Exploring Information Security - Exploring Information Security

In this 2k-like edition of the Exploring Information Security podcast, Stuart Scott AWS Content Lead at Cloud Academy and George Gerchow Chief Security Officer at Sumologic join me to discuss how to implement GDPR.

Stuart (@Stuart_A_Scott) and George (@georgegerchow) both have contributed content to CloudAcademy on GDPR. Stuart has a nine hour course on using AWS Compliance Enabling Services. George has a done a webinar and written an article on the topic. Both are well spoken and highly informed on the topic. They provide a lot of good direction for anyone looking to account for GDPR in their organization (pro tip: everyone should be looking into this).

In this episode we discuss:

• How to implement GDPR in AWS
• What are subject data rights?
• How other regulations are impacted
• What's ahead for GDPR

More resources:

• AWS Security Service
• AWS Access & Key Management
• CloudAcademy Blog
• Stuart's blog on CloudAcademy

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.

In this 2k-like edition of the Exploring Information Security podcast, Stuart Scott AWS Content Lead at Cloud Academy and George Gerchow Chief Security Officer at Sumologic join me to discuss how to implement GDPR.

Stuart (@Stuart_A_Scott) and George (@georgegerchow) both have contributed content to CloudAcademy on GDPR. Stuart has a nine hour course on using AWS Compliance Enabling Services. George has a done a webinar and written an article on the topic. Both are well spoken and highly informed on the topic. They provide a lot of good direction for anyone looking to account for GDPR in their organization (pro tip: everyone should be looking into this).

In this episode we discuss:

• Why am I getting all these privacy update emails?
• What is GDPR?
• How to implement GDPR?
• What are Data Processing Addendum's

More resources:

• AWS Security Service
• AWS Access & Key Management
• CloudAcademy Blog
• Stuart's blog on CloudAcademy

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.

In this crackerjack edition of the Exploring Information Security podcast, Sean Peterson of Parameter Security joins me to discuss password cracking.

Sean (@SeanThePeterson), is one of the most passionate infosec people you don't know. He recently did a talk at ShowMeCon on how to crack passwords. It was his first ever talk and pretty damn good. Sean joined me to give me his insights into password cracking.

In this episode we discuss:

• What type of hardware is needed for password cracking
• What type of attacks are used for password cracking
• How to crack passwords
• What's ahead for password cracking

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.

In this European edition of the Exploring Information Security podcast, Cliff Smith of Parameter Security joins me to discuss General Data Protection Regulation (GDPR).

Cliff (@BismthSalamandr), recently gave a talk at ShowMeCon on GDPR and why everyone should care. It's a really good talk and a great primer if you haven't dug into GDPR, yet (you should). Cliff is a recovering lawyer, so he's providing a different angle than your normal security professional.

In this episode we discuss:

• What is GDPR?

• Why it could change

• Why it's important

• Who it impacts

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.

Tanya (@shehackspurple), is a former developer turned security person. She speaks regularly at conferences around the globe. The topics often focus on working with developers to improve security, which is something I believe in. She's a project lead for OWASP DevSlop.

In this episode we discuss:

Why working with the developers is important

How to talk to developers

What are the benefits of working with developers?

What are the top recommendations for talking to developers

In this panelist episode of the Exploring Information Security podcast, the first ever podcast panel at ShowMeCon 2018!

Amanda Berlin (@InfoSystir), Wik (@jaimefilson), David Cybuck (@dpcybuck), April Wright (@aprilwright), and Dave Chronister (@bagomojo) join me on the live EIS panel at ShowMeCon, June 7, 2018. This is the first panel I've ever done for the podcast. It went so well, I hope to do more in the future. We cover a variety of topics and have a few laughs.

YouTube version

In this episode we discuss:

• What's coming back in vogue

• What to do with master ID

• What our thoughts are on new password policies from NIST

• How to handle best practices

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.

In this ranty edition of the Exploring Information Security podcast, Jayson E. Street joins me to discuss how to achieve security awareness through social engineering.

Jayson (@jaysonstreet), is the VP of Information Security at Sphereny. He and April Wright (@aprilwright) are doing training at both Black Hat and DerbyCon on how to achieve security awareness through social engineering. The training focuses on helping blue team members setup effective security awareness programs.

In this episode we discuss:

• How to communicate with executives

• Why we need to empower users

• What happens when Jayson plays video games

• Why shock value is important

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.

In this episode of the Exploring Information Security podcast, I beg for questions for the ShowMeCon panel next week!

ShowMeCon is June 7-8, 2018, and I am hosting my first ever Exploring Information Security panel. Right now, I've got Dave Chronister, Amanda Berlin, David Cybuck, Paul Coggin, and a couple others. We'll be taking questions from the crowd (please show up if you're at the conference!) and I'll have some questions prepared for the panel. I'm excited and nervous about having good questions, so please send any questions you have in.

Thanks!

[RSS Feed] [iTunes]

In this ranty edition of the Exploring Information Security podcast, Jayson E. Street joins me to discuss how to achieve security awareness through social engineering.

Jayson (@jaysonstreet), is the VP of Information Security at Sphereny. He and April Wright (@aprilwright) are doing training at both Black Hat and DerbyCon on how to achieve security awareness through social engineering. The training focuses on helping blue team members setup effective security awareness programs.

In this episode we discuss:

• Why security awareness is important
• What our own experience is with training people
• What's in the training
• How to talk to communicate effecitvely

[RSS Feed] [iTunes]

In this pile of an episode for the Exploring Information Security podcast, Johnny Xmas (@J0hnnyXm4s), Kate Vajda (@vajkat), Rachel Andrus, Kyle Andrus (@chaoticflaws), Daniel (not going to try spelling last name), Amanda Ebbutt, Daniel Ebbutt (@notdanielebbutt), Chris Maddalena (@cmaddalena), and myself get together to record a podcast during Converge and BSides Detroit.

It's another podcast special! This one was at Converge and BSides Detroit. This one took a little bit to get going. When we did we got into a little bit of everything. Topics both in infosec and topics outside of infosec.

In this episode we discuss:

• Everyone tries Malort

• The "breach" at Twitter

• One size doesn't fit all for the populace

• Real world issues (net neutrality, income, and public service)

[RSS Feed] [iTunes]

Sign up with your email address to receive news and updates.

We respect your privacy.