Samara R. Williams 🔸️ Manager of Threat Operations for Cardinal Health joins on us on this episode of Security Confidential. Samara pecializes in defense in depth improvement, vulnerability management, threat intelligence, technical risk communication, and cybersecurity program design and development. She has several degrees in computer science and cybersecurity and she is passionate about helping young people with STEM. Samara is also the founding member and treasurer of Empower Women of Infosec.

01:36 Journey into Cybersecurity-South Texas to Columbus

05:08 Passion, persistence, and reliance = success in cybersecurity

08:17 Why is there a lack of people going into STEM?

15:12 Building a team in the pandemic and Social Media

20:55 Vulnerability and Risk Management and Threat Intelligence

23:34 Defense in Depth Build of Risks

26:12 Metrics to consider in cybersecurity

29:34 Making Threat Intelligence actionable

35:50 Mentorship in Cybersecurity

39:57 Organizations of interest to Samara and Scholarships

To learn more about International Consortium of Minority Cybersecurity Professionals (ICMCP)

Empower Women in Infosec https://www.empower-infosec.org/

Check out the videocast

#Cybersecurity #threatintelligence #vulnerabilitymanagement #DarkRhinoSecurity

Ilya Bodner joins us on Security Confidential. Ilya is the found and CEO of Bold Penguin a highly successful technology company serving major insurance companies. Ilya has created a great company and achieved great success. He has received much recognition including business executive of the year and Columbus Business First 40 under 40 Class of 2019. In this episode Ilya discusses:

01:34 Journey from Russia to the CEO of Bold Penguin

05:00 Partner/Co-Founder Relationships

09:03 Three legs of the stool for business success

14:25 Lessons from working with VCs

17:40 How to land your first customer

23:26 Origins of the name Bold Penguin

26:00 Why pick insurance as the prime sector for a tech startup?

28:53 Competing with insurance companies on their own products

32:14 Is cybersecurity a business problem or an IT problem?

35:47 Making cybersecurity accessible to SMBs

36:37 Should cyber insurance be tied to effectivity of implemented controls?

39:40 What does a startup enthusiast do next?

41:25 Career opportunities at Bold Penguin

To learn more about Ilya

To learn more about Manoj Tandon

To watch the videocast 

To learn more about Bold Penguin

To learn more about Dark Rhino Security

Ilya Bodner joins us on Security Confidential. Ilya is the found and CEO of Bold Penguin a highly successful technology company serving major insurance companies. Ilya has created a great company and achieved great success. He has received much recognition including business executive of the year and Columbus Business First 40 under 40 Class of 2019.  In this episode Ilya discusses:

00:00 Introduction 

01:34 Journey from Russia to the CEO of Bold Penguin 

05:00 Partner/Co-Founder Relationships 

09:03 Three legs of the stool for business success 

14:25 Lessons from working with VCs 

17:40 How to land your first customer 

23:26 Origins of the name Bold Penguin 

26:00 Why pick insurance as the prime sector for a tech startup? 

28:53 Competing with insurance companies on their own products 

32:14 Is cybersecurity a business problem or an IT problem? 

35:47 Making cybersecurity accessible to SMBs 

36:37 Should cyber insurance be tied to effectivity of implemented controls? 

39:40 What does a startup enthusiast do next? 

41:25 Career opportunities at Bold Penguin

To learn more about Ilya Bodner

To learn more about Dark Rhino Security

Ross Young joins us on Security Confidential to talk about cybersecurity. Ross is the CISO of Caterpillar Financial Services Corporation, a lecturer at Johns Hopkins University, and the Co-Host of the CISO Tradecraft podcast, and the inventor of the OWASP Threat and Safeguard Matrix. Ross is also a veteran of CIA and NSA.

00:00 Introduction 

00:55 How Ross became CISO of Caterpillar Financial Service 

03:04 Scholarship for Service 

04:10 Foreign cyber espionage capabilities 

07:01 The elusive identity online 

07:50 Compliance frameworks = great cybersecurity? 

12:47 Can cybersecurity be used for revenue generation? 

20:30 Learning from vendors selling in cybersecurity place 

22:55 Vulnerability management in the cloud 

27:02 How do you develop a resilient software system 

31:50 OWASP Threat and Safeguard Matrix 

37:58 Accounting for The X-Factor and Zero Day threat in cybersecurity 

41:45 CISO Tradecraft

The videocast for this episode

To learn more about Ross Young 

To learn more about Dark Rhino Security

We are joined by Rob Oden for a discussion on cybersecurity. Rob is an Air Force veteran and has over 16 years of experience in cybersecurity and is a practicing security architect. This is part 2 of our interview with him. Rob provides insights into the many issues prevalent in cybersecurity and relevant to anyone serious about making their cyber environment safer.  

00:00 Introduction 

01:50 Why does being compliant not equate to great cybersecurity? 

13:53 No good deed goes unpunished 

16:50 Technology vs Process in cybersecurity

21:45 The Prevention Paradox 

28:54 Gov't Policies addressing cybersecurity 

34:41 Cybersecurity business problem or an IT Problem? 

37:37 Should the office of the CISO be separate from IT? 

40:26 How to quantify cybersecurity risk?

44:08 The insider threat and the executive order governing it? 

54:10 How to leverage the most underutilized cybersecurity asset? 

01:00:20 Vulnerability management 

01:07:18 Rob's favorite cybersecurity organizations  

To learn more about Rob Oden https://www.linkedin.com/in/robertoden/ 

To learn more about Dark Rhino Security https://www.darkrhinosecurity.com

To watch the videocast of this episode https://youtu.be/FnEilYhfrOw

The FAIR way to assess cybersecurity risk is discussed in this episode of Dark Rhino Security's Security Confidential. Chad Weinman is the VP of Professional Services at Risk Lens. Risk Lens is a software company that has codified the FAIR based approach to assessing cybersecurity risk. Chad has performed many consulting engagements helping clients quantify cyber risk.

00:00 Introduction

To learn more about Chad Weinman https://www.linkedin.com/in/chadweinman/  

To learn more about Risk Lens https://www.risklens.com/  

To learn more about FAIR https://www.fairinstitute.org/

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

To watch the videocast of this episode visit https://youtu.be/_wYJP1UedFE

Rob Oden joins us on Security Confidential for a two part series. This is part 1 and he is going to discuss with us his personal journey from humble beginnings to a great cybersecurity architect. He shares his story and the many challenges he faced and qualities of people wanting to create success for themselves in the field of cybersecurity. 

00:00 Introduction

Rob can be found on linkedin https://www.linkedin.com/in/robertoden/

Manoj Tandon can be found linkedin https://www.linkedin.com/in/manoj-tandon-drs/

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

The video cast for this episode can be found https://youtu.be/TH2LalGB3ok

Dark Rhino Security's Security Confidential is hosted by Manoj Tandon who is joined by guest Rob Duhart Jr. He has many years of experience in cybersecurity having worked at the Department of Energy, NSA, FBI, Ford Motor Company's Red Team, and is currently the head of Federated Security for Google. 

Rob discusses:

00:00 Introduction

Rob's twitter handle is @robduhart

He https://www.icmcp.org/ and https://sharethemicincyber.splashthat.com/

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

The videocast for this episode can be found at https://youtu.be/M-ArRdE2DB0

Jeff Manhardt joins us for episode of Dark Rhino Security's Security Confidential. Jeff is the chief project officer at Kaleida Health, president of the PMI Buffalo Chapter and an adjunct professor at Daemen College. Jeff believes in the art of the possible and the power of the why.  Jeff shares his insights on project management, cybersecurity, future direction of PMI with us.

00:46 The Power of the Why and the Art of the Possible

The videocast for this episode can be found at https://youtu.be/tOmR5MiIjHI

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com