Name: Richard Lewis, Best Practices for Security Minded Organizations & Application Security Development by Secure Talk
Duration: 42 min 56 s
Description: Richard Lewis shares his experience and insights related to creating a security minded culture inside organizations and leading people-focused application security development.

Chris Patteson, Field Risk Officer at LogicGate, explains why compliance doesn't equate to security and why this is a common misconception in corporate boardrooms. Chris talks about the difference between compliance with an industry or regional regulatory agency related to privacy and data protection doesn't mean that a company's systems are secure.  He also introduces some best practices for monitoring and improving an organization's compliance and security posture.

https://www.logicgate.com/

Why Compliance Doesn't Equate to Security

Pascal Rosenberger is the Co-Founder and CEO of Eggheads.ai, a conversational microlearning and communication platform that allows businesses to unlock the simplicity and popularity of chat for trainings, internal communication and knowledge management.

Pascal talks about the importance of cyber security training, how to provide it in an engaging manner, and how best to measure the results.

Eggheads
https://eggheads.ai/

Live Interactive Example of Chat Based Instruction
(Hint: You will need to respond to the questions.)
https://eggheads.ai/chat/l9pw61xez1v


Thank you for listening to the Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

Chat-based Cybersecurity Education

Scott McCrady is the CEO of SolCyber a provider of cybersecurity as a service.  Scott talks about the role that a managed security service provider(MSSP) plays in the overall strategy for securing data and infrastructure and explains why SolCyber is primarily focused on serving the start-up and small-medium enterprise (SME) market.  He also details the critical ingredients that comprise an effective MSSP offering.

Prior to SolCyber, Scott built the Asia-Pacific-Japan (APJ) business at Symantec where he ran the global Managed Security Service, and the Symantec and Accenture Joint Venture. He then transitioned to FireEye pre-IPO to create their global MSS business and led the development of the APJ market.

SolCyber
https://solcyber.com/

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

Managed Security Services for Start-Ups and SMEs

Sagi Brody co-founded Webair in 1998 and is now the CTO of Opti9, a leading hybrid cloud solutions provider specializing in digital transformation, data storage, DevOps, backup and recovery, compliance-driven migration, managed cloud services, and cloud-first application services. 

As the CTO of Opti9, Sagi is responsible for product development, and research and development (R&D). He has extensive experience in all aspects of the cloud and interconnection industries, including infrastructure, networking, software development, automation, platforms, security, global network buildouts, and compliance. 

In this episode Sagi explains the differences between backups, disaster recovery, and cyber resilience and talks about benefits of working with a managed security service partner (MSSP).

Opti9
https://opti9tech.com/

The Secure Talk Podcast
https://securetalkpodcast.com 

Thank you for listening to The Secure Talk Cybersecurity Podcast!

The Importance of, and Differences Between, Cyber Resilience, Disaster Recovery, and Backups

JT Taylor, Senior Director of Fraud Investigations and Operations at ID.me, talks about synthetic identity theft, what it is, and how to prevent it. He also discusses some of the latest social engineering methods, and explains how ID.me has helped to significantly reduce the amount of fraudulent claims against government agencies.

ID.me
https://www.id.me/

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

How to Prevent Synthetic Identity Theft

Heath Adams, aka "The Cyber Mentor," is the Founder and CEO of TCM Security, an ethical hacking and cybersecurity consulting company.  Heath is a CISSP and has received numerous credentials including QSA, PNPT, OSCP, Security+, Network+, and A+. And, while he enjoys ethical hacking Heath also loves to teach. 
His courses have been taken by over 170,000 people on multiple platforms including Udemy, YouTube, Twitch, and INE.  

In this episode of the Secure Talk Podcast, Heath talks about how he got his start in ethical hacking, what are the essential skills needed to become an ethical hacker, how he developed his online courses. Heath gives advice to those who wish to either learn more about ethical hacking or seek a career as an ethical hacker or penetration tester.  He also shares some tips for business owners and consumers on how to improve their cybersecurity posture.

TCM Security
https://academy.tcm-sec.com/

Heath on Social Media:
LinkedIn - https://linkedin.com/in/heathadams
Twitter - https://twitter.com/thecybermentor
YouTube - https://www.youtube.com/c/thecybermentor
Twitch - https://twitch.tv/thecybermentor

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

Becoming an Ethical Hacker

Graham Brooks, Senior Security Architect at Syxsense, discusses the recently released research from Syxsense and Enterprise Strategy Group (ESG) that shows that unmanaged device utilization is resulting in an increasing number of security incidents. Graham also talks about the "must haves" for any endpoint management platform and explains how IoT devices, including those with a Human-Machine Interface (HMI), can be managed.

Syxsense
https://www.syxsense.com/

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

The Endpoint Management Vulnerability Gap

Joe Gross is the Director of Solutions Engineering at Graylog.  Joe talks about the development of Graylog's online community and best practices related to growing and increasing engagement with online communities.  Joe also spends some time comparing the different types of log management platforms, their feature sets and pricing models.

Graylog 
https://www.graylog.org/

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

How Online Communities Can Facilitate Information Sharing to Solve IT & Security Challenges

Eric Olden is the CEO of Strata the first distributed identity platform that solves the problem of fragmentation through a no-code software solution. He previously founded and exited Securant/ClearTrust and Symplified. He recently served as the SVP and GM at Oracle where he ran the identity and security business worldwide. Eric was a co-author of the SAML standard and has led the development of IDQL which solves policy, compatibility and security issues between multiple clouds.

In this episode, Eric talks about the development and evolution of different standards including SAML and IDQL, explains the importance of identity orchestration, and introduces some of the key tenets of multi-cloud resiliency and continuity. 

Strata
https://www.strata.io/

Hexa
https://hexaorchestration.org/

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

The Evolution of Identity Standards and Identity Orchestration

Nick Harrahill is the Director of Customer Support at Spin.ai.  In this episode of Secure Talk, Nick talks about some key findings in a recently released report on the security risks associated with SaaS applications.  He gives examples of the most common attacks and introduces some best practices to counter such attacks.

Spin.ai
https://spin.ai

Report on SaaS Application Risks
https://spin.ai/saas-application-risk-report/ 

The Secure Talk Cybersecurity Podcast
https://securetalkpodcast.com/

Cybersecurity Risks with SaaS Applications

Richard Lewis shares his experience and insights related to creating a security minded culture inside organizations and leading people-focused application security development.

Richard Lewis, Best Practices for Security Minded Organizations & Application Security Development

Secure Talk reviews the latest threats, tips, and trends on security, innovation, and compliance. 

Host Justin Beals interviews leading privacy, security and technology executives to discuss best practices related to IT security, data protection and compliance. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.

Richard Lewis, Best Practices for Security Minded Organizations & Application Security Development

Secure Talk

Related tracks