The ITSM Practice: Elevating ITSM and IT Security Knowledge20 Feb 2024

What does 'Security by Design' really mean?

In this enlightening episode of "The ITSM Practice," host Luigi Ferri unpacks the concept of 'Security by Design' and its fundamental principles. Luigi explains that 'Security by Design' is an approach where security is embedded as a foundational element from the beginning of the IT system development and management process, rather than being an afterthought. The episode dives into the core principles that underpin this approach, including Defense in Depth, Secure by Default, Least Privilege, Separation of Duties, Minimizing Attack Surface, Complete Mediation, Open Design, Isolated Compartments, Evidence Production, and Application Coding Best Practices. Luigi emphasizes that integrating these principles into ITSM is not just a technical endeavor but also involves fostering a culture where IT Security is prioritized at every stage of Service Design and Implementation. The discussion culminates with the importance of adopting a mindset where IT Security is an integral part of every IT Process and decision-making activity, highlighting its role in building a secure, resilient foundation for IT Services that are aligned with business goals and capable of countering evolving digital threats. Tune in for an in-depth exploration of 'Security by Design' and its significance in today's digital landscape, and join Luigi on LinkedIn for further insights into adapting IT Practices for enhanced IT Security.

LinkedIn: https://www.linkedin.com/in/theitsmpractice/

Website: http://www.theitsmpractice.com

Credits:

Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(159)

MSPs: Your AI Contracts Are Obsolete

AI is transforming Managed Service Providers (MSPs) from managing technology to managing AI behavior. This episode explains why traditional service design, governance, contracts, and risk models are n...

11 Aug 16min

DARE25: Why Defense Isn't Enough

Discover why traditional cybersecurity defense is no longer enough in the AI era. Luigi Ferri explores the DARE25 framework, dynamic risk management, governance, Purple Teaming, accountability, and ad...

4 Aug 9min

ISO 28000: Your Resilience, Their Budget

In this episode of the ITSM Practice Podcast, Luigi Ferri explores why supply chain resilience has become one of the biggest strategic challenges for Government Managed Service Providers (MSPs). Using...

28 Juli 13min

No SBOM, No Trust

Discover why the Software Bill of Materials (SBOM) is rapidly becoming a strategic necessity for Managed Service Providers (MSPs) and enterprise IT leaders. In this episode, Luigi Ferri explains how s...

21 Juli 19min

PSD3: Who Owns Trust?

PSD3 is more than a compliance requirement, it's a test of organisational maturity, security leadership, accountability, and decision-making. Discover how Enterprise Service Management, IT Service Man...

14 Juli 6min

The Hidden Cost of Untrusted Data

Why do organizations struggle to trust their operational data despite having plenty of it? In this episode of The ITSM Practice Podcast, Luigi Ferri explains the critical difference between data quali...

7 Juli 11min

ITIL 5 Foundation: Exam Success

Preparing for the ITIL 5 Foundation exam? Discover why successful candidates focus on understanding the ITIL Value System, Value Chain, Governance, AI Capability, Four Dimensions, and Service Lifecycl...

30 Juni 10min

PSD3: Governance Before Technology

In this episode, Luigi Ferri explores why organisations often take the wrong first step when preparing for PSD3 compliance. Rather than rushing into new tools, fraud platforms, or transformation progr...

23 Juni 7min