Security Sandbox

Latest Episodes:

Honest Security - Discussing the Learnings, Mistakes and Inspiration that Inspired Relativity's Security Program Dec 21, 2022

Show notes

In today’s episode, our sandbox goes back to where it all started – and where it will end – for an honest conversation on how we built the security program at Relativity: what went right, the mistakes we made, and – maybe most importantly – the lessons we learned along the way. Joining me for this talk are two long-time friends and colleagues – Relativity’s Senior Director of Engineering, Matt Spurr, and Cyber Security Architect and recurring guest, Darian Lewis. So, put on your closing time tunes, and let’s dive in.

A How-To Guide on Perfecting Your Pentesting Program Oct 28, 2022

Show notes

In today’s episode, the sandbox heads across the globe for a special takeover episode by Relativity's Marcin Święty and Bart Czyż, for a dialed in conversation with offensive cybersecurity and pentester-extraordinare Julio Cesar Fort, on the intricacies of modern-day pentesting and how you can elevate the everyday skills of your team members to make them excel in offensive cybersecurity techniques.

Moving Faster - Securely. Why Your Org Should Add Security to your DevOps Program Sep 28, 2022

Show notes

In today’s episode, our sandbox heads to the deployment pipeline for a conversation on the who/what/when/and why of a DevSecOps program and how it adds value to your business. And your main questions- – how you can encourage buy-in and adoption. Joining me today are Marcin Swiety, Relativity’s Senior Director of Global Security and IT, and Raphael Theberge - Director of Security Integrations. So, grab your DORA metrics, your source controls, and staging environments, and let’s dive in.

P/P/T, Kangaroos, and New Hire Slides: What to Expect and How to Prepare for the Role of CISO Sep 01, 2022

Show notes

In today’s episode, our sandbox heads to new hire orientation for a discussion on what to expect as a new CISO and how you can properly structure your people/process/tech to find both short and long term success at your new org. Joining me is Tyler Young, Relativity alum and current BigID CISO, and Dominik Birk, PWC's Deputy CISO of EMEA. So, dust off your welcome materials, ice breakers, and org charts, and let's dive in.

Perfecting the Automation Equation To Optimize The People In Your Security Program Jul 29, 2022

Show notes

In today’s episode, our sandbox heads to the scripts for a simplified conversation with Louis Yeck, QLIK's CISO, and Hector Pena, Relativity's Senior Manager of Cybersecurity, on the delicate art of blending automation and analytics with the human expertise in your security program. Implemented correctly, your employees can focus on the hard challenges that level up your security program. Done incorrectly and it'll only lead to creating more problems and confusion. So, how do you leverage your people and process to best automate your tech? Where does human governance and oversight come into the equation? And is there ever an endpoint in the automation and analytics game? So, gather up your Pythons, your Javas, your C#s, and let's dive in.

Whose Title Is It Anyway? A discussion on the role of Info Security in the C-Suite and how it impacts your tech and process Jul 01, 2022

Show notes

In today’s episode, our sandbox heads to the board room for a white-collar discussion with Ricardo Lafosse, Chief Information Security Officer at Kraft Heinz, and Andrew Watts, Relativity’s Chief Customer Officer – and former CIO – on the current state of the Information Security role in the C-Suite. Should it be CIO, CSO, CISO, a combination of the three? Nothing at all or something in between? And how the current perception or narrative around your specific title impacts or influences the tech and process structure and framework you put in place for your department. So, grab your executive briefs, bust out your corporate buzzwords, and let’s dive in.

Data Privacy Is the New Data Security: Putting People at the Center of Everything May 26, 2022

Show notes

Organizations today have a solid grasp of their data security posture, but do they have a solid understanding of what goes into an effective and globally relevant data privacy program? Can they meet the demands and regulations of today’s multi-national business world? In this special recording of Security Sandbox, live from Relativity Fest London, Amanda Fennell chats with data privacy and security experts in EMEA on how to build a global-first data privacy program that fits the specific needs of your employee base, what to watch out for, and how you can maintain program flexibility in an ever-changing world. So, grab your cookies, and let’s dive in.

Navigating New-Age Crisis Situations with a People-First Lens Apr 28, 2022

Show notes

When good tech meets well-trained, empowered employees, your business is more secure. This season, we’re exploring ways to elevate the strongest link in your security chain – people – through creative use of technology, process, and training. In today’s episode, our sandbox heads to the pressure chamber for a riveting conversation with Nicolas Reys, partner at Control Risks, who heads up their global cyber and online threat intelligence practice, and Relativity’s favorite security architect and recurring guest, Darian Lewis, on how to best navigate all of the cyber crisis craziness going on in our world. How does threat intel play a pivotal role in your crisis program? How can better usage of tech elevate the people and processes and in your current crisis management program? What new threats should your team prioritize? So, dust off your playbook, grab a Red Bull, and let’s dive in.

Building Trust in a Zero Trust World Mar 17, 2022

Show notes

When good tech meets well-trained, empowered employees, your business is more secure. This season, we’re exploring ways to elevate the strongest link in your security chain–people–through creative use of technology, process, and training. In today’s episode, our sandbox welcomes the return of Zscaler's director of solutions architecture, Thomas Quinlan, and Relativity’s global director of security and IT, Marcin Święty, for a spirited conversation on how to build employee trust in your security program at any time and from anywhere. How do you roll out an effective and empathetic zero trust program to your company that resonates with your global employee base? What are the common things security teams get wrong when implementing zero trust? What comes next? So, pull up a seat, grab a cup of caffeine, and, as Marcin might say, "don’t have the Płyta się zacięła" (the record get stuck).

To learn more about security at Relativity, visit our blog.

From Aware to Care: How to Get Your Employees Invested in Protecting Your Security Fortress Feb 10, 2022

Show notes

In the first episode of Season 2 of Security Sandbox, host Amanda Fennell welcomes cybersecurity evangelist, author, and host of the 8th Layer Insights podcast, Perry Carpenter. They have a nuanced conversation about how to craft a new-age security program that works better for today’s businesses and employees operating in different cultures, regions, and viewpoints. How do you bridge the psychological gap from "aware" to "care"? How do you craft trainings that are culturally relevant, empathetic, and inclusive for your employees? How do you move the needle with your awareness program internally and with key stakeholders? What is the biggest mistake first-time administrators make in creating their security program? All that and more in the first episode of the new season, which focuses on strengthening the strongest link in your security chain – people – through better tech, process, and training.

To learn more about security at Relativity, visit our blog.