ISACA Podcast

The thought of taking a risk can dredge up feelings of discomfort or even outright fear for many. This reluctance has only been amplified by the uncertainty stemming from the COVID-19 pandemic. In this podcast, the Governance, Risk and Control (GRC) Conference 2020 keynote speaker Caspar Berry discusses the importance of taking risks and how not taking a risk may be costlier than taking a risk and failing.

Cybersecurity frameworks can be a valuable tool for organizations, helping them implement best practices and establish documentation for complex processes. But with so many different cybersecurity frameworks to choose from, selecting the right one can be challenging. In this episode of the ISACA podcast, Frank Downs and Dustin Brewer discuss what constitutes a framework, why there seem to be so many out there and how to determine what framework will best fit your enterprise.

As the role of technology has expanded, so has the amount of personal data that are being shared. While people want to protect their privacy, there is often a tradeoff between being able to use a service and not sharing data about yourself. In this podcast, Frank Downs and Dustin Brewer discuss the information we share and how to decide if we want to keep it private.

This podcast contains subject matter and references that some listeners may find objectionable. ISACA believes that the context of the subject matter makes it appropriate and necessary for the privacy discussion within this episode.

With the growing number of privacy regulations around the world and the growing emphasis on privacy, organizations must protect their customers’ privacy. But what happens when a privacy violation occurs in one country but affects someone in a different country, both of which are governed by different privacy laws? In this podcast, Steven Ross discusses some of the challenges associated with enforcing privacy regulations and what privacy expectations consumers should have. Share your feedback on the ISACA Podcast: https://www.research.net/r/9GR6F2D

Many organizations found themselves unprepared for the workplace and business disruptions caused by COVID-19. But it is possible for organizations to act now to protect their information systems. In this podcast, Steven Ross shares some strategies for remote work and explains how organizations can prepare for crises, such as a pandemic. Share your feedback on the ISACA Podcast: https://www.research.net/r/9GR6F2D

As a result of the COVID-19 pandemic, many organizations are now trying to manage having an entirely remote workforce. While remote work can allow people to stay safe while doing their jobs, there are some cybersecurity concerns associated with remote work. In this podcast, Frank Downs and Dustin Brewer address the benefits and challenges of working from home, how organizations can evaluate and improve their security posture, and the importance of cybermaturity. Share your feedback on the ISACA Podcast: https://www.research.net/r/9GR6F2D

A recent survey found that 90 percent of CISOs would take a pay cut if it meant better work/life balance. There are many reasons for CISO burnout, and a broader cultural shift is needed to combat the excessive pressure put on CISOs. In this podcast episode, Dustin Brewer and Frank Downs discuss the reasons for CISO burnout, why it is a problem and how it can be addressed. Share your thoughts on the podcast here: https://www.research.net/r/9GR6F2D

Links Dustin mentions:

• Dark Reading: https://www.darkreading.com/risk/90--of-cisos-would-cut-pay-for-better-work-life-balance/d/d-id/1336995

Complacency, refusal to deviate from a plan and freezing in stressful situations are harmful in a corporate environment and can be deadly in an extreme adventuring context. Alison Levine, the first American women's Everest expedition team captain, shares how lessons she learned on Everest can apply in a business context. Share your thoughts on the ISACA Podcast: https://www.research.net/r/9GR6F2D

Inventor Guglielmo Marconi, a key contributor to wireless telegraphy, did not want to engage with anyone who criticized his wireless telegraph technology, and he believed it to be completely secure. But in 1903, magician Nevil Maskelyn hacked a wireless telegraph communication. And while the communication methods and technology has changed since then, there are several lessons cybersecurity professionals can learn from Marconi and Maskelyn. Share your thoughts on the ISACA Podcast here: https://www.research.net/r/9GR6F2D

Red team exercises can help enterprises find and address their weaknesses. Unfortunately, the cybersecurity skills gap extends to red teams and blue teams. In this podcast, Frank Downs and Dustin Brewer discuss why red teaming, in conjunction with blue teaming, is a valuable tool for cybersecurity, and they also discuss some of the causes of and solutions to the skills gap. Provide your feedback on the ISACA Podcast here: https://www.research.net/r/9GR6F2D