The Security Strategist

Incident response is the action taken to detect, triage, analyse, and remediate problems in software with the ultimate goal of minimising damage and restoring normal business functionality as quickly as possible.  A well-executed incident response plan can help organisations mitigate the impact of security incidents and maintain the trust of their customers and stakeholders, but how spec...

Machine identity is an essential part of ensuring companies maintain a good level of data security and structural integrity.  The management of digital certificates and keys allows all internal traffic to be encrypted, seriously narrowing the attack surface of an enterprise.  In this episode of the EM360 Podcast, Editor  Matt Harris  speaks to  Chris Hickman , Chief Securi...

Bot mitigation helps enterprises to identify and block unwanted bot traffic as it hits your network. And with half of all internet traffic coming from bots (both good ones and bad ones), managing that bot traffic is critical.  Financial institutions, ticket-selling sites and shopping sites are among the hardest hit, with cybercriminals employing ML and AI in these bots to scale the size of th...

Data privacy. The ever-changing landscape of collecting and sharing personal data is complex, with attitudes and regulations constantly being updated.  So what’s happening in politics right now that could affect ¾ of the world’s data privacy rights? How are consumers reacting to all this? And why are customers struggling so much with compliance? In this episode of the EM360 Podcast, Editor&nb...

A software supply chain attack is when someone infiltrates your system by attacking a third-party provider or partner with access to your data.  Recent high-profile supply chain attacks, most notably SolarWinds, has this type of attack into the public eye, and it’s clear that with more suppliers handling sensitive data than ever before, the attack surface of a typical enterprise has been chan...

Identity Governance and Administration (IGA) systems are a fundamental part of an enterprises identity and access management strategy.  For companies that need functionalities like role-based access and automated approval, IGA systems can be essential in ensuring that the right people are getting access to the right things.  Sounds easy enough, but issues with adoption, sponsorship and e...

As an IT Professional, you know that cyberattacks are ever-increasing, and businesses must do everything they can to ensure they remain protected.  Organisations across the globe are beginning to implement Zero Trust solutions to protect their files, data, devices, and networks. Zero Trust is a concept that operates on the idea that nothing can be trusted, and everything is a threat until it...

Authentication is the art of determining whether something is what it says it is.  Passwords provide a great way for customers and consumers to access their personal information but when it comes to the enterprise, newer concepts like two-factor authentication (2FA) and zero trust network access (ZTNA) may be required.  It’s been part of computing since its inception two decades ago - ye...

In this podcast, Chris Steffen, Research Director at Enterprise Management Associates (EMA), joins Mark Alba, Chief Product and Strategy Officer at Anomali, to explore the ins and outs of extended detection and response (XDR) and MITRE ATT&CK framework, including how it integrates with threat intelligence and enterprise security strategies.

Attack surface management is the sustained monitoring, classifying, and inventory of a businesses IT infrastructure. It sounds as simple as asset management, but ASM is different in the way it approaches these responsibilities from an attacker’s perspective. The security of an enterprise's surface is paramount in the current era of cloud - but how can companies manage their cloud security posture...

Businesses today are under increasing pressure to level up data security as ransomware and data theft continue to rise. Data-first security solutions provide businesses with next-generation protection against exfiltration while maintaining accessibility for day-to-day operations, even during an attack. In this episode of the EM360 Podcast,  Dr. Eric Cole , CEO and Founder at  Secure Anch...

The Nature of Cybersecurity is undergoing rapid evolution. Cyber attacks are becoming more violent - and sophisticated. Big developments in tech over the last few years have led to some of the most shocking ransomware incidents. Are IT teams capable of keeping up, or are we leading towards cyber doomsday? In this episode of the EM360 podcast, Chief Research Analyst at IT-Harvest, Richard Stiennon...

In 2021, more than half of all widespread threats began with a zero-day exploit that was targetted by threat actors before vendors could even make patches available.  With security teams now being put under immense pressure, what can organisations do to help secure their online presence against modern cyber threats? In this episode of the EM360 podcast, Content Producer Matt Harris talks to C...

When it comes to cybercrime and cybersecurity threats, social engineering attacks are unique in the way that they rely on human error versus software and operating system vulnerabilities.  This is because as technological defenses become more and more robust, cybercriminals are increasingly targeting the weakest link in the chain: people.  Using a variety of means both online and offline...

Cyber insurance helps to provide critical cover for those who need protection against digital threats. While businesses are responsible for their own cybersecurity, liability coverage can help provide crucial support to help them stay afloat when the worst happens. This includes the costs of investigating a cybercrime, recovering lost data and restoring of the systems. It can even recoup the loss...

Cyber risk intelligence is critical for businesses that operate in the digital world. It is the collection, evaluation, and analysis of cyber threat information by those with access to all-source information. Like other areas of important business intelligence, cyber threat intelligence is qualitative information put into action to help develop security strategies and aid in identifying threats an...

CIAM enables organisations to securely capture and manage customer identity and profile data, as well as control customer access to certain applications and services. Usually providing a variety of features including customer registration, self-service account management, and 2FA/MFA, the best CIAM solutions ensure a secure and seamless customer experience. But how can enterprises hit a balance be...

Andy Ramgobin, Principal Technology Evangelist at Technimove, talks about the Science of Cyber Security & Cyber Resiliency Periodic Table and how enterprises can fully understand the digital threat landscape

In this podcast, Richard Stiennon, Chief Research Analyst at IT-Harvest, joins Mackenzie Jackson, Developer Advocate at GitGuardian, to explore Secrets Sprawl or the phenomenon of (unwanted) secrets distribution across Git repositories and DevOps tools.

Testing application security challenges is essential to ensure that we are moving forward with cybersecurity technology, however many organisations are still unable to identify the key challenges within their infrastructure. As with most facets of life, many organisations are still rooted in traditional attitudes; they previously invested in one approach to security and they are skeptical of rocki...

Ensuring quality automotive products in the age of cyber crime is becoming harder and harder due to the amount of endpoints that can easily be compromised within the supply chain. Regardless of where you sit within an organisation, with the increase of hybrid working and remote work, risks of ransomware still remain at large. CyberAngel recently released a report that stated that there are vulnera...

Year on year, cybercriminals are expanding their attack toolkits and coming up with different ways to cause disruption across the enterprise. However, according to cybersecurity experts, deceptive technology can be used to effectively intercept these crimes.  Investigating this destructive attack vector in this week's episode of the Next Phase of Cybersecurity is Caro...

Within any sector, the automation of processes comes with technological, social and skill-gap orientated challenges, but cybersecurity really takes the  cookie.  The adoption of automation has certainly been widespread, with 95% of correspondents stating that they have automated some of their processes, but it always comes with challenges. According to a report by ThreatQuotient, on...

Building your career and starting a cybersecurity job comes with its perks, but it of course comes with its difficulties and shortcomings. Some people cite that the career can often result in low pay based on the amount of labour that's put in, while others find the career attractive but are unsure at what level to start with. One of the biggest problems facing organisations today is the lack...

Implementing the best software security practices in 2021 is an absolute minefield when there are varying different softwares and technologies that all seem to be promising the same thing. For many application developers, the use of open-source libraries grants them greater freedom when developing their apps but simultaneously leaves them vulnerable. Application security remains a corner ston...