In this episode of the The Smart IT podcast, I welcomed Derek Krein, to the show. We discussed cybersecurity and the challenges organizations face in protecting themselves from threats. The conversation explored the importance of validating the effectiveness of cybersecurity investments. The focus shifted to evaluating security controls, with an emphasis on technical assessments using various tools to gain an attacker's perspective. We talked about how to help answer our organization's question of "are we we getting a good return on our security investments?"

The discussion touched on the significance of understanding threat actor tactics and behaviors, particularly interactive, hands-on attacks and the use of information stealers and administrative utilities for lateral movement and data exfiltration. The conversation concluded with a focus on proactively staying informed about threat trends and behavioral patterns to prioritize cybersecurity efforts and effectively defend against evolving cyber threats.

Link to this episode: https://youtu.be/NQBtBvKu9oQ

#cybersecurity #ciso #riskmanagement #threatintelligence #vulnerabilitymanagement #bas #smartit

Podcast Production: Brilliant Beam Media Syya Yasotornrat

Show Notes:

• Derek on LinkedIn: https://www.linkedin.com/in/derek-krein-casp/
• Derek's website/blog/newsletter (31337 InfoSec): https://31337infosec.com/
• Link to this episode: https://youtu.be/NQBtBvKu9oQ
• The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast
• Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

add-in notes

In this episode of the The Smart IT podcast, I welcomed Syya Yasotornrat, Sarah Welch, and Elizabeth Goins, on a panel discussion of "Ways IT Professionals can Express their Voice". In this episode, we set out to help out IT here in a little different way today. We want IT to express themselves, to express their voice to their internal teams, and to the rest of the world.

So a lot of time, technical folks might have a little trouble getting out there in front, but one of things we talk about with Smart IT is the ability to lead and communicate well. This could be when you trying to get your idea across to your team, are looking at your career path, you want to get promoted in the future, or you want to go out and start your own business. A lot of times you need more advanced communication skills. You need to be able to lead a conversation, take data & facts, formulate your perspective, and present it to a wide variety of audiences.

So if we're looking out there, all the million of techies out there and they're thinking, you know what? I'm not being heard inside my company or my manager doesn't see me. My colleagues don't know what I do or all the cool things I do. So they may not know exactly how to go about actually presenting themselves in a way they are heard. This episode is for you.

In this day and age, we've got a lot of cool and interesting new ways to do that, including:

- Starting your own podcast to chat with many people on topics of interest to you.

- The ability to express yourself either technically or creatively (maybe even fictional) by writing your own book.

- And then obviously the ability to create your own ideas and then get up in front of an audience to share your insights.

In this episode, we have all those areas covered with these three innovators and founders. So I'm excited for this conversation as we explored different ways for IT professionals to express themselves and communicate effectively. We covered topics such as presenting ideas, writing books, and starting a podcast. The guests provided insights on how to tailor messages to different audiences, break through the noise, and make a lasting impression. Overall, the conversation emphasized the power of presenting your ideas, knowing your audience, and embracing your unique voice.

Takeaways:

- There are various ways to express yourself in the IT field, speaking up in meetings, writing a book, or starting a podcast.

- The importance of practice, feedback, and continuous improvement in becoming better communicators.

- Step out of your comfort zones and find unique ways to express their thoughts and ideas.

- The importance of authenticity and effective communication in various professional settings.

- Tailor your message to your audience's needs and pain points to make it relevant and interesting.

- Practice and iterate on your presentations to improve your communication skills.

- Don't be afraid to do something different and be memorable in your presentations.

- Get out of your own head and overcome the fear of being judged by others.

- Break through the noise by adding humor, anecdotes, or unexpected elements to your presentations.

- There is no one-size-fits-all approach to communication and expressing yourself. Find what works for you. Authenticity is key in effective communication, whether it's presenting corporate messaging or hosting a podcast.

- Engaging presentations involve storytelling, knowing your audience, and incorporating elements that make you stand out.

- Investing in personal development and continuously improving yourself is crucial for professional growth.

- What's your why? What's your passion? What is that fire in your belly? Like, why are you doing this?

Keywords:

#podcast #book #writing #presentation #leadership #communications #speaking #publicspeaking #ideas #authenticity #passion #personaldevelopment #engagingpresentations #uniquevoice #smartit

Resource Links:

- Syya on LinkedIn: https://www.linkedin.com/in/syyayasotornrat/

- Brilliant Beam Media on LinkedIn: https://www.linkedin.com/company/brilliant-beam-media

- Brilliant Beam Media Website: https://www.brilliantbeammedia.com/

- Sarah on LinkedIn: https://www.linkedin.com/in/sarahmwelch/

- Inkdrop Lit Website: https://www.inkdroplit.com/

- Elizabeth on LinkedIn: https://www.linkedin.com/in/elizabeth-goins-phd-b4748016/

- Pineapple Strategies on LinkedIn: https://www.linkedin.com/company/goins-executive-communication/

- Pineapple Strategies Website: https://pineapplestrategies.com/

- Link to this episode: https://youtu.be/VxWNtAEvoc0

- The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast

- Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

In this episode of the The Smart IT podcast, I welcomed Katherine R. Dollar back to the show. The conversation explored the Smart IT Workspace Construct and its application in facilitating conversations about IT and technology across different audiences. We discussed Katherine's book "Deciphering Intentions" and its role in helping CMOs and VP of Sales to improve their buyers experience in navigating the crowded technology marketplace. The use of both to support a robust set of conversations on the top issues for IT and the use of technology for users is discussed. The conversation emphasized the importance of storytelling and context in effective communication and marketing to improve on both the seller and buyer experience.

Key Takeaways:

• The Smart IT Workspace Construct is a way to take technical and non-technical people inside of IT and make the conversation more accessible to different audiences.
• The book "Deciphering Intentions" provides an engaging and entertaining way to discuss complex topics like cybersecurity and technology.
• Effective marketing involves using storytelling and context to put technology and services in real-life scenarios.
• CMOs and VP of Sales can benefit from creative and innovative approaches to marketing that capture the attention of potential customers.
• CIOs and CISOs can benefit from an improved seller-buyer experience.

#decipheringintentions #cmo #cio #ciso #vpofsales #storytelling #context #marketing #technology #smartit

Show Notes:

• Katherine on LinkedIn: https://www.linkedin.com/in/katherinedollar/
• Moxie Blue Media: https://moxiebluemedia.com/
• Link to this episode: https://youtu.be/tebFlepQUSc
• Link to Deciphering Intentions book on Amazon: https://a.co/d/5Gqf7jL
• The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast
• Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

Summary:

On this episode of The Smart IT Podcast, I welcomed Hattie Horn, to the show. We discussed the why, what, and how of managing change in organizations. The topic was Organizational Change Management (OCM), a discipline that helps organizations navigate and implement changes effectively. It involves activities and processes that focus on people, communication, and behavior.

The challenges are real for organizations dealing with change. It is crucial for organizations to consider how change will be handled when implementing new systems, processes, or technologies to ensure successful adoption and minimize disruption.

OCM helps organizations align their vision, communicate the why behind the change, and involve stakeholders in the process. It also emphasizes the importance of feedback loops and capturing end-user experiences to make continuous improvements.

The conversation covered various topics related to effective processes, investing in tools and resources, decision making, transparency, accountability, and communication. The main theme was the importance of collaboration and alignment in achieving organizational goals. The conversation emphasized the need for effective processes and the right people to contribute to a company's bottom line.

Decision making, transparency, and accountability are discussed as essential elements in avoiding failure and achieving success. The conversation concludes with a focus on clear and concise communication to ensure everyone is on the same page.

Key Takeaways:

• Change is not just about tools, it's also about behavior.
• It is important to think ahead and plan for change.
• OCM is a discipline and a series of activities that help organizations improve. It is a discipline that helps organizations navigate and implement changes effectively. It involves activities and processes that focus on people, communication, and behavior.
• OCM helps organizations align their vision, communicate the why behind the change, and involve stakeholders in the process.
• Feedback loops and capturing end-user experiences are essential for making continuous improvements. Investing in effective processes and the right people contributes to a company's bottom line. Make use of both quantitative and qualitative data.
• Clear and concise communication is key to ensuring everyone is on the same page.
• Collaborative leadership means you're working together and you're on the same page and you're working collectively to a single goal.

Hashtags:

#organizationalchangemanagement #OCM #processes #people, #communication #behavior #vision #stakeholders #feedbackloops #enduserexperiences  #decisionmaking #transparency #accountability #collaboration #alignment #organizationalgoals

Show Notes:

Link to this episode: https://youtu.be/X2I6v548eVI

Hattie on LinkedIn: https://www.linkedin.com/in/hattiehorn/

The Business Communicators: https://thebusinesscommunicators.com/

Hattie at The Business Communicators: https://thebusinesscommunicators.com/about/

Prosci: https://www.prosci.com/

ADKAR: https://www.prosci.com/resources/webinars/introduction-to-adkar-30-minutes

OCM: https://www.prosci.com/blog/what-we-mean-by-organizational-change-management

On this episode of The Smart IT Podcast, I welcomed Ashley Morgan to the show.  We discussed the importance of design and the experience of the end user. We kicked off the episode reflecting on our recent facilitation certification program with Voltage Control and the process of creating a portfolio to showcase our facilitation skills. We discussed the role of facilitation in leadership and the need for self-awareness and curiosity in order to be an effective leader. We chatted about the importance of user experience in product and service success.

We also discussed the importance of continuous learning and how curiosity and openness can foster innovation within organizations. Ashley talked about the different mentalities between larger companies and startups when it comes to taking risks and exploring new ideas. Overall, the need for collaboration, communication, and a user-centric approach in organizations is important.

Key Takeaways:

• Everyone has the potential to be a leader, regardless of their title or role.
• Openness and curiosity can foster innovation within organizations.
• Leaning into strengths and supporting each other's weaknesses can create a positive team culture.
• Larger companies tend to focus on the financial bottom line and are more risk-averse, while startups have a mentality of having nothing to lose and everything to gain.
• User experience (UX) is crucial in creating a successful product or service, as a poor user experience can lead to frustration and loss of customers.
• UX professionals have the ability to see the entire system and identify areas where silos and inefficiencies exist, allowing them to recommend changes that improve the user experience.
• It is important for organizations to prioritize and allocate resources to address user pain points and improve the overall user experience.
• Collaboration and communication between different teams, including UX, product, engineering, and leadership, are essential for successful implementation of changes and improvements.
• Feedback and iteration are key in the design process, allowing for continuous improvement and addressing user needs and preferences.
• Breaking down internal silos for a seamless user experience.
• The power of feedback and iteration in the design process.

#ux #design #designthinking #facilitation #userexperience  #leadership #curiosity #continuouslearning #innovation #designthinking #startups #exploration #iteration #collaboration #communication #user-centric approach

Show Notes:

• Ashley Morgan on Linkedin: https://www.linkedin.com/in/ash-morgan/
• Link to this episode: https://youtu.be/Ny9NAPNAJNg
• The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast
• Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/
• Book that Ashley mentioned it episode: "Standing in the Fire: Leading High-Heat Meetings with Clarity, Calm, and Courage", by Larry Dressler: https://a.co/d/0iOKUSK6

On this episode of The Smart IT Podcast, I welcomed Tess Hermes and Lauren Guilbeaux, founders of yes&sell, to the show. Their company provides Improv-based sales training. We tackled the frustration buyers often experience when salespeople fail to actively listen and adapt their approach based on the their feedback. They discussed the importance of human connection and improvisation skills when engaging with technical buyers like CIOs, CTOs, and other IT professionals. They shared their experiences and insights on using Improv techniques to help salespeople build better rapport, actively listen, adapt to the conversation flow, and connect on a deeper level with prospects. They emphasized the value of being present, validating the buyer's perspective, and collaborating rather than rigidly following a script.

The discussion highlighted the need for sales training that goes beyond product knowledge and process, focusing on developing the "sales craft" of authentic human connection. They explained how Improv techniques can help salespeople be more present, adaptable, and collaborative in conversations, fostering better human connection.

Improv training can help develop the often-overlooked "connection" aspect, enabling salespeople to be more emotionally intelligent and present in conversations. They highlighted the benefits of Improv in building confidence, emotional intelligence, and the ability to navigate complex conversations.

Takeaways:

▪ Consider providing Improv training for salespeople to improve their ability to connect authentically with technical buyers.

▪ Evaluate current sales training programs to ensure they cover not just product knowledge and process, but also the "craft" of human connection and emotional intelligence.

▪ Encourage salespeople to practice active listening, adaptability, and collaboration during conversations with prospects, rather than rigidly following a script.

▪ Promote a culture of curiosity, presence, and validation within the sales organization, fostering an environment where salespeople can build genuine connections with buyers.

Brilliant Beam Media Syya Yasotornrat

#sales #improv #salestraining #adaptiveselling #humanconnection #emotionalintelligence #authenticconnection #communicationskills

Show Notes:

• Tess Hermes on Linkedin: https://www.linkedin.com/in/tess-hermes-86997169/
• Lauren Guilbeaux on LinkedIn: https://www.linkedin.com/in/laurenguilbeaux/
• yesandsell Website: https://www.yesandsell.com/
• yes&sell on LinkedIn: https://www.linkedin.com/company/yes-sell/
• Link to this episode: https://youtu.be/4JEjU5Pe4Ms
• The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast
• Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

Smart IT: An Approach to Getting the Important Things Done.

Announcing the SMART IT Workspace Construct! A Workspace Construct to facilitate Exploration & Collaboration across a wide & diverse IT and business audience.

Explore your IT through the lens of Hathagan, Inc.

- Business Model Innovation

- Enterprise Architecture

- IT Operating Model

- Cyber Risk Management

- Enterprise Risk Management

- Building the next generation

Connecting the C-Suite end-to-end on it organization's mission, objectives, and strategy

- CIO

- CISO

- CRO

- VP, Innovations

- CMO

- VP, Sales

Deciphering Intentions, the engaging and thrilling book Deciphering Intentions, is being leveraged as an entry point into this collaborative space were everyone can join in.

- Pick up your copy (https://a.co/d/5Gqf7jL) today.

Smart IT is an approach to getting important things done in the IT industry. It involves transforming the way we think, disrupting the status quo, and reducing risk. The exiting Smart IT Podcast and the forthcoming book aim to capture the concepts and perspectives of Smart IT.

This Workspace Construct is structured around the fictional company Hathagan, Inc. and explores topics such as business models, enterprise architecture, IT operating models, cybersecurity, and enterprise risk management. It also delves into the relationship between those in the C-Suite. We will be exploring IT and its interaction with the business marketplace and innovation.

Discussion Areas of this Construct

- Business Model Canvas

- Business Marketplace

- Technology Ecosystem

- Consumer (buyer)

- Producer (seller)

- Innovation Culture

- GTM Strategy

- Buying Experience

Expressing ideas, thoughts, and perspectives via:

- The Smart IT Model

- The Smart IT Podcast

- The Smart IT Book

Come join the conversation!

Show Notes:

Strategyzer: https://www.linkedin.com/company/strategyzer | https://www.strategyzer.com/

Deciphering Intentions: https://a.co/d/5Gqf7jL

Link to this episode: https://youtu.be/0Zk6GQ088T8

The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast

Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

In this week's episode of the @the smart it podcast, I welcomed Robert Hart and Pam Cheesman from Device42 to the show. We discussed the importance of asset management for IT. We highlighted the persistent challenge of manual processes and basic tools used by many organizations to track their technology assets. The conversation revolved around the need for good asset management, the common challenges faced by organizations, and the benefits of implementing a CMDB (Configuration Management Database).

My guests emphasized the importance of asset management for decision support, cost reduction, risk mitigation, and compliance. They also discuss the need to understand the dependencies and business impact of assets, including software and devices controlling critical workflows. The conversation focused on the importance of asset management and the challenges organizations face in discovering and managing their assets.

They emphasized the need for a comprehensive CMDB and the role it plays in disaster recovery, business continuity, and decision support. The conversation also highlighted the impact of downtime and the increasing dependence on technology in various industries. The episode concluded by discussing the significance of helping clients understand the value and ROI of implementing a robust asset management program.

Key Takeaways:

- Asset management is a persistent challenge for organizations, with many still relying on manual processes and basic tools.

- A good asset management system, with a robust and complete CMDB, is essential for decision support, cost reduction, risk mitigation, and compliance.

- Understanding the dependencies and business impact of assets, including software and devices controlling critical workflows, is crucial.

- Asset management should be a priority for CIOs and IT leaders, as it provides a competitive advantage, helps avoid security breaches, and enables agility and adaptation.

- Centralizing asset management capabilities and implementing role-based access control can improve efficiency and reduce friction between different IT teams.

- Asset management is crucial for organizations to understand and manage their assets, whether in on-premises, in the cloud, or in OT environments.

- Downtime can have significant financial and reputational impacts, highlighting the importance of asset management.

- The increasing dependence on technology in various industries necessitates a focus on asset management.

- Helping clients understand the value and ROI of implementing asset management solutions is crucial.

#assetmanagement #IT #digitaltransformation #CMDB, #decisionsupport #costreduction #riskmitigation #businessimpact #visibility #disasterrecovery #businesscontinuity #downtime #technologydependence

Show Notes:

-Robert on LinkedIn: https://www.linkedin.com/in/robert-hart-1119953/

-Pam on LinkedIn: https://www.linkedin.com/in/pam-cheesman/

-Device42: https://www.device42.com/

-Device42 Podcast: https://www.device42.com/podcast/

-Link to this episode: https://youtu.be/JjdClAcED4Q

-The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast

-Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

In this week's episode of @the smart it podcast, I chatted with Randy Lariar at Optiv Security on "AI: Full Speed Ahead with Guardrails". We explored a wide range of topics related to Artificial Intelligence (AI).

We discussed the potential and challenges of AI technology in the enterprise. Key topics included the impact of AI on jobs and workforce, use cases for AI in automating tasks, risks of AI like hallucination and data leaks, the need for governance and ethical frameworks around AI adoption, and the role of security teams in enabling safe AI deployments. Randy shared insights on approaching AI initiatives, building AI skillsets, and framing business cases for AI investments. We also discussed strategies for communicating the value of AI initiatives to leadership and securing funding for AI-related projects. There are many things organizations can undertake to realize the benefits of AI, including:

- Establish an AI governance framework tailored to the organization's specific needs, incorporating relevant regulatory and legal obligations, as well as industry-specific guidelines and best practices.

- Conduct an inventory of existing AI systems and use cases within the organization to assess risks and identify areas for improvement or additional controls.

- Develop a pattern-based approval process for AI initiatives, starting with low-risk use cases and gradually expanding to more complex scenarios as the organization builds expertise and maturity.

- Implement monitoring and oversight mechanisms to ensure AI systems are functioning as intended, producing accurate and unbiased results, and adhering to ethical and security standards.

- Foster collaboration between IT, security, data science, legal, and other relevant teams to ensure a holistic approach to AI adoption and risk management.

- Explore opportunities to leverage AI for automating tedious tasks, improving efficiency, and enabling employees to focus on higher-value work.

- Upskill and reskill employees to work effectively with AI systems, providing training on prompt engineering, model interpretation, and other relevant skills.

- Communicate the value of AI initiatives to leadership and stakeholders by focusing on measurable outcomes, return on investment, and alignment with business objectives.

- Leverage AI initiatives to secure funding for other IT and security initiatives that have been on the backlog, such as asset management, data classification, and network visibility.

Show Notes:

-Randy on LinkedIn: https://www.linkedin.com/in/lariar/

-Link to this episode: https://youtu.be/N1pVQhsjQ2E

-Randy's Newsletter on LinkedIn (BD&A - Thinks and Links) | Big Data & Analytics - Thinks and Links | News and insights at the intersection of cybersecurity, data, and AI: Randy's blog: https://www.linkedin.com/newsletters/bd-a-thinks-and-links-7045352334108839936/

-Data Science to Surface Transformative Insights, Better data insights arise from better questions: https://www.optiv.com/services/transformation-services/big-data-analytics-ai

-US Executive Order | Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence: https://www.whitehouse.gov/briefing-room/presidential-actions/2023/10/30/executive-order-on-the-safe-secure-and-trustworthy-development-and-use-of-artificial-intelligence/

-The EU Artificial Intelligence Act: https://artificialintelligenceact.eu/

-NIST AI Risk Management: https://www.nist.gov/itl/ai-risk-management-framework

-MITRE Atlas: https://atlas.mitre.org/

-The Smart IT Podcast YouTube Channel: https://www.youtube.com/@thesmartitpodcast

-Captivate Website for all episodes: https://the-smart-it-podcast.captivate.fm/

#ai #llm #machinelearning