Caffeinated Risk – Détails, épisodes et analyse

Détails du podcast

Informations techniques et générales issues du flux RSS du podcast.

Caffeinated Risk

McCreight & Leece

Business & Entrepreneuriat

Technologie

Actualités

Fréquence : 1 épisode/33j. Total Éps: 58

The monthly podcast for security professionals, by security professionals.Two self proclaimed grumpy security professionals talk security risk, how they’ve managed it in the past and forward looking discussions with guests working in information security and risk management.

Lire plusRéduire

Site

RSS

Apple

Classements récents

Dernières positions dans les classements Apple Podcasts et Spotify.

Apple Podcasts

🇨🇦 Canada - management
08/08/2026
#97
🇨🇦 Canada - management
07/08/2026
#59
🇨🇦 Canada - management
30/07/2026
#71
🇨🇦 Canada - management
11/05/2026
#77

Liens partagés entre épisodes et podcasts

Liens présents dans les descriptions d'épisodes et autres podcasts les utilisant également.

https://www.hawksightsrm.com/
2 partages
https://winnschwartau.com/metawar/
2 partages
https://cloudsecurityalliance.org/
1 partage

https://www.amazon.com/Managers-Guide-Enterprise-Security-Management-ebook/dp/B01MXMVGY7
1 partage
https://www.amazon.com/Handbook-Security-Martin-Gill/dp/3030917347
1 partage
https://www.amazon.com/Building-Cyber-Risk-Management-Program/dp/1098147790
1 partage

https://www.linkedin.com/in/rochelleclarke/
1 partage
https://www.linkedin.com/in/relevant-perception/
1 partage

Qualité et score du flux RSS

Évaluation technique de la qualité et de la structure du flux RSS.

Qualité du flux RSS

À améliorer

Score global : 58%

Historique des publications

Répartition mensuelle des publications d'épisodes au fil des années.

Year

Derniers épisodes publiés

Liste des épisodes récents, avec titres, durées et descriptions.

Deviance Normalization & Risk Management with Marco Ayala

Saison 4 · Épisode 8

jeudi 24 octobre 2024 • Durée 34:05

Technological change is inevitable and often one of the aspects that attracts people toward careers in information and operational technology. Although risk management is a part of navigating advancement in any area, the fundamental flaw in any management system is our human tendencies.

This episode explores how organizations can make slow, steady migration from first principles to risky undertakings without noticing. Marco Ayala, an operational technology cybersecurity expert and current Houston InfraGard president, joins this episode to further explore the reasons behind this normalization of deviance, a concept first introduced to OT cyber specialists at S4 in 2024.

Mr. Ayala is also CCE proponent and facilitator leading to a discussion on possible options for course correction back off the normalization path. Although solutions must always be tailored to work within organizational constraints, the early contributors to catastrophic outcomes associated with the Challenger space shuttle and Boeing 737 Max warrant exploration or we will inevitably repeat.

Lire plusRéduire

Managing Supply Chain Risk Management - with Darren Gallop

Saison 4 · Épisode 7

jeudi 26 septembre 2024 • Durée 32:34

Whether it's the NIST CSF, 8276 or the new European Cyber Resilience Act there is no denying the expectation that supply chain management (SCM) is a risk management area no organization can ignore. While SolarWinds is recent common reference in many SCM discussions, this episode's guest takes us back to Target's major data breach that resulted in significant changes to the PCI-DSS standard.

Darren Gallop, a serially successful Canadian tech entrepreneur, recounts the early journey into the software as a service business up to his current role as CEO of Carbide. The episode talks frankly about the current challenges with supply chain management, but Mr. Gallop also shares where he sees bright lights on the horizon and a path forward for organizations willing to consider the shift.

Lire plusRéduire

ESRM a Decade In and The Emergent Threat Landscape

Saison 3 · Épisode 32

jeudi 28 septembre 2023 • Durée 29:52

Post GSX conference, which included an in-depth review of ESRM and an interview with former U.S. president George W Bush, this episode considers how enterprise security risk management has stood the test of time as well as how risk analysis will need to evolve .

Financial receptors can be found in almost every organizational risk matrix but how do those decisions change with modern ransomware attacks? How does a threat intelligence program contribute to organizational defense and resilience?

Lire plusRéduire

Business Enablement using Converged Risk Management with Michael Lashlee

Saison 3 · Épisode 31

jeudi 24 août 2023 • Durée 36:20

The convergence buzzword has come and gone and some organizations have struggled to reap the benefits of physical and cyber security departments working in tandem toward common goals. Michael Lashlee, deputy Chief Security Officer at Mastercard, shares security insights from the US Marines, secret service and financial services tech giant Mastercard, illustrating how principles from very different missions overlap surprisingly often. Mr. Lashlee also discusses how technology supports the physical, intelligence and fraud specialists working to keep Mastercard customers client data safe as well as steps they are taking to resolve the cyber skills talent shortage.

Lire plusRéduire

Interpreting Risk within a Regulatory Context with Terry Freestone

Saison 3 · Épisode 30

jeudi 27 juillet 2023 • Durée 32:28

Calgary was an ICS cyber hub before most knew such measures were necessary, Terry Freestone was one of the ICT specialists from those early days who now applies his decades of hard-won knowledge in the offices of the Canadian Energy Regulator.

Speaking as a private citizen and cyber security expert rather than a government representative, Terry and the Caffeinated Risk team explore risk management from the energy producer's perspective and his four point strategy for risk mitigation prioritization that works for any size staff or budget.

Lire plusRéduire

2023 Summer Show

Saison 3 · Épisode 29

jeudi 29 juin 2023 • Durée 30:56

Keeping up the accidental annual tradition Tim and Doug take a retrospective look at risk management as a mid-year pulse. The 10th annual Cyberthreat Defense report forms the underlying theme but digging under the statistics to analyze how these might pertain to ESRM. Communication also popped up as a topic, and Tim shares some lessons learned from the field as well as a professional development resource.

Lire plusRéduire

ESRM and Data Science with Rachelle Loyear

Saison 3 · Épisode 28

jeudi 25 mai 2023 • Durée 31:28

One of the original authors of the ESRM framework, now in it's tenth year, and Caffeinated Risk's first guest returns to discuss how data science is changing security and risk management. While alchemy may be a bit of a stretch, Ms. Loyear ongoing focus of including human behaviour in the risk equation is leading to the development of data science based detection capabilities that would have appeared magical even 5-10 years ago.

Rachelle Loyear is the Vice President of Integrated Security Solutions for Allied Universal and co-author of The Manager's Guide to Enterprise Security Risk Management.

Lire plusRéduire

Attack Tree Calibration with Terry Ingoldsby

Saison 3 · Épisode 27

jeudi 23 mars 2023 • Durée 07:30

Threat modeling expert and inventor of one of the world's first attack tree modeling products talks about how to integrate subject matter expertise into the risk equation, the answer may be surprising.

Bonus content not included in the original interview with Terry which dove deep into the history of attack trees, modern applications and exploring why there is no AI magic when it comes to identifying events that could end your organization. Well worth a listen if you missed it.

Lire plusRéduire

FAIR and ESRM, exploring common ground with Jack Freund

Saison 3 · Épisode 26

jeudi 23 février 2023 • Durée 38:12

Factor Analysis of Information Risk (FAIR) and Enterprise Security Risk Management (ESRM) took different evolutionary paths yet share a lot more commonality than catchy 4 letter acronyms and mainstream adoption by notable organizations like NIST, The Open Group and ASIS international. Jack Freund personifies the term "risk management thought leader" with professional qualifications and public recognitions too long to list, but co-author of Measuring and Managing Information Risk can't go unmentioned since industry peers inducted this seminal title into the Cybersecurity Cannon.

With risk management discussions ranging from banking to defeating door locks, Dr. Freund was consistently insightful, humorous, and a delightful guest.

Lire plusRéduire

Cyber-Physical Convergence Revisited

Saison 3 · Épisode 25

jeudi 19 janvier 2023 • Durée 34:40

In addition to hybrid work and regular time in the office being the new normal, 2023 marks the year Caffeinated Risk's co-host Tim McCreight serves as the president of ASIS international. ASIS has long been a proponent of both physical and cyber security professionalism and one of the first organizations to explore and embrace Enterprise Security Risk Management (ESRM) as an integral element of security.

Scholarly articles on cyber-physical security convergence started appearing in the late 1990s, more than 25 years later the convergence buzz has ebbed and flowed but silo's remain. In this episode Tim shares his insights from the past 40 years, the benefits to a converged approach as well as some of the paths toward success.

Lire plusRéduire

Podcasts et contenus similaires

Autres podcasts ou contenus associés partageant des thèmes ou audiences similaires.

Podcasts Similaires Basées sur le Contenu

Découvrez des podcasts liées à Caffeinated Risk. Explorez des podcasts avec des thèmes, sujets, et formats similaires. Ces similarités sont calculées grâce à des données tangibles, pas d'extrapolations !