What's The Problem?

In EPISODE 20, we dive into one of Endpoint Security's biggest problems: claiming compliance "out of the box" (or, as out of the box as possible with a dash of professional services on top).

Graham will talk us through what this looks like in the #Education #Cybersecurity space, referencing the CJIS Security Policy that is enforced by the FBI, as well as HIPAA compliance out of the box in the healthcare security space.

How do you take someone brand new to the world of cybersecurity and turn them into a knowledgeable seller with practical, hands-on experience?

Answer: training.

In this episode: the IBM Summit program.

Join Graham Smith of IBM as he talks through the Summit program.

So … does it work? Supposedly yes!  Graham was ready to sell in month 5 of the program.

Tune in to learn more about the effectiveness (or lack of!) of training programs that security companies are putting into place.

Incident Response Plans (IRPs). The good, the bad, the ugly. Learn about IRP's from the perspective of someone with James Williams's cybersecurity background.

In this episode, James shares his experience working in the federal space (helped secure the 2020 census), discusses MSSPs with private businesses, and also dives into how he got into security as a cryptography analyst in the US Air Force.

In this episode, Chandra Pandey of Seceon joins Mike to discuss ransomware with respect to Intellectual Property (IP). Specifically, they discuss that bad actor have two choices. To demand a ransomware payment … or to lurk in your network or other confidential systems to siphon off Intellectual Property over time?

Chandra goes in-depth on the topic using the Nvidia hack as well as the Microsoft source code hack to highlight his points.

In this episode, we are going to focus on the topics of Identity and Access Management. Specifically, how do you deploy and de-provision identity/access management controls without it being painful. Or as painless as possible :)

If you’re in the #healtchare #IT space, Tom Johnson provides an excellent example of what this looks like for a 5,000-person hospital system. Tune in now to hear that one!

Join Aaron Rosenmund from PluralSight to discuss a critical cybersecurity topic: The people involved in Security Operations Centers (SOC).

We cover three specific angles on this topic.

First: There is a shortage of qualified cybersecurity professionals in the job marketplace here in 2022. No duh, I think we all know that :)

Second: While there is a shortage, we need MORE professionals entering the field. Can't be gatekeeping to keep interested folks out! Need to empower people to feel confident entering the field as a complete novice in order to work their way up the industry ladder.

And third: On the note of bringing *more* folks into the world of security. There is a need for a set of standards for cyber security professionals to refer to in order to evaluate someone's capabilities (similar to GAAP accounting for accountants). What do those standards look like? Who establishes and enforces them? Those questions - and more - are discussed.

According to Bob Zinga, vCISO and Head of Information Security at Directly, we are less than 5 years away from quantum computing being able to crack 256-bit encryption in 20 seconds (or less!). So, where does that leave us? What can we do about this? How will the public and private sectors work together to create the next standard of encryption? Tune in to this episode to hear Bob share his expert opinion.

In this episode, Ravina Joshi explores the importance of closing up port access to both internal as well as external ports on your network. Additionally, Ravina tells us not just about the technical damage of leaving ports open. She goes deeper into the economic consequences associated with open ports, citing the WannaCry ransomware attack that grossed ”$100 billion USD” in ransomware payments according to Ravina.

In this episode, David Cornish of Upguard explores the topic of identity breaches.

A few fun bits from the episode include:

In this episode, Steve Fisher of IMS goes into great detail around the security concerns that school systems have to face in the world of cybersecurity. Specifically, Steve explains how high turnover environments produce opportunities for bad actors as schools onboard or offboard both full-time as well as part-time or contract staff. If you’re interested in keeping the data safe at your own child's school, this episode will outline areas that you can help shore up to protect that data.