Careers, Compliance

Mapping Across an Ocean of Security Frameworks, Part 1 – Thomas Sager, Tony Sager – SCW #92

Tony and Thomas will discuss the importance, value, and challenge of cross-mapping security frameworks, and the rationale and process used by CIS to create end support mapping, some real-world examples, and some real-life problems.

Full episode and show notes

Announcements

  • In case you missed it: Paul's Security Weekly's new streaming time is Wednesday nights from 6pm-9pm ET & Enterprise Security Weekly's new streaming time is Thursday afternoons from 3pm-4:30pm ET. You can view our live stream schedule at any time at https://securityweekly.com/live!

  • In an overabundance of caution, we have decided to flip this year’s SW Unlocked to a virtual format. The safety of our listeners and hosts is our number one priority. We will miss seeing you all in person, but we hope you can still join us at Security Weekly Unlocked Virtual! The event will now take place on Thursday, Dec 16 from 9am-6pm ET. You can still register for free at https://securityweekly.com/unlocked.

Guests

Thomas Sager
Thomas Sager
undefined at undefined

Thomas Sager is an Associate Cybersecurity Engineer for CIS. In this role, he is dubbed as the team cryptographer for mapping of the CMMC and PCI frameworks to the CIS Controls. Sager is also working on the Controls Assessment Specification to provide a common understanding of what should be measured in order to verity that CIS Sub-Controls are properly implemented. Prior to joining the CIS, Sager was a commercial security consultant under a federal contractor, greatly benefiting from the opportunity to work within a variety of client environments.

Tony Sager
Tony Sager
Senior Vice President & Chief Evangelist at Center for Internet Security

Tony Sager is a Senior VP & Chief Evangelist for the Center for Internet Security. He led the work which later became known as the CIS Critical Security Controls – an independent, volunteer-developed, cyberdefense best practices program which is used throughout the industry. Tony has led numerous activities to develop, share, scale, and sustain effective defensive cyber practices for worldwide adoption.

Tony retired from the National Security Agency in 2012 after 34 years as a mathematician, computer scientist, and executive manager. One of the Agency’s first Software Vulnerability Analysts, he was one of the founders and later Chief of the System and Network Attack Center, NSA’s first defensive network security analysis organization. Tony was also founder and Chief of the Vulnerability Analysis and Operations Group, NSA’s premier technical organization in defensive analysis.

Hosts

Jeff Man
Jeff Man
Information Security Evangelist at Online Business Systems
Adrian Sanabria
Adrian Sanabria
Director of Product Management at Tenchi Security
Tyler Robinson
Tyler Robinson
Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element
prestitial ad