Cybersecurity Awareness Month 2023

CyCognito’s CEO on keeping people and endpoints secure

Screen Shot 2021-11-02 at 1.37.53 PM

Freddie Mac CISO on the evolving cyber threat targeting financial services

Screen Shot 2021-10-26 at 6.25.22 PM

Zoom Deputy CISO on adapting to newfound customer requirements

Security Staff Acquisition & Development

<body>Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed another major factor in folks that brought a lot of value to security teams: diversity.</body>

<body>Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed another major factor in folks that brought a lot of value to security teams: diversity. </body>

<body>Diversity of people, diversity of background, and diversity of experience. I've seen auto mechanics, biologists, and finance experts bring the most interesting insights and forehead-slapping observations to the table. I think part of the reason diversity is so necessary is that security itself is incredibly broad. It covers everything that technology, processes, and people touch. As such, cybersecurity workers need to have a similarly broad skillsets and background.</body>

<body>Diversity of people, diversity of background, and diversity of experience. I've seen auto mechanics, biologists, and finance experts bring the most interesting insights and forehead-slapping observations to the table. I think part of the reason diversity is so necessary is that security itself is incredibly broad. It covers everything that technology, processes, and people touch. As such, cybersecurity workers need to have a similarly broad skillsets and background.</body>

<body>Today, we talk to someone that embodies both this non-typical cybersecurity background and sense of curiosity - Clea Ostendorf. We'll discuss:</body>

<body>Today, we talk to someone that embodies both this non-typical cybersecurity background and sense of curiosity - Clea Ostendorf. We'll discuss:</body>

<body><ul><li>The importance for organizations to actively seek and welcome curious newcomers in the security field who may not conform to traditional cybersecurity norms.</li><li>Strategies for organizations to foster an environment that encourages individuals with curiosity, motivation, and a willingness to challenge conventional norms, thereby promoting innovative thinking in addressing security risks.</li></ul></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.code42.com/blog/evolving-threats-from-within-insights-from-the-2024-data-exposure-report/">Evolving Threats from Within - Insights from the 2024 Code42 Data Exposure Report</a></body>

<body><a rel="noreferrer noopener" target="_blank" href="https://www.code42.com/blog/evolving-threats-from-within-insights-from-the-2024-data-exposure-report/">Evolving Threats from Within - Insights from the 2024 Code42 Data Exposure Report</a></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12281″} podcast from PPWorks

Data Security

Distributed Workforce

Why cyber hygiene requires curious talent – Clea Ostendorf – ESW #355

<body>In the leadership and communications section, The CISO Role Is Changing. Can CISOs Themselves Keep Up? , Why do 60% of SEC Cybersecurity Filings Omit CSO, CISO Info?, How Co-Leaders Succeed, and more!</body>

<body>In the leadership and communications section, The CISO Role Is Changing. Can CISOs Themselves Keep Up? , Why do 60% of SEC Cybersecurity Filings Omit CSO, CISO Info?, How Co-Leaders Succeed, and more!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12376″} podcast from PPWorks

Leadership

CSO Role vs. Changing CISO Role as 60% of Both Roles are Omitted from SEC Filings – BSW #343

<body>The GoFetch side channel in Apple CPUs, OpenSSF's plan for secure software developer education, fuzzing vs. formal verification as a security strategy, hard problems in InfoSec (and AppSec), and more!</body>

<body>The GoFetch side channel in Apple CPUs, OpenSSF's plan for secure software developer education, fuzzing vs. formal verification as a security strategy, hard problems in InfoSec (and AppSec), and more!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12330″} podcast from PPWorks

Application security

Training

DevSecOps

GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification – ASW #278

<body>In the leadership and communications section, Cybersecurity in the C-Suite: A CISO’s Guide to Engaging the Board, The CISO's Guide to AI: Embracing Innovation While Mitigating Risk, Cyber Insurance Strategy Requires CISO-CFO Collaboration, and more!</body>

<body>In the leadership and communications section, Cybersecurity in the C-Suite: A CISO’s Guide to Engaging the Board, The CISO's Guide to AI: Embracing Innovation While Mitigating Risk, Cyber Insurance Strategy Requires CISO-CFO Collaboration, and more! </body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12372″} podcast from PPWorks

CISO’s Guides to Engaging The Board, Artificial Intelligence, and Cyber Insurance – BSW #341

<body>Jayson joins us to discuss how he is using, and social engineering, AI to help with his security engagements. We also talk about the low-tech tools he employs to get the job done, some tech tools that are in play, and the most important part of any security testing: Talking to people, creating awareness, and great reporting.</body>

<body>Jayson joins us to discuss how he is using, and social engineering, AI to help with his security engagements. We also talk about the low-tech tools he employs to get the job done, some tech tools that are in play, and the most important part of any security testing: Talking to people, creating awareness, and great reporting.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12485″} podcast from PPWorks

Risk Assessments/Management

Penetration Testing

Social Engineering: AI & Living Off The Land – Jayson E. Street – PSW #818

Critical Infrastructure Security

Brief

New York unveils state cybersecurity grant plan

<body>Check out this interview from the ESW Vault, hand picked by main host Adrian Sanabria! This segment was originally published on September 22, 2021.</body>