Talking Security: Insights from Microsoft Security Experts

Welcome to the premiere episode of "Security MVP Insights," where we sit down with leading Microsoft Security MVPs from around the world to explore the dynamic landscape of cybersecurity. In this first episode, we are thrilled to feature Sanna Diana Tomren, a distinguished Microsoft Security MVP known for her extensive expertise and innovative approach to tackling cybersecurity challenges.

Join us as Sanna shares her journey in the field of cybersecurity, shedding light on the pressing global and local threats that organisations face today. We will delve into her expert perspectives on the latest trends in cybersecurity, discussing both current issues and future developments that professionals need to be aware of.

This episode contains:

0:00 Opening with the Intro

1:58 Sanna's introduction

2:44 Sanna's background and road to MVP

14:18 Sanna's primary area's of expertise

16:03 Current projects and challenges

21:54 Regional challenges or regulations that are impacting the work

25:08 Examples of security solutions and how it's impacting customers

29:26 Trends in the cybersecurity landscape

32:36 AI's question for Sanna

37:04 The impact of community

39:12 Personal/Professional goal for the coming period

40:13 Closing off this episode

This series promises to be an invaluable resource for IT and security professionals aiming to stay ahead in the ever-changing world of cybersecurity. 🙌

You can reach out and connect with Sanna via - https://www.linkedin.com/in/sanna-diana-tomren/

In this insightful episode of the Talking Security podcast, we turn our focus to the Monitor phase of the DevSecOps cycle. Hosts Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp guide you through the intricacies of continuous monitoring, providing an in-depth analysis of how to effectively observe and respond to threats in real-time.

This episode of our DevSecOps series will cover:

• An overview of the Monitor phase in DevSecOps
• Strategies for setting up robust monitoring systems
• Techniques for real-time threat detection and response
• Balancing proactive and reactive security measures

Join us as we dissect the tools and practices that ensure your software remains secure post-deployment. Whether you’re fine-tuning your current security protocols or building them from the ground up, this episode is packed with essential knowledge to keep your operations secure and agile.

Don’t miss out on the expertise shared in this episode to elevate your security monitoring to the next level in the dynamic field of DevSecOps.

Links that are mentioned in this episode:

• https://learn.microsoft.com/en-us/devops/devsecops/enable-devsecops-azure-github
• https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference
• https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-devops-introduction

In this episode of the Talking Security podcast, we delve into the essentials of release code securely within a DevSecOps pipeline. Join hosts Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp as they explore key strategies and best practices for integrating security into every stage of software development and deployment.

As part of our DevSecOps series, this episode covers:

- The fundamentals of DevSecOps

- Critical security measures for code release

- Tips for maintaining security without compromising speed or efficiency

Whether you're a seasoned professional or new to the world of DevSecOps, this discussion offers valuable insights and practical advice for enhancing your software release processes.

Tune in to stay informed and ahead in the ever-evolving landscape of software security!

Welcome to the latest episode of the TalkingSecurity podcast, where we delve into the world of DevSecOps. In this episode, “Demystifying the Test Process,” we unpack the essentials of testing and its significance in the DevSecOps pipeline.

🔍 What’s Inside:

- Automated Testing: Discover the transformative power of automation in testing.

- Security Integration: Learn how to weave security seamlessly into your test processes.

- Expert Advice: Hear from industry veterans about navigating the challenges of DevSecOps testing.

🎧 Listen and Learn: Whether you’re a DevSecOps newbie or a seasoned practitioner, this episode is packed with actionable information to help you elevate your test processes.

👉 Tune in now to enhance your understanding and skills in DevSecOps testing!

#DevSecOps #Testing #CyberSecurity #Podcast

In this DevSecOps series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that.

Code Security is not only about writing secure code, but also about build it securely. In this episode, three experts from different domains and perspectives share their knowledge and experience on how to secure the Build Process and the Build Environment. hether you are a developer, a security analyst, or a DevSecOps enthusiast, you will find this episode useful and enlightening. Tune in and learn more about Code Security from Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp.

In this DevSecOps series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that.

Code Security is a crucial aspect of software development, especially in the era of DevSecOps. In this episode, three experts from different backgrounds and roles share their insights and experiences on how to code securely, what are the common pitfalls and best practices, and what tools and techniques can help developers and security analysts work together more effectively. Whether you are a developer, a security analyst, or a DevSecOps enthusiast, you will find this episode informative and inspiring. Tune in and learn more about Code Security from Sander ten Brinke, Pouyan Khabazi, and Frans Oudendorp.

In this DevSecOps series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that.

In this new series, Sander ten Brinke, Pouyan Khabazi and Frans Oudendorp talk about various topics related to DevSecOps and things related to that. In this recording, we kick off this series with an introduction about what's ahead in the next episodes. Then we talk about developers' workstations and how to secure them properly so that everyone is happy.

In this episode, we (Frans Oudendorp and Pouyan Khabazi) are joined by Ajinkya Gore to talk about Defender for API. Ajinkya is a Principal Product Manager at Microsoft, focused on Defender for API.

In this episode, we talk, for example, about how Defender for API helps to secure API's, what the risks are and much more.

In this episode, we (Frans Oudendorp and Pouyan Khabazi) are joined by Tom Janetscheck to talk about Defender for Servers.

Tom is a Senior Program Manager at Microsoft Cloud Security, focused on Azure Security Center. Before that, he spent nearly 20 years in various internal IT and consulting roles, with a strong focus on cloud infrastructure, architecture and security.

In this episode, we talk, for example, about how Defender for Servers fits into the Defender for Cloud suite, what it is and how it differs from Defender for Endpoint. We also talked about the different plans and how it can be used in other Cloud and hybrid environments. And, of course, we set up an appointment for later this year ;).

Tom mentioned a blog post about REST API Call's in this recording. See below for the URL to this post:

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/defender-for-servers-plan-2-now-integrates-with-defender-for/ba-p/3527534