Cybersecurity Where You Are (video)

Latest Episodes:

Episode 131: It Takes a Village to 'Reasonably' Secure SoCal Apr 16, 2025

Show notes

In episode 131 of Cybersecurity Where You Are, Tony Sager is joined by Stan Stahl, PhD, Founder and President of SecureTheVillage. Together, they discuss how SecureTheVillage, a nonprofit and inaugural Alan Paller Laureate Program awardee, is using a collaboration-driven approach to enhance reasonable cybersecurity awareness and practices within Southern California (SoCal). Here are some highlights from our episode:

01:07. An introduction to Stan and how he came to champion small business cybersecurity
04:28. How SecureTheVillage emerged to support small businesses' cybersecurity needs using the power of community
07:15. The need for nonprofits to play a strong role in addressing cybersecurity challenges
12:01. How Stan drew inspiration from Alan Paller and support from the Alan Paller Laureate Program to advance SecureTheVillage's work
17:57. Reasonable cybersecurity as part of SecureTheVillage's foundation story
22.13. Aligning cybersecurity needs to the goals of public policy
25:33. What's next for SecureTheVillage
29:52. Closing thoughts on why a "village" model for cybersecurity is so important

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 130: The Story and Future of CIS Thought Leadership Apr 09, 2025

Show notes

In episode 130 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by John Gilligan, President and Chief Executive Officer (CEO) of the Center for Internet Security® (CIS®). Set against the backdrop of the 2025 CIS Annual Full Staff Meeting, they celebrate 25 years of CIS, including the "serendipity" by which the company became a global cybersecurity thought leader. They also discuss how this thought leadership may evolve over the next 25 years. Here are some highlights from our episode:

01:30. How CIS started along with how John and Tony initially got involved
07:12. How CIS thought leadership changed with the absorption of the "SANS Top 20," the precursor of the CIS Critical Security Controls
11:04. The "serendipity" through which CIS grew and formalized its sales, funding, support, and other operations in the 2010s
15:18. How mission and culture advanced CIS to its 25th anniversary in 2025
22:52. What the future might hold for "CIS 2.0"

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 129: Embedding Cybersecurity in Project Management Apr 02, 2025

Show notes

In episode 129 of Cybersecurity Where You Are, Sean Atkinson discusses best practices for embedding cybersecurity in project management. Here are some highlights from our episode:

01:34. Elements for connecting the dots between cybersecurity risk assessment and project risk assessment
03:06. How our conceptualization of a project changes under a zero trust implementation
04:02. What security may look like in a Waterfall vs. Agile approach to project management
06:26. The importance of resources and stakeholders in managing any project
08:34. Scope creep and other challenges of embedding cybersecurity in project management
15:45. How continuous monitoring and other best practices can help us to overcome these hurdles
25:30. How cybersecurity can inform projects involving generative artificial intelligence

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 128: How Cryptocurrency Is Used for Financial Fraud Mar 26, 2025

Show notes

In episode 128 of Cybersecurity Where You Are, Sean Atkinson is joined by Joshua Palsgraf, Senior Cyber Threat Intelligence (CTI) Analyst at the Center for Internet Security® (CIS®). Together, they examine how cyber threat actors use cryptocurrency for financial fraud and how professionals like Joshua track this illicit activity. Here are some highlights from our episode:

01:35. What a data-driven approach to CTI looks like
02:47. What makes cryptocurrency useful in the digital economy, including for financial fraud
06:50. How cryptocurrency-related financial crime compares to traditional forms of fraud
13:20. Examples of cryptocurrency theft and its use in facilitating ransomware attacks
27:24. Tooling and forensic methods that are being used to track crypto fraud/scams
31:40. The need to build awareness around financial crime in the digital economy

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 127: Visible Ops as a Cybersecurity Foundation Mar 19, 2025

Show notes

In episode 127 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Scott Alldridge, President and CEO of IP Services and the IT Process Institute. Together, they use Scott's book, "Visible Ops Cybersecurity: Enhancing Your Cybersecurity Posture with Practical Guidance," to discuss how visible IT operations (Visible Ops) provide a foundation for cybersecurity. Here are some highlights from our episode:

01:31. How Visible Ops reflect an appreciation for the original config change release processes
10:19. The limitations of treating security as a silo and "new toys" as security cure-alls
15:23. How to embrace a dynamic view of visibility and configuration management
24:50. The importance of leadership buy-in when shifting left to a security-first mindset
27:10. What an effective change configuration management system looks like and how it changes people's view of IT
30:20. Parting thoughts and where to find more of Scott's work

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 126: A Day in the Life of a CTI Analyst Mar 12, 2025

Show notes

In episode 126 of Cybersecurity Where You Are, Sean Atkinson is joined by Casey Cannon, Lead Cyber Threat Intelligence (CTI) Analyst at the Center for Internet Security® (CIS®). Together, they review what a regular day looks like for a CTI analyst. Here are some highlights from our episode:

01:46. How a service-oriented mindset factors into a CTI career
03:55. What task prioritization looks like at the beginning of a CTI analyst's day
06:50. How bedrock CTI principles and threat actor matrices help to counter information overload and filter out noise
10:45. The value of an "eclectic" set of intelligence sources
25:50. How the CIS CTI team works with the 24x7x365 CIS Security Operations Center (SOC), the Cyber Incident Response Team (CIRT), and others
31:27. Advice for getting into CTI as a career path

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 125: How Leadership Principles Influence CIS Culture Mar 05, 2025

Show notes

In episode 125 of Cybersecurity Where You Are, Sean Atkinson is joined by Waldo Perez, Human Resources Support Specialist at the Center for Internet Security® (CIS®); and Penny Davis, Sr. Manager of Leadership Development at CIS. Together, they use the CIS Leadership Principles and other examples from CIS to understand how leadership influences and nurtures the organization's workplace culture.

Here are some highlights from our episode:

02:00. The human aspect in defining workplace culture
03:55. How leadership principles directly shape company culture
05:40. Key indicators of a strong company culture and one that can improve
16:31. Examples where company culture has made an impact on a CIS employee's experience
21:59. The importance of feedback in supporting positive cultural change
25:41. How leadership training programs help employees to grow

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 124: The Many Layers of a Malware Takedown Operation Feb 26, 2025

Show notes

In episode 124 of Cybersecurity Where You Are, Sean Atkinson is joined by Timothy Davis, Lead Cyber Threat Intelligence (CTI) Analyst at the Center for Internet Security® (CIS®). Together, they explore the many layers of a malware takedown operation.

Here are some highlights from our episode:

01:58. A high-level overview of what a malware takedown might involve
04:11. Some of the key players who help to disrupt known malware infrastructure
07:35. Which operational functionalities make malware infrastructure and tactics difficult to dismantle
10:56. Jurisdictional and legal challenges of a takedown operation
14:53. What goes into identifying malware networks and infected end-user devices
20:47. The technical strategies used for disrupting malware
24:13. How cyber threat actors respond differently to a takedown effort

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 123: An Operational Playbook for Security Impact Feb 19, 2025

Show notes

In episode 123 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Gina Chapman, Chief Operating Officer (COO) at the Center for Internet Security® (CIS®). Together, they use examples from CIS to identify elements of an operational playbook for making an impact in the cybersecurity industry.

Here are some highlights from our episode:

01:21. Business development and organizational change over the course of 12 years at CIS
13:49. Change management and communication as means for preserving company culture
23:08. The importance of context in developing an operational playbook for a business
32:49. The use of operational understanding to create effective cybersecurity business models

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 122: DeepSeek AI Security and Utility Considerations Feb 12, 2025

Show notes

In episode 122 of Cybersecurity Where You Are, Sean Atkinson is joined by Rian Davis, Associate Hybrid Threat Intelligence Analyst at the Center for Internet Security® (CIS®); and Timothy Davis, Lead Cyber Threat Intelligence (CTI) Analyst at CIS. Together, they discuss security and utility considerations surrounding the DeepSeek AI model.

Here are some highlights from our episode:

01:31. What enterprises and individuals can do before they start deploying foreign-developed, open-source large language models (LLMs)
08:48. How DeepSeek fits into evolving adversarial tactics and techniques involving AI
25:15. The impact on threat assessments and where we see controls built around AI
31:45. Parting thoughts on approaching newer technologies like DeepSeek

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cybersecurity Where You Are (video)

Related Podcasts

Links

Stay Connected