Harbor's Podcast: The Perfect Storm

In this monthly podcast for business executives and information security professionals, industry veterans Michael Markulec and Matthew Webster chat with guests about the latest cyber news, threats, and trends impacting small and medium businesses. Harbor’s proactive rather than reactive solutions help our clients develop the cybersecurity program necessary to take their organization to the next level. Harbor's innovative processes are based on industry-standard frameworks that are tailored to meet the needs of small and medium-sized businesses.

Michael talks with Laura Bell Main, an Application Security Specialist and the CEO of Safestack Academy. Safestack Academy works to educate software developers on how to incorporate security into their systems. In this episode, Michael and Laura discuss how often software teams should be testing their security and how implementing security can protect and benefit companies, individual employees, and clients. Laura also offers advice for companies wanting to keep their information secure with new technology emerging.

Michael meets with Mark Phander, the Risk Adviser at CBIZ Borden Perlman. They talk about the rise in cyber insurance coverage for businesses, how cyber insurance and cybersecurity practices have evolved at CBIZ, and how clients and businesses have reacted in recent years to cyber policy changes. Mark describes why Multi-Factor-Authentication (MFA) is essential nowadays and which types of devices and accounts should be protected through MFA. They also talk about protecting your Personal Identifying Information (PII) and the process and importance of educating yourself on safe cyber practices.

Matthew talks to Nicholas Blank, the CEO of NBConsult, and Chris Goosen, Technology Consultant and Microsoft MVP about Zero Trust. They discuss its guiding principles, including what to do if a vendor contacts your business regarding Zero Trust. They also talk about the importance of using complex passwords, enabling MFA for Cloud Services, and Privilege Account Management as a business.

Check out the related links below with topics discussed in this episode:

Zero Trust Guidance SMBs

Zero Trust Rapid Modernization Plan

Matthew meets with security expert Lisa Lorenzin, a former Field CTO-AMS at Zscaler. They discuss the evolution of the modern workplace over the last few years, especially with the increase in remote workers. They focus on a variety of topics in the history and current state of remote work, including cloud-based security services, secure web gateway and proxy, and firewall and remote access VPNs, to name a few. They also talk about the future of remote work with the help of new cybersecurity technology.

Matthew meets with Matt Hagovsky, the North American Sales Engineering VP for Cybereason. They discuss how Cybereason approaches endpoint attacks by distilling all alerts into one to help users map out their cyber vulnerabilities in a quicker and more useful way. They also talk about how detection endpoint response has advanced over the years and how cyber companies with different resources have adapted to these technologies. They mention the differences between MDR (Managed Detection & Response) and EDR (Endpoint Detection & Response) and how they could affect your choice of MSP (Market Service Provider).

Matthew has a discussion with Johnny Lieberman and Zack Miller of Worklyn Partners, an investing and operating company they co-founded. They discuss how they created the company and their plan for creating a one-stop-shop provider of cybersecurity services for mid-market and SMB customers. With Matthew, they detail the many different security solutions advertised in the market -- XDR (Extended Detection and Response), EDR (Endpoint Detection and Response), and MDR (Managed Detection and Response) – and comment on trends they are seeing in the M&A market, especially with private equity firms growing more interested in the space.

Matthew has a discussion with John Verry, the CISO and Solutions Director at Pivot Point Security, about a number of services that Pivot Point Security provides. Some of the services they mention include individual IoT device penetration tests, full organization vulnerability assessments, and ISO 27000 certification. John explains the positives of working with smaller businesses and the importance of meeting with a cybersecurity professional in order to be sure each organization is well-protected.