Long Way Around the Barn

Show Highlights

In the previous episode, we focused on purchasing and securing IoT monitoring devices, implementing platforms, and securing the data associated with them. This time, Rebecca Herold and Nathan Gibson join Matthew to explore the role and value of whole organization information security and privacy plans. Do you have them? Should you have them? And what do they look like?

• Creating an Information Security Plan that achieves compliance and ensures the data is protected in the manner the organization needs. 
• Putting a framework in place that addresses the full lifecycle of data and ensures human behaviors follow the plan with regular checks, tests, communication, and training to confirm everyone in the organization is aware and following the plan. 
• How senior leaders must stay aware of how well the organization is implementing and evolving the plan.
• Successful security and privacy programs are the ones that coordinate closely and often report to the same person in the organization.

(Read the full transcript) 

About Our Guests

Rebecca Herold has over 25 years of IT, info sec, and privacy experience. She is the owner and CEO of The Privacy Professor, founded in 2004, and Privacy Security Brainiacs, founded in 2020. Rebecca hosts the radio/podcast show, "Data Security & Privacy with the Privacy Professor." She is an expert witness, entrepreneur and author who has received numerous awards and recognitions for her work throughout the course of her career. Rebecca has written 20 books to date, chapters in many books and hundreds of articles. Learn more about Rebecca.

Nathan Gibson is the Chief Security Architect and Director of Enterprise Security Architecture at Allstate. Nathan’s information security journey spans multiple industries including our nation’s Air Force, healthcare, fintech, residential and commercial security, with a heavy focus on cloud engineering security. 

Show Highlights

Matthew and his guest address critical factors when purchasing monitoring devices, securely storing, moving, and using the collected data that is exponentially accumulating, and how to mitigate the exploitation of these systems.

(Read the full transcript)

About Our Guests

Xavier D. Johnson is the Founder of Enterprise Offensive Security in Detroit, Mich. He also serves as a Secondary Cybersecurity Instructor at the University of Michigan, the Director of #MISEC, a Founding Organizer of DEFCON Group for Detroit, Show Host on How They Got Hacked, and Founder of Red Team Clothing

Nicholas Starke is a highly skilled security researcher and penetration tester focusing on Internet of Things (IoT) security evaluations. Nick's primary area of interest within IoT is networking equipment, ranging from Small office / Home office routing equipment all the way to carrier grade/ISP equipment – and everything in between. Right now he is focused on enterprise-grade networking devices as part of his role as a Threat Researcher at Aruba Networks, a Hewlett Packard Enterprise company.