Loading...

PODCAST

Plan-B Security

Mike Mackintosh

Things don"t always go according to plan, but they also don"t have to go perfect. Having a Plan B is all about being prepared for the unexpected and know how to stay cool under pressure. The Plan B Security Podcast is here to keep you thinking about the unexpected things in security, giving you perspective from the technology side, the business side and the backside. DISCLAIMER: Views are my own and not that of my employer. Plan-B Security is a registered trademark.

technology

All Episodes

00:17:48

Ep. 18 - The Bridge Between Your Customers and Your...

Plan-B Security ·

2024/02/02

Your customers need access to your data - that is the service you provide that they're willing to pay you for. But what if you're on opposite sides of a river? You would build a bridge. How do you make sure it's safe? How do you make sure they can travel across the bridge with privacy in mind? What happens if there was an accident on the bridge? It's a simple metaphor you can use to explain the important of information security to business partners who are just thinking about the

en-us

00:32:30

Ep. 17 - All About Application Security

Plan-B Security ·

2024/01/09

First one out of the gate for 2024 is all about Application Security. We get right to it, talking about all aspects of Application Security from the importance AppSec has on the overall business, to the minuet details of input validation, honeypotting, secure logging and more. Tune in to hear some stories from the past decade solving challenging attacker v defender scenarios, and what we did to increase the cost on the attacker and use data to help drive our priorities. Can't wait to have you

en-us

00:41:35

Ep. 16 - Securing the Perimeter, People, Policy and...

Plan-B Security ·

2023/12/22

In this episode, we explore the framework of what to secure when starting out a security program, or looking to mature it. Starting with the perimeter helps build a defensible position for you to get a foothold on security by knowing what needs to be protected and how attackers might try to access it. Next, we talk about securing the people aspect, building on awareness from the perimeter phase. People are the ones doing the work and who need access to data to do their jobs, one way or another

en-us

00:16:32

Ep. 15 - As Secure and As Lenient As Possible

Plan-B Security ·

2023/12/12

Learn how you can apply both the As Soon As Possible and As Late as Possible principles in your decision making when you're trying to figure out the risk/benefit trade off. As Secure As Possible and As Lenient As Possible are two adaptations to the same principle that quantify risks using data and allow you the prioritize the work you need to do to make an educated decision and create a smart defensible position when it comes to decision making. Some decisions are hard, some decisions are easy

en-us

00:26:41

Ep. 14 - What Is Corporate Security?

Plan-B Security ·

2023/11/22

Corporate security can mean so many different things depending on the maturity of your company and your security program. Some of my favorite projects were done while I focused on Corporate Security over the past 15 years. In this episode, I share a few of those stories, things that I totally didn't expect, but that made me a stronger engineer.

en-us

00:18:28

Ep. 12 - From Risks to Enablement

Plan-B Security ·

2023/11/14

There are risks we encounter everyday, at home, in the field and at work. Some of these risks are important for us to be mindful of, that cannot be clearly remediated. Some of these risks however, can be remediated in a way that creates an enablement for those around it. In this episode, learn how we identify risks and turn them into an enablement. This skill is for all listeners, not just those in the security profession.

en-us

00:14:42

Ep. 13 - The Scary Truth of Information Security

Plan-B Security ·

2023/10/29

Being in information security is not all flowers and sunshine. Often, then things go wrong, there's a dollar amount associated with it, and reducing your liability leads to finger pointing and a hot-potato version of the blame game. Learn how the Okta breach was exacerbated by the inaction of the customers who were affected, and learn how to prevent it from happing to you in the future.

en-us

00:18:15

Ep. 11 - 5 Love Languages of Security

Plan-B Security ·

2023/10/23

This is a fun way of taking an existing framework for resolving conflict and building relationships and growing your security program. The 5 Love Languages is a concept that's been around a long time thanks to Gary Chapman, the original creator. Using the 5 languages of Quality Time, Words of Affirmation, Physical Touch, Gift Giving and Acts of Service, we'll practice translating these to the corporate world and finding ways to give our users and cross-functional partners what they need by

en-us

00:25:25

Ep. 10 - Selling Security Through Storytelling

Plan-B Security ·

2023/10/15

We talk about how personal events in our lives don't hold us back but give us skills to use in unexpected ways. My own experiences taught me how to turn data into a story, and remove emotion from defending my ego and move the emotion to the response of the listener. In security, everything is a battle - storytelling allows you to connect risk, threats, facts and the unknown with your audience to inform and educate.

en-us

00:20:59

Ep. 9 - The Harder Part of Leading

Plan-B Security ·

2023/10/08

Continued from last week's Security Leadership Strategy and Tactics conversation where we learn how to take the strategy and add it up to the sum of the bigger picture. We learn how Key Results are the journey to your goal, and how commanders intent keeps the organization focused, with or without you. This is one of my favorite yet!

en-us

00:22:56

Ep. 8 - Security Leadership Strategy and Tactics

Plan-B Security ·

2023/10/01

Leading a team is hard, and it's even harder in the face of changing economical conditions, where money may not be flowing to where a business needs to stay secure, but instead where they can use it to make more money. Learn a few ways using the CITER risk-scenario model to justify investment and cost, and how to turn it into Objectives and Key Results.

en-us

00:22:58

Ep. 7 - Device (anti)-Trust

Plan-B Security ·

2023/09/23

Dig in to the details around Device Trust, where it's good and where it's bad. We walk through the fundamentals a program needs to have in place to start building on the device authorization and device attestation stories, which combined provide the device trust principles. There's a few ways to thwart device trust, and a few attack vectors it's not able to solve either. So join us as we talk about the good the bad, and ways to use device trust for incremental improvements while

en-us

00:21:20

Ep. 6 - MFA-for-ALL

Plan-B Security ·

2023/09/19

Multi-factor Authentication is the the best way to protect your online life, keeping your data safe, secure and private. However, not all MFA is created equal. Let's listen to a few ways of thinking about the MFA problem and what the future of account security looks like. I'll also touch on the MGM, Caesars and Retool announcements as they relate to MFA and what we can learn and do differently! Be sure to share your learnings with your family, friends and loved ones so they know how to keep

en-us

00:21:47

Ep. 5 - The Principle of Most Private

Plan-B Security ·

2023/09/11

The principle of most private is something I have been noodling on for a long time. It's not perfect, and will definitely see changes in the future, but it was a great way again to change the mindset. Least privilege is often a blocker to productivity, and a huge friction point for companies. Most private supports least privilege by adding intent and context into the conversation, allowing security and IT professionals to better understand what it is that needs to be solved. Most Private and

en-us

00:18:30

Ep. 4 - The 4 C's of Cyber Security

Plan-B Security ·

2023/09/03

The 4 C's of cyber security are more of a philosophical pillar around building a security culture. Learn how Consistency, Clarity, Collaboration and Creativity play into sharing the security vision, working with others to make security a priority, and solving road blocks in a positive and effective manner.

en-us

00:39:19

Ep. 3 - Solutioning Through Scenarios

Plan-B Security ·

2023/08/27

Risk and Threat modeling (yes, they are different) are two effective ways to start building out the requirements for your security program. Solutioning through scenarios is like that, with a little more table top exercise sprinkled in. Also, learn how an old model from my Telecom days, the FCAPS model, plays a vital role in how I approach problems and come up with solutions.

en-us

00:24:19

Ep. 2 - Phases of a Security Program

Plan-B Security ·

2023/08/20

Companies go through different rates of growth and have different information security needs as a result. Learn about a few common stages of growth, signs that your company might be in it, and what you might be able to accomplish. When the business doesn't want security to get in the way of getting a product launched, focus on the corporate side. Once you've made impact, start building components the company can consume to start doing things right in a standardized way. Ultimately,

en-us

00:23:58

Ep. 1 - Back to School

Plan-B Security ·

2023/08/13

Right off the heels of BlackHat, DEFCON31 and BSidesLV, also known as Hacker Summercamp, hear about an impromptu conversation at dinner with a stranger around how to become more "Security" minded using the FTC's Start with Security guidance, making the jump from IT to Security a real possibility!

en-us

38 results

Similar Podcasts

Lead With AI

Tamara Nall

The Tech Trek

Elevano

Engineering the Intelligent Enterprise

PRASAD BHONDE

The Vergecast

The Verge

Double Tap

Steven Scott, Shaun Preece, Steven...