![The Other Side of the Firewall | Ask A CISSP & PMP](/img/default-banner.jpg)
- Видео 1 481
- Просмотров 49 852
The Other Side of the Firewall | Ask A CISSP & PMP
США
Добавлен 3 янв 2021
Cyber security podcast focused on career field diversity, news, discussions, interviews, tips, and training. #cybersecurity #cyberawareness #podcast #cissp #informationsecurity #tech #ai #pmp #pmi #isc2
Welcome to "The Other Side of the Firewall", "Ask A CISSP", and "Ask A PMP", podcast channel, where we shine a light on diversity and achievement in tech. We celebrate People of Color who've broken through to senior and C-suite levels in cybersecurity. Our guests are the industry's trailblazers, sharing insights and stories that guide IT professionals through the tech world's complexities.
Episodes feature lively discussions on cybersecurity news, tips for online safety, and a dash of entertainment. Perfect for experts and newcomers alike, our podcast offers inspiration and knowledge in a fun package.
Subscribe to join a community reshaping tech's landscape, making it more inclusive and secure. Let's navigate the digital world together.
Stay safe, stay secure.
Welcome to "The Other Side of the Firewall", "Ask A CISSP", and "Ask A PMP", podcast channel, where we shine a light on diversity and achievement in tech. We celebrate People of Color who've broken through to senior and C-suite levels in cybersecurity. Our guests are the industry's trailblazers, sharing insights and stories that guide IT professionals through the tech world's complexities.
Episodes feature lively discussions on cybersecurity news, tips for online safety, and a dash of entertainment. Perfect for experts and newcomers alike, our podcast offers inspiration and knowledge in a fun package.
Subscribe to join a community reshaping tech's landscape, making it more inclusive and secure. Let's navigate the digital world together.
Stay safe, stay secure.
Ask a Federal Acquisition Subject Matter Expert Ft. Shauna Weatherly, President of FedSubK
In this episode, Ryan Williams Sr. interviews Shauna Weatherly from FedSubK, a website that provides resources and guidance for small businesses navigating the federal procurement process. Shauna shares her background in federal procurement and her motivation for starting FedSubK. They discuss the challenges and complexities of government procurement, the importance of understanding the process, and the need for resources to help small businesses succeed. Shauna emphasizes the value of having a one-stop resource like FedSubK to provide guidance and support for small businesses entering the federal marketplace. In this part of the conversation, Shauna Weatherly and Ryan Williams Sr. discus...
Просмотров: 6
Видео
Ask a Federal Acquisition Subject Matter Expert Ft. Shauna Weatherly, President of FedSubK
Просмотров 717 часов назад
In this episode, Ryan Williams Sr. interviews Shauna Weatherly from FedSubK, a website that provides resources and guidance for small businesses navigating the federal procurement process. Shauna shares her background in federal procurement and her motivation for starting FedSubK. They discuss the challenges and complexities of government procurement, the importance of understanding the process...
The Pros & Cons Of Facial Recognition At Sporting Events (Podcast Cover)
Просмотров 42 часа назад
The hosts discuss the use of facial recognition technology in stadiums to expedite entry and enhance the fan experience. They explore the potential privacy concerns and the balance between security and personal liberties. The conversation touches on the accuracy of facial recognition technology, the value of personal data, and the future of consumerism. The hosts express mixed opinions on the t...
The Pros & Cons Of Facial Recognition At Sporting Events (Podcast Cover)
Просмотров 52 часа назад
The hosts discuss the use of facial recognition technology in stadiums to expedite entry and enhance the fan experience. They explore the potential privacy concerns and the balance between security and personal liberties. The conversation touches on the accuracy of facial recognition technology, the value of personal data, and the future of consumerism. The hosts express mixed opinions on the t...
Why Is The U.S. Department of Justice Suing Georgia Tech?
Просмотров 224 часа назад
The conversation discusses a cybersecurity lawsuit filed against the Georgia Institute of Technology and Georgia Tech Research Corporation for alleged cybersecurity violations. The university was accused of submitting false results and not implementing the required system security plan for their networks. The discussion highlights the importance of holding universities accountable for cybersecu...
Why Is The U.S. Department of Justice Suing Georgia Tech?
Просмотров 254 часа назад
The conversation discusses a cybersecurity lawsuit filed against the Georgia Institute of Technology and Georgia Tech Research Corporation for alleged cybersecurity violations. The university was accused of submitting false results and not implementing the required system security plan for their networks. The discussion highlights the importance of holding universities accountable for cybersecu...
The Weekly Run Down 8/23
Просмотров 37 часов назад
In this episode, Ryan, Shannon, and Chris discuss their week and various topics, including their children's first week of school, video games they're playing, and TV shows they're watching. They also talk about the upcoming House of the Dragon series and their hopes for our favorite football teams. The conversation covers a range of themes, including parenting, gaming, TV shows, and sports. Ple...
The Weekly Run Down 8/23
Просмотров 37 часов назад
In this episode, Ryan, Shannon, and Chris discuss their week and various topics, including their children's first week of school, video games they're playing, and TV shows they're watching. They also talk about the upcoming House of the Dragon series and their hopes for our favorite football teams. The conversation covers a range of themes, including parenting, gaming, TV shows, and sports. Ple...
FAA Proposes New Cyber Rules
Просмотров 197 часов назад
The FAA proposes new cybersecurity rules for airplanes to protect against intentional unauthorized electronic interactions that could create safety hazards. This is long overdue, as airplanes and other forms of mass transit have the potential to be used as weapons. The airline industry needs to take cybersecurity more seriously, especially with the increasing use of Wi-Fi on planes. The article...
FAA Proposes New Cyber Rules
Просмотров 67 часов назад
The FAA proposes new cybersecurity rules for airplanes to protect against intentional unauthorized electronic interactions that could create safety hazards. This is long overdue, as airplanes and other forms of mass transit have the potential to be used as weapons. The airline industry needs to take cybersecurity more seriously, especially with the increasing use of Wi-Fi on planes. The article...
Ready for CMMC 2.0?
Просмотров 1016 часов назад
The discussion revolves around the proposed CMMC 2.0 rule by the US Department of Defense (DoD) to enhance cybersecurity in the defense industrial base. The rule aims to improve contractor implementation of cybersecurity requirements and tighten regulations. The hosts express the need for stricter measures, especially for large companies with government contracts. They discuss the potential cha...
Was Your Social Security Number Stolen In Breach Of 2.9 Billion Records ?
Просмотров 12День назад
Was Your Social Security Number Stolen In Breach Of 2.9 Billion Records ?
Was Your Social Security Number Stolen In Breach Of 2.9 Billion Records ?
Просмотров 22День назад
Was Your Social Security Number Stolen In Breach Of 2.9 Billion Records ?
How A Cyber-Researcher Took Down A Ransomware Gang?
Просмотров 1014 дней назад
How A Cyber-Researcher Took Down A Ransomware Gang?
How A Cyber-Researcher Took Down A Ransomware Gang?
Просмотров 1614 дней назад
How A Cyber-Researcher Took Down A Ransomware Gang?
Protecting Hospitals From Cyberattacks
Просмотров 1114 дней назад
Protecting Hospitals From Cyberattacks
Protecting Hospitals From Cyberattacks
Просмотров 3014 дней назад
Protecting Hospitals From Cyberattacks
Chrome, Firefox, and Safari Security Broken By ‘0.0.0.0 Day’
Просмотров 3114 дней назад
Chrome, Firefox, and Safari Security Broken By ‘0.0.0.0 Day’
Chrome, Firefox, and Safari Security Broken By ‘0.0.0.0 Day’
Просмотров 7314 дней назад
Chrome, Firefox, and Safari Security Broken By ‘0.0.0.0 Day’
Record-Breaking $75M Ransomware Heist
Просмотров 2521 день назад
Record-Breaking $75M Ransomware Heist
Record-Breaking $75M Ransomware Heist
Просмотров 5821 день назад
Record-Breaking $75M Ransomware Heist
The DigiCert Dilemma & Why Business Continuity Is So Important
Просмотров 1521 день назад
The DigiCert Dilemma & Why Business Continuity Is So Important
The DigiCert Dilemma & Why Business Continuity Is So Important
Просмотров 1021 день назад
The DigiCert Dilemma & Why Business Continuity Is So Important
Great show gentlemen 💪🏼 🇺🇸 Brought up a lot of perspectives on the topic.
@theothersideofthefirewall7511 The link to his discord isn't working for me.
My apologies for still loving my PS3! Even though my son has his own console.
Ryan said, “knock it off and step into 2024, Rich!” 😂
Having been in the transportation sector in the military and civilian areas as a truck driver, with the work on autonomous big rigs, how secure are those gonna be? 75 foot of one of those can cause serious damage just from an accident, like the one south of Chattanooga TN back in the early 2000’s. Over a hundred vehicles involved. 😢
This is how log4j was discovered, minecraft users had been using it on each other for a long time then someone started using it commercially and everyone went crazy to fix it.
Great interview, teaching is learning in our journeys through life and all its aspects. 😎💪🏼
I like your song Lifespan... You have a great voice!!
The bookie of the dead encryption daily news wager encrypted j@fikes
Book of the dead encryption.
Encrypt billy martin billy marten & ted williams social security numbers joe torre yogi berry & all dead space incrypt&ycrypt
Awesome and entertaining episode, had us ROTFL 🤣🤪
Awesome and very informational podcast! If you’re a veteran, you should absolutely subscribe to this channel. The host is a fellow veteran as well. #veteranshelpingveterans
Thank you for the awesome recommendation! All four hosts are vets as well. Ryan, Shannon, and Daniel are Air Force and Chris is Navy. #veteranshelpingveterans indeed.
Subscribed, non invasive presentation with fair opinions and deep dives without needing a submarine to keep up👍
Thank you for the amazing feedback and the sub! The team tries very hard to make sure we remain fair and balanced while discussing the facts.
Thanks for the quality content
Glad you enjoy it!
Which masters
Cybersecurity and Information Assurance but be ware that Jacob had many years of experience prior to taking the “challenge”.
great topics as always. keep getting some feedback from Dan's mic
Thanks for the feedback Antonio! I have it on my short list of technical things to work out next recording session.
Being consistent at the basics is such a huge part of making your organization a "harder" cyber target. Also, Chris's hair is definitely embracing the veteran status!
Well said, Antonio! And yes, Chris went from Navy Chief to civilian incredibly fast LOL
It’s not just Russia. There are a ton of troll farms (or farmers) in Germany openly bragging about it on Facebook
Interesting
If you want to know what your insurance covers... read the policy?
Sage advice!
Amazing work. This kind of thing makes me feel inspired!
Glad to hear it!
Dude high af
Great interview! I think a key takeaway for me is learning to work in a corporate environment. I am trying to transition from the medical field into IT/cybersecurity. So, I have experience with dealing with colleagues in a professional manner & patients when they are at a low/stressful point in their life, but I did really think about the transition into a more corporate setting. I have my CompTIA Net+ & Sec+, but have yet to apply for jobs. Kinda feeling like I don't know enough yet. Especially after hearing so many people say it is hard to get hired. I think I will finally start putting in applications next month. Thanks for sharing!
You will be surprised that you know more than you think. Are you looking at your current employers job board/postings. IMHO you have leverage in your current organization because you can have your current management sponsor you, access to job openings and vacancies before the public, and are already knowledgeable about friction points and practical experience with the systems your colleagues use on a daily basis.
Thank you for the post how can I connect
Thank you for reaching out. Here is Professor Roger's Linktree with all of his points of contact: linktr.ee/Professorroger
I feel the exact opposite. I'd much rather a foreign country whose police can't touch me in the US be spying on me over the US government whose police can harass me or worse, which happens to moderate police reformers. Stop excusing the US becoming a police state
Redjoker, you boring up some good points as well. Thank you for listening and providing feedback!
When you're talking about antivirus software, that is kernal level code. It has complete control of your system by default at ring 0. It also uploads your files to the servers to inspect files that haven't been fingerprinted yet. It also has the ability to push code. So, on a good day, it is software that is kernel level and looking at all your files and can update your system. Just like crowdstrike. But the thing is they are a russian company and subject to russian laws, meaning turning over all data they have available as in any of your files. And they have the ability to push kernel boot code like crowdstrike. So it's an espionage and atteck vector. Purely because of them being under russian law. No matter if they wish to be a good company or not. TikTok is similarly chinese controlled data collection but not of the same power as antivirus.
You took the words right out of my mouth. This is a great explanation!
Great discussion guys!
Thanks, Steven!
It's hard to test every Windows environment. There are millions of different variables and setups. You can't test for them all.
Adam, this is a great point and I think the team understands how difficult this process is. Both Shannon and Daniel did something similar while still in the military and in the grand scheme of things that environment was more homogeneous and still required thorough testing before patches were pushed out.
And the US hasn’t?
Wow! This is an exciting topic. You guys gave a great breakdown of the technical exposure that is happening!!! I wonder if this is a bigger issue for sys administration or network admins???
Thank you for the feedback and great question. Ryan wanted to pass along, “As a former network guy, I feel it would be more work on our part. The sys admin folks may need to patch the RADIUS server(s) but the network team will have to patch and service every network device that relies on the AAA protocol.”
Great episode guys! There’s a balance between everything with politics, true data protection, and government oversight/regulations. I think that until it becomes too costly to not manage all this data properly, corps will get away with abusing its use or neglecting its protections
Thank you and well said. Nothing meaningful will be done until it starts to impact the bottom line.
You guys seem cool. Rooting for you hitting your sub goals 🎉 keep it up!
Thank you so much!!
Try posting your diarrhea
Sometimes the smallest things can add a lot of security. It should be prudent for smaller financial institutions to use the simple practices to need there security. I don’t think you need the highest tech in security tools do you ????
No, we agree. Building a solid foundation by adhering to regulatory compliance and industry best practices is key. Standards, culture, and practicality are more important than the latest and greatest toys IMHO.
Gotta level up and get like Chris! BIG BANK Chris!
We feel the same way, Neal!
No Truer story told!
Why would anyone care, no matter what bank u use its only insured up to $250k and thats by the Fed, not the bank. They are all the same. So only people with no clue would believe or care.......
When ur guests look bored, ur viewers are too
Sry, that’s Ryan’s resting face. It’s a work in progress…
Chief Engineer Scott is correct: "The more complicated you make the plumbing the easier it is to stop up the drain."
Sage advice!
BDR,IRP BCP, ISP, SSP, all funny acronyms. "Everyone Hates the Cyber Warrior until the Enemy is at the gates" 🎉🎉🎉🎉
That's more like it! Don't pay the Ransomware #DontBugUS
I talk about this all the time to people asking my opinion on whether they should go to school or not for IT I always tell them get the certs and do the degree on the side if you still want to pursue that.
One of the authors of TunnelVision here. We actually did reach out to CISA and also the EFF prior to public disclosure. We ended up getting the CVE assigned through CISA since we collectively thought folks would want an official way to track the problem. Also re: streamlining the issue - we're doing that with our tool ArcaneTrickster that will eventually be open source and designed for researchers. Great show guys!
Thank you for these important corrections. If you would like, please connect with Ryan on LinkedIn to schedule some time on the podcast. Thanks!
This is always a good conversation. Daniel you brought up such a good point. I never thought about some companies NOT knowing what they are really looking for. That’s probably why to Ryan point the Triad is weighted in the wrong places. This is always a good necessary conversation. While it would be nice for companies to have a pipeline, yet since they don’t we have to take innovative solutions to garner experience ourselves.
Thank you!
Good conversation! Ryan for “King For A Day”!!! You nailed the issue concerning employers and job seekers.
Good conversation! Ryan for “King For A Day”!!! You nailed the issue concerning employers and job seekers.
Wow! Passed the CISSP after 3 months of studying is super impressive!
✊🏁
Who do I call
I would start with Mr. Cooper to see if your specific data was compromised.
I never got an email....just a letter of cyber attack
The ARRL is also one of the largest conduits of HAM license test certifications and applications to the FCC. The hacking took down that capability. I passed a test on the 20th and the FCC still doesn't have any record of that. Normally it happens same day or next day.