Sign up to save your podcasts
Or
Share Scale to Zero - No Security Questions Left Unanswered
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Scale to Zero - No Security Questions Left Unanswered
By Scale To ZeroTechnology
Scale to Zero - No Security Questions Left Unanswered episodes
- Understanding Threat Modeling and Secure by Design Concept with Adam Shostack | Ep.33 | ScaletoZero podcast | Cloudanix
Get ready for a paradigm shift in how you build software. In this episode of the Scale to Zero podcast with Adam Shostack, we crash-landed with a powerful concept called Secure by Design! It's not just a mantra for the Rebel Alliance, it's the key to building unbreachable software from the very first line of code.
00:00 Teaser and Introduction of guest05:44 What is the Secure by Design concept? And why is it crucial?
09:30 Difference between Secure by Design and Secure by Default
12:50 Key steps to integrate Secure by Design principles in SDLCs
18:45 Area of focus for integrating threat modeling in SDLCs
21:18 Validating the threat modeling design
25:50 Thin line between Star Wars and Secure by Design concept
31:00 Examples from Star Wars that resonate Secure by Design concept
33:20 Role of communication and collaboration in the Secure by Design concept across various teams
36:40 How to raise awareness about the importance of Secure by Design within workplaces
40:00 Concept of Cyber Public Health and its connection to threat modeling
44:29 Summary
45: 20 Rating Security Practices section
53 min - Conquering Enterprise Risk Management with Amit Subhanje | Ep. 32 | Cloudanix
Feeling overwhelmed by cyber risk? We've got you covered! In this episode of ScaletoZero, Our guest Amit Subhanje dives deep into everything risk management, from understanding its importance to conquering cybersecurity and cloud security challenges. Remember security awareness is the key, get ready to become a risk management master! Hit play and join now!
00:00 Teaser + Introduction
04:35 Day in Amit's life
06:20 What is risk management and it's importance?
08:22 Risk management and cybersecurity or cloud security
11:00 Challenges organizations face managing cyber risks
13:55 How to address cyber risk challenges?
16:30 Thin line between enterprise risk management and risk management
17:00 How can startups build comprehensive risk mitigation plan?
22:45 Building security awareness in an organization
29:20 How can teams lead and be accountable for security incidents?
33:10 Summary
34:10 Rating security practices
43 min - Exploring the World of Incident Response and Detection with Pablo Vidal | Ep 31 | Cloudanix
Feeling lost in the world of Detection and Response (D&R)? In this episode of ScaletoZero, our guest Pablo Vidal equips you with everything you need, from core concepts and overcoming common challenges to leveraging automation and building a winning incident response process. We explore the future of D&R with Generative AI, offer valuable advice for aspiring security engineers, and provide organizations with strategies to hire top talent and identify red flags during recruitment. Join us and become a D&R master!
00:00 Teaser01:00 Introduction and more07:00 Concept of Detection and Response08:21 Motivation to continue in detection and response11:40 Challenges in implementing incident detection and response process13:30 Typical incident response process15:25 Using automation or orchestration tools for incident response17:00 Keeping the right balance between SDLC and incident response19:35 Generative AI and Incident Response Process22:20 Will GenAi replace security engineers?24:40 Advice to newbies in incident and response26:40 Additional skills to have28:00 Skills organizations should look for while hiring security engineering teams31:30 Strategies for organizations to attract top talent33:45 Common do's and don't of hiring security engineering team35:25 Red flags in candidates during the hiring process37:37 Summary38:37 Rating Security Practices43 min - Building Cybersecurity Teams and Virtuous Circle With Clients ft. Jesse Miller
In episode 30 of the ScaletoZero podcast, we had a very thoughtful discussion with Jesse Miller who is also known as an operational powerhouse when it comes to information security and compliance. This episode is a must-watch for all the leaders who are building their cybersecurity teams. Jesse shares some real uncommon insights (without sugarcoating facts) that will help security leaders and SMBs build their cybersecurity teams.
00:00 Teaser + Introduction 07:00 Skills to look for when hiring security teams10:57 How do you attract the right talent to your organization?13:47 Hiring early security roles for growing startups14:22 Setting KPIs for the newly hired security roles17:50 How security teams can engage with other business units?21:30 Where organizations are making mistakes?26:24 What is Building Virtuous Circle?29:40 Benefits of building a virtuous circle with clients in your organization.30:55 How can CISOs educate their clients about sound security investments?32:50 Advice to aspiring CISOs and CIOs35:28 Summary36:18 Rating Security Practices43 min - Beyond the Basics: Understanding Threat Hunting and Security Research with Josh Pyorre | Cloudanix
In episode 29 of the ScaletoZero Podcast, we had an insightful discussion with Josh Pyorre about threat-hunting approaches in today's digital world. Josh shared his expertise on balancing security complexities and creativity while discussing ways to reduce cyber risks for individuals and organizations.
00:00 Teaser01:00 Introduction05:00 What is Threat Hunting?08:00 Why threat hunting is important for organizations?08:55 Proactive vs. Reactive approach to threat hunting10:17 Challenges of adopting a proactive or reactive approach12:00 Creatively approaching Threat Research16:25 Generative AI in Cybersecurity18:33 Challenges of GenAI for security threat research22:22 Keeping balance in presenting complex security topics to a diverse audience24:25 Why security ecosystems should prioritize startups and non-profits29:20 Summary30:20 Rating Security Practices36 min - Keeping Pace with Cloud Security: A Guide to Maturity Models with Rich Mogull | Ep28 S2 | Cloudanix
In this episode of the ScaletoZero podcast, we had an enlightening discussion with cloud security expert Rich Mogull. We delve into the Cloud Security Maturity Model (CSMM) and its profound impact on modern cybersecurity practices. Rich takes us on a journey through the evolution of CSMM, from its inception to its current significance in cloud security strategies.
00:00 Teaser01:02 Introduction07:35 What is the Cloud Security Maturity Model?09:30 Importance of CSMM and Life before Cloud Security Maturity model13:10 How does CSPM align with the existing cloud framework17:22 Challenges security leaders face when implementing CSMM21:50 Recent updates to the Cloud Security Maturity Model26:50 Impact of updates to organizations following existing CSMM30:14 How can organizations use CSMM v232:32 Cloud Security Lab A Week35:00 Journey of Cloud security lab a week37:50 Wisdom for folks thinking of starting a project around cloud security40:00 Summary41:00 Rating Security Practices section51 min - The Cloud Security Saga | Joseph South - Part 2 | S2 Ep26 | ScaletoZero Podcast | Cloudanix
Join us with our expert, Joe, as we delve into the evolution, complexities, and solutions for safeguarding data and systems in the cloud. From discussing emerging threats to sharing expert insights on best practices, Joe will unravel the mysteries and empower you with actionable knowledge. Watch the complete episode now!
00:00 Teaser00:40 Introduction01:00 Evolution of cloud complexities and it's security04:00 Securing your own infrastructure based on cloud complexities05:50 Review and keep the attack surface clean08:00 Prioritizing risks and what area to focus10:45 Resources to implement cloud security12:10 How to remediate security findings14:40 Evolution of cloud security landscape in the last decade17:40 Emerging trends and technologies19:10 Using GenAI for security23:00 Summary23:55 Rating Security Practices32 min - Understanding the concepts of Supply Chain Security, Container Images, SBOMs, and more with Aung
In this engaging ScaletoZero podcast episode, cybersecurity expert Htet Aung delves into the complexities of software supply chain security, emphasizing the importance of practices like software bill of materials (SBOM) and container image signing. He also rates key security practices and recommends valuable resources for further exploration. Don't miss out!
00:00 Start and Podcast teaser01:20 Guest Introduction04:45 What is Software Supply Chain Security?05:38 Importance of software supply chain security for organizations08:10 Tackling supply chain security challenges11:10 Prioritizing software composition based on SBOMs14:00 Analyzing SBOMs to improve security and compliance15:15 What is Container Image Signing?17:07 Different methods of Container image signing19:00 Best practices when incorporating container image signing20:50 Prioritizing container image signing24:55 Summary25:55 Rating security practices section29 min - Navigating the Identity and Access Management Landscape | Joseph South Part 1 | Ep 24
Justice to Identity and Access Management
00:00 Teaser01:00 Show Introduction01:45 Guest Introduction08:20 Why does IAM still need attention?10:15 Why has IAM been getting more attention recently?12:34 The ability to create users and roles at will is the advantage of the cloud & downfall of cloud IAM14:55 How do organizations deal with these double-edged scenarios?16:30 Prioritizing security configurations for IAM20:10 Things organizations should keep in mind when working with IAM23:00 Keeping balance between implementing best practices and SDLC25:55 Why security is not given enough attention?31:24 Top 5 IAM considerations for matured organizations33:38 Summary34:26 End of Part 135 min - Unlock the Secrets to Successful Cloud Security with Andre Rall | S2 Ep23 | Podcast | ScaletoZero
Join us as we dive deep into the world of IAM and cloud security with the brilliant Andre Rall. 🌟 He's sharing his expert and practical strategies to protect your data, ensuring your digital fortress is impenetrable!
00:00 Teaser01:18 Introduction04:40 Day in our guest life07:20 Why IAM needs attention?10:55 From network to IAM, what changed?13:45 Evolution of complexity of cloud security.17:18 Keeping a balance between multi-cloud and security.19:45 Top 5 security practices to incorporate in a multi-cloud environment.22: 30 Mindset shift required in deploying workloads in data centers and in the cloud.26:00 Mitigating the gap between security professional jobs and required proficiency.29:00 How can security professionals upskill?32:22 Building trust with your partners34:20 Summary35:20 Rating security practices42 min
About Scale to Zero - No Security Questions Left Unanswered
From the publisher's feed
We know security is challenging, but a timely understanding of security is far more challenging! Scale to Zero is built for all the security professionals for helping them to be more privacy and…
security-sensitive. With this show, we hope to address all the security-related issues that are challenging to understand and resolve without the help of experts. We believed that a community space like Scale to Zero would make things a little bit simpler for everyone after we discovered the discomfort of constantly switching back and forth.