The Confident Defense Podcast

Guest Profile---------------------Our Guest today is Mohit Tiwari, Professor of the University of Texas at Austin and the Co-Founder and CEO of Symmetry Systems. A company on a mission to amplify Security Engineers by building products that discover, surface, and help engineers and leaders proactively protect their most valuable assets, data. Socials-----------------LinkedIn: https://www.linkedin.com/in/mohit-tiwari8/Site: https://www.symmetry-systems.com/Topics Reviewed -------------------------* Journey from Professor to CEO* How do you provide insights without taking a copy of the data? * Making You Own Category* Evolution of Data Security* Evidence Based Security Teams* Data Security - Policy as Code* Risk of Dark Data

Guest Profile-----------------Our guest today is Paul Katzoff, the CEO of WhiteCanyon, WhiteCanyon Software provides the WipeDrive platform for erasing any IT asset or data-bearing device.Paul Katzoff is the CEO of WhiteCanyon Software. They are located in Salt Lake City, Utah, and their source code has never left the USA or been outsourced to 3rd parties.Socials-----------------* Site: https://www.whitecanyon.com/* LinkedIn: https://www.linkedin.com/in/paulkatzoff/* Twitter: https://twitter.com/PaulKatzoffTopics Reviewed: * Closing the Gap on Data Security* Complete Data Security Lifecycle* Maintaining Data Security with Cloud Providers* Risk of Harddrive Resale with Customer Data* Secure Data deletion for home users* WipeDrive Prime tool - Tracking Data Deletion * Ransomware Defense * Route to CEO* Future of Data Security

AJ Yawn is Co-Founder and CEO at ByteChek and a Founding Board Member of the National Association of Black Compliance and Risk Management Professionals (NABCRM). AJ has earned 6 AWS certifications including the AWS Solutions Architect-Professional and AWS Security-Specialty. Prior to ByteChek, AJ spent over a decade in the cybersecurity industry both in the US Army and as a consultant. He is a regular speaker at SANS Cloud Security curriculum events such as BIPOC in Cloud Forum and CloudSecNext Summit, and can be found teaching SEC557: Continuous Automation for Enterprise and Cloud Compliance at the SANS Institute. Socials------------LinkedIn: /in/ajyawn Twitter: @ajyawnTopics Reviewed: -------------------------* Military Service Impact on Fixing Compliance * Instructor at SANS* How should companies select their auditors? * "Risk vs Audit" vs. "Risk of Audit"* Fixing Auditor and Security Relationship* Future of Automating Security Compliance* Embracing Innovation

Chen Arie is the chief architect and co-founder of Enso security. As co-founded Enso he has built the first application security posture management (ASPM) platform enabling security teams to scale and gain control over application security Favorite Quotes:-------------------------“It’s challenging to build applications is really challenging to build security and it’s really really challenging to build secure applications.” “When using it safely is the easiest option, then developers will use it because they are focused on delivering functions.” Reference:-----------------Enso Security raises $6M for its application security posture management platformhttps://techcrunch.com/2020/10/28/enso-security-raises-6m-for-its-application-security-management-platform/

Introduction-----------------Bob Fabien Zinga is senior-level cybersecurity and technology, risk executive who was a Senior Information Warfare Officer in the US Navy, currently serves on the Forbes Technology Council, and is the Director of Security at Directly Conversation Topics -------------------------------- A community of Innovation, Forbes Technology Council- Diversity in Leadership - They should reflect the company and counties we protect- SolarWinds Breach- How to Change Security Behavior - How to Start a Career in Security- Embracing Paradigm shifts - e.g. The Internet is our Network.- Retool for working with AIInsights in this Interview-----------------------------------"The Internet is our Network. Principles don't change but how you apply them does.”Favorite Quotes-------------------------"My superpower is my unshakeable determination to succeed.”“If you can't fly then run, if you can't run then walk, if you can't walk then crawl, but whatever you do you have to keep moving.” - Martin Luther King Jr.Reference----------------15 Digital Payment Upgrades That Would Improve The Customer Experiencehttps://www.forbes.com/sites/forbestechcouncil/2021/01/22/15-digital-payment-upgrades-that-would-improve-the-customer-experience/The Enterprise Data And AI Journey To The Cloud: Three Fundamental Milestoneshttps://www.forbes.com/sites/forbestechcouncil/2021/01/21/the-enterprise-data-and-ai-journey-to-the-cloud-three-fundamental-milestones/?sh=5ad184e079e3https://profiles.forbes.com/members/tech/profile/Bob-Fabien-Zinga-Head-Director-Information-Security-Information-Warfare-Commander-Directly-Inc-U-S-N/fcf91616-0afb-4518-94aa-93103b562d3c

Jasson Casey is the CTO of Beyond Identity, an Identity Management platform that is focused on killing the password. Humans and passwords are fundamentally incompatible and this is why 81% of hacking-related breaches use either stolen or weak passwords according to Verizon Data breach report. Jasson Casey - LinkedIn: https://www.linkedin.com/in/jassoncasey/Jasson Casey - Twitter: https://twitter.com/jassoncasey

Introduction------------------Grant Wernick, an inventor and serial entrepreneur who has built three Natural Language Processing companies, part of the team that built AngleList, laid the foundation of Kauffman Labs from the Kauffman Foundation, and is the co-founder & CEO of Fletch.ai an NLP powered platform is that highlight risk and insights into the cloud and SaaS environments. Socials----------* LinkedIn: https://www.linkedin.com/in/grantwernick/* Twitter: https://twitter.com/grantwernick* Blog: https://fletch.ai/resources/* Site: https://fletch.ai/ Insights in this Interview-----------------------------------A simple “human-centric” user experience can break down technical barriers and with it cultural divides. Technology should adapt to humans not the other way around. NLP is the most effective way to interface with technology in a human-centric way.Topics Reviewed--------------------------* Career Journey * The Power of Natural Language Processing (NLP)* The Story of Fletch* The future of knowledge and threat intelligence sharing Favorite Quotes------------------------"Fletch is the center of your data universe”“The promise of data has not delivered.” Reference---------------Weotta Goes Deep To Challenge Google On Local Searcheshttps://www.forbes.com/sites/parmyolson/2014/06/10/weotta-goes-deep-to-challenge-google-on-local-searches/?sh=668d8334b6cdWe Need More Transparency in Cybersecurityhttps://www.darkreading.com/vulnerabilities---threats/we-need-more-transparency-in-cybersecurity/a/d-id/1333780?A Look Back and a Leap Forward: 2020 Predictionshttps://medium.com/@grant.wernick/a-look-back-and-a-leap-forward-2020-predictions-b716c34695f9Salesforce is buying data visualization company Tableau for $15.7B in all-stock dealhttps://techcrunch.com/2019/06/10/salesforce-is-buying-data-visualization-company-tableau-for-15-7b-in-all-stock-deal/?guccounter=1Google to Buy Data Analytics Company Despite New Antitrust Scrutinyhttps://www.nytimes.com/2019/06/06/technology/google-data-analytics-looker-acquisition.html

Sean D. Mack is a visionary and innovative technology leader with a history of driving global business strategy and transformation. He has an extensive background in leading DevOps, infrastructure, enterprise applications, security, and desktop services in the educational technology and the publishing industry. Sean ran engineering at Etsy, he was the CEO for xOps, a DevOps consulting company, and now serves as dual CIO & CISO at Wiley.Conversation Highlights - Leading With Innovation- DevSecOps- Compliance Automation- Scalable Business First Security Architecture

Caroline is the Chief Strategy Officer at Cobalt, a pentest as a service company where she oversees security, people, and community. She began her career in InfoSec fifteen years ago, leading security teams at eBay and Zynga. Caroline also hosts the Humans of InfoSec podcast and teaches cybersecurity courses on LinkedIn Learning. She is the author of popular textbook, Security Metrics: A Beginner's Guide.Follow on LinkedIn: https://www.linkedin.com/in/carolinewmwong/Follow on Twitter: https://twitter.com/CarolineWMWongConnect over Email: [email protected] in this InterviewTop security issues are misconfigurations, leverage machines, and humans in the right ways for an effective application security programThe discipline of Application Security (#AppSec) has a mature model for measuring maturity that is the BSIMMTopics Reviewed: * Her path into security, from dance to engineering to IT to security * Published a textbook on Security Metrics with McGraw-Hill.* AppSec and her work with BSIMM Framework* Improving AppSec Culture * Her thoughts on OWASP Top 10* Insights from dataset from 2,500+ Penetration Tests* How to hire better in CybersecurityFavorite Quotes:“Find the common group, appsec and engineers have different priorities” Reference:* Caroline Wong’s Wikipedia Page: https://en.wikipedia.org/wiki/Caroline_Wong* Humans of InfoSec Podcast: https://podcasts.apple.com/us/podcast/humans-of-infosec/id1353458440* Security Metrics, A Beginner's Guide by Caroline Wong: https://www.amazon.com/dp/0071744002/ref=cm_sw_r_tw_dp_x_KbJLFbTD1FYY8* BSIMM - Observable Model of Application Security - http://bsimm.com/COBALT The State of Pentesting: 2020 - https://resource.cobalt.io/the-state-of-pentesting-2020

Ron and Chris are the co-hosts of Hacker Valley Studio. A podcast where they explore the human element of cybersecurity programs and technology. It's humanity meets technology meets the hacker's mindset.