Crump on Cyber

In this special episode we explore the tactical and strategic elements of the MGM cyberattack with special guests Ernie Edmonds, Sreenu Pasunuri, and Bob Zukis.

In this episode we explore the structure of cyber crisis management and the function of ransomware negotiations with special guest Jurgen Weiss.

In this episode we discuss the credibility issues facing CISOs due to poor management of major cyber incidents/cyber crisis leadership with special guest Chris Gebhardt.

This episode explores NIST SP 800-171/CMMC security control SC.L2-3.13.2 Security Engineering with guest Ernie Edmonds.

DFARS 252.204-7012 is front and center for the DoD's new Cybersecurity Maturity Model Certification (CMMC). This means the equivalency of FedRAMP Moderate is important to understand. Special Guest, Alexy Johnson lays down the foundations...and more.

We bring in Rust software development expert, Trevor Sullivan, to put ChatGPT's ability to generate Rust code. Does it compile? Will it run?

Risk management is a broad field with unique context when it comes to cybersecurity. This episode introduces the basic concepts of risk management, risk strategy, and various risk management models and tools such as Factor Analysis in Information Risk (FAIR), the U.S. federal government's Risk Management Framework (RMF), and ISO 31000. Special guest, Philip Lefeber shares his expertise on the subject.

This episode is an extension of episode 2 regarding cybersecurity careers, with a focus on military veterans transitioning from active duty into the open job market. We explore the current recruiting challenges facing the U.S. military and what is behind them, the implications of having fewer recruits, and therefore fewer cybersecurity personnel transitioning out, and how veterans can best prepare for the career transition. Special guest, Logan Therrien, is a 24-year Navy veteran who recently transitioned; he shares his story and offers advice to his peers.

The U.S. Department of Defense (DoD) is rolling out a new cybersecurity program to help protect sensitive information across the defense supply chain. The new program is called the Cybersecurity Maturity Model Certification (CMMC), which leverages security controls from FAR 52.204-21, NIST SP 800-171 and NIST SP 800-172. An ecosystem is being developed to help organizations within the defense industrial base (DIB) establish the controls and prepare for assessments. We explore the CMMC with special guest, Leia Shilobod.

They say there are 770K open cybersecurity jobs but job posts from companies for entry level positions are ridiculously out of touch with reality (e.g., master's degree and five years of experience). We explore these issues and strategies for breaking into the field with Freddy Cook from Cyber Pathways and Tim Catlin, a candidate trying to land his first cybersecurity job.