What Was Old Is New Again – BSW #216

Sponsored By

Announcements

• Security Weekly listeners save $100 on their RSA Conference 2021 All Access Pass! RSA Conference will be a fully virtual experience from May 17th-20th, 2021. Security Weekly will be live streaming Monday-Thursday in the virtual broadcast alley, interviewing some of the top sponsors and speakers for the event. To register using our discount code, please visit https://securityweekly.com/rsac2021 [securityweekly.com] and use the code 5U1CYBER! We hope to "see" you there!

• Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!

Guest

Ryan Bergquist

Enterprise Solutions Engineer at Invicti Security

Part of the Solutions Engineering Team at Invicti Security, Ryan graduated in Information Systems and Security as well as Computer Forensics and Security. Ryan has been working in the Cyber Security industry for 4 years through various roles in Security Engineering and Product Management. He is passionate about Cyber Security and technology in general.

Hosts

Matt Alderman

VP, Product at Living Security

Adrian Sanabria

Director of Product Marketing at Valence Security

@sawaba

https://valencesecurity.com

Paul Asadoorian

Founder at Security Weekly

0offset

https://securityweekly.com

Announcements

• Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

• Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

Hosts

Matt Alderman

VP, Product at Living Security

1. 1. The Security Industry is Protecting the Wrong Thing – Security Boulevard
   When the security industry talks about a data breach, often the first question asked involves the state of the victim’s network security – not the breach of data. Why is this? It’s because organizations have their security priorities backward, and that needs to change.
2. 2. Cyber security is in denial, that’s why it needs the Lean Six Sigma approach
   Some of the world’s biggest businesses use this approach to increase efficiency in their company. But its principles are rarely applied to cyber security. With cyber security teams increasingly stretched and attacks increasing, it’s time for that to change. 1. It’s time to truly understand cyber risk 2. Risk mitigation becomes the focus The key elements of Lean Six Sigma: Define, Measure, Analyze, Improve, and Control.
3. 3. 6 ways to spur cybersecurity board engagement
   Corporate boards' subpar cybersecurity literacy and security leaders' lack of business acumen have resulted in missed opportunities to align security and business objectives, leaving enterprises open to potentially catastrophic cyberthreats. ESG offered six recommendations for advancing cybersecurity's standing in the C-suite and boardroom and throughout the enterprise. 1. Educate boards 2. Adopt a CISO-to-CEO reporting structure 3. Foster a cybersecurity culture 4. Formalize the cybersecurity program 5. Prioritize critical assets and initiatives 6. Hire BISOs
4. 4. CISO Challenge: Check Your Cybersecurity Skills On This New Competition Site
   So, what can security leaders do to make sure they're prepared and hone their skills ahead of the next inevitable threat? Now, they can test themselves and their knowledge at a new website, 'The CISO Challenge' (https://ciso-challenge.com/?utm_source=thn).
5. 5. 5 key qualities of successful CISOs, and how to develop them
   Today, business success is directly intertwined with the success of information security. Therefore, the modern CISO needs a unique set of qualities to align effective data security strategy, process, and practice with various business needs and requirements. 1. A modern CISO speaks the language of the business 2. A modern CISO is a collaborator 3. A modern CISO is emotionally intelligent 4. A modern CISO has strategic focus 5. A modern CISO is tenacious
6. 6. 4 Actions Transformational Leaders Take
   In a changed, post-pandemic environment, employees, customers, and investors have high expectations for the companies they work with. They expect companies to play a more prominent role in tackling systemic issues like climate change and social inequality, and they expect leaders to be effective, authentic, and compassionate. Leaders who want their organizations to meet this moment and succeed long-term need to move away from the status quo and change their approach to how they’ll lead the necessary transformations. The following four strategies, based on our collective experience in leading transformations over the last 25 years, will help leaders increase their chances of success. 1. Practice New Mental Models 2. Work the Edges of the Organization 3. Share Leadership More Systematically 4. Make Empowerment Live Up to Its Promise

Adrian Sanabria

Director of Product Marketing at Valence Security

@sawaba

https://valencesecurity.com

Paul Asadoorian

Founder at Security Weekly

0offset

https://securityweekly.com