As a guest on two episodes of the CloudBytes Podcast’s Season 3 series, I had the opportunity to discuss two critical topics in the realm of cybersecurity: incident response and malware. In this blog post, I’ll provide an overview of the key takeaways from my conversations with Brian Knudtson and the other guests on each episode.

Episode 1: Incident Response

When it comes to incident response, effective communication is paramount. As Jason Carrier, Richard Kenyan, and I discussed, having a clear and well-defined incident response plan in place is crucial for minimizing the impact of security incidents on your organization. This plan should include communication paths that are well-defined and tested, as well as an iterative process for constant improvement.

One of the most significant challenges in incident response is dealing with cloud providers. As we discussed, cloud providers often have different security models and incident response processes than traditional on-premises environments. It’s essential to understand these differences and have a plan in place for how to handle incidents that involve cloud providers.

The conversation also touched on some of the best and worst examples of incident response plans. One of the worst examples was a company that had an incident response plan but never tested it or updated it. This lack of preparation led to significant delays and mistakes during the incident response process. On the other hand, one of the best examples was a company that had a well-tested and regularly updated incident response plan that included clear communication channels and well-defined roles and responsibilities for each team member.

Episode 2: Malware

In our conversation about malware, Steve Broeder, Allan Liska, and I discussed the current state of cyber-criminal activity and whether traditional endpoint security measures are still effective. While ransomware is still a significant threat, there are new actors in the threat landscape that organizations need to be aware of.

One of the most critical takeaways from this conversation was the importance of constant vigilance and disaster recovery (DR) plans. As cyber-criminals continue to evolve their tactics and techniques, it’s essential for organizations to stay up to date on the latest threats and have a plan in place for responding to incidents that may impact their endpoints or networks.

Another important topic we discussed was the role of corporate IT in security. While corporate IT used to be the primary entity responsible for security, this is no longer the case. With the increasing complexity of cyber threats and the ever-evolving nature of the threat landscape, organizations need a more comprehensive approach to security that involves multiple stakeholders and departments.

In conclusion, my appearances on CloudBytes Podcast’s Season 3 series provided an excellent opportunity to discuss two critical topics in cybersecurity: incident response and malware. The conversations with Brian Knudtson and the other guests highlighted the importance of effective communication, constant vigilance, and well-defined incident response plans for minimizing the impact of security incidents on organizations. Additionally, the conversations emphasized the need for a comprehensive approach to security that involves multiple stakeholders and departments.