Developing a Global Network of Computer Security Incident Response Teams (CSIRTs)

Cyber Career Pathways and Opportunities: Not all paths to cybersecurity careers look the same. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Randy Trzeciak, deputy director of cyber risk and resilience in the SEI’s CERT division, discusses his... by Software Engineering Institute (SEI) Podcast Series

31 min listen

Asking the Right Questions to Coordinate Security in the Supply Chain: In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Dr. Carol Woody, a principal researcher in the SEI's CERT Division, talks with Suzanne Miller about the SEI’s newly released Acquisition Security Framework,... by Software Engineering Institute (SEI) Podcast Series

31 min listen

Secure by Design, Secure by Default: In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI) Gregory J. Touhill, director of the SEI CERT Division, talks with Suzanne Miller about secure by design, secure by default, a longstanding tenet of the work... by Software Engineering Institute (SEI) Podcast Series

54 min listen

Don C. Weber: The Gray Area Between OT and IT by The PrOTect OT Cybersecurity Podcast

56 min listen

How to Avoid Common Cybersecurity Vulnerabilities by The Security Podcasts

13 min listen

A Dive into Deepfakes: In this podcast from the Carnegie Mellon University Software Engineering Institute, Shannon Gallagher, a data scientist with SEI’s CERT Division, and Dominic Ross, multimedia team lead for the SEI, discuss deepfakes, their exponential growth in... by Software Engineering Institute (SEI) Podcast Series

32 min listen

Achieving Continuous Authority to Operate (ATO): Authority to Operate (ATO) is a process that certifies a system to operate for a certain period of time by evaluating the risk of the system's security controls. ATO is based on the National Institute of Standards and Technology’s Risk Management... by Software Engineering Institute (SEI) Podcast Series

33 min listen

ML-Driven Decision Making in Realistic Cyber Exercises: In this podcast from the Carnegie Mellon University Software Engineering Institute, Thomas Podnar and Dustin Updyke, both senior cybersecurity engineers with the SEI’s CERT Division, discuss their work to apply machine learning to increase the... by Software Engineering Institute (SEI) Podcast Series

49 min listen

1798: Dr. Chase Cunningham, CSO of Ericom Software: Cyber-Security Expert and Best-Selling Author, Dr. Chase Cunningham, Launches His New Book, C:>_gAbrIel by The Tech Talks Daily Podcast

16 min listen

Key Steps to Integrate Secure by Design into Acquisition and Development: Secure by design means performing more security and assurance activities earlier in the product and system lifecycles. A secure-by-design mindset addresses the security of systems during the requirements, design, and development phases of lifecycles... by Software Engineering Institute (SEI) Podcast Series

49 min listen

Applying Best Practices in Network Traffic Analysis: In today's operational climate, threats and attacks against network infrastructures have become far too common. Researchers in the SEI’s CERT Division work with organizations and large enterprises, many of whom analyze their network traffic data for... by Software Engineering Institute (SEI) Podcast Series

22 min listen

Secure Programming with Jean Yang: Security vulnerabilities are an important concern in systems. When we specify that we want certain information hidden for example our phone number or our date of birth, we expect the system to hide the information. However, this doesn’t always happen due to human error in the code because programmers have to write checks and filters across the program. In this episode Jean Yang, Assistant professor at the Computer Science Department in Carnegie Mellon, presents Jeeves, a language that allows programmers to specify security policies more intuitively making it harder to leak information that is meant to be protected. Jean explained how Jeeves was implemented and how it can be used. We also talked about what it takes to bring research concepts from academia to the industry. Jean was also named one of the 35 innovators under 35 by MIT Technology Review. by The Women in Tech Show: A Technical Podcast

20 min listen

Walking Fast Into the Future: Evolvable Technical Reference Frameworks for Mixed-Criticality Systems: In this SEI Podcast, Nickolas Guertin, a senior systems engineer with the SEI’s Software Solutions Division, and Douglas Schmidt, associate provost of research at Vanderbilt University and former chief technical officer at the SEI, discuss... by Software Engineering Institute (SEI) Podcast Series

40 min listen

Digital Transformation Breaks Risk Management - Chris Morales - BSW #323: CEOs and boards struggle with their digital transformation process. Does their operations hinder or align with business initiatives? Has their security operations scaled to meet the data and digital demands to protect against business risk? In... by Security Weekly Podcast Network (Video)

37 min listen

Off The Shelf Data Governance With Satori: An interview about how the Satori data governance and access control platform is architected and how it helps you manage compliance with data privacy regulations. by Data Engineering Podcast

34 min listen

Implementing the DoD's Ethical AI Principles: In this podcast from the Carnegie Mellon University Software Engineering Institute, Carol Smith, a senior research scientist in Human Machine Interaction, and Alexandrea Van Deusen, an assistant design researcher, both with the SEI’s AI Division,... by Software Engineering Institute (SEI) Podcast Series

23 min listen

Managing Developer Velocity and System Security with DevSecOps: In aiming for correctness and security of product, as well as for development speed, software development teams often face tension in their objectives. During a recent customer engagement that involved the development of a continuous-integration (CI)... by Software Engineering Institute (SEI) Podcast Series

33 min listen

10 At-Risk Emerging Technologies: Researchers in the SEI's CERT Division recently examined the security of a large swath of technology domains being developed in industry and maturing over the next five years. by Software Engineering Institute (SEI) Podcast Series

17 min listen

Security Modeling Tools: In this podcast, Julien Delange discusses security modeling tools that his team developed and how to use them to capture vulnerabilities and their propagation path in an architecture. by Software Engineering Institute (SEI) Podcast Series

24 min listen

Daniel Riedel – Founder/CEO – NewContext: New Context specializes in data security for the world’s highest regulated industries. Founder & CEO Daniel Riedel discusses how New Context tests an organization’s security processes and can build solutions for… by Finding Genius Podcast

21 min listen

Leafminer research, data breaches, credential stuffing, and IoT security fails by Symantec Cyber Security Brief Podcast

28 min listen

DevOps Cybersecurity 101 with Jason Mar-Tang: In this episode, we are privileged to have a profound conversation on actionable DevOps with a security twist. Our esteemed guest is seasoned security expert Jay Mar-Tang, whose extensive experience and personal journey from a phishing victim to a... by TestGuild Devops Toolchain Podcast

32 min listen

Mapping Unsolvable Problems to Unattainable Solutions: All links and images for this episode can be found on CISO Series ( We're busting out the Cyber Defense Matrix to see what our security program we'll never be able to achieve. This episode is hosted by me, (), producer of CISO Series and... by CISO Series Podcast

35 min listen

A Taxonomy of Operational Risks for Cyber Security: In this podcast, James Cebula describes how to use a taxonomy to increase confidence that your organization is identifying cyber security risks. by Software Engineering Institute (SEI) Podcast Series

33 min listen

At Risk Emerging Technology Domains: In this podcast, CERT vulnerability analyst Dan Klinedinst discusses research aimed at helping the Department of Homeland Security United States Computer Emergency Readiness Team (US-CERT) understand future technologies and their risks. by Software Engineering Institute (SEI) Podcast Series

11 min listen

Joe McManus, Automox - Enterprise Security Weekly #98: Joe McManus is an expert and industry advisor in the field of information security. He currently serves as the CISO of Automox, provider of cloud-based, cross-platform patching software. He is also a senior researcher at CERT, part of the Software... by Enterprise Security Weekly (Video)

32 min listen

Joe McManus, Automox - Enterprise Security Weekly #98: Joe McManus is an expert and industry advisor in the field of information security. He currently serves as the CISO of Automox, provider of cloud-based, cross-platform patching software. He is also a senior researcher at CERT, part of the Software... by Security Weekly Podcast Network (Video)

32 min listen

Zero Trust Adoption: Benefits, Applications, and Resources: Zero trust adoption is a security initiative that an enterprise must understand, interpret, and implement. Enterprise security initiatives are never simple, and their goal to improve cybersecurity posture requires the alignment of multiple... by Software Engineering Institute (SEI) Podcast Series

30 min listen

Designing Security Into Software-Reliant Systems: In this podcast, CERT researcher Christopher Alberts introduces the SERA Framework, a systematic approach for analyzing complex security risks in software-reliant systems and systems of systems early in the lifecycle. by Software Engineering Institute (SEI) Podcast Series

12 min listen

Incorporating Supply-Chain Risk and DevSecOps into a Cybersecurity Strategy: Organizations are turning to DevSecOps to produce code faster and at lower cost, but the reality is that much of the code is actually coming from the software supply chain through code libraries, open source, and third-party components where reuse is... by Software Engineering Institute (SEI) Podcast Series

32 min listen

Discover this podcast and so much more

Developing a Global Network of Computer Security Incident Response Teams (CSIRTs)

Description

Titles in the series (100)

More Episodes from Software Engineering Institute (SEI) Podcast Series

Related podcast episodes