Episode 127: Visible Ops as a Cybersecurity Foundation

In episode 127 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Scott Alldridge, President and CEO of IP Services and the IT Process Institute. Together, they use Scott's book, "Visible Ops Cybersecurity: Enhancing Your Cybersecurity Posture with Practical Guidance," to discuss how visible IT operations (Visible Ops) provide a foundation for cybersecurity. Here are some highlights from our episode:

• 01:31. How Visible Ops reflect an appreciation for the original config change release processes
• 10:19. The limitations of treating security as a silo and "new toys" as security cure-alls
• 15:23. How to embrace a dynamic view of visibility and configuration management
• 24:50. The importance of leadership buy-in when shifting left to a security-first mindset
• 27:10. What an effective change configuration management system looks like and how it changes people's view of IT
• 30:20. Parting thoughts and where to find more of Scott's work

Resources

• IT Process Institute
• What is ITIL? Your guide to the IT Infrastructure Library
• CIS Critical Security Controls (CIS Controls) Resources
• An Examination of How Cyber Threat Actors Can Leverage Generative AI Platforms
• Episode 44: A Zero Trust Framework Knows No End
• Why Employee Cybersecurity Awareness Training Is Important

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.