This episode is a story about an entire vendor encounter gone horribly wrong.  Allan is joined by Paul Moreno, VP of InfoSec at Catawii, formerly SVP of Cybersecurity at Adyen, investor and advisor.  Paul found a cybersecurity vendor.  Paul found good references.  Paul got referrals from peers.  Paul did a PoC.  And after that, it all went downhill.  Paul was kind enough to share his story as he and Allan pick apart the failings and deliberate on ways we can all avoid such encounters.

Topics covered are:

- How to spot lies

- Vetting the vendor's internal security landscape

- ISO 27001 Statement of Applicability

- Breaches and whistleblowing

- GDPR violations in charging to delete data

It is a story you will want to hear, and the analysis just might save you some pain down the road...

Sponsored by Allan Alford Consulting https://allanalford.com/about