Using Standards to Build an Information Security Program
Business leaders can use international standards to create a business- and risk-based information security program. Listen on Apple Podcasts .
Jul 10, 2007•28 min
Software Engineering Institute (SEI) Podcast Series
The SEI Podcast Series presents conversations in software engineering, cybersecurity, and future technologies.
Last refreshed: ⓘ
Follow this podcast in the Metacast mobile app to refresh it and see new episodes.
Podcasts are better in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more
Episodes
Getting Real About Security Governance
Enterprise security governance is not just a vague idea - it can be achieved by implementing a defined, repeatable process with specific activities. Related Courses Managing Enterprise Information Security: A Practical Approach for Achieving Defense-in-Depth Listen on Apple Podcasts .
Jun 26, 2007•19 min
Convergence: Integrating Physical and IT Security
Deploying common solutions for physical and IT security is a cost-effective way to reduce risk and save money. Listen on Apple Podcasts .
Jun 12, 2007•29 min
IT Infrastructure: Tips for Navigating Tough Spots
Organizations occasionally may need to redefine their IT infrastructures - but to succeed, they must be prepared to handle tricky situations. Related Courses Information Security for Technical Staff Advanced Information Security for Technical Staff Listen on Apple Podcasts .
May 29, 2007•23 min
The Value of De-Identified Personal Data
As the legal compliance landscape grows increasingly complex, de-identification can help organizations share data more securely. Listen on Apple Podcasts .
May 15, 2007•31 min
Adapting to Changing Risk Environments: Operational Resilience
Business leaders need to ensure that their organizations can keep critical business processes and services up and running in the face of the unexpected. Related Course Introduction to the CERT Resiliency Engineering Framework Listen on Apple Podcasts .
May 01, 2007•25 min
Computer Forensics for Business Leaders: A Primer
Computer forensics is often overlooked when planning an incident response strategy; however, it is a critical part of incident response, and business leaders need to understand how to tackle it. Related Courses Computer Forensics for Technical Staff Listen on Apple Podcasts .
Apr 17, 2007•17 min
The Real Secrets of Incident Management
Incident management is not just about technical response. It is a cross-enterprise effort that requires good communication and informed risk management. Related Courses Creating a Computer Security Incident Response Team Managing Computer Security Incident Response Teams Fundamentals of Incident Handling Advanced Incident Handling for Technical Staff Listen on Apple Podcasts .
Apr 03, 2007•21 min
The Legal Side of Global Security
Business leaders, including legal counsel, need to understand how to tackle complex security issues for a global enterprise. Listen on Apple Podcasts .
Mar 20, 2007•26 min
A New Look at the Business of IT Education
System administrators increasingly need business savvy in addition to technical skills, and IT training courses must try to keep pace with this trend. Listen on Apple Podcasts .
Mar 06, 2007•18 min
Crisis Communications During a Security Incident
Business leaders need to be prepared to communicate with the media and their staff during high-profile security incident or crisis. Listen on Apple Podcasts .
Feb 20, 2007•14 min
Assuring Mission Success in Complex Environments
Analysis tools are needed for assessing complex organizational and technological issues that are well beyond traditional approaches. Related Courses Assessing Information Security Risk Using the OCTAVE Approach Listen on Apple Podcasts .
Feb 06, 2007•18 min
Privacy: The Slow Tipping Point
A trend toward more and more data disclosure, as seen in online social networks, may be causing users to become desensitized to privacy breaches in general. Listen on Apple Podcasts .
Jan 23, 2007•18 min
Building Staff Competence in Security
Practical specifications and guidelines now exist that define necessary knowledge, skills, and competencies for staff members in a range of security positions - from practitioners to managers. Listen on Apple Podcasts .
Jan 09, 2007•22 min
Evolving Business Models, Threats, and Technologies: A Conversation with CERT's Deputy Director for Technology
Business models are evolving. This has challenging implications as security threats become more covert and technologies facilitate information migration. Listen on Apple Podcasts .
Dec 26, 2006•22 min
Inside Defense-in-Depth
Defense-in-Depth is one path toward enterprise resilience - the ability to withstand threats and failures. The foundational aspects of compliance management and risk management serve as stepping-stones to and supports for other, more technical aspects. Related Course Managing Enterprise Information Security: A Practical Approach for Achieving Defense-in-Depth Listen on Apple Podcasts .
Dec 19, 2006•16 min
Protecting Against Insider Threat
The threat of attack from insiders is real and substantial. Insiders have a significant advantage over others who might want to harm an organization. Listen on Apple Podcasts .
Nov 28, 2006•27 min
Change Management: The Security 'X' Factor
In a recent survey of organizations' security posture, one factor separated high performers from the rest of the pack: change management. Listen on Apple Podcasts .
Nov 14, 2006•19 min
CERT Lessons Learned: A Conversation with Rich Pethia, Director of CERT
Learn more about the future of CERT and Rich Pethia's view of the Internet security landscape. Listen on Apple Podcasts .
Oct 31, 2006•24 min
Proactive Remedies for Rising Threats
Threats to information security are increasingly stealthy, but they are on the rise and must be mitigated through sound policy and strategy. Listen on Apple Podcasts .
Oct 17, 2006•20 min
The ROI of Security
ROI is a useful tool because it enables comparison among investments in a consistent way. Listen on Apple Podcasts .
Oct 17, 2006•21 min
Compliance vs. Buy-in
Integrating security into standard business operating processes and procedures is more effective than treating security as a compliance exercise. Listen on Apple Podcasts .
Oct 17, 2006•9 min
Why Leaders Should Care About Security
Leaders need to be security conscious and to treat adequate security as a non-negotiable requirement of being in business. Listen on Apple Podcasts .
Oct 17, 2006•18 min
Hosted on Libsyn
For the best experience, listen in Metacast app for iOS or Android