Software Engineering Institute (SEI) Podcast Series

Latest Episodes:

An Experience-Based Maturity Model for Software Security Mar 31, 2009

Show notes

Observed practice, represented as a maturity model, can serve as a basis for developing more secure software. Listen on Apple Podcasts.

Mainstreaming Secure Coding Practices Mar 17, 2009

Show notes

Requiring secure coding practices when building or buying software can dramatically reduce vulnerabilities. Related Course Secure Coding in C and C++ Listen on Apple Podcasts.

Security: A Key Enabler of Business Innovation Mar 03, 2009

Show notes

Making security strategic to business innovation involves seven strategies and calculating risk-reward based on risk appetite. Related Courses Assessing Information Security Risk Using the OCTAVE Approach Introduction to the CERT Resiliency Engineering Framework Listen on Apple Podcasts.

Better Incident Response Through Scenario Based Training Feb 17, 2009

Show notes

Teams are better prepared to respond to incidents if realistic, hands-on training is part of their normal routine. Related Courses Advanced Incident Handling Advanced Information Security for Technical Staff Listen on Apple Podcasts.

An Alternative to Risk Management for Information and Software Security Feb 03, 2009

Show notes

Standard, compliance, and process are more effective than risk management for ensuring an adequate level of information and software security. Related Course Assessing Information Security Risk Using the OCTAVE Approach Listen on Apple Podcasts.

Tackling Tough Challenges: Insights from CERT's Director Rich Pethia Jan 20, 2009

Show notes

Rich Pethia reflects on CERT's 20-year history and discusses how he is positioning the program to tackle future IT and security challenges. Listen on Apple Podcasts.

Climate Change: Implications for Information Technology and Security Dec 09, 2008

Show notes

Climate change requires new strategies for dealing with traditional IT and information security risks. Listen on Apple Podcasts.

Using High Fidelity, Online Training to Stay Sharp Nov 25, 2008

Show notes

Virtual training environments can deliver high quality content to security professionals on-demand, anywhere, anytime. Related Courses Managing Enterprise Information Security Information Security for Technical Staff Listen on Apple Podcasts.

Integrating Security Incident Response and e-Discovery Nov 11, 2008

Show notes

Responding to an e-discovery request involves many of the same steps and roles as responding to a security incident. Related Course Managing Computer Security Incident Response Teams Listen on Apple Podcasts.

Concrete Steps for Implementing an Information Security Program Oct 28, 2008

Show notes

A sustainable security program is based on business-aligned strategy, policy, awareness, implementation, monitoring, and remediation. Related Course Managing Enterprise Information Security: A Practical Approach for Achieving Defense-in-Depth Listen on Apple Podcasts.