Easy Prey5 Apr 2023

The Importance of Testing Your Cybersecurity Response with Steve Orrin

Cyberattacks can happen to an individual computer or an entire network. It's vital to have well-tested plans in place before ransomware rears its ugly head. Today's guest is Steve Orrin. Steve is Intel's Federal CTO and Senior Principal Engineer. He leads public sector solutions architecture, strategy, and engagement and has held technology leadership positions at Intel. Steve was previously CTO, CSO, and co-founder of several successful security startups and is a recognized expert and frequent lecturer on enterprise security.

Show Notes:

[1:01] - Steve shares what his current role is at Intel Corporation and how he became drawn to the field.
[2:52] - There are risks everywhere. Where do we start when it comes to cybersecurity for a business?
[3:54] - Steve describes risk profiles and what you need to understand what you're trying to protect.
[5:21] - Once you know your environment and risk profile, it's time to look at the key things above security "hygiene" and the processes to raise the bar.
[7:48] - There are benefits to microsegmentation, including smaller network enclaves.
[9:44] - Steve makes a suggestion for network segmentation when it comes to state of the art equipment.
[12:07] - Ideally, you want sensors in every network enclave but that isn't always realistic.
[13:57] - Having network segmentation will also give you the information needed to find which part of your business receives an attack.
[15:39] - How do we protect data in the cloud?
[17:04] - It all goes back to understanding the data you need to protect.
[21:01] - Just like in your business, you need to know how your IT resources are being used and which ones are not right.
[23:20] - These building blocks help you see how you are utilizing security and it needs to be built in from the beginning.
[24:55] - Changing approaches in large organizations can seem challenging, but Steve says they are constantly modernizing and it's all about perception.
[26:24] - Literally any type of company can be attacked because of every industry's reliance on digital tools and infrastructure.
[28:16] - There are different types of attackers - those who target someone specific, those who are opportunistic, and those who are purely automated.
[29:44] - Everyone is a potential target even if you aren't being targeted.
[31:33] - Planning will also help answer the question of how to continue running the business while ransomware is active.
[33:21] - Companies need to adopt a gamified system to train everyone in the organization on how to respond to an attack.
[35:13] - Supply chain issues exist in cybersecurity, but it's not the same as other industries. They are problems that they are actively searching for a solution for.
[38:26] - When it becomes a requirement and in a contract, it will be adhered to.
[40:26] - There are a lot of programs out there looking for the anomaly, but Steve says we aren't looking in the right place.
[42:33] - Take all reports of suspicious activity seriously.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(329)

Job Recruiter Scams

Job hunting is hard enough without having to stop and ask whether the recruiter in your inbox is even real. My guest today, Jay Jones, ran into that problem firsthand after being laid off in December ...

24 Jun 35min

Bail Bonds Scams

Getting a call that someone you love has been arrested is scary enough. Getting that call from someone who sounds official, knows just enough to seem credible, and says you have to send money right aw...

17 Jun 36min

Confessions of a Fraudster

Technology keeps changing, but many of the most effective scams still come down to something very human: trust. My guest today is Tony Sales, co-founder of We Fight Fincrime and Underworld TV. Tony ha...

10 Jun 54min

Personal Safety

Scams and safety threats don't always announce themselves. Sometimes they start quietly, with a moment of distraction, a strange feeling you ignore, or a situation that shifts just enough to test whet...

3 Jun 43min

Data For Sale

Everyday conveniences ask for tiny pieces of information all the time like a phone number at checkout, a zip code at the register, an email address for a receipt, or a loyalty account for a small disc...

27 Mai 43min

Exploiting Psychology

Scams are often explained as a failure of judgment, but the truth is far more human. People are not fooled because they are foolish. They are manipulated at the exact moment emotion overrides logic, w...

20 Mai 45min

Investment Traps

Investment losses can be confusing because they do not always tell the whole story. Sometimes money is lost because the market has changed. Other times, an investor was sold something they did not und...

13 Mai 47min

Elder Exploitation

Aging parents often rely on the people closest to them for help, but what happens when that help becomes a way to take control? For Charles Wallace, the warning signs started small. His mother's fridg...

6 Mai 39min