The Security Strategist

Incident response is the action taken to detect, triage, analyse, and remediate problems in software with the ultimate goal of minimising damage and restoring normal business functionality as quickly as possible. 

A well-executed incident response plan can help organisations mitigate the impact of security incidents and maintain the trust of their customers and stakeholders, but how specifically can the efficacy of an incident response program be assessed?

In this episode of the EM360 Podcast, RedMonk analyst Kate Holterhoff spoke to Fred Hebert, Staff Site Reliability Engineer at Honeycomb, as they explore:

• Why some metrics are better than others
• Lessons we learn from fighting forest fires
• Incident response methodology

Machine identity is an essential part of ensuring companies maintain a good level of data security and structural integrity. 

The management of digital certificates and keys allows all internal traffic to be encrypted, seriously narrowing the attack surface of an enterprise. 

In this episode of the EM360 Podcast, Editor Matt Harris speaks to Chris Hickman, Chief Security Officer at Keyfactor, to discuss:

• Where machine identity trends are heading
• Why companies are paying more attention to machine identity
• Identity as a single thread

Bot mitigation helps enterprises to identify and block unwanted bot traffic as it hits your network.

And with half of all internet traffic coming from bots (both good ones and bad ones), managing that bot traffic is critical. 

Financial institutions, ticket-selling sites and shopping sites are among the hardest hit, with cybercriminals employing ML and AI in these bots to scale the size of their crimes and ambitions.

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Uri Dorot, Senior Product Marketing Manager at Radware, to discuss:

• The world of application protection
• Why companies are underequipped to deal with bot attacks
• Dedicated bot mitigation solutions

Data privacy. The ever-changing landscape of collecting and sharing personal data is complex, with attitudes and regulations constantly being updated. 

So what’s happening in politics right now that could affect ¾ of the world’s data privacy rights? How are consumers reacting to all this? And why are customers struggling so much with compliance?

In this episode of the EM360 Podcast, Editor Matt Harris speaks to Neil Jones, Director of Cybersecurity Evangelism at Egnyte, to discuss: 

• Data privacy in US vs. UK
• How current events affect companies
• How the landscape will look in 10 years' time

A software supply chain attack is when someone infiltrates your system by attacking a third-party provider or partner with access to your data. 

Recent high-profile supply chain attacks, most notably SolarWinds, has this type of attack into the public eye, and it’s clear that with more suppliers handling sensitive data than ever before, the attack surface of a typical enterprise has been changed dramatically. 

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Suresh Bhandarkar, Director of Product Solution Architecture at Beyond Identity, to discuss:

• Software supply chain attacks
• Weaknesses in the CI/CD pipeline
• The issue of software code provenance

Beyond Identity cuts through the anonymity of to provide a secure, scalable way for development and GitOps teams to immutably sign and verify the author of every commit. Their author verification API in proves that what you’ve shipped is what your developers actually built—and that nothing else got added.

As an IT Professional, you know that cyberattacks are ever-increasing, and businesses must do everything they can to ensure they remain protected. 

Organisations across the globe are beginning to implement Zero Trust solutions to protect their files, data, devices, and networks. Zero Trust is a concept that operates on the idea that nothing can be trusted, and everything is a threat until it has been properly verified. This process helps to mitigate and manage new and emerging cyber threats. 

In this episode of the EM360 Podcast, Editor Matt Harris welcomes Ben Jenkins, Director of Cybersecurity at Threatlocker, to discuss:

• What is Zero trust, and why do businesses need it?
• How are cyberattacks evolving?
• Common cyber threats and how to better protect your business against them 
• And more!

Identity Governance and Administration (IGA) systems are a fundamental part of an enterprises identity and access management strategy. 

For companies that need functionalities like role-based access and automated approval, IGA systems can be essential in ensuring that the right people are getting access to the right things. 

Sounds easy enough, but issues with adoption, sponsorship and employee access speak to the fact that plenty of things can derail a deployment. 

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Rod Simmons, VP of Product Strategy at Omada, about:

• Automating already broken processes
• Disconnect between IGA goals and business goals
• Testing, testing, testing

Passwords provide a great way for customers and consumers to access their personal information but when it comes to the enterprise, newer concepts like two-factor authentication (2FA) and zero trust network access (ZTNA) may be required. 

It’s been part of computing since its inception two decades ago - yet IT teams and businesses are still putting a lot of time into it.

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Matthew Lewis, Director of Product Marketing at HID Global, to explore:

• How the work from home movement impacted employee authentication
• “Passwordless” vs client-side certificates
• Adaptive authentication

In this podcast, Chris Steffen, Research Director at Enterprise Management Associates (EMA), joins Mark Alba, Chief Product and Strategy Officer at Anomali, to explore the ins and outs of extended detection and response (XDR) and MITRE ATT&CK framework, including how it integrates with threat intelligence and enterprise security strategies.

Attack surface management is the sustained monitoring, classifying, and inventory of a businesses IT infrastructure.

It sounds as simple as asset management, but ASM is different in the way it approaches these responsibilities from an attacker’s perspective.

The security of an enterprise's surface is paramount in the current era of cloud - but how can companies manage their cloud security posture management and tackle basic misconfigurations?

In this episode of the EM360 Podcast, Chief Research Analyst at IT-Harvest Richard Stiennon speaks to David SooHoo, Director of Product Management at Censys, as the pair discuss: 

• Attack surface management vs asset management
• The shift of the cloud
• Zero-day attacks and how to mitigate them