Never Miss An Episode | Subscribe Now
Shows
ShopAboutWork With Us
Never Miss An Episode | Subscribe Now

March 15, 2021

The Post-COVID Reckoning w/ Dr. Rebecca Wynn - SPECIAL EDITION

by Cyber Ranch

Listen Now

test
The Post-COVID Reckoning w/ Dr. Rebecca Wynn - SPECIAL EDITION

March 15, 2021 • Cyber Ranch

00:00:00

Show Notes

In this show, host Allan Alford interviews Dr. Rebecca Wynn about information security decisions made during COVID and what the 2021 "reckoning" might look like. Dr. Wynn is a well-recognized CISO and Chief Privacy Officer, who faced some large-scale challenges during 2020. Allan welcomes Dr. Wynn to the cyber ranch! The show starts with Allan asking Dr. Wynn to introduce herself and to tell the listeners a bit about her background. Dr. Wynn has received quite a lot of recognition in the field. Allan and Rebecca Wynn share a wealth of connections in the CISO community, and both have consulted with numerous companies over 2020. This positions them to be able to talk to the broad spectrum of COVID-related actions and reactions taken during 2020. Moving workers to home all over the world resulted in an increased attack surface and increased privacy concerns as well. Security quesionnaires were on the rise, as were deeper investigations into PCI, SOC2, etc. report. COVID, in other words, really emphasized the supply chain risk posture. Allan and Dr. Wynn discuss the challenges and variety of preparedness for Zero Trust architectures - VPN, VDI, cellular dongles, taking desktop computers home, etc. Allan and Dr. Wynn talk about supply chain risk, contracts, penalties, and other facets of post-COVID third-party risk. To close the podcast, Dr. Wynn shares that she loves information security because of great companies out there who are forward-looking and paying real attention to security. Key Takeaways: 1:18 - Dr. Wynn tells the audience about her information security background and recognitions. 2:43 - Dr. Wynn had to move 10,000 people to work-from-home for COVID. 4:31 - Dr. Wynn tells her clients to check the PCI, SOC2, etc. reports in detail for their supply chain. 5:37 - Allan points out that supply chain questionnaires were on the rise due to COVID. 6:45 - Dr. Wynn elaborates on Zero Trust architectures deployed during COVID and states that Zero Trust is not "one and done". 8:20 - Dr. Wynn encourages her clients to really dig into the risk associated with the supply chain. 9:12 - Allan points out that the Solarwinds breach was really a post-COVID phenomenon in terms of its impact and how folks responded. 10:40 - Allan shares that some companies were not ready for Zero Trust at all vs. those who were so well prepared. 12:49 - Dr. Wynn encourages auditors to go back and visit their 3rd-party risk. 14:34 - Dr. Wynn points and Allan talk about the strength and significance of contracts in the cultures of various companies. 16:50 - Dr. Wynn tells her clients to attach assessments to the contract and asks for transparency. 19:40 - Dr. Wynn encourages her clients to ask their supply chain about end-of-life and end-of-service posture for the technical estate. 23:05 - Allan advocates that vendors have honest conversations with their customers to be transparent about what new risks COVID onboarded. 25:08 - Dr. Wynn predicts that 2021 will be the reckoning for companies who took shortcuts during COVID. 25:42 - Dr. Wynn loves working for forward-looking companies and loves working for the greater good. 26:48 - In Information Security, Dr. Wynn predicts growth and evolution and hopes for a real investment. Links: Follow Allan Alford on LinkedIn and Twitter Learn more about Hacker Valley Studio and The Cyber Ranch Podcast Learn more about Dr. Rebecca Wynn on LinkedIn. Sponsored by our good friends at Axonius
Read more

Recent Episodes

View All

May 31, 2023

1% Leadership with Andy Ellis

by Cyber Ranch

This week's show is exciting because Allan has been waiting for Andy's book on leadership to come out for quite some time.  The book is called “1% Leadership – Master The Small, Daily Improvements That Set Great Leaders Apart”, and it consists of 54 ...

Listen Now
May 24, 2023

Will LLM AI Close The Bad Guys’ Skills Gap? with Adrian Sanabria

by Cyber Ranch

This episode is a bit scary.  Adrian Sanabria, who on an earlier show busted many cybersecurity myths, is back again, this time analyzing the impact of Large Language Model Artificial Intelligence on a hypothesized skills gap on the bad guy side. Pre...

Listen Now
May 22, 2023

RSAC 2023 SPECIAL EDITION Campfire Chats - Part 1

by Cyber Ranch

This is Part 1 of an incredible series of interviews Allan conducted live at RSA 2023.  Guests include: Chris Kennedy, CISO @ Citadel Gary Hayslip, CISO @ Softbank Investment Advisers Michael Calderin, CISO @ YAGEO Group Reet  Kaur, CISO @ Portland C...

Listen Now
May 17, 2023

Two Founder CEOs with Merav Bahat and Mickey Bresman

by Cyber Ranch

Leadership skills, technical skills, cybersecurity skills, pluck, drive and determination are all on display as Allan interviews Merav Bahat, CEO @ Dazz and Mickey Bresman, CEO @ Semperis. Dazz has completed a Series A investment round.  Semperis a S...

Listen Now
May 10, 2023

Security Chaos Engineering with Kelly Shortridge

by Cyber Ranch

What is security chaos engineering?  You may remember Kelly Shortridge, our very first guest, who came on the show to talk about behavioral economics and cybersecurity.  Well Kelly is back to talk about her new book, "Security Chaos Engineering: Sust...

Listen Now
May 3, 2023

The 9-Layer Cybersecurity Program Cake with Bryan Liebert

by Cyber Ranch

Bryan Liebert is one smart cookie.  Who bakes cybersecurity cakes.  But seriously, Bryan has been a CISO, consultant, architect, and has served many other roles in cybersecurity.  His specialty is creating simple to digest (we could not help it, sorr...

Listen Now
April 26, 2023

Four Problems with Cybersecurity with Adrian Wright

by Cyber Ranch

Adrian Wright, "The Cynical CISO" of LinkedIn fame, joins Allan to discuss four areas where cybersecurity is perhaps getting it wrong: Cybersecurity viewed as a necessary evil, related to The Twilight Zone Ownership, Authority, Accountability: Invent...

Listen Now
April 24, 2023

The Cloud and the Big Bang of Data with Cecil Pineda and Gene Moore

by Cyber Ranch

Join us for a SPECIAL EDITON! episode of The Cyber Ranch Podcast LIVE! from CISO XC in Dallas-Fort Worth, Texas! The topic is data security: its challenges and how to overcome them. Joining Allan are Cecil Pineda of R1 ("Cecil the CISO") and Gene Moo...

Listen Now
April 19, 2023

The Blurring of Personal & Corporate Security with Leigh Honeywell

by Cyber Ranch

We always think of cybersecurity startups as companies who contribute to the tech stack in an organizational environment - usually the enterprise.  We also think of personal cybersecurity in terms of protecting Grandma or our kids from the bad guys. ...

Listen Now
April 12, 2023

Design Partnerships with Emily Heath

by Cyber Ranch

Emily Heath is a well-known and well-respected figure in cybersecurity.  She has been a CISO three times in a variety of industries, including software and a major airline.  She has been in law enforcement, is a partner at a VC firm, and serves on bo...

Listen Now