The Safe House Initiative podcast, hosted by Jeff Edwards and co-hosted by Tawana Johnson, delves into cyber insurance for small to mid-sized businesses. This series builds on previous discussions about incident response flaws, now focusing on the lifecycle of cyber insurance from risk assessment to claims and litigation.

Tawana Johnson, a former litigator and current cyber breach coach at Lewis Brisbois, shares her expertise in handling cyber incidents like ransomware attacks, emphasizing cyber insurance's role in mitigating damage. A key point is the alarmingly low adoption rate (around 4%) of standalone cyber insurance policies among SMBs, attributed to a lack of understanding or perceived complexity.

Tawana explains her role as a breach coach: supporting clients in crisis, ensuring attorney-client privilege during investigations, and coordinating with insurance carriers, forensic teams, and vendors to navigate legal obligations and recovery.

The upcoming series will cover risk quantification, the role of brokers, underwriting, the claims process, class-action litigation, coverage disputes, and business interruption claims. Tawana highlights the evolving nature of cyber insurance, with carriers now using threat intelligence and penetration testing. She stresses the vital importance of standalone cyber insurance, as standard property and casualty policies often fall short in cyber coverage.

Overall, the episode introduces the complexities of cyber insurance, addressing long-term risks beyond immediate incident response. The goal is to raise awareness, boost adoption, and offer practical guidance for SMBs to better protect themselves from cyber threats.

Highlights:

🔹 Low Adoption: Only ~4% of SMBs have standalone cyber insurance.

🔹Breach Coach Expertise: Tawana Johnson offers unique insights from her legal and breach coaching background.

🔹Privilege & Coordination: Breach coaches are key to maintaining attorney-client privilege and managing incident response.

🔹Risk Quantification: Essential first step before purchasing insurance.

🔹Educated Brokers: Crucial for proper cyber insurance advice.

🔹Comprehensive Series: Covers claims, litigation, and disputes.

🔹Standalone Policies: Provide critical, specialized cyber protections.

Key Insights:

🔹Awareness Gap: Low adoption indicates a lack of understanding and accessibility of cyber insurance.

🔹Breach Coach Role: Provides crucial legal and emotional support, ensuring privileged communication.

🔹Evolving Market: Requires greater due diligence due to sophisticated underwriting (e.g., pen testing).

🔹Broker's Pivotal Role: Knowledgeable brokers are essential for appropriate policy selection.

🔹Incident Response Coordination: Multi-stakeholder collaboration, often led by a breach coach, is vital.

🔹Litigation Risk: Increasing class action lawsuits and coverage disputes necessitate preparedness.

🔹Standalone Benefits: Offer unique services (breach coaches, negotiation support) beyond financial coverage.

This episode aims to empower businesses with knowledge and strategies for managing and mitigating cyber risks in the digital world.

#CyberInsurance #SMBsecurity #Ransomware #Cybersecurity #BusinessProtection

In this episode of the Safe House Initiative, host Jeff Edwards welcomes Craig Bowman, Vice President at Trellix and the visionary co-founder of the Redwood Project. Their conversation dives deep into the urgent need for a federal cyber enterprise that seamlessly integrates public and private sector efforts to fortify national cybersecurity.

Craig shares his unique journey, from his early days in business and computers to pivotal roles within the Department of Defense, Adobe, Verizon, VMware, and now Trellix. His extensive background in both offensive and defensive cyber operations has shaped his profound understanding of the industry's collaborative needs.

Discover the origin story of the Redwood Project, born from the recognized gap in government-private sector cyber collaboration, particularly post-Snowden. Craig unveils the project's five key workstreams, designed to bridge this divide: expanding the Special Government Employee Program, creating proactive disruption strategies, fostering voluntary partnerships through "Operation Dynamo," introducing vital legal protections, and bolstering cybersecurity for smaller companies.

The discussion also explores navigating legislative challenges, the current administration's approach to deregulation and AI in cybersecurity, and the critical role of Information Sharing and Analysis Centers (ISACs). Craig emphasizes empowering small and medium businesses, advocating for democratized access to cybersecurity resources through grants and incentives.

This episode offers invaluable insights into creating a more resilient cybersecurity landscape for the United States, highlighting the power of collaboration and strategic foresight.

Key Takeaways:

🔹 The essential role of a unified federal cyber enterprise.

🔹 Challenges and strategies for enhancing public-private cybersecurity collaboration.

🔹 The Redwood Project's five key initiatives for national cyber security.

🔹 The impact of legislative changes and the current administration's focus on AI.

🔹 How to empower small and medium businesses in national security efforts.

Tune in now to understand how leaders like Craig Bowman are shaping the future of cybersecurity collaboration and protecting our digital infrastructure!

Don't forget to like, subscribe, and follow the Safe House Initiative for more critical discussions on national security and cyber defense!

#SafeHouseInitiative #Cybersecurity #NationalSecurity #RedwoodProject #CraigBowman #Trellix #PublicPrivatePartnership #CyberDefense #CyberThreats #Podcast #JeffEdwards

In this episode of the Safehouse Initiative, host Jeff Edwards sits down with Daron Hartvigsen, a former technical services agent and cyber program manager for the Air Force Office of Special Investigations (OSI). Now a leader in the commercial cybersecurity sector, Darren shares his incredible career journey, offering invaluable insights into the evolving world of cybercrime and defense.

From traditional surveillance in the late 90s to pioneering cybercrime investigations, Darren reveals how the digitization of everything transformed his roles. Discover the pivotal shift from reactive incident response to proactive threat pursuit, and how government cyber operations have increasingly converged with commercial cyber intelligence.

Darren sheds light on his move from military and government into the private sector, driven by the expanding monetization of cyber threats like ransomware and extortion. Learn why cyber threat intelligence and active countermeasures gained prominence around 2019-2020, reshaping the landscape for everyone involved.

The conversation delves into the inevitable integration of government and commercial cybersecurity efforts, highlighting how even core government functions like the Common Vulnerabilities and Exposures (CVE) process are now influenced by commercial entities. Darren envisions a hybrid cyber ecosystem where seasoned government professionals leverage their expertise in commercial roles to fill critical gaps.

For anyone considering a transition from government service to the private sector, Darren offers essential advice: seek mentorship, embrace optimism, and project confidence. He emphasizes the crucial role of networking and believing in your value to thrive in a new environment.

Darren Hartmixson's story is a practical and hopeful roadmap for cyber professionals navigating career transitions, reflecting the broader trends of collaboration, evolution, and resilience in cybersecurity.

Key Highlights:

✅ Darren's career evolution from traditional surveillance to cybercrime investigation with Air Force OSI.

✅ The strategic shift from reactive incident response to proactive threat pursuit in cyber operations.

✅ Why the expanding monetization of cyber threats fueled his transition from government to commercial cybersecurity.

✅ The increasing integration and hybridization of government and commercial cybersecurity sectors.

✅ Critical advice for career transition: mentorship, optimism, confidence, and networking.

Tune in now to gain a deeper understanding of the future of cybersecurity and how expertise from both government and commercial sectors is shaping our digital defense.

Follow the Safehouse Initiative for more in-depth discussions with leading experts in national security and cyber defense!

#SafehouseInitiative #Cybersecurity #CareerTransition #GovernmentToCommercial #CyberThreatIntelligence

What does it take to defend national infrastructure in a rapidly evolving threat landscape? In this episode of the SafeHouse podcast, host Jeff Edwards sits down with Luke Tenery, Partner at StoneTurn and former cybersecurity leader at Kroll, to unpack the human and technical layers of building a federal threat pursuit model.With experience rooted in digital forensics, incident response, and working alongside former federal agents, Luke shares how blending public-private talent is reshaping how agencies and vendors approach threat defense. From cyber leadership and culture to the future of enterprise-wide visibility, this episode takes you inside the evolution of cyber strategy at the national level.💡 Why public-private collaboration is vital for modern threat pursuit🔍 How the government is aligning with commercial best practices🔐 The role of mission clarity and culture in building cyber resilience#Cybersecurity #FederalIT #ThreatPursuit #DigitalTrust #RiskManagement🎧 Watch now and learn how federal cybersecurity is becoming more proactive, agile, and integrated than ever.

System Backup operations are often viewed as separate from the Cybersecurity policies and procedures. But listen to W. Curtis Preston, known in the industry as "Mr. Backup” & host of "The Backup Wrap-up" podcast, discuss with Jeff Edwards, Co-Chairman of the SafeHouse Initiative, the importance of Backup as part of your cybersecurity and operational resilience plan.

Jeff Crume, IBM Distinguished Engineer, CTO IBM Security Americas, and Cybersecurity Architect joins Jeff Edwards, Co-Chair of the SafeHouse Initiative as they discusses how AI is disrupting Cybersecurity and what to expect in the future.

AI: Friend or Foe in Business? Unpacking the Human ElementAre companies truly ready for the AI revolution? In this episode of the SafeHouse podcast, host Jeff Edwards sits down with Alastair Patterson, CEO and co-founder of Harmonic Security and a veteran of the cybersecurity world. From his early days in the UK to navigating Silicon Valley and the wake-up call of ChatGPT, Alistair shares his unique perspective on how AI is transforming industries at an unprecedented pace.We dive deep into the corporate tug-of-war: the drive to innovate with AI versus the need for strict security in regulated sectors. Alistair reveals the hidden risks of "Shadow AI" – employees using tools without company knowledge – and why simply blocking AI isn't the answer. Learn why clear policies, visibility, and leveraging frameworks like NIST are crucial for navigating the human nature of AI adoption responsibly.#AI #Cybersecurity #DataSecurity #RiskManagement #BusinessInnovationWatch the full episode to understand how to embrace AI's power while protecting your organization!

Join us in this enlightening episode of Beyond Cyber Security, as Jeff Edwards welcomes AJ Dharma Wardana, a seasoned portfolio manager at Envelop Risk, to dive deep into the intricate world of risk management. In today’s fast-paced digital landscape, understanding the expansiveness of risk is more crucial than ever. AJ shares her extensive journey from engineering to actuarial science, revealing her insights into the critical importance of a holistic approach to risk management that transcends traditional cyber insurance.

In this podcast, we explore key themes such as:

• The Evolution of Risk Management: AJ discusses how the perception of risk has transformed, especially with the rise of cyber threats that can disrupt businesses of all sizes. She emphasizes that risk management is not just about purchasing a policy, but encompasses a diverse array of strategies, including proactive employee training and technological preparedness.

• The Role of AI in Cyber Risk: With advancements in artificial intelligence, AJ elucidates how companies can utilize AI not only to fend off threats but also to better understand risk landscapes. She underlines the importance of leveraging AI tools for real-time threat detection and risk assessment, as well as working in tandem with human expertise.

• Understanding Tail Risk: Tail risks, those low-probability but high-impact events, are a focal point of AJ’s discussion. She clarifies what tail risk means in the context of cyber incidents and how organizations can prepare for unpredictable events that could have catastrophic effects.

• Advice for Small Businesses: AJ offers crucial advice for small to medium-sized businesses, stressing that they must not overlook cyber threats simply because of their size. She provides actionable strategies for building a comprehensive risk management framework, tailored to the unique challenges they face.

This episode is a treasure trove of insights for business owners and anyone interested in mastering the complexities of risk management beyond the cyber realm. Whether you’re a seasoned professional or new to the discussion, AJ’s expertise will help you navigate these challenges with confidence. Tune in to understand how you can fortify your approach to risk management in an age where threats are ever-evolving.

For more detailed insights, be sure to listen to the full episode, and remember: risk management is about preparing for the unknown and safeguarding your future.

#RiskManagement #CyberSecurity #CyberInsurance #TailRisk #BusinessContinuity #SmallBusinessSafety #CyberThreats #DataProtection #DigitalTransformation

Current cyber defenses are often fragmented, leaving U.S. businesses vulnerable to increasingly sophisticated attacks. Discover the transformative concept of a Federal Cyber Enterprise in this episode of The Safehouse Podcast, hosted by Jeff Edwards with guest Alex Green of the Redwood Project. They discuss how unifying government agency efforts and fostering genuine collaboration with the private sector – overcoming operational silos and improving vital intelligence sharing – can create a much stronger shield against escalating cyber threats. Tune in to understand this bold vision for national cybersecurity. Subscribe to The Safehouse Initiative wherever you get your podcasts and never miss an episode.#redwoodproject #smb #publicprivatepartnership #phishing#ai #ISAC #CriticalInfrastructure #healthcare #banking #finance #cisa #safeharbor

In this second part of the 2-part podcast episode, host Jeff Edwards continues his conversation with Gordon Malin, co-founder and CEO of Elpha Secure, to explore the evolving world of cyber insurance and its critical role in bridging cybersecurity and risk management for businesses, especially small and mid-sized enterprises (SMBs). 🛡️💼

They break down:
✅ How reinsurance works and why it’s essential for cyber insurance.
✅ The InsurSec model—combining cyber hygiene with insurance to reduce risk.
✅ Why SMBs are the primary beneficiaries of bundled cybersecurity and insurance solutions.
✅ The future of cyber insurance and how it’s shaping cybersecurity spending.

Plus, Gordon shares why multi-factor authentication (MFA) and strong password policies are non-negotiable for protecting your business. 🔐

Whether you're a business owner or just curious about the intersection of cybersecurity and insurance, this conversation is packed with insights to help you stay ahead of cyber threats. 💡

📌 Key Takeaways:

• Cyber insurance is no longer optional—it’s a necessity.

• Insurers are now offering real-time security monitoring and bundled solutions.

• Data-driven insights are helping insurers identify the most effective security tools.

Don’t miss out on this deep dive into how cyber insurance is transforming risk management for businesses of all sizes. If you missed Part 1, be sure to check it out! Hit Like, Subscribe, and let us know your thoughts in the comments! 💬

Listen now on YouTube, Spotify, Apple Podcasts, and all major streaming platforms!

#InsurSec #CyberInsurance #Cybersecurity #SMB #RiskManagement #SmallBusiness #AlphaSecure #Podcast #DataProtection #MFA #CyberHygiene #JeffEdwards #GordonMalin #ElphaSecure