The Virtual CISO Moment

From August 30, 2022 - Susan Richards is a dynamic director of Information Security concentrated in compliance, project management, application development, and database administration. She is skilled in IT Strategy, Management, Compliance Assurance, and Risk Management including HITRUST, NIST and ISO security frameworks. She is also very involved in the information security community, including ISSA chapter leadership and has this year started a local HITRUST chapter - plus we discuss election integrity!

Greg Flatt is the founder of Flatt Earth Networking, Inc. Since 1996, Flat Earth Networking, Inc. has provided mid- to large-sized businesses an authoritative approach to network security that includes superior enterprise products and effective problem-solving. Greg discusses his path beginning and growing Flat Earth Networking, Inc. over the past 26 years.

You can bet on increasing cyberattacks on casinos, new air gap attack method, education institutes have higher cyber risk this time of year, is cyber security being taught correctly, Sequoia PEO data breach, QA error turns ransomware into wiper, and cars' data easily accessed by law enforcement.

Why SMBs should prioritize outsourcing cybersecurity, an interesting observation on the IHG cyberattack, log4j persists, the main cause of cybersecurity incidents, and this week's predictions discussed - plus why we made our next position entry level.

From August 23, 2022 - Vanessa Taylor is a small business owner, a business technology consultant, an educator, and a mentor. She is well-versed in many aspects of GRC and infosec risk management, and has a mission to aspire to inspire!

Derek Andrews, Incident Response Manager at a Financial Institution, joins VCM to discuss his journey, incident response in the financial sector, and different types of virtual CISOs from the perspective of one who has worked with both the good and not so good. He also explains why he is the Resident Birdman of LinkedIn!

Chome Zero Day (again), offshore energy vyber threats, Rackspace Exchange hit by "incident", Australia dramatically increases breach penalties, and a ping vuln in FreeBSD - plus a couple of thoughts for entry-level information security analysts.

LastPass second incident, aged domains, Trigona ransomware, unemployment benefit fraud, ConectWise flaw, attackers target FI customers, and this week's 2023 predictions from SpiceWorks - plus some thoughts  on cyber culture.

From August 16, 2022 - Jack Poltorak discusses vCIO and vCISO services offered by MSSPs, how those services may not be exactly what a small or midsized business (SMB)  is looking for, and tips how an SMB can ensure they are getting the virtual CISO services they need.

In this month's special end of month Wednesday episode we talk with Jacob Horne, who was born with a rare genetic mutation that allows him to read NIST publications and government regulations without experiencing boredom like a normal person and has made a career out of using this power for good. He does a great job of using NIST SP 800-53 to clarify the bizarre, heavily tailored world of NIST SP 800-171 and CMMC - if you're interested in CMMC you must follow him on LinkedIn! He is also co-host of the Sum It Up podcast which sums up the news and developments relevant to CMMC; DFARS and other regulations; and NIST standards such as SP 800-171, SP 800-53, the NIST Cybersecurity Framework, and others.