New York Information Security Meetup Podcast: Recent Episodes
New York Information Security Meetup
Growing up across Asia, Sid enjoyed a front row seat as the mobile phone transformed the entire planet. His dad worked for Nokia during the early 2000’s when it was one of the most valuable brands in the world, and was able to bring home a new phone for Sid to test each week. The increasing speed and impact of each innovation was enough to get him hooked, and naturally Sid pursued a career in the tech sector.
Sid’s experience has run the gamut from public to growth to early-stage, affording him a unique perspective on how brand leaders are built and sustained. He started on Wall Street at Barclays Capital, advising on tech, media and telecom companies, spending time on both the buy-side and sell-side of major deals, from mergers and takeovers to corporate debt and equity financings. He then worked as an investment professional at Symphony Technology Group, a Palo Alto-based private equity firm investing in software, technology-enabled and data analytics companies. Before arriving at Foundation Capital, Sid was an investor at Omidyar Technology Ventures where he invested in and counseled early-stage enterprise software companies.
At Foundation, Sid invests across the enterprise stack, from applications to infrastructure, but also helps to lead the firm’s focus on cybersecurity. He draws on his extensive network across senior customers, partners, operators and investors to help entrepreneurs build the next generation of leading enterprise software companies. Sid works closely with Foundation Capital portfolio companies Stacklet, Levo, Permiso, Anvilogic, and Fortanix. Past investments he has worked with include CloudKnox (acquired by Microsoft), Respond Software (acquired by FireEye), and MistNet (acquired by LogRhythm). Sid curates Foundation Capital’s IT + Security Dinner Series, a bimonthly gathering that brings together his network of over 200 Fortune 2,000 CTOs, CIOs and CISOs to meet with early-stage startups and share ideas on the evolving infrastructure landscape and opportunities for innovation.
Outside of work, Sid serves on the advisory board for Entrepreneurship at Cornell and the California Israel Chamber of Commerce, and serves as a board member of the Cornell Venture Capital Club, which he co-founded during college. Sid is also a co-founder and co-manager of CyberSeed, a forum where early-stage and aspiring founders can share the highs and lows of building cybersecurity startups.
Sid has a Bachelor’s (Honors) in Economics and Biological Sciences from Cornell University, where he graduated magna cum laude and Phi Beta Kappa.
Sid has lived and worked on both the East coast and the West coast of the United States, as well as India, Singapore and Indonesia. He loves traveling to new countries, enjoys good podcasts and is always open to recommendations for both.
This is part of a series of conversation with Snehal Antani, CEO and cofounder of Horizon3.ai We cover wide array of topics, company growth, cyber security and channel building.
Please join me for an unscripted conversation with Jason Rebholz, Chief Information Security Officer at Corvus Insurance Jason Rebholz is the Chief Information Security Officer at Corvus Insurance. He has over a decade of experience performing forensic investigations into sophisticated cyber attacks and helping organizations build secure and resilient environments. As Corvus’s CISO, Jason leverages his incident response, security, and infrastructure expertise to drive security strategy and reduce the risk of security threats internally and for Corvus's policyholders. Prior to joining Corvus Insurance, Jason held leadership roles at Mandiant, The Crypsis Group, Gigamon, and MOXFIVE.
computer security, industrial engineering, supply chain risk, banking regulation, large enterprises, third party risk, re-engineering, vendor, risk management, assurance, customer, Regulatory compliance, service provider, VRM, ESG, open banking, Financial technology
Christina is the CISO for Catalina the Marketing, with 20+ years experience leading technology and security teams in multiple industries. She developed the strategic direction and security program for 3 organizations. Christina has spent the last five years helping organizations exploit digital technologies in a secure manner.
Christina is passionate about helping people, cybersecurity, and the eventual delivery of a real life “Rosey the Robot.” Her hobbies include watching the Cincinnati Bengals and digging for seashells.
David Raviv interviews Randy Watkins:
Randy Watkins is the Chief Technology Officer (CTO) for CRITICALSTART and an emerging thought-leader in the security industry. As CTO, Randy is responsible for designing and executing the company’s strategic technology initiatives, which includes defining the strategy and direction of CRITICALSTART’s Managed Detection and Response (MDR) services delivered by the Zero-Trust Analytics Platform (ZTAP).
Previously, Randy served as CRITICALSTART’s Director of Security Architecture, where he set the strategy for emerging vendor technologies, created the Defendable Network reference architecture, and set product direction for the company’s internally-developed Security Orchestration Automation and Response platform. Watkins was employee number five when he joined CRITICALSTART in 2012.
Randy is a respected author and speaker on security trends and is well-versed in applying security technologies, in practical and meaningful ways, to improve risk management and security infrastructure for enterprise customers. He holds numerous security certifications in data analysis, data science, computer science, and leadership. Randy earned a bachelor’s degree in Information Systems Security and an associate degree in Computer Networking Systems, both from ITT Technical Institute.
In his free time, Randy continues to contribute to the security community through his consultancy to security product manufacturers to help them drive value to the customer through their solutions.
Bob Carver CISM, CISSP, M.S. began his security career working in the financial industry.
Later Bob started the first dedicated cybersecurity monitoring and incident response team for a Fortune 20 company. (first full-time employee hired)
Bob has been involved in cyber risk management, incident response, policy, threat intelligence and analytics. He has been a speaker, moderator and expert panel participant discussing many cybersecurity topics including Cybersecurity Risk Management, The Internet of Things and Insider Threats at conferences across North America, Europe and the UK.
Bob has given a keynote presentation twice at the IMF (International Monetary Fund) in Washington, D.C. to bank governors (US Federal Reserve equivalents) from around the world (190 countries.)
He was also on an expert panel for CES (Consumer Electronics Show) in Las Vegas discussing "Focusing on Security in Product Innovation" and was on an Advisory Board with MasterCard discussing current and future cyber threats.
He can be found on:
Twitter: @cybersecboardrm
LinkedIn: https://www.linkedin.com/in/bobcarver/ (Recognized by LinkedIn as one of the Top 5 Influencers in the World to follow in Cybersecurity.)
Onalytica Global Top 10 on Cybersecurity, Cyber Personas, Cyber Speakers and IoT.
European Risk Policy Institute Top 20 CyberRisk Communicators (EU Think Tank)
Additional global awards have come from the U.S., UK, EU and India.
Greg Scansy an educator, an entrepreneur and a practitioner bring his passion for the RED Team/Offensive side of cybersecurity.
• With his industry knowledge over the years. He discussed how to engage executives about the impact of cyber risk on the company.
• Greg enjoys assisting small companies to build cyber resiliency effectively and affordably without breaking the bank.
Sajan discussed some of the things CISOs are evaluating within the ever-changing landscape in cybersecurity.
• Security people have to be very good at evaluating the whole technology stack. Evaluating the code base. The infrastructure as a code, security as a code and many more.
• In addition to the importance of a good business continuity plan that proactively mitigates a wide range of risks such as natural disasters, pandemics, wars, etc.
• Important conservation of quantifying risks for cyber insurance and prioritizing the impact on the production environment.
In a cybersecurity breach in a business, Davis highlights on relying on your self confidence and being diplomatic. Not allowing the sense of the actual reality to cloud your judgement in working on a security case.
Steve Cobb highlighted that ransom should not be paid in a case of ransomware. He also highlighted the future implications of ransomware means end of business for some companies.
He discussed a huge market of Russian organization and Russian companies, whom never thought that they will need all the cybersecurity envelopes that are used in the West. When the dust settles Moty hope to analyse the cyber war between Ukraine and Russia. In addition to how they managed crisis management process.
This episode highlighted the process of incident responses in the event of a threat. Which Includes Identification, Containment, Analyzes, Eradication, Recovery and lesson learnt. Steve discussed a few applicable preventative approaches an organization can put in place to reduce threat actors from internal and external adversaries.
• Use role-based access control/Downstream information access
• Adopt secure development life-cycle
• Have a good business continuity plan in an event of a ransomware
• And most importantly learn lessons from a previous attack to build threat intelligence in your environment.
In recent times, with the digital transformation Era. Robert discussed the three pillars within the cybersecurity business ecosystem. These three pillars includes the buyers, the investors and then the entrepreneurs.
- For buyers: A way of looking out for good technologies in the market are tools that provides greater visibility, greater automation. Real-time detection, good governance, and a tool that can assist orchestrate the complexities of the environment by prioritization of data.
- For investors: A way for the venture capitalist in understanding the bane of the cybersecurity ecosystem from various industry veteran's CISO standpoint and getting into the market that solves the Must have for a certain industry
- For the entrepreneur: Most relationships are built on trust and most CISOs prefer a referral of technologies that have worked for their other colleagues in the industry. So build Connections, Build Relationships, Build Trust. By aligning themselves with respected conferences that have the right people at the right level.
Scott takes Cybersecurity prevention to another level with his passion for cybercrime prevention techniques. With his experience of being a retired FBI agent and interviewing about 1000 cyber criminals. Scott realized that ransomware victimization isn't solely about threat profiles. Big and small companies can be victims of ransomware regardless of their revenue generation. Set up strong passwords. Avoid reuse of the same passwords on multiple remote platforms. Always set up 2 Factor Authentication on all remote access because if you don't the bad guys are going to get into it.
An ounce of prevention is worth a pound of cure.
Bridging the gap between technology and legal. Alexandra talked about lawyers having both a technical understanding as well as an understanding of the legal regimes applicable in cybersecurity. Understanding the technology at a fundamental level is critical. Whether dealing with an incident response or dealing with the creation of proactive information security policies, acquisition and ingestion of threat intelligence. Alexandra ensures businesses have a good grasp of cyber liabilities and litigation within a business from a liability standpoint and technical standpoint.
Alex is an incident response instructor with about 20 years of experience in the cybersecurity space. With her tenacity and curiosity. Alex drifted from a Philosophy major to an incident responder. Her passion for incident response is contagious. She enjoys ensuring companies and businesses stay a step ahead of the ever-changing landscape in incident response. She loves to educate personnel about incident responding and spike interest in people interested in transitioning into the cybersecurity world regardless of their previous major. In addition to boosting confidence in team-member to fill up skill gaps and ensure business customer delivery consistency. If you are ready to fight the bad guys and a war against threat actors willing to hold business in ransom. Alex is the veteran you need to listen to.
Jay is an accomplished general management and marketing executive with exceptional analytical skills and expertise building global businesses. Team builder with experience in all aspects of marketing and product management including opportunity identification, value creation, messaging, pricing, packaging, demand generation, brand building, thought leadership, customer marketing, competitive analysis, and sales enablement.
Todd is an experienced CISO and cybersecurity executive skilled at designing, building, and operating transformational information security programs. Applies risk management principles to balance business objectives, compliance requirements and modern cyber threats. Establishes vision and strategy, then prioritizes and implements digital transformation and business plans emphasizing value to the company/client. Builds process-based systems and operations building dynamic teams. Tracks and evaluates new and emerging technologies for effect and efficient value. Defines and achieves budget goals while delivering measurable and efficient results. Delivers value and results to the CISO, CIO, Executive Committee and Board.
Snehal Antani is co-founder & CEO of Horizon3.ai, a cyber security startup focused on AI-enabled red teaming. Prior to starting Horizon3, Snehal served as CTO for the US Department of Defense, responsible for transforming the technology capabilities of the command to include cyber security, advanced R&D, AI, and data analytics. Snehal was formerly the CTO of Splunk, and before that, a CIO at GE Capital. Snehal started his career at IBM as a software engineer, where he earned 16 patents for his work in cloud, distributed computing, and large-scale data processing. Snehal earned in BS in Computer Science from Purdue, where as a freshman he watched Tom Brady play Drew Brees. He earned is MS in Computer Science from RPI, where he never attended an RPI football game.