Security Weekly
Enterprise Security WeeklySubscribe

HITRUST Compliance vs. Security & Diversity in InfoSec – Greg Thomas – ESW #189

Discussing HITRUST compliance in small and medium environments and how to use automation and scalable practices in the cloud to be both compliant and secure.

Full episode and show notes

Announcements

  • We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!

Guest

Greg Thomas
Lead Security Engineer at Jvion

Greg practices offensive and defensive security. He has spent 5 years in the Marines doing counter-intelligence. Greg also speaks at BSides conferences about the need for diversity in Infosec.

Hosts

Chief Product Officer at CyberSaint
Principal Security Evangelist at Eclypsium

Related

Threat Modeling and Understanding Inherent Threats – Adam Shostack – ESW #359

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats. Resources: ...
How GenAI Can Improve SecOps – Ely Kahn – ESW #359

We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some of the use cases are obvious, while others were a complete surprise to me. Check out this episode if...