Episodes

Monday Oct 25, 2021
NCF-276 What you need to know about NIST Privacy Framework
Monday Oct 25, 2021
Monday Oct 25, 2021
Today, Dylan Gilbert, Privacy Policy Advisor with the National Institute of Standards in Technology NIST, is our expert guest. Dylan, the Privacy Engineering program manager at NIST, from a Legal Backgroud, is tackling privacy on the federal level by creating a Privacy Framework. Hear the NIST perspective on the relationship between Privacy Risk and Cyber Security Risk Management. The Privacy Framework, designed to support workforce and business management, provides a context for organizations to implement privacy within programs or products. In addition, hear how to implement a Risk-Based Approach to assessing your business policies using quantitative analysis to determine where and how to address privacy. Privacy is a top social concern that many people are unsure how to handle. Our guest talks about how privacy is still unregulated in many areas, but that will change shortly. His advice is to become familiar with the NIST Privacy Framework and get ahead of what is assuredly coming in the future. If you are concerned about your privacy or how your organization handles privacy for data sets, you will want to listen to today's show.
Visit our sponsors:

Monday Oct 18, 2021
NCF-SR15 Convergence of Health care and Cybersecurity
Monday Oct 18, 2021
Monday Oct 18, 2021
Today's discussion with Rick McElroy of VMware Carbon Black turns to the cyber workforce's health as we prepare for the upcoming 5th Annual Converge2Xcelertate (#ConV2X). The Upcoming ConV2X Symposium on Nov 9-11, 2021, Focuses on Driving Telehealth and the Technology for securing our digital health records as we enter the new era where health providers provide online services. Rick, who will be delivering one of the key notes for the ConV2X, talks about another pressing issue in the cybersecurity industry: the burnout of our most talented resources. Hear as we discuss what some of the larger companies are doing to protect the workforce's health. You will not want to miss the ConV2X and this episode which previews what you can expect to hear.
Visit our sponsors:

Monday Oct 11, 2021
Monday Oct 11, 2021
Today's guest, Tim Weil, and host Christopher Gorog discuss looking at what is required and best practices for implementing cybersecurity standards. Looking at everything you need to protect, working from the ground up, provides well-structured management and document policy overlay aiding what you may already have in place. For example, under the ISO27701 standard, if your product is scalable to international markets, then you would have a way of giving a positive attestation to how you run your cyber-management ecosystem. The time to implement compliance certifications into your cyber ecosystem may be earlier than you think because of the benefits of organizational improvements and efficiency. Find out the benefits of implementing early compliance into your cyber ecosystem on this episode of New Cyber Frontier.
Interested in finding out more about implementing compliance certifications into your cyber ecosystem, or finding auditing consultations, visit SecurityFeeds - Cyber Resource Portal
Visit our sponsors:

Monday Oct 04, 2021
NCF-275 Incident handling and response for Fortune 100 Companies
Monday Oct 04, 2021
Monday Oct 04, 2021
Today's guest Harry Marshall is an expert in incident handling and gives some much-needed insight into the incident handling process in some of the most successful companies. Today, we hear what the attackers are after and how to prepare ahead of time, knowing that incidents will occur. In addition, it was interesting to listen to the most common attack points on some of the most recent attacks. Finally, this conversation is also great about describing where the cloud has introduced new challenges to the corporate threat environment. You will gain a lot of value from his experience on where other companies have failed and the common pain points of his experience with incident handling.
Visit our sponsors:

Monday Sep 27, 2021
NCF-274 Securing Next-Gen Renewable Energy Systems
Monday Sep 27, 2021
Monday Sep 27, 2021
In today's episode, guest Dr. Subhash Paluru and Host Shawn Murray talk about Dr. Paluru's extensive background working for the "Department of Energy" (D.o.E.) and the security of critical infrastructure devices. In addition, the two of them have an exciting dialogue about energy trading and how the department of energy overseas the security and other aspects of energy trading. Dr. Paluru has some great insight from his career at the D.o.E. where he was in charge of security for all the "Western Area Power Administration" (W.A.P.A.). The discussion has excellent insight into what is needed for the future of cybersecurity for the power grid as we move to renewable energy sources. This show has a little bit of everything from startup advice to understanding the mindset of policymakers at the D.o.E. and even future technology needs. We hope you enjoy this episode of New Cyber Frontier.
Visit our sponsors:

Tuesday Sep 21, 2021
NCF-273 Security Performance Management
Tuesday Sep 21, 2021
Tuesday Sep 21, 2021
Today's guest, Chad Boeckmann, and host Dr. Murray discuss the Evolution of Information security, lessons learned from previous technologies such as databases to network security, and how they can now be applied to the cloud. They Introduce the Notion of Security Performance Management, which looks at maturity and how risk is managed within an organization. Security Performance Management has the new goal to create and then maintain effectiveness. Today's guest introduces a new way of looking at security using MAPP Methodology, which he explains as looking at everything as a process, then designing a way to measure capability and effectiveness to perform and meet compliance and privacy regulations. If you are interested in something which may be a bit different for your organization, you will enjoy this conversation.
Chad Boeckmann has over 20 years of experience in data security, cyber risk, and regulatory compliance. A sample of his performed roles includes VP of Security Operations, Security Advisor to Executive Leadership, virtual CISO, Expert Witness in data breach cases, coach, mentor, manager, and marketer. In addition, he’s fostered innovation and leadership through the development of a global SaaS and cybersecurity performance management platform known as TrustMAPP. Today his role is building strategic relationships and supporting the leaders on the team to achieve their best performance. He’s thankful for the talent that’s joined the team over the previous decade and for those yet to come.
Visit his website at trustmapp.com or view the complimentary ransomware readiness assessment here: go.trustmapp.com/ransomware-assessment
Visit our sponsors:

Monday Sep 13, 2021
NCF-DC08 Cybersecurity Workforce Trends
Monday Sep 13, 2021
Monday Sep 13, 2021
Today's show hosts Chris Gorog and Martha Laughman talk workforce with the Executive Director at CAMI, "Cybersecurity Association of Maryland Inc." Executive Director, Tasha Cornish, brings a Cybersecurity Workforce update and some trends you won't want to miss. Learn how to break into a cybersecurity career and what skills will increase your chances of success. In this episode of New Cyber Frontier, there is something for everyone, from big employers to small businesses. You can connect with Maryland and Jobs by engaging with CAMI.
Visit our sponsors:

Tuesday Sep 07, 2021
NCF-272 Securing an Ageing Electric Grid layered with New IIoT
Tuesday Sep 07, 2021
Tuesday Sep 07, 2021
Our guests Samantha Janko and James Nelson work on research in Grid modernization and Distributed energy. Energy grids consist of modern technology placed on top of fifty-year-old distribution systems. How will information security and IIoT security be applied in this cobbled environment? Hear about disruptive technology for energy systems and how we will address the security of antiquated energy grids. One of the first things that need to change is the culture. Security for IIoT and Energy is more aptly related to business continuity. Our guest talks about several cutting-edge technology and techniques and how security can be built in from the ground up. However, we also hear the most significant issue to the grid's security is the application to the immense scale of the grid.
Visit our sponsors:

Monday Aug 30, 2021
NCF-271 Global Trends in Blockchain
Monday Aug 30, 2021
Monday Aug 30, 2021
Today's guest is the Director for Global Standards, Architecture, Conformity and Propagation at ConsenSys Health and Chair IEEE Global Standards Harmonization Effort. The blockchain sector is surrounded by a lot of interest in today's emerging technologies. However, its future is clouded with uncertainty, especially with many efforts discontinuing during the pandemic. John's opinion is that governments underestimate blockchain's importance, and they should be developing this technology instead of letting the public sector take the lead. You won't want to miss this episode as we get a rare glimpse from the top-down as we get a look from the perspective of the global standards body as to where this technology is heading next.
Visit our sponsors:

Monday Aug 23, 2021
NCF-270 An Integrated Future: Securing Exponential IIoT Growth
Monday Aug 23, 2021
Monday Aug 23, 2021
On today’s podcast, we have Al Ortiz, CEO, and Jim Lacey, COO of CSD Cyber who will be talking about the various aspects of endpoint security as it relates to IIoT and the various security measures that companies and governments have around keeping their data, infrastructure, and proprietary information. As the world moves toward a more integrated use of various applications and an exponentially growing hardware infrastructure, how will organizations consider incorporating these systems? Enjoy today’s show!
Visit our sponsors: