#CISOlife

Brian Haugli

Cybersecurity and risk podcast. From the CISOs at SideChannel, we tackle discussions from the industry and the threat landscape. Host Brian Haugli, former Fortune 500 CISO, lead for Pentagon's information assurance program, and now CEO for SideChannel, sit down with guests to discuss the current focuses for businesses around cybersecurity.

  1. 05/02/2024

    Going to RSA? Nope. So let's talk about Tik Tok and Kaspersky

    In this episode of #CISOLife, hosts Brian Haugli and Dmitriy Sokolovskiy, delve into the dynamics of the RSA Conference, exploring its evolving relevance and the broader implications for cybersecurity. They discuss the nature of cybersecurity events, the benefits of smaller, local conferences like Secure World, and the importance of vendor relationships and ROI in cybersecurity. The conversation also touches on recent news involving TikTok and Kaspersky, highlighting the cybersecurity and geopolitical concerns associated with these companies.Key Points Covered:RSA Conference Overview:Brian and Dimitri discuss the RSA Conference's shift from a must-attend cybersecurity event to one that may not offer the same value for everyone. They note that while the conference was previously a hub for significant industry insights, it now serves more as a networking event.Local vs. Global Conferences:The hosts compare the benefits of global conferences like RSA to regional events like Secure World in Boston, which offer more focused networking opportunities and potential for local partnerships.Cybersecurity Event ROI:Discussion on the return on investment for companies participating in cybersecurity conferences, emphasizing the strategic considerations for both established companies and startups.TikTok and Cybersecurity Risks:The episode addresses the security risks associated with TikTok, including data privacy concerns and the potential for foreign influence, reflecting on recent U.S. government actions to potentially restrict the app.Kaspersky's Scrutiny:They also cover concerns around Kaspersky, given its Russian roots and the potential risks this poses in terms of data privacy and national security.Call to Action:Encouragement for viewers to engage with the topics discussed by commenting on their experiences with cybersecurity events, and sharing their perspectives on TikTok and Kaspersky.Conclusion:The episode wraps up with a discussion on the importance of understanding the sources of one's information and the implications of misinformation online, stressing the need for vigilance in digital consumption.Engagement: Viewers are invited to subscribe for more insights from CISOLife, share their experiences, and follow the discussion on various social media platforms using the hashtag #CISOLife. Follow us - Website - https://sidechannel.com Podcast - https://anchor.fm/cisolife LinkedIn - https://www.linkedin.com/company/sidechannelsecurity/ Twitter / X - https://twitter.com/sidechannelsec

  2. 04/16/2024

    D&O Insurance Overview for CISOs

    "#CISOlife" is a podcast that explores the challenges and strategies of cybersecurity leadership. In a compelling episode, host Brian Haugli welcomes Andrew Pendergast, Managing Director at NFP, to delve into the intricacies of Directors & Officers (D&O) Insurance. This episode provides a thorough breakdown of how D&O Insurance operates and its significance for Chief Information Security Officers (CISOs). Pendergast, with his extensive expertise in insurance and risk management, discusses the coverage aspects that are particularly relevant to CISOs, highlighting how this type of insurance can protect against personal liabilities that may arise from the decisions and actions taken in their professional capacities. This discussion is invaluable for CISOs and other executives who want to understand the protective measures available to safeguard their personal and professional interests.

  3. 12/10/2023

    Triangle InfoSeCon Keynote - ISSA Raleigh 2023 - Brian Haugli - What does good look like? #CISOlife

    What does good look like? ISSA Keynote by Brian Haugli, CEO, SideChannel Cybersecurity program goals are often centered around the comparison to sector peers, “best practices”, and “reasonable controls”. These terms and approaches leave much ambiguity in an industry that’s seeking defined, focused expectations on outcomes. While most acknowledge the existence of frameworks like NIST CSF or CIS Controls, many programs are not actually built to them. We see them, yet we do not use them. This keynote will discuss the pragmatic approach to building frameworks backed and standards-based cybersecurity programs while not campaigning for purely compliance. It will cover the areas required to prioritize within an open framework, govern after it’s implementation, and how to report its effectiveness to leadership in a way they will understand the risks addressed. Slides: https://sidechannel.com/wp-content/uploads/ISSA-Keynote-2023-Brian-Haugli.pdf

  4. 11/04/2023

    Mastering the CISO Role: Insights and Career Advice from Joe Head | #CISOlife

    Welcome back to #CISOlife with your host, Brian Haugli! In this episode, we dive deep into the world of CISO searchability, placement, and the evolving landscape of cybersecurity leadership. 🎙️ Joining us from across the Atlantic, Joe Head, the director of CISO search at Intaso, shares his valuable insights on what makes a top-tier CISO, the nuances of the role across different industries, and how aspiring CISOs can bridge the gap between sectors. Whether you're a seasoned security professional or looking to climb the ranks, this conversation is packed with actionable advice. Joe also addresses a critical topic - the common missteps of overconfidence among CISO candidates and how to build a genuine profile that stands out. Moreover, we discuss: The four key traits of successful CISOs: Leadership, Execution, Influence, and Vision The importance of understanding business value over technical jargon Navigating the career leap from technical expertise to strategic management How to prepare for interacting with a company's board of directors Don't miss Joe's top tip for cybersecurity professionals: Network before you need it! He emphasizes the power of building relationships long before you're on the job hunt. 🔔 Subscribe to #CISOlife and hit that bell to stay updated on the latest discussions that can shape your cybersecurity career. To connect with Joe Head: LinkedIn: https://www.linkedin.com/in/joehead1/ Website: https://intaso.co/ For more #CISOlife content: Website - http://www.sidechannel.com LinkedIn - http://linkedin.sidechannel.com YouTube - http://youtube.sidechannel.com Facebook - http://facebook.sidechannel.com Twitter - http://twitter.sidechannel.com Podcast - https://anchor.fm/cisolife Spotify - http://spotify.sidechannel.com iTunes - http://itunes.sidechannel.com Subscribe to our YouTube channel Stay safe, stay informed, and we hope to see you in the next #CISOlife episode! 👍 Like | 💬 Comment | 🔄 Share | ✔️ Subscribe #CISO #CybersecurityLeadership #CareerAdvice #Cybersecurity #Leadership #intaso #JoeHead #ExecutiveSearch #SecurityStrategy #BusinessStrategy

  5. 11/02/2023

    SEC Overview of Final Rule Impact

    The world of finance and cybersecurity has entered a new chapter with the U.S. Securities and Exchange Commission’s (SEC) recent final rule on cybersecurity disclosure. Effective September 5, 2023, this new regulation requires public companies to enhance transparency around cybersecurity risks and incidents. We will delve into the details of the final rule, discuss its impact on registrants, and explore how companies can turn this regulatory requirement into a strategic advantage.

  6. 10/24/2022

    Reasons to build Cybersecurity Program | vCISO Engagement | Cyber Risk Assessment | Gap Analysis

    Review of an engagement and initial work as the CISO or a vCISO. More at SideChannel Why do organizations start a cybersecurity program?  1. Customer demands  2. Board or C-suite requests  3. Regulation requires it  4. Right thing to do  5. Post post breach Assess against a cybersecurity standard, framework or regulation Build cybersecurity roadmap to address gaps

  7. 09/26/2022

    American Airlines Breach Explained | How did American Airlines O365 get hacked? #CISOlife

    A #CISOlife overview of the public information of the recent American Airlines breach by Brian Haugli, CEO, SideChannel.     Brian presents an explanation and walk through of how an O365 tenant can be hacked where legacy authentication methods are still available; specifically with IMAP.   The info released so far shows a series of steps: American Airlines has a breach of O365  Still using legacy protocol IMAP  Microsoft instructs to remove legacy protocols  Attacker can pull down all emails  Steps to stop this attack

  8. 08/22/2022

    #CISOlife - What is a vCISO? Experience, Policy, & Programs needed in Cybersecurity from SideChannel

    vCISO provider SideChannel's approach to building a cybersecurity program for startups and mid-market companies.   [2:15] The vCISO should be able to do the following (part of the #cisolife)   [3:30] Develop, or mature currently existing, documentation for the following:   [4:30] Information Security Strategy (3 to 18 months) - taking into account information from Risk Assessment and Gap Analysis   [5:15] Enterprise Information Security Policy, including, but not limited to; -Acceptable Use Policy -Data Governance & Classification Policy -Asset Inventory & Device Management Policy -Incident Response Policy -Remote Access & Identity Management Policy -Mobile Security Policy -Vulnerability Management Policy -Third Party Risk Management Policy -Disaster Recovery Plan -Incident Response Plan   [9:15] Risk Assessments - guided by the organization’s overall risk management process or previous risk assessment activities.    [9:45] Determine, Analyze, and Prioritize Gaps - compare the current profile and the target profile to determine gaps   [10:00] Information Security Governance - using the NIST CSF v1.1 framework; provide oversight to ensure that risks are adequately mitigated, and then support management to ensure that controls are implemented to mitigate risks.   [11:40] Managed Security Services - support the implementation of end-point detection and response (EDR) capabilities and mature to a 24/7/365 monitoring and response function via internal or external resources.   [12:00] Incident Response - outline and develop incident response functions for the enterprise to respond to cyber events, incidents, and crises.     [12:45] Vulnerability Management & Secure Configuration - structure function for the discovery and remediation of vulnerabilities discovered from lack of patching or unknown vulnerabilities in accordance with severity established in Vulnerability Management Policy.  [13:35] Third Party Vendor Risk Management (TPRM) - provide resources to respond to third-party risk assessment questionnaires (incoming)  and conduct third party risk assessments of vendors (outgoing);   [13:50] Cybersecurity Training and Awareness - identifying and aligning security and training awareness topics to focus on where security intersects with the business mission and aligns content to ensure the goals and objectives of the program are met.      Follow us -   Website - http://www.sidechannel.com LinkedIn - http://linkedin.sidechannel.com YouTube - http://youtube.sidechannel.com Facebook - http://facebook.sidechannel.com Twitter - http://twitter.sidechannel.com Podcast - https://anchor.fm/cisolife Spotify - http://spotify.sidechannel.com iTunes - http://itunes.sidechannel.com

See All (33)

Trailer

Ratings & Reviews

5
out of 5
2 Ratings

About

Cybersecurity and risk podcast. From the CISOs at SideChannel, we tackle discussions from the industry and the threat landscape. Host Brian Haugli, former Fortune 500 CISO, lead for Pentagon's information assurance program, and now CEO for SideChannel, sit down with guests to discuss the current focuses for businesses around cybersecurity.

Information

  • Creator
    Brian Haugli
  • Years Active
    2020 - 2024
  • Episodes
    33
  • Rating
    Clean
  • Copyright
    © Brian Haugli
  • Show Website
    #CISOlife