Socializing Security

In this episode, Brian and Milou discuss the essentials of Managed Security Service Providers (MSSPs), including their role, selection criteria, contractual considerations, and ongoing management. They explore how MSSPs can enhance security maturity, ensure compliance, and the importance of clear communication and trust in these partnerships.
Chapters
00:00 Introduction and Weather Chat01:09 Defining MSSPs and MSPs02:21 The importance of 24/7 security monitoring03:43 Expertise and certifications for MSSPs05:21 Compliance considerations and security standards06:17 Enhancing security maturity with MSSPs07:15 Communication and incident response12:43 Contractual and legal considerations15:20 Setting expectations and SLAs20:30 Building a strong MSSP relationship22:34 Managing the ongoing partnership29:20 Reevaluating and offboarding MSSPs30:20 Final thoughts and advice

In this episode, Brian and Milou delve into the intricacies of conducting effective tabletop exercises for cybersecurity preparedness. They discuss how to structure these simulations, the purpose behind them, who should be involved, and how to ensure continuous improvement. The conversation offers practical insights for organizations aiming to enhance their incident response capabilities. Chapters 00:00 Introduction and episode overview 01:52 What is a tabletop exercise? 04:23 Defining the purpose and scope of the exercise 07:08 Frequency and timing best practices 09:11 Involving stakeholders and team roles 14:16 Post-exercise review and lessons learned 17:02 Realism and scenario authenticity 20:16 Levels of involvement for different roles 22:31 Compliance considerations and documentation 26:58 Long-term improvement and tracking 29:10 Final thoughts and best practices

In this episode, Brian and Milou explore the complexities of choosing the right domain name for your business or project. They discuss the importance of strategic selection, the impact of top-level domains, security considerations like typosquatting, and the legal and practical implications of domain management.
Chapters
00:00 Introduction to Domain Selection
03:08 Consequences of Choosing the Wrong Domain
06:04 Understanding Top-Level Domains (TLDs)
08:53 The Importance of Brand Representation
11:57 Negotiating Domain Prices
14:55 Security and Compliance Considerations
18:38 Dealing with Domain Theft and Squatting

In this episode, Brian and Milou explore the pervasive influence of AI on privacy, data security, and personal choice. They discuss how public information is used to train AI models, the importance of understanding data practices, and the legal and ethical considerations of AI in everyday life.Chapters 00:00 Introduction to AI in 2026 02:16 Public Information and AI Training 06:30 The Challenge of Privacy in Social Media 10:33 AI Tools: Choosing Wisely 15:06 Understanding AI in Professional Settings 23:07 Navigating AI in Third-Party Applications 29:57 The Default Opt-In: A Cautionary Tale

In this episode of Socializing Security, Brian and Milou reflect on their recent experiences, including the HERS and RSA conferences, and celebrate their 100th episode. They discuss the positive feedback from the HERS conference, the challenges faced at the RSA conference, and their plans for future content. The conversation emphasizes the importance of community, networking, and the joy of creating content together.
00:00 Welcome Back and Reflections on Recent Events
05:04 Insights from the HERS Conference
10:19 Reflections on the RSA Conference
15:32 Celebrating 100 Episodes and Future Plans

In this next episode in our occasional Security Foundations series, fractional CISO Steve Sims returns to discuss the importance of logging, monitoring, and effective detection strategies to enhance security posture and compliance. Learn how to tune logs, leverage AI, and build a mature security program.Previous Security Foundations series episodes:- Asset Management: 📹https://youtu.be/GdiVzP2mby0 🎧https://www.socializingsecurity.com/e/e012-security-foundations-champions-of-asset-management/- Vulnerability Management: 📹https://youtu.be/n0KVn89FUn0 🎧https://www.socializingsecurity.com/e/e063-security-foundations-plugging-holes-with-asset-managementSteve Sims on LinkedIn: https://www.linkedin.com/in/steve-sims-cissp/Chapters00:00 Introduction to Security Basics02:45 Understanding Logging and Its Importance05:30 Tuning Logs for Effective Monitoring12:33 Compliance and Logging: A Critical Connection14:34 Metrics for Success in Logging and Monitoring18:24 The Tools of the Log Digestion Trade24:21 The Role of Compliance With Logging and Security 28:33 The Markers of Logging and Monitoring Success32:32 The Role of AI in Log Analysis35:24 Setting Up a Security Program37:17 Conclusion38:36 Outro

This week, Brian explores cybersecurity through the analogy of a submarine, highlighting parallels in defense, compartmentalization, threat detection, and team coordination. This episode offers a unique perspective on cybersecurity strategies and the importance of teamwork and adaptability that most people should be able to understand.Chapters 00:00 Introduction to Cybersecurity and Submarines 04:29 The Importance of a Strong Exterior 07:49 Zero Trust and Compartmentalization 12:58 Stealth and Threat Detection 19:15 Teamwork and Adaptability in Cybersecurity 28:47 Conclusion and Feedback Request

Recorded live at RSAC 2026, this episode explores the importance of risk management, tabletop exercises, and incident response planning. Learn how to prepare your team for real-world scenarios and improve your organization's resilience through structured communication events.
Project Zero Trust: https://www.amazon.com/Project-Zero-Trust-Strategy-Aligning/dp/1119884845/ref=asc_df_1119884845 
Chapters00:00 Looking Ahead: Insights from RSA Conference00:37 Understanding Risk Management02:54 Scenario-based Planning05:21 The Frequency and Variability of Tabletop Exercises06:46 Planning for Cyber Attacks11:13 Team Communication Exercises16:55 Annual Exercises17:35 The Role of Non-Technical Teams in Incidents19:09 Creating Actionable Improvement Plans20:21 The Importance of In-person Table Top Exercises22:42 Personal Experiences with Tabletop Exercises24:28 Tabletop Exercises as Training26:36 Learnings From Project Zero Trust27:47 Planning for Future Security Tests28:50 Outro

Recorded live at the HERS Conference comes a panel discussion about Humans in Security. This panel features experts in data security, privacy, AI governance, and startup strategy discussing how to stay secure as a startup, the importance of community, decision-making, and the ongoing fight for privacy and security in the digital age.Tech Auntie's Podcast📹 https://www.youtube.com/@TechAuntiesPodcast/videos🎧 https://open.spotify.com/show/3EFJc29Ql18NwhRxerS7NSPanelistsMilou Lammers - https://www.linkedin.com/in/milou-lammers/Gina Rosenthal - https://www.linkedin.com/in/gminks/Marian Newsome - ​​https://www.linkedin.com/in/mariannewsome/Gene Holloway - https://www.linkedin.com/in/gene-holloway-ph-d-pmp-516803154Karen Lopez - https://www.linkedin.com/in/karen-lopez-195921b4Chapters00:00 Introduction to the Panelists05:24 Navigating Security as a Startup14:37 Challenges in Data Management and Compliance25:03 The Importance of Collaboration and Networking27:19 The Balancing Act of Entrepreneurship37:47 Looking Out for Mental Health and Community55:04 Privacy vs. Security in Today's World

Recorded live at the HERS Conference comes a panel discussion with Kameron Monet and Alexandra L. Mack about what it means to be a lawyer and content creator online. They discuss how each of them started posting, how their content has evolved, and how social media can create community, mentorship, and new professional opportunities.
The conversation also covers the risks of posting as a lawyer, including negative comments, political topics, professional boundaries, and the importance of making clear that educational content is not legal advice.
Chapters
00:00 Introduction to Non-Traditional Legal Careers03:00 The Evolution of Content Creation in Law05:52 Navigating Social Media as Lawyers08:51 The Impact of Personal Branding on Legal Professionals11:40 Challenges and Rewards of Being a Content Creator14:45 The Intersection of Law and Social Media17:39 Handling Feedback and Criticism Online26:10 Navigating Legal Content Creation Risks27:48 Building Community Through Social Media29:41 The Power of Representation in Law31:41 Content Creation: Balancing Expertise and Audience33:45 Authenticity in Content Creation35:32 The Evolution of Community Building41:46 The Role of Platforms in Community Engagement47:42 Personal Growth Through Content Creation