Threat modeling at an enterprise scale can be costly to implement, scale and maintain, but there are ways in which you can curtail spend in two key areas – threat modeling toolsets cost and resourcing cost. This podcast will discus key spend considerations including purchase model for OOTB software and services as well as resource allocation and required updates.

Speakers:

Karen Harris, Architect, Threat Modeling Program Lead, JP Morgan Chase

Kacy Zurkus, Senior Content Manager, RSA Conference

What is threat modeling and where does it fit in to the overall development process? In this podcast, we'll discuss what threat modeling is, when threat modeling activities are essential, and the skills needed to become a threat modeling expert.

Speakers:

Ashwini Siddhi, Senior Principal Product Security Advisor, Dell Technologies

Kacy Zurkus, Senior Content Manager, RSAC

The Department of Defense (DoD) is implementing a 3rd Party Supply Chain Risk Management program that will require companies that receive their sensitive information to implement NIST SP 800-171 and then undergo a 3rd Party Cybersecurity Maturity Model Certification (CMMC) event. This podcast will discuss the ripple effects of the requirements and the extent of the impacts.

Speakers:

Matthew Titcombe, CEO, Peak InfoSec

Kacy Zurkus, Senior Content Manager, RSAC

Password Managers are required by for employees at most companies, but are they designed to encourage good password hygiene? We conducted a comprehensive study with users who trusts the most popular passwords managers offered in the industry. We discovered that many users are still ignoring password reset notification from their Password Managers and aim to explain why that is the case.

Speakers:

David Ng, Director of Product Management, Salesforce

Jacky Ho, Director of Technology Regulatory Advisory, USB AG

Well-known frameworks and lots of advice exist to help people protect data, privacy, and devices, but minimize the implication of human factors. This podcast will discuss the PCSF and highlight the ways in which it will help organizations move one step closer to having people recognized as the new enterprise edge. The PCSF complements, and does not replace, an organization’s risk management process and cybersecurity program.

Speakers:

Lucia Milică Stacy, VP, Global Resident Chief Information Security Officer, Proofpoint

Kacy Zurkus, Senior Content Manager, RSAC

The cybersecurity community has had lots of conversations about workforce development, but it's time to take action. Learn about the efforts to bring cybersecurity education to the K-12 sector as part of the effort to narrow the skills gap and build the next generation of cyber defenders.

Speakers:

Laurie Salvail, Executive Director, CYBER.ORG

Kacy Zurkus, Senior Content Manager, RSA Conference

In order to mitigate the risks in telehealth devices, healthcare delivery organizations need to identify threats. Join this podcast to hear practical steps to implement a more robust security strategy rooted in standards and best practices that include how to use NIST Frameworks and the work being done by the NCCoE Healthcare team.

Speakers:

Anahi Santiago, CISO, ChristianaCare

Kacy Zurkus, Senior Content Manager, RSAC

This podcast is sponsored by Quantinuum. Quantinuum uses the power of quantum computing to keep organizations ahead of cyber risks by providing quantum-computing-hardened encryption keys to provably harden existing security measures.

The White House published the US National Cybersecurity Strategy that outlines a five-pillared approach to dismantling threat actors, enabling partnerships, and investing in resilience. But what does all that mean for cyber defenders? This podcast will examine the strategy in depth to help listeners both realize the vision and understand roles, responsibilities, and resources in cyber.

Speakers:

Brandon Pugh, Director, Cybersecurity and Emerging Threats, R Street Institute

Megan Stifel, Chief Strategy Officer, Institute for Security and Technology

Kacy Zurkus, Senior Content Manager, RSA Conference

Within the last decade, fraud and cyberattacks have become increasingly focused on exploiting digital identity. The exposure of digital identity as an attack surface has implications for individuals, enterprises, and even our societal structures. In this session we discuss the state of identity-based attack vectors and what the security community is doing to address them.

Speakers:

Gadalia Montoya Weinberg O'Bryan, CEO, Dapple Security

Kacy Zurkus, Senior Content Manager, RSAC

In the story of Gyge’s Ring, Plato asserts that if humans had the power to be invisible, they would act without consequence. In his book, Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency, Greenberg details the truth of Plato’s claim as he recounts stories of criminal activity on the dark web, where people believed they were acting anonymously without the risk of getting caught. Join this podcast to hear Greenberg discuss his favorite scenes in the book that reveals how researchers and investigators were able to trace cryptocurrency exchanges.

Speakers:

Andy Greenberg, Senior Writer, Wired

Kacy Zurkus, Senior Content Manager, RSAC