Episodes
-
eIQcast Episode 22: Update on PCI
Discussions about PCI-DSS rules this year have focused on how effective the guidelines really are at preventing theft of credit card data. Recent survey data indicates merely following PCI does not protect a wide range of protected data. In the newest episode of the eIQcast, eIQneworks Product...
-
eIQcast Episode 21: The Role of File Integrity Monitoring
In this episode of the eIQcast, Mike Rothman dives into the nuances of file integrity monitoring and why it's an important aspect of both security and compliance. One of the first things an attacker is going to do is mess around with system files, so having some mechanism to ensure that system...
-
eIQcast Episode 20: Seeing Clearly Through the Clouds
In this latest episode of the eIQcast, eIQnetworks SVP of Strategy Mike Rothman discusses some of the challenges of cloud computing with Ross Levanto. Mike goes into the issues of maintaining visibility when networks and systems reside in someone else's datacenter, and some of the mechanisms eIQ…
more -
eIQcast Episode 19: BUSTED! The Greatest Hacker Goes Down...
This past Monday the U.S. Justice Department charged 28 year-old Albert Gonzalez with a series of crimes that resulted in the theft of more than 130 million credit and debit card numbers from late 2006 to early 2008. The indictment places blame for several high-profile data theft incidents on a...
-
eIQcast Episode 18: eIQviews on Black Hat
eIQnetworks Senior Vice President of Strategy Mike Rothman just returned from Black Hat USA 2009 in Las Vegas, which took place from July 25-30, 2009. Mike has been to Black Hat many times, and the more things change, the more they stay the same. The presentations all lead to same conclusion: No...
-
eIQcast Episode 17: Exposed Smart Metering and Energy Security Compliance
According to published reports, one of the anticipated sessions at the upcoming Black Hat conference will show vulnerabilities within smart metering technologies that certain utilities are deploying to make the electricity grid more intelligent-- from energy production through consumption. The…
more -
eIQcast Episode 16: The need for Automation
As noted in the previous post on eIQviews, the results of spring surveys show that security spending is down. While that's not exactly a surprise, it puts security managers in a pickle. Given the economic situation, how are they to keep their systems secure and compliant, especially since the...
-
eIQcast Episode 15: Beyond PCI to Security
Since Your Working Toward PCI Compliance, Why Not Try to Make Your Enterprise Secure, too? Events in 2009 provide further proof that PCI compliance is not enough to secure credit card information, yet PCI compliance is a major driver of technology purchases each and every day. If the need-to-have...
-
eIQcast Episode 14 - Analyzing Melissa Hathaway's Recommendations
During one of the most hyped keynotes at the recent RSA conference, President Obama's "cyber-security czar" Melissa Hathaway outlined at a high level plans for improved security within the federal government. In the latest episode of eIQcast, Host Ross Levanto and eIQnetworks Product Evangelist...
-
eIQcast Episode 13: Verizon Breach Report
Recently the folks at Verizon Business released their annual data breach analysis report. From the RSA 2009 show, Ross Levanto and eIQ Product Evangelist John Linkous discuss the findings and help interpret what issues are identified by looking at the report. Running time: 9:53
-
eIQcast Episode 12 - Continuous Compliance Coming (or not)
As recently discussed in a post by Mike Rothman, a Visa executive this week sought to clarify a company claim that no PCI-compliant company has suffered a data breach. Given that PCI compliance is determined at a fixed moment in time, the unattainable ideal is "continuous" compliance. In the…
more -
eIQcast Episode 11: Conficker Mania
On the eve of the April 1 expected trigger date of the worm Conficker, host Ross Levanto interviewed eIQnetworks Product Evangelist John Linkous in this episode of eIQcast. They discussed why everyone is especially concerned about this particular worm. They also reviewed certain data sources that...
-
eIQcast Episode 10: Stimulating the EHR
The American Recovery and Reinvestment Act signed by President Obama last month includes a new initiative to create standard electronic health records over the next few years. Since a standard way to exchange health information opens up the possibility of a hacker attack, the federal government…
more -
eIQcast Episode 9: HIPAA is back!
It looks like 2009 maybe finally be the year of HIPAA. For those of you in the business for a long time, HIPAA was big news back in the early part of this decade (2001-2004), but due to a lack of enforcement, the regulation has not been top of mind for years, in the wake of Sarbanes-Oxley and…
more -
eIQcast Episode 8: Another Payment Processor Breach
As noted in an earlier post on this blog, news surfaced this week of credit card theft at a payment processing firm. While the name of the firm has not been announced, you'd think the crime scene investigators are on the job. The news comes merely weeks after payment processor Heartland Payment...
-
eIQcast Episode 7: FAA and Incident Response
In this episode of the eIQcast, Ross Levanto interviews Link (that's eIQ Product Evangelist John Linkous for newbies) about the recent FAA breach. Clearly the FAA had a strong incident response process in place since they disclosed the breach within a week. As with everything, there are always...
-
eIQcast Episode 6 - Configuration Audit
This week, John and Mike tackle the concept of configuration audit and why it's important to ensure devices are configured correctly. We also discuss some of the configuration "standards" out there, like Center for Internet Security and some suggestions from the US Federal Government. Running…
more -
eIQcast Episode 5: Heartland and PCI
This week's episode is focused on the Heartland data breach and it's eventual impact on PCI. Mike Rothman, eIQ's SVP of Strategy, is interviewed by Ross Levanto and discusses some of the specifics behind the breach and reinforces the message that log data alone is not going to catch these new...
-
eIQcast Episode 4 - Drilldown on COSO/COBIT
In this episode, John Linkous and Mike Rothman drill deep into the COSO/COBIT framework. Why do you care? Well a good part of the acceptable practices of little regulations like Sarbanes-Oxley and FISMA are directly related to COBIT. Thus, if you have to worry about those regulations, you should…
more -
eIQcast Episode 3: Compliance Automation
In the third episode of the eIQcast, John and Mike tackle the concept of compliance automation. What exactly are you automating? And how do you delve into some of the specific compliance regulations and frameworks to figure out how to do more with less. Given the economic backdrop heading into...
-
eIQcast Episode 2: Security Automation
In the second eIQcast, John and Mike discuss the need to automate security operations and some of the issues therein. The reality is that attacks have not stopped, but in this kind of macro-economic environment the opportunity to add resources to defend against attacks is limited. Thus we all…
more -
eIQcast Episode 1 - Low and Slow Attacks
In this inaugural episode of the eIQcast, Mike Rothman and John Linkous decompose a particularly nasty attack called the "low and slow" attack, which is designed to make existing defenses obsolete. Listeners will understand how the low and slow attack works and also how to defend against it using...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
Loading similar podcasts...