Building a Risk Based Security Program That Actually Works - Nick Leghorn - ESW #250 | Enterprise Security Weekly (Video) Podcast

Building a Risk Based Security Program That Actually Works - Nick Leghorn - ESW #250: Risk based security programs are all the rage, from managers looking to "trim" the security budget to regulatory bodies looking for excuses to fine your company. Nick is a security pro who has seen it all -- programs done well, programs done poorly,... by Security Weekly Podcast Network (Video)

31 min listen

Prepping for Security Incidents, Automated Validation & No-Code Automation Revolution - Amitai Ratzon, Jon Check, Thomas Kinsella - ESW #319: The reality is no organization is insusceptible to a breach – and security teams, alongside the C-suite, should prepare now to make the response more seamless once a crisis does happen. Based on his experience working 1:1 with security leaders in... by Security Weekly Podcast Network (Video)

44 min listen

Prepping for Security Incidents, Automated Validation & No-Code Automation Revolution - Amitai Ratzon, Jon Check, Thomas Kinsella - ESW #319: The reality is no organization is insusceptible to a breach – and security teams, alongside the C-suite, should prepare now to make the response more seamless once a crisis does happen. Based on his experience working 1:1 with security leaders in... by Enterprise Security Weekly (Video)

44 min listen

Auditor Meets Security Pt. 1 - Brian Tremblay - SCW #35: Auditor turned security professional joins Security & Compliance Weekly to talk about how security misconfigurations and vulnerabilities can lead to compliance problems and the need for organizations to adopt a process of continuous compliance.... by Security Weekly Podcast Network (Video)

37 min listen

How to Build an Insider Threat Program in 10 Steps - Part 1 - Anthony Palmeri - SCW #59: Mitigating insider threats is a key cybersecurity priority for any organization that works with sensitive data. And to do that, you need an insider threat program. Such a program not only is required by numerous cybersecurity regulations, standards,... by Security Weekly Podcast Network (Video)

34 min listen

Quantifiable Risk Metrics - Bringing Value to Your Security Program Part 2 - Ian Amit - SCW #12: Utilizing quantitative (vs qualitative) metrics in a security program is the first step in maturing it from a technical novelty to something a business can align with and see value from. Understanding where security fits into risk management. Visit ... by Security Weekly Podcast Network (Video)

27 min listen

Quantifiable Risk Metrics - Bringing Value to Your Security Program Part 1 - Ian Amit - SCW #12: Utilizing quantitative (vs qualitative) metrics in a security program is the first step in maturing it from a technical novelty to something a business can align with and see value from. Understanding where security fits into risk management. Visit ... by Security Weekly Podcast Network (Video)

31 min listen

Show, Don’t Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Application Security Weekly (Video)

43 min listen

Getting and Staying Cyber Ready with Smarter, Simpler Security and MDR - ESW #316 by Enterprise Security Weekly (Video)

36 min listen

Getting and Staying Cyber Ready with Smarter, Simpler Security and MDR - ESW #316 by Security Weekly Podcast Network (Video)

36 min listen

Show, Don’t Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Security Weekly Podcast Network (Video)

43 min listen

Defining Cyber Risk & Is the Market Ready for Integrated Cyber Risk Management? - BSW #265: Defining Cyber Risk With Bryan Ware This year, RSAC is happening amidst the backdrop of major geopolitical tensions with cyber impacts; a continued, lingering pandemic and a potential economic downturn that cyber adversaries can and have leveraged to... by Security Weekly Podcast Network (Video)

30 min listen

The Missing Link for Protecting Against Ransomware - Tim Williams - ESW #179: Tim Williams, Founder and CEO of Index Engines, joins us to discuss the cyber security software market and how it's focused on preventing ransomware attacks. How do you know if that line of defense fails? How do you prove that negative? Visit ... by Security Weekly Podcast Network (Video)

18 min listen

The Missing Link for Protecting Against Ransomware - Tim Williams - ESW #179: Tim Williams, Founder and CEO of Index Engines, joins us to discuss the cyber security software market and how it's focused on preventing ransomware attacks. How do you know if that line of defense fails? How do you prove that negative? Visit ... by Enterprise Security Weekly (Video)

18 min listen

ASW #239 - Patrick Vandenberg, Karl Triebes, Francesco Cipollone: Application security is messy and is getting messier. Modern application security teams are struggling to identify what's more important to fix. Cloud security and application security is getting squeezed all together. Modern vulnerability maturity... by Security Weekly Podcast Network (Audio)

81 min listen

0-Day Vulnerabilities & What's Next - Larry Maccherone - ASW #204: 0-day vulnerabilities pose a high risk because cybercriminals race to exploit them and vulnerable systems are exposed until a patch is issued & installed. These types of software vulnerabilities can be found through continuous detection but even... by Application Security Weekly (Video)

36 min listen

Whether It's Vulnerabilities or Children, We Like to Pick Favorites: All links and images for this episode can be found on CISO Series () While you do have to claim all of your vulnerabilities and your children, you don't have to like all of them. This episode is hosted by me, (), producer of CISO Series... by CISO Series Podcast

41 min listen

Pragmatic Approaches to Cybersecurity Maturity, Part 1 - SCW #40: There are a lot of ways to measure/assess the level of organizational maturity of security programs. But, how do you mature your organization? We will discuss practical steps, like prioritizing the to-do list, the balance between people, process, and... by Security Weekly Podcast Network (Video)

31 min listen

CSP #105 - Dear Auditor: Why is this a high risk finding? Can we talk?: CISOs often have a love/hate relationship with auditors, as it is the auditors that are placing judgment on the adequacy of company cybersecurity controls. Join this session from the perspective of an IT Audit leader and former CISO, as to how to view... by CISO Stories Podcast (Audio)

30 min listen

0-Day Vulnerabilities & What's Next - Larry Maccherone - ASW #204: 0-day vulnerabilities pose a high risk because cybercriminals race to exploit them and vulnerable systems are exposed until a patch is issued & installed. These types of software vulnerabilities can be found through continuous detection but even... by Security Weekly Podcast Network (Video)

36 min listen

Alert Overlords - SCW #59: This week, we welcome Anthony Palmeri, Enterprise Account Executive at Ekran System, to talk Insider Threats! Mitigating insider threats is a key cybersecurity priority for any organization that works with sensitive data. And to do that, you need an... by Security Weekly Podcast Network (Audio)

72 min listen

Cybersecurity Tips & Challenges in the Hybrid Work Era - Darren Guccione - ESW #239: As organizations shift to respond to an ever-changing landscape of cybersecurity challenges, cybercriminals are trying to stay one step ahead. The last two years have brought an explosion of ransomware attacks and other cybersecurity threats that prey... by Security Weekly Podcast Network (Video)

34 min listen

Cybersecurity Tips & Challenges in the Hybrid Work Era - Darren Guccione - ESW #239: As organizations shift to respond to an ever-changing landscape of cybersecurity challenges, cybercriminals are trying to stay one step ahead. The last two years have brought an explosion of ransomware attacks and other cybersecurity threats that prey... by Enterprise Security Weekly (Video)

34 min listen

ASW #204 - Larry Maccherone: 0-day vulnerabilities pose a high risk because cybercriminals race to exploit them and vulnerable systems are exposed until a patch is issued & installed. These types of software vulnerabilities can be found through continuous detection but even... by Security Weekly Podcast Network (Audio)

74 min listen

Building a Risk-Based Vulnerability Management Program - Bob Erdman - PSW #693: Risk-based vulnerability management is more than just a vulnerability scan or assessment. It incorporates relevant risk context and analysis to prioritize the vulnerabilities that pose the greatest risk to your organization This segment will explore... by Security Weekly Podcast Network (Video)

50 min listen

Clayton Fields, Javelin Networks - Enterprise Security Weekly #76: As a security specialist, Clayton has helped clients improve security programs across the world. A thorough understanding of business drivers coupled with the ability to diagnose risk has allowed Clayton to help companies avoid being a headline. Full... by Security Weekly Podcast Network (Video)

38 min listen

Clayton Fields, Javelin Networks - Enterprise Security Weekly #76: As a security specialist, Clayton has helped clients improve security programs across the world. A thorough understanding of business drivers coupled with the ability to diagnose risk has allowed Clayton to help companies avoid being a headline. Full... by Enterprise Security Weekly (Video)

38 min listen

The Joys Of Scoping pt. 2 - Steve Levinson - SCW #11: Steve Levinsonis the Vice President - Risk, Security & Privacy at Online Business Systems. Steve’s strong technical and client management skills combined with his holistic approach to risk management resonates with clients and employees alike.... by Security Weekly Podcast Network (Video)

32 min listen

The Joys Of Scoping - Steve Levinson - SCW #11: Steve Levinsonis the Vice President - Risk, Security & Privacy at Online Business Systems. Steve’s strong technical and client management skills combined with his holistic approach to risk management resonates with clients and employees alike.... by Security Weekly Podcast Network (Video)

38 min listen

Shift Left, NOT S#!T LEFT - Larry Maccherone - ASW #182: If you attempt to shift security left without adaptation, it'll feel a lot more like S#!T LEFT to the development teams but most security groups lack the mindset and skills to do it in a way that works well with modern development approaches and tools... by Security Weekly Podcast Network (Video)

39 min listen

Discover this podcast and so much more

Building a Risk Based Security Program That Actually Works - Nick Leghorn - ESW #250

Building a Risk Based Security Program That Actually Works - Nick Leghorn - ESW #250

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes