Securities

SECURITIES

0.0 (0)
Management
Weekly

Enhance your security knowledge with us.

Oct 26

The Hardened Stack — Ep. 4: Endpoint Hardening

Welcome to Episode 4 of the podcast series covering The Hardened Stack: A Field Guide to Securing Identity, Endpoints, Cloud, and Everything Your IT Team Runs by Sho Shimoda.In a modern organisation, the true security perimeter is not the firewall at head office—it is every scattered keyboard on home Wi-Fi, in airport lounges, and on factory floors. When a user clicks a malicious link or opens a phished attachment, code runs directly on the endpoint inside your network. In Chapter 4: Endpoint Hardening, we explore how to build self-defending endpoints using layered security controls. We walk through patch management for third-party software, Endpoint Detection and Response (EDR), removing local admin rights, deploying LAPS, enforcing BitLocker disk encryption, and securing BYOD mobile devices.What You’ll Learn in This Episode The Endpoint as the Front Line: Why traditional network perimeters fail when threats arrive inside the wall, and how defense-in-depth keeps endpoints self-defending anywhere in the world.Decisive Patch Management: Going beyond OS updates to cover third-party applications (browsers, PDF readers) and firmware—and why measuring patching based on reboots rather than downloads is critical.EDR vs. Traditional Antivirus: Why signature-matching antivirus misses "living-off-the-land" attacks, how EDR flags suspicious behavioral sequences, and the power of remote network isolation.Eliminating Standing Local Admin Rights: Why user local admin rights are one of the most damaging defaults in IT, and how providing software portals and logged elevation paths removes friction.Stopping Lateral Movement with LAPS: Deploying Windows Local Administrator Password Solution (LAPS) so every machine holds a unique, rotating local admin password stored securely in Entra ID or Active Directory.Application Control & Allow-Listing: Using AppLocker or WDAC starting in audit mode to learn environment baselines before flipping rules to enforce.Disk Encryption & Key Escrow: Enforcing TPM-backed BitLocker full-disk encryption and centrally escrowing recovery keys so a lost laptop is merely lost hardware, not a reportable data breach.Securing Mobile & BYOD: Using Mobile Application Management (MAM) in Intune to containerize and wipe corporate data on personal phones without seizing or wiping personal photos.At Meridian Foods: How service desk lead Lucy Fernández and senior sysadmin Hana Sato remediated a travelling finance laptop that was eleven updates behind, lacked disk encryption, and held standing local admin privileges.About the Source BookThe Hardened Stack (Book 2 of the Security Book Series by Sho Shimoda, published by ReceiptRoller Inc.) is a practical, blue-team field guide designed for IT generalists, systems engineers, and DevOps administrators. Across 16 chapters, it provides over 80 real-world configuration scripts, PowerShell commands, and hardening checklists to secure Microsoft 365, endpoints, cloud accounts, and local networks on a realistic budget.
Oct 26

The Hardened Stack — Ep. 3: Identity and Access Management

Welcome to Episode 3 of the podcast series covering The Hardened Stack: A Field Guide to Securing Identity, Endpoints, Cloud, and Everything Your IT Team Runs by Sho Shimoda.In modern estates where employees work remotely and applications live across multiple clouds, the traditional network boundary is no longer the main defense—identity is the new security perimeter. In Chapter 3: Identity and Access Management, we unpack why the overwhelming majority of breaches are not clever malware exploits, but valid logins by unauthorized actors—or as Meridian Foods security lead Aiko Tanaka puts it, "We did not get hacked. We got logged into." This episode explores how to prove identity reliably, restrict access using least privilege, and govern the full lifecycle for both human and non-human accounts.What You’ll Learn in This Episode Authentication vs. Authorization: Understanding the distinct roles of proving who someone is versus granting what they can touch—the doorkeeper checking the guest list versus handing out room keys.MFA Everywhere & Phishing-Resistant Factors: Why multi-factor authentication must cover every login path without exception, and how moving to FIDO2 passkeys and hardware keys prevents adversary-in-the-middle attacks through origin binding.Single Sign-On (SSO) & Conditional Access: Using central identity providers like Microsoft Entra ID to evaluate real-time sign-in context—such as user risk, device health, and location—before granting access.Least Privilege, RBAC & Privileged Access: Applying Role-Based Access Control to shrink blast radiuses, utilizing Privileged Identity Management (PIM) for just-in-time elevation, and safeguarding isolated break-glass emergency accounts.The Joiner-Mover-Leaver (JML) Lifecycle: Managing account transitions to eliminate "privilege creep" when employees change roles, and automating offboarding from HR systems so access is revoked within hours.Securing Non-Human Identities: Scoping service accounts, replacing long-lived API keys with platform-managed identities or workload identity federation, and auditing stale inactive accounts.At Meridian Foods: How senior sysadmin Hana Sato staged conditional access policies in report-only mode to prevent factory floor lockouts, and how Aiko Tanaka rolled out phishing-resistant FIDO2 keys to admins first.About the Source BookThe Hardened Stack (Book 2 of the Security Book Series by Sho Shimoda, published by ReceiptRoller Inc.) is a practical, blue-team field guide designed for IT generalists, systems engineers, and DevOps administrators. Across 16 chapters, it provides over 80 real-world configuration scripts, PowerShell commands, and hardening checklists to secure Microsoft 365, endpoints, cloud accounts, and local networks on a realistic budget.
Oct 25

The Hardened Stack — Ep. 2: Know What You Have: Asset Inventory & Configuration Management

Welcome to Episode 2 of the podcast series covering The Hardened Stack: A Field Guide to Securing Identity, Endpoints, Cloud, and Everything Your IT Team Runs by Sho Shimoda.You cannot patch a server you do not know exists, and you cannot apply least privilege to an account you have never counted. In Chapter 2: Know What You Have: Asset Inventory & Configuration Management, we explore the foundational discipline of visibility. We examine how to discover hidden infrastructure across on-premises and cloud estates, establish concrete configuration baselines, detect configuration drift before attackers exploit it, and maintain a living inventory without falling into the trap of hand-maintained spreadsheets that decay within weeks.What You’ll Learn in This Episode The Danger of Unknown Assets: Why forgotten cloud virtual machines, unmonitored test environments, and legacy systems receive no care and become primary entry points for attackers.Combining Authoritative & Active Discovery: How to query systems that already hold truth (Entra ID, Active Directory, Intune, Azure Resource Graph, AWS CLI) and reconcile them with authorised network subnet scans (nmap).Uncovering Shadow IT & Sensitive Data: Tracking unmanaged SaaS applications authenticated via single sign-on or expense records, and mapping where sensitive customer and financial data actually lives.Making "Secure by Default" Concrete: Adopting established configuration baselines—such as CIS Benchmarks (Level 1 & Level 2) and vendor security baselines—and applying them strictly as code via Intune, Group Policy, or Ansible.Catching Configuration Drift: Implementing continuous checks to detect unauthorized changes, such as storage buckets or databases quietly becoming publicly accessible over time.Enforcing Cloud Tagging & CMDB Discipline: Using Terraform to enforce mandatory metadata tags (owner, environment, data_class, cost_center) at creation time so orphaned resources are immediately flagged.Golden Images & Immutable Infrastructure: Moving from treating servers as "pets" to "cattle" using Packer and Terraform to make configuration drift structurally impossible.At Meridian Foods: How senior sysadmin Hana Sato and cloud engineer Dev Okonkwo discovered 7 untracked Azure resources and an unmonitored "temp-test-2" virtual machine that had been running—and billing—for 19 months.About the Source BookThe Hardened Stack (Book 2 of the Security Book Series by Sho Shimoda, published by ReceiptRoller Inc.) is a practical, blue-team field guide designed for IT generalists, systems engineers, and DevOps administrators. Across 16 chapters, it provides over 80 real-world configuration scripts, PowerShell commands, and hardening checklists to secure Microsoft 365, endpoints, cloud accounts, and local networks on a realistic budget.
Oct 25

The Hardened Stack — Ep. 1: The Security Mindset for IT

Welcome to the inaugural episode of the podcast series covering The Hardened Stack: A Field Guide to Securing Identity, Endpoints, Cloud, and Everything Your IT Team Runs by Sho Shimoda.If you are part of a small or mid-size IT team—underfunded, perpetually busy, and holding the line across Microsoft 365, endpoints, and cloud between a hundred other tickets—this guide was written specifically for you. In this episode, we break down Chapter 1: The Security Mindset for IT, laying out the foundational philosophy of pragmatic blue-team defense. We discuss why security isn't about theoretical perfection or compliance box-ticking, but an ongoing practice of steadily raising the cost of an attack while lowering the damage if something goes wrong.What You’ll Learn in This Episode The IT Administrator’s Reality: Why security responsibilities inevitably land on busy IT generalists without a 24/7 Security Operations Centre or a massive budget.Defining Security Realistically: Moving away from impossible "absolute safety" toward actionable risk reduction—making bad outcomes less likely and less costly.Building a Non-Punitive Culture: Why blame leads staff to hide mistakes, and how trust creates the fastest path from "something is wrong" to "we know about it".The Four Defensive Pillars:The 5-Minute Threat Model: Four simple questions (What are we protecting? Who might come after it? How would they get in? What reduces that?) to prioritize defense before spending money.The 5 Highest-Value Security Wins:Meet Meridian Foods: An introduction to the fictional 450-person food company and its 7-person IT team (Tom, Aiko, Hana, Dev, Omar, Lucy, and Ben) who serve as our real-world case study throughout the book.About the Source BookThe Hardened Stack (Book 2 of the Security Book Series by Sho Shimoda, published by ReceiptRoller Inc.) is a hands-on, defensive field guide for IT admins, systems engineers, and DevOps generalists. Across 16 chapters, it provides over 80 real-world configuration scripts, PowerShell commands, and practical hardening checklists spanning Microsoft 365, Entra ID, Azure, AWS, network segmentation, and incident runbooks.
Oct 24

The Boardroom Firewall (Ep. 16) — Your First 90 Days and Beyond

Welcome to Episode 16 of the podcast series exploring The Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda.In this finale episode, we cover Chapter 16: "Your First 90 Days and Beyond". We pull together every principle from the book into a practical, phased 90-day action plan that senior leaders can put to work immediately to build, manage, and sustain genuine cyber resilience.Key Topics Covered in This Episode: Finding Out What Is True: How to establish an honest baseline by listening to key stakeholders, reviewing core documents, and evaluating your posture against the NIST CSF 2.0 functions (Govern, Identify, Protect, Detect, Respond, Recover).The 90-Day Action Plan: A week-by-week roadmap divided into three clear phases:Maturity in Stages: Moving sequentially from Basics (essential hygiene) to Managed (embedded processes) and Resilient (operational business absorption and recovery).Delegate the Doing, Keep the Deciding: Identifying what senior executives must own personally—risk appetite, priorities, resources, reporting lines, culture, and crisis decisions—versus what technical teams execute.Sustaining Momentum When Attention Fades: Establishing calendar anchors, recurring tabletop exercises, and sustainable routines so security governance survives leadership changes.Leading with Steadiness, Not Fear: Why calm, prepared leadership grounded in plain language and honest questions is the single most valuable control an organization can possess.Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.About the Book: The Boardroom FirewallThe Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda is a calm, plain-language guide written specifically for chief executives, board members, founders, and senior leaders in finance, operations, legal, and risk.Rather than teaching technical skills or system configuration, the book equips non-technical leaders with the judgment and confidence needed to manage cyber risk as an ordinary business risk. It cuts through industry jargon with everyday analogies, real-world boardroom vignettes, and actionable governance tools.
Oct 24

The Boardroom Firewall (Ep. 15) — Metrics, Dashboards, and Board Reporting

Welcome to Episode 15 of the podcast series exploring The Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda.In this episode, we cover Chapter 15: "Metrics, Dashboards, and Board Reporting". We examine how executive leadership teams move away from overwhelming technical data dumps toward concise, risk-focused reporting that supports calm boardroom decision-making.Key Topics Covered in This Episode: What to Measure and What to Ignore: Moving away from operational step counts—such as raw numbers of blocked emails or investigated alerts—toward metrics that measure risk reduction and inform business decisions.Leading vs. Lagging Indicators: Balancing retrospective outcome metrics (past breaches and financial losses) with forward-looking risk conditions (patching speed, backup restore frequency) that warn you before an incident occurs.KRIs vs. KPIs: Distinguishing between Key Performance Indicators (measuring program delivery) and Key Risk Indicators (measuring whether exposure remains within board-approved risk appetite thresholds).The One-Page Board Dashboard: Structuring a clean, four-part executive dashboard containing a plain-language headline, 8–12 core indicators, top business risks, and actionable requests.Navigating the Red/Amber/Green (RAG) Trap: Avoiding "watermelon" status reports (green on the outside, red on the inside), subjective color choices, and unaddressed "frozen ambers".Reporting Cadence and Good Governance: Establishing a quarterly committee review rhythm, an annual full-board deep dive, and fostering an environment that welcomes honest reporting over false reassurance.Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.About the Book: The Boardroom FirewallThe Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda is a calm, plain-language guide written specifically for chief executives, board members, founders, and senior leaders in finance, operations, legal, and risk.Rather than teaching technical skills or system configuration, the book equips non-technical leaders with the judgment and confidence needed to manage cyber risk as an ordinary business risk. It cuts through industry jargon with everyday analogies, real-world boardroom vignettes, and actionable governance tools. Key Highlights of the Book: Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.
Oct 24

The Boardroom Firewall (Ep. 14) — Cyber Insurance — What It Does and Doesn't Cover

Welcome to Episode 14 of the podcast series exploring The Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda.In this episode, we cover Chapter 14: "Cyber Insurance — What It Does and Doesn't Cover". We examine the role of cyber insurance as a financial risk transfer tool, what policies actually cover versus what they exclude, why insurers have become far stricter about security controls, and how executives can navigate policy renewals and claims with confidence. Key Topics Covered in This Episode: Insurance Is an Umbrella, Not a Roof: Why insurance transfers financial loss but cannot repair lost customer trust, operational downtime, or leadership distraction.First-Party vs. Third-Party Cover: A clear breakdown of what policies typically cover (forensic investigations, business interruption, extortion, legal defense) and what they exclude (unpatched vulnerabilities, acts of war, uninsurable fines, infrastructure outages).Why Insurers Demand Controls: How "hardening" in the cyber insurance market means insurers inspect your digital health before offering cover—and why controls like multi-factor authentication (MFA), tested backups, EDR, and patching make insurance available and affordable.Attestations as Contractual Promises: Why answers on an insurance application are legal representations, and why attesting to controls that aren't working in practice can jeopardize a claim.How Claims Actually Play Out: Understanding the incident notification clock, working with pre-approved panel firms, seeking required insurer consent, and proving financial loss.Sub-Limits, Retentions, and Dependent Interruption: How to read a policy as a leader by scrutinizing sub-limits (e.g., caps on social engineering fraud) and coverage for outages at cloud or software suppliers.Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.About the Book: The Boardroom FirewallThe Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda is a calm, plain-language guide written specifically for chief executives, board members, founders, and senior leaders in finance, operations, legal, and risk.Rather than teaching technical skills or system configuration, the book equips non-technical leaders with the judgment and confidence needed to manage cyber risk as an ordinary business risk. It cuts through industry jargon with everyday analogies, real-world boardroom vignettes, and actionable governance tools. Key Highlights of the Book: Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.
Oct 24

The Boardroom Firewall (Ep. 13) — Incident Response and Crisis Communications

Welcome to Episode 13 of the podcast series exploring The Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda.In this episode, we cover Chapter 13: "Incident Response and Crisis Communications". We examine how leadership teams navigate the critical hours and days following a cyber incident, from establishing clear decision-making authority and out-of-band communications to managing regulatory deadlines, customer transparency, and crisis messaging.Key Topics Covered in This Episode: The Incident Response Plan as a Fire Drill: Why an incident plan is about pre-agreed habits rather than unread paperwork, and how out-of-band communication channels ensure leadership can coordinate if primary networks are compromised.Who Decides What, and When: Establishing clear layers of authority between technical responders, the incident manager, executive leadership, and board oversight—and why maintaining a contemporaneous decision log protects the company.Navigating Regulatory and Stakeholder Deadlines: Understanding statutory notification clocks (such as the 72-hour GDPR window), contractual customer notices, and investor disclosure rules.Crafting Honest Crisis Communications: Why plain-language transparency beats vague corporate boilerplate ("out of an abundance of caution"), and how a "holding statement" buys time while facts are verified.Engaging Outside Experts & Law Enforcement: How forensic investigators, breach counsel, crisis PR advisors, and law enforcement work together—and why maintaining legal privilege requires proper sequencing.Common Leadership Traps in a Crisis: Avoiding early blame-seeking, premature reassurances, micromanaging technical work, and skipping the post-incident "lessons-learned" review.Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.About the Book: The Boardroom FirewallThe Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda is a calm, plain-language guide written specifically for chief executives, board members, founders, and senior leaders in finance, operations, legal, and risk.Rather than teaching technical skills or system configuration, the book equips non-technical leaders with the judgment and confidence needed to manage cyber risk as an ordinary business risk. It cuts through industry jargon with everyday analogies, real-world boardroom vignettes, and actionable governance tools. Key Highlights of the Book: Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.

Enhance your security knowledge with us.

Creator

SECURITIES
Years Active

2026
Episodes

20
Rating

Clean
Copyright

© SECURITIES
Show Website

Securities