Resources:

• About Kathleen Moriarty
• CIS Benchmarks
• CIS Critical Security Controls
• Tools for Vendors and Consultants

In this edition of Cybersecurity Where You Are, CIS Senior VP and Chief Evangelist, Tony Sager welcomes back Kathleen Moriarty, Chief Technology Officer for CIS. Together they discuss the role service providers play in the future of cybersecurity.

Episode Highlights:

• Why soft skills are important
• Top soft skills
• Building a company culture

Resources:

• CIS Careers

• Publication: Cybersecurity Quarterly

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson, and CIS Senior VP and Chief Evangelist, Tony Sager discuss soft skills and how they pertain to the the cybersecurity industry. Whether it is an an employee wanting to expand their career or an employer seeking a new hire, soft skills are just as important as technical knowledge.

Resources:

• Useapassphrase.com
• Password Policy Guide
• Related Blog: Password Policy Guide: Passphrases, Monitoring and More
• National Cybersecurity Awareness Month: MS-ISAC Tool Kit and Poster Contest
• Free to download: MS-ISAC 2021 Kids Safe Online Activity Book

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson counts down the top five ways families can be cyber smart. CIS Content Marketing Manager, Danielle Koonce, stops by to talk about what she does as a parent to keep her child safe from cyber-attackers.

Resources:

• CIS Twitter
• CIS LinkedIn
• CIS Critical Security Controls
• Related podcast: RC Manager at Frame.io, Mosi Platt answers the Atkinson 9

In this edition of Cybersecurity Where You Are, CIS Chief Information Security Officer (CISO), Sean Atkinson, and CIS Senior VP and Chief Evangelist, Tony Sager share part of themselves in this intimate episode. Taking a guest-free moment of asking them the 'Atkison 9', hosts turn the questions on themselves. Listen to them discuss their favorite CIS Critical Security Controls, the biggest waste of time in cybersecurity, and how they want to be remembered in the industry.

This week’s Cybersecurity Where You Are podcast highlights:

• The problem regulating cybersecurity
• Cybersecurity is currently the "Wild West"
• What makes cybersecurity different than other industries
• What roles different levels of government are taking
• Dispelling the mystery behind cybersecurity

Episode Resources

• CIS Controls
• Basic Cyber Hygiene
• Press Release

It can appear that cybersecurity practices are being built on the creative wizardry of technical experts rather than referential universal policy that everyone can abide by. In this edition of Cybersecurity Where You Are, host and Senior Vice President and Chief Evangelist Tony Sager for CIS welcomes guest Brian de Vallance, Alliance Outreach Coordinator for CIS. Together, they discuss the role government and technology experts play in the building of universal cybersecurity best practices and policy.

This week’s Cybersecurity Where You Are podcast highlights:

• Automated attestation processes
• Vendor attestation capabilities
• Root of trust via Trusted Platform Module (TPM)
• Method of verification for zero trust

Episode Resources

• Visit the CIS Website
• CIS Controls List
• About Kathleen Moriarty, Chief Technology Officer, CIS
• Related Blog on Zero Trust: Where Does Zero Trust Begin and Why is it Important?

In this edition of Cybersecurity Where You Are, host and CIS Chief Information Security Officer (CISO), Sean Atkinson welcomes guest Kathleen Moriarty, Chief Technology Officer (CTO) at CIS. Together, the duo discuss attestation in terms of hardware and software, and the process of performing a posture assessment.

This week’s Cybersecurity Where You Are podcast highlights:

• Why the medical industry is so appealing to attackers
• The challenges of protecting medical facilities
• How a defense-in-depth strategy plays a role in a hospital’s cybersecurity plan
• Malicious Domain Blocking and Reporting (MDBR) for hospitals

Episode Resources

• Visit the CIS Website
• The American Hospital Association
• Learn more about MDBR for hospitals

In this edition of Cybersecurity Where You Are, host and CIS Chief Information Security Officer (CISO), Sean Atkinson welcomes guests John Riggi and Ed Mattison. Riggi is the Senior Advisor for Cybersecurity for the American Hospital Association (AHA) and Mattison is the Executive Vice President of Operations and Security Services at CIS. Together they discuss how hospitals and other medical facilities can protect themselves against cyber-attacks.

Resources:

• Visit the CIS Website

Highlights:

• The importance of information security governance
• Security vs. compliance
• Data – determining what you need and where to find it
• Understanding risk from a decision-basis
• Critical elements to fulfill business requirements
• Producing value in a compliance program
• Applying agility for continuous improvement

Good compliance = good security

Security is the practice of implementing effective technical controls to protect an organization’s digital assets. Compliance, on the other hand, is the application of that practice to meet regulatory or contractual requirements. Unfortunately, more often than not, organizations focus on compliance once a year when it’s time to certify that their “security is good.” The process of being compliant and secure should be a continuous process.

Resources:

• Visit the CIS Website
• Download the CIS Controls v8
• Download CIS Controls v8 Change Log
• Join a CIS Controls Community

Highlights:

• Everything has to be measurable
• Everything has to be achievable
• CIS Controls v8 must have a peaceful coexistence with cybersecurity frameworks
• The Controls need to be backed by data and able to defend against real-world threats

First Impressions Matter

The CIS Controls team and volunteers pretty much rewrote every word of v8 in an effort to modernize and consolidate the document. CIS Controls v8 is a lot more focused and less redundant than previous versions. Find out what people are saying about this new Version!

Feedback: Request, Manage, Gather, & Use for the Greater Good

Organizations big and small rely on the CIS Controls to defend against the most prevalent cyber-attacks against systems and networks. And, they count on the Controls team to do the best job they can for the greater good of the cybersecurity community.

Resources:

• What are the CIS Controls
• Learn more about CIS Controls v8
• Free Webinar | May 18, 2021: Sign up to hear about all the changes to the CIS Controls
• Frequently Asked Questions

In this edition of Cybersecurity Where You Are, host and CIS Senior Vice President and Chief Evangelist, Tony Sager welcomes guests Randy Marchany and Phyllis Lee. Marchany is the Chief Information Security Officer (CISO) at Virginia Tech, and Lee serves as Senior Director of the CIS Controls. The connection between the two guests is the CIS Controls – a prioritized set of Safeguards to mitigate the most prevalent cyber-attacks against systems and networks.

Highlights:

• History of the CIS Controls
• Guiding principles for CIS Controls v8
• CIS Controls ecosystem
• Practical implications for the Controls and real-world applications
• CIS Controls life cycle

Remember to subscribe to get the latest cybersecurity news and updates to Start Secure and Stay Secure.