Protecting People

If you’re asking which information protection platform to choose, that’s not deep enough. It’s intellectually lazy.
Too often, we make technology decisions instead of programmatic decisions.
In a recent episode in our Inside Line on Information Protection series, we chatted with cybersecurity executive Jeremy Wittkop about reimagining DLP as a method for protecting people first.
We also talked about:

Why technology solutions don’t help CSOs discuss data protection
Multilingual services, behavioral analytics, and resource distribution
IT budgets and security budgets are not the same
Genuinely measuring and analyzing risk

Resources we mentioned during the podcast:

Activate Your Brain by Scott G. Halford
How to Measure Anything in Cybersecurity Risk by Hubbard and Seiersen

Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.
Listening on a desktop & can’t see the links? Just search for Protecting People in your favorite podcast player.

When we’re looking ahead at 2021 in information governance and regulatory changes, what will define the cybersecurity industry?

In this second of two episodes featuring regulatory changes in our Expert Insights series, John Pepe, Resident Chief Compliance Officer and Regulatory Counsel at Proofpoint, and Sonali Bhavsar, technology executive, forecast governance in 2021.

What we talked about:

- The importance of voice as a data footprint

- What to supervise for remote workers

- The challenge of creating a use case with archiving, supervision, and behavior analytics all as separate products

- Expectations on the regulatory side, plus new technologies

- Machine learning for entity mapping

Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Listening on a desktop & can’t see the links? Just search for Protecting People in your favorite podcast player.

In addition to focusing on malicious actors trying to gain access to your networks and your systems, are you just as focused on making sure that the people who already have access are doing what they’re supposed to be doing?

Insider Threat detection is one of the most underutilized, but overlooked aspects of any cybersecurity organization.

On this episode of The Inside Line on Information Protection, we talk with Larry Ponemon about:

- Why every company regardless of size, should be running Insider Threat programs

- The astronomical cost of Insider Threat investigations

- Why good people making silly mistakes may be more damaging that bad actors doing bad things

- The easiest way into a Fortune 50 company (it’s probably not what you think)

Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Listening on a desktop & can’t see the links? Just search for Protecting People in your favorite podcast player.

Introducing our new series: Inside Line on Information Protection.

In this show, we’ll welcome expert guests with diverse backgrounds in information protection to discuss topics like insider threat, information governance, and cloud security.
In this inaugural episode, host Brian Reed is joined by Catherine Hwang, Director of Product Marketing for Information Protection Products at Proofpoint.

What we talked about:

- The topics that will be covered in the series

- Why legacy DLP solutions aren’t solving customer challenges

- Wanting to solve more than one problem at a time with DLP budgets

Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Listening on a desktop & can’t see the links? Just search for Protecting People in your favorite podcast player.

Governance, AI, analytics, and regulation — 2020 sure changed a lot.

Good data hygiene looks totally different now, as does so much in the regulatory financial services realm.

In this first of two episodes featuring regulatory changes in our Expert Insights series, John Pepe, Resident Chief Compliance Officer and Regulatory Counsel at Proofpoint, and Sonali Bhavsar, Technology Executive, discuss what’s changed in governance 2020.

What we talked about:

- How communication data has exponentially shifted

- Regulatory and legal changes surrounding data

- Best practice guidance for insider threats

- What CFTC guidance means for technology best practices

- AI, machine learning, and transaction surveillance/transaction supervision
Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Listening on a desktop & can’t see the links? Just search for Protecting People in your favorite podcast player.

People spend over 3.5 hours on their mobile phone every day, and 50% of that time is spent on social media.   If you think your employees aren’t representing your company on social media platforms, you’re just plain wrong.   In this episode, we interview Amanda Anderson, Product Marketing Manager, Compliance at Proofpoint, about understanding security risks on social media from a people-centric perspective.   What we talked about:   - How social media is integral to modern business   - Trends and types of social media-related risks   - How technical and administrative controls play a role in social media compliance and security   Resources we mentioned during the podcast:   - Proofpoint & Hootsuite’s webinar: How to Design an Adaptable, Flexible and Compliant Social Selling Program   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Data doesn’t lose itself.   A person loses the data.   What, exactly, do we mean when we talk about people-centric security?   In our latest People Variable episode of Protecting People, Brian Reed, Cybersecurity Evangelist at Proofpoint and former Gartner analyst, talks to us about data loss prevention.   What we talked about:   - 3 reasons you would ever start a DLP project   - How to talk to your CISO about data loss   - Communication is everything in security awareness training   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Cloud account takeover activity has skyrocketed in 2020. When the security perimeter of your org is your people, how they access the cloud matters.   In this episode of our People Variable series, we spoke with Itir Clarke, Sr. Product Marketing Manager at Proofpoint, about risks people pose in the cloud.   What we talked about:   - One in six people use the same 1-2 passwords   - Why cloud security is of growing importance for awareness programs   - Two easy steps to address account compromise   Check out this resource we mentioned during the podcast:   - Getting Started with CASB   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

It’s the most wonderful time of the year. If you’re a hacker, that is.    Holiday season is always the time of the year when we see cyber attacks go through the roof. Why?   Because people are stressed out, they’re in a hurry, and they aren’t always paying close enough attention to things as they should.    After all, when Amazon emails you and tells you your package is going to arrive late, you take action, right?    Susan Mackowiak stopped by the Protecting People podcast recently and had a couple of thoughts to keep you and your loved ones safe this holiday season. We talked all about:    - How hackers utilize fear to get what they want   - Why you should do your shopping on a computer instead of your phone   - Why you should be wary of ads on social media, even if they appear to be from brands you trust   - Why people are the weakest link in the security chain    Find additional content, like our 2020 Holiday Security Awareness Training Kit and Best Practices Guide, and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Cybercriminals may be nefarious, but they are also people.    And people have habits.    If you want to stop one, it helps if you learn them.    In our latest episode, we’re speaking with Wes Drone, Sr. Manager, Threat Intelligence, at Proofpoint and a former FBI Agent, about what a typical day looks like for the people stopping threat actors by thinking like them.    We discuss:   - Wes’ transition from the FBI to threat intelligence   - The habits of threat actors    - How Wes tracks individual threat actors   Find additional content, like our Insider Risk Threat Assessment and Guide to Building a Security Awareness Program that Works, and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.