Podcast
Socializing Security
Hosted by Socializing Security · EN
A podcast that socializes security, compliance, and related topics to make them more approachable and understandable. Each week we’ll discuss a topic, usually with an expert in the area, with the goal of learning along with you. We’re here to socialize security!
31episodes
Episodes
Newest firstAll episodes
E106 - How security and AI interact
1w ago00:25:14Tap to summarizeIn this episode, Brian and Milou discuss the intersection of AI and security, exploring the innovations AI brings to the security space, the importance of defining permissions and guardrails, and the implications of AI in security tools. They also delve into the challenges of remediation and recovery processes with AI, the evolving threat landscape where attackers use AI, and the critical aspects of privacy and data minimization in AI applications. Chapters: 00:00 Introduction to AI and Security 08:58 Guardrails and Permissions in AI 13:54 AI in Security Tools 20:01 Remediation and Recovery with AI 24:05 AI as a Tool for Attackers 24:55 Privacy and Data Minimization in AI
Transcribe →E105 - Keeping Up with the Latest in Security and Compliance
2w ago00:28:23Tap to summarizeIn this episode, Brian and Milou discuss their daily routines for staying updated on cybersecurity and compliance, sharing their favorite podcasts, newsletters, social media sources, and in-person events. They explore a wide range of resources to help security professionals stay informed about the latest threats, trends, and industry developments. Links https://cisoseries.com/category/podcast/cyber-security-headlines/ https://darknetdiaries.com/ https://techfieldday.com/podcast/ https://krebsonsecurity.com/ https://cloud.google.com/blog/topics/threat-intelligence https://www.cisa.gov/ https://www.nist.gov/ https://www.himss.org/ https://blackhat.com/ https://www.rsaconference.com/ Chapters 0:00 Intro 1:43 Podcasts 9:16 Blogs and Newsletters 12:03 Vendors and Partners 15:07 Social Media 18:36 News Sites 21:18 Government, Industry, and Independent Groups 24:14 In Person Events 27:04 Wrap-up and Outro
Transcribe →E104 - Working with MSSPs
3w ago00:29:44Tap to summarizeIn this episode, Brian and Milou discuss the essentials of Managed Security Service Providers (MSSPs), including their role, selection criteria, contractual considerations, and ongoing management. They explore how MSSPs can enhance security maturity, ensure compliance, and the importance of clear communication and trust in these partnerships. Chapters 00:00 Introduction and Weather Chat 01:09 Defining MSSPs and MSPs 02:21 The importance of 24/7 security monitoring 03:43 Expertise and certifications for MSSPs 05:21 Compliance considerations and security standards 06:17 Enhancing security maturity with MSSPs 07:15 Communication and incident response 12:43 Contractual and legal considerations 15:20 Setting expectations and SLAs 20:30 Building a strong MSSP relationship 22:34 Managing the ongoing partnership 29:20 Reevaluating and offboarding MSSPs 30:20 Final thoughts and advice
Transcribe →E103 - Structuring Effective Tabletop Exercises
Jul 1400:32:27Tap to summarizeIn this episode, Brian and Milou delve into the intricacies of conducting effective tabletop exercises for cybersecurity preparedness. They discuss how to structure these simulations, the purpose behind them, who should be involved, and how to ensure continuous improvement. The conversation offers practical insights for organizations aiming to enhance their incident response capabilities. Chapters 00:00 Introduction and episode overview 01:52 What is a tabletop exercise? 04:23 Defining the purpose and scope of the exercise 07:08 Frequency and timing best practices 09:11 Involving stakeholders and team roles 14:16 Post-exercise review and lessons learned 17:02 Realism and scenario authenticity 20:16 Levels of involvement for different roles 22:31 Compliance considerations and documentation 26:58 Long-term improvement and tracking 29:10 Final thoughts and best practices
Transcribe →E102 - Choosing the Right Domain for Your and Your Business
Jul 800:26:51Tap to summarizeIn this episode, Brian and Milou explore the complexities of choosing the right domain name for your business or project. They discuss the importance of strategic selection, the impact of top-level domains, security considerations like typosquatting, and the legal and practical implications of domain management. Chapters 00:00 Introduction to Domain Selection 03:08 Consequences of Choosing the Wrong Domain 06:04 Understanding Top-Level Domains (TLDs) 08:53 The Importance of Brand Representation 11:57 Negotiating Domain Prices 14:55 Security and Compliance Considerations 18:38 Dealing with Domain Theft and Squatting
Transcribe →E101 - The Hidden Use of Your Data in AI
Jun 3000:31:46Tap to summarizeIn this episode, Brian and Milou explore the pervasive influence of AI on privacy, data security, and personal choice. They discuss how public information is used to train AI models, the importance of understanding data practices, and the legal and ethical considerations of AI in everyday life. Chapters 00:00 Introduction to AI in 2026 02:16 Public Information and AI Training 06:30 The Challenge of Privacy in Social Media 10:33 AI Tools: Choosing Wisely 15:06 Understanding AI in Professional Settings 23:07 Navigating AI in Third-Party Applications 29:57 The Default Opt-In: A Cautionary Tale
Transcribe →E100 - A Look Back
Jun 2300:21:18Tap to summarizeIn this episode of Socializing Security, Brian and Milou reflect on their recent experiences, including the HERS and RSA conferences, and celebrate their 100th episode. They discuss the positive feedback from the HERS conference, the challenges faced at the RSA conference, and their plans for future content. The conversation emphasizes the importance of community, networking, and the joy of creating content together. 00:00 Welcome Back and Reflections on Recent Events 05:04 Insights from the HERS Conference 10:19 Reflections on the RSA Conference 15:32 Celebrating 100 Episodes and Future Plans
Transcribe →E099 - Security Foundations - Logging and Monitoring
Jun 1600:39:08Tap to summarizeIn this next episode in our occasional Security Foundations series, fractional CISO Steve Sims returns to discuss the importance of logging, monitoring, and effective detection strategies to enhance security posture and compliance. Learn how to tune logs, leverage AI, and build a mature security program. Previous Security Foundations series episodes: - Asset Management: 📹https://youtu.be/GdiVzP2mby0 🎧https://www.socializingsecurity.com/e/e012-security-foundations-champions-of-asset-management/ - Vulnerability Management: 📹https://youtu.be/n0KVn89FUn0 🎧https://www.socializingsecurity.com/e/e063-security-foundations-plugging-holes-with-asset-management Steve Sims on LinkedIn: https://www.linkedin.com/in/steve-sims-cissp/ Chapters 00:00 Introduction to Security Basics 02:45 Understanding Logging and Its Importance 05:30 Tuning Logs for Effective Monitoring 12:33 Compliance and Logging: A Critical Connection 14:34 Metrics for Success in Logging and Monitoring 18:24 The Tools of the Log Digestion Trade 24:21 The Role of Compliance With Logging and Security 28:33 The Markers of Logging and Monitoring Success 32:32 The Role of AI in Log Analysis 35:24 Setting Up a Security Program 37:17 Conclusion 38:36 Outro
Transcribe →E098 - Brian Rants: Cybersecurity and Submarines
Jun 900:33:03Tap to summarizeThis week, Brian explores cybersecurity through the analogy of a submarine, highlighting parallels in defense, compartmentalization, threat detection, and team coordination. This episode offers a unique perspective on cybersecurity strategies and the importance of teamwork and adaptability that most people should be able to understand. Chapters 00:00 Introduction to Cybersecurity and Submarines 04:29 The Importance of a Strong Exterior 07:49 Zero Trust and Compartmentalization 12:58 Stealth and Threat Detection 19:15 Teamwork and Adaptability in Cybersecurity 28:47 Conclusion and Feedback Request
Transcribe →E097 - The Art of Tabletop Exercises
Jun 200:29:21Tap to summarizeRecorded live at RSAC 2026, this episode explores the importance of risk management, tabletop exercises, and incident response planning. Learn how to prepare your team for real-world scenarios and improve your organization's resilience through structured communication events. Project Zero Trust: https://www.amazon.com/Project-Zero-Trust-Strategy-Aligning/dp/1119884845/ref=asc_df_1119884845 Chapters 00:00 Looking Ahead: Insights from RSA Conference 00:37 Understanding Risk Management 02:54 Scenario-based Planning 05:21 The Frequency and Variability of Tabletop Exercises 06:46 Planning for Cyber Attacks 11:13 Team Communication Exercises 16:55 Annual Exercises 17:35 The Role of Non-Technical Teams in Incidents 19:09 Creating Actionable Improvement Plans 20:21 The Importance of In-person Table Top Exercises 22:42 Personal Experiences with Tabletop Exercises 24:28 Tabletop Exercises as Training 26:36 Learnings From Project Zero Trust 27:47 Planning for Future Security Tests 28:50 Outro
Transcribe →