Socializing Security

Socializing Security
  • 5,0 (2)
  • Tecnologia
  • Semanal

A podcast that socializes security, compliance, and related topics to make them more approachable and understandable. Each week we’ll discuss a topic, usually with an expert in the area, with the goal of learning along with you. We’re here to socialize security!

  1. há 5 dias

    E110 - A Personal Approach to Security Awareness Training

    In this episode, cybersecurity expert Robert Siciliano shares insights on why traditional security awareness training often fails and how a human-centric approach can significantly improve security practices. He discusses the human blind spot, the Trinity of Vulnerability, and practical strategies to engage individuals in recognizing and managing risks effectively. Get more from Robert: https://www.linkedin.com/in/robertsiciliano https://protectnowllc.com https://www.youtube.com/user/stungundotcom Chapters 0:00 — Introduction to Security Awareness Training 4:12 — Understanding the Human Blind Spot 7:07 — The Trinity of Vulnerability: PDF 10:22 — The Dangers of Running on Autopilot 12:48 — Current State of Security Awareness Training 16:32 — Engaging Employees at a Personal Level 19:44 — Living in Paranoia 29:50 — Privacy vs. Security 32:53 — Reflections 36:02 — Outro

  2. 25 de ago.

    E109 - Coordinating Vendor Reviews

    In this episode of Socializing Security, Brian and Milou delve into the critical topic of third-party vendor management, focusing on the importance of vendor reviews, risk assessments, and the processes involved in onboarding and managing vendors. They discuss the need for a coordinated approach among various departments, the significance of standardized evaluation processes, and the unique challenges posed by smaller vendors and AI technologies. The conversation emphasizes the necessity of documentation, contractual obligations, and ongoing vendor management to ensure compliance and security. Chapters 00:00 Introduction to Third Party Vendor Management 01:24 Understanding Third Party Vendor Reviews 05:26 The Importance of Risk Assessment 08:31 Standardized Evaluation Processes 12:53 Navigating Smaller Vendors 16:57 Balancing Non-Negotiables and Flexibility  19:25 Documenting the Evaluation Process 22:06 Contractual Obligations and Risk Acceptance 24:05 Ongoing Vendor Management 26:04 Special Considerations for AI Vendors

  3. 18 de ago.

    E108 - Shadow IT

    In this episode, Brian and Milou explore the concept of shadow IT, its implications for organizations, and practical strategies to manage and mitigate its risks. They discuss how shadow IT arises, the security and compliance challenges it presents, and how to establish effective policies and controls. Chapters 00:00 Introduction to Shadow IT and Episode Overview 01:56 What is Shadow IT and Why Is It a Problem? 03:14 Emerging Shadow IT Vectors: AI and Browser Extensions 07:09 Risks of Shadow IT: Data Exposure and Security Threats 10:44 Compliance and Asset Management Risks of Shadow IT 15:08 How to Identify and Control Shadow IT 16:41 Enforcing Policies and Making Approval Processes Easy 18:15 Monitoring and Technical Controls to Manage Shadow IT 20:24 Summary and Final Recommendations

  4. 11 de ago.

    E107 - The Psychology Behind Cybersecurity Training

    In this conversation, Craig Taylor discusses the intersection of psychology and cybersecurity, emphasizing the importance of positive reinforcement in training programs. He critiques traditional punitive approaches to cyber awareness, advocating for innovative methods that engage employees and foster a culture of security. The discussion also touches on the ongoing debate between privacy and security, highlighting the need for continuous improvement in both areas. Chapters 00:00 Introduction to Cybersecurity and Psychology 02:52 The Role of Psychology in Cybersecurity Training 05:53 Positive Reinforcement vs. Punishment in Cyber Awareness 08:58 Innovative Approaches to Cybersecurity Training 11:54 Gamification and Engagement in Cybersecurity Training 14:59 Creating a Culture of Security Awareness 18:01 The Importance of Teamwork in Cybersecurity 20:50 Privacy vs. Security: The Ongoing Debate 23:54 Conclusion and Future Directions in Cybersecurity Training

  5. 4 de ago.

    E106 - How security and AI interact

    In this episode, Brian and Milou discuss the intersection of AI and security, exploring the innovations AI brings to the security space, the importance of defining permissions and guardrails, and the implications of AI in security tools. They also delve into the challenges of remediation and recovery processes with AI, the evolving threat landscape where attackers use AI, and the critical aspects of privacy and data minimization in AI applications. Chapters: 00:00 Introduction to AI and Security 08:58 Guardrails and Permissions in AI 13:54 AI in Security Tools 20:01 Remediation and Recovery with AI 24:05 AI as a Tool for Attackers 24:55 Privacy and Data Minimization in AI

  6. 28 de jul.

    E105 - Keeping Up with the Latest in Security and Compliance

    In this episode, Brian and Milou discuss their daily routines for staying updated on cybersecurity and compliance, sharing their favorite podcasts, newsletters, social media sources, and in-person events. They explore a wide range of resources to help security professionals stay informed about the latest threats, trends, and industry developments. Links https://cisoseries.com/category/podcast/cyber-security-headlines/ https://darknetdiaries.com/ https://techfieldday.com/podcast/ https://krebsonsecurity.com/ https://cloud.google.com/blog/topics/threat-intelligence https://www.cisa.gov/ https://www.nist.gov/ https://www.himss.org/ https://blackhat.com/ https://www.rsaconference.com/ Chapters 0:00 Intro 1:43 Podcasts 9:16 Blogs and Newsletters 12:03 Vendors and Partners 15:07 Social Media 18:36 News Sites 21:18 Government, Industry, and Independent Groups 24:14 In Person Events 27:04 Wrap-up and Outro

  7. 21 de jul.

    E104 - Working with MSSPs

    In this episode, Brian and Milou discuss the essentials of Managed Security Service Providers (MSSPs), including their role, selection criteria, contractual considerations, and ongoing management. They explore how MSSPs can enhance security maturity, ensure compliance, and the importance of clear communication and trust in these partnerships. Chapters 00:00 Introduction and Weather Chat 01:09 Defining MSSPs and MSPs 02:21 The importance of 24/7 security monitoring 03:43 Expertise and certifications for MSSPs 05:21 Compliance considerations and security standards 06:17 Enhancing security maturity with MSSPs 07:15 Communication and incident response 12:43 Contractual and legal considerations 15:20 Setting expectations and SLAs 20:30 Building a strong MSSP relationship 22:34 Managing the ongoing partnership 29:20 Reevaluating and offboarding MSSPs 30:20 Final thoughts and advice

  8. 14 de jul.

    E103 - Structuring Effective Tabletop Exercises

    In this episode, Brian and Milou delve into the intricacies of conducting effective tabletop exercises for cybersecurity preparedness. They discuss how to structure these simulations, the purpose behind them, who should be involved, and how to ensure continuous improvement. The conversation offers practical insights for organizations aiming to enhance their incident response capabilities. Chapters 00:00 Introduction and episode overview 01:52 What is a tabletop exercise? 04:23 Defining the purpose and scope of the exercise 07:08 Frequency and timing best practices 09:11 Involving stakeholders and team roles 14:16 Post-exercise review and lessons learned 17:02 Realism and scenario authenticity 20:16 Levels of involvement for different roles 22:31 Compliance considerations and documentation 26:58 Long-term improvement and tracking 29:10 Final thoughts and best practices

Ver tudo (100)

Classificações e avaliações

5
de 5
2 avaliações

Sobre

A podcast that socializes security, compliance, and related topics to make them more approachable and understandable. Each week we’ll discuss a topic, usually with an expert in the area, with the goal of learning along with you. We’re here to socialize security!

Informações

  • Criado por
    Socializing Security
  • Anos de atividade
    2024 - 2026
  • Episódios
    100
  • Classificação
    Livre
  • Copyright
    © Copyright 2024 All rights reserved.
  • Site do podcast
    Socializing Security