BSW #261 – Dave Klein

Sponsored By

Announcements

• We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!

• Security Weekly listeners, save $100 on your RSA Conference 2022 Full Conference Pass! RSA Conference will be live in San Francisco June 6th-9th, 2022. Security Weekly will be there in full force, delivering real-time, live coverage and interviewing some of the event’s top speakers and sponsors. To register using our discount code, please visit https://securityweekly.com/rsac2022 and use the code 52UCYBER. We hope to see you there!

Guest

Dave Klein

Director, Cybersecurity Evangelist at Cymulate

Dave Klein is the Director of Cyber Evangelism for Cymulate. With more than 21 years of real-world cybersecurity experience he works with Cymulate teams, customers and industry thought leaders to address the challenges of securing modern enterprise environments. Dave’s long career includes working on the NIST response to President Obama’s Policy Directive 21 on Critical Infrastructure Security and Resilience, leading some of the largest sales engagements for US Federal security solutions, and working with the City of New York post 9/11, helping shore up cyber defenses.

Hosts

Matt Alderman

Chief Product Officer at CyberSaint

Ben Carr

Independent Consultant & CISO

Jason Albuquerque

Chief Operating Officer at Envision Technologies

Announcements

• Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

• Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

Hosts

Matt Alderman

Chief Product Officer at CyberSaint

1. 1. Here are what CISOs named as their 20 critical priorities for 2022
   Here’s a snapshot of the topics CISOs are focused on in 2022: - Threat landscape/current security events - Malware/ransomware readiness - Cloud security - Workforce recruitment and development - Zero trust
2. 2. SolarWinds breach lawsuits: 6 takeaways for CISOs
   Civil lawsuits aim to show that SolarWinds and its CISO did not take adequate actions to prevent a breach. Here's how security leaders can protect themselves and their organizations from similar claims: - Personnel need to follow policy and procedures - Maintain a register to track and manage risks - Document cybersecurity training - Assign mission-critical tasks according to risk - Have a long-term security plan, but be prepared to pivot - Resource cybersecurity according to risk
3. 3. C-suite shifts: CTOs team with CIOs to confront IT challenges
   As businesses continue to adjust to an unpredictable pandemic, unreliable supply chains and the unabated presence of cyberthreats, there are hopeful signs that a more collaborative relationship between CIOs and CTOs is helping companies meet growing technology demands.
4. 4. Four worries bank cybersecurity experts face
   Here is a look at some of the tactics of highly sophisticated threat actors, third-party threats banks face and what cybersecurity experts believe their institutions ought to do about them. - Hackers target market-moving information - Bank tech partners also present security risks - Banks worry about insecurity of crypto exchanges - Most security chiefs don’t report to the CEO
5. 5. Navy Seals’ 5 Leadership Principles That Will Transform Entrepreneurs Into Influential Leaders
   After ten years of building my startup, I wish someone had shown me these lessons earlier: Lesson 1: Your Mission Comes First Lesson 2: It’s Always Your Fault, Sir Lesson 3: Complexity Is a Way to Disaster Lesson 4: Don’t Lead The Entire Army Lesson 5: The Skill You Need To Train Every Morning
6. 6. Research: More Powerful People Express Less Gratitude
   Research shows that people with power tend to express gratitude less than those without it. In organizations, this can result in employees feeling under-appreciated and, in some cases, more likely to quit. To develop better habits around gratitude, leaders should understand the outsized impact a “thank you” can have, particularly in the era of remote work, and begin taking the perspective of others and leading by example. And if your boss doesn’t thank you enough, you can take steps to boost gratitude in your own life. Consider reaching out to old bosses and colleagues to say thank you and rekindle connections, or vocally boost the contributions of low-power employees in workplace settings.

Ben Carr

Independent Consultant & CISO

Jason Albuquerque

Chief Operating Officer at Envision Technologies