Great Security Debate

In what will surely become a recurring topic, the discussion turns to the short-term vs. long-term implications of privacy decisions we each make, the ethics of collecting and using data, and whether a European model of privacy (or data protection as Dan reiterates we should be calling it) would help in the US. We ask why we can't stop needing instant replies and gratification, is the value of the services we get worth the tradeoff for the data we are "paying" in order to use them, and more. Erik even beats Dan to be the first to use his "It Depends" catchphrase, so you know it's going to be a lively discussion.

Privacy is on everyone's mind these days, and it's the topic of The Great Security Debate today.

Support The Great Security Debate

Links:

• Charlie Wilson's War: The Extraordinary Story of How the Wildest Man in Congress and a Rogue CIA Agent Changed the History of Our Times: Crile, George: 9780802143419: Amazon.com: Books
• The Coddling of the American Mind: How Good Intentions and Bad Ideas Are Setting Up a Generation for Failure: Lukianoff, Greg, Haidt, Jonathan: 9780735224896: Amazon.com: Books
• "Black Mirror" Nosedive (TV Episode 2016) - IMDb
• Watch Upload - Season 1 | Prime Video
• Trump vs. Biden on Cybersecurity, Encryption, and Data Privacy
• Privacy and Information Security: The Territorial Challenges
• Regulating the internet giants - The world’s most valuable resource is no longer oil, but data | Leaders | The Economist
• Amazon Sidewalk will create entire smart neighborhoods. Here's what you should know - CNET

The school year is upon us. This week Erik, Brian and Dan are talking about things related to security and education. First, we cover the ongoing dilemma of which is better to establish and grow your career in security: certifications or experience. We also debate how traditional education (aka degrees) fit into the equation, and how to jump in if you have neither formal experience nor education and want to join the field... you'd never have guessed but "it depends!" Finally we talk about the challenges that K12 districts have managing security and privacy in normal times, let alone in the recent rush to move to remote learning so quickly.

We also spent a lot of time on mentoring and reaching out to people who are in the field for help, and some resources you can go to for info on mentoring, and the reminder that if you had mentors and those who helped you get where you are, to give back to those who will carry the torch next. Links to resources are in the links below.

Support The Great Security Debate

Links:

• Home - Zach's Book
• Home | WomSA
• MentorCore – Growth and Development at your Fingertips
• Home | Cloud Security Alliance
• Michigan Council of Women in Technology Foundation / MCWT Foundation
• Information Security Training | SANS Cyber Security Certifications & Research
• Cybersecurity and IT Security Certifications and Training | (ISC)²

Ransomware is increasing. Brian, Dan and Erik discuss the evolution of ransomware, the preparation and the response, and the debate about whether to pay the ransom or not.

Support The Great Security Debate

Links:

• You’ll need a Facebook account to use future Oculus headsets - The Verge
• AIDS Trojan | PC Cyborg | Original Ransomware | KnowBe4
• What is the WannaCry Ransomware Attack?
• Backdoors and Breaches
• The No More Ransom Project
• H.R.4718 - 99th Congress (1985-1986): Computer Fraud and Abuse Act of 1986 | Congress.gov | Library of Congress
• Cost of a Data Breach Report 2020 | IBM

On the debate today: it was overheard (over-read?) by one of the crew that security leaders and teams shoudl stop whining when security is not a “superstar” part of the business, but rather should focus on being a reliable supporting act that is there to prop up the actual “superstars.” There was a flawed comparison in this same read to the relationship between Scottie Pippen and Michael Jordan on the Chicago Bulls of the 90s. In the course of this episode we cover the “best” place for the security organisation to live, the need for CISOs and their teams to be at the table vs. the backoffce, quotes from Colin Powell and more.

Support The Great Security Debate

Links:

• The "C" Matters or: How I Learned to Stop Worrying and Love the CISO Job
• 11 Priceless Colin Powell Quotes - The Military Leader

Support The Great Security Debate

Links:

• Backup Strategies: Why the 3-2-1 Backup Strategy is the Best
• Data Privacy + Big Tech: How Facebook, Amazon, Apple, Netflix, and Google Deal With Data (And What It Means for You)   - METRO
• Wizer

Dan, Brian and Erik discuss the pros and cons of managed services for security vs. building similar capability internally, best of breed security vs. suite (for the 5th time since 1995), and education and awareness.

Visit our website at https://www.greatsecuritydebate.net

Contact us at [email protected]

Follow us on Twitter at https://twitter.com/securitydebate

Support The Great Security Debate

Links:

• The Big Interview: Peter Yapp, Partner, Schillings and former NCSC Deputy Director: “Boards Need a CISO Who Reports Directly to Them, Rather than the CIO”
• Martin Bally | LinkedIn

Dan, Brian and Erik debate the pros and cons to starting a product (or even a project) fully focused on hitting MVP (minimum viable product) or focusing more on TSP (totally secure product). Spoiler alert: it's somewhere in the middle! Also covered: the importance of support, defence vs response, and the mission of the podcast.

Visit our website at https://www.greatsecuritydebate.net

Contact us at [email protected]

Follow us on Twitter at https://twitter.com/securitydebate

Support The Great Security Debate

Links:

• Thoughtfulness in a Pandemic
• HBR: Why Data Breaches Don’t Hurt Stock Prices
• Extreme Ownership: How U.S. Navy SEALs Lead and Win (9781250067050): Willink, Jocko, Babin, Leif: Books
• Leaders Eat Last: Why Some Teams Pull Together and Others Don't: Sinek, Simon: 9781591848011: Amazon.com: Books
• Don't Reward The Brilliant Jerk: The Role Of Culture In Employee Retention
• True North: Discover Your Authentic Leadership: Bill George, Peter Sims, David Gergen: 9780787987510: Amazon.com: Books
• Hang Out A Shingle - Starting Your Cybersecurity Company Feat. Daniel Ayala and Douglas Brush - YouTube
• Crucial Conversations Tools for Talking When Stakes Are High, Second Edition: Patterson, Kerry, Grenny, Joseph, McMillan, Ron, Switzler, Al: 8580001040288: Amazon.com: Books
• Wizer: Security Awareness Training
• The Sixth Ocean!

Dan, Brian and Erik discuss how to talk about security in ways that encourage end users to understand security and want to be part of the process, and the challenges of selling security products into security organisations.

Visit our website at https://www.greatsecuritydebate.net

Contact us at [email protected]

Follow us on Twitter at https://twitter.com/securitydebate

Support The Great Security Debate

Links:

• Crossing the Chasm
• Never Split the Difference
• The Phoenix Project
• Great Security Debate Website
• Great Security Debate Twitter

Episode 1: Privacy Drone. Dan, Brian and Erik discuss expectation of privacy; privacy as a business enabler; transparency and ethical increase of privacy and how much should leaders and legislators understand privacy innately.

Visit our website at https://www.greatsecuritydebate.net

Contact us at [email protected]

Follow us on Twitter at https://twitter.com/securitydebate

Support The Great Security Debate

Links:

• Great Security Debate Website
• Great Security Debate Twitter