CERT Podcast

Becoming a CISO: Formal and Informal Requirements

In this podcast, Darrell Keeling, Vice President of Information Security and HIPAA Security...

• 2
• 0
• +1 año

Global Value Chain – An Expanded View of the ICT Supply Chain

In this podcast, Edna Conway, and John Haller, discuss the global value chain for organizations...

• 2
• 0
• +1 año

Intelligence Preparation for Operational Resilience

In this podcast, Douglas Gray, a member of the CERT Cyber Risk Management team, discusses how to...

• 2
• 0
• +1 año

Build Security In Maturity Model (BSIMM) – Practices from Seventy Eight Organizations

In this podcast, Gary McGraw, the Chief Technology Officer for Cigital, discusses the latest...

• 2
• 0
• +1 año

Structuring the Chief Information Security Officer Organization

In this podcast, Nader Mehravari and Julia Allen, members of the CERT Cyber Risk Management team,...

• 2
• 0
• +1 año

How Cyber Insurance Is Driving Risk and Technology Management

In this podcast, Chip Block, Vice President at Evolver, discusses the growth of the cyber...

• 1
• 0
• +1 año

How the University of Pittsburgh Is Using the NIST Cybersecurity Framework

In this podcast, Sean Sweeney, Information Security Officer (ISO) for the University of...

• 1
• 0
• +1 año

Capturing the Expertise of Cybersecurity Incident Handlers

In this podcast, Dr. Richard Young, a professor with CMU, and Sam Perl, a member of the CERT...

• 1
• 0
• +1 año

Supply Chain Risk Management: Managing Third Party and External Dependency Risk

In this podcast, Matt Butkovic and John Haller discuss approaches for more effectively managing...

• 1
• 0
• +1 año

A Workshop on Measuring What Matters

This podcast summarizes the inaugural Measuring What Matters Workshop conducted in November 2014,...

• 1
• 0
• +1 año

Cyber Insurance and Its Role in Mitigating Cybersecurity Risk

In this podcast, Jim Cebula and David White discuss cyber insurance and its potential role in...

• 1
• 0
• +1 año

A Taxonomy of Operational Risks for Cyber Security

In this webinar, James Cebula describes how to use a taxonomy to increase confidence that your...

• 1
• 0
• +1 año

Characterizing and Prioritizing Malicious Code

In this podcast, Jose Morales discusses how to prioritize malware samples, helping analysts to...

• 1
• 0
• +1 año

Comparing IT Risk Assessment and Analysis Methods

ES-C2M2 helps improve the operational resilience of the U.S. power grid.

• 1
• 0
• +1 año

The Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2)

ES-C2M2 helps improve the operational resilience of the U.S. power grid.

• 1
• 0
• +1 año

Raising the Bar - Mainstreaming CERT C Secure Coding Rules

CERT led the 7-year effort to publish an ISO/IEC technical specification containing 46 CERT-based...

• 1
• 0
• +1 año

Raising the Bar - Mainstreaming CERT C Secure Coding Rules

CERT led the 7-year effort to publish an ISO/IEC technical specification containing 46 CERT-based...

• 1
• 0
• +1 año

Using the Cyber Resilience Review to Help Critical Infrastructures Better Manage Operational Resilience

Participating in a CRR allows critical infrastructure owners and operators to compare their...

• 1
• 0
• +1 año

Using the Cyber Resilience Review to Help Critical Infrastructures Better Manage Operational Resilience

Participating in a CRR allows critical infrastructure owners and operators to compare their...

• 1
• 0
• +1 año

Why Use Maturity Models to Improve Cybersecurity - Key Concepts, Principles, and Definitions

Maturity models are providing measurable value in improving an organization's cybersecurity...

• 1
• 0
• +1 año