Risk Transfer With Engineering Based Cyber Insurance – Fatih Karayumak – PSW #739

May 4, 2022

Especially ICS represents a significant exposure to property and business operations. A scientific research-based approach to loss prevention for traditional property perils can be applied to help protect companies from cyber risk to keep their businesses more resilient.

Full episode and show notes

Announcements

Security Weekly listeners, save $100 on your RSA Conference 2022 Full Conference Pass! RSA Conference will be live in San Francisco June 6th-9th, 2022. Security Weekly will be there in full force, delivering real-time, live coverage and interviewing some of the event’s top speakers and sponsors. To register using our discount code, please visit https://securityweekly.com/rsac2022 and use the code 52UCYBER. We hope to see you there!
Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!

Guest

Fatih Karayumak

Cyber Research Lead

Fatih Karayumak is the Cyber Security Research Lead at a large commercial property insurance company. He is a senior information security professional with over 14 years of experience in Cyber Risk Management, Secure Software Development, Security Engineering, Cryptography, ICS&IOT Security.
He started his IT Security career in academia, then worked for various government and military agencies including NATO. Currently he is working in the private sector helping one third of Fortune 1000 companies improve their cyber security postures.
Fatih had also taught Secure Software Development and Human Computer Interaction on graduate level at various colleges in Germany, Turkey and US.

Hosts

Paul Asadoorian

Founder at Security Weekly

0offset

https://securityweekly.com

Doug White

Professor at Roger Williams University

https://securedigitallife.com/

Josh Marpet

Executive Director at RM-ISAO

Larry Pesce

Product Security Research and Analysis Director at Finite State

https://www.finitestate.io/

DevOps

How to Secure Your CI/CD Pipeline by Prioritizing Cyber-Risk Management – Tal Morgenstern – ESW #309

March 16, 2023

The CI/CD pipeline is the backbone of the software development process, so it's critical to ensure you are meeting and exceeding the most critical security measures. Throughout this podcast, Tal Morgenstern, Co-founder and CSO of Vulcan Cyber, will break down the process of how organizations can properly secure a CI/CD pipeline into a checklist of ...

Application security

DIY Software Bill of Materials How-To – Roland Diaz – ESW #308

March 9, 2023

You know SBOMs can help you keep track of your software assets and therefore, their vulnerabilities. Despite even the White House pressing the issue, many vendors aren't forthcoming with SBOMs, and you can't afford to wait. With Tanium's Roland Diaz, we'll discuss the most important considerations when generating your own SBOMs (which is now someth...

Application security

Achieve Unprecedented Visibility into Your Software Supply Chain – Tom Goings – ESW #305

February 9, 2023

Tanium has recently released a new capability called Tanium Software Bill of Materials (SBOM) to help customers identify third-party libraries associated with software packages. - What is Tanium SBOM - Why is it different and why do you need it - How to configure SBOM - How to query for the details about every software application in your enviro...