In this conversation, Sandeep Batta, lead solutions architect for IBM Hyper Protect, discusses the importance of a zero trust cybersecurity model. Sandeep particularly focusses on the rise of digital assets, the implications of quantum computing, and the necessity for organizations to adopt quantum-safe encryption. He emphasizes the need for a secure environment to protect critical data and infrastructure and the role of crypto services in ensuring data security. He also touches on the critical importance of hardware security modules (HSM) in data protection. The discussion also covers the necessity of building secure software pipelines, highlighting the importance of trust in technology. Kevin also signs off for the season with this episode. Stay tuned for Season 4!

Kevin Szczepanski is joined by insurance and technology veteran analyst and author Barry Rabkin as they take a deep dive into all things cyber, cyber risk, and insurability. Barry sets the stage by addressing the evolution of cyber risk and noting that the CrowdStrike outage was both a wake-up call and a harbinger of what’s to come. Kevin and Barry then discuss cyber and operational technology (OT) vs information technology (IT). Their deeper dive into what cyber risks are (“corruption, disruption, destruction, nuisance, and theft”) leads them to note that our world, instead of terraforming, is cyberforming. Listen in as Barry shares more, including about his forthcoming book, “Ramifications of Insurance Commerce in the Cyber Age.”

Kevin Szczepanski and Brian Haugli, CEO of SideChannel, discuss the implications of the recent CrowdStrike incident. CrowdStrike, an endpoint detection and response (EDR) provider, pushed an update that caused worldwide system crashes and downtime for their customers. Brian and Kevin analyze what happened and look at how CrowdStrike responded. The EDR is still being criticized (and in some cases sued) for its process, timing, and lack of empathy and accountability. The incident raises questions about vendor selection, procurement contracts, and the need for better control and auditing of software updates. Kevin and Brian emphasize that it’s still important to maintain good security practices, including embracing EDR technology. One outcome of the incident, they add, is looking at the role of the government in regulating EDR firms.

In this episode, Kevin Szczepanski and Dean Mechlowitz of TEKRiSQ discuss the blind spot that organizations may have when it comes to cyber risks and the need for a cyber risk assessment. They note that the tactics used by criminals to compromise data often don’t require a highly skilled hacker, yet many organizations believe they are secure. Dean emphasizes the importance of conducting a cyber risk assessment to identify and prioritize risks based on the type of data, technology, processes, and regulatory requirements of the organization. Kevin and Dean also discuss the role of cyber insurance in risk management. Listen in to make sure you’ve done what you can to protect your business. 

In a quick solo episode, host Kevin Szczepanski offers

Kevin Szczepanski and guest Laura Zaroski, managing director of Gallagher's law firms practice, discuss law firms’ varied responses regarding the use of generative AI: some embrace it while others prohibit it. They also explore benefits and risks of using AI, including the importance of checking work, avoiding sanctions, and client disclosures. They then touch on the potential impact on insurance coverage and underwriting. Firms should consider their risk tolerance and their cases’ value when determining coverage limits. Another best practice is to establish and regularly revisit guidelines or policies for AI use. Kevin and Laura emphasize the need for law firms to understand and strategically use AI while also being aware of the potential dangers.

Kevin Szczepanski welcomes Jessica Copeland of Bond,

In this conversation, Kevin Szczepanski and Jessica Copeland of Bond, Schoeneck & King define generative AI as basically the use of large language models to create natural language responses. They note that AI has been used for decades—examples of it in everyday life include personalized recommendations on Amazon and Netflix. They then move on to the use of generative AI and AI governance. Generative AI has both benefits (efficiency and time savings) and risks (including accuracy, bias, confidentiality). Governance is crucial, and listeners will hear some recommendations for developing a robust AI governance plan, including selecting the right tools, identifying decision-makers, assessing security features, and

Kevin and his guest, Jodi Daniels, founder and CEO of Red Clover Advisors, discuss the importance of privacy as a fundamental human right, noting that building trust is a two-way street. Jodi explains that a privacy consultancy helps companies comply with data privacy laws and build trust with their customers. Jodi emphasizes that privacy is both a legal compliance issue and a market opportunity. By prioritizing privacy and being transparent about data use, businesses can differentiate themselves and gain a competitive advantage. They also discuss the book Jodi coauthored with her husband, Data Reimagined: Building Trust One Byte at a Time, which provides a story-driven approach to help professionals understand the importance of privacy and navigate privacy regulations. 

Kevin and guest Ziming Zhao, assistant professor in the Department of Computer Science and Engineering at the University at Buffalo, discuss Ziming’s work in systems and software security. They focus on ethical hacking and its goal of responsibly disclosing vulnerabilities to vendors. Ziming says that hacking can be fun and doing it ethically serves a purpose, though he emphasizes that ethical hacking is not a guarantee of absolute security. Companies still need to have a security in design mindset. Ethical hackers can help raise the security bar for companies and organizations. Ziming also discusses the relationship between academia and industry in the field of ethical hacking.