Welcome to Episode 7 of the Distilled Security Podcast!

In this episode, hosts Justin, Rick, and Joe are joined by special guest Brandon Eckert to explore his fascinating journey in cybersecurity, share industry insights, and enjoy a fun debate on Thanksgiving favorites. Here’s what’s in store:

Topics Covered:

🔹 Navigating a Career in Cybersecurity
Reflections on starting out in cybersecurity, overcoming challenges in small-town IT careers, and the role of certifications in shaping career success.

🔹 The Value of Certifications
How certifications like OSCP contribute to career growth, practical knowledge, and their relationship with networking and formal education.

🔹 Mentorship and the Pittsburgh Cybersecurity Community
The importance of fostering growth, mentoring local talent, and giving back to the Pittsburgh security community.

🔹 Networking vs. Certifications
A discussion on what matters more for career advancement and the unique benefits of each.

🔹 Auditor Stories and Lessons Learned
Hear hilarious and insightful tales from hospital audits, ethical dilemmas, and tips for managing challenging auditor experiences.

🔹 Business Continuity Challenges
How organizations can prepare for rare but impactful events, like solar flares, while building strong auditor relationships.

🔹 Thanksgiving Favorites
A lighthearted wrap-up featuring turkey tips, stuffing recipes, and the ultimate leftover turkey sandwich.

🔸 Links
Widow Jane Black Opal: https://widowjane.com/

🔸 Spirits
Widow Jane Black Opal
A rare blend of bourbons, each aged for at least 20 years and finished in Japanese Mizunara oak. Notes of toffee, plum, and tobacco make this whiskey an extraordinary treat.

🔸Hosts

• Justin Leapline
• Joe Wynn
• Rick Yocum

🔸 Guest
🙋🏻‍♂️ Brandon Eckert

🎙 Connect with Us
Website: Distilled Security Podcast
X: @DisSecPod
Email: hello@distilledsecuritypodcast.com

Episode 6: SEC Penalties, M&A Security, and Due Diligence

Welcome back to the Distilled Security Podcast! In this episode, hosts Justin, Rick, and Joe dive into the latest in cybersecurity, from regulatory challenges to pop culture:

Topics Covered

1. SEC Penalties for Cybersecurity Disclosures
   Discussing recent SEC penalties due to lapses in cybersecurity disclosure, the implications for companies, and how organizations can stay compliant.
2. Cybersecurity Materiality and Disclosure Practices
   Tips on navigating the materiality assessment of cybersecurity incidents and ensuring compliance with auditors' disclosure requirements.
3. Preparedness Through Tabletop Exercises
   Exploring tabletop exercises as a method to enhance readiness for cybersecurity disclosures.
4. Security in Mergers & Acquisitions
   The importance of aligning security philosophies, protecting supply chain integrity, and fast decision-making in M&A processes.
5. Pre-Mortem Analyses for Risk Mitigation
   Utilizing pre-mortem analyses to identify risks in acquisitions and ensure security compatibility before a merger.
6. Best Practices for Selling a Company with Strong Security
   Tips on audit readiness, maintaining a secure posture, and what security leaders should prioritize to avoid penalties or discounts during acquisitions.
7. Information Control in Modern Warfare
   How controlling information plays a strategic role, with examples from cyberpunk themes to illustrate the power of data control.
8. Favorite Cybersecurity Movies
   A fun review of iconic cybersecurity movies, highlighting elements like data movement, IP address inaccuracies, and common movie hacking tropes.
9. Due Diligence Strategies for Small Businesses
   Key steps for conducting effective due diligence, including using a risk-based approach to compliance and managing contracts efficiently.

Links

• Cyber Scoop

Spirits

• Barrell Seagrass - A unique blend of American and Canadian rye whiskeys, each carefully selected and finished in Martinique Rhum, Madeira, and apricot brandy barrels.

Hosts

• Justin Leapline
• Joe Wynn
• Rick Yocum

Connect with Us

• Website: Distilled Security Podcast
• Twitter: @DisSecPod
• Email: hello@distilledsecuritypodcast.com

Time Stamps

• [00:01:25] SEC penalties for cybersecurity disclosure lapses
• [00:05:16] Working with external auditors on cybersecurity disclosures
• [00:09:30] Assessing cybersecurity materiality in disclosures
• [00:11:45] Tabletop exercises to improve disclosure preparedness
• [00:14:36] Cybersecurity considerations in M&A
• [00:19:12] Making fast, informed security decisions
• [00:23:06] Pre-mortems for assessing acquisition risks
• [00:25:12] Compatibility of security philosophies in M&A
• [00:30:20] Securing supply chains in acquisitions
• [00:34:23] Steps to sell a company securely
• [00:37:06] Preparing for audits in the sale process
• [00:42:07] Hosts discuss favorite cybersecurity movies
• [00:45:57] The strategic role of information in warfare
• [00:48:49] Data transport themes in cyberpunk films
• [00:52:36] The infamous fake IP addresses in movies
• [00:56:01] Due diligence for small businesses and startups
• [01:00:47] Centralized vs. decentralized security strategies
• [01:02:20] Adopting a risk-based approach for security questionnaires
• [01:06:05] Negotiating buyer risk assessments
• [01:10:11] Leveraging compliance automation tools
• [01:12:55] Managing contract risks effectively
• [01:16:10] Ensuring alignment between contract terms and security questionnaires

Join hosts Justin, Rick, and Joe as they cover:

• Resume Review Insights: Joe offers valuable tips on resume writing, focusing on showcasing accomplishments and using metrics to stand out.
• Passion Projects and Hobbies: The team discusses how personal projects and volunteer work can make resumes more compelling by demonstrating a passion for the field.
• Community Engagement at TRISS: The hosts invite listeners to their booth at the upcoming Three Rivers Information Security Symposium (TRISS), where they will be offering resume reviews and engaging with attendees.
• Counter-Espionage and Pagers: A fascinating look at the use of pagers in recent counter-espionage operations, analyzing their effectiveness and ethical concerns.
• Supply Chain Security Concerns: A discussion on the risks tied to supply chain vulnerabilities, focusing on hardware inspections.
• Tabletop Exercises in Cybersecurity: The hosts highlight the importance of tabletop exercises to prepare organizations for security incidents, contrasting them with current trends in incident response training.
• School Violence Threats: An examination of the rise in school violence threats and the challenges schools face in managing these situations.

Links

• Three Rivers Information Security Symposium (TRISS)
• US Maritime Trade and Port Cybersecurity

Spirits

• Boone 1833 12-Year-Old, Snyder's Flask (discontinued) - https://boonedistilling.com/

Hosts

• Justin Leapline - LinkedIn
• Joe Wynn - LinkedIn
• Rick Yocum - LinkedIn

Connect with Us

• Website: Distilled Security Podcast
• Twitter: @DisSecPod
• Email: hello@distilledsecuritypodcast.com