The Virtual CISO Moment

Virtual CISO resources: https://www.linkedin.com/groups/12095465/ https://www.vcisonews.com/ https://vciso.network/

Discussed in this week's wrap up: https://www.techrepublic.com/article/supply-chain-cyberattacks-jumped-51-in-2021/ https://threatpost.com/microsoft-zero-days-wormable-bugs/179273/ https://healthitsecurity.com/news/cisa-issues-guidance-on-cybersecurity-information-sharing https://www.nationalcybersummit.com/ https://secondchancebook.org

Chris Bedel, President and CEO of Bedel Security (bedelsecurity.com) talks about how the virtual CISO fits in to, compliments, and enhances financial institutions' information security program and posture. He also touches on history and future of the virtual CISO. If you're a virtual CISO for financial institutions or are interested in how a virtual CISO benefits financial institutions, this is a...

Discussed in this week's wrap up: https://www.techrepublic.com/article/credit-agency-warns-weak-cybersecurity-defenses-could-hurt-a-companys-credit-rating-even-before-an-attack/ https://www.techrepublic.com/article/fbi-investing-millions-in-software-to-monitor-social-media-platforms/ https://techcrunch.com/2022/02/07/irs-facial-recognition-id-me/ Ad link: https://www.amazon.com/Information-Securit...

Bob Quandt, owner of Bullseye Compliance (https://bullseyecompliance.com) joins VCM for a conversation that ranges from issues and trends in SMB security, entrepreneurship and making a difference, fitness and stress management, application of military experience to infosec, and more!

Email remains the most common vector for criminals to exploit. Chuck Sirois discusses how PhishFacts (https://phishfacts.com) can help SMBs identify misconfigured email configurations that criminals may leverage.

The Certified Information Systems Security Professional, or CISSP, is considered by some to be the pinnacle of information security professional certifications, on par with the CPA. But why is that, and what differentiates it from other certifications? And why is it important for virtual CISOs to have and maintain this certification?

Ed Carroll joins us to discuss many of the initiatives he's involved with, including Edison Marks to apply AI to help SMBs (https://edisonmarks.com/), the Carolina Cyber Center to help with information security in North Carolina and beyond (https://carolinacybercenter.com/), and an update on the RETR3AT cyber security conference at beautiful Montreat College (https://www.montreat.edu/about/events/...

While watching a report on the news this morning about items to consider to counter possible Russian cyber attacks related to the Ukraine-Russia crisis, I felt sadness. The reason may surprise you, or not. Find out why on today's special midweek installment of The Virtual CISO Moment.

Craig Sandman of Symbol Security (https://symbolsecurity.com/) and vCISONews (https://www.vcisonews.com/) joins us to discuss the importance of effective security awareness training for SMBs and the virtual CISO role.

Chief Information Security Officer David Baker gives insight into the challenges of an SMB CISO.  Guest opinions are their own and not the views of their employer.

Threat awareness sources are many. One that is often overlooked is the news. Hear why being plugged into current events in real time is important. (And Greg says "yes I know the difference between emulate and emanate").

Information security is difficult without a plan. Don't spin your wheels. Find a framework, find a coach, and find success.

We delve in a bit deeper into business continuity exercise types - which is right for your business? We also have a special invitation.

The security posture of a company is rooted in the company's culture - its approach and attention to information security across all levels of the organization.

Morning thoughts on how the virtual CISO fits in an organization, using the Three Lines of Defense (3LoD) model to illustrate.

Business Continuity Table Top Exercises (or BCP TTX, since it's easier to type) are important for identifying gaps in business continuity, disaster recovery, and incident response programs. Don't ignore this essential exercise, and don't treat it as just an information technology exercise.

The virtual CISO is not a new discipline, but it is evolving. Like other security specialties, there are different approaches and skills offered. This is the first of several upcoming discussions on the virtual CISO space.  greg.schaffer@vcisoservices.com

After a hiatus, The Virtual CISO Moment returns with useful information from security experts who understand small and midsized business (SMB) security needs. No frills, no glamour, no transparent whiteboard text, no complex graphics, and no script - just a few minutes every Tuesday discussing SMB information security risk issues.

Metrics - security leaders talk about them often. But what is the one critical question they, and you, should ask about information security metrics?

The episode compares COVID-19 and information security risks...through a Chihuahua.

Many small business owners are frightened now, unsure of how their business will survive. Many in the United States have applied for the PPP. But the combination of economic calamity, fear of infection, stress from lives upended , all create an environment for criminals to exploit. It's okay to be afraid, but don't let it lead you to becoming a victim.

The COVID-19 pandemic has disrupted business operations on an unprecedented scale. It also presents an opportunity to learn and grow business operations. This will end, and the time to prepare for the "new normal" is now.

The "hacker in a hoodie" image has been used for years by the media to call attention to articles about cyber security incidents. It's time that graphic is retired. Here's why.

FUD - Fear, Uncertainty, and Doubt - is sometimes used to sell products or services. One popular FUD element is statistics, whether spinning valid numbers or making them up. Regardless of the type of FUD, bowing to the instinctual urges to respond can obfuscate genuine information security risks.