Episode 2 of 5: It’s crucial to review and restrict the permissions granted to applications, especially those with access to sensitive data. ThreatLocker CEO and co-founder Danny Jenkins talks with Scoop News Group's Wyatt Kash and outlines a three-step process for handling these permissions to better secure systems. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

Managing application access to minimize attack surfaces, with ThreatLocker CEO Danny Jenkins

Episode 3 of 5: BYOD (Bring Your Own Device) policies and IoT (Internet of Things) devices create vulnerabilities, exposing networks to ransomware and other threats. ThreatLocker CEO Danny Jenkins discusses with Scoop News Group's Wyatt Kash how implementing a layered approach to network security, including focusing on dynamic access controls and robust encryption measures better protects government data. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

Addressing network vulnerabilities posed by unmanaged devices with ThreatLocker CEO Danny Jenkins

ThreatLocker CEO Danny Jenkins emphasizes the importance of limiting local administrator privileges. He also advocates for Enterprise Privilege Management (EPM) solutions and effective user communication to balance security with productivity. 

Managing the risks of local administrator privileges | ThreatLocker's Danny Jenkins

Episode 5 of 5: Behavior-based detection and dynamic threat intelligence are essential to enhancing security operations and reducing cyber threat response times, says ThreatLocker CEO Danny Jenkins. This episode is part of a 5-episode series produced by Scoop News Group for CyberScoop and sponsored by ThreatLocker.

The evolving landscape of detection in a zero-trust environment | ThreatLocker's Danny Jenkins

As AI-enabled workloads introduce complex and unseen security vulnerabilities, Lenovo’s Nima Baiati and SentinelOne’s Melissa K. Smith say securing the endpoint is paramount for IT professionals. This podcast was produced by Scoop News Group for CyberScoop and underwritten by Lenovo and SentinelOne.

Lenovo’s Nima Baiati and SentinelOne’s Melissa K. Smith on the necessity of endpoint security

As identity sprawl grows, Optiv + ClearShark SVP of Revenue Michael Saintcross says cybersecurity leaders must pivot from traditional ICAM strategies to solutions that offer granular control and "zero standing privilege" to defuse advanced threats.

Optiv + ClearShark's Michael Saintcross discusses 'zero standing privilege'

Cisco security experts argue that the solution to rising internal cyber risks isn't just about blocking bad actors but enabling unwitting employees with invisible security, precise policies, and powerful threat intelligence. The podcast was produced by Scoop News Group for CyberScoop and sponsored by Cisco. 

Cisco's Linda Michels and David Gormley on defending against insider threats

If you introduced yourself at a dinner party and a short time later the host forgot your name, maybe you'd be confused and a little frustrated. The same goes for consumers when interacting with a brand, signing up or verifying their identity. "That kind of experience is something we see on a regular basis in many consumer applications where you're asking for information that isn't necessary or maybe you already have and should not be asking again," says Sean Brown, Program Director for IBM's identity and access management team. "And with that friction, consumers lose confidence." 

For more stories on identity and access management, visit SecurityIntelligence.com.

Brown and Martijn Loderus, Global CIAM Lead for IBM, join the podcast for a discussion of consumer identity and access management, or CIAM. The conversation covers the distinction between CIAM and traditional identity and access management; what happens when there's friction in the consumer authentication process; and how to create friction-less CIAM experiences for consumers without reducing any levels of security.

Consumer Identity and Access Management (CIAM): Reducing Friction Without Reducing Security

What are the top findings from the Cost of a Data Breach Report 2020? Charles DeBeck, a cyber threat intelligence expert with IBM X‑Force IRIS, talks about what drives costs higher for some organizations. "We observed a growing divide between organizations that were well prepared and organizations that weren't," DeBeck says.

DeBeck covers more highlights from the report, including top root causes such as cloud misconfiguration and compromised credentials. He also shares what the study found were the most successful security measures for mitigating costs: security automation and incident response readiness.

View highlights and download the report: https://www.ibm.com/security/digital-assets/cost-data-breach-report/

Time Is (Still) Money and Other Findings from the 2020 Cost of a Data Breach Report

"The idea of chaos engineering is essentially to help test resilience before an accident happens," says Itzik Kotler, co-founder and CTO of SafeBreach. 

Kotler joins Matthew Dobbs, Chief Integration Architect for the IBM Security Command Center, for a conversation about the value of testing systems and people through "dynamic but controlled chaos." They discuss training for the shifting adversary landscape and TTPs, who benefits from chaos engineering training, and what makes for a good simulation experience.

Read more about chaos engineering on the Security Intelligence blog: https://securityintelligence.com/posts/chaos-engineering-security-simulation-exercises-dynamic-threat-environments/

Training with Chaos Engineering

“Every cloud conversation should be also a security conversation,” says Anna Van Wassenaer, Cloud Business Development Leader, Europe, for IBM Security Services.

Abhijit Chakravorty, Partner & Cloud Security Competency Leader for IBM Security, joins Van Wassenaer for a conversation about why cloud strategy should go hand-in-hand with a security strategy. The conversation covers the cloud threat landscape; balancing CISO, CIO and developer objectives for cloud migration; and advice on where to start when developing a cloud security strategy.

For more on cloud security, visit the SecurityIntelligence blog: https://securityintelligence.com/category/cloud-protection/

Developing a Cloud Security Strategy

Welcome to the Security Intelligence Podcast, where we discuss cyber security industry analysis, tips and success stories. Join co-hosts Pam Cobb and David Moulton, security thought leaders and industry professionals as they discuss their experiences and expertise on the latest trends and developments in enterprise security. 

For even more security content, visit https://securityintelligence.com.

095940

Consumer Identity and Access Management (CIAM): Reducing Friction Without Reducing Security

Security Intelligence

Related tracks