Discussed in this week's wrap up:

https://www.techrepublic.com/article/credit-agency-warns-weak-cybersecurity-defenses-could-hurt-a-companys-credit-rating-even-before-an-attack/

https://www.techrepublic.com/article/fbi-investing-millions-in-software-to-monitor-social-media-platforms/

https://techcrunch.com/2022/02/07/irs-facial-recognition-id-me/

Ad link:

https://www.amazon.com/Information-Security-Small-Midsized-Businesses/dp/1733066845/

Finally, a correction: The Tennessee Bankers Association Strategic Technology, Risk, and Security Conference https://tnbankers.org/event/strategic-technology-risk-security-conference/ is April 27th, not April 28th as noted in the episode.

Bob Quandt, owner of Bullseye Compliance (https://bullseyecompliance.com) joins VCM for a conversation that ranges from issues and trends in SMB security, entrepreneurship and making a difference, fitness and stress management, application of military experience to infosec, and more!

Email remains the most common vector for criminals to exploit. Chuck Sirois discusses how PhishFacts (https://phishfacts.com) can help SMBs identify misconfigured email configurations that criminals may leverage.

The Certified Information Systems Security Professional, or CISSP, is considered by some to be the pinnacle of information security professional certifications, on par with the CPA. But why is that, and what differentiates it from other certifications? And why is it important for virtual CISOs to have and maintain this certification?

Ed Carroll joins us to discuss many of the initiatives he's involved with, including Edison Marks to apply AI to help SMBs (https://edisonmarks.com/), the Carolina Cyber Center to help with information security in North Carolina and beyond (https://carolinacybercenter.com/), and an update on the RETR3AT cyber security conference at beautiful Montreat College (https://www.montreat.edu/about/events/retr3at/).

While watching a report on the news this morning about items to consider to counter possible Russian cyber attacks related to the Ukraine-Russia crisis, I felt sadness. The reason may surprise you, or not. Find out why on today's special midweek installment of The Virtual CISO Moment.

Craig Sandman of Symbol Security (https://symbolsecurity.com/) and vCISONews (https://www.vcisonews.com/) joins us to discuss the importance of effective security awareness training for SMBs and the virtual CISO role.

Chief Information Security Officer David Baker gives insight into the challenges of an SMB CISO. 

Guest opinions are their own and not the views of their employer.

Threat awareness sources are many. One that is often overlooked is the news. Hear why being plugged into current events in real time is important. (And Greg says "yes I know the difference between emulate and emanate").

Information security is difficult without a plan. Don't spin your wheels. Find a framework, find a coach, and find success.