Discuss: What Makes a Good Breach Response? - ESW #303

FromEnterprise Security Weekly (Video)

Start listening View podcast show

Discuss: What Makes a Good Breach Response? - ESW #303

FromEnterprise Security Weekly (Video)

ratings:

Length:

49 minutes

Released:

Jan 26, 2023

Format:

Podcast episode

Description

What makes a good breach response? What makes a bad one? Could we objectively measure them? How would we break down and rate a company’s breach response performance? Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw303

Released:

Jan 26, 2023

Format:

Podcast episode

Titles in the series (100)

A look at the current state of enterprise security solutions, including new products, features and industry reporting. Hosted by Paul Asadoorian and John Strand.

Skip carousel

Enterprise Security Weekly #9 - Sniffing Each Others' Farts: This week in the news no excuses to go Phish yourself, a services vendor helps you identify risk, the #1 privileged identity management solution (According to some), and a huge blow to the Endpoint Security Agent market. And we'll talk about how to... by Enterprise Security Weekly (Video)
27 min listen
Enterprise Security Weekly #4 - Patch Management by Enterprise Security Weekly (Video)
35 min listen
Enterprise Security Weekly #7 - Web Application Scanning: This week on Enterprise Security Weekly, tenable makes a strategic partnership to ease authenticated vulnerability scanning, avast announces a much faster antivirus engine, Risksense unveils cyber risk scoring that allows some other kind of scoring... by Enterprise Security Weekly (Video)
37 min listen
Enterprise Security Weekly #15 - Documentation: Ean Meyer joins us to discuss this topic as he wrote an article we discussed on a previous show. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode15 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
25 min listen
Enterprise Security Weekly #18 - News: Juniper's bug push into security, a big endpoint player goes IPO, and a firewall company enters the Anti-Virus game. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode18 Visit http://securityweekly.com/esw for all the latest... by Enterprise Security Weekly (Video)
26 min listen
Enterprise Security Weekly #16 - Privileged Alphabet Soup: Discuss privileged identity management with Paul and Santarcangelo. It is becoming more of trend. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode16 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
23 min listen
Enterprise Security Weekly #12 - Detecting Rogue In The Enterprise: Integration in the enterprise security space, Cisco cuts its work force, and Pwnie Express Paul Paget. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode12 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
42 min listen
Enterprise Security Weekly #27 - Win10 Ubuntu with John Strand: John Strand delivers a tech segment on how to use Ubuntu with Windows 10. Stay tuned! Full Show Notes: Visit for all the latest episodes! by Enterprise Security Weekly (Video)
13 min listen
Enterprise Security Weekly #5 - "SEIM": "Cyber Deception" comes to Defcon and IoT, Cisco makes a push for Voice over WiFi, Sumo Logic monitors your Lambdas, and identity management integrates with SEIM? All that and more so stay tuned! Full Show... by Enterprise Security Weekly (Video)
40 min listen
Enterprise Security Weekly #13 - News: Threat Intelligence gets funding, Security products in the cloud, incorporating virus totaling in your products, two factor authentication for voice-over IP. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode13 Visit... by Enterprise Security Weekly (Video)
29 min listen
Enterprise Security Weekly #3 - Vulnerability Management: Do you know how to manage security vulnerability? Paul and John Strand educate on the topic of vulnerability management. They explain how to have control of patching and have mitigation control. Full Show Notes:... by Enterprise Security Weekly (Video)
39 min listen
Enterprise Security Weekly #19 - Discussion: Combining network and endpoint analysis for the win, password management with endpoint security, deception and winning? Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode19 Visit http://securityweekly.com/esw for all the latest... by Enterprise Security Weekly (Video)
27 min listen
Enterprise Security Weekly #14 - Super Cyberman: Enterprise Security User Awareness Training and Paul dancing! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode14 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
24 min listen
Enterprise Security Weekly #8 - Securing "Air Gapped" Networks: Cisco makes an acquisition in cloud security, Palerra claims a first in the same space, Crowdstrike bundles prevent breaches? And Barracuda makes it easier to give them money for Next-Gen firewalls, all that and more so stay tuned! Full Show Notes:... by Enterprise Security Weekly (Video)
39 min listen
Enterprise Security Weekly #18 - Darkweb Monitoring: Darkweb monitoring, is it really worth it and how can it help your enterprise? Find out on this edition of Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode18 Visit http://securityweekly.com/esw for... by Enterprise Security Weekly (Video)
17 min listen
Enterprise Security Weekly #11 - Documentation and Quotes: This week Logrhythm has a free network monitoring tool, SAP HANA, the hottest technology you didn't see at Blackhat, free anti-ransomware, Beyondtrust product announcement and traps. Visit http://securityweekly.com/esw for all the latest episodes!... by Enterprise Security Weekly (Video)
45 min listen
Enterprise Security Weekly #17 - News: A behavior analytics company has a new release, endpoint security for vulnerabilities and threats, outsource your threat hunting, get with the flow on your network, and waiting in the wings to get bought. Full Show Notes:... by Enterprise Security Weekly (Video)
31 min listen
Enterprise Security Weekly #6 - IDS/IPS: This week is, well, rough, ServiceNow buys threat intelligence company, memory scanning in the hypervisor, and next-generation network segmentation and NAC, and John and I discuss the evolution of IDS and IPS! Full Show Notes Here:... by Enterprise Security Weekly (Video)
39 min listen
Enterprise Security Weekly #19 - Defending IoT Devices: Securing your data, and an account security solution, or ASS?, and securing IoT in the Enterprise! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode19 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
17 min listen
Enterprise Security Weekly #14 - News: Mcafee trademark dispute, customers want large security vendors?, do you trust your pin in the cloud, CyberArk struggles and embrace change! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode14 Visit... by Enterprise Security Weekly (Video)
31 min listen
Enterprise Security Weekly #25 - News: Juniper makes an acquisition, to IPO or not IPO, Ixia delivers an unprecedented visibility into virtual data center traffic, and much more in this week’s Enterprise News! Full Show Notes: Take the Security Weekly Survey: Visit for all the latest... by Enterprise Security Weekly (Video)
22 min listen
Enterprise Security Weekly #10 - It's For Stupid People: User behavior analytics wins and fails, the top 10 emerging security vendors (according to some), and virtually testing your network, all that and more so stay tuned! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode10 by Enterprise Security Weekly (Video)
41 min listen
Enterprise Security Weekly #21 - Using Bro In The Enterprise: Bro is a fantastic open-source tool, capable of analyzing packets at high speeds and big bandwidth. Learn how you can implement this open-source tool in your enterprise today, for the win! Full Show Notes:... by Enterprise Security Weekly (Video)
24 min listen
Enterprise Security Weekly #20 - Multi-Factor Authentication: Should we use Multi-factor Authentication for our Enterprise? Find out whether you should have a 2FA or not, here on Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode20 Visit... by Enterprise Security Weekly (Video)
21 min listen
Enterprise Security Weekly #21 - News: Rapid 7 makes a strategic integration, should you use artificial intelligence in your enterprise to replace your workforce?, what is your DDoS mitigation strategy?, a big social media company sets out to create an open-source project that will stick... by Enterprise Security Weekly (Video)
25 min listen
Enterprise Security Weekly #17 - Security Training for Enterprises: Plus John and I discuss security training for the enterprise, what will work work best for you? Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode17 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
19 min listen
Enterprise Security Weekly #16 - News: The run-time application self protection security market showing growth, cloud based access provider Duo Security unveils new single sign on for SaaS Applications, AlienVault Research and much more here on Enterprise Security Weekly! Full Show Notes:... by Enterprise Security Weekly (Video)
35 min listen
Enterprise Security Weekly #28 - Cyber Insurance, Michael Santarcangelo: Would your company benefit from purchasing a cyber insurance policy? What should you be covering? How are insurance companies assessing you? Full Show Notes: Visit for all the latest episodes! by Enterprise Security Weekly (Video)
21 min listen
Enterprise Security Weekly #13 - To MSSP or not to MSSP: To MSSP or not to MSSP is the question. All that and more on Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode13 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
15 min listen
Enterprise Security Weekly #23 - News: CyberArk announces endpoint privilege manager, Dome9 bring pay scale economics could security offering, dropbox announces network control capability to secure enterprise collaboration, and much more here on Enterprise Security Weekly! Full Show Notes:... by Enterprise Security Weekly (Video)
31 min listen

More Episodes from Enterprise Security Weekly (Video)

Skip carousel

A CISO’s Perspective, Defending Against AI & Ransomware Evolution - Kris Lahiri, Jim Broome, Mike Lyborg - ESW Vault: In this interview, join Swimlane Chief Information Security Officer, Mike Lyborg, and host Akira Brand as we discuss the value of cybersecurity marketplaces from a CISO perspective. Through insightful discussions, unpack the connection between... by Enterprise Security Weekly (Video)
47 min listen
Achieving Cyber Resilience, External Cybersecurity & Risk Reduction - Margarita Barrero, Andy Grolnick, Alexandre Sieira - ESW Vault: Organizations today are overwhelmed with the sheer magnitude of potential cybersecurity threats and there is plenty of vendor buzz around AI in Security products, but what is the reality? Threat detection and incident response (TDIR) strategy and... by Enterprise Security Weekly (Video)
48 min listen
Exploring the latest FortiGuard Labs Threat Report - Derek Manky - ESW Vault: As a special treat for this week's vault episode, we set up a conversation with Derek Manky to discuss Fortinet's FortiGuard Labs Threat Report. This is a bi-annual report put out by FortiGuard Labs, and in my opinion, it just keeps getting better and... by Enterprise Security Weekly (Video)
41 min listen
Secure Code From the Start, Security Validation & Platformization - Maxime Lamothe-Brassard, Volkan Ertürk, Chris Hatter - ESW #363: Qwiet AI provides real time detection of security vulnerabilities in code along with the best AI generated fixes to aid developers in finding and fixing their code with the addition of AI AutoFix. This segment is sponsored by Qwiet AI. Visit to learn... by Enterprise Security Weekly (Video)
47 min listen
Unified Identity Security, Identity is Under Attack & Identity is Security - Andre Durand, David Bradbury, Wendy Wu - ESW #363: The next generation of identity security is not about the popular idea of convergence, but of unification. A single, AI-driven solution that integrates PAM with identity security and access management is the clear path forward to manage and secure all... by Enterprise Security Weekly (Video)
48 min listen
This Week: short on funding, long on research and analysis - ESW #363: Only one funding announcement this week, so we dive deep into Thoma Bravo's past and present portfolio. They recently announced a sale of Venafi to Cyberark and no one is quite sure how much of a hand they had in the LogRhythm/Exabeam merger, and... by Enterprise Security Weekly (Video)
65 min listen
AI SOC Solutions, Revamp Your Cybersecurity, & Nightwing Introduction - Jon Check, Ricardo Villadiego, Jim McDonough - ESW #362: Artificial intelligence isn’t a magic wand… but could AI actually solve the alert triage problem every security operations center faces? In this interview with Jim McDonough from Intezer, we’ll talk about how 2023 was a tipping point for the... by Enterprise Security Weekly (Video)
44 min listen
Flexxon Server Defender, Unforeseen Innovation Outcomes, & Security through Data - Jeetu Patel, Amit Sinha, Camellia Chan - ESW #362: The danger of post-breach disruption and downtime is extremely real. And while we should work to prevent these breaches in the first place, we must also be practical and pre-empt any potential incidents. Organisations armed with the most extensive... by Enterprise Security Weekly (Video)
47 min listen
Post-RSAC, Our Heads Are Spinning, and Big News Keeps on Coming! - ESW #362: Suddenly SIEMs are all over the news! In a keynote presentation, Crowdstrike CEO George Kurtz . Meanwhile, Palo Alto, , hits the headlines for acquiring IBM's SIEM product, ! Meanwhile, LogRhythm and Exabeam merge, likely with the hopes of weathering... by Enterprise Security Weekly (Video)
57 min listen
Automated Pentesting, AI in SecOps, & AI-Powered Analytics - Jason Keirstead, Jay Mar-Tang, Anthony Aurigemma - ESW #361: Despite building up impressive security stacks in the Cloud, organizations are still struggling to keep their environments safe. Pentera recently introduced Pentera Cloud as the first tool to provide automated pentesting capabilities for cloud... by Enterprise Security Weekly (Video)
45 min listen
Phishing Attacks Increase, Network Transformation, & Unified SASE as a Service - Deepen Desai, Renuka Nadkarni, Tim Roddy - ESW #361: The landscape of phishing attacks continues to rapidly evolve. In 2023, Zscaler ThreatLabz observed a year-over-year increase of 58.2% in global phishing attempts. This surge was characterized by emerging schemes, including voice phishing, recruitment... by Enterprise Security Weekly (Video)
49 min listen
Next Gen Threats, CTEM Essentials, & Proactive MDR - Randy Watkins, Paul Reid, Zaira Pirzada - ESW #361: Emerging threats are targeting organizations from seemingly every angle. This means security teams must expand their focus to secure as many domains as possible. OpenText is building on its holistic approach to cybersecurity with new innovations that... by Enterprise Security Weekly (Video)
41 min listen
RSA Conference, Verizon DBIR, funding, reports, partnerships and more - ESW #360: It's the week before RSA and the news is PACKED. Everyone is trying to get their RSA announcements out all at once. We've got announcements about funding, acquisitions, partnerships, new companies, new products, new features... To make things MORE... by Enterprise Security Weekly (Video)
67 min listen
Preparation: The Less Shiny Side of Incident Response - Joe Gross - ESW #360: It's the most boring part of incident response. Skip it at your peril, however. In this interview, we'll talk to Joe Gross about why preparing for incident response is so important. There's SO MUCH to do, we'll spend some time breaking down the... by Enterprise Security Weekly (Video)
51 min listen
How GenAI Can Improve SecOps - Ely Kahn - ESW #359: We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some... by Enterprise Security Weekly (Video)
30 min listen
Threat Modeling and Understanding Inherent Threats - Adam Shostack - ESW #359: This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the... by Enterprise Security Weekly (Video)
45 min listen
Autonomous - I don't think that word means what you think it means - ESW #359: A clear pattern with startups getting funding this week are "autonomous" products and features. Automated detection engineering Autonomously map and predict malicious infrastructure ..."helps your workforce resolve their own security issues... by Enterprise Security Weekly (Video)
44 min listen
Crazy money and crazy outcomes - cybersecurity acquisitions in all shapes and sizes - ESW #358: This week, Adrian and Tyler discuss some crazy rumors - is it really possible that a cloud security startup valued at over $8 billion in November 2021 just got bought for $200 million??? Some healthy funding for Cyera and Cohesity ($300m and $150m,... by Enterprise Security Weekly (Video)
66 min listen
From Hackers to Streakers - How Counterintelligence Teams are Protecting the NFL - Joe McMann - ESW #358: Protecting a normal enterprise environment is already difficult. What must it be like protecting a sports team? From the stadium to merch sales to protecting team strategies and even the players - securing an professional sports team and its brand is... by Enterprise Security Weekly (Video)
41 min listen
The AI-est news segment ever, now with even more AI! - ESW #357: This week, Tyler and Adrian discuss Cyera's $300M Series C, which lands them a $1.4B valuation! But is that still a unicorn? Aileen Lee of Cowboy Ventures, who coined the term back in 2013, recently wrote a piece celebrating the 10th anniversary of... by Enterprise Security Weekly (Video)
67 min listen
Understanding KillNet and Recent Waves of DDoS Attacks - Michael Smith - ESW #357: In the days when Mirai emerged and took down DynDNS, along with what seemed like half the Internet, DDoS was as active a topic in the headlines as it was behind the scenes (). We don't hear about DDoS attacks as much anymore. What happened? Well, they... by Enterprise Security Weekly (Video)
36 min listen
Getting Vulnerability Management Back on the Rails - Patrick Garrity - ESW #356: NVD checked out, then they came back? Maybe? Should the xz backdoor be treated as a vulnerability? Is scan-driven vulnerability management obsolete when it comes to alerting on emerging threats? What were some of the takeaways from the first-ever... by Enterprise Security Weekly (Video)
52 min listen
Have you heard about AI? Lots of AI news. Also, RSA conference, and RooBadges! - ESW #356: As we near RSA conference season, tons of security startups are coming out of stealth! The RSA Innovation Sandbox has also announced the top 10 finalists, also highlighting early stage startups that will be at the show. In this week's news segment, ... by Enterprise Security Weekly (Video)
65 min listen
Multi-Layered Defense Platforms and other terms we found in security press releases - ESW #355: This week, in the enterprise security news: Early stage funding is all the rage AI startups continue to pop out of stealth The buyer's market continues with more interesting acquisitions Purpose-built large language models for security Benchmarking... by Enterprise Security Weekly (Video)
56 min listen
Why cyber hygiene requires curious talent - Clea Ostendorf - ESW #355: Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed... by Enterprise Security Weekly (Video)
49 min listen
Top 5 Myths About API Security and What to Do Instead - Robert Dickinson - ESW #354: While awareness and attention towards cybersecurity are on the rise, some popular and persistent myths about cybersecurity have almost become threats themselves. API security requires a modern understanding of the threat landscape, with the context... by Enterprise Security Weekly (Video)
49 min listen
Lots Of Funding News, Airbus Says No, and Cato Networks Going IPO? - ESW #354: In the enterprise security news, Lots of funding news, including: - Nozomi Networks Raises $100 Million to Expand Industrial Cybersecurity Business - BigID Raises $60 Million at $1 Billion Valuation - J.P. Morgan Growth Leads $39 Million Investment in... by Enterprise Security Weekly (Video)
56 min listen
Will AI allow us to finally scale vuln mgmt and threat detection? - ESW #353: We don't cover a lot of stories in this week's episode, but we go deep on a few important ones. I'm biased, but I think it's a good one, especially having Darwin's input and encyclopedic knowledge available to us. Also in this week's news: ... by Enterprise Security Weekly (Video)
69 min listen
Addressing Identity-Related Threats in 2024 - Rod Simmons - ESW #353: In this interview, we talk to Rod Simmons, the VP of Product Strategy at Omada. We'll discuss the complex topic of securing identities against ever growing threats. We'll discuss challenges like unnecessary access, accounts with too many permissions,... by Enterprise Security Weekly (Video)
49 min listen

Related podcast episodes

Skip carousel

Discuss: What Makes a Good Breach Response? - ESW #303: What makes a good breach response? What makes a bad one? Could we objectively measure them? How would we break down and rate a company’s breach response performance? Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)
49 min listen
ESW #303 - What Makes A Good Breach Response? by Security Weekly Podcast Network (Audio)
128 min listen
Tech Segment: Monitoring Infrastructure with Nagios - Enterprise Security Weekly #54: Where do the lines blur between monitoring, configuration, and vulnerability management? What is the best way to monitor systems in an enterprise? How to you manage machine to machine trust? Answers to all those questions and more in this segment!... by Security Weekly Podcast Network (Video)
22 min listen
Tech Segment: Monitoring Infrastructure with Nagios - Enterprise Security Weekly #54 by Enterprise Security Weekly (Video)
22 min listen
How The Uber Breach Went Down - ESW #289: Based on what we know so far (which is limited and could change), the Uber breach appears to be a classic example of how penetration testers and criminals alike break into large organizations. In this segment, we'll discuss how the attack happened.... by Enterprise Security Weekly (Video)
53 min listen
How The Uber Breach Went Down - ESW #289: Based on what we know so far (which is limited and could change), the Uber breach appears to be a classic example of how penetration testers and criminals alike break into large organizations. In this segment, we'll discuss how the attack happened.... by Security Weekly Podcast Network (Video)
53 min listen
DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Security Weekly Podcast Network (Video)
41 min listen
DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Application Security Weekly (Video)
41 min listen
Work from Home - Business Impacts & Security Risks - Mark Orsi - ESW #180: As we quickly pivot to remote work, what are the business impacts and security risks? What have we learned and how quickly can organizations adapt to this new paradigm? What activities should we take to make our organizations more resilient as we... by Enterprise Security Weekly (Video)
26 min listen
Work from Home - Business Impacts & Security Risks - Mark Orsi - ESW #180: As we quickly pivot to remote work, what are the business impacts and security risks? What have we learned and how quickly can organizations adapt to this new paradigm? What activities should we take to make our organizations more resilient as we... by Security Weekly Podcast Network (Video)
26 min listen
Boil the Ocean - SCW #71: Richard Struse, Director of The Center for Threat-Informed Defense from MITRE Engenuity joins the SCW crew for a two part interview! -What is threat-informed defense and how does it relate to other aspects of cybersecurity? -The importance of... by Security Weekly Podcast Network (Audio)
88 min listen
Extended Security Posture Management - Dave Klein - BSW #261: Organizations spend a lot of money on security tools, but how do I know those investments are working? Dave Klein, Cybersecurity Evangelist at Cymulate joins Business Security Weekly to discuss the value of "Extended Security Posture Management". By... by Security Weekly Podcast Network (Video)
27 min listen
BSW #293 - Security Money: This week, it's Security Money. While the major indexes have improved, the SW25 index has not. Pressures from the macro economic conditions appear to have a greater impact on cybersecurity. We'll dig in and review. In the leadership and... by Security Weekly Podcast Network (Audio)
63 min listen
Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Security Weekly Podcast Network (Video)
40 min listen
The State Of Penetration Testing Panel - PSW #677: Join us for a lively discussion surrounding the topic of penetration testing. Sure, we've called out differences between vulnerability scanning and penetration testing. Moving past this particular issue, we'll explore how to effectively use... by Security Weekly Podcast Network (Video)
60 min listen
Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Application Security Weekly (Video)
40 min listen
Securing The Enterprise Software Supply Chain - Harry Sverdlove - PSW #678: SolarWinds is just the latest example of how the enterprise software supply chain, when compromised, can be used successfully by attackers. These coordinated and well-managed attacks prey on trust, so how can we trust our enterprise software? ... by Security Weekly Podcast Network (Video)
58 min listen
Cybersecurity & Diversity - Jackie Abrams, Gabe Gumbs, Mandy Logan, Susan Bosco - ESW #209: How bad is the diversity problem in the Cybersecurity industry? Have we made any progress or is it all talk? In this special Enterprise Security Weekly segment, we are joined by industry professionals to learn where have we been, where do we need to... by Enterprise Security Weekly (Video)
35 min listen
Cybersecurity & Diversity - Jackie Abrams, Gabe Gumbs, Mandy Logan, Susan Bosco - ESW #209: How bad is the diversity problem in the Cybersecurity industry? Have we made any progress or is it all talk? In this special Enterprise Security Weekly segment, we are joined by industry professionals to learn where have we been, where do we need to... by Security Weekly Podcast Network (Video)
35 min listen
Little Bugs - SCW #88: This week, we welcome Casey Ellis, Founder/Chair/CTO at Bugcrowd, to talk about Compliance and “The Crowd”! Crowdsourcing and multi-sourcing focus on risk identification and reduction, and they seem to be effective... but my auditor doesn't... by Security Weekly Podcast Network (Audio)
85 min listen
Container Security Today - Application Security Weekly #71: Murray Goldschmidt is the COO & Co-founder of Sense of Security. Murray talks about The state of container security in the enterprise. Full Show Notes: Visit for all the latest episodes! by Application Security Weekly (Video)
37 min listen
Container Security Today - Application Security Weekly #71: Murray Goldschmidt is the COO & Co-founder of Sense of Security. Murray talks about The state of container security in the enterprise. Full Show Notes: Visit for all the latest episodes! by Security Weekly Podcast Network (Video)
37 min listen
Fixing Vulnerabilities Effectively & Efficiently - John Matherly - ASW #116: What does it take to fix vulns effectively and efficiently? There's no lack of vulns identified from bug bounties and vuln reporting programs, but not every vuln needs the same attention and not every vuln gets the attention it deserves. Visit ... by Application Security Weekly (Video)
34 min listen
Fixing Vulnerabilities Effectively & Efficiently - John Matherly - ASW #116: What does it take to fix vulns effectively and efficiently? There's no lack of vulns identified from bug bounties and vuln reporting programs, but not every vuln needs the same attention and not every vuln gets the attention it deserves. Visit ... by Security Weekly Podcast Network (Video)
34 min listen
DDoS, Murray Goldschmidt - Paul's Security Weekly #613: Murray Goldschmidt is the COO & Co-founder of Sense of Security. Murray talks about the Intro to Sense of Security, DDoS in 2019, New trends, and How to address these issues! Full Show Notes: https://wiki.securityweekly.com/Episode613 Visit... by Security Weekly Podcast Network (Video)
37 min listen
Automated Vulnerability Remediation - The Good, the Bad and the Ugly - PSW #679: The way we identify, prioritize, and mitigate software vulnerabilities was built in the reverse order. Why did it happen? Could a new remediation strategy finally form an alliance between IT and security teams? This segment is sponsored by... by Security Weekly Podcast Network (Video)
48 min listen
Hackable; How to do Application Security Right - Ted Harrington - ASW #141: In looking at how to do application security right we talk about understanding the difference between defining types of security testing and the goals that security testing should be aiming for. Plus, we highlight how doing security right also means... by Security Weekly Podcast Network (Video)
35 min listen
Hackable; How to do Application Security Right - Ted Harrington - ASW #141: In looking at how to do application security right we talk about understanding the difference between defining types of security testing and the goals that security testing should be aiming for. Plus, we highlight how doing security right also means... by Application Security Weekly (Video)
35 min listen
Enterprise Security Weekly #28 - Cyber Insurance, Michael Santarcangelo: Would your company benefit from purchasing a cyber insurance policy? What should you be covering? How are insurance companies assessing you? Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode28 Visit... by Security Weekly Podcast Network (Video)
21 min listen
Enterprise Security Weekly #28 - Cyber Insurance, Michael Santarcangelo: Would your company benefit from purchasing a cyber insurance policy? What should you be covering? How are insurance companies assessing you? Full Show Notes: Visit for all the latest episodes! by Enterprise Security Weekly (Video)
21 min listen

Discover this podcast and so much more

Discuss: What Makes a Good Breach Response? - ESW #303

Discuss: What Makes a Good Breach Response? - ESW #303

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes