Never Miss An Episode | Subscribe Now
Home
Shows
ShopAboutWork With Us
Creative Mastermind
CyberCreatorCon2023
Never Miss An Episode | Subscribe Now

March 15, 2021

The Post-COVID Reckoning w/ Dr. Rebecca Wynn - SPECIAL EDITION

by Cyber Ranch

Listen Now

The Post-COVID Reckoning w/ Dr. Rebecca Wynn - SPECIAL EDITION

March 15, 2021 • Cyber Ranch

00:00:00

Show Notes

In this show, host Allan Alford interviews Dr. Rebecca Wynn about information security decisions made during COVID and what the 2021 "reckoning" might look like. Dr. Wynn is a well-recognized CISO and Chief Privacy Officer, who faced some large-scale challenges during 2020. Allan welcomes Dr. Wynn to the cyber ranch! The show starts with Allan asking Dr. Wynn to introduce herself and to tell the listeners a bit about her background. Dr. Wynn has received quite a lot of recognition in the field. Allan and Rebecca Wynn share a wealth of connections in the CISO community, and both have consulted with numerous companies over 2020. This positions them to be able to talk to the broad spectrum of COVID-related actions and reactions taken during 2020. Moving workers to home all over the world resulted in an increased attack surface and increased privacy concerns as well. Security quesionnaires were on the rise, as were deeper investigations into PCI, SOC2, etc. report. COVID, in other words, really emphasized the supply chain risk posture. Allan and Dr. Wynn discuss the challenges and variety of preparedness for Zero Trust architectures - VPN, VDI, cellular dongles, taking desktop computers home, etc. Allan and Dr. Wynn talk about supply chain risk, contracts, penalties, and other facets of post-COVID third-party risk. To close the podcast, Dr. Wynn shares that she loves information security because of great companies out there who are forward-looking and paying real attention to security. Key Takeaways: 1:18 - Dr. Wynn tells the audience about her information security background and recognitions. 2:43 - Dr. Wynn had to move 10,000 people to work-from-home for COVID. 4:31 - Dr. Wynn tells her clients to check the PCI, SOC2, etc. reports in detail for their supply chain. 5:37 - Allan points out that supply chain questionnaires were on the rise due to COVID. 6:45 - Dr. Wynn elaborates on Zero Trust architectures deployed during COVID and states that Zero Trust is not "one and done". 8:20 - Dr. Wynn encourages her clients to really dig into the risk associated with the supply chain. 9:12 - Allan points out that the Solarwinds breach was really a post-COVID phenomenon in terms of its impact and how folks responded. 10:40 - Allan shares that some companies were not ready for Zero Trust at all vs. those who were so well prepared. 12:49 - Dr. Wynn encourages auditors to go back and visit their 3rd-party risk. 14:34 - Dr. Wynn points and Allan talk about the strength and significance of contracts in the cultures of various companies. 16:50 - Dr. Wynn tells her clients to attach assessments to the contract and asks for transparency. 19:40 - Dr. Wynn encourages her clients to ask their supply chain about end-of-life and end-of-service posture for the technical estate. 23:05 - Allan advocates that vendors have honest conversations with their customers to be transparent about what new risks COVID onboarded. 25:08 - Dr. Wynn predicts that 2021 will be the reckoning for companies who took shortcuts during COVID. 25:42 - Dr. Wynn loves working for forward-looking companies and loves working for the greater good. 26:48 - In Information Security, Dr. Wynn predicts growth and evolution and hopes for a real investment. Links: Follow Allan Alford on LinkedIn and Twitter Learn more about Hacker Valley Studio and The Cyber Ranch Podcast Learn more about Dr. Rebecca Wynn on LinkedIn. Sponsored by our good friends at Axonius
Read more

Recent Episodes

View All

September 20, 2023

The Cybersecurity Efficacy Gap w/ AJ Grotto

by Cyber Ranch

Allan is joined by AJ Grotto: William J. Perry International Security Fellow and Founding Director of the Program on Geopolitics, Technology and Governance at Stanford University.  He also serves as the faculty lead for the cyber policy specializatio...

Listen Now
September 13, 2023

Cybersecurity Awareness Month CALL TO ACTION - The Podcast Trifecta!

by Cyber Ranch

Warning: Some naughty language in this show, but well placed naughty language! Challenge issued!!!! Allan has teamed up with TWO other podcasts to take on the insufferable marketing that floods the cybersecurity industry in the month of October! Who ...

Listen Now
September 7, 2023

Protecting Small Organizations w/ Georges Merchak

by Cyber Ranch

Nearly 43% of cyber-attacks are on small businesses. 82% of ransomware attacks were targeted at companies with less than 1000 employees. 61% of SMBs were the target of a Cyberattack in 2021. 37% of companies hit by ransomware had fewer than 100 emplo...

Listen Now
August 30, 2023

Nowhere to Hide w/ Chris Roberts

by Cyber Ranch

You know you're being watched, right? Imagine for some reason you needed to bury a treasure where nobody would ever find it.  In today's society, how could you even do that?  How can you get from Point A to Point B without being observed or tracked i...

Listen Now
August 23, 2023

Cybersecurity in Popular Culture w/ George Finney LIVE!

by Cyber Ranch

In this LIVE! show at Black Hat, Allan and his friend George Finney (recurring guest, CISO @ SMU, multi-times author and CEO of Well Aware Security) discuss cybersecurity in popular culture.  They talk about the impact on real-world cybersecurity pra...

Listen Now
August 16, 2023

Allan Interviews EVERYONE at Black Hat

by Cyber Ranch

Did you miss Black Hat this year?  Well you won't miss the great conversations that were had, as Allan captured so many good ones for this special Black Hat retrospective episode.   Did you get to attend Black Hat this year?  See if your experience w...

Listen Now
August 9, 2023

Allan is at Black Hat

by Cyber Ranch

A brief thank you to our listeners and a request for feedback on the show. We'll catch y'all next week!

Listen Now
August 2, 2023

The Open Source Security Foundation with Omkhar Arasaratnam

by Cyber Ranch

The OpenSSF is doing invaulable work for the cybersecurity community.  And their new managing director happens to be Omkhar Arasaratnam, whose appearance on the show a while back created one of our most popular episodes ever!  Omkhar is back to talk ...

Listen Now
July 26, 2023

Cloud Security Remediation w/ Tunde Oni-Daniel

by Cyber Ranch

Cloud security remediation can be a daunting task that impacts Dev, Sec and Ops teams all.  And it can be a huge, manual, pain in the...  You get the idea.  But there are techniques to navigate it and to overcome many of the common traps and hurdles....

Listen Now
July 19, 2023

Things We Believe But Cannot Prove w/ Drew Simonis

by Cyber Ranch

In this episode, Allan and Drew tackle and interesting subject that was suggested by Drew and that Allan posted for the LinkedIn community to gather around: things we believe in cybersecurity that we cannot prove. The LinkedIn conversation was phenom...

Listen Now