62 episodes

CyberSecurity Sense is LBMC Information Security's podcast that provides insight and updates on such information security topics as: IPS Monitoring and Managed IDS Services, Security Information Event Management, Digital Forensic Analysis, Electronic Discovery and Litigation Support, Computer Security Incident Response, Penetration Testing, Risk Assessments, Security Program Planning, Web Application Security Assessments, ACAB LADMF Certification Assessments, CMS Information Security, FedRAMP, FISMA Compliance, HIPAA Compliance, HITRUST CSF Certifications, NIST 800-171 Certifications, PCI Data Security Standards, SOC Reporting and SOX Compliance.

Cybersecurity Sense LBMC Information Security

    • Technology
    • 4.8 • 12 Ratings

CyberSecurity Sense is LBMC Information Security's podcast that provides insight and updates on such information security topics as: IPS Monitoring and Managed IDS Services, Security Information Event Management, Digital Forensic Analysis, Electronic Discovery and Litigation Support, Computer Security Incident Response, Penetration Testing, Risk Assessments, Security Program Planning, Web Application Security Assessments, ACAB LADMF Certification Assessments, CMS Information Security, FedRAMP, FISMA Compliance, HIPAA Compliance, HITRUST CSF Certifications, NIST 800-171 Certifications, PCI Data Security Standards, SOC Reporting and SOX Compliance.

    PCI Monthly Update: October - New SAQ Review, Focused Look at Requirement 7, and Expert QSA Insights

    PCI Monthly Update: October - New SAQ Review, Focused Look at Requirement 7, and Expert QSA Insights

    Dive into the latest in the PCI landscape with our October update. We kick off with a news segment spotlighting the new SAQ SPOC (Software PIN Entry on COTS) which includes portions of PCI DSS Requirements 3, 8, 9, and 12.
    Transitioning to Requirement 7, we discuss restricting access to system components and cardholder data based on business necessity, delving into sub-requirements 7.1 to 7.3, and discussing the principles of 'need to know' and 'least privileges.'
    Our QSA Q&A segment addresses the applicability of Requirement 7 to customer/cardholder accounts, clarifying the scope and the specific entities impacted by this requirement.
    Join us for a comprehensive exploration of this month's PCI developments, an in-depth look at Requirement 7, and expert insights in our QSA dialogue, paving your way towards enhanced compliance and security.

    • 29 min
    PCI Monthly Update: September Highlights & Requirement 6 Deep Dive

    PCI Monthly Update: September Highlights & Requirement 6 Deep Dive

    Catch the latest news in our September "PCI Monthly Update" from Tuesday, September 26, 2023. We kick things off with key insights from the recent PCI Community Meeting. Next, we dive into Requirement 6, discussing the essence of secure software development, from processes to security vulnerabilities, web application protection, and change management.
    Our QSA Q&A segment addresses a vital question: What documentation should you expect from PCI DSS compliant service providers?
    Join us for a succinct roundup of September's essential PCI updates and insights. Perfect for both newcomers and seasoned PCI professionals.

    • 31 min
    PCI Monthly Update: August Highlights & Requirement 5 Breakdown

    PCI Monthly Update: August Highlights & Requirement 5 Breakdown

    Tune in to the August edition of our PCI Monthly Update. We kick off with a sneak peek into the upcoming PCI North America Community Meeting in Portland and introduce the newly launched PCI Community Job Board—a dedicated platform for security talent and job postings in the payment industry.
    Next, we delve into Requirement 5, shedding light on anti-malware solutions. We explore the criteria for system components which do not require anti-malware, delve into the specifics of anti-malware implementation, and highlight the periodic evaluations required for maintaining optimal security.
    Wrapping up, our QSA Q&A segment addresses a common query: the rotation of QSAs in organizations.
    Whether you're a PCI pro or new to the domain, this episode offers a concise overview of August's essential PCI topics. Join us for these insights and more!

    • 24 min
    PCI Monthly Update: July Insights & Innovations

    PCI Monthly Update: July Insights & Innovations

    Dive into the latest PCI news in our July PCI Update. This episode covers key PCI developments, an in-depth exploration of Requirement 4, and a helpful QSA Q&A.
    We kick off this episode by previewing the upcoming PCI Community Meeting in Portland and discuss our hosts' presentation on "Generative AI: Your New Secret Weapon or an Insider Threat?" We also talk about the INFI worksheet and the importance of Continuous Compliance.
    In the Requirement 4 segment, we focus on strong cryptography, robust security protocols, and the need to secure PAN during transmission over public networks. We highlight industry best practices for wireless networks transmitting PAN and the necessity to secure PAN when using end-user messaging technologies.
    A QSA Q&A session wraps up our episode and tackles the issue of responsibility for PCI compliance when using third-party payment services.
    Whether you're an industry veteran or new to PCI, this episode offers a concise, informative roundup of the month's most significant PCI topics.

    • 24 min
    Worried about Ransomware?

    Worried about Ransomware?

    Do you know the average payout organizations are hit with for every attack? William Parks and Bill Dean discuss a service dedicated to helping your organization (big or small) withstand a ransomware attack. Bill and his team are ready to help you and your organization obtain peace of mind when it comes to these advanced threats. 
    Questions for Bill?
    Find him here: bill.dean@lbmc.com

    • 15 min
    Advance Guard Could Save You

    Advance Guard Could Save You

    LBMC Shareholder Bill Dean and William Parks spend today’s episode discussing Advance Guard, a new service offering from LBMC's Security Technical Team. Learn how Advance Guard may help protect your organization's most valuable assets, save time on compliance audits, and give peace of mind about your current security stance.
     Want to see Bill’s “Prescription”? Check out the link below:
    https://www.lbmc.com/wp-content/uploads/2023/01/AdvanceGuard-Sample-Schedule.pdf
    Questions for Bill?
    Find him here: bill.dean@lbmc.com

    • 17 min

Customer Reviews

4.8 out of 5
12 Ratings

12 Ratings

Top Podcasts In Technology

Jason Calacanis
The New York Times
Lex Fridman
Ben Gilbert and David Rosenthal
NPR
Boston Consulting Group BCG

You Might Also Like