#CISOlife

In this episode of #CISOLife, hosts Brian Haugli and Dmitriy Sokolovskiy, delve into the dynamics of the RSA Conference, exploring its evolving relevance and the broader implications for cybersecurity. They discuss the nature of cybersecurity events, the benefits of smaller, local conferences like Secure World, and the importance of vendor relationships and ROI in cybersecurity. The conversation...

"#CISOlife" is a podcast that explores the challenges and strategies of cybersecurity leadership. In a compelling episode, host Brian Haugli welcomes Andrew Pendergast, Managing Director at NFP, to delve into the intricacies of Directors & Officers (D&O) Insurance. This episode provides a thorough breakdown of how D&O Insurance operates and its significance for Chief Information...

What does good look like? ISSA Keynote by Brian Haugli, CEO, SideChannelCybersecurity program goals are often centered around the comparison to sector peers, “best practices”, and “reasonable controls”. These terms and approaches leave much ambiguity in an industry that’s seeking defined, focused expectations on outcomes. While most acknowledge the existence of frameworks like NIST CSF or CIS...

Welcome back to #CISOlife with your host, Brian Haugli! In this episode, we dive deep into the world of CISO searchability, placement, and the evolving landscape of cybersecurity leadership.🎙️ Joining us from across the Atlantic, Joe Head, the director of CISO search at Intaso, shares his valuable insights on what makes a top-tier CISO, the nuances of the role across different industries, and...

The world of finance and cybersecurity has entered a new chapter with the U.S. Securities and Exchange Commission’s (SEC) recent final rule on cybersecurity disclosure. Effective September 5, 2023, this new regulation requires public companies to enhance transparency around cybersecurity risks and incidents. We will delve into the details of the final rule, discuss its impact on registrants, and...

Review of an engagement and initial work as the CISO or a vCISO. More at SideChannelWhy do organizations start a cybersecurity program? 1. Customer demands 2. Board or C-suite requests 3. Regulation requires it 4. Right thing to do 5. Post post breachAssess against a cybersecurity standard, framework or regulationBuild cybersecurity roadmap to address gaps

A #CISOlife overview of the public information of the recent American Airlines breach by Brian Haugli, CEO, SideChannel. Brian presents an explanation and walk through of how an O365 tenant can be hacked where legacy authentication methods are still available; specifically with IMAP. The info released so far shows a series of steps: American Airlines has a breach of O365 Still using legacy...

vCISO provider SideChannel's approach to building a cybersecurity program for startups and mid-market companies. [2:15] The vCISO should be able to do the following (part of the #cisolife) [3:30] Develop, or mature currently existing, documentation for the following: [4:30] Information Security Strategy (3 to 18 months) - taking into account information from Risk Assessment and Gap Analysis...

Brian Haugli & David Chasteen discuss potential impacts on privacy post Roe v Wade being overturned by the Supreme Court. Both share ideas and concerns that could have negative impacts on privacy and personal data usage by companies using big data analytics. #cisolife #cybersecurity #privacy

Overview of Access Control & Zero Trust concepts, specifically with system to system & user to system access. Ideal outcomes for micro-segmentation using software defined networking (SDN) include: Reduced costs for management Reduced costs for licensing Reduced costs for hardware Increased security and control of accesses across end-points, users, and systems