34 episodes

Is a podcast that focuses on how companies can quantify and qualify the cost of a data breach. Chattinn Cyber features some of the most well respected privacy and cyber experts in the world.



Join the conversation with Business Leaders, Government Agencies, and Cyber Risk Experts to learn more about how and why they got into Cyber Risk and to explore the rapidly changing threat of this landscape that affects us all domestically as well as abroad.

Chattinn Cyber Marc Schein

    • Business
    • 4.8 • 9 Ratings

Is a podcast that focuses on how companies can quantify and qualify the cost of a data breach. Chattinn Cyber features some of the most well respected privacy and cyber experts in the world.



Join the conversation with Business Leaders, Government Agencies, and Cyber Risk Experts to learn more about how and why they got into Cyber Risk and to explore the rapidly changing threat of this landscape that affects us all domestically as well as abroad.

    Exploring Fraud Resolution, Identity Theft Protection, And Security Incident Notifications With Michael Bruemmer

    Exploring Fraud Resolution, Identity Theft Protection, And Security Incident Notifications With Michael Bruemmer

    In this episode of CHATTINN CYBER, Marc Schein interviews Michael Bruemmer, VP of Consumer Protection and Global Data Breach at Experian Consumer Services, CA. Marc and Michael discuss the latter's education, upbringing, unexpected journey into cyberspace, and unique business model and services.



    Michael entered the cyber industry fifteen years ago, after quitting working on the tech side for Dell and Lenovo. After returning to Austin, he joined CSIdentity, leading the sales, data breach, and identity theft departments, and hasn't looked back since.



    Michael attributes Experian's success in insurance cybersecurity with three things -- their Program and Events Manager, their family of forensics experts, privacy attorneys, data analysts, and notification vendors (among many others), and the powerful brand and community they've created within the organization. Their notification industry work includes fraud resolution, offline enrollment, and identity theft protection.



    Michael explains that the foundation of his work hasn't altered in the past three years and continues to focus on consistently delivering incident notification services, meeting deadlines, and ensuring customer satisfaction. He discusses Experian's unique business model that provides an ongoing fraud resolution, using which clients can get a year's worth of credit monitoring. Michael also touches on Experian's plans of rolling out crisis management response services soon.



    The best practice to mitigate cyber risks at any company is to consult with cybersecurity experts before a potentially harmful incident has already occurred. Even if you haven't had an event, Michael explains that you should always have a private attorney and a cyber insurance provider at the ready. In the event of a suspected breach, you need to reach out to them quickly.



    Towards the close of the episode, Michael also talks about ransomware attacks and the percentage of companies giving in to such threats today. Tune in to this episode to learn in better detail about thriving in the cybersecurity industry.



    Highlights:



    “We value our relationships with people that refer us, that don't refer us, because it's such a small community. If your reputation is good in that community, it goes a long way but it only takes one bad event, one dissatisfied customer and then things don't go so well after that.”



    “What I suggest is that you have a privacy attorney, you're also able to operate under privilege as you if you so choose to. And we're always encouraging that with any client.”



    “The survey that ZD net said was that, in actuality, 83% (of companies) paid the ransomware, which I found was really interesting, despite the FBI, despite the other regulatory agencies, they don't pay, you're probably going to get it dumped on the dark web, let alone your brand is going to be exposed. Let alone you'll never get the encryption key.”



    “About 50% of the events that we get contacted in become never notifiable. So in other words, we don't even go into action, but we still get a heads up so that we can prepare.”



    Time-Stamps:



    [00:43] - Michael talks about his upbringing



    [04:38] - About the cybersecurity services provided at Experian



    [05:58] - The notification practice at Experian



    [10:21] - Why you need legal counsel before a potential cybersecurity breach/ threat



    Connect with Michael:



    Website: www.experian.com/databreach



    LinkedIn: https://www.linkedin.com/in/michaelbruemmer/



     



     

    • 14 min
    Driving Innovation Using Simple Secret Management With Brian Vallelunga

    Driving Innovation Using Simple Secret Management With Brian Vallelunga

    In this episode of CHATTINN CYBER, Marc Schein interviews Brian Vallelunga, CEO of Doppler, a San Francisco-based company that provides secrets management software for developers. Brian has been featured in the Forbes 30 under 30 for enterprise technology experts for his outstanding achievements with Doppler. In addition, he has attracted the likes of Sequoia, Google Ventures, Kleiner Perkins, and Peter Thiel to invest in his startup.









    Brian worked at Uber which gave him the needed experience and stability to help launch his own business. He founded Doppler to make secrets management easy for developers, which would increase a company’s security further.







    A significant challenge Brian and his team faced with their company was fundraising — almost all the investors they came across were a bad fit for their company. It led them to join Y Combinator, a startup accelerator that has helped launch over 3000 companies to date.

    • 24 min
    From Insurance to Crypto – Understanding The Trends in Law with Stephen Palley

    From Insurance to Crypto – Understanding The Trends in Law with Stephen Palley

    In this episode of CHATTINNCYBER, our host Marc Schein interviews Stephen Palley, partner at Anderson Kill. He chairs the Technology, Media and Distributed Systems group of the organization. Stephen is also a regular speaker and prolific writer on insurance, construction, and technology. He is the lead editor and contributing author to the ABA Forum on the Construction Industry's best-selling treatise on construction insurance.



    When in law school, Stephen had planned on becoming a technology lawyer. In a few years, Stephen had learned programming, found a new method for settling cases, and turned it into a software program! He then came across Bitcoin and Ethereum - two branches of crypto assets, and started working for crypto clients both on the front end regulatory compliance and handling disputes. Hence, interestingly, Stephen had set his career as a successful crypto lawyer at a firm best known for representing policy holders.



    Stephen speaks on regulatory crackdowns within crypto in the U.S. and China. The crackdown in China has impacted Bitcoin miners, and a lot of that impact has moved to the U.S. But Stephen firmly believes that a similar crackdown cannot happen in the U.S. Stephen also comments on recent guidance from the OFAC around Bitcoin and the facilitation of ransomware payments. He says the guidance puts victims in between a rock and a hard place.



    Stephen also gives guidance for millennials and Gen Z'ers who are fascinated by cryptocurrency. He says no matter what new thing is brought up, you need to remember that regulators and law enforcement judges will have access to it. Also, this is never quick money without effort - risks exist.



    Quotes



    "We already have a fairly well-developed regulatory framework and a way of understanding crypto. I think it is too deeply embedded in our business at this point for it to disappear."



    "What we do tell people is that when faced with a conundrum, we definitely want you to be in touch with law enforcement."



    "If you are expressing a favorable opinion publicly about a security and you have a stake or position, and if you are being paid to promote it, under federal law, you have to disclose that."



    "Just because you gave something a new name doesn't mean that regulators and law enforcement judges won't be able to deal with it and address it."



    "One of the reasons for the fascination with space is pure and simple: the promise of hope for quick profits with not much work. I'm sorry, but it comes from somewhere, there's always a risk, and somebody always pays."



    "What people don't know is what's happening behind the scenes. Most regulatory enforcement actions are confidential. You have no idea what the competitor is dealing with."



    Time-Stamps:



    [01:03] - Stephen reveals his story of getting into insurance law and crypto.



    [04:21] - Stephen comments on the regulatory crackdown in crypto in the U.S. and China.



    [08:30] - Guidance from OFAC on Bitcoins and facilitation of ransomware payment.



    [12:47] - Advice for the millennials and Gen Z who have a fascination with cryptocurrency.



    [14:33] – Risk management and insurance policies.



    Connect with Stephen:



    Email spalley@andersonkill.com



    LinkedIn  https://www.linkedin.com/in/stephendpalley



     



     

    • 16 min
    Cyber Risks and Their Threat to Finance With Omar Refaqat

    Cyber Risks and Their Threat to Finance With Omar Refaqat

    In this episode of CHATTINN CYBER, Marc Schein interviews Omar Refaqat, Senior Manager of Crowe's Cyber & Risk Consulting Practice. Omar has extensive experience working as a #Telecom and Networks Engineer at several successful companies before venturing into cybersecurity.

    Omar's chats about his engineering background which gave him a solid foundation to understand today's threats, technologies, and opportunities.

    Credit card fraud, email fraud, hybrid attacks, and sim spoofing are the different types of attacks increasing every passing day. Omar explains  simspoofing is the technique used to defeat MFA multi-factor authentication. In this type of #fraud, attackers redirect the messages or #data from your phone's sim to their phone so that the authentication code you're supposed to receive in your phone goes directly to them.

    Cryptocurrency and blockchain adoption has exploded.  We chat about why there's so much trust around the two technologies and why people are increasingly drawn to them.

    Highlights:



    “What we've seen over the last decade or so is really a convergence between that and cyber threats and cybercrime.”



    “It's interesting that it's really a push-pull effect. The banks, central and insurance and credit unions are moving in this direction, but the cloud providers are finally also waking up to the fact that they have this huge industry out there that really wasn't that excited about their products and services.”



    “And that's the basic technology underlying cryptos. Think of this as a distributed ledger where you don't need an intermediary to provide that trust. And it's really that everybody has access to it, you can see what everyone else is doing. And that's where the trust comes from.”



    “What we have seen from our perspective as an accounting firm, we have a risk practice, we have a consulting practice, we have a fairly large audit practice as well. All these things tying together security can no longer be treated as siloed service or applicant application.”



    “The way we work with our clients is, as we said, we start with really helping them from the advisory perspective, from a consulting perspective in doing risk assessments, understanding where the technology risks lie in helping them put together those in various programs to help build controls mitigate the risk to the extent that they want to and they need to, and then come in as retirement as an audit practice and make sure that, that ethical framework is is compliant and effective.”



    Time-Stamps:



    [01:17] - Omar shares his life’s story with us



    [03:44] - Omar shares about his time in the finance industry and the convergence of finance and cyber crimes



    [06:43] - What is sim spoofing?



    [15:15] - What technologies can financial services industries make use of?



    [25:38] - Why technology can no longer be seen as a siloed type of service



    Connect with Omar:



    LinkedIn: https://www.linkedin.com/in/omarrefaqat/



     



     



     



     



     



     



     



     



     



     



     

    • 28 min
    Brian Warszona’s journey through the cyber insurance industry

    Brian Warszona’s journey through the cyber insurance industry

    In this episode of CHATTINN CYBER, Marc Schein interviews Brian Warszona, UK Cyber Deputy Practice Leader at Marsh McLennan. Brian has over a decade's worth of experience in the cyber insurance space and has, over the years, shifted from the carrier side to the broker side of the industry.



    Brian started his career working with Marsh in Chicago for six years. He then worked as an underwriter at Chubb for two years. Later, Brian helped create the Chicago office for another brokerage firm, before landing his current job at Marsh McLennan.



    Brian discusses why shifting from the carrier side to the broker side gave him a whole different perspective on the industry. He could talk about risk in a way that would make it more efficient for both the company and the client. He was creating solutions and bespoke policies for the clients.



    Brian explains in detail the terms underwriter and syndicate and how they function in cyber insurance. He also distinguishes an underwriter's role at Lloyds and in the States and explains his preferences across the geographies. According to Brian, a syndicate has to report back into Lloyds about what they're doing from a financial stability side of things.



    We also discuss the impact of COVID in the industry. Brian shares that from a coverage standpoint, nothing has changed in the pandemic. But there have been revolutionary changes elsewhere. COVID has not only affected Lloyds but also changed the way clients deal with businesses. They don't have in-person underwriting meetings with syndicates and underwriters from the syndicates so frequently today.



    Towards the close of the episode, we talk about Brian's article on human-capital management regarding cyber risk and discuss the points to keep in mind while identifying suitable vendors.



    Highlights:



    “I think it's [the pandemic] allowing us to be a little bit more connected. In some cases, we probably have too many zoom meetings because of it. But on the flip side, we actually have a lot of communication going back and forth, whether it be through zoom teams, or instant messages or wherever it might be.”



    “From an analytic standpoint, to the corporate side of things, I really wanted to be in that room with the client talking about, here's what we can do here. And here's all the different solutions.”



    “I don't think we can go through a cyber conversation around the market if we didn't talk about ransomware.



    Time-Stamps:



    [00:58] - Brian discusses his journey in the cyber insurance industry



    [02:21] - Brian shares why he decided to shift from the carrier side to the broker side of the business



    [03:35] - Discussing the London insurance mentality



    [05:30] - Explaining the terms syndicate and underwriting



    [06:39] - The influence of the pandemic in revolutionizing work practices



    [08:54] - Talking new requirements in London based carriers



    [10:18] - Human Capital Management with regards to cyber risk



    [14:59] - Identifying suitable vendors



     



    Connect with Brian:



     



    LinkedIn: https://www.linkedin.com/in/brian-warszona-36891b12/?originalSubdomain=uk



     



     



     

    • 16 min
    Cyber Insurance And The Pivots In Underwriting – An interview With Meredith Schnur

    Cyber Insurance And The Pivots In Underwriting – An interview With Meredith Schnur

    In this episode of CHATTINN CYBER, Marc Schein interviews Meredith Schnur, Managing Director and US Cyber Brokerage Leader at Marsh USA, Inc. Meredith offers actionable insights.



    Meredith talks about progression in the cyber insurance space. Underwriting and brokerage today look a lot different from how it was in the past. In terms of negotiating arrangements with your clients, bigger always means better. Hence, you cannot survive without developing personal relationships with your clients.



    We also learn the challenges that the cyber insurance industry faces - the most substantial challenge being underwriting. It's not the strategies but the implementation of the strategy that is turning to be demanding. Also, the amount of information that clients have to supply to the underwriting community has undergone a dramatic shift. Hence, the challenge lies everywhere, from allocating resources, getting the right people to the table, answering their questions, understanding the cyber risk profile of an organization, and communicating that to the underwriting community.



    Meredith also talks about the common misconceptions around cyber insurance. Clients are still unaware of the amount of underwriting and required information that needs to be supplied at any time. Hence, price hikes are not as welcome to them as we might require.



    Speaking about where the future of cyber insurance is, Meredith, says it is undoubtedly in a sustainable and healthy market. For that to take place, stabilization is needed. In the next-generation training program organized by Marsh, building networks and coming out of your comfort zone is vital. Programs like the Track program and Cyber mentorship program help young minds receive adequate mentorship and support.



    To part with, Meredith provides advice and guidance to the next generation of insurance professionals who are hoping to get into this field. If risk management truly thrills you, then it is highly recommended that you choose this field!



    Quotes:



    "From the late 90s to mid-2000s, we called it Network Security and Privacy because that was what it was. We were protecting the network and the overall adoption of this term cyber."



    "If you can't truly understand the purpose of the policy and the intent of that policy, make sure we understand what the words really mean and what they say."



    "However, if you don't have the ladder, the second part of being able to truly understand the art of relationship building, technical nature, and how to actually work with all different shapes, sizes, and each deal specifically, you can't have it."



    "I think the largest challenge that we're having, even with our largest clients, is the very sharp pivot in underwriting."



    "Sustainable healthy market is what I foresee in five years time. A sharp pitch pivot is needed and required in order to do that, along with stabilization."



    "It is completely underestimated how important having mentors in the business is. It is completely underestimated how to build a network and what building a network can do for your career and for your comfort level. It actually teaches you how to be comfortable in the uncomfortable."



    Time-Stamps:



    [03:56] – While negotiating with clients, does bigger mean better in terms of leverage?



    [06:07] – Challenges in today's marketplace.



    [08:32] – Misconceptions clients have about cyber insurance.



    [13:02] – Next-gen training at Marsh to create future leaders in insurance.



    [16:14] – Advice to young folks hoping to get into cyber insurance.



    Connect with Meredith



    LinkedIn: https://www.linkedin.com/in/meredithschnur

Customer Reviews

4.8 out of 5
9 Ratings

9 Ratings

Grahda89 ,

Very informative and interesting podcast in the cyber space

I’ve been in the cyber security space for years. This podcasts is a breath of fresh air for cyber geeks. The typical podcast in this space is too technical, but the Host Marc makes takes a much more wholistic approach. Highly recommend.

StephieDash ,

A RISING STAR... KEEP YOUR EYE ON THIS ONE!

This podcast if for sure one to watch, a rising star in the making. The information is captivating, down to earth, and exemplifies everything a cyber security podcast should be! I love listening to the interviews with industry experts as they not only feature news and current events but they also bring a human aspect to the show as they provide some details about their career path and how they got to where they are today. Marc, is as sharp as they come and the potential for this podcast is endless. I am so excited to listen to all of the future episodes!

RomoMarsh ,

Cyber podcast

Great insight and content!!

Top Podcasts In Business

Ramsey Network
Andy Frisella #100to0
Tim Ferriss: Bestselling Author, Human Guinea Pig
BiggerPockets
Jocko DEFCOR Network
NPR