Podcasts about Cyber insurance

  • 527PODCASTS
  • 1,330EPISODES
  • 34mAVG DURATION
  • 1WEEKLY EPISODE
  • Jun 2, 2026LATEST

POPULARITY

20192020202120222023202420252026

Categories



Best podcasts about Cyber insurance

Show all podcasts related to cyber insurance

Latest podcast episodes about Cyber insurance

Investor Fuel Real Estate Investing Mastermind - Audio Version
Real Estate Is the #1 Target for Wire Fraud: Joe Erle on Cyber Insurance & Protecting Transactions

Investor Fuel Real Estate Investing Mastermind - Audio Version

Play Episode Listen Later Jun 2, 2026 20:49


In this episode, Joe Erle from C3 Risk & Insurance Services discusses the growing threat of cyber fraud in real estate transactions and the importance of having the right cyber insurance protection. He shares insights on wire transfer fraud, phishing scams, AI-driven cyber threats, and practical strategies businesses can implement to reduce risk and protect high-value transactions.   Professional Real Estate Investors - How we can help you: Investor Fuel Mastermind:  Learn more about the Investor Fuel Mastermind, including 100% deal financing, massive discounts from vendors and sponsors you're already using, our world class community of over 150 members, and SO much more here: http://www.investorfuel.com/apply   Investor Machine Marketing Partnership:  Are you looking for consistent, high quality lead generation? Investor Machine is America's #1 lead generation service professional investors. Investor Machine provides true 'white glove' support to help you build the perfect marketing plan, then we'll execute it for you…talking and working together on an ongoing basis to help you hit YOUR goals! Learn more here: http://www.investormachine.com   Coaching with Mike Hambright:  Interested in 1 on 1 coaching with Mike Hambright? Mike coaches entrepreneurs looking to level up, build coaching or service based businesses (Mike runs multiple 7 and 8 figure a year businesses), building a coaching program and more. Learn more here: https://investorfuel.com/coachingwithmike   Attend a Vacation/Mastermind Retreat with Mike Hambright: Interested in joining a "mini-mastermind" with Mike and his private clients on an upcoming "Retreat", either at locations like Cabo San Lucas, Napa, Park City ski trip, Yellowstone, or even at Mike's East Texas "Big H Ranch"? Learn more here: http://www.investorfuel.com/retreat   Property Insurance: Join the largest and most investor friendly property insurance provider in 2 minutes. Free to join, and insure all your flips and rentals within minutes! There is NO easier insurance provider on the planet (turn insurance on or off in 1 minute without talking to anyone!), and there's no 15-30% agent mark up through this platform!  Register here: https://myinvestorinsurance.com/   New Real Estate Investors - How we can work together: Investor Fuel Club (Coaching and Deal Partner Community): Looking to kickstart your real estate investing career? Join our one of a kind Coaching Community, Investor Fuel Club, where you'll get trained by some of the best real estate investors in America, and partner with them on deals! You don't need $ for deals…we'll partner with you and hold your hand along the way! Learn More here: http://www.investorfuel.com/club   —--------------------

ITSPmagazine | Technology. Cybersecurity. Society
The Vendor You Cannot Name | Lens Four by Sean Martin | Read by TAPE9

ITSPmagazine | Technology. Cybersecurity. Society

Play Episode Listen Later May 11, 2026 12:24


⬥EPISODE NOTES⬥ The most dangerous sentence in cybersecurity disclosure right now is "no evidence of unauthorized access to our network." It is technically true. It is also operationally hollow. The customer whose data is on a leak site does not care which network it left from. The plaintiff in Bexar County does not care. The regulator about to receive a federal incident report under a 72-hour clock that starts at suspicion, not confirmation, will not care. In April 2026, two U.S. banks disclosed an incident at the same unnamed third-party vendor. Six class action lawsuits followed in two weeks. The vendor still has not been publicly named. The plaintiffs sued the banks anyway. In a separate situation, an alleged Adobe breach surfaced through a threat actor's claims about a third-party business process outsourcing firm -- and as of the coverage reviewed for this analysis, no public confirmation or denial from Adobe had surfaced. This is the Common Point of Failure pattern, and it is arriving with enough frequency that it deserves to be named clearly.

Redefining CyberSecurity
The Vendor You Cannot Name | Lens Four by Sean Martin | Read by TAPE9

Redefining CyberSecurity

Play Episode Listen Later May 11, 2026 12:24


⬥EPISODE NOTES⬥ The most dangerous sentence in cybersecurity disclosure right now is "no evidence of unauthorized access to our network." It is technically true. It is also operationally hollow. The customer whose data is on a leak site does not care which network it left from. The plaintiff in Bexar County does not care. The regulator about to receive a federal incident report under a 72-hour clock that starts at suspicion, not confirmation, will not care. In April 2026, two U.S. banks disclosed an incident at the same unnamed third-party vendor. Six class action lawsuits followed in two weeks. The vendor still has not been publicly named. The plaintiffs sued the banks anyway. In a separate situation, an alleged Adobe breach surfaced through a threat actor's claims about a third-party business process outsourcing firm -- and as of the coverage reviewed for this analysis, no public confirmation or denial from Adobe had surfaced. This is the Common Point of Failure pattern, and it is arriving with enough frequency that it deserves to be named clearly.

Simply Solving Cyber
Cyber Insurance, Unfiltered

Simply Solving Cyber

Play Episode Listen Later Apr 28, 2026 28:42 Transcription Available


Send us Fan MailThe fastest way to turn a cyber incident into a business disaster isn't ransomware, it's confusion. We sit down with Violet Sullivan, AVP and Cyber Solutions Team Lead at Crum & Forster, who has worked across cyber law, breach notification, digital forensics and incident response, and now cyber insurance. That vantage point lets her translate what each group needs when pressure is high and everyone is speaking a different language.We get practical about the moments that create real-world chaos: overlapping roles like “breach coach,” acronyms that make leaders freeze, and the dangerous assumption that someone else already handled comms or law enforcement outreach. Violet breaks down a cleaner way to run the response by focusing on function: legal help, technical help, and operational help. We also talk about why crisis communications deserves a seat at the table early, how PR teams organize messaging by audience, and how to avoid the cleanup phase that happens when people speak too soon.Then we zoom out to the contract that quietly shapes the whole response: cyber insurance. Violet explains why insurance is not “admitting defeat,” but a risk transfer mechanism that can fund response vendors and influence decisions when you cannot afford mistakes. We also tackle emerging AI risks, including more believable social engineering and the legal concern that sharing privileged legal advice with AI tools may put attorney-client privilege at risk.If you want clearer incident response planning, better tabletop exercises, and fewer “who has the ball?” moments, hit play. Subscribe, share this with your security or legal team, and leave a review with the one part of your response plan you want to simplify next.

ChannelBuzz.ca
The Buzz: HPE expands channel software push, AvePoint highlights AI governance gap, and ESET tracks cyber insurance influence

ChannelBuzz.ca

Play Episode Listen Later Apr 23, 2026 3:07


Today’s headline news for Canadian IT solution providers: Hewlett Packard Enterprise expands software channel push: Hewlett Packard Enterprise is doubling its dedicated sales team to drive its Hybrid CloudOps software portfolio through the channel. According to CRN, Rocco Lavista, vice president and general manager of worldwide Hybrid CloudOps software sales at HPE, noted that rising global memory prices and the resulting hardware cost pressures are actively driving demand for virtualization alternatives like VM Essentials. For Canadian MSPs and VARs grappling with supply chain volatility and tightening server margins, the vendor’s expanded software push offers a potential pivot point to maintain profitability through higher-margin recurring revenue streams. AvePoint and Omdia research highlights AI governance gap: AvePoint and Omdia have released new global research indicating that governance and compliance, rather than technical capability, represent the primary barrier to AI monetization. Based on a survey of over 300 MSPs, 51 percent cited governance as the main obstacle to customer AI adoption. The report highlights a significant execution gap: while 94 percent of respondents are committed to AI readiness, only 43 percent report high maturity in their service delivery. As Canadian solution providers face increasing data sovereignty requirements, the research suggests that packaging AI governance as a standalone service is a viable path to capturing a share of a market Omdia projects will reach $276 billion by 2030. ESET tracks cyber insurance influence on the channel: Security vendor ESET has published its 2026 SMB Cyber Readiness Index, highlighting the growing influence of cyber insurance underwriters on the managed services landscape. The report found that 78 percent of Canadian small and medium-sized businesses now carry cyber insurance, with insurers increasingly mandating specific security controls. Among Canadian SMBs that outsource their security, 27 percent are now bypassing traditional providers to use a cyber insurer offering Managed Detection and Response (MDR) services. For the Canadian channel, the data underscores a critical shift: insurers are setting the baseline, and MSPs must integrate advanced monitoring capabilities to prevent clients from migrating to insurer-provided solutions. Read Full Transcript Welcome to The Buzz from ChannelBuzz.ca, I’m Robert Dutt, today is Thursday, April 23, 2026, and here’s what’s happening in the channel today. Hewlett Packard Enterprise is doubling its dedicated sales team to drive its Hybrid CloudOps software portfolio through the channel. According to Rocco Lavista, vice president and general manager of worldwide Hybrid CloudOps software sales at HPE, the vendor is actively working to accelerate partner attach rates for its software suite. Lavista recently noted that rising global memory prices and the resulting hardware cost pressures are actively driving demand for virtualization alternatives like VM Essentials. For Canadian MSPs and VARs grappling with supply chain volatility and tightening server margins, the vendor’s expanded software push offers a potential pivot point to maintain profitability through higher-margin recurring revenue streams. AvePoint and Omdia have released new global research indicating that governance and compliance, rather than technical capability, represent the primary barrier to AI monetization for managed service providers. Based on a survey of over three hundred MSPs, fifty-one percent cited governance as the main obstacle to customer AI adoption. The report highlights a significant execution gap: while ninety-four percent of respondents are committed to AI readiness, only forty-three percent report high maturity in their actual service delivery. As Canadian solution providers face increasing data sovereignty and privacy requirements, the research suggests that packaging AI governance as a distinct, standalone service may be the most viable path to capturing a share of a market Omdia projects will reach two hundred and seventy-six billion dollars by 2030. Security vendor ESET has published its 2026 SMB Cyber Readiness Index, highlighting the growing influence of cyber insurance underwriters on the managed services landscape. The report found that seventy-eight percent of Canadian small and medium-sized businesses now carry cyber insurance, with underwriters increasingly mandating specific security controls as a condition of coverage. Among Canadian SMBs that outsource their security, twenty-seven percent are now bypassing traditional providers to use a cyber insurer offering Managed Detection and Response services, while thirty-eight percent remain with a traditional MSP. For the Canadian channel, the data underscores a critical shift: insurers are actively setting the security baseline, and MSPs must integrate advanced monitoring capabilities to prevent clients from migrating to insurer-provided solutions. Later today on In The Channel, my conversation with Eric Arcese, vice president of global partner marketing at Dell Technologies, discussing the AI Factory, VxRail’s evolution, and what’s ahead. And if you haven’t heard it yet, be sure to check out yesterday’s chat with Rewst founder Aharon Chernin on building the automated MSP. That’s how we’re seeing the headlines today. I’m Robert Dutt for ChannelBuzz.ca, thanks for listening.

Chattinn Cyber
The Origins of Cyber Insurance with Pioneer Bob Parisi

Chattinn Cyber

Play Episode Listen Later Apr 21, 2026 52:38


Summary In this milestone 100th episode of Chattinn Cyber, Marc Schein sits down with one of the most influential figures in cyber insurance, Bob Parisi. Widely regarded as a pioneer in the space, Parisi reflects on the origins of cyber insurance, tracing its roots back to the late 1990s during the dot-com boom and the early recognition that traditional insurance products were not equipped to handle emerging digital risks. Parisi shares a candid look at how cyber insurance evolved from a niche product designed for tech companies into a critical component of enterprise risk management. From the early days of privacy breach notification laws to the growing realization that business interruption and operational dependency on technology represent the true magnitude of cyber risk, the conversation highlights the key inflection points that shaped today's market. The discussion also explores how the insurance industry has responded to ongoing complexity and volatility. From “silent cyber” to the challenges of aligning capacity across a fragmented marketplace, Parisi explains why cyber insurance still exhibits characteristics of an emerging market—even after decades of development. He emphasizes the importance of integrating cyber coverage with broader risk management strategies rather than treating it as a standalone solution. Looking ahead, Marc and Bob dive into some of the most pressing issues facing the industry today, including geopolitical risk, evolving privacy regulations, and the rapid rise of artificial intelligence. Parisi offers a grounded perspective, arguing that while AI introduces new complexities, it should ultimately be understood as another form of technology—one that must be managed thoughtfully rather than feared outright. Throughout the conversation, Parisi reinforces a consistent theme: the importance of balance. Whether discussing underwriting practices, organizational governance, or emerging technologies, he highlights the need for measured, informed decision-making. As cyber risk continues to evolve, this episode provides valuable insight into how organizations, insurers, and brokers can navigate uncertainty with clarity and discipline. 5 Key Takeaways Cyber insurance has deeper roots than most people realize. It began in the late 1990s and has evolved through multiple distinct phases—not just the post-2015 “boom” many reference. The real risk isn't privacy—it's operational dependency on technology. Business interruption and reliance on digital infrastructure are the true drivers of loss. Cyber should never be treated in isolation. It must be integrated with other lines of coverage and broader risk management strategies. The market still struggles with fragmentation and alignment. Despite abundant capacity, insurers often cannot align on large risks due to differing approaches and models. AI is not fundamentally different—it's just another technology. The real concern is not AI itself, but the speed at which it is being adopted. 5 Key Quotes “AI is technology. Plain and simple.” “We've been doing this for almost 30 years… I'm not sure at what point it gets called a mature market.” “The biggest problem has always been the dependence upon technology.” “If you're going to write cyber, do it with the appropriate policy, underwriting, pricing, and reserving.” “It's not the technology itself that concerns me—it's the speed of adoption.” About Our Guest Bob Parisi is a widely recognized leader in the cyber insurance industry and one of the pioneers behind the development of modern cyber insurance products. With a career spanning nearly three decades, he has played a key role in shaping how insurers underwrite and manage cyber risk, from the early days of the dot-com era to today's complex digital landscape. Currently serving in a senior underwriting role at Munich Re, Parisi is known for his deep expertise, practical perspective, and influence across the insurance and risk management community. Follow Our Guest LinkedIn About Our Host National co-chair of the Cyber Center for Excellence, Marc Schein, CIC,CLCS is also a Risk Management Consultant at Marsh McLennan Agency. He assists clients by customizing comprehensive commercial insurance programs that minimize the burden of financial loss through cost effective transfer of risk. By conducting a Total Cost of Risk (TCoR) assessment, he can determine any gaps in coverage. As part of an effective risk management insurance team, Marc collaborates with senior risk consultants, certified insurance counselors, and expert underwriters to examine the adequacy of existing client programs and develop customized solutions to transfer risk, improve coverage and minimize premiums. Follow Our Host Website | LinkedIn

MSP 1337
E&O, Cyber Insurance, and the Illusion of Risk Transfer for MSPs

MSP 1337

Play Episode Listen Later Apr 7, 2026 30:27


In this episode, we unpack one of the most misunderstood topics in the MSP industry: insurance. From Errors & Omissions to cyber insurance, we break down what these policies actually cover, and more importantly, what they don't. The conversation challenges the assumption that buying insurance equals risk transfer and explores how liability really plays out across MSPs, clients, and third‑party vendors.We discuss why cyber insurance typically protects only the insured entity, how E&O applies to negligence and misconfiguration, and why insurance requirements vary dramatically based on client size, maturity, and risk tolerance. The episode also dives into supply‑chain risk, litigation realities, and why MSPs must align insurance decisions with their business model, client profiles, and overall risk strategy, rather than treating insurance as a checkbox.Ultimately, this episode reinforces that trust is built through risk conversations, not policies, and that MSPs have a critical opportunity to mentor clients on what good risk management actually looks like.

Jacksonville's Morning News Interviews
4/7 - Clark Howard's Daily Savings Tip

Jacksonville's Morning News Interviews

Play Episode Listen Later Apr 7, 2026 1:00


TUE – Cyber crooks are targeting small businesses for data theft and ransom scams. If you don't have a dedicated IT Department, Clark says you can still protect yourself! Start by backing up your client data often…and have you looked into Cyber Insurance?

ITSPmagazine | Technology. Cybersecurity. Society
From Threat Intelligence to Cyber Resilience: What SMBs and Enterprises Need to Know Now | A Brand Spotlight at RSAC Conference 2026 with Tony Anscombe, Chief Security Evangelist of ESET

ITSPmagazine | Technology. Cybersecurity. Society

Play Episode Listen Later Apr 1, 2026 24:01


On the RSAC Conference show floor, Tony Anscombe shared how ESET has expanded its threat intelligence offering with ECR reports -- designed to give commercial organizations both machine-readable feeds and human-readable analysis. The reason: threat actors are increasingly hard to attribute, they share tools, run coordinated campaigns, and reinvest profits into more sophisticated operations. Having someone do the research and surface actionable intelligence is no longer a luxury. Anscombe pointed to a telling campaign pattern from last year: threat actors refined attack methods against UK retailers, then rapidly adapted those same techniques against US retailers. The implication is clear -- your business may be unique in its infrastructure, but it is not unique in its sector. Understanding how your sector is being targeted is the foundation of a prevention-first posture. Automation came up as equally non-negotiable. If it takes three days to collect all the information needed to make a determination about an incident, the post-attack phase has already begun. ESET Inspect is designed to flip that equation: when an analyst opens an incident, the forensic analysis is done, the evidence is visualized, and the determination can be made on facts rather than gathered through investigation. Anscombe was careful to draw a line between automation as speed and automation as replacement. ESET's position is that AI should operate alongside human expertise -- trust and verify applies to AI-assisted analysis just as it does to any intelligence feed. Oversight remains essential, even as the tooling gets faster. A preview of upcoming survey data offered one of the more striking moments in the conversation. Roughly 35% of SMBs using MDR are sourcing that service directly from their cyber insurer. Anscombe flagged the monoculture risk: when a large share of businesses in the same sector run identical security stacks, a single point of failure becomes a sector-wide vulnerability. His advice after 30 years in the industry -- different organizations should deliberately choose different platforms to maintain diversity. This is a Brand Spotlight. A Brand Spotlight is a ~15 minute conversation designed to explore the guest, their company, and what makes their approach unique. Learn more: https://www.studioc60.com/creation#spotlight GUEST Tony Anscombe, Chief Security Evangelist, ESET LinkedIn: https://www.linkedin.com/in/tonyanscombe/ RESOURCES ESET: https://www.eset.com ESET Threat Intelligence: https://www.eset.com/int/business/services/threat-intelligence/ Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight KEYWORDS Tony Anscombe, ESET, Sean Martin, Marco Ciappelli, brand spotlight, brand marketing, marketing podcast, threat intelligence, cyber resilience, MDR, EDR, XDR, managed detection and response, SMB security, cybersecurity automation, RSAC Conference 2026, prevention-first security, cyber insurance, monoculture risk, ESET Inspect, APT research Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

SecurityMetrics Podcast
Why Cyber Insurance Claims Get Denied: The $1.4M Reality Check.

SecurityMetrics Podcast

Play Episode Listen Later Mar 31, 2026 12:39


A single data breach now costs a business an average of $1.4 million, according to the annual IBM report. For a small or medium-sized business (SMB), this hit is often terminal—most companies that suffer a major breach struggle to stay in business longer than six months.In this episode, Matt "Heff" Heffelfinger, Director of SOC Operations at SecurityMetrics, joins us to discuss why many business owners are operating under a false sense of security. We dive into the "Insurance Trap," where carriers deny claims because basic security activities weren't performed, and outline the four critical areas where every small IT team should focus their limited resources.We're moving past the technical jargon of Security Operations Centers (SOC) to give you a practical, budget-friendly roadmap for cyber hygiene that actually protects your bottom line.Key Takeaways:The Insurance Reality Check: Why having a policy isn't enough if you aren't doing the "basics".The 4 Pillars of SMB Focus: Matt breaks down the essential tasks for a team of one: Access Control, Network Scanning, Patch Management, and Basic Cyber Hygiene.Automating Your Defense: How to make one IT person feel like an entire "battalion" using inexpensive automation tools.The 10% Rule: Why allocating 10% of your IT budget to cybersecurity is the tipping point for graduating from "check-the-box" compliance to real security.Anatomy of a SOC: What happens when threat hunters find an "Event of Interest," such as unauthorized traffic heading to Russia at 3:00 AM.The AI Threat: How bad guys are upscaling and automating their attacks, making SMBs easier targets than ever before.About Our Guest:Matt Hessel is a Utah-based cybersecurity professional and the Director of SOC Operations at SecurityMetrics. With a career spanning over 20 years—starting at the helpdesk at TJ Maxx and Marshalls during their historic 2006 breach—Matt brings a unique "boots on the ground" perspective to protecting small businesses.Resources Mentioned:SecurityMetrics SOC Services: https://www.securitymetrics.com/pulseIBM Cost of a Data Breach Report 2025: https://www.ibm.com/think/insights/data-matters/cost-of-a-data-breachSecurityMetrics Certifications:PCI QSA | ASV | PFI | HITRUST | Forensic InvestigatorA note from Jen: We built Practical Cybersecurity because we were tired of the fear-mongering in this industry. Security shouldn't be a secret club.If you're trying to figure out PCI compliance or need a pen test, my team at SecurityMetrics can help you out: https://www.securitymetrics.com/contact/lets-get-you-to-the-right-place But if you just want to learn how to protect yourself for free, start here:  https://academy.securitymetrics.com/ 

Cyber Insurance Leaders
Ep. 61 - Are We Overpricing Cyber War? A Reality Check on Systemic Risk - with Tom Johansmeyer

Cyber Insurance Leaders

Play Episode Listen Later Mar 18, 2026 50:36


Hollywood sells cyber apocalypse. The data tells a different story.For years, cyber war has been framed as the systemic threat that could destabilize the insurance market overnight. But does the evidence support that assumption, or are we pricing a risk that hasn't materialized at the scale we fear?In this episode, host Anthony Hess speaks with Tom Johansmeyer, Global Head of Index Classes at Price Forbes Re, and a doctoral researcher examining the intersection of insurance, economic security, and cyber conflict.Drawing on case studies from NotPetya to large-scale infrastructure outages, Tom challenges how the industry thinks about cyber war exclusions, systemic cyber risk, and catastrophe benchmarks. He argues that many feared scenarios are either bounded in scale or comparable to natural catastrophe events the market already absorbs.If that's true, what does it mean for capital allocation, reinsurance structures, quota shares, and pricing discipline? This episode reframes the debate around systemic cyber risk, and explores what a more rational, scalable cyber insurance market could look like.You'll learn:1. Why systemic cyber war risk may be overstated2. How NotPetya reshaped underwriting psychology3. What catastrophe benchmarks reveal about cyber scale4. How fear impacts capital and reinsurance strategy5. What a healthier cyber insurance market could look like___________Get in touch with Tom Johansmeyer on LinkedIn: https://www.linkedin.com/in/tjohansmeyer/___________About the host Anthony Hess:Anthony is passionate about cyber insurance. He is the CEO of Asceris, which supports clients to respond to cyber incidents quickly and effectively. Originally from the US, Anthony now lives in Europe with his wife and two children.Get in touch with Anthony on LinkedIn: https://www.linkedin.com/in/anthonyhess/ or email: ahess@asceris.com.___________Thanks to our friends at SAWOO for producing this episode with us!

EChannelNews Podcast
RB Cyber: Bridging the Gap Between Cybersecurity and Cyber Insurance for SMBs

EChannelNews Podcast

Play Episode Listen Later Mar 18, 2026 15:30


Send us Fan MailKen Rayner and Kenrick Bagnall of RB Cyber, detailed a streamlined, “instant-issue” cyber insurance model specifically engineered for the SMB and MSP distributor markets. The initiative provides an online application process capable of issuing policies up to $1M immediately, with a roadmap to scale to $5M through upcoming portal upgrades.The offering distinguishes itself by integrating insurance with proactive risk reduction, partnering with Watchdog for compliance and human-risk monitoring and NuShield for specialized ransomware recovery. To ensure rapid recovery during a crisis, the program features a high-touch “A-Team” incident response model, providing policyholders with a single point of activation for a comprehensive breach coach, digital forensics, PR support, and credit monitoring services.

CISSP Cyber Training Podcast - CISSP Training Program
CCT 331: AI And Cyber Insurance Risk & CISSP Deep Dive Questions (Domain 1)

CISSP Cyber Training Podcast - CISSP Training Program

Play Episode Listen Later Mar 12, 2026 27:29 Transcription Available


Send a textAI is starting to change cybersecurity budgets in a surprising place: cyber insurance premiums. We dig into why insurers now care about how you use AI, how “more automation” can still mean “more risk,” and what it looks like when AI expands your attack surface through new APIs, sensitive data exposure, and code that ships with hidden security flaws. If you're a security leader, risk manager, or CISSP candidate, this is the kind of real-world pressure that turns governance from a buzzword into a business necessity.From there, we shift into CISSP Question Thursday with Domain 1 practice questions and clear walk-throughs. We cover why discretionary access control matches a data classification model where data owners set permissions, how to use the CIA triad as a risk-based decision tool (especially for e-commerce where availability equals revenue), and a clean distinction between due diligence and due care that you can use in audits, interviews, and exam answers.We also tackle a scenario every organisation faces: cloud outsourcing and accountability. Even with a contract, you can't fully transfer liability for protected customer data, and regulators still expect you to manage compliance, vendor risk, and controls. We close with a governance lesson on why awareness training must evolve with the threat landscape, including modern social engineering like deepfake-driven attacks. Subscribe, share this with a friend studying CISSP, and leave a review or comment with the hardest Domain 1 concept you're trying to master.Gain exclusive access to 360 FREE CISSP Practice Questions at FreeCISSPQuestions.com and have them delivered directly to your inbox! Don't miss this valuable opportunity to strengthen your CISSP exam preparation and boost your chances of certification success. Join now and start your journey toward CISSP mastery today!

Insuring Cyber Podcast - Insurance Journal TV
AI Is Supercharging Ransomware. Is Cyber Insurance at Risk?

Insuring Cyber Podcast - Insurance Journal TV

Play Episode Listen Later Mar 4, 2026 4:11


Beazley's Head of U.S. Cyber, Melissa Carmichael, breaks down the mounting pressures in the 2026 cyber insurance market and explains how insurers are balancing profitability, coverage, and emerging … Read More » The post AI Is Supercharging Ransomware. Is Cyber Insurance at Risk? appeared first on Insurance Journal TV.

iTunes - Insurance Journal TV
AI Is Supercharging Ransomware. Is Cyber Insurance at Risk?

iTunes - Insurance Journal TV

Play Episode Listen Later Mar 4, 2026 4:11


Beazley's Head of U.S. Cyber, Melissa Carmichael, breaks down the mounting pressures in the 2026 cyber insurance market and explains how insurers are balancing profitability, coverage, and emerging … Read More » The post AI Is Supercharging Ransomware. Is Cyber Insurance at Risk? appeared first on Insurance Journal TV.

Podcasts – Insurance Journal TV
AI Is Supercharging Ransomware. Is Cyber Insurance at Risk?

Podcasts – Insurance Journal TV

Play Episode Listen Later Mar 4, 2026 4:11


Beazley's Head of U.S. Cyber, Melissa Carmichael, breaks down the mounting pressures in the 2026 cyber insurance market and explains how insurers are balancing profitability, coverage, and emerging … Read More » The post AI Is Supercharging Ransomware. Is Cyber Insurance at Risk? appeared first on Insurance Journal TV.

Identity At The Center
#397 - RSM & IDAC Present - The Intersection of Resiliency, Recovery, and IAM

Identity At The Center

Play Episode Listen Later Jan 26, 2026 50:07


Jeff Steadman is joined by RSM colleagues Rich Servillas and Charles John to explore the critical intersection of identity access management, operational resilience, and disaster recovery. Rich, a director from the cyber response group, shares insights from the front lines of ransomware and cloud intrusions, while Chuck, director of operational resilience, discusses the importance of business continuity planning. The conversation covers the true impact of security incidents on brand reputation and operations, the necessity of out-of-band communication, and why identity is often the first thing challenged and the last thing trusted during a crisis. The guests also provide practical advice for IAM professionals on reducing blast radius through standing privilege reduction and robust logging.Connect with Rich: https://www.linkedin.com/in/richard-servillas-041a0551/Connect with Chuck: https://www.linkedin.com/in/chuckjohn/Connect with us on LinkedIn:Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Visit the show on the web at http://idacpodcast.comTimestamps:00:00:00 - Introduction and 2026 conference outlook00:01:44 - Introducing guests Rich and Chuck from RSM00:03:56 - Defining operational resilience and business continuity00:06:22 - When and how to start the planning process00:09:55 - Chuck's background in public health and emergency management00:12:44 - The broad impact of incidents on brand and operations00:16:45 - Key elements every recovery plan must include00:19:14 - Defining incident severity and matrixes00:21:52 - Identity as the new perimeter and its operational dependencies00:24:57 - Why hackers log in rather than break in00:26:46 - The first hours of a cyber incident response00:29:35 - Current threat trends and the role of AI00:31:29 - Updating plans through post-action debriefs00:34:31 - Cyber insurance gaps and contractual SLAs00:40:24 - Advice for identity professionals on reducing blast radius00:46:10 - Personal milestones and looking forward to 2026Keywords:IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, IAM, Cybersecurity, Business Continuity, Disaster Recovery, Operational Resilience, RSM, Incident Response, Ransomware, Cyber Insurance, Identity Governance

The Nonprofit Show
It's Time to Rethink Nonprofit Finance: A 2026 Wake-Up Call!

The Nonprofit Show

Play Episode Listen Later Jan 21, 2026 30:45


We sit down with Keith Mestrich, Senior Advisor of Nonprofit and Foundation Partnerships at Crescent Cares, for a great nonprofit business conversation. As nonprofit leaders step into a new year filled with uncertainty and rapid change, Keith offers a clear message: finance isn't a back-office function to tolerate—it's one of the strongest tools a nonprofit has to stay steady, make smarter decisions, and keep programs moving when conditions shift.Keith shares that early in his nonprofit CFO journey, he drew a firm line about how the role should operate: “As the CFO, I'm a full partner, just like any of your other programmatic partners are.” That idea sets the tone for the discussion. When finance is treated as an equal partner—connected to program strategy, staffing, and planning—leaders gain visibility into what's possible, what's risky, and what's sustainable. Keith also explains why finance is often sidelined in the sector: many nonprofit executives rise through program excellence and suddenly inherit budgets, banking, insurance, and reporting—without ever being trained for the business mechanics.From there, the conversation shifts to technology decisions that can protect both time and dollars. Keith uses a simple example that lands with almost every organization: paper checks. Moving payments and processes into modern systems can increase speed, reduce cost, strengthen tracking, and lower exposure to fraud. He also points to the growing potential of analytical tools and AI to strengthen forecasting—helping leaders anticipate cash-flow pinch points and plan ahead instead of reacting late.Scenario planning becomes another centerpiece, and Keith keeps it approachable: you don't have to create a plan for every possible situation. Focus on two major categories—key personnel changes and major financial impacts—and walk through what you would do if something shifted quickly. He emphasizes that this is a management responsibility, while boards should ensure it's happening and revisited regularly.Finally, Keith reframes risk management as something that supports confident leadership, not fear. As he puts it, “The bad guys know that our sector isn't as sharp… They target us.” Reviewing insurance, cyber readiness, and coverage levels isn't glamorous—but it's part of protecting the mission with the same care you bring to programs.#TheNonprofitShow #Nonprofitboards #NonprofitFinanceFind us Live daily on YouTube!Find us Live daily on LinkedIn!Find us Live daily on X: @Nonprofit_ShowOur national co-hosts and amazing guests discuss management, money and missions of nonprofits! 12:30pm ET 11:30am CT 10:30am MT 9:30am PTSend us your ideas for Show Guests or Topics: HelpDesk@AmericanNonprofitAcademy.comVisit us on the web:The Nonprofit Show

Run The Numbers
Hackers and Hidden Risks: Business Insurance Breakdown with Gordon Coyle

Run The Numbers

Play Episode Listen Later Jan 5, 2026 57:12


In this episode of Run the Numbers, CJ Gustafson sits down with Gordon Coyle, a 40-year commercial insurance veteran, to demystify one of the most anxiety-inducing topics for founders and CFOs: business insurance. Drawing on decades of experience with startups, scaleups, and regulated industries, Gordon breaks down what leaders need to know about D&O, E&O, cyber, and general liability, why investor pressure is rising, and where “cheap and easy” online policies fail when real risk hits. Through real-world examples, they explore how claims arise, how defense costs erode limits, why cyber insurance is as much about response as reimbursement, and how to balance budget, risk tolerance, and peer benchmarks—treating insurance as a critical layer of protection, not a box-checking exercise.—SPONSORS:Abacum is a modern FP&A platform built by former CFOs to replace slow, consultant-heavy planning tools. With self-service integrations and AI-powered workflows for forecasting, variance analysis, and scenario modeling, Abacum helps finance teams scale without becoming software admins. Trusted by teams at Strava, Replit, and JG Wentworth—learn more at https://www.abacum.aiBrex is an intelligent finance platform that combines corporate cards, built-in expense management, and AI agents to eliminate manual finance work. By automating expense reviews and reconciliations, Brex gives CFOs more time for the high-impact work that drives growth. Join 35,000+ companies like Anthropic, Coinbase, and DoorDash at https://www.brex.com/metricsMetronome is real-time billing built for modern software companies. Metronome turns raw usage events into accurate invoices, gives customers bills they actually understand, and keeps finance, product, and engineering perfectly in sync. That's why category-defining companies like OpenAI and Anthropic trust Metronome to power usage-based pricing and enterprise contracts at scale. Focus on your product — not your billing. Learn more and get started at https://www.metronome.comRightRev is an automated revenue recognition platform built for modern pricing models like usage-based pricing, bundles, and mid-cycle upgrades. RightRev lets companies scale monetization without slowing down close or compliance. For RevRec that keeps growth moving, visit https://www.rightrev.comRillet is an AI-native ERP built for modern finance teams that want to close faster without fighting legacy systems. Designed to support complex revenue recognition, multi-entity operations, and real-time reporting, Rillet helps teams achieve a true zero-day close—with some customers closing in hours, not days. If you're scaling on an ERP that wasn't built in the 90s, book a demo at https://www.rillet.com/cjTabs is an AI-native revenue platform that unifies billing, collections, and revenue recognition for companies running usage-based or complex contracts. By bringing together ERP, CRM, and real product usage data into a single system of record, Tabs eliminates manual reconciliations and speeds up close and cash collection. Companies like Cortex, Statsig, and Cursor trust Tabs to scale revenue efficiently. Learn more at https://www.tabs.com/run—LINKS:Gordon on LinkedIn: https://www.linkedin.com/in/gordoncoyle/The Coyle Group: https://thecoylegroup.com/CJ on LinkedIn: https://www.linkedin.com/in/cj-gustafson-13140948/Mostly metrics: https://www.mostlymetrics.com—RELATED EPISODES:The Coyle Group - Business Insurancehttps://www.youtube.com/@TheCoyleGroupNY—TIMESTAMPS:00:00:00 Preview and Intro00:01:53 Sponsors — Abacum | Brex | Metronome00:05:39 Interview Begins with Gordon Coyle00:06:23 Gordon Coyle & The Coyle Group00:07:21 Explaining Insurance on YouTube00:08:40 Turning Education into Inbound Leads00:09:40 Content as a Pull Strategy00:10:53 Insurance Complexity for Tech Founders00:13:28 Why Investors Require D&O Insurance00:14:09 What D&O Covers and Why It Matters00:15:50 Sponsors — RightRev | Rillet | Tabs00:20:19 Who D&O Covers and Rising Investor Pressure00:22:37 D&O Limits and Cost Tradeoffs00:23:21 Panic Calls and Late D&O Purchases00:24:39 How Defense Costs Erode Coverage00:25:31 Common D&O Claims and Employment Risk00:27:08 D&O vs E&O Explained00:29:12 Cyber Insurance and Social Engineering00:31:59 AI's Impact on Cyber Risk00:33:50 Real-World Ransomware Stories00:34:17 Cyber Insurance as Money and Response00:35:29 Business Email Compromise Scams00:39:43 Why Tech Still Needs General Liability00:41:16 What a BOP Covers00:42:32 Convenience vs Proper Coverage00:44:29 Surprising General Liability Claims00:46:45 Insurance Costs for Startups00:47:36 Higher Costs in High-Risk Industries00:48:26 Balancing Budget, Risk, and Coverage00:50:39 PEOs, Workers' Comp, and EPLI00:54:39 Choosing the Right Insurance Partner00:56:42 End Credits#RunTheNumbersPodcast #StartupFinance #BusinessInsurance #RiskManagement #CyberRisk This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit cjgustafson.substack.com

Command Control Power: Apple Tech Support & Business Talk
649: Wired for Success, Concrete Solutions With Andy Espo of Call Andy Consulting

Command Control Power: Apple Tech Support & Business Talk

Play Episode Listen Later Dec 23, 2025 55:58


In this episode of Command Control Power, Andy Espo from Call Andy Mac Consulting joins the discussion once again. The conversation kicks off with humorous banter about appearances and jackets before delving into serious tech talk. Andy shares the complexities of installing and upgrading network infrastructure in high-end residential projects, especially in challenging environments like old houses and concrete structures. He emphasizes the importance of discerning client relationships, meticulous planning, and ensuring proper execution by contractors. Andy also discusses strategies for building trust with clients, effective communication, and the shift towards managed services amid growing cybersecurity concerns. The episode concludes with insights on the importance of networking and building strategic partnerships with clients.   00:00 Introduction and Guest Welcome 00:41 High-End Residential Work 01:55 Challenges in Network Installations 04:47 WiFi Planning and Intuition 09:18 Client Education and Expectations 10:57 Working with Contractors 17:07 Common Wiring Issues 20:35 Ensuring Quality and Client Satisfaction 29:05 The Importance of Redundancy in Wiring 29:27 Challenges with Daisy Chaining and Switches 29:56 The Frustration of Poor Wiring in High-End Homes 31:01 The Impact of Construction Materials on WiFi Performance 32:42 The Shift to Managed Services and Cybersecurity 34:40 The Importance of Cyber Insurance 40:56 Efficiency Loss and Productivity in IT 45:30 The Art of Communicating Value to Clients 50:36 Building Strategic Partnerships 52:42 Conclusion and Final Thoughts

Backup Central's Restore it All
Building Your Cyber Security Team: Blue Teams, Red Teams, and Cyber Insurance

Backup Central's Restore it All

Play Episode Listen Later Dec 22, 2025 31:09 Transcription Available


Building a cyber security team isn't optional anymore; it's the difference between recovering from ransomware and going out of business. In this episode, Curtis and Prasanna explain why hardening your backup infrastructure is only half the battle. You need professionals who know how to configure XDR systems without drowning you in false positives, blue teams to defend your environment, and red teams to test whether your defenses actually work. They cover the role of MSSPs, incident response planning, cyber insurance requirements, and why attempting ransomware response on your own is like those old TV warnings: "Don't try this at home." If you've been following their series on backup basics and system hardening, this episode ties it all together with the human element that makes or breaks your recovery plan.

Cyber Insurance Leaders
Ep. 60 – Defensible Truth in DFIR: Why Preserving Evidence Beats Quick Fixes – with Devon Ackerman

Cyber Insurance Leaders

Play Episode Listen Later Dec 22, 2025 54:31


In incident response, if you wipe systems first and ask questions later, you're deleting the truth.In this episode, host Anthony Hess sits down with Devon Ackerman, Global Head of Digital Forensics and Incident Response at Cybereason, to unpack what serious DFIR looks like when your audience is regulators, legal counsel, and insurance carriers and brokers. A former FBI Supervisory Special Agent and Senior Forensic Examiner, Devon explains why his team approaches every matter as if it could end up in court, and what that changes in practice.He breaks down how to scope an incident from the first call, preserve evidence before “fixing” the environment, and pressure-test tool output instead of blindly trusting it. Anthony and Devon also dig into AI and automation in DFIR, the central role of timelines and logging in telling a credible breach story, and why third- and fourth-party access, zero trust, and contracts are now defining systemic cyber risk for boards and insurers alike.You'll learn:1. Why “defensible truth” is the real product in high-stakes incident response2. How forensic-science DFIR changes scoping, evidence preservation, and decision-making3. Where AI speeds up investigations and where it creates blind spots for junior teams4. Why timelines and logging shape what carriers, regulators, and boards believe happened5. How vendor access and contracts drive third- and fourth-party cyber risk at scale___________Get in touch with Devon Ackerman on LinkedIn: https://www.linkedin.com/in/devonackerman/___________About the host Anthony Hess:Anthony is passionate about cyber insurance. He is the CEO of Asceris, which supports clients to respond to cyber incidents quickly and effectively. Originally from the US, Anthony now lives in Europe with his wife and two children.Get in touch with Anthony on LinkedIn: https://www.linkedin.com/in/anthonyhess/ or email: ahess@asceris.com.___________Thanks to our friends at SAWOO for producing this episode with us!

Legal 123s with ByrdAdatto
Does My Practice Need Cybersecurity Insurance? with Kaitlin Upchurch

Legal 123s with ByrdAdatto

Play Episode Listen Later Dec 17, 2025 29:53


Cybersecurity is essential for every practice that relies on technology. In this episode, guest Kaitlin Upchurch, Senior Vice President and Cyber & Tech Practice Leader at Lockton, addresses the cybersecurity questions practices are—and are not—thinking about. She explains why cybersecurity risks are often misunderstood, what makes health care a prime target, and why insurance alone is not enough. Tune in to understand your cyber exposure, the biggest threats facing practices today, and the first steps to strengthen your protection beyond buying a policy.  Chapters00:00 Intro00:47 Banter04:25 Guest background10:20 Tell us about Lockton.13:40 Do medical practices need cybersecurity?18:40 What are cybersecurity misconceptions?20:48 What are some cybersecurity threats?25:00 How can medical practices avoid cybersecurity issues?26:37 Access+27:16 Legal Takeaways28:45 OutroWatch full episodes of our podcast on our YouTube channel: https://www.youtube.com/@byrdadatto  Stay connected for the latest business and health care legal updates:WebsiteFacebookInstagramLinkedIn

Cyber Insurance Leaders
Ep. 59 – Why Bedside Manner Defines Great Counsel in a Cyber Crisis – with Josh Mooney

Cyber Insurance Leaders

Play Episode Listen Later Dec 1, 2025 45:31


During incident response, what separates good from great counsel is bedside manner.In this episode, host Anthony Hess sits down with Josh Mooney, Partner and US Head of Cyber and Data Privacy at Kennedys Law, for a candid look at effective cyber response leadership.Josh explains why empathy and communication are as critical as legal precision when guiding clients through chaos. He also shares how US courts are reshaping ransomware incentives, why data governance failures attract OCR scrutiny, and how privacy law is edging toward a fifth fundamental right, namely the right not to be tracked.From the psychology of crisis response to courtroom strategy and compliance realities, Josh reveals how the next decade of cyber risk will test not only systems, but the people behind them.You'll learn:1. Why empathy and trust are strategic tools in breach response2. How US court rulings are driving ransom payment dilemmas3. What OCR investigations reveal about weak governance4. Why data inventory discipline determines breach outcomes5. How privacy law may soon expand to include a “right not to be tracked”___________Get in touch with Josh Mooney on LinkedIn: https://www.linkedin.com/in/joshua-mooney-cybersecurity/___________About the host Anthony Hess:Anthony is passionate about cyber insurance. He is the CEO of Asceris, which supports clients to respond to cyber incidents quickly and effectively. Originally from the US, Anthony now lives in Europe with his wife and two children.Get in touch with Anthony on LinkedIn: https://www.linkedin.com/in/anthonyhess/ or email: ahess@asceris.com.___________Thanks to our friends at SAWOO for producing this episode with us!

Making Risk Flow | The Future of Insurance
Exploring the Ecosystem: From Reactive to Predictive: The Proactive Advantage Reshaping Cyber Insurance Today

Making Risk Flow | The Future of Insurance

Play Episode Listen Later Nov 18, 2025 28:48


Fan Mail: Got a challenge digitizing your intake? Share it with us, and we'll unpack solutions from our experience at Cytora.In this episode of Making Risk Flow, host Jake Harding speaks with Ross Wirth, Head of Strategic Tech Ecosystem at CyberCube, about why cyber insurance requires a new playbook for risk assessment. Ross explains how traditional underwriting struggles to keep pace with dynamic security environments, and why real-time data visibility is now essential for identifying concentration risk, single points of failure, and systemic exposures like cloud outages. The conversation explores shifting from static applications to continuous monitoring, balancing AI-driven insights with human judgment, and designing underwriting strategies that prioritise prevention over post-incident repair. Whether you're an underwriter, broker, or cyber risk leader, this episode offers practical guidance on using data intelligently while preserving the relationship-driven core of insurance.To receive a custom demo from Cytora, click here and use the code 'Making Risk Flow'.Our previous guests include: Bronek Masojada of PPL, Craig Knightly of Inigo, Andrew Horton of QBE Insurance, Simon McGinn of Allianz, Stephane Flaquet of Hiscox, Matthew Grant of InsTech, Paul Brand of Convex, Paolo Cuomo of Gallagher Re, and Thierry Daucourt of AXA.Check out the three most downloaded episodes: The Five Pillars of Data Analytics Strategy in Insurance | Craig Knightly, Inigo 20 Years as CEO of Hiscox: Personal Reflections and the Evolution of PPL | Bronek Masojada Implementing ESG in the Insurance and Underwriting Space | Simon Tighe, Chaucer, and Paul McCarney, Moody's

Cyber Rants - The Refreshingly Real Cybersecurity Podcast
Episode 135 - Cyber Insurance: Promises, Pitfalls, and the Fine Print

Cyber Rants - The Refreshingly Real Cybersecurity Podcast

Play Episode Listen Later Nov 11, 2025 47:34


Cyber insurance is meant to provide assurance when incidents occur—but too often, organizations face confusion, denied claims, and unclear coverage. Attorney and cybersecurity expert, Matt Silverman, joins Zach and Lauro to break down why cyber policies are so complex, how evolving threats are outpacing the insurance industry, and what companies can do to navigate this uncertain landscape better.Connect with Matt Silverman:  https://www.linkedin.com/in/mdsilverman/Learn more about AIB Partners:  https://www.aib-partners.comPick up your copy of Cyber Rants on Amazon.Looking to take your Cyber Security to the next level? Visit us at www.silentsector.com. Be sure to rate the podcast, leave us a review, and subscribe!

MSP Business School
Jesse Miller | The Hidden Goldmine MSPs Are Overlooking

MSP Business School

Play Episode Listen Later Nov 11, 2025 25:10


In this episode of the MSP Business School podcast, host Brian Doyle welcomes Jesse Miller from PowerPSA Consulting to discuss the importance and structuring of vCISO programs in MSPs. Jesse shares his journey from a CISO of an MSP to founding PowerPSA Consulting, emphasizing the need for MSPs to offer vCISO services to enhance client value and expand recurring revenue. This engaging discussion explores the primary hurdles MSPs face in implementing and monetizing these services, delivering actionable insights and practical advice for listeners. Jesse Miller elaborates on how MSPs can become proactive by incorporating vCISO programs into their offerings. He highlights the significance of market research to tailor these programs to client needs and explains the importance of detailed client interviews for developing unique value propositions. The conversation dives deep into key issues like effectively packaging and pricing vCISO services, the role of cyber insurance in driving the demand for these services, and leveraging vCISO offerings as a strategy to outpace competitors. Jesse's experiences and advice provide a roadmap for MSPs aiming to build successful vCISO programs. Key Takeaways: Monetizing VCISO Programs: It's crucial for MSPs to effectively package and promote vCISO services, positioning them as essential rather than optional to clients. Market Research and Target Clients: Conducting detailed interviews with existing clients helps in creating a tailor-made vCISO program that aligns with client needs and expectations. Cyber Insurance as a Catalyst: Rising demands from cyber insurance work as a significant factor pushing the necessity for robust vCISO programs. Opportunity for Growth: vCISO services can be an entry point into new markets and clients, offering a competitive edge over other MSPs. Elevating Strategic Partnerships: Providing vCISO services allows MSPs to transition from being viewed as commodities to strategic partners with their clients. Guest Name: Jesse Miller LinkedIn page: https://www.linkedin.com/in/secopswarrior/ Company: PowerPSA Consulting Website: https://powerpsa.com/ Show Website: https://mspbusinessschool.com/ Host Brian Doyle: https://www.linkedin.com/in/briandoylevciotoolbox/ Sponsor vCIOToolbox: https://vciotoolbox.com

Federal Tax Updates
38 Minutes of Access: Inside a Real Tax Office Hack

Federal Tax Updates

Play Episode Listen Later Nov 10, 2025 57:06


John Barucci joins the show to break down his real-life data breach. John thought he had all the right safeguards in place: cyber insurance, firewalls, security training, and a written information security plan. But a single click on what appeared to be a Social Security Administration email led to bad actors accessing nine client files, altering returns, and changing bank account information in just 38 minutes.SponsorsPadgett -  Contact Padgett or Email Jeff PhillipsGet NASBA Approved CPE or IRS Approved CELaunch the course on EarmarkCPE to get free CPE/CE for listening to this episode.Chapters(00:00) - Introduction and Greetings (00:56) - Current Events and Government Shutdown (01:56) - PTIN Renewal and Security Measures (02:59) - Introducing John Bucci's Story (04:34) - John Bucci's Cybersecurity Breach Experience (06:18) - Detailed Chronology of the Breach (18:38) - Immediate Actions Taken Post-Breach (22:14) - IRS and Software Company Responses (27:02) - Client Communication and Further Steps (30:34) - The Weight of Responsibility in Tax Practice (31:22) - The Importance of Having a Plan (32:28) - Immediate Actions Post-Breach (32:53) - Involvement of Thomson Reuters and Stopping the Breach (34:21) - Forensic Investigation and Legal Steps (35:48) - Cyber Insurance and Its Benefits (37:50) - IRS Practitioner Relief Program (43:27) - Final Reflections and Lessons Learned (50:02) - Conclusion and Final Thoughts Follow the Federal Tax Updates Podcast on Social Mediatwitter.com/FedTaxPodfacebook.com/FedTaxPodlinkedin.com/showcase/fedtaxpodConnect with John: https://www.linkedin.com/in/johnbarucciConnect with the Hosts on LinkedInRoger HarrisAnnie SchwabReviewLeave a review on Apple Podcasts or PodchaserSubscribeSubscribe to the Federal Tax Updates podcast in your favorite podcast app!This podcast is a production of Earmark MediaThe full transcript for this episode is available by clicking on the Transcript tab at the top of this pageAll content from this podcast by SmallBizPros, Inc. DBA PADGETT BUSINESS SERVICES is intended for informational purposes only.

Cyber Security Today
Navigating Cybersecurity in Small and Medium Businesses with White Hat Hacker Graham Berry

Cyber Security Today

Play Episode Listen Later Oct 25, 2025 41:10 Transcription Available


In this episode of Cybersecurity Today, host Jim Love sits down with Graham Barrie a CISO and white hat hacker, to discuss the critical importance of cybersecurity for small and medium-sized businesses. From the moment Berry fell in love with technology through a Tandy TRS 80 to his current role helping businesses secure their data, this conversation covers the evolution of cybersecurity. They delve into how Berry assists businesses in understanding cybersecurity risks, communicating effectively with clients, and preparing for and recovering from cyber incidents. This episode is packed with insightful stories, practical advice, and a deep dive into the realities of cybersecurity for businesses of all sizes. 00:00 The Urgency of Cybersecurity 00:33 Introduction to the Podcast 01:00 Meet Graham Berry: A White Hat Hacker 01:31 Graham's Journey into Technology 04:04 From Technology to Cybersecurity 05:49 The Reality of Cyber Threats for Small Businesses 10:44 The Importance of Cyber Insurance 14:23 Engaging with Clients on Cybersecurity 17:08 Turning Around a Reluctant Client 20:10 The Growing Demand for Cyber Coverage 22:12 Third Party Risk Management 22:50 Effective Tabletop Exercises 23:58 Engaging Executives in Cybersecurity 26:43 Importance of Cyber Insurance 28:33 Successful Recovery Stories 34:16 Challenges with AI in Security 38:57 Looking Forward in Security 40:21 Conclusion and Farewell

The Ambitious Bookkeeper Podcast
221 ⎸ [Q&A] Pricing Cleanups, Marketing, and Cyber Insurance

The Ambitious Bookkeeper Podcast

Play Episode Listen Later Oct 22, 2025 53:02 Transcription Available


Send us a textHey guys! This month's live Q&A was packed with real talk about the nitty-gritty of running a bookkeeping business. We covered everything from pricing cleanups (spoiler: diagnostics are your best friend) to getting cyber insurance (yes, it's non-negotiable), and I even got vulnerable about my experience juggling babies and business. If you've ever wondered how to market to trades, what reports clients actually need, or how to take maternity leave as a business owner, this episode is for you!In this episode you'll hear:How to price cleanups without Getting BurnedMarketing Strategies that Actually Work for Your NicheCyber InsuranceMaternity Leave and BusinessResources mentioned in this episode:Jock Wols - featured on Ambitious Bookkeeper Podcast for cyber insurance discussion: https://youtu.be/QmXfN_PaKWECarissa Martino - Health Insurance SpecialistElevate: https://www.ambitiousbookkeeper.com/elevateConfident Compliance Bundle: https://www.ambitiousbookkeeper.com/offers/tgPgMBJ7Mini Course Bundle: https://www.ambitiousbookkeeper.com/offers/vYYfsxH9Akadian: https://fastandeasyqbo.samcart.com/affiliates/loginEmail List - Sign up at: https://www.ambitiousbookkeeper.com/subscribeKeeper: https://keeper.app/?via=serenaCanva: https://www.canva.com/join/relish-scale-floristicUpcounsel: https://www.upcounsel.com/rf/8dCYxoOUHousecall Pro: https://link.hscll.com/3i3yrLady Pros Facebook GroupAlignableThanks for listening. If this episode inspired you in some way, take a screenshot of you listening on your device and post it to your Instagram stories and tag me @ambitiousbookkeeperFor more information about the Ambitious Bookkeeper Podcast or interest in our programs or mentoring visit our resources below:Visit our website: https://www.ambitiousbookkeeper.comFollow the Blog: https://www.ambitiousbookkeeper.com/blogConnect on Instagram: https://www.instagram.com/ambitiousbookkeeperConnect on Threads: https://www.threads.net/@ambitiousbookkeeperConnect on Facebook: https://www.facebook.com/serenashoupcpaThank you for your support of our show. If you haven't left a review yet it's super simple. Please go to ambitiousbookkeeper.com/podcast and leave your review.Podcast Publishing Tools we use:Editing → SabrGet access to the Dubsado Decoded Private Podcast Series here>> Join me and Alyssa Lang, the Workflow Queen for The Advisory Edge Workshop - only $97 > Grab the Spotify Playlists here: ambitiousbookkeeper.com/spotify

Cyber Insurance Leaders
Ep. 58 – From Forms to Data Precision: Telemetry's Role in Cyber Underwriting – with Alex Jomaa

Cyber Insurance Leaders

Play Episode Listen Later Oct 22, 2025 38:21


Telemetry is changing the underwriting game, enabling a shift from clunky forms to real-time, verifiable risk data.In this episode, host Anthony Hess sits down with Alex Jomaa, Chief Underwriting Officer at Onda, to explore how real-time data is transforming cyber underwriting, and why it's time the industry stopped relying on outdated processes that frustrate clients and slow brokers down.Alex explains how Onda's Navigator platform integrates directly with a client's infrastructure to deliver objective, verifiable cyber risk insights, thereby eliminating the back-and-forth of long-form questionnaires. In addition, he unpacks the biggest hurdles to cyber adoption, from poor timing and over-complication to misaligned incentives and volatile pricing cycles.You'll learn:1. How telemetry brings scale, accuracy, and speed to cyber underwriting2. What really stops buyers from purchasing cyber policies3. How brokers can sell cyber coverage more effectively4. The key signals Onda uses to assess cyber hygiene and risk quality5. Why market volatility is damaging long-term trust in cyber insurance___________Get in touch with Alex Jomaa on LinkedIn: https://www.linkedin.com/in/alex-jomaa-b84b8520/ ___________About the host Anthony Hess:Anthony is passionate about cyber insurance. He is the CEO of Asceris, which supports clients to respond to cyber incidents quickly and effectively. Originally from the US, Anthony now lives in Europe with his wife and two children.Get in touch with Anthony on LinkedIn: https://www.linkedin.com/in/anthonyhess/ or email: ahess@asceris.com.___________Thanks to our friends at SAWOO for producing this episode with us!

The Other Side Of The Firewall
Cyber Insurance, CVE Overload, and AI Risk Ft. Cyber Coffee Hour

The Other Side Of The Firewall

Play Episode Listen Later Oct 16, 2025 58:48


In this episode of The Other Side of the Firewall podcast, Ryan Williams Sr. and Shannon Tynes host a discussion with, Cyber Coffee Hour's, Dr. Joseph Burt-Miller Jr. and Alfredo Nash about the current state of cybersecurity, focusing on the rise of Common Vulnerabilities and Exposures (CVEs), the challenges faced by cyber insurers, and the implications of AI vulnerabilities, particularly with Google's Gemini. The conversation emphasizes the importance of responsible AI usage, data sharing concerns, and the need for proactive measures in cybersecurity. Article: Despite More CVEs, Cyber Insurers Aren't Altering Policies https://www.darkreading.com/cyber-risk/more-cves-cyber-insurers-arent-altering-policies?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExajN5amZVMWpibElPY2V4eQEec7YqnFZKChC13sYroUwfPniTctt7fmHUuFDWCO8NT5qxZimY92rqX6FBcsw_aem_GG7xSAOwsjq1f7PKHtPJ2w 'Trifecta' of Google Gemini Flaws Turn AI Into Attack Vehicle https://www.darkreading.com/vulnerabilities-threats/trifecta-google-gemini-flaws-ai-attack-vehicle Buy the guide: https://www.theothersideofthefirewall.com/ Please LISTEN

Moolala:  Money Made Simple with Bruce Sellery
Personal Cyber Insurance: Protecting Yourself from Online Threats

Moolala: Money Made Simple with Bruce Sellery

Play Episode Listen Later Oct 15, 2025 11:32


Cybercrime isn't just a corporate problem anymore. James South from Aviva Canada joins Bruce to explain personal cyber insurance, a new layer of protection for the digital age. From online fraud recovery and ransomware response to cyberbullying coverage and dark-web monitoring, this coverage can help individuals and families stay financially and emotionally protected after an online attack. Learn how it works, what it costs (hint: about $6/month), and why every connected Canadian should consider adding it to their home or tenant policy. Find out more at aviva.ca and connect on Instagram and LinkedIn.

Connected FM
Proactive Cybersecurity Strategies for Facility Managers

Connected FM

Play Episode Listen Later Oct 14, 2025 13:37


Every day, critical infrastructure is under siege with about 1.2 million cyberattacks per day. For facility managers, that means cybersecurity isn't just an IT issue, it's a frontline responsibility. In today's episode, Stacey Shepard and E.J. von Schaumburg from Building Cybersecurity, discuss why facility managers must treat digital threats with the same urgency as physical ones and how leaders can use proactive strategies, assessments and insurance awareness to stay prepared. Together, they share how facility managers can build resilience, safeguard their organizations, and lead the way in a world where cyber risk is constant.Sponsor:This episode is sponsored by ODP Business Solutions! 00:00 Introduction: The Growing Threat of Cyber Attacks00:19 Podcast Overview and Guest Introduction01:23 Understanding Cybersecurity in Facility Management02:24 The Importance of Data Management02:54 Building Cybersecurity: Framework and Training03:38 The Role of Facility Managers in Cybersecurity05:01 Cybersecurity Training and Preparedness08:11 Insurance and Risk Management11:11 Leadership and Legal Implications11:48 Resources and Conclusion Connect with Us:LinkedIn: https://www.linkedin.com/company/ifmaFacebook: https://www.facebook.com/InternationalFacilityManagementAssociation/Twitter: https://twitter.com/IFMAInstagram: https://www.instagram.com/ifma_hq/YouTube: https://youtube.com/ifmaglobalVisit us at https://ifma.org

The Gate 15 Podcast Channel
Weekly Security Sprint EP 131. Threat use of AI, ransomware reports and cyber insurance, weather, protests, and more

The Gate 15 Podcast Channel

Play Episode Listen Later Oct 14, 2025 22:53


In this week's Security Sprint, Dave and Andy covered the following topics:Main Topics:Russia, China and North Korea are using ChatGPT to influence you — here's how. A new report from OpenAI found foreign adversaries are increasingly using artificial intelligence to power hacking and influencing operations. The report found they were using OpenAI's popular tool ChatGPT. The report showed those adversaries include Russia, China and North Korea. “AI-enabled attacks are becoming more capable and harder to detect,” Daryl Lim, affiliate at the Center for Socially Responsible Artificial Intelligence at Penn State University, told Straight Arrow News. “Adversaries can personalize attacks, evade filters and iterate faster than before.”• The Case for AI Loss of Control Response Planning and an Outline to Get Started• Can Humans Devise Practical Safeguards That Are Reliable Against an Artificial Superintelligent Agent?The true cost of cyber attacks - and the business weak spots that allow them to happen. What makes companies like Jaguar Land Rover and Marks & Spencer particularly vulnerable is the way in which their supply chains work.• UK NCSC: UK experiencing four 'nationally significant' cyber attacks every week• Cyber attack contingency plans should be put on paper, firms told• Policyholder Plot Twist: Cyber Insurer Sues Policyholder's Cyber Pros• The Ransomware Pricing Paradox: An Empirical Study of the Six Stages of Ransomware Negotiations. PDF• Paying off cyber criminals no guarantee stolen data won't be published – studySevere Weather: Hurricane Season continues18 Oct: No Kings nationwide protestsQuick Hits:• Peace in Israel and Gaza?• Sen. Peters tries another approach to extend expired cyber threat information-sharing law & Peters & Rounds Introduce Bipartisan Bill to Restore Critical Cybersecurity Protections• Yet another shutdown and its impact on cybersecurity professionals• Experts: Shutdown Strains Healthcare Cyber Defenses• Is the government shutdown impacting info sharing for healthcare cyber threats? • ICYMI! Gate 15 Weekly Security Sprint EP 130. The Evangelist has returned! Cybersecurity Awareness Month and more! • Poland says cyberattacks on critical infrastructure rising, blames Russia• Anatomy of a Hacktivist Attack: Russian-Aligned Group Targets OT/ICS• Critical networks face unprecedented threat as DDoS attacks are getting shorter and more intense• Belgian PM reported to be among targets of ‘jihad-inspired' drone plot• Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign

Business, Brains & the Bottom Line
Ep. 134: Bridging Risk and Technology: How CyberSecure Is Fixing Cyber Insurance with John Czapko

Business, Brains & the Bottom Line

Play Episode Listen Later Oct 9, 2025 32:40


In this episode, I sit down with John Czapko, CEO of CyberSecure, a leader with 26 years of experience in IT before founding a successful commercial insurance firm. That rare blend of technical expertise and risk management insight gives John a unique perspective on one of today's biggest business challenges: cyber insurance.John explains why the current cyber insurance landscape is broken—where policies don't align with real-world tech stacks, brokers can't translate cyber risk into business terms, and companies are left hoping instead of knowing when incidents occur.We dive into how CyberSecure is changing the game with trusted carrier partnerships, coverage that stands up to audits and regulatory demands, and proprietary tools like the CyberSecure RiskMeter and Board Brief, which turn complex cyber threats into clear business strategy.If your business can't afford to get cyber wrong, this conversation will help you understand how to make cyber insurance make sense—and make sure it performs when it matters most.

Power Producers Podcast
Cyber Insurance Risk Management with Zane Goldthorp

Power Producers Podcast

Play Episode Listen Later Oct 3, 2025 23:02


In the third installment of this Shoptalk series, host David Carothers and guest Zane Goldthorp of ProWriters shift the focus to proactive risk management for cyber insurance. They make the case that even in a soft market, a responsible business owner's focus should be on security, not just on meeting minimum carrier requirements. The conversation covers the essential security controls every business should have, including MFA, MDR, and employee training. They also dive into a real-world claim scenario that highlights a critical coverage gray area—the "Bring Your Own Device" (BYOD) issue—and discuss the potential conflicts between carrier-provided security services and an agent's referral relationships with Managed Service Providers (MSPs).   Key Highlights: Essential Risk Management Controls Zane Goldthorp outlines the foundational security measures agents should be discussing with their clients. While carriers may have relaxed some requirements, essentials like MFA (Multi-Factor Authentication), regular backups, and email security are non-negotiable. He also notes the industry's shift from EDR (Endpoint Detection and Response) to the more proactive MDR (Managed Detection and Response).   The Human Element: Employee Training The conversation stresses that one of the most effective and overlooked risk management tools is consistent employee training. With phishing and business email compromise being the source of most breaches, training employees to spot increasingly sophisticated attacks can be the make-or-break difference in preventing a major claim.   A Critical Coverage Lesson: The BYOD Problem David shares a story from a real claim that exposed a major potential coverage gap: whether a breach is covered if it originates on a personal device not owned by the company. This "Bring Your Own Device" (BYOD) issue highlights the critical importance of understanding policy nuances and working with an expert wholesaler who knows the forms inside and out.   Navigating Carrier Services and MSP Relationships Many cyber carriers now offer security services as part of their policies. While valuable, David cautions agents to be mindful of their referral relationships with MSPs (Managed Service Providers). An MSP may view these carrier offerings as direct competition, potentially damaging a crucial referral source. The key is clear communication to ensure all parties are aligned.   Connect with: Zane Goldthorp LinkedIn David Carothers LinkedIn Kyle Houck LinkedIn Visit Websites: Power Producer Base Camp ProWriters Killing Commercial Crushing Content Power Producers Podcast Policytee The Dirty 130 The Extra 2 Minutes

mfa risk management msp shop talk mdr cyber insurance bring your own device byod david carothers
And I Quote: Building Relationships with Insurance Agents and Small Business Owners
Cyber Insurance for Small Businesses: You're a Bigger Target by Being Small

And I Quote: Building Relationships with Insurance Agents and Small Business Owners

Play Episode Listen Later Oct 2, 2025 24:17


It's Cybersecurity Awareness Month and we invite insurance agents to listen to this episode to get their small business clients prepared.In this episode, Ashleigh Burden and Eder Ribeiro discuss the critical importance of cybersecurity and cyber insurance for small businesses. They explore common misconceptions about small business security, the impact of cyber incidents, and the necessity of having adequate cyber insurance coverage. Eder shares insights from his extensive experience in incident response and emphasizes the need for small businesses to take cybersecurity seriously. The conversation also touches on the evolving regulatory landscape and the partnership between Coterie and TransUnion to make cyber insurance more accessible for small businesses.Learn more about TransUnion: https://www.transunion.com/lp/cyberscout-explainerlinkedin.com/company/transunionLearn more about Coterie Insurance:https://coterieinsurance.com/insurance/cyber-insurance-for-small-businesses/https://coterieinsurance.com/blog/5-reasons-your-clients-need-cyber-insurance/Timeline: 00:00 - 01:54: Introductions01:54 - 04:42: The Myth of Small Business Security04:42 - 06:36: Common Cyber Attack Vectors for Small Businesses06:36 - 09:59: Impact of Cyber Incidents on Small Businesses09:59 - 12:06: Trends for Agents and Brokers in Cyber Insurance12:06 - 13:53: Regulatory Landscape for Small Businesses13:53 - 16:49: Making Cyber Insurance Accessible16:49 - 18:59: Understanding Cyber Insurance Coverage18:59 - 23:03: Key Takeaways for Cybersecurity Awareness Monthcybersecurity, cyber insurance, small business, cyber attacks, incident response, insurance agents, regulatory compliance, risk management, TransUnion, Coterie

Risk Management and Insurance Podcast
Strengthening resilience through effective cyber threat management

Risk Management and Insurance Podcast

Play Episode Listen Later Sep 30, 2025 55:44


Organizations continue to face an increasingly complex cyber threat landscape. Amid ongoing geopolitical and geoeconomic tensions and supply chain disruptions, a robust and comprehensive cyber risk management strategy can help businesses mitigate risks and improve resiliency. In this episode of Risk in Context, Marsh McLennan's Dan Bowden speaks with Marsh's Helen Nuttall and Matt Berninger about the importance of reviewing and reinforcing cyber controls to help minimize cyber exposures and uncertainty and better protecting their people, finances, and operations from cyber threats. You can access a transcript of the episode here. Read Cybersecurity Signals, Connecting Controls and Incident Outcomes and The 2025 OT Security Financial Risk Report. For more insights and insurance and risk management solutions, follow Marsh on LinkedIn and X and visit marsh.com.

The Risky Chicks Podcast
Locking Your Digital Front Door: Personal Cyber Insurance

The Risky Chicks Podcast

Play Episode Listen Later Sep 10, 2025 15:34


In this episode of Risky Chicks, Abbie and Joey discuss the importance and intricacies of personal cyber insurance in today's digital age. They share real-life experiences with scams and identity theft, delve into what personal cyber insurance covers and what it doesn't, and highlight the significance of protecting personal data. Join us as we explore how adding cyber protection to your homeowner's policy can safeguard you and your family against modern digital threats.

The Nonprofit Show
Third-Party Software Risks Nonprofits Overlook: Shadow IT, AI, and Donor Data

The Nonprofit Show

Play Episode Listen Later Sep 10, 2025 31:56


Nonprofits lean on outside platforms to save time and stretch budgets—but those relationships can quietly expose sensitive donor, client, and payment data. In this episode, Senior Cybersecurity Advisor Parker Brissette of Richey May explains how to recognize and manage third-party software risk before it becomes tomorrow's headline. He starts with a simple lens: follow the data. Where is it stored? Who can touch it—directly or indirectly? Many teams only think about contracted vendors, but Parker widens the aperture to “shadow IT” and consumer tools staff use without formal approval. As he puts it, “Third parties is really anybody that can touch the data at any point in your business, whether you have an agreement with them or maybe not.”From privacy regulations (GDPR, CCPA) to sector-specific rules (HIPAA, PCI), nonprofits carry legal and reputational exposure the moment personal information enters their systems. Parker offers practical steps: inventory paid tools via your accounting system; ask, “If this vendor vanished tomorrow, what would break?”; and press vendors for proof—SOC 2 reports, ISO 27001, or completed security questionnaires. For organizations without a CIO, he recommends clear contracts and one non-negotiable safeguard: “The biggest thing that I recommend in any third-party engagement is setting an expectation of having cyber insurance, because that's a big protection for you financially.”AI enters the picture with both promise and peril. Consumer AI tools can learn from and retain your uploads, potentially exposing proprietary or personal information. Enterprise agreements (e.g., Microsoft Copilot) can offer stronger data protections, but only if configured and used correctly. Parker's guidance is pragmatic: don't ban AI; set guardrails, choose vetted tools, and train teams.Finally, he urges preparation and transparency. Incidents can happen—even with good controls. Donors and corporate funders expect frank communication about what protections exist and what happens if data is exposed. Build trust now by documenting safeguards, validating vendors, and rehearsing your response.You don't have to be a security expert to make smart choices—but you do need a map: know your systems, test your assumptions, ask vendors for evidence, and write risk into your contracts and budgets. That approach turns anxiety into action—and preserves the trust your mission depends on.Find us Live daily on YouTube!Find us Live daily on LinkedIn!Find us Live daily on X: @Nonprofit_ShowOur national co-hosts and amazing guests discuss management, money and missions of nonprofits! 12:30pm ET 11:30am CT 10:30am MT 9:30am PTSend us your ideas for Show Guests or Topics: HelpDesk@AmericanNonprofitAcademy.comVisit us on the web:The Nonprofit Show

Bite Size Sales
The Unconventional Growth Playbook: Europe, SMBs, and Cyber Insurance – Christian Werling, CRO, Eye Security

Bite Size Sales

Play Episode Listen Later Sep 9, 2025 40:27 Transcription Available


Send me a text (I will personally respond)Are you wondering how to leverage unconventional go-to-market strategies to accelerate growth in cybersecurity? Curious about integrating cyber insurance into your offer to stand out in a crowded landscape? This episode provides answers by spotlighting a company bucking the traditional playbook—and winning.In this conversation we discuss:

@BEERISAC: CPS/ICS Security Podcast Playlist
Pankaj Goyal on Cyber Insurance Coverage for OT Environments

@BEERISAC: CPS/ICS Security Podcast Playlist

Play Episode Listen Later Sep 2, 2025 29:30


Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: Pankaj Goyal on Cyber Insurance Coverage for OT EnvironmentsPub date: 2025-09-01Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationPankaj Goyal, Chief Operating Officer at Safe Security, joins the Nexus Podcast to discuss the challenges cyber insurance carriers and brokers have in determing and providing coverage for asset heavy operational technology (OT) and cyber-physical systems (CPS) environments. Underwriters have prolific amounts of historical data and experience in calculating risk and exposure around IT, but cannot say the same for OT. Goyal discusses how fragmentation in the OT ecosystem, along with an ever-expanding attack surface, is contributing to the challenges around properly insuring these environments. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Aperture: A Claroty Podcast
Pankaj Goyal on Cyber Insurance Coverage for OT Environments

Aperture: A Claroty Podcast

Play Episode Listen Later Sep 1, 2025 29:30


Pankaj Goyal, Chief Operating Officer at Safe Security, joins the Nexus Podcast to discuss the challenges cyber insurance carriers and brokers have in determing and providing coverage for asset heavy operational technology (OT) and cyber-physical systems (CPS) environments. Underwriters have prolific amounts of historical data and experience in calculating risk and exposure around IT, but cannot say the same for OT. Goyal discusses how fragmentation in the OT ecosystem, along with an ever-expanding attack surface, is contributing to the challenges around properly insuring these environments. 

Joey Pinz Discipline Conversations
#714 ChannelCon-Chris Loehr:

Joey Pinz Discipline Conversations

Play Episode Listen Later Aug 27, 2025 40:38 Transcription Available


Send us a textIn this action-packed episode, Joey Pinz sits down with cybersecurity veteran and ex-MSP operator Chris Loehr. From his early days as a two-footed soccer midfielder to leading Solis Security through complex ransomware response cases, Chris shares insights forged in both cleats and crisis. ⚽

Absolute Trust Talk
188: Are You Risking Everything? The Insurance Your Business Can't Operate Without (Part 3)

Absolute Trust Talk

Play Episode Listen Later Jul 25, 2025 16:44


In the compelling finale of this three-part insurance series, host Kirsten Howe and insurance expert Dean Myers tackle the coverage that keeps business owners up at night—cyber insurance. Dean shares fascinating real-world stories, from ransomware attackers offering customer service hotlines to disgruntled employees planting digital "time bombs" in company systems. You'll discover why this isn't just another insurance policy but essential business survival protection that covers everything from system failures to deepfake fraud. Dean reveals the surprising realities about whether companies should pay ransoms, how insurers use "white hat" attacks during applications, and why Silicon Valley startups are outpacing traditional insurance giants. If you think your business is too small to be targeted or that basic IT protection is enough, this episode will be a wake-up call you can't afford to ignore.   Time-stamped Show Notes: 0:00 Introduction 1:12 What is cyber insurance, and why it's the broadest coverage for such esoteric risks? 1:48 The comprehensive scope: system failure, ransomware, business email compromise, business interruption, contingent business interruption, and forensics coverage. 2:15 Why cyber claims require hiring attorneys, CPAs, forensics experts, claims adjusters, and legal counsel, unlike traditional workers' comp claims. 2:45 The two key reasons carriers provide such broad coverage: rapid system restoration at the lowest cost and mandatory industry claim reporting. 3:48 How cyber insurance provides both first-party and third-party coverage, protecting you when you accidentally send infected emails to clients. 4:37 Real-world business email compromise: When hackers send fake invoices to your clients from compromised email accounts. 5:10 Why cyber attacks almost always originate overseas in countries with lax cybersecurity laws and accountability. 5:37 Will cyber insurance pay ransoms, and when is it appropriate? 6:42 Real claim story: How a tired CPA two days before tax season fell for a phishing email with a partner's name containing just one extra letter 8:25 Why paying ransoms creates a "bull's eye on your back" and marks you as a repeat target for extortionists. 11:06 Cyber insurance qualification requirements, why multi-factor authentication is now absolutely mandatory across all carriers. 12:15 "White hat" mock attacks: How insurers test your system vulnerabilities during the application process using the "open parking spot" analogy. 14:41 Insider sabotage case study: Bay Area law firm manager discovers her job posted on LinkedIn, teams up with IT brother-in-law for revenge. 15:53 The emerging deepfake threat, how voice cloning technology is creating new fraud risks for fund transfers. 16:25 Protection strategies: Using "trip questions" with personal knowledge to verify client identity during suspicious calls. 17:12 The AI counterbalance: How artificial intelligence may help prevent cyber claims in the future.

Business of Tech
Building Trust in MSP Cyber Insurance: Edouard von Herberstein Discusses Spectra's Impact

Business of Tech

Play Episode Listen Later Jul 4, 2025 25:26


The managed service provider (MSP) cyber insurance landscape is facing significant challenges, primarily due to the certification process rather than the coverage itself. Edouard von Herberstein, a seasoned expert in complex risk management, recognized the inefficiencies within this system and founded Spectra, the first MSP certification platform acknowledged by major insurers. His insights reveal that the lack of trust and understanding between insurers and MSPs has created a bottleneck, preventing effective collaboration in enhancing cyber resilience and risk management.Spectra's approach focuses on certifying the MSP as an organization rather than individual technicians. This certification process involves a thorough examination of how MSPs protect themselves, the resilience of the solutions they offer, and the deployment of these solutions to customers. By ensuring that MSPs meet specific standards and best practices, Spectra aims to build trust with insurers, who have historically been skeptical of the MSP sector. This certification not only enhances the credibility of MSPs but also provides insurers with a reliable way to assess risk.The conversation also touches on the skepticism that exists on both sides of the insurance and MSP relationship. Many MSPs view insurers as profit-driven entities that often deny claims, while insurers perceive MSPs as lacking value. However, through initiatives like Spectra, there is a growing recognition of the mutual benefits that can arise from collaboration. Brokers are increasingly seeking certified MSPs to refer to clients, creating a new dynamic where both parties can thrive.Finally, the discussion highlights the importance of insurance in the broader context of cybersecurity. While some argue that organizations can self-insure by maintaining sufficient funds for potential breaches, the reality is that many SMEs do not recover from incidents like ransomware attacks. Insurance provides not only financial support but also critical guidance and resources post-incident. By fostering a partnership between certified MSPs and insurers, Spectra aims to create a more resilient cybersecurity ecosystem that benefits all stakeholders involved.  Supported by MSPRADIO : https://mspradio.com/engage/  All our Sponsors: https://businessof.tech/sponsors/ Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://www.businessof.tech/ Support the show on Patreon: https://patreon.com/mspradio/ Want to be a guest on Business of Tech: Daily 10-Minute IT Services Insights? Send Dave Sobel a message on PodMatch, here: https://www.podmatch.com/hostdetailpreview/businessoftech Want our stuff? Cool Merch? Wear “Why Do We Care?” - Visit https://mspradio.myspreadshop.com Follow us on:LinkedIn: https://www.linkedin.com/company/28908079/YouTube: https://youtube.com/mspradio/Facebook: https://www.facebook.com/mspradionews/Instagram: https://www.instagram.com/mspradio/TikTok: https://www.tiktok.com/@businessoftechBluesky: https://bsky.app/profile/businessof.tech

Paul's Security Weekly
CISO Cyber Insurance Empowerment - Morey Haber, Peter Hedberg, Stephan Jou - BSW #400

Paul's Security Weekly

Play Episode Listen Later Jun 18, 2025 63:41


Segment description coming soon! This month BeyondTrust released it's 12th annual edition of the Microsoft Vulnerabilities Report. The report reveals a record-breaking year for Microsoft vulnerabilities, and helps organizations understand, identify, and address the risks within their Microsoft ecosystems. Segment Resources: Insights Security Assessment Tool: https://www.beyondtrust.com/products/identity-security-insights/assessment For a copy of the Microsoft Vulnerabilities Threat Report: https://www.beyondtrust.com/resources/whitepapers/microsoft-vulnerability-report Blog re: Report: https://www.beyondtrust.com/blog/entry/microsoft-vulnerabilities-report Stephan will discuss OpenText Core Threat Detection and Response, a new AI-powered solution designed to quickly spot and neutralize threats across an organization's attack surface without the need to overhaul existing security stacks. He will also provide insights into the most dangerous threats facing enterprises today along with practical steps to mitigate them. https://www.opentext.com/products/core-threat-detection-and-response https://www.prnewswire.com/news-releases/opentext-launches-next-generation-opentext-cybersecurity-cloud-with-ai-powered-threat-detection-and-response-capabilities-302381481.html This segment is sponsored by OpenText. Visit https://securityweekly.com/opentextrsac to learn more about them! This segment is sponsored by BeyondTrust. Visit https://securityweekly.com/beyondtrustrsac to for a copy of the Microsoft Vulnerabilities Threat Report! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-400

Business of Tech
U.S. Job Growth Declines, Windows 11 Stagnates, Cyber Insurance Partnerships, CrowdStrike's Forecast

Business of Tech

Play Episode Listen Later Jun 9, 2025 16:22


U.S. hiring continues to show modest growth, with the Bureau of Labor Statistics reporting an addition of 139,000 jobs in May, surpassing economists' expectations. However, the unemployment rate remains steady at 4.2%, marking a prolonged period of stagnation. Revisions to previous months revealed a combined loss of 95,000 jobs, raising concerns about the overall health of the labor market. While wage growth remains consistent at 3.9%, sectors such as healthcare and leisure are thriving, whereas manufacturing and professional services are experiencing declines. This mixed landscape reflects economic uncertainty that is affecting hiring decisions, particularly among smaller firms.The adoption of Windows 11 has plateaued, with its market share slightly decreasing to 43.22% as Windows 10's share rises to 53.19%. Despite this stall, experts predict a gradual increase in Windows 11 adoption through the end of the year. However, the looming end of support for Windows 10 on October 14 poses a significant risk, as half of the world's PCs will be left without mainstream support. Service providers are encouraged to prepare for a migration wave by utilizing automated tools to assess upgrade eligibility and prioritize device refreshes.In the realm of cybersecurity, UConn is enhancing its cyber insurance marketplace by partnering with BlackPoint Cyber and Cork Protection. These collaborations aim to empower managed service providers (MSPs) with better risk management tools and insurance options. As cyber risk financing merges with prevention strategies, MSPs are positioned as key players in this evolving landscape. The need for providers to understand insurance language and align their security offerings with underwriting requirements is becoming increasingly critical.CrowdStrike has issued a soft revenue forecast for the second quarter, leading to a decline in its stock price. The company anticipates revenue between $1.14 billion and $1.15 billion, falling short of analyst expectations. This downturn is attributed to reduced government and enterprise spending on cybersecurity products amid economic pressures. For managed service providers, this situation serves as a reminder to diversify their vendor portfolios to mitigate operational risks associated with vendor concentration. The episode underscores the importance of balancing security efficacy with vendor resilience in a challenging market. Four things to know today 00:00 Growth Slows, Gaps Widen: Jobs Up 139 K, Unemployment Steady, AI-Exposed Roles Shrink and Talent Budgets Surge06:27 Windows 11 Plateau Meets Windows 10 Sunset: Half of Business PCs Face October 2025 Deadline—MSPs Positioned to Monetize the Refresh Wave08:49 From Detection to Dollars: UKON's Insurance Engine, Blackpoint's 24×7 Defense, Cork's Risk Insights and Guardz's $56 M Raise Signal Security-Finance Convergence11:53 CrowdStrike's Lower-Than-Expected Q2 Outlook and $29 M Outage Bill Spotlight the Hidden Cost of Vendor Concentration for MSPs Supported by: https://timezest.com/mspradio/https://cometbackup.com/?utm_source=mspradio&utm_medium=podcast&utm_campaign=sponsorship All our Sponsors: https://businessof.tech/sponsors/ Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://www.businessof.tech/ Support the show on Patreon: https://patreon.com/mspradio/ Want to be a guest on Business of Tech: Daily 10-Minute IT Services Insights? Send Dave Sobel a message on PodMatch, here: https://www.podmatch.com/hostdetailpreview/businessoftech Want our stuff? Cool Merch? Wear “Why Do We Care?” - Visit https://mspradio.myspreadshop.com Follow us on:LinkedIn: https://www.linkedin.com/company/28908079/YouTube: https://youtube.com/mspradio/Facebook: https://www.facebook.com/mspradionews/Instagram: https://www.instagram.com/mspradio/TikTok: https://www.tiktok.com/@businessoftechBluesky: https://bsky.app/profile/businessof.tech