In this episode I talk about high profile cyber-attacks in the Spring and Summer of 2021.  I’ll review who was attacked, what the attack involved, it’s impact, the aftermath, and how it affected the economy. Sign up for NewsBits from SANS at https://www.sans.org/newsletters/newsbites/ Review Security Intelligence periodically: https://securityintelligence.com/Security Magazine offers solid content:  https://www.securitymagazine.com/Executive Order 14208: https://www.cisa.gov/executive-order-improving-nations-cybersecurityWe are at War, Cyber War: https://www.securitymagazine.com/articles/96125-we-are-at-war-a-cyber-war16 Sectors off limits: https://www.itsecurityguru.org/2021/06/17/biden-says-16-sectors-should-be-off-limits-to-attack/Arctic Wolf Survey: https://arcticwolf.com/resources/press-releases/arctic-wolf-global-survey-reveals-lack-of-confidence-in-cybersecurity-defenses-and-government-action-amid-fears-of-state-sponsored-attacksInsurance and Ransomware: https://www.barrons.com/articles/ransomware-attack-cyber-insurance-industry-51633075202Infant death tied to ransomware 2019: https://threatpost.com/babys-death-linked-ransomware/175232/Colonial Pipeline:https://www.securezoo.com/2021/05/pipeline-ransomware-attack-shuts-down-for-45-of-east-coasts-fuel-us-passes-emergency-waiver https://medium.com/cloud-security/colonial-pipeline-hack-4486d16f2957JBS Breach: https://minnesota.cbslocal.com/2021/06/01/meat-producer-jbs-hit-by-cyberattack-worthington-plant-closes-for-the-day/ https://www.bloomberg.com/news/articles/2021-05-31/meat-is-latest-cyber-victim-as-hackers-hit-top-supplier-jbsIowa Co-Op Links: https://www.foxbusiness.com/technology/ransomware-attack-new-cooperative-agriculture-grain-pork-chicken-supplyhttps://www.securezoo.com/2021/09/iowa-based-farm-service-provider-new-cooperative-hit-by-blackmatter-ransomware-attack/Minnesota Attackhttps://www.reuters.com/technology/minnesota-grain-handler-targeted-ransomware-attack-2021-09-23/ https://www.cybersecuritydive.com/news/agriculture-food-ransomware-coop/607080/

Cyber Security Grey Beard

S3E10 Cyber Security Attacks in the News

In this episode I talk about incident response plans, what they are, why they are important and how to create one.  NIST, the National Institute of Standards and Technology has a fabulous document entitled Computer Security Incident Handling Guide, Special Publication 800-61 Rev. 2.  This document prescribes key data for incident response plans.  In this episode I’ll review key components of this document and how and why these components play a key role in cyber security incident response planning. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf 

S3E9 Cyber Security Incident Response Planning

In this episode I talk about real situations I’ve experienced.  I won’t name companies, only industry and relative geography so as not to expose any entities.  Some of these are more egregious than others, all are good learning experiences, for early as well as experienced professionals.  Many look to join Cyber Security and wonder what it’s really like out there, these tales should provide some insight to that curiosity.  I encourage each of you to think of solutions to these problems.  While I give some throughout the episode, there are many ways to solve problems.  Don’t just think about technical solutions.  What processes or procedures could these organizations implement?  How about training, not just their IT and security staff but their end users as well.  Spending money may solve a problem; however, if the product or service is not installed or utilized properly, will money really make it better?  Use these stories to grow yourself and help you understand what the real world of cyber security, on the ground, really looks like.

S3E8 Cyber Security Stories - Real World Examples

While this podcast focuses on cyber security professionals, this episode provides general and wide-ranging interviewing and presentation tips.  The discussion go into detail about how and why we communicate.  Later there are tips, examples, and recommendations for how to interview, present, and speak publicly overall.  I give suggested questions to ask interviewers and provide information on delivering more engaging and successful presentations.  I also give a handful of tips on speaking and presenting virtually including how to handle the camera, backgrounds, and suggestions for dress.  This episode delivers real world tips for elevating professionals interviewing skill and presentation ability. 

S3E7 Interviewing and Presenting as a Cyber Security Professional

Audio recording of session at MSS Forum LA on June 30th, 2021.  Group discussion lead by Phelim Rowe of CTG Intelligence.  We review the top "post holder" and go into depth around who has responsibility for cyber security in an organization.  I was pleased to join Richard Staynings, Shawn Kohrman, Ashwin Krishnan, and Louis Arul-Doss on this round table discussion.You can watch the Zoom recording on YouTube at https://www.youtube.com/watch?v=uvvqbOMiTmELook out for an MSS Forum in your area.  I&apos;ve spoken at L.A., Denver, and Phoenix and look forward to participating at future conferences.

S3S2 Business and Emotional Skills for Tomorrow's CISO - Live at the MSS LA 2021

In this special episode I&apos;m sharing a real-world conversation I had with an early professional at my company.  This individual worked for a couple of years in the healthcare field as an administrator and then moved to an extremely large company.  He reached out wanting to know what to study and how and where to steer his career.  Listen to this real life conversation and understand a direction and path to take in the cyber security field.  I&apos;m posting this special episode to help all of my listeners understand choices and opportunities.  If you would like to have a similar conversation, reach out at cybergreybeard@gmail.com.

S3S1 Conversation with a Cyber Security Early Professional

Discussion on cyber security certifications.  Which make sense.  Where to focus.  How to proceed.  I cover certifications from GIAC, ISC2, ISACA, EC-Council, Amazon, Microsoft, Google, CompTIA, and others.  This episode discusses areas to find training and recommendations before taking certification exams.  These are recommendations only and based on my opinion and experiences.  Please do research before investing in any certification or training course.ISC2: https://www.isc2.org/ISACA: https://www.isaca.org/Offensive Security: https://www.offensive-security.comEC-Council: https://cert.eccouncil.org/GIAC: https://www.giac.org/GIAC Roadmap: https://www.giac.org/certifications/get-certified/roadmapAWS: https://aws.amazon.com/certification/12 MS Azure certifications https://cloudacademy.com/blog/microsoft-azure-certifications-which-is-right-for-you-and-your-team/ Google Cloud Certifications: https://cloud.google.com/certification/SANS: https://www.sans.org/Infosec Institute: https://www.infosecinstitute.com/UDEMY: https://www.udemy.com/Cloud Academy: https://cloudacademy.com/

S3E6 Cyber Security Certifications

Book reviews of four cyber security books published between 2019-2020. Dark Mirror: Edward Snowden and the American Surveillance State by Barton Gellman 2020, The Hacker and The State by Ben Buchanan, 2020, Sandworm by Andy Greenberg, 2019 and The Coming Cyber War by Marc Crudgington, 2020.  These books provide great insight to where we are in the cyber security profession.  They discuss history, technology, and attacks.  Cyber security professionals need to understand the threat landscape.  These books all help with that in their own way.Dark Mirror: https://www.barnesandnoble.com/w/dark-mirror-barton-gellman/1122928803?ean=9780143110477Hacker and The State: https://www.barnesandnoble.com/w/the-hacker-and-the-state-ben-buchanan/1132885872?ean=9780674987555Sandworm: https://www.barnesandnoble.com/w/sandworm-andy-greenberg/1129288539?ean=9780525564638The Coming Cyber War:  https://www.barnesandnoble.com/w/the-coming-cyber-war-marc-crudgington/1137913105?ean=9781735916309PRISM:  https://www.masslive.com/politics/2013/06codename_prism_secret_program_data_mining.htmlShadow Brokers:  https://darkwebjournal.com/shadow-brokers/Stuxnet:  https://www.csoonline.com/article/3218104/what-is-stuxnet-who-created-it-and-how-does-it-work.htmlWiper:  https://iranprimer.usip.org/blog/2019/oct/25/invisible-us-iran-cyber-warFancy Bear: https://www.crowdstrike.com/blog/who-is-fancy-bear/Sandworm: https://resources.infosecinstitute.com/topic/apt-sandworm-notpetya-technical-overview/Gucifer:  https://www.justice.gov/opa/pr/romanian-hacker-guccifer-sentenced-52-months-prison-computer-hacking-crimesEternal Blue: https://www.cisecurity.org/wp-content/uploads/2019/01/Security-Primer-EternalBlue.pdfSands Casino Hack: https://money.cnn.com/2015/02/27/technology/security/iran-hack-casino/index.htmlDNC Hack: https://www.wusa9.com/article/news/russians-hack-the-dnc-a-timeline/65-bd1326a7-7ed5-4cd7-92a3-63eed75f1bd9

S3E5 Cyber Security Grey Beard Information Security Book Reviews

Financial guidance based on my 30 years’ experience, economic degree, financial education, and wonderful direction from my father, a 40+ year professional financial advisor.  I veer away from my standard cyber security talks in this episode to help students and early professionals learn, grow, and advance their financial well being.  I see a critical need for, and interest in, financial advice and take time herein to help my listeners.Note these are my opinions and recommendations only.  I am not a professional or certified financial advisor and cannot be held liable or responsible for others’ financial decisions.One item I didn&apos;t mention - tracking your finances.  Make sure to use a tool such as Quicken, Mint.com, or a similar financial tracking program.  Consolidate ALL financial data into one place.Check out:1)  Warren Buffet2)  Rule of 723)  The difference between investing and gambling4)  ETFs vs. Mutual Funds5)  Diversification6)  Dollar cost averaging7)  Budgeting8)  Quicken, Mint, or another financial tracking tool

S3E4 Cyber Security Grey Beard Financial Guidance

Advice and examples on how to own your career.  While I focus on cyber security, these tips are valid for any profession.  I give examples of my past as well as situations friends have experienced over the years.  My advice includes tips such as be strong, be proud, track what you do, toot you own horn, and many more.  This is a talk going back to the roots of this Podcast, helping cyber security students and professionals learn, grow, and advance.Send questions, comments, or thoughts to cybergreybeard@gmail.com

S3E3 - Own Your Cyber Security Career

What jobs are out there, what jobs interest you and/or fit best with your desires, abilities, and preferences.  I talk about  eight (8) practices, over a dozen jobs, and 12 markets/industries, for listeners to learn about.  This talk came out of a 1:1 I had with an early professional at my company and I believe many listeners can benefit from this conversation.  Where do you want to take your cyber security career?  What&apos;s out there?  How do you find it?  What should you do?Reach out with questions, comments, or for assistance:  cybergreybeard@gmail.comExamples of "Practices"1)    Identity and Access Management2)    Infrastructure and/or Cloud Security (Tactical)3)    Offensive Testing4)    Threat Management5)    Cloud Security (Strategic)6)    Data Security7)    Application Security8)   Governance Examples of "Markets/Verticals"1)    Healthcare – hospitals, payers2)    Financial Services – Banks, credit unions, insurance companies, 3)    Governments – Local, city, state, Federal4)    Retail – Walmart, BBBY, Home Depot, Petsmart, etc.5)    Automotive – Honda, Toyota, BMW, Dodge, Chrysler, etc.6)    Airline – United, American, El Al, Lufthansa, etc.7)    O&G – Exxon, Shell, BP, etc.8)    Communications – Comcast, Centurylink9)    Technology – MSFT, GOOG, AAPL, FB, HP, IBM10)  Entertainment – Disney (ESPN, ABC, Pixar), Netflix, MGM, Caesars – is this a gaming subset of entertainment11)  Education – K-12, Universities, trade schools, conservatories12) Defense - Lockheed Martin, Bell Helicopter, CSC, Harris Corporation, SAIC, etc.

S3E2 - What to Focus on at Work and Where to Steer Your Cyber Security Career

Herein I talk about where I&apos;ve been for the past 8 months, what&apos;s been going on, and what this season entails.  I go over 7 specific topics I will cover and ask the audience for input on guest speakers and other topics.  This is an exciting talk about the future and what to expect upcoming from Cyber Security Grey Beard.

S3E1 - About the Upcoming Cyber Security Grey Beard Season

How are businesses, with focus on managed security service providers, dealing with remote working in a distributed work environment?  This recording comes from a half hour panel discussion on this topic.Session from Third Annual MSS Forum Denver put on by CTG Intelligence and sponsored by KnowBe4, Hackdefnet, Fishtech Group and Stellar Cyber.Title: Understanding the Evolution of Third Party Security in a Remote Working and Distributed Business EnvironmentBrad Rhodes, Head of Cyber Security, Zvelo Amelia Cohen, Withheld Eric Jeffery, Senior Solutions Architect, IBM Security Rachel Harpley, Director, RecruitBit Security William Hoffman, Co-Founder and CIO, Frontline Cyber Solutions https://denver.mssconference.com/wp-content/uploads/2021/02/MSS-Denver-III-2021-Draft-Agenda-v6.2.pdf

S2S4 Remote Working in a Distributed Business Environment

Discussion around my professional journey with ties into what cyber security jobs exist for students and early professionals.  I talk about specific jobs including network operations, security operations, forensic analysis and others.  The class I spoke to was a Networking I class so I spend a bit of time discussing  network technologies.   I go over specific cyber security threats and attacks while tying them into the daily work of security professionals.

S2S3 Cyber Security Grey Beard's Professional Journey and Jobs for Students and Early Professionals

45 minute presentation delivered to the Long Island ISC2 chapter on October 20, 2020.  I created this content for IIA/ISACA Chicago and launched for ISC2 as the content has wide appeal throughout the Cyber Security spectrum.  This talk focuses on leadership and the need for engagement throughout organizations.  We are, in many ways, the same in Cyber Security as we were 25+ years ago.  Something has to change and this talk focuses on leadership engaging as a potential solution.The agenda covers: Introduction, Leadership Matters, Disparity Requires Variety, True Stories, Statistics, Engage and Understand, Level Up Cyber Security, Solutions that Make a Difference, Conclusion.For a copy of the slides, please send a note to cybergreybeard@gmail.com.

S2S2 Business Leadership and Cyber Security Integration

I'm a Cyber Security Grey Beard helping students, early professionals and seasoned cyber security specialists with career advice as well as job hunting assistance and ways to advance a career. I have over 25 years' information technology experience including over 20 years' in cyber security specifically. I've worked in numerous industries including entertainment, defense, aerospace, telecommunications, technology, and healthcare. I've worked with and for some of the largest companies in the world with a deep focus on healthcare and financial services. I created this podcast to share my experience and help others advance their careers and enjoy professional happiness based on my successes and failures.

hubhopper

Cyber Security Grey Beard

hubhopper