A Sold-out and Successful CyberSalon ... For Ladies Only!

 

 



We couldn't have asked for a better start to 2017 at Lisa Bernard's SecuritySpeak!  At our first Dr. Robert L. Bernard Memorial Lecture, women from IT, financial services, and industry gathered to get their cyber-safety on - and they did!  With formal remarks followed by a workshop led by Ami Soifer, we dug into the science and systems behind hacking and then moved immediately to enhance our cyber-security as a practical matter.  Ami is the CEO of The TNS Group, a managed IT consulting firm based in Connecticut and serving firms in the Global 2000.  He is a world-class engineer of IT designs and considered by many to be one of the world's foremost secure application delivery experts.  Warm and personable, Ami engaged the group in his inimitable style from the get-go and then proceeded to bring the complexities of cyber-matters to practical levels.  We left the CyberSalon both feeling more secure as well as being more secure with regard to our online lives, devices and our and our clients' data.  Let this program be the first of many as Ami is prepared to bring his expertise to others in this forum.  At SecuritySpeak, we say that we "bring a human face to security matters."  Ami's CyberSalon... For Ladies Only has become the model for this mission. 

 

 

 

 

 

 



A CyberSalon - For Ladies Only, Wednesday, 11 January 2017, 3:00 - 5:00 p.m.

Ladies, its 2017 and time to get your cyber-safety on!  Join us for a CyberSalon with Ami Soifer, world-class engineer of IT designs and the CEO who bridges the cyber-security and hardware worlds.  This is a relaxed, “whine” and cheese, end-of-the-day event to provide a safe space for the questions you know you need to ask about passwords, servers and settings(oh my!) , but haven’t made the time to … until now:  

Wednesday, January 11, 2017

55 Greens Farms Road, Westport, CT  06880

5-minutes from Westport’s Saugatuck Metro North Station (shuttle-service available) and 5-minutes off I-95 Exit 17 or 18 with free parking on-site

3:15 p.m.  Charge-up your devices and wind-down with wine and cheese

3:30 p.m.  Insights, Guidance and Remarks by Ami Soifer

4:00 p.m. – 5:00 p.m.  Q&A and workshop-style exchange

$36 a lady.  Completed registration required by Monday, 1/9/17, as seating is limited.

Hit reply or email LisaBernard@SecuritySpeak.net to start your registration.  We need to know what’s on your mind and about your mobile phones, tablets and other devices.

Sign-up with a colleague, mom, sister, daughter or pal!  And remember:  Share - or be square!

#CyberSalonCT        #ForLadiesOnlyCT

October is National Cyber Security Awareness Month and Robert Bigman, Former CISO of the United States CIA - under whose watch the Agency was never hacked – shares his thoughts with Lisa Bernard

 

I arrived in Arlington, Virginia, at News Channel 8 Studios to meet Robert "Bob" Bigman before he went on the air as Francis Rose’s guest on Government Matters. From the get-go, I sensed the “quiet celebrity” he enjoys among those in-the-know in Washington, D.C. He is the man who served for thirty years at the Central Intelligence Agency – most of the latter years as Chief Information Security Officer (CISO).  Simply put, he kept the CIA’s data secure.  Now, at a time when most Americans – private citizens and public officials – feel the threat or pain of being hacked, Bob's insights seem particularly pertinent and his achievements especially notable.  I was delighted that this down-to-earth professional – who for so long was under the radar – was graciously coming into the spotlight to share his sense of this with us.  What he conveyed was as inspiring as it was stirring.  His cheerful manner and serene demeanor bespoke a guarded “could-be-done” attitude about recovering the upper hand in the cyber security challenges we face – “guarded” being the operative word.  My takeaway was that we Americans can combat these threats provided 1) our resolve comes with calm, candor and clarity about the nature of the technologies and the humans who engage them and 2) that we have devoted leadership at the organizational and national levels.

LISA BERNARD: On one thing all cyber-security experts agree: human behavior and psychology loom large as key factors.  We are a nation of e-consumers, wed to convenience and beginning to integrate into the job force a generation raised on the efficiency of their smart phones.  Bob, what will it take - new technology or a crisis - to shift the pendulum from user-myopia to individual vigilance? 

 

LISA BERNARD: We are electing ourselves a new Commander-in-Chief next month and although it is now common knowledge that the software we use is outdated - even in our nuclear missile systems -  we hear little about this from the candidates. Just how outdated is government software and why are antiquated systems still in use? 

 

LISA BERNARD: Many of my followers are CISOs themselves or CEOs who rely on them.  With the proliferation of mobile devices and the trend toward super-computing what advice can you give them?

 

 

LISA BERNARD:  If our next POTUS appointed you "Tsar of Cyber Security," with all the resources you would need to set our nation on a modern and safe course, what would be your first priority?

 

 

LISA BERNARD: Since leaving government service,  as a consultant,you have been moving the dial, persuading firms to move toward more managed and isolated networks.  In the private sector, where the internet is like oxygen, how are you doing this? 

 

ROBERT BIGMAN: The really bad news is that even if you wanted to stay disconnected, increasingly, technology and the evolution of your world will connect you.  The marketplace has already determined that you're going to stay connected to the internet.  So what can you do?  Start with your biggest risk - which is how you and your devices - computers, mobile devices, smart phones - how they actually connect to the internet. Know that to ameliorate this risk, you just can't simply any longer rely on commercial capabilities like firewalls, modems and router protection and control lists.  There's a collection of simple things you can do. First, I recommend that you NOT use commercial applications like Windows or Adobe. Instead use alternative operating systems like Ubuntu and Opera as a browser. 

 

 

LISA BERNARD: What products are now available to make this "shift" possible and attractive in a culture that is hyper-connected?

 

ROBERT BIGMAN: There are probably very few products that I would recommend where you can say that if you buy this product that you can secure your data completely and your don’t have to worry any more.  In fact, there are no products like that despite what vendors will tell you.  What I find is the biggest problem is that organizations simply don’t understand the risks to their systems, their networks, and their data and they too often – as a result of attending the RSA conference, the Black Hat conference, the DefCon conference – they too often fall into the trap of using technology to solve very complex problems that require people issues, process issues, policy issues and yes, some technology issues.  But trying to address them with just technology is the number one mistake.  And I know the vendors don’t want you to hear that message, but the fact is that unless you have a cyber-security program and that you have as the component parts of governance, IT management, public policies and processes, no matter how much technology you buy, you’ll still get beat.  And every event, every incident I’ve been involved where we’ve investigated – unauthorized access, penetration, hacking, unauthorized use of data – all involve the process and policy issues violations as ever as they involve misuse or improper technology.

###

 

Bob Bigman is available for briefings, talks and workshops via Lisa Bernard's SecuritySpeak, LLC. See his bio at www.SecuritySpeak.net.  To discuss the particulars of hosting him, phone (203) 293-4741 or email LisaBernard@SecuritySpeak.net.

 

 

 

 

 

Get Smart: Learn your Cyber Risk in Under an Hour

 

Do you run a small to mid-sized firm, non-profit or department not yet as focused on cyber security as you need to be?  You’re not alone.  And, help is available.  I’ve been sharing with clients word of the impressive Confidential Cyber Risk Assessment (CCRA) being offered by Marc Groz ‘s firm Right Risk, LLC, and realized how many of my readers here might benefit from exploring this as well.  Marc is an authority on risk and financial markets, with a special focus on cyber and systemic risks.  He brings a unique experience profile to Right Risk, having served in senior risk, technology, and research roles for well-known hedge funds and a multi-billion-dollar asset manager.  I welcomed Marc to my interview seat to get a better sense of Right Risk’s cyber risk assessment for managers like you.  The following are excerpts from our talk. 

BERNARD:  Welcome back to Security Briefs, Marc.  In your promotional material you mention “the experts” at Right Risk involved in your CCRA offer.  Who are these experts and what do they deliver specifically?

 

BERNARD:   You have a powerful team at Right Risk and this is a sophisticated assessment, Marc.   Practically speaking, how does it work?  It sounds like a team of cyber-warriors will descend on the office in Ghost-busters gear and start frantically scanning all the computers and tablets.  Please clarify this for us. 

 

BERNARD:  If my readers want to take advantage of this offer, how do they get started?

 

BERNARD:  Thank you, Marc.  I know you’re speaking today on cybersecurity in salon format at LaunchTalk  so I especially appreciate your time. 

To learn more about Marc Groz and his availability for briefings and presentations see his biographical profile at www.SecuritySpeak.net or email LisaBernard@SecuritySpeak.net.

Why the Worry about Wi-Fi?

As a communications coach, when I attend presentations I watch the audience as much as I watch and listen to the speaker.  When I attended Ami Soifer’s, Getting Your Head in the Clouds, Comfortably and Carefully, presented to a packed room of attorneys, I gleaned that he was one to watch.  Educated at Boston University as an Electrical Engineer and co-founder and CEO of a pioneering IT firm, Ami has a knack for translating cyber-matters into terms that non-techie professionals can appreciate and comprehend.  I welcomed him to my interview chair last Friday and we discussed what is worrying my followers about public Wi-Fi.  What follows are his responses to the most “frequently asked questions” I hear from sole-proprietors, business-owners, and practitioners, especially those in 2-25 person firms whose staff and employees communicate largely on mobile phones and devices. 

Lisa Bernard:  I travel a lot for business and don’t know if airport Wi-Fi and hotel Wi-Fi are secure.   Should I be concerned?



Lisa Bernard:  Is there a difference between using my mobile phone and using my tablet in terms of secure communications?   Is one more secure than the other? 

Lisa Bernard:  What is a VPN? 

 

 

Lisa Bernard:  If I email from my office with secure Wi-Fi to someone using public Wi-Fi – say at an internet café - does that compromise my communication and data?



Lisa Bernard:  Ami, thank you.  Your office is buzzing here - even late on a Friday afternoon - and your generosity with your time, commitment to education on cyber-matters, and insight are appreciated by my followers and me. 



To host Ami Soifer for a briefing, dinner presentation or address on CyberSense at your firm, school or association see Ami's bio at  www.SecuritySpeak.net and email me LisaBernard@SecuritySpeak.net.  I am happy to talk with you about the particulars and make it meaningful for your audience.