12-15-20 - The People Closest to You Will Hurt You

View this email in your browser

This week's episode of CISO/Security Vendor Relationship Podcast

The People Closest to You Will Hurt You

This week's episode

is hosted by me, David Spark, producer of CISO Series and Mike Johnson. Our sponsored guest this week is Dr. Deanna Caputo, chief scientist for behavioral sciences and cyber security capabilities, senior principal behavioral psychologist for MITRE. All three of us discussed:

Insider threats will probably hurt you before anyone else.

That's the unfortunate reality. It's not that you're doing something inherently wrong, it's just the fact that those are the people who have access to your data. Knowing this, a person can turn against you or be used as an unwitting pawn. There are warning signs such as downloading lots of sensitive data, requesting access to data that's not part of their job, and spending lots of time in the office outside of office hours.

Adapt to new hiring practices or you'll lose out on cyber talent.

The old practice of "you fit our needs perfectly" must be retired in cybersecurity. That includes the long list of required knowledge to have beforehand and the need to physically be in the office. If you relax those two and most importantly, be willing to train, then you will fill those positions. But it requires those critical steps.

What do you do after you get a certification?

Do a friggin' victory lap. One way to do that is to simply announce it on social media. Everyone who has gone through the hazing process of taking a test like the CISSP knows what goes into it, and they're happy to applaud your success. But that excitement is short and fleeting. Next step is to ask yourself why did you get that certification in the first place. What did you want to prove? Tell that story, especially to your boss and make sure it comes up in your performance review.

Special thanks to this week's podcast sponsor, Dtex.

Traditional Employee Monitoring solutions are creepy. Capturing screenshots, recording keystrokes, monitoring web browsing and following social media activities is unnecessary and damages culture. DTEX InTERCEPT is the first and only solution that delivers the real-time workforce monitoring capabilities today’s organizations need and employees will embrace. Learn more at dtexsystems.com.

Cyber Security Headlines

This week's sponsor of

Cyber Security Headlines

is ReversingLabs.

This Friday [12-18-20] We're Hacking the Crown Jewels

Please join us on Friday, December 18th, 2020 at 10 AM PT/1 PM ET for our LAST VIDEO CHAT of 2020: “Hacking the Crown Jewels: An hour of understanding what data you have, what's REALLY important, where it resides, and who's accessing it and when”.I'll be leading this discussion with Kate Kuehn, svp, vArmour and Ramy Houssaini, chief cyber and technology risk officer and group privacy officer, BNP ParibasWatch the previewREGISTER

STICK AROUND FOR THE CYBERSECURITY SPEED DATING!

Immediately after the video chat (11:00 AM PT/2:00 PM ET) we'll rollover to our meetup where we'll match everyone who shows up with another cybersecurity professional. And we'll do it five times in less than 30 minutes.

Thanks to our sponsors vArmour and OKERA

Subscribe to all our podcasts

Click any of the podcasts below to get access to the subscription feeds. If you're already a subscriber, thank you!