BoC #24: Ransomware is the Largest Security Awareness Exercise Ever w/ John Bambenek
John Bambenek is the President of Bambenek Labs, a security agency focused on providing cyber services in forensics, incident response, and managed services. John's spoken at conferences like ISC, BlackHat, SANS, and a number of other well known conferences. Additionally, he's huge contributor to the info sec community. During our conversation we explore how he's focused on communication, persuation, education as key skills for a security professional. Given John is a prolific speaker, he's well versed in articulating cybersecurity to a non-technical audiences. He boils it down to the 3 things any business will care about: Making money, spending less money, or mitigating risk. Additionally, we discussed how he viewed security's role as: Enabling risk based decision making CISO's becoming focused on how can they get business decisions made securely The long term implications of technical advancements (AI, ML, etc.) for security