Identity Management as a Foundation for Future-Proofing your Security – John Masserini – ESW #228
The perimeter is dissolving. Employees are using any device from any location for work. With limited visibility from our traditional networking and endpoint security controls, how do we protect our data? John Masserini, Global Chief Information Security Officer at Millicom (Tigo) Telecommunications, joins us to discuss the fundamentals of an identity strategy, including identity and access management, single sign-on, multi-factor authentication, and privileged access.
A 25-year veteran of providing information and corporate security services to multinational Fortune-1000 companies. An industry-recognized leader whose expertise across multiple business verticals provides for a unique approach to delivering an information risk program that drives business-focused solutions to today’s global Information Security & Compliance challenges. An experienced leader who not only specializes in reinvigorating and realigning existing teams but also building new information security programs to meet today’s critical business needs.
John is the author of the award-winning Chronicles of a CISO blog, where he shares insight and recommendations based on his decades of experience in the security industry.
As the Global Chief Information Security Officer of Millicom Telecom International, John is responsible for all aspects of the global information security program, including Security Operations, Engineering, Architecture, Vulnerability and Risk management, and Business Continuity Planning.
Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!
Security Weekly is more than happy to announce that we will be at InfoSec World 2021 IN PERSON October 25th-27th, 2021! This year, our annual partnership with InfoSec World is extra special, as we are both business units under the CyberRisk Alliance brand! What does that mean for Security Weekly listeners & InfoSec World attendees? You will get to see and hear from many of the Security Weekly team at the event AND you will save 20% off on your world pass! Visit https://securityweekly.com/isw2021 to register using our discount code!
All the News From RSA Conference 2021 – ESW #228
The Enterprise Security Weekly crew summarizes all the news from RSA Conference 2021, including product announcement, acquisitions, funding, and more!
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
Adrian Sanabria
Matt Alderman
- Qualys CyberSecurity Asset Management brings security teams the automation they need – Help Net Security
- ThycoticCentrify Enhances DevOps Secrets Vault
- Arctic Wolf Launches Security Awareness Training Solution – MSSP Alert
- Introducing JumpCloud Protect – Free Mobile Multi-Factor Authentication
- BlackBerry Builds Out Extended Detection and Response (XDR) Capabilities with New Cybersecurity Innovations
- Digital.ai Essential App Protection Announced
- Splunk Announces Intent to Acquire TruSTAR
- Cisco adds to cybersecurity service with acquisition of Kenna Security
- Fidelis Cybersecurity acquires CloudPassage to enhance its Active XDR platform – Help Net Security
- Perforce Acquires 21 Labs
- Vectra AI: $130 Million Funding And $1.2 Billion Valuation
- Cybersecurity company NetSPI raises $90M – Minneapolis / St. Paul Business Journal
- Styra Raises $40 Million in Series B Funding to Drive Access, Security and Compliance in Cloud-Native Applications
- BluBracket Secures $12M in Series A Funding to Protect Code from Development to Deployment – DevOps.com
- Cybersecurity Company Cigent Secures $7.6 Million
- Portainer.io Raises $6M Series A Round
- Query.AI Closes $4.6M in Funding to Accelerate Adoption of Market’s Only Security Investigations Control Plane – DevOps.com
- ArmorCode Emerges From Stealth
Building a Response Strategy to Advanced Threats – Mark Bowling – ESW #228
SolarWinds SUNBURST was a rude awakening for many security teams, and it won't be the last time security leaders face tough questions about how an adversary evaded defenses and stayed hidden. With advanced threats persisting inside the network for months, security teams need a new plan. In this session, ExtraHop VP, Security Response Services Mark Bowling discusses strategies to detect, investigate, and respond to post-compromise attack activities.
This segment is sponsored by ExtraHop Networks.
Visit https://securityweekly.com/extrahop-rsac to learn more about them!
Mark Bowling is Vice President of Security Response Services at ExtraHop. He advises our global customers on risk management and mitigation strategy and helps them respond to complex cybersecurity incidents quickly, thoroughly, and in compliance with regulatory frameworks including GDPR, CCPA, NERC, PCI-DSS, ISO, SEC, and HIPAA. Prior to ExtraHop, Mark spent more than two decades investigating and combating cyber attacks in leadership roles with the FBI and the Department of Education.
We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!
