Protecting People

Dan Holden, VP of Cybersecurity at BigCommerce takes a threat centric angle when discussing information security. He emphasizes the importance of awareness around the extent of cybercrime capability. What we talked about: - Different ways to handle information security - Changes in the threat landscape - External aspects of cybercrime capability - Framework vs. Strategy Check out these resources w...

The new world has changed our concerns about how information is accessed and handled. Remote work has accelerated the insider threat, insider risk, and DLP concern. The need for information protection is at an all-new high. In this episode in our Inside Line on Information Protection series, host Brian Reed chatted with Tim Choi, Vice President Product Marketing at Proofpoint, about information pr...

We’ve been joined by Gretel Egan, Senior Security Awareness Training Strategist at Proofpoint, to discuss this year’s State of the Phish (SOTP) Report, where we get an in depth look at user awareness, vulnerability and resilience. This episode covers: - A breakdown of what goes into the SOTP report and where the data is sourced from - The broadness of the term ‘phishing’ and what it includes or me...

When everyone is feeling overwhelmed by taxes and afraid of doing something wrong, that’s when the phishing, smishing, and website impersonation reaches its height. How can we reassure and train our employees about tax-related scams? In this episode of our Expert Insights series, we interview Susan Mackowiak, Senior Director, Program Content at Proofpoint, about resources to avoid being a victim o...

If you’re asking which information protection platform to choose, that’s not deep enough. It’s intellectually lazy. Too often, we make technology decisions instead of programmatic decisions. In a recent episode in our Inside Line on Information Protection series, we chatted with cybersecurity executive Jeremy Wittkop about reimagining DLP as a method for protecting people first. We also talked abo...

When we’re looking ahead at 2021 in information governance and regulatory changes, what will define the cybersecurity industry? In this second of two episodes featuring regulatory changes in our Expert Insights series, John Pepe, Resident Chief Compliance Officer and Regulatory Counsel at Proofpoint, and Sonali Bhavsar, technology executive, forecast governance in 2021. What we talked about: - The...

In addition to focusing on malicious actors trying to gain access to your networks and your systems, are you just as focused on making sure that the people who already have access are doing what they’re supposed to be doing? Insider Threat detection is one of the most underutilized, but overlooked aspects of any cybersecurity organization. On this episode of The Inside Line on Information Protecti...

Introducing our new series: Inside Line on Information Protection. In this show, we’ll welcome expert guests with diverse backgrounds in information protection to discuss topics like insider threat, information governance, and cloud security. In this inaugural episode, host Brian Reed is joined by Catherine Hwang, Director of Product Marketing for Information Protection Products at Proofpoint. Wha...

Governance, AI, analytics, and regulation — 2020 sure changed a lot. Good data hygiene looks totally different now, as does so much in the regulatory financial services realm. In this first of two episodes featuring regulatory changes in our Expert Insights series, John Pepe, Resident Chief Compliance Officer and Regulatory Counsel at Proofpoint, and Sonali Bhavsar, Technology Executive, discuss w...

People spend over 3.5 hours on their mobile phone every day, and 50% of that time is spent on social media.   If you think your employees aren’t representing your company on social media platforms, you’re just plain wrong.   In this episode, we interview Amanda Anderson, Product Marketing Manager, Compliance at Proofpoint, about understanding security risks on social media from a people-centric pe...

Data doesn’t lose itself.   A person loses the data.   What, exactly, do we mean when we talk about people-centric security?   In our latest People Variable episode of Protecting People, Brian Reed, Cybersecurity Evangelist at Proofpoint and former Gartner analyst, talks to us about data loss prevention.   What we talked about:   - 3 reasons you would ever start a DLP project   - How to talk to yo...

Cloud account takeover activity has skyrocketed in 2020. When the security perimeter of your org is your people, how they access the cloud matters.   In this episode of our People Variable series, we spoke with Itir Clarke, Sr. Product Marketing Manager at Proofpoint, about risks people pose in the cloud.   What we talked about:   - One in six people use the same 1-2 passwords   - Why cloud securi...

It’s the most wonderful time of the year. If you’re a hacker, that is.    Holiday season is always the time of the year when we see cyber attacks go through the roof. Why?   Because people are stressed out, they’re in a hurry, and they aren’t always paying close enough attention to things as they should.    After all, when Amazon emails you and tells you your package is going to arrive late, you t...

Cybercriminals may be nefarious, but they are also people.    And people have habits.    If you want to stop one, it helps if you learn them.    In our latest episode, we’re speaking with Wes Drone, Sr. Manager, Threat Intelligence, at Proofpoint and a former FBI Agent, about what a typical day looks like for the people stopping threat actors by thinking like them.    We discuss:   - Wes’ transiti...

Nobody wants to view employees as insider threats. Yet in the last 2 years, there have been about 40% more insider threat incidents - almost 1 in 3 breaches involves insider threats.   In this first episode of our People Variable miniseries, we interview Sai Chavali, Sr. Product Marketing Manager at Proofpoint, about insider threats.   What we talked about:   - The 3 types of people-centric inside...

Would you pay the ransom?   There are 4,000+ ransomware attacks per day with $3.5Bn lost in just 2019.   Looks like the answer is Yes.   In our 6th episode to understand the mind of cybercriminals, your Protecting People hosts learn all about ransomware from Christopher Budd, Principal at Christopher Budd Security, and Ryan Kalember, EVP, Cybersecurity Strategy at Proofpoint.   What we talked abou...

The word malware comes from “malicious” + “software” — and it’s as bad as it sounds.   To get inside the minds of cyber criminals, we asked 2 security experts to teach us about malware.   In this episode, we interviewed Christopher Budd, Principal at Christopher Budd Security, and Sherrod DeGrippo, Sr. Director, Threat Research and Detection at Proofpoint, about how to get and avoid malware.   Wha...

We recently put this question to three security awareness experts:   Where do you start with a company-wide training program?   In this #TacklingUserBehavior episode, we interview Eddie Whittingham, founder of the recently-acquired The Defence Works,  Kurt Wescoe, Former CMU Faculty and Chief Architect at Proofpoint Security Awareness Training, and Robert Shields, Sr. Product Marketing Manager at...

Not all cybercriminals are evil. Some send phishing emails to their coworkers for their own good.   We’re talking about simulated phishing emails for education.   In this episode, we interview Jason Riegner, Jr Front End Developer at Proofpoint, about the Microsoft TEAMS phish he designed, which most of us fell for.   What we talked about:   - How to identify a phishing email   - What to do & espe...

BEC, or Business Email Compromise, is when an attacker disguises themselves to look like a trusted person.   But EAC, or Email Account Compromise, is when an attacker actually compromises an email account. They can start sending emails as, well, you.   In this episode, we hear from past guests Rob Holmes, Sherrod DeGrippo, & Mike Bailey about how to access and compromise a legitimate mailbox.   Wh...

Wouldn’t it be great if security training were so exciting that employees started begging for the next episode? Security training should feel like watching your favorite sketch comedies.   In this episode, we interview Eddie Whittingham, Founder of The Defense Works and former police officer and lawyer, about his inspiration for humorous, interactive security training.   What we talked about:   -...

Security is like having a foolproof safe. Privacy is like telling everyone the combination.   When it comes to the complex security and privacy landscape, where do you even start with awareness training?   In this episode of the #TacklingUserBehavior series, we interview Daniel Solove, Founder of TeachPrivacy and John Marshall Harlan Research Professor of Law at the George Washington University La...

80% of what you need to be a cybercriminal is Internet access.   The other 20% is mostly social engineering. Effective cybercriminals understand how people think.   In this episode, we interview Robert Holmes, VP and General Manager, Email Fraud Defense at Proofpoint, about the easy process for business email compromise (BEC) attacks.   What we talked about:   - Smaller companies are more likely t...

Your workers are 100% remote now… using their personal devices and personal accounts for work. Cybercriminals will capitalize on their shock and fear to cause as much data loss as possible.   In this #ExpertInsights episode, I interview Tim Choi, VP of Product Marketing at Proofpoint, about how to protect your people from cybercrimes… remotely.   What we talked about:   - Examples of shock-based p...

Users still clicking phishing emails? Reusing passwords?   Don't worry - you're not alone.   In this inaugural episode of our new #TacklingUserBehavior series, we interview Kurt Wescoe, VP of Engineering at Proofpoint and former Carnegie Mellon University faculty, about how to achieve successful user behavior change.   What we talked about:   - The importance of user buy-in and engaging security a...