Socializing Security

In this episode, Milou and Brian delve into the concept of cyber resiliency, exploring its definition, importance, and the various components that contribute to a robust cyber resilience program. They discuss the nuances of cyber recovery compared to traditional disaster recovery, the significance of incident response planning, and the role of cyber insurance in mitigating risks. The conversation...

In this episode, Brian and Milou talk with David Klee, a database expert, to discuss the often-overlooked topic of database security. They explore the challenges companies face in securing their databases, the impact of cloud technology on security practices, and the importance of a top-down approach to security mandates. David emphasizes the need for organizations to integrate security into their...

In this episode of Socializing Security, Brian and Milou discuss the importance of community in the tech industry, especially in the context of networking and professional development. They share personal experiences from conferences, the value of building connections, and strategies for engaging with local and online communities. The conversation emphasizes the need for ongoing interaction and th...

In this episode, Milou and Brian delve into the issue of privacy, exploring various scenarios that highlight the importance of consumer awareness and data protection. They discuss the alarming findings from Mozilla's analysis of car privacy practices, the implications of government biometric data collection, and the pervasive nature of targeted advertising. The conversation emphasizes the need for...

In this episode, Milou and Brian discuss the often-overlooked importance of compliance in the realm of information security. They explore how to build effective compliance programs, the significance of engaging with sales teams, and the various frameworks and standards that organizations should consider. The conversation emphasizes the need for proactive compliance strategies, the challenges of na...

In this episode, Brian and Milou engage in a thought-provoking conversation with Zach Eikenberry about the psychology behind security training. They explore how to make security training more engaging and effective by understanding human behavior, the role of gamification, and the importance of tailoring training programs to meet the needs of employees. The discussion also touches on the challenge...

In this episode, we discuss the intersection of social media, security, and compliance. We emphasize the importance of understanding your purpose and persona on social media, as well as being mindful of privacy concerns and the information you share. We also explore the different platforms and their audiences, the role of encryption in protecting your data, and the need to review and adjust your s...

In this episode, we welcome Mark Adams, a creative director, discussing the intersection of AI and branding. We explore how AI can enhance creative processes while emphasizing the importance of maintaining authenticity and a human touch in branding. The conversation delves into the challenges of creating secure brand identities in a digital age, the nuances of effective communication, and the pote...

In this episode, Brian and Milou discuss the concept of layers of security and the importance of implementing multiple layers of security controls. They explore the physical, logical, and backup layers of security and how they contribute to overall cybersecurity resilience. They also touch on the challenges of implementing zero trust and the need for continuous improvement and monitoring in securi...

This week we're joined by Robert Fowler, Director of Identity and Access Management at Tyson Foods, and discuss the evolution of authentication methods, the importance of security in the digital age, and the future of identity management. He emphasizes the shift towards passwordless authentication, the role of biometrics, and the potential of emerging technologies like quantum computing and brainw...

In this episode, we discuss the importance of security and compliance for everyone in an organization. We emphasize that security is not just the responsibility of cybersecurity experts or compliance professionals, but something that every employee needs to be aware of. We highlight the risks of human error and the need for a culture of compliance and security within the organization. The conversa...

In this episode, we talk to Frank Arriaga, the owner of HMO Studios, a photography and videography shop, about how his background in disaster recovery and cloud services applies to protecting his own business and his clients' data. He emphasizes the importance of planning and building a data backup strategy from the beginning, the need for privacy and security in the photography industry, how copy...

In this episode, we talk about the risk of data breaches and how to time a data breach announcement. We talk about the recent AT&T example and discuss incident response, customer reporting, regulatory involvement, and customer compensation. Is credit monitoring enough?  

In this episode, we discuss the challenges and considerations of starting a business, including the importance of building processes and templates, the need for redundancy and disaster recovery planning, and the struggle of balancing multiple roles and responsibilities. They also touch on the trust and legitimacy that comes with having well-documented processes and procedures in place. 00:00 Intro...

In this episode, we interview Steve Sims, a former founder of an MSSP and cybersecurity expert. Together we discuss the importance of focusing on the basics of security, especially in the SMB space. Steve emphasizes the need for inventory control of hardware and software assets, secure configurations, and understanding critical data.

How a system fails is almost as important as how it works. Whether that be how a system reacts to a power outage or failed password attempts, anticipating these failure scenarios and ensuring safety is properly prioritized requires thoughtful planning. The need for balance between protecting consumers and maximizing profits, and the positive developments in consumer protection laws are also discus...

In this episode, we discuss the impact of content creation on individuals and professionals. We explore topics such as the use of AI in content creation, issues related to copyright infringement, data labeling, and the challenges and opportunities that content creators face in the digital age. TedTalk about content creation: https://youtu.be/Uzo8VBiyxOM?t=345   Trevor Noah keynote from IAPP 2023:...

In this episode, we discuss the science of marketing with Eric Wright - a technologist, product marketer, and startup advisor. The discussion touches on the psychology of sales and marketing, highlighting the importance of building trust, reciprocity, and integrity in the sales process.

In this episode, we discuss the challenges and importance of vendor due diligence, explore the reasons why the term 'due diligence' often elicits a negative reaction, highlight the need for cross-functional collaboration, and emphasize the importance of automation and continuous monitoring to ensure compliance and security standards are met throughout the vendor relationship.

In this episode, we discuss the career of Josh Kuntz, a Chief Information Security Officer (CISO) with an impressive background working with state government agencies in Texas. We discuss the importance of mentorship, the need for diversity of thought and experience in building a strong cybersecurity team, and the importance of clear communication and trust within a team.

In this episode, we discuss the importance of personal security and the risks associated with digital footprints. We highlight the changing nature of personal security and the need for individuals to prioritize their own data privacy. The conversation covers topics such as the dangers of intimate photos and cloud storage, the role of companies in protecting personal data, and the potential risks o...

In our first interview episode, Tom Hollingsworth, an event lead for Tech Field Day, shares insights on how to choose the right security vendor. He emphasizes the importance of understanding the use cases and verifying the trustworthiness of vendors. Tom also discusses the role of influencers in providing honest feedback and the need for clear communication in the security industry. He highlights...

How is social engineering going to be impacted by generative AI? On this episode of Socializing Security, Milou and Brian discuss common social engineering attacks and how these security threats will continue to be more challenging for users to discern as real or fake. We also reflect on our personal experiences falling for common attacks like chain mail and how to train people on how to identify...

Considering the future use of AI can be scary. In this episode, Brian and Milou discuss various topics related to security, compliance, and trust in the context of generative AI. They explore the importance of transparency and the challenges posed by deep fakes and prompt engineering and how they affect the need to understand risk tolerance and data privacy. We also emphasize the need for companie...

We believe it's important to know who the hosts of a podcast are and what perspectives they will bring to the show. In this episode of Socializing Security, Milou introduces herself and discuss her background and path to compliance and cybersecurity. We also discuss our goal of making security more approachable and understandable for everyone and how excited we are to cover a number of topics on t...