Abstract: It is easier for an external or internal threat actor to gain unauthorized access to assets or data through using valid user credentials than through "hacking" the environment.  There are many ways to covertly obtain access to user accounts, including: week passwords, accounts still valid after a user leaves the organization, dormant or lingering test accounts, shared accounts that have not been changed in months or years, service accounts embedded in applications for scripts, a user having the same password as the one they use for an online account which was compromised in a public password dump.  Listen as our hosts break down the people, process and technology to implement effective and secure account management.

Sponsor: Appgate interview with Tina Gravel, SVP Channels and Alliances at minute 37:20.
Learn more here: https://www.appgate.com/
Tina Gravel: https://www.linkedin.com/in/tinagravel/

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Abstract: There are many ways to covertly obtain access to user accounts, including: week passwords, accounts still valid after a user leaves the enterprise, dormant or lingering test accounts, shared accounts that have not been changed in months or years, service accounts embedded  in applications for scripts, a user having the same password  as one they used for an online account.  Learn how CIS Control 5 can mitigate some of the most common ways  credentials are compromised.

Sponsor: Keeper Security interview with Marcia Dempster, Sr. Director of Channel Sales at minute 48:21. 
Learn more here: https://www.keepersecurity.com/
Marcia Dempster: https://www.linkedin.com/in/marcia-dempster-03280914/
Sponsor: CIS CIS-CAT (https://learn.cisecurity.org/cis-cat-lite)

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Abstract:  Learn why the number one thing organizations can do to defend their networks against top attacks, is to implement secure configurations!

Azure Breach (8/26/2021): According To Wiz who found the CosmosDB Vulnerability, they quote: "Database exposures have become alarmingly common in recent years as more companies move to the cloud, and the culprit is usually a misconfiguration in the customer’s environment."   https://www.wiz.io/blog/chaosdb-how-we-hacked-thousands-of-azure-customers-databases

Sponsor: ThreatLocker interview with CEO, Danny Jenkins at minute 31:58.  Learn more here: https://www.threatlocker.com/
Sponsor: CIS CIS-CAT (https://learn.cisecurity.org/cis-cat-lite)

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Abstract: CIS Control 3 is Data Protection and data is pretty much what's at stake for a high percentage of cyber attacks.  Data is more valuable than oil and it fuels many organizations.   Many of the baseline security recommendations from all of the security frameworks out there now recommend, or REQUIRE if you’re in a regulated industry such as healthcare, that certain things like full disk encryption are simply put into place no matter your risk profile.  Much of what’s in the Data Protection Control represents the modern reality of cybersecurity.

Note: we split up Data Protection into two shorter podcasts (about 20 minutes each) and therefore, you will see a "part 1 & part 2".

Part 2 focuses in depth into CIS Control 3 and the Safeguards 3 - 7 (formerly called sub controls).

Co-hosts in part 2 are: Ryan Weeks, CISO of Datto and Wes Spencer, CISO of Perch Security.

Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Sponsor: Datto - https://www.datto.com/
Rob Rae, SVP of Business Development: https://www.linkedin.com/in/robtrae/
DattoCon: https://seattle.dattocon.com/

Abstract: CIS Control 3 is Data Protection and data is pretty much what's at stake for a high percentage of cyber attacks.  Data is more valuable than oil and it fuels many organizations. Many of the baseline security recommendations from all of the security frameworks out there now recommend, or REQUIRE if you’re in a regulated industry such as healthcare, that certain things like full disk encryption are simply put into place no matter your risk profile.  Much of what’s in the Data Protection Control represents the modern reality of cybersecurity.

Note: we split up Data Protection into two shorter podcasts (about 20 minutes each) and therefore, you will see a "part 1 & part 2".

Part 1 focuses in depth into CIS Control 3 and the Safeguards 1 -3 (formerly called sub controls) .

Co-hosts in part 1 are: Josh Franklin, Sr. Cybersecurity Engineer at Center for Internet Security (CIS) and Brian Blakely, who leads a team of fractional CISOs, where they focus on building security programs for small to medium businesses.

Josh Franklin: https://www.linkedin.com/in/joshuamichaelfranklin/
Brian Blakely: https://www.linkedin.com/in/bblakley/

Sponsor: https://www.netwrix.com/
Ken Tripp: https://www.linkedin.com/in/kentripp/

Abstract: There is a cybersecurity saying; “you can’t protect what you don’t know about.”  Without visibility into your information assets, their value, where they live, how they relate to each other and who has access to them, any strategy for protection would be inherently incomplete and ineffective.
Note sponsors are at the end at minute 28:30

The Why might an MSP want to listen?  Most MSPs only capture 50% of the assets on a client's network.

Min 2:30 - 8:46 (Ryan Weeks, CISO of Datto discusses)

• Importance of asset management.
• What defines an asset.
• What defines good asset management.
• What are common assets missed in an MSPs inventory.

Min 8:47 - 16:06  (Wes Spencer, CISO of Perch Security)

• The repercussions of poor asset management.
• Importance of Asset Management, as it pertains to Incident Response.
• How asset management help with IR plans & Tabletops.

Min 16:08 - 23:05 (Brian Blakely, Fractional CISO of Cosant Cybersecurity)

• What your policy statement should include.
• Learn the importance of Data Flow Diagrams (DFDs).
• Control objectives and standards MSPs need to consider.
• Asset considerations on the Right & Left side of "Boom".

Min 23:06 - 28:30 (Phyllis Lee, Sr. Director of Controls for CIS)

• Why CIS and most frameworks start with asset management.
• The progression of sub-controls as an organization moves from IG1 - IG3 in CIS.
• What actionable steps should MSPs take to successfully implement Control 1 & 2.

Sponsors:
Center for Internet Security: 
Phyllis Lee (28:30 - 30:58)
CSAT Pro - learn more here: https://www.cisecurity.org/cybersecurity-tools/cis-cat-pro/

Netalytics Security:
Shiva Shankar (31:00 - 38:50)
CyberCNS: https://www.cybercns.com/

Google reports that Multifactor Authentication (MFA) prevents more than 96% of bulk phishing attempts and more than 76% of targeted attacks that are credential based.

In this episode, learn how MFA maps to the different security frameworks, the impact it has, building a policy around it, how the threat actors exploit it - via MITRE ATT&CK - what you can do to defend against it - MITRE Shield, common mistakes or oversights made when implementing into their tech stack and trends.

Note: Sponsors Cisco Duo and Center for Internet Security (CIS) are at the end of the episode starting at minute 26:00.

• [email protected] to sign up for Duo NFR.
• https://www.cisecurity.org/cybersecurity-tools/cis-cat-pro/
• [email protected] - Andrew Morgan (host)

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/
Brian Blakely: https://www.linkedin.com/in/bblakley/
Consant Cybersecurity: https://cosant.com/