"This Is Fine" with Hunter Strategy

Hunter Strategy

Welcome to "This Is Fine" with Hunter Strategy, because who doesn't need another podcast, right? But hold on, this isn't your typical corporate spiel. "This Is Fine" dives deep into Cloud security and agile methods, but with a twist of humor, sarcasm, and a sprinkle of dad jokes. Instead of boring PDFs, we bring lively discussions to life, offering a peek behind the curtain at our quirky team. Join us for a roller coaster ride through tech talk and more. Trust us, it's going to be fine... probably!

  1. What is SBIR & how does it work?

    2024. 10. 31.

    What is SBIR & how does it work?

    In this episode of ‘This Is Fine’, Matt sits down with Harold Smith III, the CEO and Founder of Monkton, to discuss the complexities of the Small Business Innovation Research (SBIR) program. They cover the program's role in government acquisition and the challenges small businesses encounter in navigating the contracting world. Matt and Harold explore the advantages of SBIR for both small businesses and the government, emphasizing the power of collaboration and user-centered design. They also address criticisms of the program, such as 'SBIR mills', and advocate for reform to encourage true innovation. Tune in to learn more about SBIR Phase 3 and how it can help your small business thrive! Chapters: 00:00 Introduction to SBIR and Its Importance 03:01 Understanding the SBIR Program 06:12 Benefits of SBIR for Government 08:56 Challenges in Government Contracting 11:59 The Role of User-Centered Design 14:57 Critiques of the SBIR Program 18:06 Navigating the Valley of Death 20:54 The Future of SBIR and Innovation 25:24 Innovation vs. Acquisition: Understanding the Landscape 26:50 Navigating the Challenges of COVID-19 29:29 The Transition from Air Force to Space Force 32:08 Understanding the SBIR Process and Its Challenges 35:20 Technical Barriers in Government Contracting 39:06 Best Practices for Compliance and Data Management 43:40 Advice for Companies Entering the SBIR Space 47:31 Future Conversations: Expanding the Discussion on SBIRs Keywords: SBIR, Small Business Innovation Research, government contracting, small business, Phase I, Phase 2, Phase 3, Space Force, compliance, data management, best practice

    51분
  2. Recall on Windows 11: Implications for Privacy and Security

    2024. 10. 24.

    Recall on Windows 11: Implications for Privacy and Security

    On this episode of "This Is Fine," we dive into the controversial Windows 11 recall feature and its implications for privacy and security. Our host, Matt Triner, CEO of Hunter Strategy, along with expert guests Jake Williams, VP of Research & Development at Hunter Strategy, Jennifer Lee, Partner at Constangy, Brooks, Smith & Prophete, LLP, and Andrew King, CISO at Hunter Strategy, dissect the legal and security concerns surrounding a feature that takes screenshots of users' work every five seconds and stores them locally. We'll explore... Privacy Laws, Incident Response Discoverability, the Impact on Attorney-Client Privilege ...as well as the broader security culture at Microsoft and the call for better governance. Tune in to learn why turning off this feature might be the best move for both enterprise users and consumers alike. Chapters 00:00 Introduction to the Windows 11 Recall Feature 06:45 Legal Implications: Privacy Laws and Attorney-Client Privilege 08:36 Security Implications: Clear Text Information and Breach Defense 12:37 The Security Culture at Microsoft and the Lack of Governance 34:56 Recommendations: Turn Off the Recall Feature Keywords Windows 11 recall feature, Screenshot capture privacy risks, Legal implications of data capture, Security concerns in Windows 11, Compliance with privacy laws, Data governance challenges, Oversight in security protocols, Microsoft security governance, Attorney-client privilege risks, Incident response discoverability

    42분
  3. Software Supply Chain Security Best Practices

    2024. 10. 10.

    Software Supply Chain Security Best Practices

    On this episode of "This Is Fine," we delve into the critical topic of software supply chain security with our guests Jessica Sweet, Supply Chain Expert, and Dan Beller, Director of Cloud Engineering, at Hunter Strategy. We explore the vulnerabilities and risks tied to the software supply chain, including malicious software insertion and open-source vulnerabilities. We'll uncover... Common Risks, Best Practices, Vendor Management Challenges ...as well as how cloud technologies both enhance and complicate supply chain security. Tune in to discover essential strategies like maintaining machine-readable SBOMs and implementing multifactor authentication to secure your software supply chain! Chapters 00:00 Introduction and Importance of Software Supply Chain Security 02:11 Common Vulnerabilities and Risks in the Software Supply Chain 04:41 Challenges of Vendor Management in Supply Chains 09:43 The Role of Cloud in Enhancing and Complicating Supply Chain Security 15:59 Best Practices for Software Supply Chain Security Keywords Software Supply Chain Vulnerabilities, Risks of Malicious Software Insertion, Open-Source Security Issues, Vendor Management Challenges in Software Security, Cloud Impacts on Supply Chain Security, Best Practices for SBOMs (Software Bill of Materials), Multifactor Authentication in Supply Chains

    21분
  4. Artificial Intelligence (AI/GPT/LLM) for Cyber Threat Detection

    2024. 10. 03.

    Artificial Intelligence (AI/GPT/LLM) for Cyber Threat Detection

    On this episode of "This Is Fine," we dive into the cutting-edge world of Artificial Intelligence and its pivotal role in cyber threat detection. Our host, Matt Triner, is joined by special guests Matt D’vertola, the Applied AI Lead at Hunter Strategy, and Andrew King, the CISO at Hunter Strategy. Together, they explore: Predictive Analytics, Automated Response Systems, The Future of Cybersecurity, ...and the challenges we face in this dynamic field. Tune in to learn how GPT and other large language models are revolutionizing cybersecurity and why staying ahead of AI advancements is crucial for both professionals and tech enthusiasts alike. Chapters 00:00 Introduction to AI technologies in cyber threat detection 03:12 Practical applications of AI in compliance and redaction 06:49 The importance of human validation and risk-based decision-making 25:49 Measuring the impact of AI: Mean toil time and quality written pieces Keywords GPT, LLMs, Cyber Threat Detection, AI Technologies, Traditional Approaches, Junior Analysts, Compliance, Redaction, Human Validation, Risk-Based Decision-Making, Automation, Mean Toil Time, Quality Written Pieces

    28분
  5. Insider Threat Mitigation Strategies in SMB

    2024. 09. 26.

    Insider Threat Mitigation Strategies in SMB

    On this episode of "This Is Fine," we explore insider threat mitigation strategies for small-to-medium sized businesses. Often at a disadvantage due to limited resources, these companies can face unique challenges in effectively detecting and preventing insider threats. We'll help to provide effective strategies to help bridge this gap and safeguard your organization.  Joining us is Andrew King, Chief Information Security Officer, and Joel Cabrera, Director of Security Operations, here at Hunter Strategy. Their experience and understanding of cybersecurity challenges faced by businesses of all sizes help to provide invaluable insights into effective insider threat mitigation strategies, specifically tailored for small to medium enterprises.   So, whether you're a business owner, an IT professional, or simply curious about insider threat mitigation best practices, sit back and tune in as we share how small businesses can confidently and resiliently navigate the complex landscape of insider threats.  Want to learn more about the Google Security Checklist mentioned in this episode? Click here! Security checklist for medium and large businesses (100+ users) - Google Workspace Admin Help  Chapters:  00:00 Introduction and Context: Insider Threats in SMBs  01:26 Overlaying Insider Threat Intelligence Programs  04:45 Prevention and Detection Strategies  06:30 Hardening Your Environment and Role-Based Access Control  09:55 Microsoft Tools for Insider Threat Mitigation  11:35 The Role of Company Culture in Insider Threat Mitigation  14:19 User Access Audits and Minimizing Access  16:07 Data Classification and Labeling  20:03 Differentiating Startups and SMBs  23:06 User Access Management and Deprovisioning

    24분
  6. Secure Mobile Application Development for Military Use

    2024. 08. 08.

    Secure Mobile Application Development for Military Use

    On this episode of "This Is Fine," we tackle securing mobile applications for military use with security expert, Harold Smith III. Harold, Co-Founder & CEO of Monkton (a secure mobile app provider) and owner of the MATTER IDIQ, joins us to navigate the complexities of NIAP Certification for military apps.   We'll uncover...  Challenges,  Best Practices, and Solutions   ...for deploying secure mobile applications on the battlefield.  Tune in and discover how you can help to protect our troops, one app at a time!    Chapters:  00:00 Introduction and the Role of Contracts Officers  00:45 The Importance of Secure Mobile Applications for Military Use  02:12 Monkton's Journey and the NIAP Certification Process  06:37 The Challenges and Rarity of Going Through NIAP Evaluation  10:50 The Baseline Importance of NIAP Requirements  15:54 The Need to Stay Ahead in Secure App Development  17:38 The Current State of Software Development and Security  20:54 Building Secure Mobile Apps from the Beginning  21:43 Data Security and Architecture in Mobile App Development  23:03 Native Mobile Applications and Cloud Services  24:02 Cost Savings and Efficiency with Functions Platform as a Service  25:46 Challenges and Education for Contracting Officers  32:23 The Importance of Collaboration and Innovation in Government    Keywords:  secure mobile applications, NIAP certification, National Information Assurance Partnership, authentication mechanisms, legacy systems, future of app development, data security, mobile app development, native applications, cloud services, Amazon Lambda, DynamoDB, SBIR, small-business-innovation-research, set-aside programs, edge computing

    44분
  7. Global Impacts of 2024 CrowdStrike Outage

    2024. 07. 19.

    Global Impacts of 2024 CrowdStrike Outage

    On today’s special episode of “This Is Fine”, we unpack the very recent global CrowdStrike outage. CrowdStrike is an industry leading cybersecurity company that provides endpoint detection and response (EDR) software. On the morning of July 19th, 2024, CrowdStrike released a faulty update that impacted Microsoft Windows systems, leading to a widespread outage in industries varying from the airlines to emergency services. To help us unpack what went wrong, we’re joined by Jake Williams, VP of Research and Development here at Hunter Strategy. In light of this problematic update, Matt and Jake discuss planning methods like balancing security needs with operational needs, mitigating disruption through staged deployments, providing clear communication during outages, and managing data confidentiality and system availability with BitLocker management. Listen now and learn how you can improve your organization’s security posture and incident response plan from today’s CrowdStrike outage! References mentioned in today’s episode: Jake’s Tweets: https://x.com/MalwareJake/status/1814183916099780886 / https://x.com/MalwareJake/status/1814295097204449318 Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers: https://www.amazon.com/Sandworm-Cyberwar-Kremlins-Dangerous-Hackers/dp/0385544405

    42분
  8. Navigating FedRAMP Equivalence for DIB Vendors

    2024. 07. 11.

    Navigating FedRAMP Equivalence for DIB Vendors

    This week, we're exploring a topic at the intersection of cloud services and national defense: FedRAMP Equivalence. New requirements introduced by the DoD CIO may bring significant changes for cloud vendors eager to supply the Defense Industrial Base.  We are joined by our special guest, Alex Trafton, Senior Managing Director from Ankura Consulting. Alex’s core focus is on regulatory and compliance frameworks within the defense industry. Alex leads a practice focused on helping organizations meet some of the most stringent compliance frameworks such as FedRAMP, CMMC, and NIST 800-171.  Join us as we discuss the changes to FedRAMP equivalence and the impacts they will have on the DIB and organizations looking to serve it. Chapters:  00:00 Introduction and Background  06:16 The Need for FedRAMP Equivalence  13:30 The Role of Third-Party Assessors  29:07 Strategic advice for vendors  37:51 Navigating the regulatory requirements

    44분
모두 보기(15개)

예고편

평가 및 리뷰

5
최고 5점
2개의 평가

소개

Welcome to "This Is Fine" with Hunter Strategy, because who doesn't need another podcast, right? But hold on, this isn't your typical corporate spiel. "This Is Fine" dives deep into Cloud security and agile methods, but with a twist of humor, sarcasm, and a sprinkle of dad jokes. Instead of boring PDFs, we bring lively discussions to life, offering a peek behind the curtain at our quirky team. Join us for a roller coaster ride through tech talk and more. Trust us, it's going to be fine... probably!

정보