Hyperproof

•

Channel • 2 Shows

Business

Business

Updated Monthly
Business

Business

Updated Fortnightly

14/12/2023

ATO Process with Michael Chaoui

Kayne and Tom are joined by special guest Michael Chaoui, the Founder of Atlas One Security. Michael pulls the covers back on some of the challenges of companies going through the ATO process. We also discuss recent legislation and draft memos intended to modernize the FedRAMP process, all while enjoying one of Michael’s favorite stout beers.

14/12/2023

•

38 min
19/10/2023

Special Guest Matt Fryer of Infoblox

Kayne and Tom talk with Matt Fryer about the cost structures and strategies associated with a Cloud Service Provider (CSP) FedRAMP project. Matt brings a well established perspective and helps understand the challenges of the increased controls focus apparent with FedRAMP. Plus, they try Modelo Especial, a Mexican lager.

19/10/2023

•

36 min
05/10/2023

Moving to FedRAMP Rev5

Kayne and Tom talk about the FedRAMP Rev4 to Rev5 transition. Learn about key control changes, the shell game that is Rev5 and obviously, the unique flavor profile of a new beer.

05/10/2023

•

17 min
12/01/2024

System and Services Acquisition

Kayne and Tom uncover the nuance of the System and Services Acquisition family of FedRAMP controls. Tune in to hear how FedRAMP has matured how organizations should think about supply chain providers. Tom has a definitive belief on how this family of controls will evolve over time. Of course, a tasty beer is enjoyed by Tom, but you will need to watch to the end to see Kayne’s take on Fresh Squeezed IPA.

12/01/2024

•

27 min
23/10/2024

Frameworks and Auditors with Lisa Hall

Kayne and Tom talk with Lisa Hall, CISO at Safebase. Recorded from Austin, Texas, they try a flight of local beer! They also take time to discuss Lisa's FedRAMP journey, talking with auditors, and the implications of the CrowdStrike disaster. ▬ Contents of this episode ▬▬▬▬▬▬▬▬▬▬ 0:00 - Intro 0:55 - Beer background 7:00 - Implementing FedRAMP at a Company with an Agency Sponsor 13:07 - Comparing FedRAMP with Other Cybersecurity Frameworks 18:50 - How Frameworks Should Demonstrate Existing Practices 23:51 - Being Comfortable with Controls When Talking to Auditors 29:11 - July 2024 CrowdStrike IT Disaster and Its Implications 33:00 - Beer reviews The Drafting Compliance series: To lighten the dark corners of compliance, hosts Kayne and Tom as share with you Hyperproof's journey to becoming FedRAMP moderate, an overall roadmap to achieve FedRAMP compliance in a year, and the tips and tricks they learn along the way. As if compliance isn't fun enough, the hosts also try out a new beer each episode and rate it on a scale from 1-10.

23/10/2024

•

39 min
28 AUG

FedRAMP Readiness: Lessons for SaaS & Growing Enterprises

FedRAMP compliance is one of the toughest challenges facing SaaS companies working with the federal government, and in this episode we explore the most common readiness gaps, misconceptions, and cultural shifts organizations must overcome to succeed. Drawing from extensive experience advising technology companies, we discuss why small SaaS firms often struggle with operational maturity, why FedRAMP compliance timelines frequently extend far beyond initial expectations, and how federal updates such as FedRAMP 20x and NIST 800-171 adoption are reshaping requirements across the supply chain. We cover strategies for managing executive accountability, building sustainable compliance programs, preventing compliance drift, and avoiding costly project delays. Whether you are a startup or a large enterprise seeking FedRAMP authorization, this conversation offers practical insights into achieving and maintaining compliance while adapting to evolving federal requirements.▬ Contents of this episode ▬▬▬▬▬▬▬▬▬▬ 0:00 - Introduction0:18 - Beer3:20 - Pre-C3PAO Readiness Challenges for Small SaaS Companies21:45 - FedRAMP Timeline and Project Management Failures25:10 - Management Accountability and Program Ownership29:40 - Maintaining Long-term Compliance and FCA Risk Management36:00 - Beer Reviews

28 Aug

•

41 min
01/08/2024

Victoria Southall on FedRAMP Compliance and ATO

Kayne and Tom talk with Victoria Southall, the Director of Cybersecurity, Governance, Risk, and Compliance (GRC) at Everfox. Kayne learns the art of double fisting… or should I say triple fisting, as we try 3 beers in this episode. Results vary, but as always, the tasting brings out the best in Kayne’s facial expressions. Beer: Shock Top Brewing Co. Shock Top, Samuel Adams Summer Ale, Blue Moon Brewing, Blue Moon Belgian White Reference documents: https://www.fedramp.gov/documents-templates/ The Drafting Compliance series: To lighten the dark corners of compliance, hosts Kayne and Tom as share with you Hyperproof's journey to becoming FedRAMP moderate, an overall roadmap to achieve FedRAMP compliance in a year, and the tips and tricks they learn along the way. As if compliance isn't fun enough, the hosts also try out a new beer each episode and rate it on a scale from 1-10.

01/08/2024

•

38 min
13/03/2024

FedRAMP Project Update

Tom provides an update on the status of the Hyperproof FedRAMP project. Along the way, Kayne uncovers some of the challenges associated with the project and suggests solutions for others going through the same process. And straight out of left field, Kayne actually likes a beer more than Tom. Come find out what caused this seismic disturbance in the force.

13/03/2024

•

25 min
05/05/2023

How to do Configuration Management in FedRAMP

Kayne and Tom talk about the major pillars of Configuration Management. While digging into inventory management, baseline configurations, configuration drift, and risk, they tackle Bell’s Two Hearted American IPA.

05/05/2023

•

15 min
19/11/2024

Controls, Questionnaires, and Risks with Eric Hammersley

On this episode, we're expanding the show to talk about more than FedRAMP. But before we get to that, I want to mention: we're sitting in the same room in San Diego, in front of a live audience at HyperConnect 2024 , with our special guest Eric Hammersley of Nutanix, and we have some beers. ▬ Contents of this episode ▬▬▬▬▬▬▬▬▬▬ 0:00 - Intro 0:35 - Beer background 3:57 - Frameworks / controls 14:25 - Contractual obligations 23:25 - Security questionnaires 31:45 - Risks 33:00 - Beer reviews The Drafting Compliance series: To lighten the dark corners of compliance, hosts Kayne and Tom as share with you Hyperproof's journey to becoming FedRAMP moderate, an overall roadmap to achieve FedRAMP compliance in a year, and the tips and tricks they learn along the way. As if compliance isn't fun enough, the hosts also try out a new beer each episode and rate it on a scale from 1-10.

19/11/2024

•

41 min

Hyperproof is a software company focused on creating revolutionary software that brings trust to life. To date, Hyperproof has delivered an innovative SaaS compliance operations platform that empowers compliance, risk, and security teams to stay on top of all compliance work and manage organizational risks (including vendor risks) on a continuous basis. Hyperproof has disrupted the GRC space by tackling a pressing problem ignored by others: helping compliance pros gain control over and effectively manage their ever-growing workload. Hyperproof is used by market leaders in security tech, enterprise software, fintech, healthcare tech, and communications tech.

Website

Hyperproof

Top Shows

ATO Process with Michael Chaoui

Special Guest Matt Fryer of Infoblox

Moving to FedRAMP Rev5

System and Services Acquisition

Frameworks and Auditors with Lisa Hall

FedRAMP Readiness: Lessons for SaaS & Growing Enterprises

Victoria Southall on FedRAMP Compliance and ATO

FedRAMP Project Update

How to do Configuration Management in FedRAMP

Controls, Questionnaires, and Risks with Eric Hammersley

About

Hyperproof

Top Shows

Top Episodes

About