The Tea on Cybersecurity

"You don't have to be perfectly secure. You just have to be more secure than the next business."

Jim Goldman has been in the cybersecurity sector for over 30 years—he’s seen some things. Which made him the perfect person for Jara to speak with about what will be on the horizon in the world of cybersecurity in 2023. In this episode, Jim warns of potentially dangerous trends around AI and cyber-warfare and hits on the importance of prioritizing security. Listen in for tips on what to watch out for as cybercriminals try to up their game and how businesses can become wiser about protecting themselves. And please, change your passwords!

What You’ll Learn:

1. How artificial intelligence apps are blurring the lines between ransomware and cyber-warfare
2. The importance of vendor risk management and the misconception that SaaS apps are inherently secure
3. Why there’s an increased risk of attacks on individuals as businesses become more secure

Things to listen for:

• [00:01 - 01:09] Introduction
• [01:20 - 02:59] Jim’s background in cybersecurity
• [03:25 - 06:40] The Dangers on ChatGPT
• [07:12 - 10:45] Business Related Cybersecurity Trends
• [11:04 - 14:09] Ransomware and Cyber warfare in 2023
• [17:00 - 19:21] Expert insights on what not to do
• [19:39 - 20:28] Final thoughts from Jim
• [20:57 - 23:16] Receipts from Jara

Connect with the Guest:

Linkedin - https://www.linkedin.com/in/jigoldman/

Connect with the Host:

Jara Rowe’s LinkedIn - https://www.linkedin.com/in/jararowe/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

Marie Joseph knows a thing or two about security compliance. As a Senior Security Solutions Engineer at Trava Security, Marie helps clients through the process of becoming SOC 2 certified…. but what is SOC 2?

In this episode, Marie helps us get to the bottom of what SOC 2 certification is and why it’s important for companies to attain. Listen in for the 101 on SOC 2, ISO 27001 and GDPR (that’s a lot of numbers and letters.)

In this episode, you will learn the following:

1. What is SOC 2 and why is it important for companies to be certified?
2. How does compliance relate to security and what are the different compliance frameworks?
3. What is the difference between SOC 2 and ISO, and which one should a company choose?

Things to listen for:

• [00:00 - 00:53] Introduction
• [02:39 - 05:00] What is SOC 2 and why is it important?
• [05:18 - 06:30] The difference between security and compliance
• [06:36 - 07:16] Security controls that SOC 2 certification focuses on
• [07:42 - 09:54] How to choose which framework works best for your company
• [10:06 - 11:21] The different types of SOC 2 certifications
• [11:38 - 12:44] When and how to start certification
• [13:05 - 14:27] Final thoughts from Marie
• [14:32 - 15:33] Jara’s receipts

Connect with the Guest:

Marie’s Linkedin - https://www.linkedin.com/in/marie-joseph-a81394143/

Connect with the Host:

Jara Rowe’s LinkedIn - https://www.linkedin.com/in/jararowe/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

“In order to make sure that we are trusted and our customers feel safe uploading and managing their content with us, we have to show that we take compliance seriously.”

Successes compliance strategies aren’t always easy, but boy are they necessary. In this episode of The Tea on Cybersecurity, host Jara Rowe speaks with Adam Patarino, CPO and Co-Founder of Casted, a podcast and video content marketing platform. They discuss the importance of becoming SOC 2 certified to ensure the safety of their customers and their customers’ customers. They delve into why it’s best to invest early in cybersecurity as a startup and the importance of working with a trusted partner on the journey to compliance. Listen in for more on cybersecurity compliance and risk management.

What You’ll Learn:

1. What are the benefits of becoming SOC 2 certified for a SaaS company?
2. What tools and strategies should SaaS companies use to ensure both security and compliance?
3. What are the advantages of taking a proactive approach to cyber security and why is it important?

Things to listen for:

• [00:14 - 00:52] Introduction
• [01:06 - 02:08] Introduction to Adam Patarino, CPO of Casted
• [02:17 - 03:28] What Cybersecurity is for Casted
• [03:53 - 05:27] The importance of cybersecurity for startups
• [05:57 - 06:57] SOC 2 Certification and the beginning of Casted’s journey to this goal
• [06:57 - 08:13] The importance of starting early
• [10:47 - 11:59] Training all staff on compliance and cybersecurity
• [12:20 - 13:46] Process of investing in the right buckets
• [13:59 - 15:16] Adam’s background and previous knowledge of SOC 2
• [15:27 - 16:24] Advice Adam has for those looking at SOC 2 compliance
• [17:37 - 19:35] Jara’s Receipts and takeaways

Connect with the Guest:

Adam’s LinkedIn - https://www.linkedin.com/in/adampatarino/

Casted LinkedIn - https://www.linkedin.com/company/gocasted/

Connect with the Host:

Jara Rowe - https://www.linkedin.com/in/jararowe/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

Everything in the world revolves around people, including cybersecurity.

We all know people are complex, unique, and full of surprises, making it hard to guess what they will do. This unpredictability causes a headache for companies when it comes to cybersecurity.

In this episode of The Tea on Cybersecurity, host Jara Rowe dives into the human element of protecting yourself with Trava’s CTO and Co-Founder, Rob Beeler. Listen in as they discuss why humans are the weakest link and share ways to protect your teams when working from home.

What You’ll Learn:

• What cyber attacks look like at work and at home
• How to protect your teams from being victims of cyberattacks
• How to protect yourself while working from home

Things to listen for:

• [00:14 - 01:05] Introduction
• [01:23 - 02:36] What makes employees an easy target for hackers
• [02:53 - 04:09] How to protect you and your team members
• [04:09 - 04:35] Social engineering, aka phishing
• [05:08 - 06:42] Challenges with working from home
• [06:59 - 08:33] The measures Trava takes to stay cybersafe
• [09:34 - 10:11] Five cybersecurity protocols for businesses to try today
• [11:03 - 12:38] Keeping yourself safe from cybercrime outside of work
• [13:21 - 14:39] Jara’s receipts

Connect with the Guest:

Linkedin - https://www.linkedin.com/in/rob-beeler-945ab33/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

If the check engine light came on in your car, would you go to an auto parts store and grab random items to fix the problem? Unlikely.

So why do business owners take that hap-hazard approach to protecting themselves against cyberattacks?

In this episode of The Tea on Cybersecurity, Jim Goldman, CEO and Co-founder of Trava Security, shares why having a risk management plan and creating a cybersecurity strategy is crucial for small to medium businesses.

What You’ll Learn:

• Why small-to-medium companies are easy targets for criminals
• The importance of having a risk management plan
• When you should invest in a cybersecurity strategy

Things to listen for:

• [00:21 - 00:54] Introduction
• [01:17 - 03:42] Why companies wrongly feel they aren't targets
• [04:14 - 05:41] The watering hole attack
• [06:07 - 10:21] Putting together a risk management plan
• [06:07 - 10:21] When leadership should invest in a cybersecurity plan
• [14:17 - 16:45] What cyber insurance is and why you might need it
• [16:59 - 18:01] Jim’s final thoughts
• [18:05 - 20:19] Jara’s receipts

Connect with the Guest:

Linkedin - https://www.linkedin.com/in/jigoldman/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

If you ignore cybersecurity threats, it’s only worse in the end since hackers are smart, and it’s a never-ending web of attacks and breaches. Understanding what those threats are is the first step.

In this episode of The Tea on Cybersecurity, host Jara Rowe dives into the complicated world of cybersecurity terminology with Trava’s CTO and Co-Founder, Rob Beeler. They discuss common terms like phishing, spam, endpoint protection, vulnerabilities, and risks associated with cyber attacks. Rob also stresses the importance of educating yourself and others on these terms to help prevent future attacks.

What You’ll Learn:

• What are Phishing Cyber attacks, and how Trava’s Phishing Simulator
• What endpoint protection is and tools used to look for security vulnerabilities
• The difference between threats, vulnerabilities, and risk

Things to listen for:

• [00:20 - 01:21] Introduction
• [01:35 - 02:22] Rob Beeler's introduction and background in cybersecurity
• [02:32 - 03:03] Explanation of endpoint protection
• [03:12 - 05:24] The importance of understanding terminology
• [05:54 - 06:49] Examples of cyberattacks
• [07:07 - 08:51] The definition of phishing
• [10:52 - 11:25] The difference between phishing and spam
• [11:33 - 12:39] Definition of vulnerabilities vs. threats and risks
• [13:13 - 15:50] Statistics of phishing attacks and their impact on companies
• [16:04 - 18:11] Jara’s receipts

Connect with the Guest:

Linkedin - https://www.linkedin.com/in/rob-beeler-945ab33/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

Jim Goldman began his career as a Professor of Network Engineering at Purdue University back when the world was only starting to understand the internet. As times have changed, so has Jim, and today he’s the CEO and Co-Founder of Trava Security. Network security, now called cybersecurity, has expanded exponentially, touching everything with a microchip and more.

In this episode of The Tea on Cybersecurity, Jim gives a crash course on cybersecurity basics and how it relates to us all. He also discusses his journey to co-founding his own company, the first cybercrime, and some tactics cybercriminals use today to get their hands on your data.

What You’ll Learn:

• Cybersecurity isn’t just for experts and big businesses, take action to secure your data
• All electronic devices are vulnerable to cyberattacks, be aware of what information you put where
• As cybersecurity evolves, so do cybercrimes, stay in the know about possible breaches

Listen in for:

• [00:21 - 00:50] Introduction
• [01:05 - 03:08] Jim's introduction to cybersecurity
• [03:41 - 05:12] The expansive realm of cybersecurity
• [05:43 - 07:49] Simplifying Cybersecurity: Guarding digital assets like a valuable treasure
• [08:05 - 14:20] Staying Cyber-Savvy: Simple steps for data security
• [14:58 - 15:35] You can be more secure than you are

Connect with the Guest:

Linkedin - https://www.linkedin.com/in/jigoldman/

Connect with Trava:

Website - https://www.travasecurity.com/

LinkedIn - https://www.linkedin.com/company/travasecurity/

Instagram - https://www.instagram.com/travasecurity/

Twitter - https://twitter.com/travasecurity

Facebook - https://www.facebook.com/travaHQ

YouTube - https://www.youtube.com/@travasecurity

Blog - https://www.travasecurity.com/blog

Cybersecurity—a word we hear all the time. Show of hands for those that actually understand what it means.

The Tea on Cybersecurity is here to help educate the newbs on what cybersecurity is, why it is important, and everything in between. The Tea on Cybersecurity is for everyone, but especially those small and medium sized businesses that are starting their journey in building a cyber risk management program. Each show is about 15 minutes long to deliver you with the facts and less fluff.