Plan-B Security

Build vs Buy is a tale as old as time - something every business leader has been challenged with deciding. In this episode, we talk about 5 scenarios on when building vs buying make sense from not just a security perspective, but also a procurement and data privacy perspective. From building your own SIEM to data sharing platforms, we talk about our own experiences and when constraints help you go faster or when they'll slow you down.

Whether you’re big or small company or maybe even a solo entrepreneur, third-party risk management is a key part of your business staying secure. In this episode, we talk about a few ways to get ahead of all the international regulations that require compliance with third-party risk programs. As you listen, be sure to pause and apply some of the key concepts into your own business whether it’s data mapping or risk mapping two and from a vendor. So grab your favorite snack and your favorite beverage and let’s get ready to have a party.

Security Controls can make or break a business - it could be the difference between going fast or screeching to a halt. Learn how we can use industry data from Marsh McLennan (link at the bottom) to help quantify and justify which controls we should invest in first, and how all the controls in the world may just end up backfiring. Be sure to take a few moments to think through the thought exercises to help bring some of these lessons to your organization whether you're an employee, in management or an executive.

https://www.marshmclennan.com/news-events/2023/april/groundbreaking-research-from-marsh-mclennan-reveals-direct-link-.html

Pace of Action is all about understanding how fast, or how slow, you should be moving. It is a concept that applies to everything from handling tickets and defining an SLA to incident response. Take a server offline to mitigate a malware-based attack and lose forensics information? That's a tough one. But, you can learn how to make a thoughtful and informed decision by defining your pace of action.

Sometimes it feels like there's a war happening between Product/Eng and Security/Privacy team. Speed vs Stability can make or break a business. Not getting a feature out fast enough? You could loose the market edge. The service constantly going down? The only thing you'll grow are detractors. Listen to this tale of how to apply security principles using things like tests and data presentation layers to build a compromise between these conflicted team, and grow your impact at the business!

Join us in Celebrating not just our first podcastiversary, but also, a great perspective in growing a security mindset. Learn how to start good habits just like waking up when your alarm goes off. Building strong security habits in yourself allow you to grow those around you. Like a plant, you must water and find your purpose first, before you can inspire. Sometimes, you can inspire yourself through trying to inspire others using techniques like learning together. Lastly, learn how to apply a choice-driven discipline in your day to day personal and professional life as well. While there's a lot you can't control, the only true limitation is yourself.

A picture says 1,000 words is something everyone has heard. In lieu of a picture, data visualizations tell the story for the author. Sometimes, it's what the data shows that's most important. Sometimes, it's what the data is missing that speaks louder. Come along for this quick lightning round on direct and indirect data and the dangers that hide within.

This is a quick episode geared at showing the importance of making security usable. Using the GDPR and e-Privacy Directive cookie consent popup as an example, we can explore the difference the letter of the law vs the spirit of the law makes. Usable security follows the spirit of the law, where as bad security experiences are just to satisfy the letter of the law. So put on your most comfortable socks and join us for this great episode!

Authentication (Authn) and Authorization (Authz) are two of the most overloaded and incorrectly used words in the field of cybersecurity. It's with good reason - they are the two most fundamental principles behind building trust in the digital world. Authentication is when an identity is validated and verified to be who it say's it is. Authorization is the enforcement of permissions of the verified identity. Join us in this episode to learn all about this space and where the future is bringing us!