Protecting People

Your workers are 100% remote now… using their personal devices and personal accounts for work. Cybercriminals will capitalize on their shock and fear to cause as much data loss as possible.   In this #ExpertInsights episode, I interview Tim Choi, VP of Product Marketing at Proofpoint, about how to protect your people from cybercrimes… remotely.   What we talked about:   - Examples of shock-based phishing (some are quite clever)   - What employees can do to protect themselves   - What employers can do to protect employees & data   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Do you think you have what it takes to be a cybercriminal? It’s not a profile you might expect: high in people skills… low in tech.   In this episode, we interview Adenike Cosgrove, Director of International Product Marketing at Proofpoint, about skills that cybercriminals need.   What we talked about:   - Ideal places to live for cybercrime   - People skills, not tech skills   - Who criminals research — VAPs (very attacked people)   - Examples of successful cyber crimes   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or on our website.

Regulatory change can inspire downright terror in many of us. When that happens, the best thing to do is search for insights from experts.   In this episode, the first in our #ExpertInsights series, we interview Guy Levitt, CEO at TeleMessage, and Nigel Cannings, CTO at Intelligent Voice, about the myriad challenges of recording voice calls.   What we talked about:   - Everything can be retrieved in WhatsApp   - Why regulations are so apparently conflicting and definitely confusing   - Predictions about the future of regulation   - California will come after you if you are in breach of two-party consent   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or on our website.

Privilege is an entity's degree of power within an org.    Think technical access, like a DevOp manager’s ability to manipulate sensitive files and systems.   Or a finance team member’s authority to issue wire transfers on behalf of the org.   We are rounding out our series on risk by interviewing Roie Cohen Duwek, Director of Security Research at Proofpoint, about privilege-based attacks. What we talked about:   - Why EAC attacks are so insidious and effective   - Privilege abuse and cloud-based attacks   - Ways that legitimate accounts get compromised   - What CISOs should do to protect their employees   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or on our website.

If you could send an email as anyone, who would it be? You might pick an executive assistant, the agent of your favorite band, or a payroll employee.   Jumping from persona to persona is the game that hackers are playing now.   In this episode, we interview Sherrod DeGrippo, Sr. Director of Threat Research and Detection at Proofpoint, about the psychology of today’s hackers.   What we talked about:   - The psychology of threat agents and how they bounce across personas in an organization   - Analyzing attacks from a people-centric viewpoint   - The pattern and process of attacks, start to finish   - Tools and technology to reduce vulnerabilities   Find additional content and subscribe to Protecting People on Apple Podcasts, Spotify, or our website.

Just 61% of survey respondents knew what the definition of phishing was — and that was from a multiple-choice list.   This response is a huge indication of the language gap between InfoSec and users, which speaks to the urgent need for security awareness training.   In this episode, we interview Gretel Egan, Security Awareness and Training Strategist at Proofpoint, about the extent of vulnerabilities.   What we talked about:   - What effective security awareness training looks like   - The 2020 State of the Phish Report’s robust data   - How employees are putting their organizations at risk   - Pain points for companies (55% had a successful attack)   Check out this resource mentioned during the podcast:   - The 2020 State of the Phish Report Subscribe to Protecting People at Apple Podcasts, Spotify, or our website.

Why would you do something hard when you could do something easy? That’s exactly what attackers are thinking.   99% of attacks rely on duping a human to run malicious code.   In this episode, we interview Ryan Kalember, EVP of Cybersecurity Strategy at Proofpoint, about why today’s attacks are about people, not infrastructure.   What we talked about:   - Social engineering is at the heart of over 99% of cyberattacks   - 26 billion cyberattacks are only a tiny fraction   - Industry focuses on technology while attackers focus on people Subscribe to Protecting People at Apple Podcasts, Spotify, or our website.

There are only two types of companies in the world today: companies that are compromised and companies that don’t know they’re compromised. Which one is yours?   In this episode of Protecting People, we interview Prasanna Ramakrishnan, Global Head of Infosecurity Risk at Signify, about the fact that we are all living in a continuously compromised state.   What we talk about:   - Smart devices in your home can be hacked   - People are the weakest link in the security chain   - The 2 types of companies out there   - Awareness training and other effective security controls   Subscribe to Protecting People at Apple Podcasts, Spotify, or our website.

The biggest cybersecurity challenges are the wicked problems, the unsolvable, people-based problems.   A lot of security is getting into the “wicked problem” space at this point.   On this episode, we interview Adrian Ludwig, CISO at Atlassian, about how he protects people against people-based risks:   What we talked about:   -Challenges in communicating risk effectively to people   -Creating layered systems to protect against training failures   -Finding hidden expectations in your workplace and among consumers   -Where cybersecurity is headed in 2020 Subscribe to Protecting People at Apple Podcasts, Spotify, or our website.

85% of execs identified that most cybersecurity breaches are a result of human vulnerabilities. Not because of technology. Because of people.   Listen in to hear 2 ways that companies are responding to protect themselves from people-based threats. On this episode, we interview Robert Powell, Editorial Director Americas and Thought Leadership at The Economist Intelligence Unit:   What we talked about:   -The most surprising statistics from Robert’s latest report   -Who is most likely to be targeted at a company   -How companies are protecting themselves from people-based threats   -What it means to practice good digital hygiene   Check out the report we mentioned during the podcast: Cyber Insecurity: Managing Threats from Within Subscribe to Protecting People at Apple Podcasts, Spotify, or our website.