Best Enterprise Risk Management Framework Podcasts (2024)

1
Safeguarding Against Recent Vulnerabilities Related to Rust 26:25

3d ago26:25

26:25

What can the recently discovered vulnerabilities related to Rust tell us about the security of the language? In this podcast from the Carnegie Mellon University Software Engineering Institute, David Svoboda discusses two vulnerabilities, their sources, and how to mitigate them.

1
Developing a Global Network of Computer Security Incident Response Teams (CSIRTs) 30:51

13d ago30:51

30:51

Cybersecurity risks aren’t just a national concern. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), the CERT division’s Tracy Bills, senior cybersecurity operations researcher and team lead, and James Lord, security operations technical manager, discuss the SEI’s work developing Computer Security Incident R…

1
Automated Repair of Static Analysis Alerts 27:05

1M ago27:05

27:05

Developers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), David Svoboda, a software security engineer in the SEI’s CERT Division, discusses Rede…

1
Cyber Career Pathways and Opportunities 31:23

1M ago31:23

31:23

Not all paths to cybersecurity careers look the same. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Randy Trzeciak, deputy director of cyber risk and resilience in the SEI’s CERT division, discusses his career journey, resources for pursuing a career in cybersecurity, and the importance of building a dive…

1
Getting Started with Enterprise Architecture by Eric Jager - Unboxing with Whynde and David 45:16

2M ago45:16

45:16

Oliver and Whynde are joined by David Rees (new to Enterprise Architecture) and Eric Jager author of Getting Started with Enterprise Architecture - for a discussion of the book.You can get the book from Amazon https://www.amazon.com/Getting-Started-Enterprise-Architecture-Practical/dp/1484298578/ or directly from Springer https://link.springer.com/…

1
My Story in Computing with Sam Procter 37:15

2M ago37:15

37:15

Sam Procter started out studying computer science at the University of Nebraska, but he didn’t love it. It wasn’t until he took his first software engineering course that he knew he’d found his career path. In this podcast from the Carnegie Mellon University Software Engineering Institute, Sam Procter discusses the early influences that shaped his …

1
Developing and Using a Software Bill of Materials Framework 37:37

3M ago37:37

37:37

With the increasing complexity of software systems, the use of third-party components has become a widespread practice. Cyber disruptions, such as SolarWinds and Log4j, demonstrate the harm that can occur when organizations fail to manage third-party components in their software systems. In this podcast from the Carnegie Mellon University Software …

1
The Importance of Diversity in Cybersecurity: Carol Ware 26:37

3M ago26:37

26:37

In this podcast from the Carnegie Mellon University Software Engineering Institute, Carol Ware, a senior cybersecurity engineer in the SEI’s CERT Division, discusses her career path, the value of mentorship, and the importance of diversity in cybersecurity.By Carol Ware

1
The Importance of Diversity in Software Engineering: Suzanne Miller 29:02

4M ago29:02

29:02

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Suzanne Miller, a principal researcher in the SEI’s Software Solutions Division, discusses her career path, the value of mentorship, and the importance of diversity in software engineering.By Suzanne Miller

1
The Importance of Diversity in Artificial Intelligence: Violet Turri 16:57

4M ago16:57

16:57

Across the globe, women account for less than 30 percent of professionals in technical fields. That number drops to 22 percent in the field of Artificial Intelligence (AI). In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Violet Turri, a software developer in the SEI’s AI Division, discusses the evolution of…

1
Geospatial Innovation for Mapping Sustainability and the Built Environment 47:18

4M ago47:18

47:18

In this episode of Architect Tomorrow, host Oliver Cronk is joined by Isabelle Chatel de Brancion, Business and Innovation Lead at Geovation, Ordnance Survey's innovation hub. Isabelle shares her unique perspective as a former building architect turned geospatial innovator, drawing parallels and contrasts between the worlds of building architecture…

1
Using Large Language Models in the National Security Realm 34:45

5M ago34:45

34:45

At the request of the White House, the Office of the Director of National Intelligence (ODNI) began exploring use cases for large language models (LLMs) within the Intelligence Community (IC). As part of this effort, ODNI sponsored the Mayflower Project at Carnegie Mellon University’s Software Engineering Institute (SEI) from May 2023 through Septe…

1
Atypical Applications of Agile and DevSecOps Principles 33:41

5M ago33:41

33:41

Modern software engineering practices of Agile and DevSecOps have provided a foundation for producing working software products faster and more reliably than ever before. Far too often, however, these practices do not address the non-software concerns of business mission and capability delivery even though these concerns are critical to the success…

1
AI in 2024 with Peter Gostev, Chris and Charles. Discussing the latest models and frameworks. 1:09:50

5M ago1:09:50

1:09:50

Oliver got Chris Booth and Charles Phiri back along with Peter Gostev who has recently moved to a Head of AI role at Moonpig to discuss recent developments in the AI space. They discuss recent developments in AI, with a focus on new models like AlphaGeometry, GraphCast, and Mixtral. The participants also discuss benchmarking of models, prompting fr…

1
When Agile and Earned Value Management Collide: 7 Considerations for Successful Interaction 35:21

5M ago35:21

35:21

Increasingly in government acquisition of software-intensive systems, we are seeing programs using Agile development methodology and earned value management. While there are many benefits to using both Agile and EVM, there are important considerations that software program managers must first address. In this podcast, Patrick Place, a senior engine…

1
The Impact of Architecture on Cyber-Physical Systems Safety 34:05

5M ago34:05

34:05

As developers continue to build greater autonomy into cyber-physical systems (CPSs), such as unmanned aerial vehicles (UAVs) and automobiles, these systems aggregate data from an increasing number of sensors. However, more sensors not only create more data and more precise data, but they require a complex architecture to correctly transfer and proc…

1
Reflections on 2023 that tell us about 2024 20:19

7M ago20:19

20:19

Penny Townsend and Oliver recap 2023 in 20 minutes, covering a range of topics (naturally including AI which is one prediction we definitely got right last time around!), but also data, working patterns, sustainability and more.We look at what we got right and wrong (also using some assistance from Claude.ai) from our previous predictions for 2023 …

1
ChatGPT and the Evolution of Large Language Models: A Deep Dive into 4 Transformative Case Studies 46:22

7M ago46:22

46:22

To better understand the potential uses of large language models (LLMs) and their impact, a team of researchers at the Carnegie Mellon University Software Engineering Institute CERT Division conducted four in-depth case studies. The case studies span multiple domains and call for vastly different capabilities. In this podcast, Matthew Walsh, a seni…

1
The Cybersecurity of Quantum Computing: 6 Areas of Research 23:01

7M ago23:01

23:01

Research and development of quantum computers continues to grow at a rapid pace. The U.S. government alone spent more than $800 million on quantum information science research in 2022. Thomas Scanlon, who leads the data science group in the SEI CERT Division, was recently invited to be a participant in the Workshop on Cybersecurity of Quantum Compu…

1
User-Centric Metrics for Agile 31:41

8M ago31:41

31:41

Far too often software programs continue to collect metrics for no other reason than that is how it has always been done. This leads to situations where, for any given environment, a metrics program is defined by a list of metrics that must be collected. A top-down, deterministic specification of graphs or other depictions of data required by the m…

1
The Product Manager’s Evolving Role in Software and Systems Development 24:19

8M ago24:19

24:19

In working with software and systems teams developing technical products, Judy Hwang, a senior software engineer in the SEI CERT Division, observed that teams were not investing the time, resources and effort required to manage the product lifecycle of a successful product. These activities include thoroughly exploring the problem space by talking …

1
Measuring the Trustworthiness of AI Systems 19:27

9M ago19:27

19:27

The ability of artificial intelligence (AI) to partner with the software engineer, doctor, or warfighter depends on whether these end users trust the AI system to partner effectively with them and deliver the outcome promised. To build appropriate levels of trust, expectations must be managed for what AI can realistically deliver. In this podcast f…

1
Knowledge Graphs are key to unlocking the power of AI 47:34

9M ago47:34

47:34

Tony Seale KG Engineer at UBS joins Chris Booth (from Natwest) and Oliver Cronk (Leader of #ArchitectTomorrow and Tech Director at Scott Logic) to discuss the importance of Knowledge Graph technology as an enabler for more effective AI deployments.The important role Knowledge Graphs can play in your AI Architecture particularly when working with La…

1
Actionable Data in the DevSecOps Pipeline 31:58

10M ago31:58

31:58

In this podcast from the Carnegie Mellon University Software Engineering Institute, Bill Nichols and Julie Cohen talk with Suzanne Miller about how automation within DevSecOps product-development pipelines provides new opportunities for program managers (PMs) to confidently make decisions with the help of readily available data. As in commercial co…

1
Insider Risk Management in the Post-Pandemic Workplace 47:34

10M ago47:34

47:34

In the wake of the COVID pandemic, the workforce decentralized and shifted toward remote and hybrid environments. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Dan Costa, technical manager of enterprise threat and vulnerability management, and Randy Trzeciak, deputy director of Cyber Risk and Resilience, …

1
An Agile Approach to Independent Verification and Validation 31:57

11M ago31:57

31:57

Independent verification and validation (IV&V) is a significant step in the process of deploying systems for mission-critical applications in the Department of Defense (DoD). In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Justin Smith, senior Agile transformation leader in the SEI Software Solutions Divisi…

1
Zero Trust Architecture: Best Practices Observed in Industry 27:53

11M ago27:53

27:53

Zero trust architecture has the potential to improve an enterprise’s security posture. There is still considerable uncertainty about the zero trust transformation process, however, as well as how zero trust architecture will ultimately appear in practice. Recent executive orders have accelerated the timeline for zero trust adoption in the federal s…

1
Automating Infrastructure as Code with Ansible and Molecule 39:38

12M ago39:38

39:38

In Ansible, roles allow system administrators to automate the loading of certain variables, tasks, files, templates, and handlers based on a known file structure. Grouping content by roles allows for easy sharing and reuse. When developing roles, users must deal with various concerns, including what operating system(s) and version(s) will be suppor…

1
Exploring Corporate Innovation and Design with Faiz Hussain 46:30

1y ago46:30

46:30

Join Oliver Cronk in this captivating episode of Architect Tomorrow as he engages in a thought-provoking conversation with Faiz Hussain, an expert in design and innovation for both corporates and start-ups. Faiz takes us on a journey through his career in technology and design, sharing valuable insights on corporate innovation and highlighting its …

1
Identifying and Preventing the Next SolarWinds 46:04

1y ago46:04

46:04

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Gregory J. Touhill, director of the SEI CERT Division, talks with principal researcher Suzanne Miller about the 2020 attack on Solar Winds software and how to prevent a recurrence of another major attack on key systems that are in widespread use. Solar Winds i…

1
A Penetration Testing Findings Repository 25:47

1y ago25:47

25:47

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI) Marisa Midler and Samantha Chaves, penetration testers with the SEI’s CERT Division, talk with Suzanne Miller about a penetration-testing repository that they helped to build. The repository is a source of information for active directory, phishing, mobile tech…

1
Understanding Vulnerabilities in the Rust Programming Language 36:45

1y ago36:45

36:45

While the memory safety and security features of the Rust programming language can be effective in many situations, Rust’s compiler is very particular on what constitutes good software design practices. Whenever design assumptions disagree with real-world data and assumptions, there is the possibility of security vulnerabilities–and malicious softw…

1
Strategy to Reality with Whynde Kuehn, Lisa Woodall and Catherine Pratt 41:57

1y ago41:57

41:57

The latest episode of Architect Tomorrow, featuring an incredible all-female panel! Get ready to dive into the Whynde Kuehn's remarkable book, "Strategy to Reality." Join us as Lisa Woodall, Catherine Pratt, and Oliver talk with Whynde to share their personal experiences in enterprise, business architecture, and technology transformation initiative…

1
We Live in Software: Engineering Societal-Scale Systems 39:31

1y ago39:31

39:31

Societal-scale software systems, such as today’s commercial social media platforms, are among the most widely used software systems in the world, with some platforms reporting billions of daily active users. These systems have created new mechanisms for global communication and connect people with unprecedented speed. Despite the numerous benefits …

1
Secure by Design, Secure by Default 54:05

1y ago54:05

54:05

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI) Gregory J. Touhill, director of the SEI CERT Division, talks with Suzanne Miller about secure by design, secure by default, a longstanding tenet of the work of the SEI and CERT in particular. The SEI has been in the forefront of secure software development, pro…

1
Key Steps to Integrate Secure by Design into Acquisition and Development 48:50

1y ago48:50

48:50

Secure by design means performing more security and assurance activities earlier in the product and system lifecycles. A secure-by-design mindset addresses the security of systems during the requirements, design, and development phases of lifecycles rather than waiting until the system is ready for implementation. The need for a secure-by-design mi…

1
Generative AI - managing its shortfalls and risks with architecture 59:34

1y ago59:34

59:34

What components or attributes are needed in Enterprise Architecture for ML? Beyond MLOps - how do we risk manage the deployment and integration of AI/ML into our organisations. In particular the latest generation of LLM type models? What are the architectural and risk challenges of deploying Generative AI into enterprises? In this episode we get in…

1
An Exploration of Enterprise Technical Debt 25:56

1y ago25:56

25:56

Like all technical debt, enterprise technical debt consists of choices expedient in the short term, but often problematic over the long term. In enterprise technical debt, the impact reaches beyond the scope of a single system or project. Because ignoring enterprise technical debt can have significant consequences, software and systems architects s…

1
The Messy Middle of Large Language Models 33:46

1+ y ago33:46

33:46

The recent growth of applications that leverage large language models, including ChatGPT and Copilot, has spurred reactions ranging from fear and uncertainty to adoration and lofty expectations. In this podcast from the Carnegie Mellon University Software Engineering Institute, Jay Palat, senior engineer and technical director of AI for mission, an…

1
An Infrastructure-Focused Framework for Adopting DevSecOps 43:35

1+ y ago43:35

43:35

DevSecOps practices, including continuous-integration/continuous-delivery (CI/CD) pipelines, enable organizations to respond to security and reliability events quickly and efficiently and to produce resilient and secure software on a predictable schedule and budget. Despite growing evidence and recognition of the efficacy and value of these practic…

1
Software Security in Rust 18:09

1+ y ago18:09

18:09

Rust is growing in popularity. Its unique security model promises memory safety and concurrency safety, while providing the performance of C/C++. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), David Svoboda and Joe Sible, both engineers in the SEI’s CERT Division, talk with principal researcher Suzanne Mil…

1
Cybersecurity leadership and architecture priorities with Chris Hodson 38:58

1+ y ago38:58

38:58

We welcome Chris Hodson back to the channel after 2 years! We catch up with what he has been up to and what is top of mind for him in his CISO role. We covered topics including: - What are the key things CISOs and Security Architects need to be focussing on right now (particularly in a time of cost constraints - How technical does a CISO need to be…

1
Insider Threats and Social Engineering Tactics by Counterintelligence Institute’s Peter Warmka 32:06

1+ y ago32:06

32:06

In Episode 90 of TheCyber5, we are joined by Peter Warmka, founder of the Counterintelligence Institute. Warmka is a retired senior intelligence officer with the U.S. Central Intelligence Agency (CIA) where he specialized in clandestine HUMINT (human intelligence) collection. With 20+ years of breaching security overseas for a living, Warmka now te…

1
Is Cloud native and Serverless better for the planet? 43:25

1+ y ago43:25

43:25

Serverless Computing - Sustainability and Architectural considerations. Oliver talks to Daniel Bass CTO and Co-Founder of Zeti (a clean vehicle financing start up) about effective Serverless Computing. Daniel gives a quick background of his career in Financial Services and then at Zeti. Talks about what Zeti do (and why he is so passionate about it…

1
Improving Interoperability in Coordinated Vulnerability Disclosure with Vultron 51:16

1+ y ago51:16

51:16

Coordinated vulnerability disclosure (CVD) begins when at least one individual becomes aware of a vulnerability, but it can’t proceed without the cooperation of many. Software supply chains, software libraries, and component vulnerabilities have evolved in complexity and have become as much a part of the CVD process as vulnerabilities in vendors’ p…

1
The Top Nisos Investigations Of the Last Seven Years with Nisos Research Principal Vincas Ciziunas 27:27

1+ y ago27:27

27:27

In Episode 89 of TheCyber5, we are joined by Nisos Research Principal, Vincas Ciziunas. It was 7 years ago, at a restaurant in Ashburn, Virginia, when Nisos’ co-founders Justin Zeefe and Landon Winkelvoss met Vincas. At the time, Vincas was working as a contractor for the US government but was considering a pivot into the private sector. It was Vin…

1
Asking the Right Questions to Coordinate Security in the Supply Chain 31:11

1+ y ago31:11

31:11

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Dr. Carol Woody, a principal researcher in the SEI's CERT Division, talks with Suzanne Miller about the SEI’s newly released Acquisition Security Framework, which helps programs coordinate the management of engineering and supply-chain risks across system comp…

1
Why is Confidential Computing the future of Cloud Security? 37:10

1+ y ago37:10

37:10

Confidential Computing and the future of the shared responsibility model. In this cloud native security architecture episode of #ArchitectTomorrow Oliver talks to Christophe Parisel and Pete Chamberlain. We start with a state of the nation on Cloud Security in 2023 and then move into different layers of Trusted Computing and then explore confidenti…

1
Securing Open Source Software in the DoD 35:33

1+ y ago35:33

35:33

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Scott Hissam, a researcher within the SEI’s Software Solutions Division who works on software assurance in Department of Defense (DoD) systems, talks with Linda Parker Gates, initiative lead for the SEI’s Software Acquisition Pathways, about the use of free an…

1
The Vital Role of Customer Success in Intel Programs with Senior Director of Nisos Brandon Kappus 27:43

1+ y ago27:43

27:43

In Episode 88 of TheCyber5, we are joined by Nisos Senior Director for Customer Success, Brandon Kappus. Here are five topics we discuss in this episode: Intelligence Playbooks Start with Education to the Customer Playbooks should include three major steps. The first step is education on how intelligence is going to be consumed and not be nonstop n…

Podcasts Worth a Listen

Enterprise Risk Management Framework Podcasts

Podcasts Worth a Listen

Quick Reference Guide