10-17-19 - Clearance Sale: All Security Gaps Must Go!

Clearance Sale: All Security Gaps Must Go!

CISO | Security Vendor Relationship Series

This week's episode of Defense in Depth

Cyber Defense Matrix

 On this episode of Defense in Depth:

Co-host Allan Alford and our guest Sounil Yu, the creator of the Cyber Defense Matrix, and former chief security scientist for Bank of America, discussed:

The Cyber Defense Matrix's original purpose was to understand the vendor landscape.

  • Users have found lots more uses for the matrix, such as seeing those same gaps in technology, people, and processes.

  • By visualizing, you can see also where you have too much and you can actually get rid of technologies.

  • The matrix provides structural awareness of your vulnerabilities.

  • The matrix admittedly gets a little wonky when cloud technologies are introduced. They often bleed across categories, not neatly fitting into any specific buckets.

Special thanks to this week's Defense in Depth podcast sponsor, Verodin.

Verodin

The Verodin Security Instrumentation Platform proactively identifies gaps in security effectiveness attributable to equipment misconfiguration, changes in the IT environment, evolving attacker tactics, and more. Learn how Verodin, part of FireEye, has made it possible for organizations to validate the effectiveness of cyber security controls, thereby protecting their reputation and economic value.

Davi Ottenheimer, security Inrupt, on the limitations of awareness education

October 25th: Webinar: How to Create Attractive Entry Level Cybersecurity Jobs

Join me Friday, October 25th at 10 AM Pacific for this highly interactive video chat webinar on the topic of bringing in more great talent into the cybersecurity industry. I'll be the moderator welcoming both Taylor Lehmann, vp, CISO, athenahealth and Michael Piacente, managing partner, Hitch Partners. CISO Series webinars are not passive. Anyone who registers can be a participant as well. Watch the video and then register.

Sounil Yu, creator of Cyber Defense Matrix, on surviving the next wave of cybersecurity attacks

SUBSCRIBE TO BOTH PODCASTS

Go ahead and click on any of these links to subscribe to the podcast feed of your favorite podcast catcher.

If you're already a subscriber, THANK YOU! If you like either or both shows, please tell all your friends on social media and write a review on iTunes.