PODCASTS
Show 002 - An Interview with Jim Routh
Jim Routh is the CISO of the Depository Trust and Clearing Corporation (DTCC). Jim is a veteran technology and security executive, having held positions at American Express and American Express Financial Advisors before joining DTCC.
At DTCC, Jim designed and implemented an enterprise wide information security program based on risk management best practice, COBIT, and ISO 27001. He is a member of the Board of Directors for FS-ISAC and the Wall Street Technology Association. [The Reality Check Security Podcast with Gary McGraw]
Show 001 - An Interview With Steve Lipner
Steve Lipner is the senior director of security engineering strategy in Microsoft's trustworthy computing group. Steve runs the Security Development Lifecycle team focused on product security and privacy. Steve has been active in computer security for thirty-five years. He holds a B.S. and an M.S. from MIT. His book The Security Development Lifecycle co-authored with Mike Howard is required reading in the field. [The Reality Check Security Podcast with Gary McGraw]
The Reality Check Security Podcast with Gary McGraw focuses directly on software security practitioners and practical software security. Reality Check's sister podcast, the Silver Bullet Security Podcast with Gary McGraw, follows a free form interview style tailored highlight the ideas and experience of security gurus. By contrast, Reality Check is concerned with practical questions centered on running large-scale software security initiatives in the real world. Reality Check will be a monthly podcast targeting experienced leaders working to solve software security problems in large organizations every day. We use a standard script to guide each conversation with questions about history, methodology, best practice, and measurement. We plan to interview leaders of mature software security programs and leaders of programs just getting started.
Heartland Data Breach Reflects Lack of Security Progress
Source: Bill Brenner, Senior Editor
The recent data security breach at Heartland Payment Systems reflects a sad lack of progress on the data loss prevention front. [Security Insights with CSO Senior Editor Bill Brenner, Jan. 26, runtime 11:43]
When Online Gaming Becomes an IT Security Problem
Source: Bill Brenner, Senior Editor
Cigital CTO Gary McGraw explains why IT professionals should worry about exploits against online games [Security Insights podcast with CSO Senior Editor Bill Brenner]. Jan 20, 2009 edition, runtime 13 minutes, 52 seconds
Source: Bill Brenner, Senior Editor
AUDIO: [Security Insights podcast with CSO Senior Editor Bill Brenner] In the Jan. 12, 2009 edition, we look at the information security problems the incoming president faces and what he can do about it. Guests: Tom Kellerman, VP of Core Security and a member of the Commission on Cyber Security for the 44th Presidency, and former cybersecurity czar Amit Yoran. Runtime 12 minutes, 25 seconds
Big Peace Initiative, Big Security Risks
Source: Bill Brenner, Senior Editor
Audio: [Security Insights podcast with CSO Senior Editor Bill Brenner] In the Jan. 6, 2009 edition, we look at the security implications of the PeaceTones Initiative, an effort to extend online legal representation to impoverished parts of the world.
Audio: Security Sinners, Take Note
Source: Bill Brenner, Senior Editor
[Security Insights Podcast with CSO Senior Editor Bill Brenner] In the Dec. 15 edition, popular security blogger Mike Rothman offers his take on the Seven Deadly Sins of Network Security. Runtime 17 minutes, 35 seconds
Audio: Argument for Pen Testing's Demise
Source: Bill Brenner, Senior Editor
[Security Insights podcast with CSO Senior Editor Bill Brenner] In the Dec. 10, 2008 edition, Fortify's Brian Chess explains why penetration testing is at the end of its life. Runtime 11 minutes, 30 seconds
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.
