Episodes

In this episode of Getting Defensive, hosts Jerry Bell and Andrew Kalat welcome Derek Held, a senior cloud security engineer, to discuss the challenges organizations face in cloud security. The conversation explores the transition from traditional IT environments to cloud-native architectures, emphasizing the importance of leveraging cloud capabilities, particularly in identity management. Derek shares insights on avoiding security pitfalls, drawing lessons from notable incidents like Capital On...

In this episode of the Getting Defensive podcast, hosts Jerry Bell and Andrew Kalat welcome cybersecurity educator Michael Taggart. They discuss Taggart’s journey into cybersecurity, the challenges of educating others in the field, and the importance of empathy and communication in security training. The conversation also touches on affordable training options, the role of security researchers in healthcare, and advice for aspiring cybersecurity professionals. Links: Taggart Institute: https:/...

In this episode, Jerry Bell and Andrew Kalat discuss the evolving landscape of cryptography with expert Sophie Schmeig. They explore her journey into cryptography, the implications of quantum computing on classical cryptography, and the importance of transitioning to post-quantum cryptography. Sophie shares insights on current cryptographic standards, the challenges posed by quantum threats, and the need for proactive measures in key management and encryption practices. The conversation emphasiz...

Summary In this episode of the Getting Defensive podcast, hosts Jerry Bell and Andrew Kalat welcome Martin Fisher, a seasoned CISO with over 20 years of experience in information security, particularly in the healthcare sector. Martin shares insights from his decade-long tenure at Northside Hospital Group, discussing the unique challenges of cybersecurity in healthcare, the importance of patient safety, and the need for effective incident response and business continuity planning. He emphasizes...

Summary In this episode of the Getting Defensive podcast, hosts Jerry Bell and Andy Kalat welcome Chris Dotson, a cloud security expert and author of ‘Practical Cloud Security’. The conversation covers a range of topics including the challenges of writing a book, common security mistakes in cloud environments, the importance of identity and access management, and the implications of the Capital One breach. They also discuss the future of non-human identities, the significance of passkeys, and t...

In this episode of the Getting Defensive podcast, hosts Jerry Bell and Andrew Kalat welcome IT security professional and digital human rights activist Rysiek. They discuss Rysiek’s experiences while working for the OCCRP during the release of the Panama Papers, the challenges faced by small organizations in cybersecurity, and the importance of multi-factor authentication. The conversation also covers the political aspects of security decisions, the development of the Resilient.is project aimed a...

In this episode of the Getting Defensive podcast, hosts Jerry Bell and Andrew Kalat engage with cybersecurity expert Dan Tentler, discussing the complexities of cybersecurity roles, the challenges of hiring qualified professionals, and the importance of learning from past breaches. Tentler emphasizes the need for accountability in security practices and the necessity of understanding the fundamentals of cybersecurity. The conversation also touches on the current state of the industry, the impact...

In this episode, we interview cybersecurity expert Dave Shackelford. We discuss the current state of the cybersecurity industry, the impact of ransomware, and the evolving landscape of cloud security. The conversationy touches on the challenges of burnout in the field, the changing nature of cybersecurity conferences, and the importance of understanding shared responsibility and fate models in cloud environments. Dave shares insights from his extensive experience, emphasizing the need for organi...

Andy and Jerry interview Joe Gray and discuss his entry into the work of social engineering and his experience in helping organizations build programs to resist social engineering attacks. For more information about Joe Gray, please visit his LinkedIn page here: https://www.linkedin.com/in/joegrayinfosec/

More about Andy Green: https://andygreen.phd/