Free SPF/DKIM/DMARC analyzer tools for DMARC setup - DMARCLY

Learn and Test DMARC (learndmarc.com)

DMARC Check Tool - Domain Message Authentication Reporting & Conformance Lookup - MxToolBox

Intro:

• Welcome back to "Off the Wire," the podcast helping you curb cybersecurity risks and tackle technology challenges.

Main Topic: Low-Cost, High-Impact Cybersecurity Investments

Introduction to the Topic

• Discuss the challenges faced by small to medium-sized businesses in allocating budgets for cybersecurity.

Understanding Budget Constraints and Other Challenges

• Budget limitations and other constraints like legacy applications and organizational resistance to change.

Cybersecurity Prioritization Strategies

• Utilizing free or low-cost open-source tools when possible.

Cybersecurity Frameworks and Assessment

• Importance of assessing the current state of cybersecurity.

Key Focus Areas for Low-Cost Cybersecurity Measures

• Asset Management:

• Importance of knowing what's on your network.

• Using free tools like Microsoft Authenticator or Google Authenticator.

• The critical role of updates in preventing security breaches.

• Developing and maintaining security plans and policies.

Additional Low-Cost Solutions

• Threat Intelligence:

• Leveraging free industry-specific threat intelligence resources and communities.

• Importance of investing in additional layers of email security.

• Making full use of existing tools and software, especially in environments like Microsoft 365.

• The importance of Endpoint Detection and Response (EDR) in mitigating breaches.

Backups and Disaster Recovery

• The necessity of regular and tested backups.

Creating a Cyber Go-Bag

• The concept and contents of a cyber go-bag for emergency response.

Connecting Cybersecurity to Business Objectives

• Emphasizing the alignment of cybersecurity goals with overall business objectives.

Conclusion:

• Recap of key points and encouragement to implement the discussed strategies.

Closing Remarks:

• Next episode preview and sign-off.

Introduction:

• Host Introduction: Tanner Greer and Anthony Kent, two IT executives with 35 years of combined experience in the IT field, specializing in cybersecurity.

Segment 1: Conference Recap

• Anthony's recent attendance at the IT conference for South Carolina co-ops.

Segment 2: Understanding Zero Trust

• Zero Trust explained: "Never trust, always verify."

Segment 3: Key Concepts of Zero Trust

• Basic principles: Never trust, always verify; least privilege; and assume breach.

Segment 4: Implementing Zero Trust

• Defining the protect surface: Identify what needs protection.

Segment 5: Real-world Application

• Anthony's recent project: Redesigning an OT environment using Zero Trust principles.

Segment 6: Lessons Learned

• Importance of strategic goals: Integrating Zero Trust into organizational strategy.

Segment 7: Pitfalls and Considerations

• Usability impact: Balancing security measures with operational needs.

Segment 8: Resources and References

• Recommended reading: "Project Zero Trust" book.

Conclusion:

• Recap of the episode.

Closing:

• Reminder to check previous episodes.

Sign-off:

• Hosts' sign-off and thanks for listening.

Welcome to the Show:

• Greet listeners and introduce the podcast name.

Hosts Introduction:

• Anthony and Tanner, two IT executives with a combined 35 years of experience in IT and cybersecurity.

Episode Overview:

• Introduction to today’s topic: Finding, Hiring, and Retaining Technology Employees.

Anthony’s Update:

• Recap of the conference attended.

Tanner’s Update:

• Current issues being tackled in the company.

• Brief Introduction:

• Overview of the main topic: The critical aspects of finding, hiring, and retaining technology employees.

Attracting Talent in SMBs:

• The difficulty small and medium-sized businesses (SMBs) face compared to larger corporations.

Location-Based Challenges:

• How geographical location affects the talent pool.

Remote Job Market Competition:

• The rise of remote work and its impact on local hiring.

Salary Disparities:

• Comparison of pay scales between SMBs and large enterprises.

Close-Knit Work Environment:

• Describing the family-like atmosphere in smaller organizations.

Direct Interaction with Leadership:

• Opportunities for employees to interact with top executives.

Impact and Recognition:

• How individual contributions are more visible in smaller settings.

Flexibility and Work-Life Balance:

• Offering flexible schedules and remote work options.

Highlighting Advantages in Job Postings:

• Crafting compelling job descriptions that attract top talent.

Promoting Company Culture and Values:

• The importance of a strong organizational culture.

Competitive Salary and Benefits Packages:

• Offering market-competitive salaries.

Community Involvement and Reputation:

• How being active in the community can enhance your company’s attractiveness.

Work-Life Balance:

• Policies that support employees’ personal lives.

Team-Building Activities:

• Organizing regular team outings and events.

Autonomy and Leadership Opportunities:

• Allowing employees to lead projects.

Flexible Work Arrangements:

• Implementing hybrid work models.

Benefits of Internships:

• How internships can serve as a talent pipeline.

Challenges of Implementing Internship Programs:

• Security and training concerns.

Success Stories:

• Examples of interns who became full-time employees.

Technical Interviews and Assessments:

• Different approaches to evaluating technical skills.

Cultural Fit and Team Dynamics:

• Assessing candidates for cultural and team fit.

Pre-Employment Tests:

• The role of cognitive and personality tests in the hiring process.

Balancing Long-Term and Immediate Impact:

• The value of hiring for both short-term gains and long-term stability.

Fostering a Positive Work Culture:

• Continuous efforts to maintain and improve workplace culture.

Continuous Improvement of Recruitment Processes:

• Regularly reviewing and refining hiring practices.

Listener Engagement:

• Encourage listeners to share their experiences and strategies.

Call to Action:

• Subscribe to the podcast.

Reminder of Release Schedule:

• Biweekly episodes released every other Monday.

Thank You:

• Thank listeners for their support and engagement.

Podcast Episode Show Notes: Importance of Incident Response Plans (IRPs) 

Episode Highlights: 

• Rising Cybersecurity Threats:Discussing the increasing threat levels and the growing importance of cybersecurity. 

Key Topics Covered: 

1. Need for IRPs: 

• Importance for regulatory compliance (HIPAA, GDPR, PCI). 

• IRPs should be simple enough for the least experienced technical staff to understand and use. 

• Importance of annual or quarterly reviews to keep the IRP current. 

• Importance of centralized and proper documentation during incidents. 

• Involving legal, communications, accounting, and other relevant departments in the IRP. 

• Securing support from top management to facilitate smoother implementation and adherence. 

• Creating a "go bag" with necessary tools and documentation for incident response. 

• Utilizing resources like the CIS IRP template and industry-specific frameworks for effective IRPs. 

• Start with what you have, involve stakeholders, keep the plan simple, and ensure regular reviews and updates. 

Additional Resources: 

• CIS IRP Template: Link to CIS IRP Template 

Stay Connected: 

• Subscribe: Don’t miss an episode – subscribe to our podcast. 

Next Episode: 

• Join us next time for more insights on cybersecurity and technology. New episodes drop every other Monday! 

• We hope you enjoyed this episode. If you found it helpful, please share it with your colleagues and friends. Thank you for listening to Off the Wire Podcast! 

## Off The Wire Podcast Show Notes

### Episode: Backups and Data Recovery with Brian Williams from Rubrik

**Guest:** Brian Williams, Rubrik

**Location:** NCLGISA Conference 2024, Downtown Wilmington

### Key Topics Discussed

#### Importance of Backups

#### Transition to Rubrik

#### Role of Backup Engineers

#### Tape Backups and Air Gapping

#### Modern Backup Strategies

#### Cloud-Based Backups

#### Immutability and Data Security

#### Data Integrity and Reliability

#### Regional Backup Strategies

#### Real-World Examples

### Quarterly Checkups with Rubrik

### Recommendations for All Organizations

### Conclusion

### Call to Action

---

For more information on Rubrik and their backup solutions, visit [Rubrik's website](https://www.rubrik.com). 

Stay tuned for more episodes and insightful discussions on Off The Wire!

**Podcast Episode Summary: Off the Wire - Cybersecurity Insights from the Verizon 2024 Data Breach Investigations Report**

**Hosts:** Anthony Kent and Tanner Greer

**Episode Overview:**

**Key Topics Discussed:**

1. **History and Importance of the DBIR:**

2. **Ransomware and Extortion:**

3. **Human Element in Breaches:**

4. **Vulnerability Exploitation:**

5. **Attack Vectors:**

6. **Denial of Service Attacks:**

7. **Lost and Stolen Assets:**

8. **Privilege Misuse:**

9. **Artificial Intelligence:**

**Mitigation Strategies:**

**Call to Action:**

**Upcoming Episodes:**

## Off the Wire Podcast Show Notes

### Episode Summary

### Key Topics Covered

2. **Impact of COVID-19 on Remote Work**

3. **Challenges of Securing Remote Work Environments**

4. **Best Practices for Remote Work Security**

5. **User Education and Awareness**

6. **The Future of Remote Work Security**

### Key Takeaways

### Resources Mentioned

### Closing Remarks

Tune in next time for more insights and expert analysis on the Off the Wire podcast!