BlueDragon Podcast

This episode of the Blue Dragon podcast features Jason Brown, a seasoned cybersecurity leader, former CISO/vCISO, and author, discussing his book, "Unveiling NIST Cybersecurity Framework 2.0". The conversation centers on the NIST CSF 2.0 , emphasizing the critical addition of the " Govern " function. Jason frames the CSF as an excellent introductory framework for building a cyb...

LINKS ➰ BlueDragon Podcast website: https://bluedragonpodcast.com ➰ Book: https://tinyurl.com/CISO-guide ➰ Website: ⁠ https://TrustedCISO.com ⁠ ➰ CISO Guide to Cyber Resilience Book: ⁠https://amzn.to/3Vt1g0o ➰ LinkedIn: https://www.linkedin.com/in/debrabakernc ➰ TrustedCISO Newsletter: https://bit.ly/TrustedCISO-NewsLetter ➰ CISO Guide Course on Udemy: https://bit.ly/ciso-guide-udemy ➰ Adv...

In this episode of the Blue Dragon podcast, I interview Purav Desai, a dual Microsoft MVP recognized for his contributions in the fields of SIEM, XDR, and Microsoft Purview compliance. We discuss Purav's journey to becoming an MVP, his role as an incident responder, and the strategic importance of Microsoft Purview in governance and compliance. The conversation also covers the significance of...

In this episode of the Blue Dragon podcast, I interview Johnny Hooyberghs, an expert in quantum computing and author of 'Introducing Microsoft Quantum Computing for Developers.' We discuss Johnny's journey into quantum computing, the importance of this technology for businesses, and its current state of development. Johnny explains the potential applications of quantum computing in var...

In this episode Jetro interviews Michael Ratemo, a cybersecurity expert and author, discussing his journey from Kenya to becoming a cloud and security leader. They explore essential topics such as cloud governance, identity and access management, the importance of cloud auditing, and cost management in cloud environments. Michael emphasizes the need for a business case before moving to the cloud,...

Shinesa Cambric discusses the critical aspects of cloud auditing, emphasizing the importance of collaboration between developers, risk management, and compliance teams. She explores the basics of cloud auditing, the significance of governance and documentation, and the impact of identity management on cloud security. The discussion also highlights the integration of financial operations (FinOps) w...

Joshua Garverink, co-author of the Azure Integration Guide for Business, discusses journey into the tech industry, his experiences with Azure, and the importance of cloud integration for IT leaders. The conversation covers various themes including the benefits of moving to Azure, the cultural shifts required for cloud adoption, architectural considerations for cloud migration, the significance of...

SUMMARY Graham Gold, co-author of the Microsoft Cybersecurity Architect Exam, discusses extensive background in IT, the relevance of cybersecurity architecture in cloud environments, and the evolving landscape of cybersecurity practices. Key topics include the importance of identity management, the challenges of hybrid cloud environments, and strategies for assessing and improving security in clou...

SUMMARY Eyal Estrin discusses his background in cloud security and the importance of adapting to new security challenges in cloud environments. He emphasizes the shared responsibility model, the critical nature of identity and access management, and the risks associated with neglecting cloud security. Also he shares insights on budgeting for security investments, balancing agility with security, a...

In this episode of the Blue Dragon podcast, Krishna Chaitanya Rao Kathala, author of 'Privacy in the Age of Innovation' discusses the importance of privacy in the context of AI, the role of Privacy Enhancing Technologies (PETs), and how organizations can implement these technologies to ensure compliance with regulations like GDPR. Krishna explains various techniques such as differential pr...

In this season's finale, Dwayne Natwick and I we dive into cybersecurity with Dwayne Natwick, a seasoned expert with over 30 years of IT experience. Dwayne shares his journey from running Token Ring cables as a teenager to becoming a global cloud security lead. Discover the evolution of cloud security, the importance of risk awareness, and the critical role of identity in modern cybersecurity. Lea...

Ahilan Ponnusamy, author of the book 'Technology Operating Models for Cloud and Edge,' discusses the concept of operating models and their importance in the IT ecosystem. He explains how cloud and edge technologies impact the technology operating model and emphasizes the prevalence of hybrid cloud as the standard deployment option for most organizations. Ponnusamy also critiques the bimodal IT app...

Benny Lauwers, author of 'The Good, The Bad and the Practical: AI for doeners', discusses his background and how he got into writing a book on practical AI. He shares his experience in implementing AI in industrial environments, particularly in manufacturing. Lauwers emphasizes the challenges and benefits of applying AI in the industrial setting, including improving quality and safety. He also dis...

In this conversation with Qamar Nomani, we discuss cloud security posture management (CSPM) and its benefits. Qamar shares his professional background and how he ended up writing a book on cloud security. They discuss the design and length of the book, as well as the key question of what CSPM is and its benefits. They also explore how CSPM fits into the broader cloud security ecosystem and the imp...

In this episode, I talk with technology executive and author Marcelo Leite. We discuss the concepts of a database, data warehouse, data lake, and data lake house. He explains how these concepts have evolved and are used in modern data management. We also discuss the importance of data classification and data loss prevention (DLP) in ensuring data security, introduce the concept of data mesh and it...

Vincent van Dijk, an information security specialist, discusses his journey from software development to data science to cybersecurity. He emphasizes the importance of writing in cybersecurity and the need for clear and effective policies. Vincent also shares his thoughts on the impact of cloud computing and the rise of managed security service providers. He predicts that compliance will continue...

Stefan Eysken, author of the Azure Cloud Native Architecture Map book, discusses his background and the motivation behind writing the book. He highlights the drivers for organizations to move to the cloud, including time to market, security, and cost. The conversation explores the evolution of Azure over the past five years, with a focus on the privatization of PaaS services and the rise of data a...

Mike Bursell, a cybersecurity expert and author of the book 'Trust in Computer Systems and the Cloud,' discusses the concept of trust in the digital world. He explores the definition of trust, the challenges of trust in computer systems and the cloud, and the emerging trend of zero trust. He also delves into the importance of a trusted computing base, the role of hardware security modules (HSMs),...

Walter Rocchi, an ISO 27001 Lead Implementer and Lead Auditor, to discuss the importance of cybersecurity and privacy in European organizations. We talk about continuous improvement and training to ensure effective security measures. We compare the European mindset toward privacy and data protection with other continents, discuss the challenges of balancing European innovation and regulation, inve...

This first episode of the BlueDragon Podcast delves into the transformative world of cloud computing, featuring insights from industry expert Jonah Andersson. We discuss the evolution of Azure, cloud adoption trends, and the foundational knowledge necessary for leveraging cloud technologies effectively. CHAPTERS (00:00:00) Introduction and Overview (00:06:16) Cloud Adoption and Attitude of Organiz...