DrZeroTrust

Discussions on how a big time CISO handles security for his organization.  Getting executive buy in.  What is a non-starter for solutions and vendors?  How does his team select tooling?  What is the most important thing for his global organization?  These and other important questions in this episode.

Bad OPSEC on social media?  Farmers COOP hit with ransomware?  State government organization down for 4 months after "sophisticated" attack?  What should you know about cyber insurance?  Banking industry sees 1300% increase in attacks in 2021!  10 ways to avoid failing at ZT and more in this episode.

Are certifications worth it?  Does school prepare the workforce for a career in cyber?  What about K-12?  How do we get better?  What matters more being certified or time on the keyboard?  Why do we have a shortage of cyber folks when the labor statistics say so many people are looking for work in technology?

Deepfakes are being used by scammers, now!  What about the ZT study?  Do you need more money for ZT?  Is social media a valid threat vector?

Thoughts from a guy running a cyber security company on everything from growth, hiring, and how he keeps his company secure even though he knows they are a real target.

Is the new director of CISA doing the right thing?  Do people really pay for ransomware keys?  What about the T-Mobile hack?  Is sorry good enough?  What is the new method of ransomware that only encrypts part of a file?

A government and industry meeting on cyber at the White House?  Why is cyber insurance such a crazy market sector?  What do ransomware actors do when they get on a system?  What should we learn from those tactics and how can we defend ourselves better?

Insights and knowledge with an expert on China, the CCP, and the motivations and tactics around cyber warfare operations.

MFA/2FA is no good?  What about disinformation and propaganda with covid?  Is your baby's camera vulnerable to the new compromise?  And what do users actually think about going "around" security controls?

John Kindervag, Senior VP at Tuit and the mastermind behind the Zero Trust concept, shares his extensive expertise on modern cybersecurity. He discusses the critical journey of cybersecurity leaders post-breach, emphasizing the urgent need for strong governance. Kindervag introduces a practical five-step approach to implementing Zero Trust, highlighting the importance of aligning cybersecurity with business objectives. He also critiques the misallocation of resources and the necessity for a deeper understanding of data security to combat insider threats and enhance defense mechanisms.