Topics discussed:

  • IOT security
  • Information Security is a People Problem, not a process or technical problem, most often
  • YOU are part of security!
  • Usable Security
    • Policy is Key
      • Balanced, Reasonable, understandable
  • Deployment method: Secure first!
  • Security Certification: CISSP & Security+
    • Security+ is an appetizer but may get the attention of a hiring manager
  • Breaches discussed: Solarwinds & Cisco
  • Tales from the FrontLine: FUD never works

Links mentioned in this episode:

  • ZDnet on Solarwinds breach
  • Krebs on Security - VMware flaw vector in Solarwinds breach
  • Comic mentioned by Nathan
  • Shodan
  • Cisco Router Code Injection