How can you ensure that your risk and vulnerability management data tracks to the right spot at the right time versus crossing your fingers and hoping that people not only get it but also understand it and can communicate with other stakeholders about it?

That question is what I wanted to understand, so I met with Dearbhail Kirwan and David Kennefick from Edgescan to have them tell their story of software development lifecycles, risk management and vulnerability management. We also discussed the use of well-defined processes, integrated tools and automated workflows to improve communications throughout the organization while also reducing—if not eliminating—the amount of time the operational teams spend chasing their InfoSec tails.

To be even more specific, I asked Dearbhail and David to describe their product's integrations with Jira, Slack and ServiceNow as a means to shed some light on why and how businesses are using these tools to streamline their risk-aware business processes.

What value do we put on privacy and how does that compare to the value legitimate businesses and cybercriminals put on the same information? What types of information are we giving up as consumers and how does that collective dataset impact our future?

Conversations At The Intersection Of IT Security And Society

Guests: Jason Elrod | M.K. Palmore | Thom Langford

Hosts: Marco Ciappelli | Sean Martin

This Episode:

Where are we going? Where do we come from? Is technology driving and controlling us, or are we still choosing our own destiny? We are lucky. We have a lot of smart friends, we often meet new ones, and we all enjoy a conversation around a fire, a table, a barrel, a monolith, or whatever is available at the time.

Unusual Gathering Episode XI

Holidays Special Part 2

With Katie Linendoll & Arthur Hicken

December 5, 2018

Unusual Gatherings, Conversations At The Intersection Of IT Security And Society, is now a weekly podcast with Sean Martin and Marco Ciappelli.

Where are we going? Where do we come from? Is technology driving and controlling us, or are we still choosing our own destiny? We are lucky. We have a lot of smart friends, we often meet new ones, and we all enjoy a conversation around a fire, a table, a barrel, a monolith, or whatever is available at the time.

Every week we will discuss the latest topics that got our attention.

This Episode:

Today, Marco Ciappelli and Sean Martin are joined by two penetration testers who also double as bug bounty hunters in their spare time. On today’s show are Jasmin Landry (@JR0ch17), Sr. Security Analyst at SecureOps, and Darrell Damstedt, aka @hateshaped. We’re also joined by Bugcrowd’s Senior Community Manager, Sam Houston.

Today’s episode could easily carry over into one of our other columns here on the magazine called The Academy as today’s discussion brings us down a path of education, training, and learning by taking a deeper dive into the world of the hacker community.

Today, Marco Ciappelli and Sean Martin are joined by two penetration testers who also double as bug bounty hunters in their spare time. On today’s show are Jasmin Landry (@JR0ch17), Sr. Security Analyst at SecureOps, and Darrell Damstedt, aka @hateshaped. We’re also joined by the Bugcrowd’s Senior Community Manager, Sam Houston.

Together, the group looks at why penetration testers and bug bounty hunters do what they do, why they love being a security researcher, and what motivates them. Also discussed is the value of the hacker community—both digitally online and in person at conferences—and the role it plays in information sharing and learning.

Tied to this conversation are the more formal bug bounty training opportunities and the legal protections researchers get when engaging with a formal bug bounty program—both of which give ethical hackers the freedom (and legal safety) to push the boundaries to find the digital bad things before the bad guys and bad gals (and bad bots) do.

“

Bug bounties enable you to hack on stuff and gives you a legal way to do it.

— Sam Houston, Bugcrowd

Of course, since it is a common topic here on ITSPmagazine, we also take a moment to explore why these two researchers often shy away from claiming the label “hacker,” especially when crossing the border on business trips.

Today’s episode is brought to by IRONSCALES. Be sure to visit them on ITSPmagazine at www.itspmagazine.com/company-directory/ironscales

Now ... are you interested in becoming a bug bounty hunter having read this? Then listen in to see if this world of research and responsible disclosure is for you.

Every week we will discuss the latest topics that got our attention.

Here’s What We Covered — Getting Into The Holiday Spirit

The Holidays are not what they used to be: Cyber Santa and his gang of evil Elves.

Unusual Gathering | Episode X | Holiday Special Part 1

November 28, 2018

Conversations At The Intersection Of IT Security And Society is now a weekly podcast with Sean Martin and Marco Ciappelli.

Where are we going? Where do we come from? Is technology driving and controlling us, or are we still choosing our own destiny? We are lucky. We have a lot of smart friends, we often meet new ones, and we all enjoy a conversation around a fire, a table, a barrel, a monolith, or whatever is available at the time.

Every week we will discuss the latest topics that got our attention.

Guests

Jenny Radcliffe | Gary Hayslip

Hosts

Marco Ciappelli | Sean Martin

Here’s What We Covered — Getting Into The Holiday Spirit

The Holidays are not what they used to be: Cyber Santa and his gang of evil Elves.

• This is the best time of the year to go phishing.

• Social engineering is not new but technology made it worse.

• Think about those Internet-connected devices, they might not be a nice gift, especially for kids.

• Why did these elves go nuts over data harvesting?

• The segment of the week: At The Edge

Thanks to our episode sponsor: Edgescan

Learn more about their firm on ITSPmagazine

https://www.itspmagazine.com/company-directory/edgescan

For more Unusual Gatherings Podcasts, be sure to visit:

www.itspmagazine.com/unusual-gatherings

Every week we will discuss the latest topics that got our attention.

Here’s What We Covered — In The Spirit of Thanksgiving

The positive aspect of technology.