Security awareness training is not enough to protect ourselves from cyber risks. But how can we control these risks? Today, Kristina Belnap, the SVP and CISO of HealthEquity, brings the role of human resources in bringing human risk management into the organization. Educating everyone on AI and bringing awareness into the space are keys to protecting information and securing our environments. Kristina provides some great insights on mitigating risk here on the Friendly Fire Podcast!

Cybersecurity is a high-stakes card game, and sometimes, it's not about winning every hand but mastering the game as a whole. In this episode, we welcome Allison Miller of Cartomancy Labs for an illuminating discussion on "The Theoretical Floor" and why resilience is the secret sauce to defending against modern cyber threats. She expounds on the world of human risk, shedding light on how we can redefine our understanding of cybersecurity and fraud prevention. Allison explores the concept of "The Theoretical Floor" and why sometimes, perfection isn't the goal. She describes it as a card game, where we need to think not just about that one hand but the entire game if we're going to win against the bad actors in cyberspace. Join us as we dissect the challenges faced by cybersecurity professionals, the evolving trends in the industry, and how we can better protect ourselves, both as individuals and as organizations.

For an API security platform to succeed in today’s fast-paced society, it must be widely familiar with the current trends of the digital world and keep its most skilled people for a long time. Tyler Shields sits down with Karl Mattson, CISO at Noname, to discuss these two vital factors. Karl explains how they approach cybersecurity as an up-to-date organization, the best way to keep up with APIs growing rapidly, and how not to acquire so many unnecessary cybersecurity tools in a constantly expanding team. Karl also talks about Noname’s high employee retention rate, emphasizing why it is important in navigating cybersecurity’s long list of risks.

Product security has greatly changed over time. How does human contribute to the changes going on? In this episode, Joern Freydank, a Lead Cyber (Application) Security Engineer, dissects the human issues in product security. He emphasizes the value of humans in providing a higher level of order intelligence operating the systems. Joern also shares the key component of the anti-patterns and discusses how threat modeling works in the modern era. There is so much to unpack in today’s episode. Tune in now!

We should embrace the human side of cybersecurity, where knowledge and vigilance become our most potent weapons in the age of digital health. In this episode, Esmond Kane, a CISO at a leading healthcare organization, sheds light on the critical role of human risk management in safeguarding our digital lives. He emphasizes that no matter the technological advancement, the human touch will always be among our most potent weapons against threats. Cybersecurity is a shared responsibility, and together, we can forge a safer digital future. Tune in now and learn more about cybersecurity in healthcare!

As technology advances, so does the threat posed in cyberspace. In this episode, Mark Weatherford, the SVP and Chief Security Officer at AlertEnterprise, navigates us through cyberspace and how AI and Government Policy impact change in cybersecurity threats. There is a monumental shift in positioning, treating, and regulating CISOs within the company, and generative AI has contributed much to the continuous change in the security environment. Mark shares his insights on how we can surf through this change. Learn more from Mark as you tune in to this conversation.

People make mistakes, and these unintentional mistakes drastically impact an organization. You shouldn't dance with risks and wait for cyber attacks to steal your stage. It's time to take action with Andre Russotti of Altria Client Services as he explains how Zero Trust does not solve the user-behavior problem that causes insider risks. Would you relax security controls? You better hop on to this conversation because Andre fires up more touch points for driving user behavior risk at a minimum.

In this episode, we unravel the complexities of Identity and Access Management (IAM) and explore the cutting-edge concept of Zero Trust. Join host Tyler Shields as he sits with Christine Owen, a recovering attorney who found solace in IAM and Zero Trust principles. Christine sheds light on the modern challenges of protecting digital assets in an ever-evolving threat landscape. Christine introduces us to the game-changing concept of Zero Trust, an approach that challenges traditional security paradigms. Tune in now and equip yourself with the knowledge to navigate the changes in cybersecurity.

Balancing risk and privacy is a delicate dance, but with the right solutions and strategies, organizations can effectively manage potential threats to their security while protecting their users' data. For today’s episode, Matthew Stephenson interviews renowned privacy and technology attorney Greg Silberman to discuss the fascinating and complex world of risk and privacy. With years of experience working in cybersecurity and developing solutions for intellectual property and privacy issues, Greg brings a wealth of expertise to the table. He shares his insights on whether it’s possible to choose one over the other. He discusses the challenges of balancing privacy concerns with the need for risk management and how organizations can find a way to strike a balance. Based on his extensive experience working with companies like Zoom, Blackberry, and Cylance, Greg also provides practical advice on how businesses can navigate the complex landscape of cybersecurity and data privacy. Tune in to discover the world of risk and privacy and learn the future of cybersecurity. 

If there is one sector that is keeping people cool, warm, and secure, that would be the utility sector. They are the ones who have been ensuring that our basic needs are well-provided and, in that process, well-functioning for decades. However, with the cyber element growing and taking root in the sector, threats to how utilities are delivered have become a concern. In this episode, Matthew Stephenson is joined by the Director of Energy Solutions at Finite State, Brian Proctor. Brian shares with us how the utility sector is taking cyber threats and eEvents head-on with their own cyber teams. He discusses the evolution of response teams as well as the regulations in the industrial control systems and operational technology. Brian also dives deep into open-source, how they are making things secure, and mitigating risks from the human element. Looking ahead, he then tells us what the industry needs to get better and improve at, especially as we look at the merge of people, process, and technology.