Cyber Sip

Cyber Sip

By Barclay Damon LLPNewsNews Commentary
Download on the App Store

Cyber Sip episodes

  • “Generative AI for Lawyers—Practical Tips,” With Jessica Copeland

    Kevin Szczepanski welcomes Jessica Copeland of Bond,

    Schoeneck & King back for a lively discussion on why (and whether) attorneys and firms of all sizes should use artificial intelligence. As a refresher, they remind listeners of the definition of AI and some of its uses. As with many things lawyer related, the answers come down to “it depends.” Law
    firms need to look at their priorities, capabilities, and needs. Other areas to consider are policies, compliance, indemnification, employee training, security, and clients’ expectations. Kevin and Jessica also discuss AI tools’ wide availability, noting that familiar companies like Lexis, Westlaw, and Microsoft Office have all rolled out internal AI features. Listen in for more.

    25 min
  • “Developing a Robust AI Governance Plan,” With Jessica Copeland

    In this conversation, Kevin Szczepanski and Jessica Copeland of Bond, Schoeneck & King define generative AI as basically the use of large language models to create natural language responses. They note that AI has been used for decades—examples of it in everyday life include personalized recommendations on Amazon and Netflix. They then move on to the use of generative AI and AI governance. Generative AI has both benefits (efficiency and time savings) and risks (including accuracy, bias, confidentiality). Governance is crucial, and listeners will hear some recommendations for developing a robust AI governance plan, including selecting the right tools, identifying decision-makers, assessing security features, and

    implementing policies and training.

    29 min
  • “Compliance and Competition: Building Trust With Your Privacy Program,” With Jodi Daniels

    Kevin and his guest, Jodi Daniels, founder and CEO of Red Clover Advisors, discuss the importance of privacy as a fundamental human right, noting that building trust is a two-way street. Jodi explains that a privacy consultancy helps companies comply with data privacy laws and build trust with their customers. Jodi emphasizes that privacy is both a legal compliance issue and a market opportunity. By prioritizing privacy and being transparent about data use, businesses can differentiate themselves and gain a competitive advantage. They also discuss the book Jodi coauthored with her husband, Data Reimagined: Building Trust One Byte at a Time, which provides a story-driven approach to help professionals understand the importance of privacy and navigate privacy regulations. 

    36 min
  • “Keeping Hackers at Bay: The Role of an Ethical Hacker”

    Kevin and guest Ziming Zhao, assistant professor in the Department of Computer Science and Engineering at the University at Buffalo, discuss Ziming’s work in systems and software security. They focus on ethical hacking and its goal of responsibly disclosing vulnerabilities to vendors. Ziming says that hacking can be fun and doing it ethically serves a purpose, though he emphasizes that ethical hacking is not a guarantee of absolute security. Companies still need to have a security in design mindset. Ethical hackers can help raise the security bar for companies and organizations. Ziming also discusses the relationship between academia and industry in the field of ethical hacking. 

    29 min
  • “Don’t Get Hooked! Tips to Prevent Phishing Attacks”

    In this episode, host Kevin Szczepanski and his guest, Bill

    Haber of TEKRiSQ, discuss tips to prevent phishing attacks, which, they remind listeners, are “fraudulent attempts to obtain personal information through electronic messages.” Kevin and Bill highlight the prevalence and success of
    phishing attacks, emphasizing the need for vigilance from both individuals and organizations. Covering examples and types of phishing attacks—spear phishing, smishing,
    man-in-the-middle attacks—they offer takeaways including slowing down, being cautious of urgency, verifying suspicious emails, conducting trainings, and
    implementing tools like VPN and DNS filtering. These practices can both enhance cybersecurity and improve the chances of obtaining cyber liability insurance.

    29 min
  • “Keeping Kids Safe Online: A Call to Action,” With Arun Vishwanath

    Kevin Szczepanski and Arun Vishwanath, chief technologist of Avant Research Group, discuss the urgent need for cyber-hygiene education for children, including about security and privacy. They highlight frequent cyberattacks targeting schools and other education systems, which often have outdated technology and may lack sophisticated IT security skills and resources. The conversation also touches on the role of the private sector in providing cyber-literacy education. Kevin and Arun embrace reforming credit monitoring for children and expanding its scope to include reputation management, and they agree about the importance of protecting the next generation from cyber threats and the need for systemic changes.

     

    38 min
  • “Money Intercepted! The New Risks of Funds Transfers,” With Kyle Cavalieri

    Kevin Szczepanski and Kyle Cavalieri, president of Avalon Cyber, discuss the increasing risks of funds transfer fraud, covering topics such as understanding this type of fraud, how it works (including fake invoicing and “vishing” attacks), red flags, and how to respond. Red flags can include unexpected calls or emails, and it’s important to be prepared for when these contacts occur. Kevin and Kyle emphasize the growing threat of such attacks, which can result in significant financial losses. They discuss the importance of immediate action, including updating credentials, notifying the bank, involving an attorney, and reporting the incident to law enforcement. Listen in to learn more.

    35 min
  • “Why You Absolutely Must Do a Risk Assessment in 2024,” With Bill Haber

    More than ever, cybersecurity risk assessments are

    essential for businesses of all sizes to understand and mitigate their risks. Done
    appropriately, assessments can provide help with remediation and a plan for
    moving forward and can even assist with pursuing insurance coverage. This
    episode, which features Bill Haber, co-founder of the cybersecurity company TEKRiSQ,
    emphasizes the need for actionable steps and justifying recommendations based
    on an organization's specific risks and compliance obligations. Even if your
    organization is not subject to specific regulations, conducting a risk
    assessment is crucial for protecting data, limiting liability, and maintaining
    cyber insurance coverage. Listen in to learn more.

    33 min
  • “The Boom of Generative AI in 2024—Breaking Down New Security Trends,” With Siwei Lyu

    From Barclay Damon’s new podcast studio, Kevin welcomes back University at Buffalo Professor Siwei Lyu. To start this fast-moving conversation, Siwei notes that what sets generative AI apart from analytical AI is that generative AI focuses on creating content rather than just answering questions or sorting through data, and he sheds

    light on what seemed to be the technology’s “sudden appearance.” Siwei and Kevin also discuss the introduction of ChatGPT, current and future applications of generative AI, and concerns about generative AI’s misuse. Throughout the talk, Siwei emphasizes the importance of responsible use and the need for safeguards.

    36 min
  • “Five Cyber Action Items for 2024”

    Join Kevin Szczepanski as he explains his five need-to-know

    cyber action items for the year. They involve 1) conducting a cyber risk assessment, essential for identifying and prioritizing risks, 2) developing an incident response plan to help respond to and mitigate cyber incidents, 3) conducting tabletop exercises, which give organizations the opportunity to do run-throughs of real incidents, 4) reviewing policies, including determining which ones you need, and 5) considering appointing a virtual chief information security officer (CISO). Kevin also provides a preview of upcoming topics for Season 3 of the podcast, including AI, cybersecurity for kids, risk management, and insurance—all recorded in our new state-of-the-art podcast studio.

    22 min

About Cyber Sip

From the publisher's feed

Cyber Sip™ is an award-winning biweekly Barclay Damon Live podcast offering practical tips on improving every organization’s cybersecurity. We talk with industry thought leaders to keep you up to date on cybersecurity’s hottest topics, including: