In this episode of #CISOLife, hosts Brian Haugli and Dmitriy Sokolovskiy, delve into the dynamics of the RSA Conference, exploring its evolving relevance and the broader implications for cybersecurity. They discuss the nature of cybersecurity events, the benefits of smaller, local conferences like Secure World, and the importance of vendor relationships and ROI in cybersecurity. The conversation also touches on recent news involving TikTok and Kaspersky, highlighting the cybersecurity and geopolitical concerns associated with these companies.Key Points Covered:RSA Conference Overview:Brian and Dimitri discuss the RSA Conference's shift from a must-attend cybersecurity event to one that may not offer the same value for everyone. They note that while the conference was previously a hub for significant industry insights, it now serves more as a networking event.Local vs. Global Conferences:The hosts compare the benefits of global conferences like RSA to regional events like Secure World in Boston, which offer more focused networking opportunities and potential for local partnerships.Cybersecurity Event ROI:Discussion on the return on investment for companies participating in cybersecurity conferences, emphasizing the strategic considerations for both established companies and startups.TikTok and Cybersecurity Risks:The episode addresses the security risks associated with TikTok, including data privacy concerns and the potential for foreign influence, reflecting on recent U.S. government actions to potentially restrict the app.Kaspersky's Scrutiny:They also cover concerns around Kaspersky, given its Russian roots and the potential risks this poses in terms of data privacy and national security.Call to Action:Encouragement for viewers to engage with the topics discussed by commenting on their experiences with cybersecurity events, and sharing their perspectives on TikTok and Kaspersky.Conclusion:The episode wraps up with a discussion on the importance of understanding the sources of one's information and the implications of misinformation online, stressing the need for vigilance in digital consumption.Engagement: Viewers are invited to subscribe for more insights from CISOLife, share their experiences, and follow the discussion on various social media platforms using the hashtag #CISOLife.

"#CISOlife" is a podcast that explores the challenges and strategies of cybersecurity leadership. In a compelling episode, host Brian Haugli welcomes Andrew Pendergast, Managing Director at NFP, to delve into the intricacies of Directors & Officers (D&O) Insurance. This episode provides a thorough breakdown of how D&O Insurance operates and its significance for Chief Information Security Officers (CISOs). Pendergast, with his extensive expertise in insurance and risk management, discusses the coverage aspects that are particularly relevant to CISOs, highlighting how this type of insurance can protect against personal liabilities that may arise from the decisions and actions taken in their professional capacities. This discussion is invaluable for CISOs and other executives who want to understand the protective measures available to safeguard their personal and professional interests.

What does good look like?

Review of an engagement and initial work as the CISO or a vCISO. More at SideChannel

Why do organizations start a cybersecurity program? 

1. Customer demands 

2. Board or C-suite requests 

3. Regulation requires it 

4. Right thing to do 

5. Post post breach

Assess against a cybersecurity standard, framework or regulation

Build cybersecurity roadmap to address gaps

A #CISOlife overview of the public information of the recent American Airlines breach by Brian Haugli, CEO, SideChannel.    

Brian presents an explanation and walk through of how an O365 tenant can be hacked where legacy authentication methods are still available; specifically with IMAP.  

The info released so far shows a series of steps:

vCISO provider SideChannel's approach to building a cybersecurity program for startups and mid-market companies.  

[2:15] The vCISO should be able to do the following (part of the #cisolife)  

[3:30] Develop, or mature currently existing, documentation for the following:  

[4:30] Information Security Strategy (3 to 18 months) - taking into account information from Risk Assessment and Gap Analysis  

[5:15] Enterprise Information Security Policy, including, but not limited to; -Acceptable Use Policy -Data Governance & Classification Policy -Asset Inventory & Device Management Policy -Incident Response Policy -Remote Access & Identity Management Policy -Mobile Security Policy -Vulnerability Management Policy -Third Party Risk Management Policy -Disaster Recovery Plan -Incident Response Plan  

[9:15] Risk Assessments - guided by the organization’s overall risk management process or previous risk assessment activities.   

[9:45] Determine, Analyze, and Prioritize Gaps - compare the current profile and the target profile to determine gaps  

[10:00] Information Security Governance - using the NIST CSF v1.1 framework; provide oversight to ensure that risks are adequately mitigated, and then support management to ensure that controls are implemented to mitigate risks.  

[11:40] Managed Security Services - support the implementation of end-point detection and response (EDR) capabilities and mature to a 24/7/365 monitoring and response function via internal or external resources.  

[12:00] Incident Response - outline and develop incident response functions for the enterprise to respond to cyber events, incidents, and crises.    

[12:45] Vulnerability Management & Secure Configuration - structure function for the discovery and remediation of vulnerabilities discovered from lack of patching or unknown vulnerabilities in accordance with severity established in Vulnerability Management Policy.  [13:35] Third Party Vendor Risk Management (TPRM) - provide resources to respond to third-party risk assessment questionnaires (incoming)  and conduct third party risk assessments of vendors (outgoing);  

[13:50] Cybersecurity Training and Awareness - identifying and aligning security and training awareness topics to focus on where security intersects with the business mission and aligns content to ensure the goals and objectives of the program are met.     

Follow us -  

Website - http://www.sidechannel.com

LinkedIn - http://linkedin.sidechannel.com

YouTube - http://youtube.sidechannel.com

Facebook - http://facebook.sidechannel.com

Twitter - http://twitter.sidechannel.com

Podcast - https://anchor.fm/cisolife

Spotify - http://spotify.sidechannel.com

iTunes - http://itunes.sidechannel.com

Brian Haugli & David Chasteen discuss potential impacts on privacy post Roe v Wade being overturned by the Supreme Court.  Both share ideas and concerns that could have negative impacts on privacy and personal data usage by companies using big data analytics.  #cisolife #cybersecurity #privacy

Overview of Access Control & Zero Trust concepts, specifically with system to system & user to system access.  

Ideal outcomes for micro-segmentation using software defined networking (SDN) include: