In episode 87 of Cybersecurity Where You Are, co-host Tony Sager is joined by the following guests:

• Charity Otwell, Director of the CIS Critical Security Controls® (CIS Controls®) at the Center for Internet Security® (CIS®)
• Philippe Langlois, Senior Principal, Security Risk Management and Author of the Verizon Data Breach Investigations Report (DBIR)
• Theodore "TJ" Sayers, Director of Intelligence & Incident Response at CIS

Together, they celebrate 11 years of CIS and Verizon working together to contextualize the threat activity security teams are seeing and to help teams use the Controls as an improvement framework.

Here are some highlights from our episode:

• 02:00. How the Multi-State and Elections Infrastructure Information Sharing and Analysis Centers (MS-ISAC® and EI-ISAC®) contribute anonymized data to the Verizon DBIR
• 07.27. The two types of data that Verizon uses as input for its report
• 13:50. The ways CIS uses the content of Verizon's DBIR to help people embrace programs of security improvement
• 24:48. A glimpse at what goes into producing the DBIR
• 28.33. The importance of leadership in guiding team dynamics and fun
• 32.07. Reception of the 2024 DBIR and exploration of what's next for the Verizon DBIR team

Resources

• 2024 DBIR Findings & How the CIS Critical Security Controls Can Help to Mitigate Risk to Your Organization
• CIS Controls Featured as Recommended Defenses in Verizon's 2024 Data Breach Investigations Report
• 2024 Data Breach Investigations Report
• The VERIS Framework
• CIS Community Defense Model 2.0

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].