Socializing Security

In this episode of Socializing Security, Brian and Milou discuss the evolving nature of workspaces, particularly in the context of small businesses and remote work. They explore the importance of physical spaces, confidentiality, and creating environments that foster productivity and well-being. The conversation delves into thoughtful office design, accommodating different work styles, and the future of workspaces, emphasizing the ...

In this episode of Socializing Security, hosts Brian and Milou discuss the implications of Spotify's new instant messaging feature, the risks associated with shadow IT, and the integration of ChatGPT with Spotify. They explore privacy and security concerns, particularly for users who may not be aware of the changes in the platform's functionality. The conversation emphasizes the importance of being cautious with new technology and ...

In the latest episode of Socializing Security, Milou Meier and Brian Knudtson embrace SYFI energy — Senior Year F-It — as they reflect on how far the podcast has come, from early audio hiccups to finding their flow as co-hosts.

With their signature mix of humor and real-world insight, they explore the art of showing up consistently, balancing prep with authenticity, and how even Spotify’s new messaging feature could quietly create ...

This episode provides a comprehensive overview of ransomware, detailing its definition, methods of delivery, and the various impacts it has on individuals and organizations. Brian Knudtson discusses the evolution of ransomware attacks, the types of targets, and the significant consequences that can arise from such incidents. He emphasizes the importance of prevention strategies, including strong passwords and regular backups, and h...

In this episode, Brian speaks with Justin Keck, Director of Security at Inspire Security Solutions, about the evolving role of the CISO, the importance of business acumen in security, and the need for effective communication across departments. They discuss the significance of building a security culture, the role of security champions, and the emerging BISO role as a liaison between security and business needs. As always, the conv...

In this episode, Brian and the host discuss the evolution of technology and its impact on daily life, particularly focusing on the ideal tech stack for 2025, frustrations with current technology, the need for standardization, and goals for 2026. They also touch on the intersection of pop culture and technology, exploring how past media has predicted current trends and the implications of smart devices and IoT on privacy and user ex...

In this episode of Socializing Security, host Milou Meier shares her personal experiences and frustrations as a compliance officer and small business owner in the IT sector. She discusses the challenges of navigating technology, the importance of a frictionless IT environment, and the need for connection in a tech-heavy world. Milou reflects on her own technology struggles and emphasizes the significance of making IT systems work s...

In this conversation, Patrick Kovalik discusses the critical role of data in the healthcare industry, emphasizing the importance of data strategy, protection, and governance. He highlights the complexities of managing healthcare data, the shift towards synthetic data, and the challenges posed by unstructured data. The discussion also touches on the balance between privacy and security, particularly in the context of healthcare, and...

In this episode of Socializing Security, Milou and Brian delve into the complexities of compliance programs, focusing on the importance of selecting the right audit firms, the role of GRC software, and the common controls necessary for effective compliance. They discuss the significance of access control, incident response, risk management, data protection, vendor management, security awareness training, audit logging, business con...

In this episode of Socializing Security, the hosts delve into the essential topic of compliance within the cybersecurity landscape. They explore various compliance frameworks such as SOC 2, ISO 27001, HIPAA, and FedRAMP, discussing their significance, requirements, and the implications for organizations. The conversation highlights the importance of compliance in demonstrating security controls to customers and the challenges faced...

In this episode, Tracy Doaks, the president and CEO of MCNC, discusses her extensive background in both public and private sectors, emphasizing the importance of digital equity and the challenges faced in cybersecurity funding. She highlights the impact of technology on public service and the necessity of addressing the digital divide, particularly in rural communities. The discussion also delves into the ongoing negotiation betwee...

In this episode of Socializing Security, Brian and Milou delve into the fundamentals of risk management, emphasizing its importance across all organizations. They discuss the definition of risk management, the process of identifying and assessing risks, and the significance of executive buy-in. The conversation covers various aspects of risk management, including quantitative analysis, compliance requirements, and the integration o...

In this episode, Jake Williams discusses the intersection of physical and cybersecurity, emphasizing the importance of threat assessments and understanding vulnerabilities. The conversation explores how human behavior impacts security, the need for integrated security measures, and the balance between privacy and security. Jake shares insights on training for security awareness and the significance of proactive planning in maintain...

In this episode of Socializing Security, Steve Sims returns to discuss the fundamentals of cybersecurity, focusing on vulnerability management. The conversation covers the importance of understanding assets, the role of CVE in tracking vulnerabilities, prioritization strategies, and the necessity of having a robust vulnerability management plan. Steve emphasizes the significance of compensating controls, risk management, and the ne...

In this episode, the hosts discuss the various roles and responsibilities related to data security within organizations. They explore the importance of CISOs, compliance teams, and IT departments in managing data security, the lifecycle of data, and the challenges of sensitive data management. The conversation also touches on the implications of data breaches, public exposure of data, and the necessity of effective data retention p...

In this episode, Brian and Milou discuss the often-dreaded topic of phishing and compliance training. They explore the various types of phishing attacks, including spear phishing and whaling, and delve into the business aspects of phishing, such as ransomware. The conversation emphasizes the importance of human factors in cybersecurity, highlighting the need for effective training and awareness. They provide practical tips for iden...

In this episode, Yousuf Khan, a seasoned CIO and CISO turned venture capitalist, shares insights on the critical role of communication in leadership, the nuances between CIO and CISO responsibilities, and the importance of investing in B2B software. He discusses the challenges faced in the tech landscape, particularly regarding privacy and security, and emphasizes the need for a proactive approach in managing these issues. Yousuf a...

In this episode, Brian discusses security lessons derived from everyday life, focusing on urban planning, road safety, and their implications for cybersecurity. He emphasizes the importance of system design over individual accountability, the concept of normal accidents in complex systems, and the necessity of disaster preparedness. Brian also highlights the need for effective communication of security concepts to non-professionals...

In this episode of Socializing Security, Brian and Milou delve into the critical distinctions between IT disaster recovery and cyber attack recovery. They explore the definitions, planning strategies, recovery processes, and the varying impacts of each type of incident on organizations. The conversation emphasizes the importance of having well-defined disaster recovery and incident response plans, as well as the need for proactive ...