The Well Aware Security Show

How do you hack a car and not get sued for it?  Application security is probably at the forefront of people's minds for 2022 and rightly so! My guest this week, Ted Harrington, has answers. Ted was a part of one of the first groups that hacked a car and is currently the Executive Partner at Independent Security Evaluators (ISE), the company of ethical hackers famous for hacking cars, medical devices, and password managers. 

There's a lot of marketing hype out there about how to create a culture of cybersecurity, but we wondered...can you change your culture with security awareness training? To find out, we asked Kate Brett Goldman, CEO of The Cybermaniacs what works and what doesn't when it comes to working with your humans.

Ok, it is a podcast about deception. And we think Deception is something that doesn't just belong to the history books or the battlefield, it belongs on your network. Rob Black is the deputy director of the UK National Cyber Deception Laboratory and is passionate about making deception something that everyone can do in their networks.

There are a huge number of job openings in cybersecurity right now...but there are also a huge number of veterans out there looking to get their start in the civilian world. Jeff Schilling, Global CISO for Teleperformance joins us this week to talk about his own journey from being in the Army to being a CISO, and has some tips for hiring managers for bringing more veterans into a career in cyber!

What does Zero Trust mean? Who better to answer the question than the guy who created it...John Kindervag, currently the SVP for Cybersecurity Strategy at On2IT who offers the worlds first Zero Trust as a Service (ZTaaS) offering.

What does Zero Trust mean? Who better to answer the question than the guy who created it...John Kindervag, currently the SVP for Cybersecurity Strategy at On2IT who offers the worlds first Zero Trust as a Service (ZTaaS) offering.

How do we break the Cybersecurity Poverty Line? We asked Scott Schindler, vCISO Director for Tracepoint, who specializes in supporting security for small to medium enterprises to find out whether it's really just about lack of funding...or if there's something more fundamental that's needed to protect smaller organizations.

Everyone talks about Cybersecurity Culture, but if you asked 100 people for a definition, you'd probably get 200 answers. Which is why this week we're talking to Dr. Keri Pearlson, Executive Director of the research group Cybersecurity at MIT Sloan (CAMS) who has focused her research around cybersecurity culture at organizations across the globe. 

Want to know how to get started in your cybersecurity career? Want to hire some of those people getting started in cybersecurity? We asked our guest this week, Zach Vinduska US CISO for Credera, what we can do differently about recruiting the next generation of security talent and how we can sustain their careers for the next 30 years.

You may have heard of the MITRE ATT&CK framework, which helps network defenders understand the methods attackers use to penetrate networks. But have you heard of ENGAGE? This week, we welcome back MITRE's chief mad scientist for deception, Dr. Stanley Barr, who talks about how MITRE is engaging the community to create a framework help defenders disrupt adversaries.

"No security person really works in security,” says Andy Bennett, VP of Technology and CISO for the Apollo Information Systems. There's a reason we say People, Process, and Technology - people always come first. We build cars, we are bankers, we are educators...and being secure means knowing the business and building relationships with the other humans we work with. 

The biggest complaint I hear from people about security training is that it’s a waste of their time. And if you’re doing a 5 minute awareness video once a year to check a compliance box, you probably are wasting your employee’s time. Our guest this week, Ashley Rose, is the CEO of Living Security and her philosophy is to empower people to change their behaviors...and along the way make it fun and engaging as well.