UNLIMITED

Building Staff Competence in Security

FromSoftware Engineering Institute (SEI) Podcast Series

Start listening View podcast show

UNLIMITED

Building Staff Competence in Security

FromSoftware Engineering Institute (SEI) Podcast Series

ratings:

Length:

22 minutes

Released:

Jan 9, 2007

Format:

Podcast episode

Description

Practical specifications and guidelines now exist that define necessary knowledge, skills, and competencies for staff members in a range of security positions - from practitioners to managers. Listen on Apple Podcasts.

Released:

Jan 9, 2007

Format:

Podcast episode

Titles in the series (100)

The SEI Podcast Series presents conversations in software engineering, cybersecurity, and future technologies.

Skip carousel

UNLIMITED
Compliance vs. Buy-in: In this podcast, Julia Allen explains why integrating security into standard business processes is more effective than treating security as a compliance task. by Software Engineering Institute (SEI) Podcast Series
9 min listen
UNLIMITED
Proactive Remedies for Rising Threats: In this podcast, participants discuss how threats to information security are increasingly stealthy and must be mitigated through sound policy and strategy. by Software Engineering Institute (SEI) Podcast Series
20 min listen
UNLIMITED
Getting Real About Security Governance: In this podcast, participants explain that enterprise security governance can be achieved by implementing a defined, repeatable process. by Software Engineering Institute (SEI) Podcast Series
19 min listen
UNLIMITED
Evolving Business Models, Threats, and Technologies: A Conversation with CERT's Deputy Director for Technology: In this podcast, participants discuss how business models are evolving as security threats become more covert and technology enables information migration. by Software Engineering Institute (SEI) Podcast Series
22 min listen
UNLIMITED
Privacy: The Slow Tipping Point: In this podcast, participants discuss a trend toward more data disclosure that may cause users to become desensitized to privacy breaches. by Software Engineering Institute (SEI) Podcast Series
18 min listen
UNLIMITED
Crisis Communications During a Security Incident: In this podcast, participants alert business leaders to be prepared to communicate with the media and their staff during high-profile security incidents. by Software Engineering Institute (SEI) Podcast Series
14 min listen
UNLIMITED
IT Infrastructure: Tips for Navigating Tough Spots: In this podcast, participants discuss how organizations may occasionally need to redefine their IT infrastructures and be ready to handle tricky situations. by Software Engineering Institute (SEI) Podcast Series
23 min listen
UNLIMITED
The Value of De-Identified Personal Data: In this podcast, participants discuss the complex legal compliance landscape and how de-identification can help organizations share data more securely. by Software Engineering Institute (SEI) Podcast Series
31 min listen
UNLIMITED
Why Leaders Should Care About Security: In this podcast, Julia Allen urges leaders to be security conscious and treat adequate security as a non-negotiable requirement of being in business. by Software Engineering Institute (SEI) Podcast Series
18 min listen
UNLIMITED
Protecting Against Insider Threat: In this podcast, Dawn Cappelli describes the real and substantial threat of attack from insiders. by Software Engineering Institute (SEI) Podcast Series
27 min listen
UNLIMITED
Change Management: The Security 'X' Factor: In this podcast, Gene Kim reports how a recent security survey found one factor that separated high performers from the rest of the pack: change management. by Software Engineering Institute (SEI) Podcast Series
19 min listen
UNLIMITED
CERT Lessons Learned: A Conversation with Rich Pethia, Director of CERT: In this podcast, Richard Pethia voices his view of the internet security landscape and the future of the CERT Division. by Software Engineering Institute (SEI) Podcast Series
24 min listen
UNLIMITED
Adapting to Changing Risk Environments: Operational Resilience: In this podcast, participants discuss how businesses leaders need to keep their critical processes and services up and running in the face of the unexpected. by Software Engineering Institute (SEI) Podcast Series
25 min listen
UNLIMITED
Using Standards to Build an Information Security Program: In this podcast, William Wilson explains how business leaders can use international standards to create a business- and risk-based information security program. by Software Engineering Institute (SEI) Podcast Series
28 min listen
UNLIMITED
Computer Forensics for Business Leaders: A Primer: In this podcast, participants discuss how computer forensics is often overlooked when planning an incident response strategy. by Software Engineering Institute (SEI) Podcast Series
17 min listen
UNLIMITED
Inside Defense-in-Depth: In this podcast, participants discuss defense-in-depth, a path toward enterprise resilience. by Software Engineering Institute (SEI) Podcast Series
16 min listen
UNLIMITED
The ROI of Security: In this podcast, Julia Allen explains how ROI is a useful tool because it enables comparison among investments in a consistent way. by Software Engineering Institute (SEI) Podcast Series
21 min listen
UNLIMITED
A New Look at the Business of IT Education: System administrators increasingly need business savvy in addition to technical skills, and IT training courses must try to keep pace with this trend. by Software Engineering Institute (SEI) Podcast Series
18 min listen
UNLIMITED
Tackling Security at the National Level: A Resource for Leaders: In this podcast, Clint Kreitner explains how information security costs can be reduced by enforcing standard configurations for widely deployed systems. by Software Engineering Institute (SEI) Podcast Series
22 min listen
UNLIMITED
Building Staff Competence in Security: In this podcast, Barbara Laswell describes specifications that define the knowledge, skills, and competencies required for a range of security positions. by Software Engineering Institute (SEI) Podcast Series
22 min listen
UNLIMITED
The Legal Side of Global Security: In this podcast, participants encourage business leaders, including legal counsel, to understand how to tackle complex security issues for a global enterprise. by Software Engineering Institute (SEI) Podcast Series
26 min listen
UNLIMITED
Real-World Security for Business Leaders: In this podcast, William Wilson advises business leaders to use international standards to create a business- and risk-based information security program. by Software Engineering Institute (SEI) Podcast Series
20 min listen
UNLIMITED
Convergence: Integrating Physical and IT Security: In this podcast, participants recommend deploying common solutions for physical and IT security as a cost-effective way to reduce risk and save money. by Software Engineering Institute (SEI) Podcast Series
29 min listen
UNLIMITED
Initiating a Security Metrics Program: Key Points to Consider by Software Engineering Institute (SEI) Podcast Series
12 min listen
UNLIMITED
The Real Secrets of Incident Management: In this podcast, participants explain that incident management is not just technical response, but a cross-enterprise effort. by Software Engineering Institute (SEI) Podcast Series
21 min listen
UNLIMITED
What Business Leaders Can Expect from Security Degree Programs: In this podcast, participants discuss whether information security degree programs meet the needs of business leaders seeking knowledgeable employees. by Software Engineering Institute (SEI) Podcast Series
19 min listen
UNLIMITED
Assuring Mission Success in Complex Environments: In this podcast, participants discuss analysis tools for assessing complex organizational and technological issues that are beyond traditional approaches. by Software Engineering Institute (SEI) Podcast Series
18 min listen
UNLIMITED
Business Resilience: A More Compelling Argument for Information Security: In this podcast, participants discuss how a business resilience argument can bridge the gap between information security officers and business leaders. by Software Engineering Institute (SEI) Podcast Series
25 min listen
UNLIMITED
The Path from Information Security Risk Assessment to Compliance: In this podcast, William Wilson explains how an information security risk assessment, performed with operational risk management, can contribute to compliance. by Software Engineering Institute (SEI) Podcast Series
26 min listen
UNLIMITED
The Human Side of Security Trade-Offs: In this podcast, participants explain that it's easy to think of security as a collection of technologies and tools, but that people are the real key. by Software Engineering Institute (SEI) Podcast Series
27 min listen

More Episodes from Software Engineering Institute (SEI) Podcast Series

Skip carousel

UNLIMITED
Securing Docker Containers: Techniques, Challenges, and Tools: Containerization allows developers to run individual software applications in an isolated, controlled, repeatable way. With the increasing prevalence of cloud computing environments, containers are providing more and more of their underlying... by Software Engineering Institute (SEI) Podcast Series
39 min listen
UNLIMITED
An Introduction to Software Cost Estimation: Software cost estimation is an important first step when beginning a project. It addresses important questions regarding budget, staffing, scheduling, and determining if the current environment will support the project. In this podcast from the... by Software Engineering Institute (SEI) Podcast Series
23 min listen
UNLIMITED
Cybersecurity Metrics: Protecting Data and Understanding Threats: One of the biggest challenges in collecting cybersecurity metrics is scoping down objectives and determining what kinds of data to gather. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Bill Nichols, who... by Software Engineering Institute (SEI) Podcast Series
27 min listen
UNLIMITED
3 Key Elements for Designing Secure Systems: To make secure software by design a reality, engineers must intentionally build security throughout the software development lifecycle. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Timothy A. Chick,... by Software Engineering Institute (SEI) Podcast Series
36 min listen
UNLIMITED
Using Role-Playing Scenarios to Identify Bias in LLMs: Harmful biases in large language models (LLMs) make AI less trustworthy and secure. Auditing for biases can help identify potential solutions and develop better guardrails to make AI safer. In this podcast from the Carnegie Mellon University Software... by Software Engineering Institute (SEI) Podcast Series
45 min listen
UNLIMITED
Best Practices and Lessons Learned in Standing Up an AISIRT: In the wake of widespread adoption of artificial intelligence (AI) in critical infrastructure, education, government, and national security entities, adversaries are working to disrupt these systems and attack AI-enabled assets. With nearly four ... by Software Engineering Institute (SEI) Podcast Series
38 min listen
UNLIMITED
3 API Security Risks (and How to Protect Against Them): The exposed and public nature of application programming interfaces (APIs) come with risks including the increased network attack surface. Zero trust principles are helpful for mitigating these risks and making APIs more secure. In this podcast from... by Software Engineering Institute (SEI) Podcast Series
19 min listen
UNLIMITED
Evaluating Large Language Models for Cybersecurity Tasks: Challenges and Best Practices: How can we effectively use large language models (LLMs) for cybersecurity tasks? In this Carnegie Mellon University Software Engineering Institute podcast, Jeff Gennari and Sam Perl discuss applications for LLMs in cybersecurity, potential challenges,... by Software Engineering Institute (SEI) Podcast Series
43 min listen
UNLIMITED
An Introduction to Capability-Based Planning: Capability-Based Planning (CBP) defines a framework that has an all-encompassing view of existing abilities and future needs for strategically deciding what is needed and how to effectively achieve it. Both business and government acquisition domains... by Software Engineering Institute (SEI) Podcast Series
34 min listen
UNLIMITED
Safeguarding Against Recent Vulnerabilities Related to Rust: What can the recently discovered vulnerabilities related to Rust tell us about the security of the language? In this podcast from the Carnegie Mellon University Software Engineering Institute, David Svoboda discusses two vulnerabilities, their... by Software Engineering Institute (SEI) Podcast Series
26 min listen
UNLIMITED
Developing a Global Network of Computer Security Incident Response Teams (CSIRTs): Cybersecurity risks aren’t just a national concern. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), the CERT division’s Tracy Bills, senior cybersecurity operations researcher and team lead, and James... by Software Engineering Institute (SEI) Podcast Series
31 min listen
UNLIMITED
Automated Repair of Static Analysis Alerts: Developers know that static analysis helps make code more secure. However, static analysis tools often produce a large number of false positives, hindering their usefulness. In this podcast from the Carnegie Mellon University Software Engineering... by Software Engineering Institute (SEI) Podcast Series
27 min listen
UNLIMITED
Cyber Career Pathways and Opportunities: Not all paths to cybersecurity careers look the same. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Randy Trzeciak, deputy director of cyber risk and resilience in the SEI’s CERT division, discusses his... by Software Engineering Institute (SEI) Podcast Series
31 min listen
UNLIMITED
Developing and Using a Software Bill of Materials Framework: With the increasing complexity of software systems, the use of third-party components has become a widespread practice. Cyber disruptions, such as SolarWinds and Log4j, demonstrate the harm that can occur when organizations fail to manage third-party... by Software Engineering Institute (SEI) Podcast Series
38 min listen
UNLIMITED
The Importance of Diversity in Software Engineering: Suzanne Miller: In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Suzanne Miller, a principal researcher in the SEI’s Software Solutions Division, discusses her career path, the value of mentorship, and the... by Software Engineering Institute (SEI) Podcast Series
29 min listen
UNLIMITED
The Importance of Divesity in Cybersecurity: Carol Ware: In this podcast from the Carnegie Mellon University Software Engineering Institute, Carol Ware, a senior cybersecurity engineer in the SEI’s CERT Division, discusses her career path, the value of mentorship, and the importance of diversity in... by Software Engineering Institute (SEI) Podcast Series
27 min listen
UNLIMITED
The Importance of Diversity in Artificial Intelligence: Violet Turri: Across the globe, women account for less than 30 percent of professionals in technical fields. That number drops to 22 percent in the field of Artificial Intelligence (AI). In this podcast from the Carnegie Mellon University Software Engineering... by Software Engineering Institute (SEI) Podcast Series
17 min listen
UNLIMITED
Using Large Language Models in the National Security Realm: At the request of the White House, the Office of the Director of National Intelligence (ODNI) began exploring use cases for large language models (LLMs) within the Intelligence Community (IC). As part of this effort, ODNI sponsored the Mayflower... by Software Engineering Institute (SEI) Podcast Series
35 min listen
UNLIMITED
Atypical Applications of Agile and DevSecOps Principles: Modern software engineering practices of and have provided a foundation for producing working software products faster and more reliably than ever before. Far too often, however, these practices do not address the non-software concerns of business... by Software Engineering Institute (SEI) Podcast Series
34 min listen
UNLIMITED
When Agile and Earned Value Management Collide: 7 Considerations for Successful Interaction: Increasingly in government acquisition of software-intensive systems, we are seeing programs using Agile development methodology and earned value management. While there are many benefits to using both Agile and EVM, there are important considerations... by Software Engineering Institute (SEI) Podcast Series
35 min listen
UNLIMITED
The Impact of Architecture on Cyber-Physical Systems Safety: As developers continue to build greater autonomy into (CPSs), such as unmanned aerial vehicles (UAVs) and automobiles, these systems aggregate data from an increasing number of sensors. However, more sensors not only create more data and... by Software Engineering Institute (SEI) Podcast Series
34 min listen
UNLIMITED
ChatGPT and the Evolution of Large Language Models: A Deep Dive into 4 Transformative Case Studies: To better understand the potential uses of large language models (LLMs) and their impact, a team of researchers at the Carnegie Mellon University Software Engineering Institute CERT Division conducted four in-depth case studies. The case studies span... by Software Engineering Institute (SEI) Podcast Series
46 min listen
UNLIMITED
The Cybersecurity of Quantum Computing: 6 Areas of Research: Research and development of quantum computers continues to grow at a rapid pace. The U.S. government alone spent more than $800 million on quantum information science research in 2022. Thomas Scanlon, who leads the data science group in the SEI CERT... by Software Engineering Institute (SEI) Podcast Series
23 min listen
UNLIMITED
User-Centric Metrics for Agile: Far too often software programs continue to collect metrics for no other reason than that is how it has always been done. This leads to situations where, for any given environment, a metrics program is defined by a list of metrics that must be... by Software Engineering Institute (SEI) Podcast Series
32 min listen
UNLIMITED
The Product Manager’s Evolving Role in Software and Systems Development: In working with software and systems teams developing tech products, Judy Hwang, a senior software engineer in the SEI CERT Division, observed that teams weren’t putting in enough time and effort into thoroughly assessing the product by talking to... by Software Engineering Institute (SEI) Podcast Series
24 min listen
UNLIMITED
Measuring the Trustworthiness of AI Systems: The ability of artificial intelligence (AI) to partner with the software engineer, doctor, or warfighter depends on whether these end users trust the AI system to partner effectively with them and deliver the outcome promised. To build appropriate... by Software Engineering Institute (SEI) Podcast Series
19 min listen
UNLIMITED
Actionable Data in the DevSecOps Pipeline: In this podcast from the Carnegie Mellon University Software Engineering Institute, Bill Nichols and Julie Cohen talk with Suzanne Miller about how automation within DevSecOps product-development pipelines provides new opportunities for program... by Software Engineering Institute (SEI) Podcast Series
32 min listen

Related podcast episodes

Skip carousel

UNLIMITED
How Resilient Is My Organization?: In this podcast, Richard Caralli explains how CERT-RMM can ensure that critical assets and services perform as expected in the face of stress and disruption. by Software Engineering Institute (SEI) Podcast Series
39 min listen
UNLIMITED
Integrated, Enterprise-Wide Risk Management: NIST 800-39 and CERT-RMM: In this podcast, participants explain why and how business leaders must address risk at the enterprise, business process, and system levels. by Software Engineering Institute (SEI) Podcast Series
28 min listen
UNLIMITED
Inside Defense-in-Depth: In this podcast, participants discuss defense-in-depth, a path toward enterprise resilience. by Software Engineering Institute (SEI) Podcast Series
16 min listen
UNLIMITED
How Chubb Fosters a Culture of Leadership by The Employee Safety Podcast
25 min listen
UNLIMITED
2324: Poll Everywhere - Cybersecurity Tips for the Remote Workplace: The shift to remote work has brought numerous changes to the professional landscape. Still, one often overlooked aspect is the need for robust security measures to protect employees and organizations. In this episode, we discuss the crucial topic of... by The Tech Talks Daily Podcast
18 min listen
UNLIMITED
Adapting to Changing Risk Environments: Operational Resilience: In this podcast, participants discuss how businesses leaders need to keep their critical processes and services up and running in the face of the unexpected. by Software Engineering Institute (SEI) Podcast Series
25 min listen
UNLIMITED
Safety Leadership for the Hybrid Workforce by The Employee Safety Podcast
23 min listen
UNLIMITED
172 - Adam Russell CISO: Next Generation Cloud Series - Oracle, From a Blocker to an Enabler by Heads Talk
45 min listen
UNLIMITED
Skills First: Redefining How We Work: Join Yael Shur, Alex, the AI co-host, and Ora Nussbaum, a program manager in Amdocs People leading transformation Projects in HR, as they dive into the paradigm shift towards Skills-Based Organizations. Gain valuable insights into the fundamentals ... by Your Career: Is it Choice or Chance?
11 min listen
UNLIMITED
How to Win over that Elusive Developer with Adhiran Thirmal: Are you struggling to get your developers on board with your security testing efforts? In this episode, we talk with Adhiran Thirmal all about how to win over that elusive developer. Discover the key to implementing a successful application security... by TestGuild Security Testing Podcast
32 min listen
UNLIMITED
Loyalty Point Leadership with Patrick Nelson by The Environmental Transformation Podcast
51 min listen
UNLIMITED
Managing Disruptive Events - CERT-RMM Experience Reports: In this podcast, the participants describe four experience reports that demonstrate how the CERT-RMM can be applied to manage operational risks. by Software Engineering Institute (SEI) Podcast Series
36 min listen
UNLIMITED
Not Technical? No Problem! Tech Secrets You Need To Know, Part 1: This podcast is the first of a series discussing some of the key tech concepts you need to be an effective software product manager, even if you aren’t technical. I briefly cover all the different types of skills and characteristics product managers ne... by The Secrets of Product Management Podcast by Nils Davis: tips for product managers, covering storytelling, go to market,innovation, resumes, job interviews, PRDs, working with developers, persuasion and influence
25 min listen
UNLIMITED
The CERT Software Assurance Framework: In this podcast, Carol Woody and Christopher Alberts introduce the prototype Software Assurance Framework, a collection of cybersecurity practices that programs can apply across the acquisition lifecycle and supply chain. by Software Engineering Institute (SEI) Podcast Series
19 min listen
UNLIMITED
Ep. 499 Tips and Tricks for Techs in the OBL with Lake Odom: IR technologists are a valuable part of the interventional team due to their technical expertise and hands-on contributions to patient and provider safety. Lake Odom, a seasoned IR tech with over 14 years of experience, sits down with host Dr. Ally Baheti to share his wisdom from his time in hospital-based and outpatient care settings. by BackTable Vascular & Interventional
38 min listen
UNLIMITED
Rethinking Risk Management: In this podcast, Christopher Alberts urges business leaders to adopt new approaches to addressing risks across the life cycle and supply chain. by Software Engineering Institute (SEI) Podcast Series
30 min listen
UNLIMITED
Purpose of the #Scrum Guide | ALEPH-GLOBAL SCRUM TEAM™ by ALEPH - GLOBAL SCRUM TEAM - Agile Coaching. Agile Training and Digital Marketing Certifications
4 min listen
UNLIMITED
Brad Nanna with IRISS by The Industrial Talk Podcast Network
11 min listen
UNLIMITED
Exploring the Benefits of Neurodiversity within Cybersecurity: Neurodiversity within cybersecurity offers many benefits but requires organizations and hiring managers to re-evaluate hiring practices and job descriptions typically structured for neurotypical applicants. Join ISACA's Director of Professional Pract... by ISACA Podcast
34 min listen
UNLIMITED
Building your security team & tool stack w/ Laura Bell Main #146: This episode features all things security with our guest, Laura Bell Main, CEO & Founder @ SafeStack. She shares valuable strategies for building your security team & tool stack. We cover why security is a human problem based on human motivations, prioritization conversations for assessing risks, considerations for early-stage security teams, how behavior change & decision making impact security, and considerations for companies in the “messy middle” phase. Laura also addresses communicating about security in terms of tech debt, recommendations for incorporating security monitoring tools, how to measure those tools’ ROI, and more. by The Engineering Leadership Podcast
48 min listen
UNLIMITED
DOP 277: Making Security Tooling Easy for Developers: #277: Developers are often caught in a challenging position. They are keen to write code, innovate, hack, and build new things. However, when security measures are perceived as long, difficult, and cumbersome tasks, these essential protocols tend to... by DevOps Paradox
45 min listen
UNLIMITED
Integrating Security in DevOps: In this podcast, Hasan Yasar discusses how Secure DevOps attempts to shift the paradigm for tough security problems from following rules to creatively determining solutions. by Software Engineering Institute (SEI) Podcast Series
29 min listen
UNLIMITED
#ScrumTeorie | #ALEPH-GLOBAL #SCRUM TEAM ™ by ALEPH - GLOBAL SCRUM TEAM - Agile Coaching. Agile Training and Digital Marketing Certifications
3 min listen
UNLIMITED
Junior Cyber People: All links and images for this episode can be found on CISO Series () There are so few jobs available for junior cybersecurity professionals. Are these cyber beginners not valued? Or are we as managers not creating the right roles for them to improve... by Defense in Depth
29 min listen
UNLIMITED
Cybersecurity Engineering & Software Assurance: Opportunities & Risks: Carol Woody discusses opportunities and risks in cybersecurity engineering, software assurance, and the resulting CERT Cybersecurity Engineering and Software Assurance Professional Certificate. by Software Engineering Institute (SEI) Podcast Series
9 min listen
UNLIMITED
Building a Skills-Based Organisation: Lessons from a 30-Year Journey (an Interview with Sandra Loughlin) by Digital HR Leaders with David Green
39 min listen
UNLIMITED
How Salesforce Safeguards Its Global Workforce by The Employee Safety Podcast
22 min listen
UNLIMITED
SREs must not be your SWAT Teams with Dana Harrison: SREs (Site Reliability Engineers) have varying roles across different organizations: From Codifying your Infrastructure, handling high priority incidents, automating resiliency, ensuring proper observability, defining SLOs or getting rid of alert... by PurePerformance
61 min listen
UNLIMITED
Erika Voss, Vice President, Engineering Platforms at Capital One Software: How to Break Into the Tech Industry With an Untraditional, Non-Technical Background by The Blind Ambition with Jack Kelly
55 min listen
UNLIMITED
U.S. Postal Inspection Service Use of the CERT Resilience Management Model: In this podcast, Greg Crabb explains how CERT-RMM can be used to establish and meet resilience requirements for a wide range of business objectives. by Software Engineering Institute (SEI) Podcast Series
24 min listen

Discover this podcast and so much more

Building Staff Competence in Security

Building Staff Competence in Security

Description

Titles in the series (100)

More Episodes from Software Engineering Institute (SEI) Podcast Series

Related podcast episodes