The Security Strategist

Businesses today are under increasing pressure to level up data security as ransomware and data theft continue to rise. Data-first security solutions provide businesses with next-generation protection against exfiltration while maintaining accessibility for day-to-day operations, even during an attack.

In this episode of the EM360 Podcast, Dr. Eric Cole, CEO and Founder at Secure Anchor Consulting speaks to Paul Lewis, CEO of Calamu, about:

• Today’s biggest threats to data
• The problem of data exfiltration
• How a data-first security approach provides next-generation protection

The Nature of Cybersecurity is undergoing rapid evolution. Cyber attacks are becoming more violent - and sophisticated. Big developments in tech over the last few years have led to some of the most shocking ransomware incidents.

Are IT teams capable of keeping up, or are we leading towards cyber doomsday?

In this episode of the EM360 podcast, Chief Research Analyst at IT-Harvest, Richard Stiennon speaks to Mariana Periera, Director of Email Security Products at Darktrace, to explore:

• How businesses can come back stronger following a threat
• The email supply chain and how attackers are using legitimate credentials to attack
• Core capabilities and the importance of augmenting with AI
• The true changing nature of cybersecurity

In 2021, more than half of all widespread threats began with a zero-day exploit that was targetted by threat actors before vendors could even make patches available. 

With security teams now being put under immense pressure, what can organisations do to help secure their online presence against modern cyber threats?

In this episode of the EM360 podcast, Content Producer Matt Harris talks to Caitlin Condon, Vulnerability Research Manager at Rapid7, as they explore: 

• How security teams can respond to threats more swiftly and effectively
• Remote working’s effect on company weakpoints
• How enterprises can better understand and remediate high-priority threats

When it comes to cybercrime and cybersecurity threats, social engineering attacks are unique in the way that they rely on human error versus software and operating system vulnerabilities. 

This is because as technological defenses become more and more robust, cybercriminals are increasingly targeting the weakest link in the chain: people. 

Using a variety of means both online and offline, unsuspecting users can be conned into compromising their security, releasing sensitive information or even transferring money. 

Secureworks Adversary Group, a security consulting department within Secureworks, walk-us through various social engineering scenarios used during their attack simulations.

In the third episode of this three-part podcast with Secureworks, our host Dr Eric Cole the Founder and CEO of Secure Anchor Consulting will be talking with Ben Jacob, Technical Lead at Secureworks, about:

• Social engineering attack techniques and their lifecycle
• How phishing, vishing, and spear-phishing impact industries from a social engineering standpoint
• What can companies offer from a training and education standpoint to help mitigate these risks
• Value of XDR in detecting suspicious user behaviour

Cyber insurance helps to provide critical cover for those who need protection against digital threats.

While businesses are responsible for their own cybersecurity, liability coverage can help provide crucial support to help them stay afloat when the worst happens.

This includes the costs of investigating a cybercrime, recovering lost data and restoring of the systems. It can even recoup the loss of income, manage reputation, and notification costs if required to notify a third party.

In this third episode of a three-part series with Sophos, Senior Director Nicholas Cramer talks to Dr Eric Cole CEO and Founder of Secure Anchor Consulting about:

• The current state of cyber insurance
• Difficulty in getting policies
• How to better position your EDR and MDR

Cyber risk intelligence is critical for businesses that operate in the digital world. It is the collection, evaluation, and analysis of cyber threat information by those with access to all-source information.

Like other areas of important business intelligence, cyber threat intelligence is qualitative information put into action to help develop security strategies and aid in identifying threats and opportunities.

In the episode of the EM360 podcast, Richard Stiennon, Chief Research Analyst at IT-Harvest, speaks to Caitlin Gruenberg Director, Risk Solutions Engineer at CyberGRX as the pair explore:

• Third-party cyber risk management vs self-assessments
• Cyber risk intelligence in the wake of huge, high-profile breaches
• The meaning of a true risk exchange

CIAM enables organisations to securely capture and manage customer identity and profile data, as well as control customer access to certain applications and services.

Usually providing a variety of features including customer registration, self-service account management, and 2FA/MFA, the best CIAM solutions ensure a secure and seamless customer experience.

But how can enterprises hit a balance between security and customer friction?

In the first of two EM360 analyst podcasts with Beyond Identity, Chief Research Analyst at IT-Harvest, Richard Stiennon speaks to Jing Gu, Senior Product Marketing Manager, about the role CIAMs play when it comes to managing end-user activities.

Andy Ramgobin, Principal Technology Evangelist at Technimove, talks about the Science of Cyber Security & Cyber Resiliency Periodic Table and how enterprises can fully understand the digital threat landscape

In this podcast, Richard Stiennon, Chief Research Analyst at IT-Harvest, joins Mackenzie Jackson, Developer Advocate at GitGuardian,

to explore Secrets Sprawl or the phenomenon of (unwanted) secrets distribution across Git repositories and DevOps tools.

Testing application security challenges is essential to ensure that we are moving forward with cybersecurity technology, however many organisations are still unable to identify the key challenges within their infrastructure. As with most facets of life, many organisations are still rooted in traditional attitudes; they previously invested in one approach to security and they are skeptical of rocking the formula. 

IT environments have, however, evolved dramatically over the last decade and organisations have moved beyond cloud migration programs and are now overhauling their applications in cloud-native ecosystems. These changes have led to strives in innovation, while also leaving space for vulnerabilities. This is where organisations need to start testing application security and building a more robust framework to protect their applications.

In this podcast, Head of Content Max Kurton talks to Andreas Lehofer, Chief Product Officer at Dynatrace. Andreas runs us through:

• How to get a transparent view of application security
• How to avoid consistent, distracting security alerts
• The rate of evolution of IT environments in 2022.