The Cipher Podcast

In this episode, we talk with Cipher’s Security Operations Center Manager in Portugal, Gonçalo Amaro. He goes over his real-world experience stopping hackers at each step of the cyber kill chain. Frameworks like MITRE ATT&CK are utilized to understand what the attackers are doing and at what stage of an attack they are doing certain malicious activities. Defensive Playbooks for attacks can prepare the cybersecurity experts to more rapidly impede or thwart an attack. Gonçalo also talks about how targeted spear phishing campaigns are hurting companies as well as some of the impacts of remote work on cybersecurity.

For more information about Cipher's Managed Security Services, visit www.cipher.com.

Neste episódio, vamos falar de um assunto tem sido cada vez mais comentado nos dias de hoje – o home office em tempos de isolamento social. 
Convidamos a Vandreia Oliveira, nossa gerente de RH da Cipher Brasil para uma conversa leve e repleta de informações da Cipher com seus colaboradores durante o isolamento social. 
Confira!

This topic of this episode is Red vs. Blue Team operations. Cipher Director of Technology and SOC Manager Ricardo Encinosa explores Blue Teams, which are tasked with defending a company from cyber attacks. He talks about the different systems used to defend the digital assets of companies and their benefits. Ricardo covers how logs and data paint the picture of a company's cybersecurity posture. Identifying and detecting cybersecurity incidents are the groundwork for defense. The guys also cover popular attack techniques and how Blue Teams perform incident response. Finally Ricardo covers what he looks for as he hires people to join the Cipher Blue Team.

For more information about Cipher's Blue Team, which is heart of our Managed Security Services, visit www.cipher.com.

Cipher's Portugal CTO Sergio Alves joins the podcast with an eye-opening episode on penetration testing. He covers the difference between a vulnerability assessment and penetration test. Sergio understands how hackers operate. Then he goes into the Cyber Kill Chain components, including phishing and web server exploits. The guys also go over noteworthy attack techniques and tactics. Finally, Sergio goes over how application security testing works.

Learn more about Cipher's penetration testing services on www.cipher.com.

Lanzamiento MDR Latam. 

Prosegur USA CTO Mike Dunn joins the podcast for an episode looking at how cyber and physical security are intertwined. Cipher is the Cybersecurity Division of Prosegur, so the relationship is especially important to understand. Physical devices like entry control and video cameras have a digital footprint. Dunn covers how to properly secure these Internet of Things (IoT) devices.

Learn more about IoT security by listening to our previous podcast dedicated to the topic.

Neste episódio vamos falar de um assunto que desperta curiosidade em muitas pessoas sejam elas da área da segurança da informação ou não - Riscos de Segurança em Dispositivos Móveis. 
Para falar deste místico tema, nós convidamos Alexandre Armellini e Gabriel Barbosa, nossos membros de Red Team Services para América Latina.

Cipher Director of GRC & Data Protection Officer UK Clive Boonzaaier joins the podcast. He talks about why risk is an issue that should be discussed at the board level. Clive says understanding cybersecurity risks faced by an organization is not just the responsibility of IT. The risk is a problem to the whole of a business and deserves attention by top leadership. 

Clive also looks at how compliance, law and cyber frameworks are related. He also goes into details of ISO 27001, NIST and GDPR in order to look at what they mean for a company and their customers.

Learn more about Cipher's Governance, Risk and Compliance offerings by visiting https://cipher.com/grc-governance-risk-and-compliance/.

Cybersecurity is an attractive career path. The demand for talented practitioners is strong. The work is interesting. How can someone join the field? Beyond credentials and certifications, there are some core soft skills and technical know-how that it takes to get into the industry and succeed. Cipher Director of Marketing Bill Bowman joined the guys to discuss what companies look for when hiring.

Read our blog post on the same topic to learn more. If you are interested in a position at Cipher, follow up on LinkedIn to see new postings as they are posted.

Uncertainty is the theme of the day. There is an unprecedented amount of unknowns with regards to workforce size, remote work, business demand and more. At the same time, cybersecurity risk has increased. Gareth Jones joins the conversion to comment on how CISOs and business leaders are adapting.

Register for our upcoming webinar on the same topic scheduled for June 30, 2020.