Topics discussed:
- IOT security
- Information Security is a People Problem, not a process or technical problem, most often
- YOU are part of security!
- Usable Security
- Policy is Key
- Balanced, Reasonable, understandable
- Deployment method: Secure first!
- Security Certification: CISSP & Security+
- Security+ is an appetizer but may get the attention of a hiring manager
- Breaches discussed: Solarwinds & Cisco
- Tales from the FrontLine: FUD never works
Links mentioned in this episode:
- ZDnet on Solarwinds breach
- Krebs on Security - VMware flaw vector in Solarwinds breach
- Comic mentioned by Nathan
- Shodan
- Cisco Router Code Injection