Today's podcast, our Control Systems Cybersecurity Expert, Joseph M. Weiss, an international authority on cybersecurity, control systems, and system security, will be talking about Control system cyber security is about keeping lights on, water flowing, etc. It is more than a matter of preserving network accessibility. We get in-depth about how a cyber incident impacts control systems, critical infrastructure reliability, availability, and safety. Our expert explores how industrial, manufacturing, transportation, and others rely on Operational Technology (OT) Internet protocol-based (IP) networks to bring significant productivity improvements but with such progress gains new threats to the given system. Enjoy today's show!

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Today’s Guest, a key founder of Women’s Society of Cyberjutsu, is a cyber security researcher with a highly technical background in network forensic analysis. They set the stage with an exciting discussion on tracking cyber threats and risks unique to the exposure created by the pandemic. Answering questions like, what did we learn, and what is new in the post-pandemic environment? What things changed and which will never be the same again? Hear as they discuss the new post-pandemic landscape. Also, our Guest brought up a fascinating discussion on a new topic, which she called “Confirmation bias.” Many of us have experienced this but may not have a definition. This recent evolution in the digital world where we cannot validate data authenticity or accuracy. Whether news, records, or statistics, we are on our own to determine whether to believe what we read. As we wrap up, the discussion turns to some upcoming efforts supporting diversity in the industry from organizations like Cyber Jutsu. Finally, hear how our Guest recommends that companies make their job posting sound more appealing to a dispersed audience.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Personality is a large part of a successful cyber workforce. Today, we look at some questions that people often ask: How do you determine what you will be good at in cybersecurity? Which training should I take? Will I enjoy the workload in my chosen career? An ex-marine corp officer, Jason Shockey, has made a career determining personalities and how they fit with a job. Our discussion covers where we start with our education, what certifications to pursue, and how to choose your experience and training to be most effective. Today's show has something for the employer and human resources within companies, explaining recommendations for personality needs for a job opening based on criteria testing. Hear our guest method and 12 evaluation criteria for testing cybersecurity jobs and people for the best fit. This is a show you will not want to miss.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

In this segment of the NCF, Dr. Murray has a conversation with Chloe Messdhagi, the VP of Strategy at Point 3 Security, Cofounder of Women of Security (WOS), Cofounder of Hacking is not a crime and Founder of "We are Hackers." Chloe describes the unique niche market of vetting IT and cyber security professionals' skill sets with their talent screening and gamification platform. Before managers and HR personnel hire IT professionals, they should see demonstrated skills from viable candidates. Point 3 Security provides a capability for this growing need. The discussion transitions to three organizations that Chloe has started or partnered with to help women and other non-binary groups collaborate as professionals.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Our guest Kerry Matre from Mandiant Security supports marketing cybersecurity products. It is interesting to hear her path from application development and Security Intelligence to support marketing and business development. She brings the primary question to clients: why are we doing this, and how will people interact? Our guest says she often finds that many tools the organization purchased already are not fully implemented. The use of statistics such as configuration confidence is a very insightful measure, as she explains. What does it take to be using your tools effectively? This conversation also has some great discussions on AI versus human analysis, where we are producing viable solutions using AI. Finally, it was interesting to hear Kerry's take on the analyst industry in a few years. This show provides some great incite about the direction of the intelligence industry.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Today, Dylan Gilbert, Privacy Policy Advisor with the National Institute of Standards in Technology NIST, is our expert guest. Dylan, the Privacy Engineering program manager at NIST, from a Legal Backgroud, is tackling privacy on the federal level by creating a Privacy Framework. Hear the NIST perspective on the relationship between Privacy Risk and Cyber Security Risk Management. The Privacy Framework, designed to support workforce and business management, provides a context for organizations to implement privacy within programs or products. In addition, hear how to implement a Risk-Based Approach to assessing your business policies using quantitative analysis to determine where and how to address privacy. Privacy is a top social concern that many people are unsure how to handle. Our guest talks about how privacy is still unregulated in many areas, but that will change shortly. His advice is to become familiar with the NIST Privacy Framework and get ahead of what is assuredly coming in the future. If you are concerned about your privacy or how your organization handles privacy for data sets, you will want to listen to today's show.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Today's discussion with Rick McElroy of VMware Carbon Black turns to the cyber workforce's health as we prepare for the upcoming 5th Annual Converge2Xcelertate (#ConV2X). The Upcoming ConV2X Symposium on Nov 9-11, 2021, Focuses on Driving Telehealth and the Technology for securing our digital health records as we enter the new era where health providers provide online services. Rick, who will be delivering one of the key notes for the ConV2X, talks about another pressing issue in the cybersecurity industry: the burnout of our most talented resources. Hear as we discuss what some of the larger companies are doing to protect the workforce's health.  You will not want to miss the ConV2X and this episode which previews what you can expect to hear.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Today's guest, Tim Weil, and host Christopher Gorog discuss looking at what is required and best practices for implementing cybersecurity standards. Looking at everything you need to protect, working from the ground up, provides well-structured management and document policy overlay aiding what you may already have in place. For example, under the ISO27701 standard, if your product is scalable to international markets, then you would have a way of giving a positive attestation to how you run your cyber-management ecosystem. The time to implement compliance certifications into your cyber ecosystem may be earlier than you think because of the benefits of organizational improvements and efficiency. Find out the benefits of implementing early compliance into your cyber ecosystem on this episode of New Cyber Frontier.

Interested in finding out more about implementing compliance certifications into your cyber ecosystem, or finding auditing consultations, visit SecurityFeeds - Cyber Resource Portal

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

Today's guest Harry Marshall is an expert in incident handling and gives some much-needed insight into the incident handling process in some of the most successful companies. Today, we hear what the attackers are after and how to prepare ahead of time, knowing that incidents will occur. In addition, it was interesting to listen to the most common attack points on some of the most recent attacks. Finally, this conversation is also great about describing where the cloud has introduced new challenges to the corporate threat environment. You will gain a lot of value from his experience on where other companies have failed and the common pain points of his experience with incident handling.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services

In today's episode, guest Dr. Subhash Paluru and Host Shawn Murray talk about Dr. Paluru's extensive background working for the "Department of Energy" (D.o.E.) and the security of critical infrastructure devices. In addition, the two of them have an exciting dialogue about energy trading and how the department of energy overseas the security and other aspects of energy trading. Dr. Paluru has some great insight from his career at the D.o.E. where he was in charge of security for all the "Western Area Power Administration" (W.A.P.A.). The discussion has excellent insight into what is needed for the future of cybersecurity for the power grid as we move to renewable energy sources. This show has a little bit of everything from startup advice to understanding the mindset of policymakers at the D.o.E. and even future technology needs. We hope you enjoy this episode of New Cyber Frontier.

Visit our sponsors:

BlockFrame Inc.

SecureSet Academy

Murray Security Services