Join these two stupids, as they stupidly discuss what not to do during a security incident, because it could make you, wait for it, look stupid.
https://www.youtube.com/watch?v=85aiUbvD-k0
14 Sept 2024
CROWDSTRUCK!
Join Randy and Jim as they talk about the implications of last month's CrowdStrike outage, and how you, as a security leader, can help avoid that kind of impact in the future.
8 Jul 2024TRANSCRIPT
I scream - you scream - RED TEAM!
Join Randy and Jim as they talk about what a Red Team is, and is not, for your cybersecurity organization.
4 Jun 2024TRANSCRIPT
Getting our SAAS Kicked!
Hey there, Leader Today. In today's episode of Security on Tap, we dive deep into the world of Software as a Service (SaaS). Join Randy and Jim as they explore what SaaS is, why it poses significant security risks, and what steps you can take to mitigate those dangers.
We start with an eye-opening statistic: the average company used around 15 SaaS services in 2015-2016, but that number has skyrocketed to 150-200 today. This explosive growth has led to a shift where many non-core business processes are now housed outside the core business, creating a blurred network boundary and increasing vulnerabilities.
Randy breaks down SaaS for beginners, explaining how it works and citing major providers like Workday, Salesforce, and Microsoft 365. They discuss real-world breaches involving giants like Microsoft and Snowflake, highlighting the significant risks posed by SaaS environments.
The episode also delves into the challenges of managing third-party risk and the pressures faced by SaaS providers to grow rapidly, sometimes at the expense of robust security measures. They debate the need for industry standards or government regulations to ensure SaaS providers maintain stringent security protocols.
Finally, Randy and Jim offer practical advice for security practitioners, emphasizing the importance of understanding your company's critical business processes, assessing the risk posed by third-party vendors, and having contingency plans in place.
Whether you're a seasoned security leader or new to the field, this episode provides valuable insights into managing SaaS risks and keeping your organization secure.
1 Apr 2024
Physician, heal thyself!
On this gripping episode of Security on Tap, we undertake a detailed exploration of the recent, impactful cybersecurity incident at Change Healthcare. We outline the events that unfolded on February 21st when Change Healthcare became the latest casualty of Black Cat/Alf V's sinister ransomware service. We shed light on the monumental repercussions this episode has had on the healthcare industry, disrupting pharmacies, SMB healthcare institutions, and even Medicare.
Additionally, we emphasize the critical importance of disaster recovery, business continuity planning, and rigorously evaluating third-party risks and supply chain vulnerabilities. We further broach topics including the security-related implications of mergers and acquisitions, and the vital need for sound identity verification and advanced authentication measures in the face of a surge in cyber threats.
The episode also delves into more profound aspects of cybersecurity, such as 502 compliance, privileged access management, and the rising threat of social engineering. We demonstrate how essential cybersecurity training for employees can drastically minimize potential threats in sectors like healthcare.
12 Mar 2024
Mission Impossible
Join Randy and Jim as they try to do the impossible. How to get the tech team to do what you want them to do when they don't want to do it. It's not as hard as you think. But doing the intro to a podcast is, which you will discover if you listen in.
15 Jan 2024
Gone Phishing!
Join Randy and Jim as they discuss why phishing is still around and what security leaders can do about it.
5 Dec 2023
Risky (Cyber) Business
Join Randy & Jim as they make mistakes, manage risk, and enjoy a cold one.
21 Nov 2023
So Ya Wanna Do the Cyber, do ya?
Join Randy Fields and Jim Desmond as they explore what it takes to break into the field of CyberSecurity. Certifications, education, and experience all converge to make the Peruvian Purple Unicorn.
5 Nov 2023
Solarwinds, The SEC, and Captain Needa
Randy & Jim discuss the Solarwinds hack, the SEC charges and some Star Wars thrown in there for good measure.
4 Oct 2023
What Drives Us Crazy!
Join Randy & Jim as they talk about what really drives them crazy with frustration in security. Besides each other.
31 Aug 2023
Security Automation and YOU!
Hello Mr. Roboto! I want to thank you!
The musical brilliance of Styx aside, automating and orchestrating tasks within your security organization can save you big time. Join Randy & Jim as they talk about this great topic, Tropic Thunder, Star Trek, and oh yeah, security automation.
25 Jul 2023
Build it or Buy it?
Join Randy Fields and Jim Desmond as they talk about the staffing challenges associated with cybersecurity. With millions of jobs in the field, how does a leader decide when to go outside for a role, hire a contractor, or develop someone internally? They come to you live from Jonathan's Grille in beautiful Bellevue, TN! So grab your favorite beverage, the tap is open!
12 Jul 2023
The Vulnerability Management Hamster Wheel
Randy and Jim jump into Germantown Cafe, and right onto the Vulnerability Management Hamster Wheel! Join them as they talk about the need for prioritization, Tribble management, and a good sewer system. Oh, and they also talk about how to get your organization working the right way toward getting off that never-ending wheel!
11 Jun 2023
Security & Trust: How important is trust?
Randy & Jim tackle the important topic of trust for security leaders. Everything you do introduces friction to the business, necessary friction to be sure, but some may not see it like you do. How do you wield trust so that your friction is understood and even desired?
25 May 2023
Security on Tap Episode 1 - Welcome and Generative AI
Join our intrepid heroes, Randy and Jim as they talk about their new podcast, focused on security, leadership and things on tap, AND talk about the security implications of Generative AI....Is Skynet coming? If so, I would be the first to welcome our new cyber overlords with a quick shout out to Miles Benedyson.
Inside a recent episode
Don't Call Me Stupid!
Published 5 Nov 2024 · Transcript excerpt
[…] It is bad. That's why you have your after action reviews after an incident and you're able to articulate to senior leadership to say, remember the widget incident that cost us X amount of money? Well, we can prevent something like that from happening again by making sure our data backups are immutable or whatever that is. I disagree with prevent, reduce the likelihood. Never guarantee anything in security. That's true, yeah. Yeah, because you never know. You never know. And that's the other thing, right? There are no certainties during an incident. The only thing, I guess we already covered this a little bit, but the only certain thing you're certain about is the facts. […]
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
