Friendly Fire: Mitigating Employee Risk

How secure is your security program? The rampant issues of unauthorized access, use, and modification of customer data require a security program to further secure and protect this information. In this episode of Friendly Fire, Sean Cassidy, the Head of Security at Asana, sits with Matt to share his insights on how you can build a secure security program. A common failure from other companies is t...

Research shows that 80% of the users of your tools cause 8% of your security incidents. You cannot safeguard your entire business until you know who these people are. When identifying risky employees, reducing future incidents, and defending the workforce, Robert Fly is your security guy! In this episode, he sits with Matthew Stephenson to share his career path in the security space and his effort...

8% of your employees are going to cause 80% of your security incidents. Employee mistakes are inevitable, no matter how much training you give them. That is why you need to change the way you think about security and plan ahead. Instead of trying to put out fires, prevent them from happening in the first place. Join Matthew Stephenson as he talks to the Co-Founder & President of Elevated Secur...

Having a diverse background in our careers rewards us with diverse experiences and insights. Janet Heins brings the breadth of her career experience to her role as the Chief Information Security Officer (CISO) at iHeartMedia . In this episode, she sits down with Matthew Stephenson to tell us about her journey from the cruise line industry, manufacturing, biotech, and pharmaceutical before landing...

The role of a CISO is one with many responsibilities. How do people in this position manage and balance everything that comes with their role? Here to shed light with a psychoanalytical perspective on the role is Mark Eggleston , CSC's chief information security officer (CISO). He is responsible for the global security and privacy program design, operations, and continual maturation. Join host Mat...

In a Zero Trust model, you have to always assume a breach. This is a model that everyone needs to be aware of because everyone wants to know that they are being protected, especially in school. Parents want to know that their children are in a safe environment. This is what the Chief Information Security Officer at  SMU ,  George Finney  is tasked with daily. Join Matthew Stephenson as he talks to...

Do you think your job is hard? Well, being the Chief Security Officer at HCA Healthcare , Paul Connelly was able to wrap his arms around an industry where there are 275,000 employees and 36 million patient care encounters each year. But how does he do that? In today’s episode, Paul Connelly shares his endeavours as a Chief Security Officer who built and led HCA’s programs since 2002. Through a goo...

Zero Trust has been a thing for a few years now, and people have leaned into it. However, Booz Allen's Commercial Practice is changing that narrative and looking to the future to evolve the notion of Trust. In this episode, Matthew Stephenson welcomes the Vice President of Booz Allen's Commercial Practice, Luke Simonetti. Luke explains what Dynamic Trust is and how it differs from Zero Trust. He a...

Many people in workplaces around the world have been clicked dubious links thinking they’re important emails from work. These people have become victims of spear phishing, one of the biggest threats to workplace security right now. How can we protect ourselves from the bad actors that do this? In this episode, Camille Morhardt , the Director of Security and Communication at Intel, shares a three-p...

If you are the smartest person in your organization, then you're doing something wrong. Listen to your host Matthew Stephenson as he talks with  Nick Ryan , the CISO at  Baker Tilly , about the value of being the dumbest person in the room. Together, they discuss team culture and the different elements that shape successful mergers and acquisitions. Nick also dives deep into the security industry...

A cyberattack is a real and ongoing danger for businesses today. Cybersecurity training can help you protect your company from the inside so you can feel as prepared as possible. The Cyber Range and Training Center in RIT's Global Cybersecurity Institute does just this. They train people by giving them immersive scenarios and emulation training. They also believe in bringing as many people into cy...

Leading a team takes a lot of skill. Imagine what it takes to lead a team of 12,000! Find out how first-time CISO and Vice President for  Insight  and Microsoft's 2022 Security Changemaker of the Year,  Jason Rader , powers through his day as he talks about the vital role his team plays in his or any organization. With more than 25 years of providing security solutions, he shares how he leverages...

Cybersecurity can help an organization do strategic development and whole lot of other things. But the biggest thing it brings to the table is trust. If you work in cybersecurity, the people in the organization has to trust you and you need to have the credentials for that. There is not trust without credibility. Trust is key in the world of cybersecurity today, especially if you have to teach the...

"Be yourself" is always good advice. But as hackers get smarter, they can be you too! In this digital age, more people spend time online, from connecting with family and friends to doing business. At the same time, online risks keep growing. So do we take offense or defense? In this episode,  Dan Lohrmann , Field CISO for Public Sector & Client Advisor at  Presidio , talks about cybersecurity...

Leaders and entrepreneurs know that there are a lot of factors in growing an organization. You must think about structures, making better decisions, and what truly matters. Matthew Stephenson sits down for a conversation with Dr. Shayla Treadwell on the importance of building a culture of trust in your organization to drive excellent results and happy people. Dr. Shayla manages information securit...

For any system that involves humans, there is always the potential for vulnerabilities. Whether it is a system of communication or a physical security system, if humans are involved in any way, there is always the potential for someone to exploit a weakness. In this episode, F (freakyclown) C , Co-CEO at Cygenta , explores some ways that any system involving humans can be vulnerable. FC is a well-...

Cybersecurity is one of the most important issues facing businesses and organizations today. The increasing reliance on technology has also increased the threat of cyberattacks. While there are many challenges associated with cybersecurity, there are also opportunities for organizations to improve their cybersecurity posture. Dr. Edward Amoroso , CEO of TAG Cyber , sits with Matthew Stephenson to...

Being a CISO requires you to be the team's incident commander. You need to be willing to tackle problems and risks with good leadership. Users are looking up to you to help solve problems effectively. You need to guide these people so they won't get compromised. Join us as we talk to Brent Deterding about what it takes to engage your people as a CISO leader. Brent is an Executive CISO whose missio...

Companies need to put more effort into empowering their people when it comes to creating a cybersecurity culture. This is what’s called the people-centric approach to cybersecurity culture. When someone comes forward because they clicked a malicious link, reward them. Don't punish them because then they will keep quiet about what they're doing. Humans are at the highest risk when it comes to cyber...

There is a looming threat in the healthcare industry today: ransomware.  Eddie Borrero , Vice President and Chief Information Security Officer at  Blue Shield of California , advocates that companies must start prioritizing security to ensure the safety of businesses and, most importantly, people whose lives are on the line when systems go down. In today's episode, Matt Stephenson chats with Eddie...

A lot of people think that insider threats are always malicious, but most of the time, they are unwitting vectors of risk. Join Harris Schwartz as he talks to Co-Founder of the  Cyentia Institute ,  Wade Baker , about his research on internal risks. Discover how much of it comes from human risks like email phishing or downloading malware. Learn how they try to curb people away from doing these ris...

When it comes to cybersecurity and protection, it's easy to blame the individual. But what are more effective methods to counter human risk? Joining Harris Schwartz for this episode is  Mark Sangster . Mark is the Chief of Strategy for  Adlumin . He is also an award-winning speaker and the author of  No Safe Harbor: The Inside Truth About Cybercrime and How to Protect Your Business . Mark talks ab...