Cybersecurity Where You Are (video)

Latest Episodes:

Episode 91: What You Need to Know about CIS Controls v8.1 Jul 10, 2024

Show notes

In episode 91 of Cybersecurity Where You Are, Sean Atkinson is joined by Charity Otwell, Director of the CIS Critical Security Controls® (CIS Controls®) at the Center for Internet Security® (CIS®).

Together, they discuss what you need to know about the release of CIS Controls v8.1.

Here are some highlights from our episode:

01:17. What you can expect to see in version 8.1 of the Controls
06:19. How CIS Controls v8.1 helps you to integrate other governance structures
09:23. How version 8.0 and version 8.1 of the Controls differ
14:19. What goes into creating a new version of the Controls
21:06. Which resources you can use to guide your implementation plan
26:39. A sneak peek into the development of version 9.0

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 90: Migrating to the Cloud with Control Continuity Jul 03, 2024

Show notes

In episode 90 of Cybersecurity Where You Are, co-hosts Sean Atkinson and Tony Sager are joined by the following guests:

Charity Otwell, Director of the CIS Critical Security Controls® (CIS Controls®) at the Center for Internet Security® (CIS®)
Mia LaVada, Product Manager of CIS Benchmarks and Cloud at CIS
Don Freeley, VP of IT Services at CIS

Together, they discuss how you can use CIS resources to ensure control continuity when migrating to the cloud.

Here are some highlights from our episode:

01:35. The biggest drivers for why organizations are moving to the cloud
02:42. Foundational factors to consider as part of your cloud migration
07:24. Resources from CIS designed to help you in your transition to the cloud
11:00. Common challenges of migrating to the cloud
14:37. The importance of three CIS Controls to your cloud security program
18:35. The value of partnerships and community in driving cloud security improvements
19:32. How you can use the CIS Foundations Benchmarks to get started in the cloud
23:06. Inside the human and process side of moving to the cloud

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 89: How Threat Actors Are Using GenAI as an Enabler Jun 26, 2024

Show notes

In episode 89 of Cybersecurity Where You Are, co-host Sean Atkinson is joined by the following guests:

Rian Davis, Elections Cyber Threat Intelligence Intern at the Center for Internet Security® (CIS®)

Timothy Davis, Sr. Elections Cyber Threat Intelligence Analyst at CIS

Together, they discuss how cyber threat actors (CTAs) are using generative artificial intelligence (GenAI) as an enabler of their attacks.

Here are some highlights from our episode:

01:04. Why it's important to raise awareness of how CTAs are using GenAI
01:59. How the CIS Cyber Threat Intelligence (CTI) team is seeing generative AI in CTAs' attack methodology
03:50. The types of attacks that are using this technology and how the frequency of those attacks is changing
05:46. Some notable attacks that have used GenAI in their methodology
16:10. The ways in which CTAs are incorporating generative AI into social engineering
24:17. What defenders can do in response to CTAs' use of GenAI

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 88: The Evolution of the Role of a CISO Jun 19, 2024

Show notes

In episode 88 of Cybersecurity Where You Are, co-host Sean Atkinson discusses the evolving role of a chief information security officer (CISO).

Here are some highlights from our episode:

02:47. Why communication is a core competency for CISOs
08:35. How to take a balanced approach when evaluating an organization's implementation of artificial intelligence (AI) and machine learning (ML)
11:47. The role a CISO plays in integrating privacy requirements into the organization
15:35. Thoughts on how you can start preparing for or moving into a CISO position
19:12. A future outlook of the CISO role
26:40. Average longevity of CISOs in their roles and how this affects a security posture

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 87: Marking 11 Years as a Verizon DBIR Contributor Jun 05, 2024

Show notes

In episode 87 of Cybersecurity Where You Are, co-host Tony Sager is joined by the following guests:

Charity Otwell, Director of the CIS Critical Security Controls® (CIS Controls®) at the Center for Internet Security® (CIS®)
Philippe Langlois, Senior Principal, Security Risk Management and Author of the Verizon Data Breach Investigations Report (DBIR)
Theodore "TJ" Sayers, Director of Intelligence & Incident Response at CIS

Together, they celebrate 11 years of CIS and Verizon working together to contextualize the threat activity security teams are seeing and to help teams use the Controls as an improvement framework.

Here are some highlights from our episode:

02:00. How the Multi-State and Elections Infrastructure Information Sharing and Analysis Centers (MS-ISAC® and EI-ISAC®) contribute anonymized data to the Verizon DBIR
07.27. The two types of data that Verizon uses as input for its report
13:50. The ways CIS uses the content of Verizon's DBIR to help people embrace programs of security improvement
24:48. A glimpse at what goes into producing the DBIR
28.33. The importance of leadership in guiding team dynamics and fun
32.07. Reception of the 2024 DBIR and exploration of what's next for the Verizon DBIR team

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 86 Evangelizing CIS's Message at RSAC 2024 May 29, 2024

Show notes

In episode 86 of Cybersecurity Where You Are, co-host Sean Atkinson is live once again from Booth 4319 at RSA Conference (RSAC) 2024.

00:57. Sean chats with Mat Everman, Information Security Operations Manager, about his talk, "Shades of Purple: Getting Started and Making Purple Teaming Possible." They discuss some of the questions Mat received following his talk and how they can put purple teaming into practice at the Center for Internet Security® (CIS®).

Sean asks passersby what they're looking to get out of RSAC 2024 and what stood out to them at the conference.

13:56. José Mena, Founder of Digital Twin Networks
20:34. Jonathan Kern, CEO of Castile Defense
25:42. Ken Klestinec, Regional Sales Manager at Akamai

Finally, Sean talks to fellow team members about CIS's objective for RSAC 2024.

18:10. Aaron Perkins, Director of Communications
23:25. Nick Rust, Director of Reseller & Channel Partners
27:04. Jeff Sparks, CIS Services Sr. Account Executive
28:08. Mia LaVada, Product Manager of CIS Benchmarks and Cloud
30:01. Mishal Makshood, Sr. Cloud Security Account Executive

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 85: Reenergizing Collective Action at RSAC 2024 May 22, 2024

Show notes

In episode 85 of Cybersecurity Where You Are, co-hosts Sean Atkinson and Tony Sager are live from Booth 4319 at RSA Conference (RSAC) 2024. Together, they discuss how events like RSAC 2024 reenergize collective action in the cybersecurity industry. They begin by noting how resources such as the CIS Community Defense Model (CDM) bring more data and transparency to security recommendations for the cybersecurity industry. They then look back on some of Tony's presentations at prior years of RSAC before looking at the interest surrounding supply chain security, zero trust, and artificial intelligence (AI). To address these developments, organizations must create a foundation for defense and scale rapid improvements, needs which Tony and Sean see as opportunities for collective action in the industry.

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 84: Why We Need to Define Reasonable Cybersecurity May 15, 2024

Show notes

In episode 84 of Cybersecurity Where You Are, co-host Tony Sager is joined by Brian de Vallance, Senior Advisor at Cambridge Global Advisors; and Phyllis Lee, VP of Security Best Practices (SBP) Content Development at the Center for Internet Security® (CIS®). Together, they discuss the notion of reasonable cybersecurity. They begin by providing some background about reasonableness in cybersecurity and identifying the problem we need to solve — namely, the lack of a definition of reasonableness around which organizations can build their cybersecurity program. They then discuss how a definition for reasonable cybersecurity needs to include security best practices that are doable. They conclude by exploring how CIS's work around this topic may influence its content development going forward.

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 83: Why Meeting in Person Matters to CIS Employees May 01, 2024

Show notes

In episode 83 of Cybersecurity Where You Are, co-host Sean Atkinson is joined by nearly 20 employees at the Center for Internet Security® (CIS®). Together, they discuss the value of meeting in person to CIS workplace culture. With the company's 2024 Annual Full Staff Meeting in Orlando, FL, as their backdrop, they explore how personal relationships create a foundation for building effective teams, more agile workflows, and a sustainable sense of engagement and motivation at CIS. Along the way, they reflect on how much the company has changed since before the pandemic.

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 82: How CIS Leadership Values Team Building Events Apr 24, 2024

Show notes

In episode 82 of Cybersecurity Where You Are, co-hosts Sean Atkinson and Tony Sager are joined by John Gilligan, President and CEO at the Center for Internet Security® (CIS®); and Gina Chapman, Chief Operating Officer at CIS. Together, they discuss the importance of in-person team building events. They use the pandemic as a frame to understand how events such as the 2024 Annual Full Staff Meeting preserve and cultivate CIS's workplace culture. They also look to other ongoing initiatives at the company, such as CIS Cares and the IDEA Alliance, as efforts to sustain employee engagement both in person and virtually.

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cybersecurity Where You Are (video)

Related Podcasts

Links

Stay Connected