In episode 36 of Cybersecurity Where You Are, co-host Sean Atkinson is joined by Marci Andino, Sr. Director of the Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC), and Trevor Timmons, EI-ISAC Executive Committee Chair and Chief Information Officer at Colorado Department of State. Together, they discuss Cyber STRONG, a campaign launched by the EI-ISAC that encourages election officials to take decisive and deliberate steps towards improving their cybersecurity posture. Cyber STRONG provides officials with actionable guidance that they can use to further protect the security and integrity of their elections.

Resources

• Follow Marci and Trevor on LinkedIn
• Strong Elections Are Cyber STRONG…Are You?
• The 2020 Elections Year in Review
• Best practices for election systems security
• Episode 20: The State of Election Cybersecurity
• How to Improve Election Technology Verification

In episode 35 of Cybersecurity Where You Are, co-hosts Tony Sager and Sean Atkinson are joined by Bobbie Stempfley, Board Chair at the Center for Internet Security (CIS). Together, they remember the late Alan Paller, a CIS co-founder and former Board member. Each of them recalls when they first met Alan, and exchange stories of how his passion for bringing people together and solving big challenges helped change their lives, drive CIS's mission, and reshape the cybersecurity industry.

Resources

• Follow Bobbie on LinkedIn
• Remembering Alan Paller, CIS Co-Founder and Board Member
• At Long Last, CIS Will Be Back at RSA Conference in 2022
• CIS Controls Volunteer Spotlight: James and Kelli Tarala
• CIS Board of Directors

In episode 34 of Cybersecurity Where You Are, co-host Sean Atkinson and Chris Elgee, a senior security analyst and Core NetWars Tournament design lead for Counter Hack, look back at how Hollywood has portrayed hacking over the years. They cover long-standing crowd favorites like Hackers, Sneakers, and Mr. Robot along with some lesser-known gems. The overarching trend? Viewers are getting more computer-literate, so the way in which Hollywood portrays hacking is evolving in a way that not only satisfies audiences but also raises their awareness of cybersecurity.

Resources

• Follow Chris on LinkedIn.
• Election Security Spotlight – Black, Gray, & White Hat Hackers
• CIS Critical Security Control 18: Penetration Testing
• Election Security Spotlight – Social Engineering
• Hack the Human: End-User Training and Tips to Combat Social Engineering
• MS-ISAC Security Primer – Spear Phishing

In episode 33 of Cybersecurity Where You Are, co-host Sean Atkinson and Ben Carter, IoT Specialist for CIS’s Chief Technology Officer, discuss the need to secure IoT devices at the vendor level. This is impossible without taking a high-level view and ensuring that all protocols used by IoT devices and vendors are taken into account. Only by ensuring security by design can organizations in healthcare, manufacturing, government, and other sectors accomplish security at scale for IoT management – all while preserving interoperability between their connected devices.

Resources

• Follow Ben Carter on LinkedIn
• CIS Controls v8 Internet of Things Companion Guide
• 6 Simple Tips for Securing IoT Devices
• Smart Devices, Smart Users – How to Stay Secure in an IoT World
• “Internet of Things” Needs to be More Secure

In episode 32 of Cybersecurity Where You Are, co-hosts Sean Atkinson and Tony Sager discuss RSA 2022 — which is always a highlight of our conference calendar. Tony gives a preview of three sessions in which he'll present on cybersecurity nonprofits, incentivizing the adoption of cybersecurity best practices, and securing the supply chain. He also provides tips and best practices that can help RSA newbies, individual teams, and general attendees make the most of the conference.

Resources

• Complete your registration for RSA Conference 2022
• At Long Last, CIS Will Be Back at RSA Conference in 2022
• Episode 30: Solving Cybersecurity at Scale with Nonprofits
• Making Security Simpler for Organizations Big and Small

In episode 31 of Cybersecurity Where You Are, co-host Sean Atkinson is joined by Karen Sorady, VP for Multi-State Information Sharing and Analysis Center (MS-ISAC) Member Engagement at the Center for Internet Security (CIS). Their discussion focuses on industrial control system (ICS) security, some of the threats they're susceptible to, and what goes into making a good operational technology (OT) security program. Looking back over the past 20 years, the security community has learned some valuable lessons on the information technology (IT) side of things. But we won't be able to apply those lessons to OT and ICS without communication and collaboration. This isn't just about fostering conversations between OT and IT teams. It's also a call to action for organizations to work with public-private partnerships and communities like the MS-ISAC so that they don't have to go it alone.

In episode 30 of Cybersecurity Where You Are, co-host Tony Sager is joined by Philip Reitinger, President and CEO of the Global Cyber Alliance. Their discussion focuses on the role that nonprofits play in solving cybersecurity problems at scale. In today's mutually dependent technology landscape, nonprofits' resources and expertise remove the need for enterprises to solve cybersecurity issues on their own. This is especially true given initiatives like Nonprofit Cyber, a "collective effort of equals" for which Philip and Tony are Executive Committee Co-chairs.

Resources

• Follow Philip Reitinger on Twitter
• How to Protect Your Nonprofit from Phishing Cyber-Attacks
• The Cybersecurity 202: A Nonprofit is Providing Free Ransomware Protection to Private U.S. Hospitals
• Faith-based Nonprofit Uses CIS Controls as the Baseline Framework
• Modern CTO Podcast | The Role of Nonprofits in Cyber Defense
• Maximizing Our Cyber Non-Profits

In episode 29 of Cybersecurity Where You Are, co-hosts Tony Sager and Sean Atkinson are joined by Chris Cronin, ISO 27001 Auditor and Partner at HALOCK, a leading information security consultancy. Their discussion focuses on "reasonableness" as it relates to cybersecurity risk management. This topic isn't just about proving to regulators, litigators, and others that security controls were in place prior to an incident. It also considers how to implement safeguards without overburdening users and executives.

Resources

• Follow Chris Cronin on LinkedIn
• The Risk Conversation
• Manage Cybersecurity Risk with the CIS Controls
• Third-party Risk Management – Beyond the Questionnaire
• 3 Things You’ll Learn Conducting a Cyber Risk Assessment with CIS RAM

In episode 28 of Cybersecurity Where You Are, co-hosts Tony Sager and Sean Atkinson are joined by Brian Ray, Director of the Center for Cybersecurity and Privacy Protection, and Leon and Gloria Professor of Law at the Cleveland-Marshall College of Law at Cleveland State University. Together, the three discuss the convergence of cybersecurity and public policy with an emphasis on the concept of 'reasonable' security measures affording a data breach safe harbor for businesses.  

In this episode of Cybersecurity Where You Are, co-hosts Tony Sager and Sean Atkinson are joined by Stacey Wright, former CIS employee and current Vice President of Cyber Resiliency Services at the Cybercrime Support Network. The discussion focuses on the common cyber scams malicious actors have been using for decades and offer advice for dealing with them.

Resources

• Cybercrime Support Network
• How to Protect Seniors Against Cybercrimes and Scams
• Common Cyber Hoax Scams
• Tech Support Call Scams