

Secure Talk Podcast
Justin Beals
Secure Talk reviews the latest threats, tips, and trends on security, innovation, and compliance.
Host Justin Beals interviews leading privacy, security and technology executives to discuss best practices related to IT security, data protection and compliance. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.
Host Justin Beals interviews leading privacy, security and technology executives to discuss best practices related to IT security, data protection and compliance. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.
Episodes
Mentioned books

Oct 27, 2022 • 44min
Security Awareness Training with Javvad Malik at KnowBe4
Javvad Malik is the Lead Security Awareness Advocate at KnowBe4, a provider of security awareness training. Javvad talks about how to select a cyber security and security training partner and shares some best practices to deploying effective training programs.
KnowBe4
www.knowbe4.com/

Oct 24, 2022 • 50min
Cybersecurity In and Out of the U.S. Military, with Stephen Semmelroth
Stephen Semmelroth is the Sr. Director of Security at Avant Communications. He's a graduate of West Point, and a former U.S. Army infantry officer who served in Afghanistan. Stephen also has experience leading cyber teams in the U.S. Army.
After retiring from the Army Stephen founded and then sold a cyber recruiting company. He has led multiple cybersecurity practices and continues to lead clients through disaster and change at Avant Communications.
In this episode of the Secure Talk Podcast, Stephen talks about cybersecurity in the military, how he transitioned from a platoon leader to a cyber security leader, and provides some great advice for members of the U.S. military that would like pursue a career in cybersecurity after separating from the military.
Avant Communications
https://goavant.net/
Hiring Our Heroes
https://www.hiringourheroes.org/
DOD Skillbridge
https://skillbridge.osd.mil/

Oct 19, 2022 • 46min
Modern Security Best Practices with George Gerchow, Chief Security Officer at Sumo Logic
As Sumo Logic’s Chief Security Officer, George Gerchow brings over 20 years of information technology and systems management expertise to the application of IT processes and disciplines. His background includes the security, compliance, and cloud computing disciplines and years of practical experience in building agile security and compliance teams, and modern day Security Operation Centers.
In this episode of Secure Talk, George talks about the importance of physical security, strategies for securing hybrid IT operations, trends with DevSecOps, best practices for identifying security talent, how security certifications can be used as a sales asset, SIEMs, logs, and more.
www.sumologic.com

Oct 17, 2022 • 47min
Security Certifications as Sales Assets, with Justin Beals, CEO of Strike Graph
Justin Beals is the CEO and Co-Founder of Strike Graph, a platform that helps companies achieve security certifications that can be used as sales assets.
Strike Graph’s flexible platform helps customers create a scalable security and compliance program that builds trust at every stage of growth and helps organizations to become certified quickly and easily with SOC 2, ISO 27001, HIPAA, and PCI DSS compliance.
https://www.strikegraph.com/

Oct 13, 2022 • 43min
The Importance of a Comprehensive Network Asset Inventory with Huxley Barbee
Huxley Barbee is the Security Evangelist at runZero.
Huxley explains the importance of running a comprehensive network asset inventory and compares various methods for doing so. He also provides some great tips for new CISOs and for home cyber protection.
https://www.runzero.com/

Oct 10, 2022 • 46min
Blockchain Bridges and More with Collin O'Brien of Rubic
Collin O'Brien is the Marketing Manager at Rubic, a leading cross-chain swap service that allows users to swap assets between major blockchains in one click and with low gas fees. Collin talks about whether a single chain or a multi-cross-chain crypto technology will dominate in the future, and the current state of affairs with blockchains and crypto.
https://rubic.exchange/

Oct 3, 2022 • 43min
API Security with Karl Mattson CISO at Noname Security
Karl Mattson is the CISO at Noname Security, a graduate of the FBI CISO Academy, and a CISSP. Karl explains the importance of API security and how the design of the code, and the configuration and management of API all affect API security.
Noname Security
https://nonamesecurity.com/
Noname Security's 4-Hour API Workshop
https://nonamesecurity.com/workshop
Secure Talk Podcast
https://securetalkpodcast.com/

Sep 8, 2022 • 40min
Cybersecurity Focused Hardware Destruction, with John Shegerian
John Shegerian is the CEO and Co-Founder of ERI, a leading electronic waste recycler. John is the author of The Insecurity of Everything and has been featured on CNBC, BBC, News, Time, Fortune, and several other leading media outlets.
John explains the ins and outs of cybersecurity-focused hardware destruction and electronic waste recycling and shares best practices for device deposal for both businesses and consumers. He also talks about how companies insure that their private or personal data cannot be accessed after device disposal.
As a special “thank you” to the Secure Talk Podcast listeners, John is offering a free copy of his book, The Insecurity of Everything: How Hardware Data Security is Becoming the Most Important Topic in the World. In order to receive a free copy of John’s book, please follow this link and fill out the details of where you would like the book sent: https://eridirect.com/insecurity-of-everything-book/
ERI
https://eridirect.com/

Sep 6, 2022 • 44min
Creating a Security Oriented Culture, with Kai Roer
Kai Roer is the chief research officer for KnowBe4, a security awareness and simulated phishing platform. Kai helps organizations assess their current culture and to develop the desired end state for security and awareness. He created the Security Culture Framework (SCF), is the author of Build a Security Culture and co-author of the The Security Culture Playbook: An Executive Guide to Reducing Risk and Developing Your Human Defense Layer.
Kai talks about the role of security and culture assessments, simulated phishing campaigns, how to spot phishing emails, and best practices for security awareness training.
https://www.knowbe4.com/
https://www.securityculturebook.com/
Secure Talk Podcast
www.securetalkpodcast.com
https://securetalkpodcast.com/creating-a-security-oriented-culture-with-kai-roer/

Aug 26, 2022 • 40min
Cloud Security Governance with Fausto Lendeborg, CEO of Secberus
Fausto Lendeborg, Co-Founder & CEO of Secberus, explains cloud security governance and how Secberus secures cloud infrastructure and helps prevent cloud risk. He also introduces concepts such as the shared responsibility model, and Policy as Code, and explains the importance of scaling across multi-cloud environments, and time to remediation.
Fausto talks about the amazing ecosystem for startups in Miami, his early interest in computers and hacking, how he got started in network security, how he landed his first job at a cyber security startup, and why he founded Secberus.
www.secberus.com


