Episodios

  • Episode 15 - Common Incident Response Questions (Incident Management Series)

    Episode 15 - Common Incident Response Questions (Incident Management Series)
    Mar 21 2022
    Episode 15 is the 4th installment in the Security Simplified Incident Management Series. Over the course of dozens of years and 100s of incidents we've heard a lot of questions, and some are more common than others. When we're in the middle of an information security incident, just about every question is valid.

    Tune in to this episode to hear some of the most common questions incident response clients have asked us. We'll share our common responses too.

    At SecurityStudio, our mission is: "Simplify Information Security For ALL".
    #MissionBeforeMoney.
    Más Menos
    22 m
  • Episode 14 - Common Incident Management Mistakes (Incident Management Series)

    Episode 14 - Common Incident Management Mistakes (Incident Management Series)
    Mar 10 2022
    The 3rd installment in the Security Simplified Incident Management Series. In this episode, Ryan and Evan have a good discussion about the most common mistakes we've seen over the years with incident response/management.

    Maybe you're prone to one (or more) of these mistakes, or you've certainly heard about them. Regardless, these guys have already paid the "dumb tax". Learn how to avoid common mistakes and adopt the best plan for your organization!

    All this while staying true to our motto: "Simplify Information Security For ALL". It's our mission. #MissionBeforeMoney.
    Más Menos
    30 m
  • Episode 13 - Busting Incident Management Myths (Incident Management Series)

    Episode 13 - Busting Incident Management Myths (Incident Management Series)
    Mar 4 2022
    This is #2 of 9 in the Security Simplified Incident Management Series. In this episode (#13), Evan and Ryan bust the top incident response planning myths. This is a MUST LISTEN episode where the guys break it down using simple logic.

    Despite the fact that information security incidents are certain to happen, most organizations do NOT do proper planning.
    Más Menos
    21 m
  • Episode 12 - Building Support for Incident Management (Incident Management Series)

    Episode 12 - Building Support for Incident Management (Incident Management Series)
    Feb 24 2022
    The Security Simplified Podcast is back, and we're introducing the Incident Management Series! For the next nine episodes, Evan and Ryan will simplify Incident Management for the Security Simplified Podcast audience.

    We start the series with this episode (Episode 12), tackling how to build support for an Incident Management Program. Despite the fact that information security incidents are certain to happen, most organizations do NOT do proper planning.

    Maybe we (information security professionals) haven't done a good job communicating the importance of an incident management program. Maybe we don't know the importance ourselves. Whatever the reason, we MUST do better!

    #MissionBeforeMoney
    Más Menos
    21 m
  • Episode 11 - Guidelines, Standards, and Procedures

    Episode 11 - Guidelines, Standards, and Procedures
    Jan 20 2022
    The 5th installment in the Information Security Governance Simplified Series, "Guidelines, Standards, and Procedures".

    In case you haven't noticed yet, Evan and Ryan have taken you from top to bottom with governance. It's not nearly as complicated as we tend to make it! In episode 10, the topic of information security policies was covered, and our policies need some tactical support. This is where guidelines, standards, and procedures are used.

    - What is a "guideline"?
    - What is a "standard"?
    - What is a "procedure"?
    - The purpose for each document type.
    - Approvals for each document type.

    Next week, we wrap up the series with "Maintaining Effective Governance".

    Hope you enjoy!
    Más Menos
    21 m
  • Episode 10 - Information Security Policies

    Episode 10 - Information Security Policies
    Jan 13 2022
    The next installment in the Information Security Governance Simplified Series.

    After covering the definition of information security governance (Ep. 7), the importance of aligning governance with the organization's mission (Ep. 8), and information security roles and responsibilities (Ep. 9), Ryan and Evan tackle information security policies in this episode (Ep. 10).

    - What are policies used for?
    - Who approves policies and policy changes?
    - Who maintains policies?
    - Which policies are considered "standard" policies?
    - Policy status tracking.

    Information security policies are critical to the success of an information security program, BUT only if they're done and used properly.
    Más Menos
    20 m
  • Episode 9 - Roles and Responsibilities

    Episode 9 - Roles and Responsibilities
    Jan 6 2022
    Continuing the Information Security Governance Simplified series, Ryan and Evan discuss roles and responsibilities and their importance to effective information security governance.

    Without explicitly defined roles and responsibilities accountability suffers (or is completely non-existent).

    In this episode, the topics include:
    * The Board of Directors (if it exists). – FOUR THINGS
    * Executive management.
    * Who is “ultimately responsible” for information security?
    * Directors and managers.
    * Information security personnel.
    * All personnel.

    Formally defining roles and responsibilities is critical. Listen to this episode to learn simple tips and tricks that Ryan and Evan have learned over the years, saving you the headaches of repeating the same mistakes they did.
    Más Menos
    22 m
  • Episode 8 - Governance Alignment

    Episode 8 - Governance Alignment
    Dec 30 2021
    Evan and Ryan pick up the "Information Security Governance Simplified" series where they left off in Episode 7 - Define Information Security Governance. In this episode, they discuss:

    - The importance of aligning governance with the mission of the organization.
    - Defining the mission for the information program.
    - The importance of executive management buy-in, and how to get it.
    - Defining the information security charter document.
    - Determining initial communication protocols.

    Information security governance should NOT be painful, and when governance is in alignment with the organization's purpose, it's actually the opposite. Good, well thought-out governance, is harmonious and it is possible to get everyone on the same page.

    We hope you enjoy Episode 8 - Governance Alignment, and join us next week for Episode 9 - Roles and Responsibilities!
    Más Menos
    18 m