Michael talks with Evan Kennedy, a security consultant here at Harbor Technology Group, about his nearly two years working at Harbor. They discuss Harbor’s approach to awareness training, including the two-prong curriculum for simulated phishing. Evan also details the difference between vulnerability scanning versus ethical hacking penetration testing and gives tips for SMBs on how to respond to simulated phishing emails.

Matthew has a discussion with Johnny Liberman and Zack Miller of Worklyn Partners, an investing and operating company they co-founded. They discuss how they created the company and their plan for creating a one-stop-shop provider of cybersecurity services for mid-market and SMB customers. With Matthew, they detail the many different security solutions advertised in the market -- XDR (Extended Detection and Response), EDR (Endpoint Detection and Response), and MDR (Managed Detection and Response) – and comment on trends they are seeing in the M&A market, especially with private equity firms growing more interested in the space.

Matthew has a discussion with Anton Major, the Director of Technology at VelocIT, about what his job is like managing an organization’s IT as a Managed Service Provider (MSP). They talk about changes in the company and its clients during the pandemic, specifically how a hybrid work environment affects IT. Anton also brings up other topics such as cloud services and using a VPN, and gives tips for staying safe while working remotely.

Matthew has a discussion with John Verry, the CISO and Solutions Director at Pivot Point Security, about a number of services that Pivot Point Security provides. Some of the services they mention include individual IoT device penetration tests, organization vulnerability assessments, and ISO 27000 certification. John explains the positives of working with smaller businesses and the importance of meeting with a cybersecurity professional in order to be sure each organization is well-protected.

Matthew talks with John Britton, the Technical Director at Corvid Cyberdefense, to discuss a number of topics surrounding CMMC. John explains Corvid’s approach to helping its clients find the best time to implement a plan for CMMC as well as providing them with a strong and affordable cyber defense team.

This week, Michael meets with Tommy McDowell, the General Manager at Celerium. They talk about Celerium and its focus on supply chain cyber protection. Tommy gives tips for identifying sensitive information and protecting it through different security measures. Lastly, they discuss how CMMC has changed in the last couple of years and how Celerium can help prepare organizations to meet the new requirements.

Matthew meets with William Compton, the CIO at Integra Life Sciences, to talk about how Integra adapted to remote work during the pandemic. They also discuss the importance of being prepared both as an individual and as an organization for security testing, specifically email trust and being cyber safe on social media.

Michael talks with Craig Sandman, the President and Founder at Symbol Security about security awareness and training for employees. They discuss how to avoid email phishing and malware attacks, credential theft, and other ways to avoid ransomware attacks and scams using Symbol Security’s training.

Matthew meets with Harbor's first guest, Steve Budd, the COO at MC3 to discuss employee phishing attacks, “evil-ware," and how virtual experiences at a small business have changed during the pandemic.

In this episode, cyber experts Michael and Matthew give an introduction to the podcast, as well as a description of Harbor Technology Group's services. They explain a range of services from cyber risk advisory to vCISO consulting to meet specific security requirements without putting a strain on your IT budget. Additionally, they talk about how these can allow businesses to make informed, fact-based decisions and manage cyber risk.