x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

QPC Security - Breakfast Bytes

Felicia King is an internationally recognized CISO and considered to be one of the top network layer security strategists in the U.S. Since launching in 2004 on the WGTD network, her Breakfast Bytes podcast has focused on information security risk management and the issues business leaders need to be aware of to benefit from the challenges others have faced. Learn about the most effective approaches, what you can do to mitigate risk, and how to protect your most valuable assets, your data, and your

technology management

All Episodes

29:19

Virtual Patching, Telecom Fraud, Running VM Server on...

QPC Security - Breakfast Bytes ·

2022/06/03

I got a request to post this podcast from 12/1/2018 to podbean. Here it is.

en

29:47

Video management system appliance analysis

QPC Security - Breakfast Bytes ·

2022/06/03

Originally aired: 11/1/2018. I had a request to post this older podcast to Podbean, so here it is. VMS Appliance cost analysis between the "appliance" version and the "you get a real server" version. https://qualityplusconsulting.com/BBytes/QPCAnalysisOnAxisVideoRecorderServer.pdf

en

29:41

Why real server hardware is usually the most...

QPC Security - Breakfast Bytes ·

2022/06/03

I got a request to publish a podcast I did a few years back on podbean, so here it is. Originally this was from 10/19/2018. Usually there is no substitute for real server hardware. Attempts to pay less for server hardware almost always end up costing you more in the long-run. Windows 10 as of Build 1809 10/2/2018 has an IPv6 requirement. There are a bunch problems with that. We cover the option of running an ACS Appliance instead of building your own ACS VMS using a real server. We will go into

en

29:02

Resources for job candidates in cybersecurity - What...

QPC Security - Breakfast Bytes ·

2022/06/01

Overview Listen to the podcast or the list of these resources may not make sense to you. You cannot secure what you cannot engineer, implement, maintain, and support. Security was always infused into IT if you did IT correctly. I know. I've been doing IT since 1993 and was programming in third grade. Security was ALWAYS part of a proper strategy. I'm always trying to add to the team. But I find that a lot of people are just wholly unqualified to do baseline prerequisites. They get misled and sold

en

01:11:27

Right-sized software

QPC Security - Breakfast Bytes ·

2022/05/17

Amazing interview with Colin Ruskin, CEO of WorkOptima, on the topic of right-sized software. Colin has an incredible talent at being able to distill the truth of something into a catchy and memorable tagline using spot on metaphors. Some highlights: Can I actually use the software and benefit from it? Floors versus software that grows with you All features all the time, but license it at the per-user Enterprise drama and enterprise mindset which is not really trying to sell to the SMB market and is

en

29:35

How to achieve compliance for privileged account...

QPC Security - Breakfast Bytes ·

2022/05/03

Cybersecurity insurance requires MFA for all internal and external administrative access. How do you accomplish this? Examples of things you might access: switches firewalls servers printers workstations DNS hosting website hosting cloud management portals NAS BCDR appliances There are many ways to solve this problem and they are all too long to post about here, so this is what this podcast is about. - Passwordstate remote integrated proxy authentication - tiered access control - compensating

en

29:00

API Security and external vulnerability scanning

QPC Security - Breakfast Bytes ·

2022/04/01

API Security is going to be the thing you need to be paying attention to in the next two years. Partner with an information security officer like QPC Security to get an internal and external vulnerability scanning plan in place for your organization. A lot of vulnerability management is not possible to do with tools. It takes experience and expertise that comes from 29 years of hard work. A great API scanner https://www.wallarm.com/ RMM security topics/tactics Either fund your IT security

en

47:02

Working with a Breach Coach/Attorney - A Primer

QPC Security - Breakfast Bytes ·

2022/03/29

Cyberlaw podcast What needs to be pre-documented for the breach attorney to be effective? And in what format? What to do to protect yourself from outrageous fees? What to do in order to get proper service from a breach attorney? What are the advantages of having a pre-established relationship with a breach attorney? What positive outcomes arise from having pre-breach meetings with a breach attorney? 3/24/2022 Spencer Pollock – Cybersecurity breach attorney Felicia King – QPC Security, Security

en

29:35

Avoiding real estate theft, deed theft, and related...

QPC Security - Breakfast Bytes ·

2022/03/03

Check out dark patterns for scam awareness. https://www.darkpatterns.org/ Avoid the new movers mailing list Avoid putting real estate in your personal name Use a service like Abine DeleteMe Get a PO Box and stop having snail mail delivered as much as possible Subscribe to paperless billing as much as possible Harden your digital life Get off social media and stop sharing your life in public digital media Be aware of deed fraud and how to verify that no one has stolen your deed. Be aware of how

en

45:30

Attestation, scoring, evaluation, and business...

QPC Security - Breakfast Bytes ·

2022/01/24

Joy Beland joins Felicia to discuss: What Edwards Performance Solutions is doing in the CMMC training space Joy's team created the CMMC assessor textbook Many orgs have cybersecurity insurance enforcement for the first time ever Joy's extremely wise metaphor and perspective on cybersecurity insurance (15 mins) Transfer of risk and economic destruction DMARC, DKIM, SPF tuning What tools exist to help the SMB market with attestation, and establishing patterns of due care and due diligence? IS policies

en

29:39

Integrated IT risk management - part 2

QPC Security - Breakfast Bytes ·

2021/12/31

Identity theft via insecure credit APIs Integrated IT risk management part 2

en

29:32

Assessments and Integrated IT Risk Management - Part 1

QPC Security - Breakfast Bytes ·

2021/12/03

Problems with and limitations in many assessments Many assessment report results from automated tools can be incomplete, incorrect, or pretzel talk What realistic expectations should you have from a paid and unpaid assessment There are certain security baselines simply so your organization can be insurable. There are certain security baselines in order for your organization to be serviceable by an IT service provider. Small organizations can easily find themselves spending $50,000 that they don't

en

35:17

Technical Debt - a whole new perspective

QPC Security - Breakfast Bytes ·

2021/10/28

10/28/2021 Cyber Matt Lee joins Felicia on Breakfast Bytes to talk about massive issues with technical debt. Senior Director of Security and Compliance at Pax8. You have to start with the right definitions. It’s not patch management, it is vulnerability management. You have to ZOOM in. Is your TPM up to date? Is your firmware up to date? Drivers, configurations, remove unpatchable software. Are you still susceptible to spectre and meltdown? What about SMB1, PowerShell 2.0, LLMNR, etc.? “That doesn’t

en

28:53

Avoid cybersecurity insurance fraud

QPC Security - Breakfast Bytes ·

2021/09/25

How to avoid cybersecurity insurance fraud. If this happens to you, your claim will be denied and you will likely be uninsurable in the future including by other insurance providers. You have to be working with an extremely operationally mature ITSP with ISOs on staff or you probably will not be able to navigate this complexity. Great article showing a claims denial and then accompanying lawsuit for a perceived insurance fraud

en

47:05

Why converged NOC and SOC are so critical to security...

QPC Security - Breakfast Bytes ·

2021/09/13

Joining Felicia is Rui Lopes, Senior Technical Evangelist at WatchGuard Technologies. Rui was with Panda Security prior to the WatchGuard acquisition and has spent many years merging the technical with customer enablement at a level rarely seen. His efforts at WatchGuard are projects, partner support, and overall customer enablement of using the endpoint protection technology effectively. When I listened to an interview with Fortinet's CISO regarding converged NOC/SOC, I had to reach to Rui to

en

22:40

Act now so your emails will still be deliverable

QPC Security - Breakfast Bytes ·

2021/09/07

NDAA 2021 legislation is forcing a gaps closure in SPF, DKIM, and DMARC. This stuff is really complicated. Get some seriously competent help. I don't think most ITSPs (IT service providers) have enough experience in managing this especially in light of the inclusions of marketing automation platforms on root domains. You cannot be driving a hole with a 20 lb sledgehammer through your email ingress filtration policies in order to accommodate for incompetently configured sender framework on behalf of

en

40:35

Gaps in EDR/EPP paradigms and what to do about them

QPC Security - Breakfast Bytes ·

2021/08/31

Excellent and invigorating discussion on the gaps in EDR/EPP and what to do about them with Maxime Lamothe-Brassard, founder of LimaCharlie.io and Refraction Point. LimaCharlie avoiding tool proliferation avoiding the jedi mind trick of EPP identify gaps in a lot of EDR/EPPs challenges with outsourced SOC supply chain risk in toolset vendors paradigms around security tools and training

en

29:25

Kaseya VSA breach analysis

QPC Security - Breakfast Bytes ·

2021/08/16

Why the breach happened and what people could have done to prevent it. What Kaseya could have done differently. How to manage supply chain risk when your software vendor is not. Smart vendors use the experts in their customer base. People really need to have a major paradigm shift and look seriously at an RMM as being nearly the same as a nuclear launch code. Kaseya VSA Limited Disclosure | DIVD CSIRT

en

30:22

Parsing out the risk issues associated with cloud...

QPC Security - Breakfast Bytes ·

2021/08/06

Improper use of cloud and the problems caused by improper pre-planning and risk assessment of improper use of cloud. Kim Nielsen, founder and President of Computer Technologies, Inc. cti-mi.com joins Felicia to discuss dangers and risk of improper use of cloud hosted technologies. Business risk vs security risk, must have an exit plan. Dangers of subscriptions. Huge databases don't belong in the cloud because it is not more

en

30:03

The REAL reason you cannot afford to have a...

QPC Security - Breakfast Bytes ·

2021/08/06

I have been thinking for months about the latest challenges faced by organizations with regards to the increased cybersecurity risks, what is at stake, how unprepared they are, and how the cyber insurance companies are responding to the changing landscape. As I have had conversations with business decisions makers, they often think that they have little to risk. Many businesses feel that they are not under much if any regulatory framework that requires them to take action. It seems that each week I

en

104 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs