Software Engineering Institute (SEI) Podcast Series

Organized criminals recruit unsuspecting intermediaries to help steal funds from small businesses. Listen on Apple Podcasts .

Being able to respond effectively when faced with a disruptive event requires that staff members learn to become more resilient.    Listen on Apple Podcasts .

CISOs must leave no room for anyone to deny that they understand what is expected of them when developing secure software.  Listen on Apple Podcasts .

Students learn how to combine multiple facets of digital forensics and draw conclusions to support full-scale investigations. Related Training Advanced Incident Handling Advanced Information Security for Technical Staff Listen on Apple Podcasts .

The SGMM provides a roadmap to guide an organization's transformation to the smart grid.  Listen on Apple Podcasts .

Being able to effectively respond to e-discovery requests depends on well-defined, enacted policies, procedures, and processes. Listen on Apple Podcasts .

Addressing privacy during software development is just as important as addressing security. Listen on Apple Podcasts .

Network defenders and business leaders can use NetSA measures and evidence to better protect their networks.  Listen on Apple Podcasts .

Providing critical services during times of stress depends on documented, tested business continuity plans. Related Course Introduction to CERT Resiliency Management Model Listen on Apple Podcasts .

A defined, managed process for third party relationships is essential, particularly when business is disrupted.  Related Course Introduction to CERT Resiliency Management Model Listen on Apple Podcasts .

The smart grid is the use of digital technology to modernize the power grid, which comes with some new privacy and security challenges. Listen on Apple Podcasts .

Electronic health records (EHRs) are possibly the most complicated area of IT today, more difficult than defense. Listen on Apple Podcasts .

Two hundred and eighty-two cases of actual insider attacks suggest 16 best practices for preventing and detecting insider threat. Listen on Apple Podcasts .

Business leaders need new approaches to address multi-enterprise, systems of systems risks across the life cycle and supply chain.  Related Courses Assessing Information Security Risk Using the OCTAVE Practical Risk Management: Framework and Methods   Listen on Apple Podcasts .

When considering cloud services, business leaders need to weigh the economic benefits against the security and privacy risks. Listen on Apple Podcasts .

Business leaders need to take action to better mitigate sophisticated social engineering attacks. Listen on Apple Podcasts .

Now may be the time to examine our responsibilities when developing software with known, preventable errors - along with some possible consequences. Listen on Apple Podcasts .

Capitalizing on the cultural norms of the Net Generation is essential when developing security awareness programs. Listen on Apple Podcasts .

Observed practice, represented as a maturity model, can serve as a basis for developing more secure software. Listen on Apple Podcasts .

Requiring secure coding practices when building or buying software can dramatically reduce vulnerabilities.  Related Course Secure Coding in C and C++ Listen on Apple Podcasts .

Making security strategic to business innovation involves seven strategies and calculating risk-reward based on risk appetite. Related Courses Assessing Information Security Risk Using the OCTAVE Approach Introduction to the CERT Resiliency Engineering Framework Listen on Apple Podcasts .

Teams are better prepared to respond to incidents if realistic, hands-on training is part of their normal routine. Related Courses Advanced Incident Handling Advanced Information Security for Technical Staff Listen on Apple Podcasts .

Standard, compliance, and process are more effective than risk management for ensuring an adequate level of information and software security. Related Course Assessing Information Security Risk Using the OCTAVE Approach Listen on Apple Podcasts .

Rich Pethia reflects on CERT's 20-year history and discusses how he is positioning the program to tackle future IT and security challenges. Listen on Apple Podcasts .

Climate change requires new strategies for dealing with traditional IT and information security risks. Listen on Apple Podcasts .