PODCAST · business
Careers Information Security Podcast
by CareersInfoSecurity.com
Exclusive, insightful audio interviews by our staff with careers/security leading practitioners and thought-leaders
Episodes
-
Taking Steps to Reduce Vendor Security Risks
With the surge of large health data breaches involving vendors, healthcare entities must take critical steps to improve their third-party security risk management, says John Delano, a CIO at AdventHealth, which operates 50 hospitals in nine states.
-
Why Are Cyber Insurance Premiums Rising?
Many healthcare organizations that are up for renewals of cyber insurance policies are seeing big increases in premiums and a long list of new security requirements from their carriers, says Mac McMillan, who recently returned as CEO of the consultancy CynergisTek.
-
Telehealth: Emerging Security, Privacy Issues
While the use of telehealth has surged during the COVID-19 pandemic, the data security and privacy concerns for both patients and healthcare providers have also increased, says cybersecurity strategist Kayne McGladrey.
-
Case Study: Streamlining Third-Party Risk Management
In a case study interview, Aaron Miri, CIO at The University of Texas at Austin, describes steps the organization is taking to streamline and automate third-party risk management at its various units, including its medical school and clinical practice.
-
Supply Chain Attacks: Risk Mitigation Advice
In light of recent supply chain attacks, many organizations need to improve mitigation of the risks posed by their vendors, says Tony Cook, head of threat intelligence at GuidePoint Security.
-
Stress Management Tips for Cybersecurity Professionals
Stress levels for CISOs are increasing as they deal with emerging security issues during the COVID-19 pandemic. So it's more important than ever to make communication and diplomacy a top priority to help facilitate a team approach to security, says training specialist Keil Hubert.
-
Balancing Strong Security With Clinicians' Needs
What are some of the critical considerations for aligning strong security controls with the workflow needs of clinicians? Omar Khawaja, CISO of Highmark Health, which includes health plans and a healthcare delivery system, discusses key issues.
-
A Guide to Healthcare Sector Info Sharing Best Practices
Healthcare organizations now can take advantage of a new guide to best practices for cyber intelligence sharing - which could come in handy during the COVID-19 crisis, says Errol Weiss, chief security officer of the Health Information Sharing and Analysis Center.
-
Assessing Vendor Security Risks: The Challenges
Although many healthcare organizations are becoming more mindful of the security risks posed by vendors, they're not consistently vetting these companies or adequately mitigating risks, says Andrew Hicks of the consultancy Frazier & Deeter, who offers strategic insights.
-
The Importance of Setting Patching Priorities
Recent alerts from federal regulators about patching vulnerabilities in the Windows 10 operating system highlight the importance of strong, ongoing patch management practices for healthcare organizations, says former CISO Mark Johnson.
-
Why Healthcare Needs to Shift Its Cybersecurity Focus
Despite progress in improving cybersecurity, the healthcare sector still needs to change its focus from compliance to risk, says Mac McMillan, co-founder and CEO emeritus of security consulting firm CynergisTek.
-
A CISO Offers Third-Party Risk Management Tips
An essential component of a vendor risk management program is to understand how an organization's risk posture changes when a new vendor is added - especially if they have subcontractors, says Jagdeep Singh, CISO at InstaRem, a Singapore-based fintech company.
-
Case Study: The Devastating Impact of a Ransomware Attack
One of the earliest ransomware victims in the healthcare sector has a strong message for organizations that believe they won't be targeted: Get prepared for an attack - otherwise you risk a devastating impact.
-
Minimizing Cloud Security Risks
Healthcare organizations need to take bold steps to help ensure that their cloud services providers are effectively protecting patient data. That's the advice of John Houston, CISO of UPMC, and Ira "Gus" Hunt, a security specialist at the consultancy Accenture Federal Services.
-
A CISO Lists Top Governance Challenges
What are some of the toughest information security governance challenges healthcare organizations face? CISO Afzal Bashir discusses key insights based on his experience.
-
Telehealth: Taking Steps to Prevent Breaches
To help prevent breaches involving telehealth, it's critical that only the minimum amount of patient data be shared when delivering remote healthcare services, says Scott Anderson, CTO at Conversa Health.
-
Wipro's New CISO on 'Frictionless' Security
Security practitioners should strive to offer their organizations "frictionless" security that's truly a business enabler, says Sridhar Govardhan, newly appointed CISO of Wipro Ltd., a Bengaluru-based company offering information technology, consulting and business process services.
-
Cybersecurity Challenges Facing Ambulatory Surgery Centers
Ambulatory surgery centers face a variety of difficult cybersecurity challenges, says Tom Hui, CEO of software vendor HSTpathways, who offers insights on how to address them.
-
DevSecOps: A Continuous Security Approach
With modern agile development practices, such as DevOps, the time for development has been significantly reduced. So security can no longer be just a step in the process; it needs to be a continuous part of the development lifecycle, says CA Technologies' Ayman Sayed.
-
CASB: The Emerging Challenges
Although more organizations are adopting cloud access security broker technology, CASB policy templates and runbooks, as well as best practices, are still evolving, says Rohit Gupta, group vice president for cloud security products at Oracle Corp.
-
How Health Entities Can Tap DHS Tools for Cyber Skill-Building
Cybersecurity education expert Noel Kyle of the Department of Homeland Security explains how healthcare entities can tap various DHS educational and training resources to bolster their cyber workforce bench strength.
-
Winning C-Suite Support for Cybersecurity Funding
Getting the C-suite to support sufficient funding for cybersecurity requires three important steps, says Mary Chaput, CFO at the security consultancy Clearwater Compliance.
-
A CIO Describes InfoSec Recruiting Challenges
Finding security staff members with the right mix of technical qualifications and real-world experience is a difficult challenge, says Curt Kwak, CIO of Proliance Surgeons, who describes his strategies.
-
Essential Traits of Successful CISOs
What's it take to be a successful CISO? Mark Dill, former longtime information security director at the Cleveland Clinic, says it comes down to being patient, persistent and perceived as practical. He offers detailed career advice in this interview.
-
'Everyone is a Security Expert'
What's it like to be a CIO or CISO at an enterprise where everyone is a security expert? What are some of the unique challenges and advantages? Blue Coat Systems CIO Chris Birrell shares his experiences in this role.
-
Articulating Security's Business Value
When security succeeds, it is often unnoticed. That success might also make security investments hard to sustain, given its low profile in organizations. Gartner's Tom Scholtz discusses articulating security's business value.
-
The Value of CISO Mentoring
Do CISOs need mentoring? Daniel Lohrmann shares insights on the importance of mentoring CISOs to enable them to spot growth opportunities and also to build up their interpersonal skills.
-
The Changing Role of Healthcare CISOs
CISOs are moving from being entrenched in technology issues to becoming more involved in top-level business matters, which requires new skills, says George McCulloch, who leads the new Association for Executives in Healthcare Information Security.
-
CIO Leader Outlines an InfoSec Strategy
To help protect health data as cyberthreats evolve, healthcare CIOs must roll out a "blended strategy" for security, says Charles Christian, new chairman of the College of Healthcare Information Management Executives, an association of CIOs.
-
3 Health InfoSec Lessons from Sony Hack
The healthcare sector can learn three important lessons from the recent hack attack on Sony Pictures Entertainment, which compromised employee health data, says breach resolution expert Michael Bruemmer of Experian.
-
Effective CPOs Must Justify Their Roles
Harriet Pearson, one of the first chief privacy officers at a major enterprise, discusses what makes an effective CPO and privacy lawyer in a fast-evolving field.
-
InfoSec Career Advice from HIMSS' Lee Kim
Today's information security professionals need to "be like a sponge and learn from various domains that are outside your niche," says Lee Kim, director of privacy and security at the Healthcare Information and Management Systems Society.
-
Army Cyber Leader Touts Hacking Skills
If the U.S. military awarded a decoration for hacking, Army Col. Gregory Conti would wear it proudly on his uniform. Hear Conti, director of the Army Cyber Institute, explain why ethical hacking helps drive America's innovation engine.
-
Privacy for Non-Privacy Professionals
The IAPP has launched a new privacy certification designed for IT, security and engineering pros. What are the key elements of this new program? JC Cannon, a privacy author and educator, shares details.
-
Where IT and Security Meet
Christopher Augustin, new CIO at First Data, brings both a Wall Street and a start-up perspective to this role. How does he expect to incorporate security to enable the next generation of payments tech?
-
Is Consulting the Right Gig for You?
Have you ever considered starting your own information security consulting firm? Kate Borten, who made the switch from CISO to consultant, offers insights on making a successful transition.
-
InfoLawGroup Co-Founder Takes New Role
Privacy attorney Tanya Forsheit, founding partner of the InfoLawGroup, has just joined the LA office of national firm BakerHostetler. What is her focus, and what advice does she offer attorneys entering the field?
-
Career Profile: Attorney Ronald Raether
What does it take to build a successful legal career in information security and breach response? Attorney Ronald Raether discusses his career path and the necessary skills for those entering the field today.
-
Building a Robust Incident Response Plan
Cris Ewell, CISO of Seattle Children's Hospital, offers a detailed explanation of how to build an effective incident response plan - an essential component of HIPAA Omnibus Rule compliance.
-
Automating Data Analysis
By automating data analysis, organizations can enhance their threat intelligence and lessen their workloads, says Flint Brenton, president and CEO of AccelOps.
-
Real Threat Intelligence
Everyone is talking about threat intelligence, but what are the characteristics that make it useful? David Duncan of Webroot offers insights on new solutions and partnerships.
-
The Evolving Threatscape
Traditional fraud has evolved in complexity, changing the threat landscape dramatically. Greg Maudsley and Preston Hogue of F5 discuss new strategies to mitigate evolving threats.
-
Improving Encryption Management
As organizations expand their use of encryption to help prevent breaches, they must improve their management of cryptographic keys, says Prakash Panjwani, senior vice president at SafeNet.
-
The API as an Attack Vector
The application programming interface is now an attack vector, which creates new security issues, warns Travis Broughton, IT architect at Intel.
-
Fighting Phone Fraud
While much of the security focus is on online fraud and major data breaches, organizations of all sizes and sectors are seeing a rise in phone-based fraud, says Matt Anthony of Pindrop Security.
-
How to Improve Cybercrime Tracking
With enhanced analytics, organizations and law enforcement are improving their ability to trace malware attacks and other advanced persistent threats, says Eward Driehuis of Fox-IT.
-
DDoS Attacks Continue to Grow
Neustar is about to release a new report on the DDoS threat landscape. What are some of the key trends to watch? Neustar's Jim Fink offers a preview of the study's findings.
-
How Mobile Hacks Threaten Enterprise
Among the biggest cyberthreats enterprises face comes from hacks on consumer mobile devices, says Caleb Barlow, a director of product management at IBM Security.
-
Insights on Enhancing Authentication
Too many businesses are worried about how security might adversely affect the user experience, even among their own workforce, says Bert Rankin, chief marketing officer of ThreatMetrix.
-
iBoss Offers Behavioral Analysis
The gateway security solutions provider iBoss Network Security is enhancing its offerings by incorporating analysis of behavioral movement of traffic in and out of the network.
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Exclusive, insightful audio interviews by our staff with careers/security leading practitioners and thought-leaders
HOSTED BY
CareersInfoSecurity.com
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does Careers Information Security Podcast have?
Careers Information Security Podcast currently has 1000 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is Careers Information Security Podcast about?
Exclusive, insightful audio interviews by our staff with careers/security leading practitioners and thought-leaders
How often does Careers Information Security Podcast release new episodes?
Careers Information Security Podcast releases new episodes frequently with a large back catalog of 1000 episodes. Check the episode list for recent publication dates.
Where can I listen to Careers Information Security Podcast?
You can listen to Careers Information Security Podcast on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts Careers Information Security Podcast?
Careers Information Security Podcast is created and hosted by CareersInfoSecurity.com.
URL copied to clipboard!