A podcast that socializes security, compliance, and related topics to make them more approachable and understandable. Each week we’ll discuss a topic, usually with an expert in the area, with the goal of learning along with you. We love to learn, and hope you do as well.
Reading the feed…
In this episode of Socializing Security, Brian and Milou delve into the critical topic of third-party vendor management, focusing on the importance of vendor reviews, risk assessments, and the processes involved in onboarding and managing vendors. They discuss the need for a coordinated approach among various departments, the significance of standardized evaluation processes, and the unique challenges posed by smaller vendors and AI technologies. The conversation emphasizes the necessity of documentation, contractual obligations, and ongoing vendor management to ensure compliance and security.
In this episode, Brian and Milou explore the concept of shadow IT, its implications for organizations, and practical strategies to manage and mitigate its risks. They discuss how shadow IT arises, the security and compliance challenges it presents, and how to establish effective policies and controls.Chapters 00:00 Introduction to Shadow IT and Episode Overview 01:56 What is Shadow IT and Why Is It a Problem? 03:14 Emerging Shadow IT Vectors: AI and Browser Extensions 07:09 Risks of Shadow IT: Data Exposure and Security Threats 10:44 Compliance and Asset Management Risks of Shadow IT 15:08 How
In this conversation, Craig Taylor discusses the intersection of psychology and cybersecurity, emphasizing the importance of positive reinforcement in training programs. He critiques traditional punitive approaches to cyber awareness, advocating for innovative methods that engage employees and foster a culture of security. The discussion also touches on the ongoing debate between privacy and security, highlighting the need for continuous improvement in both areas. Chapters 00:00 Introduction to Cybersecurity and Psychology 02:52 The Role of Psychology in Cybersecurity Training 05:53 Positive R
In this episode, Brian and Milou discuss the intersection of AI and security, exploring the innovations AI brings to the security space, the importance of defining permissions and guardrails, and the implications of AI in security tools. They also delve into the challenges of remediation and recovery processes with AI, the evolving threat landscape where attackers use AI, and the critical aspects of privacy and data minimization in AI applications. Chapters: 00:00 Introduction to AI and Security 08:58 Guardrails and Permissions in AI 13:54 AI in Security Tools 20:01 Remediation and Recovery wi
In this episode, Brian and Milou discuss their daily routines for staying updated on cybersecurity and compliance, sharing their favorite podcasts, newsletters, social media sources, and in-person events. They explore a wide range of resources to help security professionals stay informed about the latest threats, trends, and industry developments.Linkshttps://cisoseries.com/category/podcast/cyber-security-headlines/https://darknetdiaries.com/https://techfieldday.com/podcast/https://krebsonsecurity.com/https://cloud.google.com/blog/topics/threat-intelligencehttps://www.cisa.gov/https://www.nist
In this episode, Brian and Milou discuss the essentials of Managed Security Service Providers (MSSPs), including their role, selection criteria, contractual considerations, and ongoing management. They explore how MSSPs can enhance security maturity, ensure compliance, and the importance of clear communication and trust in these partnerships. Chapters 00:00 Introduction and Weather Chat01:09 Defining MSSPs and MSPs02:21 The importance of 24/7 security monitoring03:43 Expertise and certifications for MSSPs05:21 Compliance considerations and security standards06:17 Enhancing security maturity wi
In this episode, Brian and Milou delve into the intricacies of conducting effective tabletop exercises for cybersecurity preparedness. They discuss how to structure these simulations, the purpose behind them, who should be involved, and how to ensure continuous improvement. The conversation offers practical insights for organizations aiming to enhance their incident response capabilities. Chapters 00:00 Introduction and episode overview 01:52 What is a tabletop exercise? 04:23 Defining the purpose and scope of the exercise 07:08 Frequency and timing best practices 09:11 Involving stakeholders
In this episode, Brian and Milou explore the complexities of choosing the right domain name for your business or project. They discuss the importance of strategic selection, the impact of top-level domains, security considerations like typosquatting, and the legal and practical implications of domain management. Chapters 00:00 Introduction to Domain Selection 03:08 Consequences of Choosing the Wrong Domain 06:04 Understanding Top-Level Domains (TLDs) 08:53 The Importance of Brand Representation 11:57 Negotiating Domain Prices 14:55 Security and Compliance Considerations 18:38 Dealing with Doma
In this episode, Brian and Milou explore the pervasive influence of AI on privacy, data security, and personal choice. They discuss how public information is used to train AI models, the importance of understanding data practices, and the legal and ethical considerations of AI in everyday life.Chapters 00:00 Introduction to AI in 2026 02:16 Public Information and AI Training 06:30 The Challenge of Privacy in Social Media 10:33 AI Tools: Choosing Wisely 15:06 Understanding AI in Professional Settings 23:07 Navigating AI in Third-Party Applications 29:57 The Default Opt-In: A Cautionary Tale
In this episode of Socializing Security, Brian and Milou reflect on their recent experiences, including the HERS and RSA conferences, and celebrate their 100th episode. They discuss the positive feedback from the HERS conference, the challenges faced at the RSA conference, and their plans for future content. The conversation emphasizes the importance of community, networking, and the joy of creating content together. 00:00 Welcome Back and Reflections on Recent Events 05:04 Insights from the HERS Conference 10:19 Reflections on the RSA Conference 15:32 Celebrating 100 Episodes and Future Plans
In this next episode in our occasional Security Foundations series, fractional CISO Steve Sims returns to discuss the importance of logging, monitoring, and effective detection strategies to enhance security posture and compliance. Learn how to tune logs, leverage AI, and build a mature security program.Previous Security Foundations series episodes:- Asset Management: 📹https://youtu.be/GdiVzP2mby0 🎧https://www.socializingsecurity.com/e/e012-security-foundations-champions-of-asset-management/- Vulnerability Management: 📹https://youtu.be/n0KVn89FUn0 🎧https://www.socializingsecurity.com/e/e06
This week, Brian explores cybersecurity through the analogy of a submarine, highlighting parallels in defense, compartmentalization, threat detection, and team coordination. This episode offers a unique perspective on cybersecurity strategies and the importance of teamwork and adaptability that most people should be able to understand.Chapters 00:00 Introduction to Cybersecurity and Submarines 04:29 The Importance of a Strong Exterior 07:49 Zero Trust and Compartmentalization 12:58 Stealth and Threat Detection 19:15 Teamwork and Adaptability in Cybersecurity 28:47 Conclusion and Feedback Reque
Recorded live at RSAC 2026, this episode explores the importance of risk management, tabletop exercises, and incident response planning. Learn how to prepare your team for real-world scenarios and improve your organization's resilience through structured communication events. Project Zero Trust: https://www.amazon.com/Project-Zero-Trust-Strategy-Aligning/dp/1119884845/ref=asc_df_1119884845 Chapters00:00 Looking Ahead: Insights from RSA Conference00:37 Understanding Risk Management02:54 Scenario-based Planning05:21 The Frequency and Variability of Tabletop Exercises06:46 Planning for Cyber Atta
Recorded live at the HERS Conference comes a panel discussion about Humans in Security. This panel features experts in data security, privacy, AI governance, and startup strategy discussing how to stay secure as a startup, the importance of community, decision-making, and the ongoing fight for privacy and security in the digital age.Tech Auntie's Podcast📹 https://www.youtube.com/@TechAuntiesPodcast/videos🎧 https://open.spotify.com/show/3EFJc29Ql18NwhRxerS7NSPanelistsMilou Lammers - https://www.linkedin.com/in/milou-lammers/Gina Rosenthal - https://www.linkedin.com/in/gminks/Marian Newsome -
Recorded live at the HERS Conference comes a panel discussion with Kameron Monet and Alexandra L. Mack about what it means to be a lawyer and content creator online. They discuss how each of them started posting, how their content has evolved, and how social media can create community, mentorship, and new professional opportunities. The conversation also covers the risks of posting as a lawyer, including negative comments, political topics, professional boundaries, and the importance of making clear that educational content is not legal advice. Chapters 00:00 Introduction to Non-Traditional Le
In this May the 4th inspired episode, Brian uses scenes from Star Wars: A New Hope to draw analogies with cybersecurity concepts, emphasizing data protection, supply chain risks, social engineering, and internal security measures. A fun and insightful way to understand complex security topics through pop culture.Credit to George Lucas and Lucasfilm for a great movie we could dissect. Previous episode on authentication:📹https://youtu.be/uLewnRK65qI🎧https://www.socializingsecurity.com/e/e087-a-password-primerChapters 00:00 Introduction to Star Wars and Cybersecurity 04:26 Data Loss Prevention:
Recorded live at the HERS Conference comes a panel discussion about Humans in Risk. This episode features a detailed discussion on cybersecurity risks, especially phishing, and risk management strategies in startups and organizations. Experts share real-world examples, mitigation tactics, and the importance of a proactive risk culture.Make sure you catch up on the previous two episode for the first and second parts of this three-part Risk Summit from the HERS Conference.🎧 Risk Summit, Part 1: https://www.socializingsecurity.com/e/e091-hers-conference-risk-summit-part-1🎧 Risk Summit, Part 2:
Recorded live at the HERS Conference comes the continuation of a panel discussion about Humans in Risk. This episode features an in-depth discussion on cloud infrastructure risks, weather-related outages, and insider threats introduced through hiring, with expert insights from Robert Hug and Eliza White-Blum. See how the process to assess, mitigate, and prepare for critical risks in data center management and cybersecurity plays out.Make sure you catch up on the previous episode for the first part of this three-part Risk Summit from the HERS Conference.🎧 https://www.socializingsecurity.com/e/
Recorded live at the HERS Conference comes a panel discussion about Humans in Risk. This episode is the first of three from the Risk Summit, and starts with Milou introducing risk management in general, focusing on risk assessment, scoring, and mitigation strategies. It also contains the first scenario where Brian joins Milou to discuss assessing the risks of zero day vulnerability.Watch for parts 2 and 3 in the next two weeks!Chapters00:00 Introduction02:54 Introducing Risk Management05:50 The Role of Risk Officers08:02 Conducting a Risk Assessment Summit11:09 Risk Scoring Methodology14:18 In
Recorded live at the HERS Conference comes a panel discussion about Humans in Equity. This session dives deep into workplace abuse, focusing on how employees can recognize, document, and address toxic environments. Featuring experts Kim Williams, Dr. Gene Holloway, and Eliza White-Blum, the conversation covers legal protections, internal reporting, and fostering healthier workplace cultures. Kim Williams - https://www.linkedin.com/in/kimberly-e-williamsGene Holloway - https://www.linkedin.com/in/gene-holloway-ph-d-pmp-516803154Eliza White-Blum - https://www.linkedin.com/in/eliza-white-blum Lin
In this episode of Socializing Security, Brian and Milou catch-up to reflect on their recent HERS Conference experiences, sharing insights on organizing hybrid events, networking strategies, and planning for upcoming conferences like RSAC. They discuss lessons learned, content creation, and tips for first-time attendees.Watch Milou THIS TUESDAY morning at Tech Field Day Extra at RSAC 2026: https://techfieldday.com/event/rsac2026/Watch for us to go live this week from RSAC on:YouTube: https://www.youtube.com/@SocializingSecurityPodcast LinkedIn: https://www.linkedin.com/company/socializing-secu
This episode explores the evolution of passwords, best practices for creating strong passwords, and the future of authentication methods including passwordless options and multi-factor authentication. Chapters 00:00 Introduction to Passwords and Authentication 01:09 Understanding Authentication Methods 04:44 The Importance of Good Password Hygiene 10:10 Password Management 12:56 Exploring Multi-Factor Authentication 14:39 Passwordless Authentication 20:30 Final Thoughts and Recommendations 24:59 Outro
In this episode of Socializing Security, Milou and Brian talk about the launch of HERS — Humans in Equity, Risk, and Security, a new conference built around the idea that security is ultimately about people online this Friday March 13, 2026. They discuss why human connection, community, and inclusive leadership are becoming essential in the risk and security world, and how HERS was designed to bring those conversations to the forefront.The episode explores the vision behind the event, the importance of creating spaces where practitioners can share real experiences, and the role of community in
In this engaging second-part conversation, Brian and Milou continue their discussion with Jon Edwards, focusing on the intersection of healthcare, compliance, and technology. They explore the challenges posed by AI in healthcare, the importance of regulatory compliance, and the necessity of building strong relationships within organizations to ensure effective risk management. Jon shares personal anecdotes that highlight the human element in healthcare and the critical role of security and compliance in protecting patient data. The conversation emphasizes the need for collaboration across team
In this episode of Socializing Security, hosts Brian and Milou engage with Jon Edwards, a seasoned IT professional with nearly 30 years of experience, focusing on cybersecurity in the healthcare sector. The conversation explores the critical importance of cybersecurity, the challenges of vendor relationships, and the evaluation of technology in healthcare. Jon shares insights on the need for transparency from vendors, the complexities of compliance, and the impact of AI on patient care. The episode concludes with a cliffhanger about the ethical implications of wearable AI technology in healthc
