Ep. 2_COO Byron Braun from Cloud and Wire

Blue Square Security

#Tech #Greg Wartes, David Driggers, Michael Vitale #David Driggers #Greg Wartes #Michael Vitale

1:08

Join us each week as celebrity guests pitch an idea for a film based on one of the SUPER niche sub-genres on Netflix. From ‘Steamy Crime Movies from the 1970s’ to ‘Australian Dysfunctional Family Comedies Starring A Strong Female Lead’, our celebrity guests will pitch their wacky plot, their dream cast, the marketing stunts, and everything in between. By the end of every episode, Jimmy Carr, Comedian by night / “Netflix Executive” by day, will decide whether the pitch is greenlit or condemned to development hell! New episodes on Wednesdays starting May 28th! Listen on all podcast platforms and watch on the Netflix is a Joke YouTube Channel . The Big Pitch is a co-production by Netflix and BBC Studios Audio.…

2 years ago 32:16

MP3•Episode home

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on October 04, 2024 05:13 (8M ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

· Technology brokerage agency – technology solutions and telecommunications

· Moving data and infrastructure to the cloud

· 400 solution providers/partner.

· Hyper focused on customer needs.

· Legacy systems bring their own unique challenges.

· MSP’s – the value they bring

· Virtual CIO

o Putting out fires

· 100% referral based

· MnA

· Security and IT Audits

· Staffing – keeping talent

· State Actors

· Defense in depth

· Zero-Trust

· “If you are not having these Zero-Trust conversations, there are gaps”

· The difficulty that CISO’s face from implementing a strategy – and funneling it down to the cyber team members.

· Strategic shifts with partners that help fill gaps bringing in SLA’s that exceed business needs

· Nurturing internal staff – are they the right choice?

15 episodes

Ep. 2_COO Byron Braun from Cloud and Wire

Blue Square Security

published 2 years ago

MP3•Episode home

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on October 04, 2024 05:13 (8M ago)

· Technology brokerage agency – technology solutions and telecommunications

· Moving data and infrastructure to the cloud

· 400 solution providers/partner.

· Hyper focused on customer needs.

· Legacy systems bring their own unique challenges.

· MSP’s – the value they bring

· Virtual CIO

o Putting out fires

· 100% referral based

· MnA

· Security and IT Audits

· Staffing – keeping talent

· State Actors

· Defense in depth

· Zero-Trust

· “If you are not having these Zero-Trust conversations, there are gaps”

· The difficulty that CISO’s face from implementing a strategy – and funneling it down to the cyber team members.

· Strategic shifts with partners that help fill gaps bringing in SLA’s that exceed business needs

· Nurturing internal staff – are they the right choice?

15 episodes

#Tech #Greg Wartes, David Driggers, Michael Vitale #David Driggers #Greg Wartes #Michael Vitale

All episodes

1
S2 Ep. 4 AVD, End User Experience, EP Security 56:04

33 weeks ago56:04

56:04

Data Retention and Compliance : Greg and Dave discussed the challenges law firms face with data retention and compliance, especially with large amounts of data from cases and litigation. Dave highlighted the importance of understanding state-specific requirements and balancing data accessibility with cost and performance considerations. State-Specific Requirements: Dave explained that data retention requirements vary by state, and Helient ensures compliance with these regulations for their clients. Data Volume: Dave discussed the large volumes of data law firms handle, including case notes, litigation notes, and deposition recordings, and the challenges of managing this data efficiently. Data Accessibility: Dave highlighted the need to balance data accessibility with cost and performance, suggesting strategies like keeping recent data readily accessible and archiving older data. Endpoint Security and User Experience : Greg and Dave talked about the importance of endpoint security, especially with the increasing use of mobile devices. Dave explained how Helient uses Intune and conditional access policies to ensure secure access to virtual desktops, emphasizing the need for a seamless user experience. Intune and Conditional Access: Dave explained how Helient uses Intune for device provisioning and conditional access policies in Azure AD to secure endpoint access. MFA and User Adoption : Greg and Dave discussed the challenges of implementing MFA in law firms, particularly the need to balance security with user experience. Dave emphasized the importance of setting user expectations and normalizing MFA prompts to ensure adoption without causing frustration Zero Trust Framework : Greg and Dave discussed the importance of the Zero Trust framework in securing law firm environments. Dave highlighted the benefits of using privileged identity management and regular access reviews to ensure a secure and compliant infrastructure. Privileged Identity Management: Dave highlighted the benefits of using Azure Privileged Identity Management (PIM) to secure high-level access roles and ensure that only authorized users can perform sensitive actions. Data Retention and Compliance: Greg and Dave discussed the challenges law firms face with data retention and compliance, especially with large amounts of data from cases and litigation. Dave highlighted the importance of understanding state-specific requirements and balancing data accessibility with cost and performance considerations. MFA and User Adoption: Greg and Dave discussed the challenges of implementing MFA in law firms, particularly the need to balance security with user experience. Dave emphasized the importance of setting user expectations and normalizing MFA prompts to ensure adoption without causing frustration. AI and Copilot Adoption: Michael asked about Helient's guidance on adopting AI tools like Copilot in law firms. Dave explained that Helient is extensively testing these tools to ensure they provide value while maintaining data security and compliance. Zero Trust Framework: Greg and Dave discussed the importance of the Zero Trust framework in securing law firm environments. Dave highlighted the benefits of using privileged identity management and regular access reviews to ensure a secure and compliant infrastructure. Consolidation and Platform Approach: Greg and Dave talked about the advantages of a best-of-platform approach over best-of-breed solutions. Dave emphasized the value of leveraging Microsoft's comprehensive security signals and tools to provide a unified and secure environment for clients.…

1
S2E3: CSAM 37:18

1 year ago37:18

37:18

Interviewing Simon Strain, a Microsoft CSAM (Customer Success Account Manager). We discuss: support, AI, Berst of Breed vs. Best of Platform, MTC, Zero Trust, Microsoft Dart and much more. Thank you for tuning in.

1
Season 2; Ep. 2 (Defender for Cloud) 41:24

1 year ago41:24

41:24

2024's first episode is with award winning partner Difenda and we are talking Defender for Cloud. #Automation #CloudSecurity #CyberSecurityMaturityModel #Defender #Difenda

1
Season 2; Ep. 1 (CISO Recap) 36:22

1 year ago36:22

36:22

We asked 11 security professionals the same question over the course of 2023...."IF you were the new CISO at your "dream organization," what is the first move you make?" We gained insight and identified trends from the answers given, as well as gained insight from what was NOT said. Welcome to 2024 - Happy New Year!…

1
Ep. 11 Microsoft Global Black Belt | Cloud Security & More 46:48

1 year ago46:48

46:48

· Microsoft Detection and Response Team, DART · Nashville, Tennessee · Posture Management · Top 3 categories of data breach: o Cloud misconfigurations is number 3 · Scattered Spider · Adversary in the middle attacks · Authentication · Lemon Duck · Identity compromise · Moving at the Speed of DevOps · Security Training · DevSecOps · Threat Modeling · SQL Injection · Secret Scanning · Infrastructure As A Code · Source Code Management – SCM · Push Protection · Key Vault · Log4j · Polymorphic · SBOM – Software Bill of Materials · NotPetya · 5th Generation attacks · WAF – Web Application Firewall · SMBv1 · AI – Artificial Intelligence · Black Mamba polymorphic malware · Azure Policy · NIST · Framework · S3Buckets · Hub and Spoke · Resource Groups · Management Groups · Permissions · Subscription Management…

1
Ep. 10 Microsoft Security Copilot with Microsoft Specialists Joey Muniz 53:59

1 year ago53:59

53:59

All things Microsoft Security Copilot. EAP GA Upskill Consolidate Microsoft Security Copilot is an AI-powered security analysis tool that enables analysts to respond to threats quickly, process signals at machine speed, and assess risk exposure in minutes.

1
Ep. 9 Mark King_Americas Digital Security Lead 46:25

2 years ago46:25

46:25

A security focused conversation with Mark King, Americas Security Digital Sales Leader where most interview questions were generated by M365 Copilot. We cover Copilot, Sentinel, the magic quadrant, and I.T. staffs wearing multiple hats.

1
Ep. 8_Lighthouse_DPL + Insider Risk 49:03

2 years ago49:03

49:03

Introductions: Chris Baird = Sr. Security Consultant Lighthouse: Global organization Amren Gill = Purview Security Stack (DLP, Insider Risk) #ZeroTrust #Endpoint #Telemetry #Privacy #Compliance #DataProtection #Identity #BestOfBreed #PrivacyAssessment #ZeroDay #MaximizeInvestment #Ransomware #DataLeak #DataAsset #DataGovernence #DataCatalog #CustomerEducation #DataClassification #Enterprise #Global #PowerShell #DataRetention #Dashboard #SharePoint #DataDisposal #LitigationHold #E-DiscoveryHold #LegalHold #FederatedData #Purview #Classification #MetaData #AIPscan #ContentExplorer #PII #PCI #Regulation #Template #LayeredControl #DataHandlingPolicy #TrainableClassifiers #AImodels #MultiTennant #M365 #InsiderRisk #SolutionsPartner #E-Discovery #Attorney #Agentless #BehaviorAnalytics #Threshold #RiskScore #ThreatActor #Context #RiskProfile #AdaptiveProtection #Trends #RiskAppetite #Connectors #HRConnector #PhysicalBadegeConnector #EnvironmentScan #CurrentStateAssessment #MIP #Pilot #PoC #Trial #SecurityPosture #RiskGap…

1
Microsoft Sentinel w/ Lightstream_Ep. 7 52:40

2 years ago52:40

52:40

Ep. 7: Sentinel with Microsoft partner Lightstream. Introductions: Lightstream SEIM: Collection > Detection > Investigation > Response Investigation: trends, fine tuning SEIM, SOC teams, funding Automation: Playbooks, AI, Co-Pilot, does not replace Tier 1 Attack surface Bookmarks Multi-Cloud Defender for Threat Intelligence Ingestion: log collection, Frameworks, garbage in-garbage out Detection: dwell time, risk based alerting patterns Light Stream Azure Health Check: Security focused, strengthen security posture, documentation, roadmap for success…

1
Ep. 6_Grady Boggs_Microsoft Security Specialist_Privacy 51:51

2 years ago51:51

51:51

· Background review · Security Specialist overview, Digital Security Specialist overview · Privacy: o Microsoft Priva 101 o Privacy is a Human Right o GDPR, CCPA o 2007 > Sarbanes-Oxley o financial impact o “Compliance reporting from a spreadsheet and in inbox is no way to go through life.” o Solving issues with software vs. people/resources. o Regulation with compliance o Audit-worthy reports o Different types of data and the challenges this creates. o Auditors/Legal teams highlighting pain points. o Microsoft Purview o Good stewards of PII o Healthcare/EHR/FinServ/Retail/Spending or Buying habits. o User training vs. Top down approach (helping the end user) | Educate. o Microsoft 365 Policy Tip Engine infused with privacy. o Granularity o Privacy integration o Data protection is a team sport. o Data Classification service o Integration with SaaS o Open API o LMS > Microsoft Viva Learning o Retention policy o 3 prong approach > alert/prevent/train (Empower the end user) o Privacy is ramping up in 2023 – what changed? Proliferation of Bad Actors o Ransomware, Crypto-Jacking, Phishing o Privacy regulation ramping up o Subject Rights Request = $1702.28 with an average of 135 requests = $130k/mo. Avg. o Automated workflows o OLTP o Redaction, Retention o Artificial Intelligence is a tool o Security Co-Pilot o Sentinel and Threat Intelligence o Spear-Phishing o CCP: Compliance & Privacy Customer Connection Program (CCP) Microsoft Purview products: Information Protection, Data Loss Prevention, eDiscovery; Audit, Data Lifecycle Management, Records Management and Microsoft Priva Microsoft Community Sign-up (office.com) Trial: Learn about the free Priva trial - Microsoft Priva | Microsoft Learn Assessment: Microsoft Security…

1
Ep. 5 Class LLC Keyaan Williams - Author of the EC-Council CISO Certification talks CASB with Microsoft 1:10:50

2 years ago1:10:50

1:10:50

Keyaan Williams of Class LLC talks CASB with the Microsoft Enterprise Digital Security team. We cover a lot of ground: certifications, digital transformation, Phishing, frameworks, governance, and much more. Keyaan has a wealth of knowlege and we are thrilled he agreed to speak with us - enjoy. anything@classllc.com www.class-llc.com Keyaan.williams@class-llc.com #ciso #ISSA #FISMA #EC -Council #ClassLLC #microsoftsecurity #casb #cdc #DefenderForCloud #digitaltransformation #cloudcomputing #fundamentals #accesscontrol #encryption #integrity #zerotrust #S3Bucket #identity #Multi -Cloud #cybersecuritytraining #nist #iso27001 #CIS #assetmanagement #dlp #ShadowIT #RiskAppetiteStatement #compliance #NCSL #PrivacyLaws #BreachNotification #GRC #privacy #phishing #instructionaldesign #NICEframework #ThirstForKnowledge #blueteam #CISM #ISACA…

1
Ep. 4 CyberGen CEO: Mike Callahan - Incident Response and Culture 1:01:20

2 years ago1:01:20

1:01:20

Incident Response and Culture: Ep.4 o U.S., Pakistan, India, Bangladesh, Egypt, UAE, Romania and Peru Slogan – “One Team” Follow the sun service We cover the Desktop to cloud Microsoft Incident Response | Microsoft Security Microsoft 365 E5 | Advanced Security 365 | Microsoft Compare All Microsoft 365 Plans | Microsoft "Some partners are not Security focused" #ChatGPT #OpenAI OpenAI Microsoft Security Copilot | Microsoft Security Exchange Online – Hosted Email for Business (microsoft.com) #ThreatHunting Microsoft Defender Experts for Hunting | Microsoft Security Microsoft Defender for Business | Microsoft Security #DoMoreWithLess Reduce IT Solution Costs with Microsoft 365 | Microsoft 365 #Azure Microsoft Defender for Cloud | Microsoft Security #CloudSecurity Cloud Security Solutions | Microsoft Security Looking at partners as partners vs. competition Documentation Security Assessment – CIS Controls – match framework #AzureAD Azure Active Directory | Microsoft Azure Microsoft Teams for Enterprise | Microsoft Teams Leadership #ZeroTrust #LeastPrivilege #JustInTime Zero Trust Model - Modern Security Architecture | Microsoft Security Biggest problem in Enterprise – keep users segmented Windows Update: FAQ - Microsoft Support #Compliance #Purview Microsoft Purview Compliance Manager | Microsoft Security #CyberGen CyberGen…

1
Ep. 2_COO Byron Braun from Cloud and Wire 32:16

2 years ago32:16

32:16

· Technology brokerage agency – technology solutions and telecommunications · Moving data and infrastructure to the cloud · 400 solution providers/partner. · Hyper focused on customer needs. · Legacy systems bring their own unique challenges. · MSP’s – the value they bring · Virtual CIO o Putting out fires · 100% referral based · MnA · Security and IT Audits · Staffing – keeping talent · State Actors · Defense in depth · Zero-Trust · “If you are not having these Zero-Trust conversations, there are gaps” · The difficulty that CISO’s face from implementing a strategy – and funneling it down to the cyber team members. · Strategic shifts with partners that help fill gaps bringing in SLA’s that exceed business needs · Nurturing internal staff – are they the right choice?…

1
Ep. 3_ Part 2 of 2 w/ COO Byron Braun of Cloud & Wire 30:27

2 years ago30:27

30:27

· How may customers are you dealing with that are AWS, GWC, or Microsoft shops · Teams voice replacing legacy phone systems · Aszure migrations – network diversity · Microsoft Security investment · AI – Chat GPT and the solutions that it is bringing to the market · Natural language processing · Starting with why? · Humantic.AI o Using AI to sell · Master distributors selling AI solutions. · Board involvement in security – where and why: Compliance · 1st move as CISO – bring in a partner to help find gaps and create roadmaps…

1
Ep. 1 - Introduction to Blue Square Security Hosts 14:27

2 years ago14:27