Redefining CyberSecurity

The current state of IoT security and privacy may look different to many people, businesses, and governments. This discrepancy could be a problem. With so many different viewpoints, it can be challenging to raise the bar and protect society from the technologies they are using.

In this episode with security researcher and privacy advocate, David Rogers, we explore how  organizations can leverage the work legislators and industry standards bodies  such as ETSI are producing to help their operations (product development, IT operations, security operations, and more)  bring consumer devices to market with security and privacy built in. We even discuss the value of translating codes of practice into multiple languages to help bridge the gap and remove the barriers to gaining traction with best practices around the world.

Also, there's a lot that goes into create a standard that get published or a bill that gets passed into law. That  journey, the way different individuals look at it, write, and translate it into something can actually be applied — and then audited and enforced — can be very tricky. For example, if the law includes the word "timely," what does that actually mean in practice? David and I get to discuss this a bit as well, as this is something that may not be well understood.

There's a shout-out to Aaron Guzman [@scriptingxss] re: the work he and others are doing at the Cloud Security Alliance [@CloudSA] and OWASP [@OWASP].

Have a listen.

____________________________

Guest
David Rogers
Founder and CEO at Copper Horse Ltd [@copperhorseuk]
On LinkedIn | https://www.linkedin.com/in/davidrogersuk/
On Twitter | https://twitter.com/drogersuk

____________________________

This Episode’s Sponsors
Imperva: https://itspm.ag/imperva277117988
Asgardeo | https://itspm.ag/asgardeo-by-wso2-u8vc

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

____________________________

Resources

Inspiring post: https://www.linkedin.com/posts/davidrogersuk_mapping-security-privacy-in-the-internet-activity-6929775703894728704-v3Zc

The Long Road to a Law on Product Security in the UK: https://mobilephonesecurity.org/2021/11/the-long-road-to-a-law-on-product-security-in-the-uk/

Product Security and Telecommunications Infrastructure Bill: https://bills.parliament.uk/bills/3069

ETSI EN 303 645: https://www.etsi.org/deliver/etsi_en/303600_303699/303645/02.01.01_60/en_303645v020101p.pdf

Podcast | Black Hat 25 & DEF CON 30 Live Streaming Coverage With ITSPmagazine | David Rogers: https://redefining-cybersecurity.simplecast.com/episodes/black-hat-25-def-con-30-live-streaming-coverage-with-itspmagazine-david-rogers-redefining-cybersecurity-podcast-with-sean-martin-and-marco-ciappelli

____________________________

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

There are so many questions that come with pursuing a cybersecurity career and education. Listen as we answer many of these questions and discuss how Level Effect sets its students up for success.

We go into detail about who might be a good fit to work in cybersecurity (hint: almost anyone!), what types of information students will need to know and what skills lend themselves to catching on to the learning materials quickly, when it might be a good time to start taking the next step in your education or career process, where you can go now to find resources, and why Level Effect strives to help its students every step of the way if they are willing to put in the work!

This episode also sheds light on the four professionals speaking, and many others, who have taken a similar "non-traditional path" to make their way into successful cybersecurity careers.

Note: This story contains promotional content. Learn more.

Guests
Anthony Bendas
COO at Level Effect [@Level_Effect]
On Twitter | http://www.twitter.com/anthonybendas
On Linkedin | https://www.linkedin.com/in/anthonybendas/

Will Nissler
Infrastructure Lead & Cybersecurity Instructor at Level Effect [@Level_Effect]
On Twitter | https://www.twitter.com/HedNDaCloud
On Linkedin | https://www.linkedin.com/in/william-nissler-770583188/

Sidney Crout
CDCP Certified Graduate of Level Effect, Threat Hunter at Confidential
On Linkedin | https://www.linkedin.com/in/sidney-c-1270a7ab/

Resources
Be sure to visit LevelEffect at https://itspm.ag/level-effect-66xu to learn more about their offering.

Level Effect's FREE Cybersecurity Foundations Course: https://itspm.ag/le609cc1

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in telling your story?
https://www.itspmagazine.com/telling-your-story

It may be a relatively easy connection to make - cybersecurity and privacy. But what about legal and operations and third-party products and services? Mix these things together, and some things get easier to understand ... yet some things get harder to manage.

Cybersecurity lawyers are a growing need as those who implement controls often don't understand the laws. It is closely related to privacy law, so an ideal would be a cybersecurity and privacy lawyer. Join us as we explore this connection and the impact these roles (or combined role) can have on an organization.

____________________________

Guest
K Royal, PhD, JD
Global Privacy Officer at Outschool [@outschool]
On Twitter | https://twitter.com/heartofprivacy
On LinkedIn | www.linkedin.com/in/kroyal
Serious Privacy Podcast [@PodcastPrivacy] | https://seriousprivacy.buzzsprout.com/

____________________________

This Episode’s Sponsors
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

Resources

SOC2 reports explained: https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report

ISO privacy and security article: https://www.iso.org/news/ref2419.html
ISO27001: https://www.iso.org/isoiec-27001-information-security.html
ISO27701: https://www.iso.org/standard/71670.html

Other frameworks mentioned
NIST privacy framework: https://www.nist.gov/privacy-framework
Cloud Security Alliance Cloud Controls Matrix: https://cloudsecurityalliance.org/research/cloud-controls-matrix/

Inspiration for this episode | Cybersecurity or Privacy Woman Law Professional 2022: https://www.linkedin.com/posts/carmenmarsh_cybersecuritywomanoftheyear-cswy2022-womenincyber-activity-6952128839116369920-TxZU/

____________________________

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

Operational Technology (OT) and Information Technology (IT) have historically been managed by separate teams. But with cyberattacks targeting IoT devices on OT systems in recent years and opening the possibility of breaches spilling over to IT networks (and vice versa), OT and IT teams realize just how much they need each other. As a result, the cybersecurity industry is seeing a convergence between OT security and IT security.

In this episode, Rock Lambros, CEO and founder of RockCyber, discusses how CISOs are taking the lead by pushing for OT and IT teams to collaborate to understand each other’s challenges and how their knowledge can help improve the security postures of each other’s networks. Lambros also examines the different perspectives of IT and OT teams and how CISOs can collaborate with OT teams to achieve organizational success—where operational and information systems benefit from a strong security posture that allows the company to function at peak efficiency.

_______________________

Community Member Contributor: Rock Lambros
CEO and founder of RockCyber [@RockCyberLLC]
On Twitter | https://twitter.com/rocklambros
On LinkedIn | https://www.linkedin.com/in/rocklambros/

Host: Sean Martin
On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/sean-martin

______________________

For more podcasts from Crucial Conversations with The Blue Lava Community, visit: https://www.itspmagazine.com/crucial-conversations-podcast

To access the full collection of Blue Lava Community resources, visit: https://itspm.ag/blclog22

To learn more about Blue Lava, visit: https://itspm.ag/blue-lava-w2qs

______________________

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

It's Hacker Summer Camp time! Thank you for joining this live stream during Black Hat and DEF CON with guest Giora Engel!

Watch the live stream video on our Black Hat and DEF CON coverage page: https://www.itspm.ag/bhdc22

Follow our social media as everything will be streamed live as it is. No editing, no script, and most of all … no BS 🎙✨🤘😬 

ITSPmagazine and friends ... connecting the world with InfoSec!

Guest
Giora Engel
CEO & Co-Founder at Neosec [@neosec_com]
On LinkedIn | https://www.linkedin.com/in/giorae/

____________________________

This Episode’s Sponsors

CrowdSec | https://itspm.ag/crowdsec-b1vp
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

For more Black Hat and DEF CON  Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
👉 https://itspm.ag/bhdc22sp

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

It's Hacker Summer Camp time! Thank you for joining this live stream during Black Hat and DEF CON with Ian Tabor @MintyNet!

Watch the live stream video on our Black Hat and DEF CON coverage page: https://www.itspm.ag/bhdc22

Follow our social media as everything will be streamed live as it is. No editing, no script, and most of all … no BS 🎙✨🤘😬 

ITSPmagazine and friends ... connecting the world with InfoSec!

Guests
Ian Tabor @MintyNet
Cyber Security Consultant at EDAG Group [@EDAGGroup]
On Twitter | https://twitter.com/mintynet
On LinkedIn | https://www.linkedin.com/in/mintynet/

____________________________

This Episode’s Sponsors

CrowdSec | https://itspm.ag/crowdsec-b1vp
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

For more Black Hat and DEF CON  Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
👉 https://itspm.ag/bhdc22sp

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

It's Hacker Summer Camp time! Thank you for joining this live stream during Black Hat and DEF CON with guest Laz!

Watch the live stream video on our Black Hat and DEF CON coverage page: https://www.itspm.ag/bhdc22

Follow our social media as everything will be streamed live as it is. No editing, no script, and most of all … no BS 🎙✨🤘😬 

ITSPmagazine and friends ... connecting the world with InfoSec!

Guests
Laz
...
On Twitter | 
On LinkedIn | 

____________________________

This Episode’s Sponsors

CrowdSec | https://itspm.ag/crowdsec-b1vp
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

For more Black Hat and DEF CON  Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
👉 https://itspm.ag/bhdc22sp

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

It's Hacker Summer Camp time! Thank you for joining this live stream during Black Hat and DEF CON with guest Saman Fatima!

Watch the live stream video on our Black Hat and DEF CON coverage page: https://www.itspm.ag/bhdc22

Follow our social media as everything will be streamed live as it is. No editing, no script, and most of all … no BS 🎙✨🤘😬 

ITSPmagazine and friends ... connecting the world with InfoSec!

Guest
Saman Fatima
Management Lead and Vice-Chair of Board at BBWIC Foundation [@barriers_in]
On LinkedIn | https://www.linkedin.com/in/saman-fatima-30/
On Twitter | https://twitter.com/saman_3014

____________________________

This Episode’s Sponsors

CrowdSec | https://itspm.ag/crowdsec-b1vp
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

Podcast | The Relationship Between Roles — When Data Engineering Meets CyberSecurity | A Conversation With Saman Fatima | Redefining CyberSecurity Podcast With Sean Martin

For more Black Hat and DEF CON  Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
👉 https://itspm.ag/bhdc22sp

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

It's Hacker Summer Camp time! Thank you for joining this live stream during Black Hat and DEF CON with guests Chloé Messdaghi and Phillip Wylie!

Watch the live stream video on our Black Hat and DEF CON coverage page: https://www.itspm.ag/bhdc22

Follow our social media as everything will be streamed live as it is. No editing, no script, and most of all … no BS 🎙✨🤘😬 

ITSPmagazine and friends ... connecting the world with InfoSec!

Co-Host
Chloé Messdaghi
Host of The Changemaking Podcast on ITSPmagazine and Chief Impact Officer at CybraryIT [@cybraryIT]
On ITSPmagazine  👉 https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/chloe-messdaghi

Guest
Phillip Wylie
Host of The Hacker Factory Podcast on ITSPmagazine and Manager, Tech Evangelism & Enablement at CyCognito [@CyCognito]
On ITSPmagazine  👉 https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/phillip-wylie

____________________________

This Episode’s Sponsors

CrowdSec | https://itspm.ag/crowdsec-b1vp
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

For more Black Hat and DEF CON  Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
👉 https://itspm.ag/bhdc22sp

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network

It's Hacker Summer Camp time! Thank you for joining this live stream during Black Hat and DEF CON with guest Tracy Z. Maleeff!

Watch the live stream video on our Black Hat and DEF CON coverage page: https://www.itspm.ag/bhdc22

Follow our social media as everything will be streamed live as it is. No editing, no script, and most of all … no BS 🎙✨🤘😬 

ITSPmagazine and friends ... connecting the world with InfoSec!

Guest
Tracy Z. Maleeff
Security Researcher at Krebs Stamos Group [@KrebsStamos]
On Twitter | https://twitter.com/InfoSecSherpa
On LinkedIn | https://www.linkedin.com/in/tzmaleeff

Link to Tracy's speaking schedule: https://infosecsherpa.medium.com/hacker-summer-camp-2022-2fb54f979b0e

____________________________

This Episode’s Sponsors

CrowdSec | https://itspm.ag/crowdsec-b1vp
Edgescan | https://itspm.ag/itspegweb
Pentera | https://itspm.ag/pentera-tyuw

____________________________

For more Black Hat and DEF CON  Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
👉 https://itspm.ag/bhdc22sp

To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
https://www.itspmagazine.com/redefining-cybersecurity-podcast

Are you interested in sponsoring an ITSPmagazine Channel?
👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network