Episode 73 - Thinking Differently About Privacy

11/23/22 • 38 min

In this episode I sit down with Paul McManus about all things Privacy. Paul is a Senior Information Governance Analyst for Corewell Health Corporate. I have had the distinct pleasure of working with Paul on several different privacy related engagements over the years.

Talking Points:

What are some of the challenge you are seeing in privacy space right now?
- Integration
- Who watches the watcher?
As more and more things are outsourced, how do you this with digital assets?
Do people realize that data that may not be considered 'confidential' now may considered something different in a year or two?
How are privacy laws changing?
How is the GDPR different than the US laws?
Are what point do we 'globalized' healthcare privacy
- Ownership vs Rights
What are re-selling of de-identified data?
What about privacy with wearables and driving trackers?

We even had the pleasure of having a quick appearance from a special 'In-House' guest that knows a thing or two about Research Privacy, resident System Architect, Heather Bregg.

Talking Points:

What are some of the challenge you are seeing in privacy space right now?
- Integration
- Who watches the watcher?
As more and more things are outsourced, how do you this with digital assets?
Do people realize that data that may not be considered 'confidential' now may considered something different in a year or two?
How are privacy laws changing?
How is the GDPR different than the US laws?
Are what point do we 'globalized' healthcare privacy
- Ownership vs Rights
What are re-selling of de-identified data?
What about privacy with wearables and driving trackers?

We even had the pleasure of having a quick appearance from a special 'In-House' guest that knows a thing or two about Research Privacy, resident System Architect, Heather Bregg.

Previous Episode

Episode 72 - Human Factors in Cybersecurity

In this special episode I had the honor of MC'ing a Security Awareness Month online panel for Cadre Information Security and the topic was Human Factors in Cybersecurity. The panelists were Phil Swaim, Mike Davenport, Tim O'Connor and Mike Peterson. We not only had great discussions on how to build your Security Awareness Program but actions steps you can take right now to create 'Security Champions' in your organization.

Talking Points:

So how is a Security Awareness Program different from Security Awareness Training?
Why would an organization want a Security Awareness Program?
Do only larger organizations typically have Security Awareness Programs?
Why should Social Media exploits be covered in your program and ultimately your training?
What are some of the pitfalls organizations should try to avoid when implementing Security Awareness Programs and training?

Next Episode

Episode 74 - Let's Talk Advanced Email Security

In this episode I have a 1 on 1 conversation with the one and only Brian 'Schneebs' Schneble about Advanced Email Security. Brian is a Senior Enterprise Account Executive for Abnormal Security. Brian is not only an active member of the Michigan cybersecurity community but he has extensive knowledge of the automotive industry.

Talking Points:

In a break from the traditional talking points, for this episode we break down a real world use case where a company was hit by a very creative 'double whammy'. Both a compromised email account and a look-a-like domain were used in this attack.

Brian and I walk through what happened, how it could happen and how you can do things to avoid this in your company.

Compromised Email Accounts
How Malicious Actors 'Learn' Your Workflows
Look Alike Domains
Defensive Domains
DMARC

This was a highly informative episode and don't mind the state of security talk about the beginning. Listen/View the whole episode, as it will definitely be worth spending your time on!

Podcast Sponsor:

This episode is sponsored by Abnormal Security. Abnormal Security is an Email Security Solutions provider that is known for using Machine Learning to detect non-traditional email attacks. Parts of the proceeds from this sponsorship will be going towards a 2023 InfoSec scholarship at my alma matter Grand Rapids Community College.