Resources:

• Monthly Top 10 Malware
• CIS Critical Security Controls
• About the MS-ISAC

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson welcomes Randy Rose, CIS Sr. Director of Cyber Threat Intelligence. In the spirit of Halloween, they list the top five3 (and some honorable mentions) malware of all time – so far!

Resources

• Cybersecurity Awareness Month
• CIS Community Defense Model 2.0
• Verizon Data Breach Investigations Report
• SANS Security Awareness Training
• MITRE ATT&CK

Discussed in this podcast:

• Cybersecurity Awareness Month
• Psychology of cybersecurity
• Evolution of common cyber threats
• "Big picture" resources

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson welcomes Philippe Langlois of the Verizon Business Group and co-author of the Verizon Data Breach Investigations Report (DBIR). In celebration of Cybersecurity Awareness Month, the duo discuss the DBIR and version 2.0 of the CIS Critical Security Controls (CIS Controls) Community Defense Model (CDM). Both reports pull data from a community of experts and many different resources to provide a more holistic picture of cybersecurity.

Resources:

• About Kathleen Moriarty
• CIS Benchmarks
• CIS Critical Security Controls
• Tools for Vendors and Consultants

In this edition of Cybersecurity Where You Are, CIS Senior VP and Chief Evangelist, Tony Sager welcomes back Kathleen Moriarty, Chief Technology Officer for CIS. Together they discuss the role service providers play in the future of cybersecurity.

Episode Highlights:

• Why soft skills are important
• Top soft skills
• Building a company culture

Resources:

• CIS Careers

• Publication: Cybersecurity Quarterly

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson, and CIS Senior VP and Chief Evangelist, Tony Sager discuss soft skills and how they pertain to the the cybersecurity industry. Whether it is an an employee wanting to expand their career or an employer seeking a new hire, soft skills are just as important as technical knowledge.

Resources:

• Useapassphrase.com
• Password Policy Guide
• Related Blog: Password Policy Guide: Passphrases, Monitoring and More
• National Cybersecurity Awareness Month: MS-ISAC Tool Kit and Poster Contest
• Free to download: MS-ISAC 2021 Kids Safe Online Activity Book

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson counts down the top five ways families can be cyber smart. CIS Content Marketing Manager, Danielle Koonce, stops by to talk about what she does as a parent to keep her child safe from cyber-attackers.

Resources:

• CIS Twitter
• CIS LinkedIn
• CIS Critical Security Controls
• Related podcast: RC Manager at Frame.io, Mosi Platt answers the Atkinson 9

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson, and CIS Senior VP and Chief Evangelist, Tony Sager share part of themselves in this intimate episode. Taking a guest-free moment of asking them the 'Atkison 9', hosts turn the questions on themselves. Listen to them discuss their favorite CIS Critical Security Controls, the biggest waste of time in cybersecurity, and how they want to be remembered in the industry.

This week’s Cybersecurity Where You Are podcast highlights:

• The problem regulating cybersecurity
• Cybersecurity is currently the "Wild West"
• What makes cybersecurity different than other industries
• What roles different levels of government are taking
• Dispelling the mystery behind cybersecurity

Episode Resources

• CIS Controls
• Basic Cyber Hygiene
• Press Release

It can appear that cybersecurity practices are being built on the creative wizardry of technical experts rather than referential universal policy that everyone can abide by. In this edition of Cybersecurity Where You Are, host and Senior Vice President and Chief Evangelist Tony Sager for CIS welcomes guest Brian de Vallance, Alliance Outreach Coordinator for CIS. Together, they discuss the role government and technology experts play in the building of universal cybersecurity best practices and policy.

This week’s Cybersecurity Where You Are podcast highlights:

• Automated attestation processes
• Vendor attestation capabilities
• Root of trust via Trusted Platform Module (TPM)
• Method of verification for zero trust

Episode Resources

• Visit the CIS Website
• CIS Controls List
• About Kathleen Moriarty, Chief Technology Officer, CIS
• Related Blog on Zero Trust: Where Does Zero Trust Begin and Why is it Important?

In this edition of Cybersecurity Where You Are, host and CIS Chief Information Security Officer (CISO), Sean Atkinson welcomes guest Kathleen Moriarty, Chief Technology Officer (CTO) at CIS. Together, the duo discuss attestation in terms of hardware and software, and the process of performing a posture assessment.

This week’s Cybersecurity Where You Are podcast highlights:

• Why the medical industry is so appealing to attackers
• The challenges of protecting medical facilities
• How a defense-in-depth strategy plays a role in a hospital’s cybersecurity plan
• Malicious Domain Blocking and Reporting (MDBR) for hospitals

Episode Resources

• Visit the CIS Website
• The American Hospital Association
• Learn more about MDBR for hospitals

In this edition of Cybersecurity Where You Are, host and CIS Chief Information Security Officer (CISO), Sean Atkinson welcomes guests John Riggi and Ed Mattison. Riggi is the Senior Advisor for Cybersecurity for the American Hospital Association (AHA) and Mattison is the Executive Vice President of Operations and Security Services at CIS. Together they discuss how hospitals and other medical facilities can protect themselves against cyber-attacks.

Resources:

• Visit the CIS Website

Highlights:

• The importance of information security governance
• Security vs. compliance
• Data – determining what you need and where to find it
• Understanding risk from a decision-basis
• Critical elements to fulfill business requirements
• Producing value in a compliance program
• Applying agility for continuous improvement

Good compliance = good security

Security is the practice of implementing effective technical controls to protect an organization’s digital assets. Compliance, on the other hand, is the application of that practice to meet regulatory or contractual requirements. Unfortunately, more often than not, organizations focus on compliance once a year when it’s time to certify that their “security is good.” The process of being compliant and secure should be a continuous process.