UberKnowledge

UberKnowledge

By UberKnowledgeTechnologyEducationTech News
Download on the App Store

UberKnowledge episodes

  • #3 Tammy Moskites – Senior Security Executive at Accenture and career CISO
    Your Network is the Key to Your Success
    Tammy offers vendors advice on deepening relationships and building networks and opines on the most critical, yet overlooked, security issue – the basic security foundations of asset inventory, security and protection.
    01:56 Advice for vendors: it’s all about the relationship.
    03:44 The importance of networking and branding
    05:54 Leverage your venture capitalist
    11:03 How to get across your message and rise above the noise
    12:33 What CISOs really want from vendors
    14:08 The usefulness of a customer advisory team
    17:03 The most critical, but understated security issue? Basic security foundationals – asset inventory, secure and protect
    20:20 CISOs need to sing Kumbaya
    21:23 Are successful CISOs business-oriented tech professionals or tech-oriented business professionals?
    Tammy Moskites Interview Transcript
    24 min
  • Paul Vixie – CEO of Farsight Security and Internet Hall of Famer

    Paul talks about when and why a CISO needs to stand up and say NO which takes courage, determination and a backbone. He advises security vendors to come clean with their agenda (selling product or service to retire their sales quota) upfront at any meeting, so they can have a honest conversation about solving a real problem.

    23 min
  • #2 Paul Vixie – CEO of Farsight Security and Internet Hall of Famer
    Six Questions, Vendor Honesty, and the Role of the CISO
    Paul poses the six questions you need to ask for success in any relationship — business or personal and stresses the importance of vendor agenda transparency.
    02:16 The six questions you need to ask in any relationship
    05:21 Client agenda versus Vendor agenda
    07:51 The importance of vendor transparency
    11:04 Measuring sales success while maintaining credibility
    14:45 Security technology isn’t sexy
    17:23 CISOs need the power to say no
    20:47 The importance of the CISO as a communicator
    Paul Vixie Interview Transcript
    23 min
  • Chad Holmes – Chief Services and Operations Officer at Optiv

    Chad provides a refreshing perspective on the VC driven cybersecurity companies and advises them to find a business outcome for their customers first, not start with a cool technical idea and get VC funding to turn it to a widget and strive solely for a financial multiples outcome for their investors. He casts a light on the new insider threat – the machines – bots, robots, AI engines – that pose far greater danger than the largely human insider threat today.

    24 min
  • #1 Chad Holmes – Chief Services and Operations Officer at Optiv
    Supporting and Educating CISOs
    02:30 Cyber industry has become less about solving problems and more about driving market price
    05:01 The most under-hyped security issue – the pressure placed on the security industry by changing business models
    07:12 The new vision of insider threat
    08:29 Tech skills and business skills in the CISO role
    14:05 CISOs pushed to their limits and the search for talent
    16:24 Advice to vendors – bring a single message and make it relevant.
    18:27 Transformation is needed – in marketing, entrepreneurs, and funding
    19:30 The biggest issue: driving profit vs making a difference.
    Chad Holmes Interview Transcript
    24 min
  • Eve Maler – VP of Innovation & Emerging Technologies, ForgeRock

    The Outsized Role of Privacy and Consent

    Eve discusses the security implications of the social sign-in and considers if there is an opportunity for enterprises to provide IoT identity management.

    • 00:57 The outsized role of privacy and consent
    • 03:50 Does business’ love affair with the social sign-in ignore the security implications?
    • 08:45 Seamless sign-on or Social sign-in: it’s the underlying business model that determines the sensitivity and risk
    • 11:10 Identity must have a multicloud stance because enterprises are multicloud.
    • 13:56 The non-traditional data center mindset suggests we should give everyone a God Key
    • 17:51 The trend for applying identity to services as well as people, devices, sensors, etc.
    • 19:47 Is there an opportunity for enterprises to provide IoT identity management?
    • 23:33 A framework for understanding how to measure control elements of consent and privacy
    • 30:01 The complex interaction between market forces and regulatory forces.

      • Eve Maler Interview Transcript

      33 min
    • Krishna Narayanaswamy – Chief Scientist and Co-Founder of Netskope

      Security in the Cloud Is a Shared Responsibility

      Krishna discusses the need for swim lanes in the cloud, asks who actually has control of access to services in the cloud and argues for a layered approach to security.

      • 02:58 Security in the cloud is a shared responsibility
      • 03:46 Where does the dividing line on responsibility fall between user and cloud host?
      • 04:37 The security implications of collaboration within the cloud
      • 06:12 From on-prem to in the cloud represents a significant shift in control
      • 08:25 How do you manage versioning within a hybrid on-prem/cloud system?
      • 11:05 Could you accurately estimate your company’s cloud footprint?
      • 12:45 Is security now a shared responsibility across the entire ecosystem of an enterprise?
      • 13:44 Swim lanes in the cloud
      • 17:09 Encryption is a sledgehammer
      • 19:30 The blurred lines between personal and business accounts in the cloud. How can they be monitored?

        • Krishna Narayanaswamy Interview Transcript

        23 min
      • Jim Reavis – CEO and Co-Founder of Cloud Security Alliance

        Communities, GDPR Opportunities, and Security in IoT

        Jim advocates for greater transparency within the security community, points out that GDPR means privacy must be the differentiator, and addresses the challenges of security in IoT.

        • 03:17 Vendors need to information share.
        • 07:36 You don’t need to give away your secret sauce to be part of the community
        • 12:47 The trend for communities within communities
        • 13:38 Trust and transparency still requires face-to-face contact
        • 15:42 GDPR actually creates opportunity
        • 19:28 The challenge of security in IoT
          • 24 min
        • Giovanni Vigna – Co-founder and CTO of Lastline
          • 1:22  Security and the adversarial machine-learning setting
          • 4:25  Anomaly detection is not machine learning
          • 7:09  Use anomaly detection as information, not detection
          • 11:50  The ability to triage an incident is fundamental to save time.
          • 13:07  The commoditization of the Cybercrime community
          • 16:42  Are we outsourcing moral responsibility?
          • 19:48  CISOs are goalkeepers
            • 23 min
          • Magda Chelly – CISO on demand and CyberFeminist
            • 02:12 The rise of the CyberFeminist
            • 04:24 A day in the life — how CISOs can learn to speak business
            • 11:45 How can CISOs keep up with security in the cloud
            • 14:32 Technami!
            • 18:00 Address security at the beginning of cloud migration
            • 20:13 The evolving definition of identity
              • 26 min

            About UberKnowledge

            From the publisher's feed

            Hear from top security practitioners and leading vendors on the latest cybersecurity challenges, best practices and innovations.