Cybersecurity Where You Are

In episode 102 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by the following guests:

• Charity Otwell, Director of the CIS Critical Security Controls® (CIS Controls®) at the Center for Internet Security® (CIS®)
• Lawrence Cruciana, President of Corporate Information Technologies (CorpInfoTech)

Together, they discuss the "sporty" rigor underlying the process and value of achieving CIS Controls Accreditation.

Here are some highlights from our episode:

• 01:36. What is meant by CIS Controls Accreditation, as certified by CREST
• 03:32. What motivated CorpInfoTech to pursue accreditation
• 07:47. The importance of CIS Controls Accreditation to the cybersecurity ecosystem
• 20:07. The business value of accreditation for recipients

Resources

• CIS Controls Accreditation
• CorpInfoTech Receives First CIS Controls Accreditation
• CorpInfoTech
• Top Hurdles for MSSPs and One Shining Solution
• CIS Community Defense Model 2.0
• Episode 44: A Zero Trust Framework Knows No End

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 101 of Cybersecurity Where You Are, Sean Atkinson is joined by Justin Kohler, Vice President of Products at SpecterOps, and Jonathan Parfait, Technical Account Manager at SpecterOps.

Together, they discuss how the visualization of attack paths in Active Directory helps organizations to better contextualize risks to their enterprise security.

Here are some highlights from our episode:

• 01:54. What Bloodhound is and how it assists organizations in assessing risks in their Active Directory environments
• 05:08. Why have organizations look at their Active Directory environments
• 11:15. Common vulnerabilities and misconfigurations identified by Bloodhound
• 21:21. How organizations can best use Bloodhound as part of their cyber defensive strategy
• 29:18. How Bloodhound is adapting to keep up with evolving Active Directory environments

Resources

• Bloodhound Community Edition
• Episode 62: Inside the 'Spidey Sense' of a Pentester
• What You Need to Know About Hybrid Cloud Environments
• Vulnerability Management Policy Template for CIS Control 7
• CIS Benchmarks List

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 100 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by David Bisson, Sr. Content Marketing Strategist at the Center for Internet Security® (CIS®).

Together, they celebrate the first 100 episodes of Cybersecurity Where You Are and discuss where the podcast might go in the future.

Here are some highlights from our episode:

• 01:14. How the podcast's approach and content have changed since the first episode
• 04:19. What surprised the team about the "machinery" of putting on a cybersecurity podcast
• 07:53. A look back at some of our favorite guests and types of podcast episodes
• 27:20. How the podcast can continue to support the cybersecurity industry going forward

Resources

• Episode 1: Welcome to the Basics
• Episode 7: CIS Controls v8…It’s Not About the List
• Episode 9: Mitigating Risk: Information Security Governance
• Episode 24: How Do I Start a Career in Cybersecurity?
• Episode 59: Probing the Modern Role of the Pentest
• Episode 96: Making Continuous Compliance Actionable for SMBs
• Episode 97: How Far We've Come preceding CIS's 25th Birthday

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 99 of Cybersecurity Where You Are, Sean Atkinson is joined by Marcus Sachs, SVP and Chief Engineer at the Center for Internet Security® (CIS®).

Together, they discuss how cyber-informed engineering builds resilience to the potential failure of a digital system into new and existing engineering products.

Here are some highlights from our episode:

• 03:51. What cyber-informed engineering is and how this paradigm has emerged
• 11:39. What CIS is doing to emphasize cyber-informed engineering among U.S. State, Local, Tribal, and Territorial (SLTT) government organizations
• 16:25. Why resilience requires everyone to be "cyber-informed"
• 20:50. The need for boards of directors and C-Suite leaders to understand cybersecurity risk
• 25:30. What preparations help to lay the foundation for cyber-informed engineering

Resources

• Cyber-Informed Engineering
• National Cyber-Informed Engineering Strategy
• Cyber-Informed Engineering Implementation Guide
• Episode 75: How GenAI Continues to Reshape Cybersecurity
• Smart Cities Need Smarter Security

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 98 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Roger Grimes, Data-Driven Defense Evangelist at KnowBe4.

Together, they embrace transparency as a vehicle for the cybersecurity industry to better defend against insider threats.

Here are some highlights from our episode:

• 01:28. How KnowBe4 detected an insider threat from North Korea
• 09:09. How the Center for Internet Security® (CIS®) responded to news of this incident
• 21:02. The role of technical controls in detecting these types of threats
• 23:56. Common signs you can use to detect fake employees in your hiring process
• 29:22. How cybersecurity companies can use this incident to improve their defenses

Resources

• How a North Korean Fake IT Worker Tried to Infiltrate Us
• North Korean Fake IT Worker FAQ
• Episode 77: Data's Value to Decision-Making in Cybersecurity
• Defense-in-Depth: A Necessary Approach to Cloud Security
• eBook: A CISO’s Guide to Bolstering Cybersecurity Posture

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 97 of Cybersecurity Where You Are, Tony Sager is joined by the following guests:

• Dr. Ramon Barquin, Board Member at the Center for Internet Security® (CIS®) and President and Chief Executive Officer at Barquin International
• Franklin Reeder, Director Emeritus and Founding Chair of CIS as well as Director of the National Cybersecurity Scholarship Foundation
• Clint Kreitner, Founding President/CEO and Former Board Member at CIS

Together, they look back at how much CIS has accomplished as an organization in the leadup to its 25th birthday.

Here are some highlights from our episode:

• 06:04. What brought everyone to CIS's founding meeting at the Cosmos Club
• 16:08. The first steps to operationalizing the takeaways of the Cosmos Club meeting
• 25:40. How CIS's business model came to be
• 34:24. The events that brought the Multi-State Information Sharing and Analysis Center® (MS-ISAC®) into CIS
• 42:42. Tracing the past forward to where we are now

Resources

• 20 Years of Creating Confidence in the Connected World
• Episode 35: Remembering the Late Alan Paller
• Reasonable Cybersecurity Guide
• Episode 79: Advancing Common Good in Cybersecurity – Part 1
• MS-ISAC: 20 Years as Your Trusted Cyber Defense Community
• Dr. Ramon Barquin
• Franklin Reeder

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 96 of Cybersecurity Where You Are, co-hosts Sean Atkinson and Tony Sager are joined by Tarah Wheeler, CEO of Red Queen Dynamics.

Together, they discuss ongoing efforts to translate continuous compliance into something actionable for small- to medium-sized businesses (SMBs).

Here are some highlights from our episode:

• 03:11. The philosophy behind a business model focused on continuous compliance for SMBs
• 17:44. How the Fog of More complicates security and compliance for the "cyber-underserved"
• 30:56. How the industry can navigate the multiple-framework issue and streamline compliance

Resources

• Follow Tarah on LinkedIn
• Episode 95: AI Augmentation and Its Impact on Cyber Defense
• Implementation Guide for Small- and Medium-Sized Enterprises CIS Controls IG1
• Build a Robust Continuous Audit Program in 10 Steps
• How Prioritized Security Controls Break Through the Fog of More

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 95 of Cybersecurity Where You Are, Sean Atkinson is joined by Randy Rose, VP of Security Operations & Intelligence at the Center for Internet Security® (CIS®).

Together, they discuss AI augmentation in terms of how cyber defenders are using generative artificial intelligence to enhance their capabilities.

Here are some highlights from our episode:

• 01:16. How artificial intelligence has changed the landscape for cybersecurity defenders
• 03:49. How AI is starting to augment threat detection
• 10:12. What security researchers are exploring around AI and cyber defense
• 20:54. Key challenges and limitations for AI-based cyber defense
• 30:54. Future trends and innovations for cybersecurity defenders' use of AI

Resources

• Episode 56: Cybersecurity Risks and Rewards of LLMs
• Episode 59: Probing the Modern Role of the Pentest
• SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
• fr0gger / Awesome-GPT-Agents
• The LLM Misinformation Problem I Was Not Expecting
• Separating FUD from Practical for Post-Quantum Cryptography

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 94 of Cybersecurity Where You Are, Tony Sager is joined by the following guests from the Center for Internet Security® (CIS®):

• Carlos Kizzee, SVP of Multi-State Information Sharing and Analysis Center® (MS-ISAC®) Strategy & Plans
• Karen Sorady, VP of MS-ISAC Strategy & Plans
• Greta Noble, Director of Community Engagement

Together, they discuss how the ISAC Annual Meeting supports the 24x7x365 community defense efforts of the MS-ISAC and Elections Infrastructure Information Sharing and Analysis Center® (EI-ISAC®).

Here are some highlights from our episode:

• 02:30. Background information on ISACs in general and the role of the MS-ISAC
• 04:17. Why it's an annual meeting and not a conference
• 06:40. What made the 2024 ISAC Annual Meeting the largest of its kind so far
• 08:43. How the human dimension drives our yearly meeting
• 15:44. The role of the MS- and EI-ISACs in CIS's broader strategy
• 19:42. How our yearly meeting improves what CIS does
• 29:57. What's next for the ISAC Annual Meeting

Resources

• MS-ISAC: 20 Years as Your Trusted Cyber Defense Community
• Episode 76: The Role of Thought Leadership in Cybersecurity
• Reasonable Cybersecurity Guide
• Cybersecurity at Scale: Piercing the Fog of More

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].

In episode 93 of Cybersecurity Where You Are, co-hosts Sean Atkinson and Tony Sager are joined once again by John Cohen, Executive Director of Countering Hybrid Threats at the Center for Internet Security® (CIS®).

Together, they discuss a whole-of-society approach to help make the U.S. public resilient against multidimensional threats in our connected world.

Here are some highlights from our episode:

• 01:52. What the U.S. public needs to consider in order to strengthen its resilience
• 06:04. How a national framework addresses the need for organizations to build resilience and intercommunication in the face of increasingly sophisticated threats
• 11:41. Identifying who key partners are in a complex, hybrid world
• 16:49. How people are responding to the national framework and where they are seeing value
• 21:50. Clarifying hopes for the national framework going forward

Resources

• John D. Cohen
• Enhancing Safety in the Connected World — A National Framework for Action
• Episode 92: A Framework to Counter Evolving Cyber Threats
• Why Whole-of-State Cybersecurity Is the Way Forward
• Public Water and Wastewater Sector Face Mounting Cyber Threat
• The National Cybersecurity Strategy

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].