State of Security: Expert Insights on Cybersecurity Operations and the Business of Cyber

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. -------------------- Assess, design, and implement your cybersecurity strategy. Learn more at www....

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. -------------------- Assess, design, and implement your cybersecurity strategy. Learn more at www....

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. -------------------- Assess, design, and implement your cybersecurity strategy. Learn more at www....

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. -------------------- Assess, design, and implement your cybersecurity strategy. Learn more at www....

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. -------------------- Assess, design, and implement your cybersecurity strategy. Learn more at www....

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. -------------------- Assess, design, and implement your cybersecurity strategy. Learn more at www....

Takeaways Identify and assess the risks associated with third-party vendors and suppliers Build strong relationships with critical vendors and continuously monitor their security posture Understand the risks associated with the third parties used by your own third parties Use tools like BitSight and UpGuard for scanning and monitoring vulnerabilities Have management support, clear roles and respon...

Summary In this episode of State of Security, Geoff Hancock discusses cyber threat intelligence with guests Mike Rush and Evie Manning. They define cyber threat intelligence as data that is collected, processed, and analyzed to understand threat actors, their motives, targets, and behaviors. They emphasize the importance of making intelligence actionable and highlight the different levels of threa...

Summary This episode focuses on governance, risk, and compliance (GRC) and how organizations can strengthen their GRC programs. Key recommendations include: Ensure executive buy-in and support for GRC initiatives. Review and update policies, procedures, and documentation regularly. Implement continuous monitoring and improvement of GRC processes. Incorporate GRC elements into contracts with third...

Summary During HIMSS24 in Orlando, Access Point highlighted the importance of operational resilience and incident response in healthcare. Led by Geoff Hancock, the session addressed the increase in data breaches and the need for proactive cyber resilience. Panelists emphasized the shift to proactive cybersecurity, the role of AI and machine learning, key elements of an incident response plan, and...

Summary The principal themes in this conversation revolve around the importance of network vulnerability, data security, and the impact of emerging technologies in healthcare cybersecurity. The healthcare IT leaders we interviewed emphasize the need to find a balance between secure platforms and user-friendly environments. They also highlight the challenges of interfacing with external organizatio...

Summary In this conversation, Geoff Hancock interviews Brian Weidner and Chris Skinner about incident response. They discuss the importance of building strong relationships with the C-suite and legal department, as well as the value of having a trusted incident response company on retainer. They also touch on the challenges of incident response in the critical infrastructure sector and the potenti...

Summary Geoff Hancock joined Allan Alford on The Cyber Ranch Podcast to discuss effective communication strategies for CISOs. They emphasize the importance of prioritizing clarity in communication, using strategic storytelling, and practicing crisis communication. They also highlight the significance of engaging stakeholders proactively, leveraging data in decision-making, and bolstering leadershi...

Summary This conversation explores the impact of ransomware on the healthcare industry and the importance of cyber resiliency. It discusses the resilience of cybercriminals and the need for organizations to be proactive in their approach to cybersecurity. The conversation also highlights the threats and vulnerabilities faced by healthcare organizations and the role of AI in cybersecurity. It empha...

Summary In this episode, Rick Leib, Field CISO for Access Point Consulting, discusses the challenges and strategies for cybersecurity in healthcare organizations. He emphasizes the need for healthcare organizations to stop relying solely on perimeter security and to hire executives who can effectively sell security to the board and senior executive staff. Rick also highlights the importance of add...

Summary In this conversation, Geoff Hancock, Global CISO and Deputy CEO for Access Point Consulting, speaks with Rick Leib, Access Point’s Field CISO, discussing the importance of cybersecurity in healthcare organizations. They highlight the prevalence of ransomware attacks in the healthcare industry and the need for improved malware defenses and patch management. Rick emphasizes the importance of...

State of Security, by Access Point Consulting, brings together seasoned experts in the fields of security consulting, regulatory compliance, and security operations. Whether you’re a business leader, IT professional, or security enthusiast, this podcast offers valuable insights and actionable advice. Learn more at  accesspointconsulting.com .

Summary The conversation focuses on privacy and how to protect personal and corporate data. The speakers discuss core principles for safeguarding customer and employee data, including data minimization, secure coding practices, and continuous testing of controls. They emphasize the importance of communication with the board and legal teams, as well as the need for data retention and disposition sc...

In this episode of the Virtual CISO Happy Hour, we explore the world of phishing threats and the best practices to recognize and report them. Our panel of cybersecurity experts discusses: The significance of user awareness and training in combating phishing threats. The role of email security through DNS, including an in-depth look at DMARC, SPF, and DKIM. The importance of limiting privileges, es...

Summary The conversation focuses on the importance of cyber hygiene and basic security practices. The panelists discuss the need for organizations to prioritize cyber hygiene and ensure that basic security measures, such as patch management, password hygiene, and access control, are in place. They emphasize the role of both organizational and personal behavior in maintaining cyber hygiene. The pan...

Join us for this episode of Virtual CISO Happy Hour as we discuss best practices, challenges, and solutions in navigating identity and access management (IAM) in today's digital landscape. Our panel of cybersecurity experts will unpack the essentials, ensuring your organization remains secure while optimizing user experience. Whether you're just starting your IAM journey or looking to refi...

Delve into the intricacies of the NYDFS Cybersecurity Regulation with us on the Virtual CISO Happy Hour podcast. Wondering how to navigate its complexities, ensure compliance, or where to begin with understanding and implementation? Our panel of cybersecurity experts is here to guide you every step of the way, shedding light on how this regulation impacts your organization.

Are you trying to bolster your cybersecurity defenses but find yourself overwhelmed by the myriad of tools out there? How can you discern which tools are vital and which ones are just adding to the noise? And where's the sweet spot between having a robust security system and suffering from tool overload? Dive into these pressing questions in the latest episode of the Virtual CISO Happy Hour po...

Are you aware of the threats lurking within your organization? While external threats are often in the spotlight, insider threats can be just as damaging, if not more so. In this episode of the Virtual CISO Happy Hour podcast, we dive deep into the world of insider threats. Discover how to recognize the signs and learn the strategies to mitigate the risks they pose. Join our panel of cybersecurity...

Are you eager to grasp the intricacies of Business Impact and Risk Assessments but don't know where to start? Wondering how these assessments can shape your cybersecurity strategy? Curious about why they're essential for every organization, no matter the size or industry? Tune into the latest episode of the Virtual CISO Happy Hour podcast where our panel of experts breaks down the signific...