Artwork

Content provided by CISO Tradecraft®. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by CISO Tradecraft® or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
Player FM - Podcast App
Go offline with the Player FM app!

#164 - The 7 Lies in Cyber

29:02
 
Share
 

Manage episode 395504968 series 2849492
Content provided by CISO Tradecraft®. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by CISO Tradecraft® or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

In this episode of CISO Tradecraft, we debunk seven common lies pervasive in the cybersecurity industry. From the fallacy of achieving a complete inventory before moving onto other controls, the misconception about the accuracy of AppSec tools, to the fear of being viewed as a cost center - we delve deep into these misconceptions, elucidating their roots and impacts. We also discuss how ISO and FAIR, audits and certifications, risk assessments, and mandatory cyber incident reporting may not always be as straightforward as they seem. The episode is not only an eye-opener but also provides insightful guidance on how to navigate these misconceptions and enhance the effectiveness of your cybersecurity measures.

CloudGoat EC2 SSRF- https://rhinosecuritylabs.com/cloud-security/cloudgoat-aws-scenario-ec2_ssrf/

OWASP Benchmark - https://owasp.org/www-project-benchmark/

Transcripts - https://docs.google.com/document/d/1yZZ4TLlC2sRfwPV7bQmar7LY4xk2HcIo

Chapters

  • 00:12 Introduction
  • 00:56 The Lie of Accurate Inventory
  • 05:29 The Lie of Accurate Risk Assessment
  • 08:41 The Lie of Shifting Left in DevSecOps
  • 13:45 The Lie of Certifications Ensuring Security
  • 18:33 The Lie of Reporting Cyber Incidents in 72 Hours
  • 20:44 The Lie of Accurate Application Security Tools
  • 22:07 The Lie of Cybersecurity Not Being a Cost Center
  • 24:44 Conclusion and Recap of Cybersecurity Lies
  continue reading

187 episodes

Artwork

#164 - The 7 Lies in Cyber

CISO Tradecraft®

38 subscribers

published

iconShare
 
Manage episode 395504968 series 2849492
Content provided by CISO Tradecraft®. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by CISO Tradecraft® or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

In this episode of CISO Tradecraft, we debunk seven common lies pervasive in the cybersecurity industry. From the fallacy of achieving a complete inventory before moving onto other controls, the misconception about the accuracy of AppSec tools, to the fear of being viewed as a cost center - we delve deep into these misconceptions, elucidating their roots and impacts. We also discuss how ISO and FAIR, audits and certifications, risk assessments, and mandatory cyber incident reporting may not always be as straightforward as they seem. The episode is not only an eye-opener but also provides insightful guidance on how to navigate these misconceptions and enhance the effectiveness of your cybersecurity measures.

CloudGoat EC2 SSRF- https://rhinosecuritylabs.com/cloud-security/cloudgoat-aws-scenario-ec2_ssrf/

OWASP Benchmark - https://owasp.org/www-project-benchmark/

Transcripts - https://docs.google.com/document/d/1yZZ4TLlC2sRfwPV7bQmar7LY4xk2HcIo

Chapters

  • 00:12 Introduction
  • 00:56 The Lie of Accurate Inventory
  • 05:29 The Lie of Accurate Risk Assessment
  • 08:41 The Lie of Shifting Left in DevSecOps
  • 13:45 The Lie of Certifications Ensuring Security
  • 18:33 The Lie of Reporting Cyber Incidents in 72 Hours
  • 20:44 The Lie of Accurate Application Security Tools
  • 22:07 The Lie of Cybersecurity Not Being a Cost Center
  • 24:44 Conclusion and Recap of Cybersecurity Lies
  continue reading

187 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Quick Reference Guide