Mapping Across an Ocean of Security Frameworks, Part 1 – Thomas Sager, Tony Sager – SCW #92
Tony and Thomas will discuss the importance, value, and challenge of cross-mapping security frameworks, and the rationale and process used by CIS to create end support mapping, some real-world examples, and some real-life problems.
Announcements
In case you missed it: Paul's Security Weekly's new streaming time is Wednesday nights from 6pm-9pm ET & Enterprise Security Weekly's new streaming time is Thursday afternoons from 3pm-4:30pm ET. You can view our live stream schedule at any time at https://securityweekly.com/live!
In an overabundance of caution, we have decided to flip this year’s SW Unlocked to a virtual format. The safety of our listeners and hosts is our number one priority. We will miss seeing you all in person, but we hope you can still join us at Security Weekly Unlocked Virtual! The event will now take place on Thursday, Dec 16 from 9am-6pm ET. You can still register for free at https://securityweekly.com/unlocked.
Guests
Thomas Sager is an Associate Cybersecurity Engineer for CIS. In this role, he is dubbed as the team cryptographer for mapping of the CMMC and PCI frameworks to the CIS Controls. Sager is also working on the Controls Assessment Specification to provide a common understanding of what should be measured in order to verity that CIS Sub-Controls are properly implemented. Prior to joining the CIS, Sager was a commercial security consultant under a federal contractor, greatly benefiting from the opportunity to work within a variety of client environments.
Tony Sager is a Senior VP & Chief Evangelist for the Center for Internet Security. He led the work which later became known as the CIS Critical Security Controls – an independent, volunteer-developed, cyberdefense best practices program which is used throughout the industry. Tony has led numerous activities to develop, share, scale, and sustain effective defensive cyber practices for worldwide adoption.
Tony retired from the National Security Agency in 2012 after 34 years as a mathematician, computer scientist, and executive manager. One of the Agency’s first Software Vulnerability Analysts, he was one of the founders and later Chief of the System and Network Attack Center, NSA’s first defensive network security analysis organization. Tony was also founder and Chief of the Vulnerability Analysis and Operations Group, NSA’s premier technical organization in defensive analysis.
Hosts
