy at ADP will share tips for efficient and effective communications. We’ll also discuss what lessons ADP has learned through the pandemic and how businesses can apply those lessons to their future crisis and incident response plans. Lees meer
-
How to Deal with the Security Challenges of Disruptions in Supply Chain
1 mei 2020 · 32 min
Supply chains are disrupted across all industries, which makes for back-ordered webcams and many other products being unavailable. But what happens when mission-critical services completely go down? What are the cybersecurity challenges that organizations have been faced with because of the impact of the global pandemic, and how can security teams deal with these challenges? Lees meer
-
How a Global Crisis Changes the Threat Landscape
27 april 2020 · 29 min
Threats evolve and change, but many of the threats in the attacker’s playbook are hardly new. They have been around for a while. What has changed in recent weeks is the threat landscape, but why and how? In this podcast we will look at how a global crisis can change the threat landscape and how industries can work together to effectively navigate those changes. Lees meer
-
Incident Response Analysis vs. Automation: What Matters Most Right Now
27 april 2020 · 21 min
Across all sectors, security teams are dealing with an increased number of incidents. In our latest podcast, Tim Bandos, Vice President, Cybersecurity at Digital Guardian and Jennifer Ayers, VP, OverWatch and Security Response at CrowdStrike discuss what you can do right now to improve incident response, specifically when working remotely. Lees meer
-
Perspectives on the Times with RSAC AdBoard Members
15 april 2020 · 43 min
RSA Conference Advisory Board members Todd Inskeep and Caroline Wong weigh in on security implications/risks of working fully remotely, the rise of misinformation and phishing campaigns, and the impact that these challenges are having on the mental health of security teams. Lees meer
-
Revisiting Mobile MFA Madness to Improve Device Hygiene and Integrity Challenges
14 april 2020 · 24 min
Industry leaders across the globe joined together at RSA Conference 2020 to talk security. During one of those talks, Mobile MFA Madness: Mobile Device Hygiene and MFA Integrity, the presenters demonstrated how easy it is to compromise mobile authenticator apps. Then the world went mobile—with employees either working remotely on corporate devices or accessing corporate assets on their own mobile devices. In this podcast, we will revisit the topic and look at how the current cybersecurity challenges and disruptions in supply chains are impacting mobile. Lees meer
-
Humans and technology. A complicated—and fascinating—pair.
13 maart 2020 · 30 min
Not surprisingly, the Human Element was a theme that everyone could relate to RSAC 2020. And it’s a conversation that’s just beginning. In this podcast, Britta Glade and Hugh Thompson talk to behavior expert Alexander Stein, PhD, and Auto Club Group CISO Gopal Padinjaruveetil about the symbiotic relationship between humans and technology—and what it portends for the future of cybersecurity. Lees meer
-
The Most Memorable Moments from RSAC 2020 USA
28 februari 2020 · 11 min
What were some of the standout moments and most buzzworthy topics from RSAC 2020? Find out as Britta Glade and Hugh Thompson weigh in during this podcast that was recorded in the midst of all the Conference action.
-
Growing Developer Challenges Spur New RSAC Tracks
16 januari 2020 · 28 min
RSAC is where the world talks security—and it’s a conversation that evolves each year based on the needs of the cybersecurity community as a whole. A timely example of this is the debut of two new tracks at RSAC 2020: product security and open source tools. In this podcast, Britta Glade talks to Rockwell Automation’s Megan Samford and SecurityCurve’s Ed Moyle about the latest software development issues that helped fuel the creation of these tracks. Lees meer
-
Threats of Surveillance Tools: Spyware and Stalkerware
16 december 2019 · 27 min
Sit in on a fascinating discussion with David Ruiz and Diana Freed, two security professionals who are passionate about the threats posed by surveillance tools, particularly spyware and stalkerware. They’ll describe the work they’ve been doing independently and collaboratively to help protect victims and their personal data from unwanted surveillance. Lees meer
-
Security Coming Together: The Convergence of IT and OT
6 december 2019 · 14 min
While physical security has traditionally reigned supreme within the industrial and manufacturing sector, disruptive attacks such as NotPetya demonstrate the need to adapt IT security best practices to an OT environment. In this podcast, Britta Glade talks to Johnson & Johnson’s Roy Gundy and Rockwell Automation’s Dawn Cappelli about how CISOs and OT cybersecurity leaders can work together to create a converged security program. Lees meer
-
Hey Google, Activate Spyware
22 november 2019 · 17 min
In today’s digitally connected world, security vulnerabilities can literally pop up in a flash. In this podcast, Britta Glade talks to Checkmarx’s Erez Yalon about how he and his team discovered an Android camera app vulnerability that could allow hackers to access videos and photos—and even spy on users. Lees meer
-
Diversity’s Indispensable Role in Cybersecurity’s Future
15 oktober 2019 · 34 min
As cybersecurity continues to encompass more areas of our lives, the value of different perspectives becomes increasingly clear. In this podcast, Britta Glade and Hugh Thompson talk to KnowBe4’s Perry Carpenter and cybersecurity consultant Prudence Smith about the benefits of a diverse workforce—not only for individual companies, but for the industry as a whole. Lees meer
-
Incident Response: Debunking the Myths and Misconceptions
13 september 2019 · 32 min
Though incident response (IR) is a key component of any cybersecurity protocol, it’s also surrounded by misconceptions that give rise to a number of questions. Are a security event and incident the same? Will machines soon outperform humans in the arena of IR? Are threat actors truly that much more advanced? To help separate fact from fiction, Britta Glade and Hugh Thompson turn to Kristy Westphal, VP, CSIRT, Union Bank, and Robert Lee, CEO, Dragos, Inc. Lees meer
-
Mitigating 5G Security Risks
8 augustus 2019 · 40 min
The fast-approaching 5G revolution will bring fundamental changes—many of which give rise to a whole new world of security challenges. In this podcast, Britta Glade talks to Hotshot Technologies’ Aaron Turner and special counsel Randy Sabett about how organizations can best mitigate these risks. Lees meer
-
Insider tips for RSAC 2020 Speaker Proposals
26 juli 2019 · 7 min
Have an area of expertise than can benefit other cybersecurity pros? In this RSAC podcast, Britta Glade and Hugh Thompson share how to submit a speaker proposal that will stand out during the selection process.
-
Highlights from RSA Conference 2019 APJ
26 juli 2019 · 9 min
With such a packed agenda at RSAC 2019 APJ, you might be wondering if you missed something significant. The good news is you can catch up on the trends and topics that had everyone talking when you listen to our podcast—recorded live at Conference.
-
Security Hygiene Gets a Refresh in the Wake of Baltimore's Cyberattack
24 juni 2019 · 26 min
The City of Baltimore’s recent ransomware incident not only caught government servers by surprise. It also jolted the industry as a stark reminder that cyberattacks can still occur where and when they’re least expected. Not the most comforting prospect—but are there constructive takeaways to be gleaned in the aftermath? Lees meer
Helping us uncover these silver linings are Duo Security’s Wendy Nather and LEO Cybersecurity’s Andrew Hay. Some of the topics to be covered in this podcast include:
• How the Center for Internet Security’s Top 20 Critical Security Controls remains an effective guide for preventing cyberattacks—regardless of a company’s security budget
• The importance of educating all employees on the need for good cyber hygiene habits
• Taking a first-responder approach to dealing with a cyberattack, such as immediately bolstering IT staff
Related links:
https://www.colorado.gov/pacific/dhsem/atom/129636
https://www.cisecurity.org/controls/cis-controls-list/
https://sightlinesecurity.org/ -
Can Cryptography Save Our Elections?
23 mei 2019 · 29 min
It’s a key component of Microsoft’s new ElectionGuard. And as the world becomes increasingly hyperconnected, cryptography will be called upon to protect much more than our votes. In this podcast, Britta Glade talks to Microsoft Research’s Josh Benaloh and NIST’s Matthew Scholl about applied cryptography’s expanding role. Lees meer
-
GDPR: Where We Stand and What's to Come
19 maart 2019 · 22 min
GDPR is not even a year old but in that short time, it’s dramatically changed how companies handle and are held accountable for the data they use. But beyond companies, the main purpose of GDPR was to protect and empower consumers. So, how well is it working? Lees meer
With the help of Bree Fowler, Technology Writer at Consumer Reports and John Elliott, Data Protection Specialist, this month’s RSAC Podcast focuses on how GDPR has impacted consumer expectations and their willingness to share personal information. During the episode, our experts will answer these questions and more:
• When it comes to understanding a company’s privacy policies, what responsibility does the consumer assume?
• Are there situations where consumers should push back and ask for more diligent privacy and data use regulations?
• How much information is “appropriate” for companies to gather from their users? -
Highlights from RSA Conference 2019 USA
8 maart 2019 · 18 min
Britta Glade and Hugh Thompson talk about their take on highlights from the week at RSA Conference 2019
-
Bridging the Gap at RSAC 2019: Cybersecurity + Public Interest Tech
28 februari 2019 · 24 min
As cybersecurity seeps deeper into so many areas of our lives, it’s more important than ever for technology creators and policy makers to work together for the benefit of society as a whole. That’s the backdrop for our new track at RSAC 2019, Bridging the Gap: Cybersecurity + Public Interest Tech, brought to you in partnership with Bruce Schneier and the Ford Foundation. In this podcast, Britta Glade talks to Bruce and the Ford Foundation’s Jenny Toomey as they discuss some of the topics that will be covered during the day-long track, including how cybersecurity and social progress are becoming increasingly intertwined—and how infosec professionals can contribute to positive change both individually and collectively. Lees meer
-
RSAC 2019 CISO Boot Camp
11 februari 2019 · 19 min
Get a head start on Boot Camp with our CISO-focused February podcast episode. In it, RSAC CISO Boot Camp speakers, Dawn Cappelli, VP Global Security and CISO of Rockwell Automation, and Tim Callahan, SVP of Global Security and Chief Security Officer of Aflac Inc., will share their vision for RSAC CISO Boot Camp and preview topics that’ll be covered in March. Lees meer
-
Our Own Worst Enemy: Tackling the Social Engineering Problem
13 december 2018 · 39 min
As it turns out, the weakest link in any cybersecurity solution is…us. More than ever, hackers are using a variety of social engineering scams designed to fool people into giving up personal information voluntarily. So how do you protect us from ourselves? Join hosts Britta Glade and Hugh Thompson and their guests Ira Winkler of Secure Mentem and Lance Hayden of Elligo Health Research for a wide-ranging discussion on what to do about the human problem, including establishing protocols, creating a Human Security Officer position and more. Lees meer
-
Speaking of the Future: InfoSec Trends for 2019
20 november 2018 · 16 min
Every year, RSA Conference receives hundreds of submissions from potential speakers. It’s the job of the RSAC Program Committee to examine every submission. Taken as a whole, these submissions form a fascinating view into the trends that will affect the industry in 2019 and beyond. In this podcast, you’ll hear from six Program Committee members as they discuss the trends they discovered that will be most relevant to you in the coming year. Lees meer
-
Getting employees on board with cybersecurity awareness
19 oktober 2018 · 22 min
In the 15 years since cybersecurity first received an October shout-out, technology has grown in leaps and bounds. But one thing that’s remained constant? The vital role that humans play in not only creating these advancements, but in driving their success and—often unknowingly—contributing to their limitations. In this episode, we talk with two awareness experts who share how best to secure our most important infosec asset: people. Lees meer
Some of the topics that we’ll cover include:
•What are the core tenants of awareness training beyond phishing warnings?
•What do you say to an IT team that believes it can code its way to complete safety?
•How do you persuade employees to pay attention to cybersecurity—especially those who are working remotely from home networks? -
Shining a Light on Infosec Futures
20 september 2018 · 38 min
What are some career tips for future cybersecurity professionals? Get the answers as Britta Glade talks with Founder and Managing Director, Ursus Security Consulting LLC, Kim Jones and Stanford University student Maggie Engler.
-
Technology trends to keep on your radar
23 augustus 2018 · 35 min
Britta Glade and Dr. Hugh Thompson delve into the latest cybersecurity technology developments with Microsoft’s Diana Kelley and Denim Group’s John Dickson. Lees meer
Topics to be covered include:
•What is data gravity and how can it help analysts in the SOC/CDOC?
•How can security strategies be adapted for DevOps application developments?
•What are the advantages of using a layered machine learning (ML) model over a single ML?
•Are humans in danger of being replaced by artificial intelligence? -
The ABCs of prioritizing cybersecurity. Emphasis on C.
12 juli 2018 · 35 min
Britta Glade and Hugh Thompson talk with State of Colorado CISO Deborah Blyth and Oracle CSO Mary Ann Davidson about the relationship between cybersecurity and the C-Suite—and the repercussions when the two go their separate ways.
-
Words That Have (Cybersecurity) Consequences
18 juni 2018 · 28 min
Britta Glade and Hugh Thompson interview IBM Security’s Etay Maor and Symantec’s Dr. Saurabh Shintre about their upcoming artificial intelligence and blockchain seminars at RSAC 2018 Asia Pacific & Japan.
-
NIST Cyber Security Framework
10 juni 2018 · 26 min
Tasked with creating a cybersecurity policy framework, the National Institute of Standards and Technology (NIST) had its work cut out for it—and then some. After all, it’s one thing to agree that organizations and the nation’s critical infrastructure need to be protected. And another to find common ground on how best to proceed. In this episode, we take a look at how the NIST Cybersecurity Framework was born, and where it’s headed once the recently drafted—and more user friendly—updates go into effect. Lees meer
Some of the topics we cover include:
•To what degree are both the public and private sectors guided by the Cybersecurity Framework?
•In what ways does the Cybersecurity Framework address various technologies such as IoT?
•How does the Cybersecurity Framework weigh in on the challenges specific to vertical industries? -
Securing Government and National Infrastructure
24 mei 2018 · 32 min
Cybersecurity has come a long way. But unfortunately, with every bit of progress the industry makes, threats and risks are never far behind. Especially now, in the midst of a turbulent political atmosphere, cyberattacks put everything from personal data to personal liberties at stake, leaving our government to address the biggest uncertainty of all: where do we go next? Lees meer
Joining hosts Britta Glade and Hugh Thompson, along with guests Jason Healey, a senior research scholar at Columbia University’s School for International and Public Affairs, and Dmitri Alperovitch, co-founder and CTO of CrowdStrike, as they team up for our newest RSAC podcast episode. Topics covered will include:
•What does today’s threat landscape look like and how can we address its many challenges?
•Have there been changes in breakout time and speed of adversary activity within compromised networks and what does that mean for future security priorities?
•How can infosec professionals engage Boards and other governing bodies in discussions of cybersecurity policy?
•What challenges are unique to protecting critical infrastructure? -
An Inside Look at Highlights from RSA Conference 2018 USA
20 april 2018 · 20 min
Britta Glade, Curator and Director, RSA Conference and Hugh Thompson, Program Committee Chair, RSA Conference
-
RSAC Interview With Tim Jenkin
19 april 2018 · 40 min
Davi Ottenheimer, of MongoDB, interviews Tim Jenkin, winner of the Excellence in Humanitarian Service award at RSA Conference 2018.
-
Innovation
26 maart 2018 · 22 min
Here’s something to ponder: In an alternate universe, where would cybersecurity be today without the continuous pursuit of innovation? While we can only guess, one thing is pretty certain. Cyberattackers would be a lot happier in that universe than they are here. In this episode, we take a look at multiple aspects of industry growth—from revenue and investments to tech advancements and opportunities. Lees meer
Some of the topics we cover include:
•What investment strategies are VCs employing in 2018, and how do they differ from previous years?
•What criteria should buyers consider in choosing startups to add to their security portfolios?
•Based on where the industry is headed, what new and exciting developments can we expect at the RSAC 2018 Early Stage Expo?