One of the growing challenges CIOs and CISOs must grapple with as they expand their use of cloud services is how to rationalize their collection of identity, access and privilege control systems operating across their network environment.

Replacing multiple existing systems with a single platform can often go against the grain of traditional practices. One reason for that, argues Bassam Al-Khalidi, co-CEO & co-founder of Axiad in the podcast, is that publications and analysts still tend to focus on best-of-breed solutions and capabilities within the identity and access management (IAM) technology market.  

“There is no category for that one platform across the board… that will address the different use cases, whether it's privileged-non-privileged device authentication, user or application authentication,” and which can manage all levels of security across multiple cloud environments, Al-Khalidi says.

This podcast is sponsored by Axiad.

Guests: Eric Brown, cybersecurity director, enterprise identity and access management, SAIC (left) and Bassam Al-Khalidi, co-CEO & co-founder, Axiad (right).

Host: Wyatt Kash, SVP, Content Strategy, Scoop News Group

Look for more coverage of “IT Security Modernization” on www.cyberscoop.com/listen

Rationalizing the collection of identity, access and privilege control systems

Episode 1 of 5: Traditional security perimeters are no longer enough to protect sensitive data. ThreatLocker CEO and co-founder Danny Jenkins discusses with host Wyatt Kash why zero trust and least privilege access are foundational to how government enterprises should secure their operations today. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

Tackling AI-powered threats with least privilege access, with ThreatLocker CEO Danny Jenkins

Episode 2 of 5: It’s crucial to review and restrict the permissions granted to applications, especially those with access to sensitive data. ThreatLocker CEO and co-founder Danny Jenkins talks with Scoop News Group's Wyatt Kash and outlines a three-step process for handling these permissions to better secure systems. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

Managing application access to minimize attack surfaces, with ThreatLocker CEO Danny Jenkins

Episode 3 of 5: BYOD (Bring Your Own Device) policies and IoT (Internet of Things) devices create vulnerabilities, exposing networks to ransomware and other threats. ThreatLocker CEO Danny Jenkins discusses with Scoop News Group's Wyatt Kash how implementing a layered approach to network security, including focusing on dynamic access controls and robust encryption measures better protects government data. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

Addressing network vulnerabilities posed by unmanaged devices with ThreatLocker CEO Danny Jenkins

ThreatLocker CEO Danny Jenkins emphasizes the importance of limiting local administrator privileges. He also advocates for Enterprise Privilege Management (EPM) solutions and effective user communication to balance security with productivity. 

Managing the risks of local administrator privileges | ThreatLocker's Danny Jenkins

Episode 5 of 5: Behavior-based detection and dynamic threat intelligence are essential to enhancing security operations and reducing cyber threat response times, says ThreatLocker CEO Danny Jenkins. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

The evolving landscape of detection in a zero-trust environment | ThreatLocker's Danny Jenkins

As AI-enabled workloads introduce complex and unseen security vulnerabilities, Lenovo’s Nima Baiati and SentinelOne’s Melissa K. Smith say securing the endpoint is paramount for IT professionals. This podcast was produced by Scoop News Group for CyberScoop and underwritten by Lenovo and SentinelOne.

Lenovo’s Nima Baiati and SentinelOne’s Melissa K. Smith on the necessity of endpoint security

As AI-driven assaults add a new dimension to the escalating volume of cyberattacks, chief information security officers— and the traditional cybersecurity tools they rely on — are struggling to keep up. Trinity Cyber Chief Product Officer Mike Denning breaks down how Full Content Inspection shifts cyber defense from endless alerts to automated, in-line threat disruption. This podcast was produced by Scoop News Group, for CyberScoop, and sponsored by Trinity Cyber. 

Trinity Cyber's Mike Denning on the power of Full Content Inspection technology

As identity sprawl grows, Optiv + ClearShark SVP of Revenue Michael Saintcross says cybersecurity leaders must pivot from traditional ICAM strategies to solutions that offer granular control and "zero standing privilege" to defuse advanced threats.

Optiv + ClearShark's Michael Saintcross discusses 'zero standing privilege'

Cisco security experts argue that the solution to rising internal cyber risks isn't just about blocking bad actors but enabling unwitting employees with invisible security, precise policies, and powerful threat intelligence. The podcast was produced by Scoop News Group for CyberScoop and sponsored by Cisco. 

Cisco's Linda Michels and David Gormley on defending against insider threats

Larry Ponemon, chairman and founder of the Ponemon Institute,  talks with Wyatt Kash about the growing need for enterprises to leverage the right kind of threat intelligence.

The Value of Threat Intelligence

Travis Farral, director of security strategy for Anomali, talks about the many benefits of threat intelligence and what is being done to disrupt adversaries through counterintelligence initiatives. Sponsored by Anomali.

How threat intelligence leads to counterintelligence, explains Anomali's Travis Farral

With massive networks at federal government agencies, a workforce clamoring for the ability to work collaboratively and pushes from Congress to move away from legacy systems, cybersecurity is monumental concern.

Nearly every federal organization struggles with cost-effective cybersecurity risk management against the backdrop of today’s advanced threats, the shortage of skilled cybersecurity talent, and countless compliance regulations and security mandates. So can agencies fix their problems with adversaries pounding away at their systems every day?

Two Cisco executives, Will Ash and Doug Cowan, talked with CyberScoop Managing Editor Greg Otto about the challenges that must be faced when dealing with cybersecurity inside the government, how the change doesn't happen overnight, and what new technologies provide in the way some relief.

Security strategies that merge with modernization

With millions of indicators contained in threat intelligence data, it's important for analysts to stay focused on worthwhile information that could indicate a data breach for their particular organizations, says Jessica Ferguson, director of security architecture at Alaska Airlines. Sponsored by Anomali.

Guest: Jessica Ferguson, director of security architecture

How to make threat intelligence actionable, explains Alaska Airlines' security architecture director

Henry Sowell, Technical Director for Hortonworks spoke with CyberScoop on how open source systems allow for that flexibility and scalability, especially at a time where the onslaught of threats has never been greater. Sponsored by Hortonworks.

Guest: Henry Sowell, technical director

Open source's security scalability and flexibility with Hortonworks' Henry Sowell

Global Security Advocate Thomas Fischer talks with CyberScoop's Greg Otto about the mind shift companies are going to have to embrace if they want to be in tune with GDPR once it goes into effect in May.

Episode 1 - Thomas Fischer

In the latest CyberScoop Radio podcast, Chris Niggel, Okta's director of security and compliance talks about how identity management can be the catalyst to turn shadow IT into distributed IT. By implementing a strong tool, users can get their work done at any time from any place, while security teams can be confident their enterprise's data stays where it should. Sponsored by Okta.

Guest: Chris Niggel, director of security and compliance

How Identity Can Control Shadow IT with Okta's Chris Niggel

One of the bigger stipulations in GDPR is that third-party service providers, including companies who run the ever-ubiquitous cloud, will also be responsible for following the correct protocols when it comes to protecting EU citizen data.

Yet just as companies keep throwing everything into the cloud, we keep seeing errors in the way companies are safeguarding personally identifiable data.

If you have been following the work of Chris Vickery, you know how easily these errors can be found. Vickery, ‎Director of Cyber Risk Research for California-based Upguard, has been finding misconfigured cloud instances all over the internet. 

Just in the past year, Vickery has found openly discoverable cloud instances at places like a Florida credit monitoring firm, media behemoth Viacom, and even at the Department of Defense. Each finding had enough PII to keep privacy officers sleepless for weeks. 

While those incidents were all based in America, Vickery recently came across a similar breach at french marketing firm Octoly, which caters to European social media influencers. 

In a few weeks, Octoly's response to such a finding is going to possibly be under much more scrutiny. I talked to Vickery and Upguard CEO Mike Baukes about how they see these security incidents playing out under GDPR, and whether cloud providers will lead the way when it comes to breach response.

Episode 2 - Upguard's Chris Vickery and Mike Baukes

The creator behind the zero-trust network model, John Kindervag, talks about why “trust” has become a vulnerability that needs to be mitigated like other vulnerabilities and where to start. Sponsored by Palo Alto Networks.

Guest: John Kindervag, VP and principal analyst

How to embrace zero trust into network security with John Kindervag from Palo Alto Networks

Greg & Jen debate what the charges against Julian Assange really mean, a new plan to get people into the infosec workforce and a whole new spin on the word “cyberspace.” 

In our weekly interview, we talk with Eric Heitzman from Security Compass, who looks to peel back all the buzzwords and tell us some practical ways on how DevSecOps can work for your organization.

Is Julian Assange really a hacker?

The president is pushing a very weird false narrative on CrowdStrike. FedEx shareholders are fighting over NotPetya and bug bounty companies may have some workforce issues in California.

In our interview, we talk with Keenan Skelly of Circadence about the gamification of cybersecurity training and how enterprises are learning to teach EVERYONE about cybersecurity.

CrowdStrike's week in Conspiracy Theory Hell

We discuss the findings of a 2019 C-suite survey that explores how leaders are incorporating cybersecurity more holistically into their enterprises. Sponsored by Deloitte.

Guest: Deborah Golden, Leader of Deloitte’s U.S. Cyber Practice and Principal in Deloitte Risk and Financial Advisory

You can hear more from the “Cyber Everywhere” series on our CyberScoop radio channels on www.cyberscoop.com/listen

Cyber Everywhere: Challenges in risk management with Deloitte's Deborah Golden

Right before the world drastically changed due to the COVID-19 pandemic, the craziest story in cybersecurity was the Vault 7 trial. With that ending in a mistrial, Greg Otto and Jeff Stone look at how the government failed to get a conviction, what we learned about the CIA and when, if ever, we could see a new trial.

What happened with the Vault 7 trial?

In this episode, Greg Otto talks with Adam Darrah, director of intelligence at Vigilante, about hacker gangs on the dark web, how they run their ransomware operations, and if the cybersecurity community get ever get past the mindset of shaming victims when they are hit with a breach.

How do you find a ransomware gang on the dark web?

When the coronavirus pandemic required federal offices to start closing, Oak Ridge National Laboratory — the largest Department of Energy science and energy laboratory — had to quickly adjust like so many others. All but 1,000 of the lab’s 6,000 staff suddenly needed to conduct their work remotely.

The lab’s CISO, Kevin Kerr, shares how it's DevSecOps team, coupled with crowdsource partners, are keeping the remote workforce safe as they move to implement collaboration tools quickly. Sponsored by Synack.

Guest: Kevin Kerr, Chief Information Security Officer, Oak Ridge National Laboratory

Look for more coverage of “IT Security Modernization” on www.cyberscoop.com/listen

DevSecOps to bring secure tools to the remote workforce, with Oak Ridge National Lab's CISO

CyberScoop delivers leading cybersecurity news with a devoted audience of information security leaders and power players in the public and private sectors.

CyberScoop

Popular tracks