Podcasts about drata

SDR Game - Sales Development Podcast

Play Episode Listen Later Sep 28, 2023 58:15

Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users.All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:T-Mobile customer reports privacy breach - Twitter.T-Mobile US exposes some customer data – but don't call it a breach - The Register.T-Mobile denies new data breach rumors, points to authorized retailer - Bleeping Computer.Connectivity Source - Despite appearances, don't confuse it with T-Mobile.ThemeBleed exploit is another reason to patch Windows quickly - MalwareBytes.If I Embarrass My Baby on TikTok, Will He Stay My Baby Forever? - New York Times.They Gossiped At Brunch. Now There's a Mob After Them - Rolling Stone.The End of Privacy is a Taylor Swift Fan TikTok Account Armed with Facial Recognition Tech - 404 Media.Egg crack challenge,the last baby is so cute - YouTube.Trailer for “The Deepest Breath” - YouTube.“The Deepest Breath” - Netflix.Nitpick: Meaningless communications.Naked Security.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Device Trust for Okta. Watch the demo today!Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees...

tiktok media new york times mobile register farewell windows trailer privacy gdpr breach egg iso t mobile hipaa okta malwarebytes soc2 t mobile us bleeping computer graham cluley drata smashing security kolide kolide carole theriault paul ducklin naked security

41: How this SDR Hits 150% Quota with Security Buyer Personas (Prospecting Strategy) - Stone Gomez, Sales Development Representative (BDR) at Drata

Play Episode Listen Later Sep 6, 2023 34:41

3 things you'll learn in this episode: The different prospecting sequences used by Stone How he creates prospecting messaging How to prospect security personas Stone Gomez is Drata's top-performing Sales Development Representative (SDR). Stone's results: Crushed it with 150% in Q1. Did it again in June with 150%. And yep, hit 100% more than once. Connect with Stone: https://www.linkedin.com/in/stone-gomez-347b71135/ ---

strategy lessons thinking tips security stone hits buyers hyper gomez crushed sequence prospecting soc sdr quota buyer personas sdrs sales development representative drata

S3 E25 - Knowing When It's Time | Sydney Sloan - CMO @ Drata

The Marketing Movement | Ignite Your B2B Growth

Play Episode Listen Later Aug 31, 2023 44:16

Sidney Waterfall hosts today, joined by Sydney Sloan, CMO of Drata, to talk about timing in your career - how to know the right time to step away and finding the next right opportunity. She discusses her own experience of taking time off to recharge and reflect before starting her new role at Drata. Sydney also talks about her favorite stage of growth and the importance of finding a company with a strong product-market fit. She emphasizes the need for balance in life and the value of building relationships and connections. Sydney shares her approach to measuring the impact of marketing and the importance of focusing on revenue and efficiency. She also discusses the changing landscape of marketing, including the role of AI and the need for digital sophistication.

ai cmo drata

#138: Elliot Volkman- The Impact of Positive Personal Branding

MKG Marketing

Play Episode Listen Later Aug 28, 2023 54:37

Join us for an enlightening conversation with Elliot Volkman, Director of Brand, Content, and Community at Drata, as we uncover the impactful combination of personal branding, positivity, and kindness in advancing your company's mission.

director community brand positive personal branding drata

Fortinet tops vuln list, malicious Chrome Rilite, more Ivanti issues

Play Episode Listen Later Aug 4, 2023 8:27

Fortinet VPN bug tops CISA's list of most exploited vulnerabilities in 2022 Chrome malware Rilide targets enterprise users via PowerPoint guides Researchers discover bypass for recently fixed Ivanti EPMM vulnerability Thanks to today's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev. For the stories behind the headlines, head to CISOseries.com.

identity researchers powerpoint chrome tops blend figma malicious cisa vuln fortinet databricks ivanti drata ciso series

Week in Review: IDOR vulnerability warning, Israel refinery cyberattack, spies bemoan AI training

Play Episode Listen Later Aug 4, 2023 22:31

Link to Blog Post This week's Cyber Security Headlines – Week in Review, July 31-August 4, is hosted by Rich Stroffolino with guest, Jeff Hudesman, CISO, Pinwheel Thanks to our show sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit opal.dev.

israel identity vulnerability spies blend cyberattacks ciso refinery figma databricks ai training drata rich stroffolino

Australia considers WeChat ban, US company aiding APTs, Veilid coming to DEF CON

australia identity blend wechat considers defcon p2p figma aiding databricks us companies apts australian senate drata

Play Episode Listen Later Aug 3, 2023 6:40

Australian Senate recommends banning WeChat US company accused of aiding APT Hacking group to detail P2P protocol at DEF CON Thanks to today's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

Musk sues disinformation researchers, Cloud host found facilitating state-backed cyberattacks, UK spy agencies want to relax ‘burdensome' AI laws

Play Episode Listen Later Aug 2, 2023 7:52

Musk sues disinformation researchers for driving away advertisers Researchers claim cloud host facilitated state-backed cyberattacks UK spy agencies want to relax ‘burdensome' laws on AI data use Thanks to today's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev. For the stories behind the headlines, visit CISOseries.com.

ai uk identity elon musk laws cloud spies relax researchers backed disinformation blend agencies sues cyberattacks facilitating figma databricks burdensome drata ciso series

National plan for cyber education, DeFi code exploit, study on cyber insurance

identity study white house code blend defi exploit figma cyber insurance databricks national plan cyber education drata

Play Episode Listen Later Aug 1, 2023 6:23

White House releases National Cyber and Workforce Education Strategy Latest DeFi exploit sees millions in losses No link found between cyber insurance and paying ransoms Thanks to today's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev.

Israel refinery cyberattack, TSA pipeline guidelines, CISA's IDOR warning

Play Episode Listen Later Jul 31, 2023 8:33

Israel's largest oil refinery website offline amid cyber attack claims TSA renews cybersecurity guidelines for pipelines CISA AND Australia warn of IDOR vulnerabilities after major breaches Thanks to today's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev. For the stories behind the headlines, head to CISOseries.com.

israel identity guidelines pipeline tsa blend cyberattacks refinery figma cisa databricks drata ciso series

Thousands of Intelligence and Defense Employees Exposed, a Hacker Infects His Own Computer, Google Accuses Apple Employee of Not Reporting a Zero-day

Play Episode Listen Later Jul 27, 2023 87:20

This week on Hacker And The Fed new cyber security labels proposed by the US government could help us buy our new devices, an employee exposes thousands of intelligence and defense employees, Google may be restricting internet access to some employees to reduce their cyber attack risk, a hacker infects his own computer, and Google says an Apple employee found a zero-day but didn't report it, and we answer listener questions about our phones getting searched and email encryption. Links from the episode: White House teams with Amazon, Google and Qualcomm on cybersecurity labels for gadgets https://www.cnbc.com/2023/07/18/us-cyber-trust-labels-will-help-consumers-pick-safer-smart-devices.html Google exposes intelligence and defense employee names in VirusTotal leak https://therecord.media/virustotal-user-email-addresses-leaked-google-military-intelligence Google restricting internet access to some employees to reduce cyberattack risk https://www.cnbc.com/2023/07/18/google-restricting-internet-access-to-some-employees-for-security.html Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware https://www.securityweek.com/black-hat-hacker-exposes-real-identity-after-infecting-own-computer-with-malware/ IT Security Analyst Jailed for Impersonating as a Hacker in Own Company https://cybersecuritynews.com/it-security-analyst-jailed/ Google says Apple employee found a zero-day but did not report it https://techcrunch.com/2023/07/20/google-says-apple-employee-found-a-zero-day-but-did-not-report-it/ https://news.ycombinator.com/item?id=36803537 Microsoft Cybersecurity Analyst Professional Certificate https://www.coursera.org/professional-certificates/microsoft-cybersecurity-analyst Cybersecurity Expert Kevin David Mitnick died https://www.dignitymemorial.com/obituaries/las-vegas-nv/kevin-mitnick-11371668 Listener Questions: https://www.theverge.com/2021/8/18/22630439/apple-csam-neuralhash-collision-vulnerability-flaw-cryptography Support our sponsors: Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees Get your Hacker and the Fed merchandise at hackerandthefed.com

Scaling Sales and Qualifying Deals with Adam Aarons

Revenue Builders

Play Episode Listen Later Jul 27, 2023 61:45

Adam Aarons is a seasoned sales executive with extensive knowledge of the risk and compliance space. Adam is well known and admired for his time as the CRO of Okta, during which Okta grew from a $1M startup to a publicly traded $300M+ ARR category winner. Adam was previously an active advisor to Drata, and has now joined the company full time to drive revenue at scale as CRO.In this conversation with John McMahon, Adam discusses the keys to scaling a salesforce, including productivity per head, average deal size, and ramp times. He emphasizes the importance of understanding the ideal customer profile and where they are located. Adam also highlights the critical role of qualification in the sales process, focusing on the ICE framework (Identify pain, Champion, Economic buyer). He stresses the need for continuous discovery and the importance of establishing decision criteria. Adam shares insights on forecasting, metrics, and the value of customer success in reducing churn and driving revenue. He also discusses the challenges and lessons learned when transitioning from a sales rep to a manager, VP, and CRO on this episode of Revenue Builders.HERE ARE SOME KEY SECTIONS TO CHECK OUT:[0:00:42] Introduction to Drata and its automation of compliance data collection[0:49:52] Using an automation platform to coordinate customer outreach and marketing campaigns[0:55:18] The need for effective communication and expectation setting between managers[1:00:55] The importance of coaching for young CROsHIGHLIGHT QUOTES[0:57:08] "Having respect and empathy for people that haven't done it before, that you're working with to make sure that they understand the why versus just saying, hey. Trust me, let me go do my job like I know what I'm doing.”[0:52:03] "If you're a leader and you're doing this work, it's hard work. You should expect it to be hard. You should enjoy the grind and enjoy the challenges because you learn so much in these jobs that even with the things that you and I have talked about, there's so much more depth that you could dive down into."Learn more about Adam through this link:LinkedIn: https://www.linkedin.com/in/adam-aarons-438111/Check out John McMahon's book here: https://www.amazon.com/Qualified-Sales-Leader-Proven-Lessons/dp/0578895064

Boris Johnson's WhatsApps, and sextorting party girls

Play Episode Listen Later Jul 20, 2023 36:04

Former Prime Minister Boris Johnson wants to hand over his WhatsApp messages - or does he? And a couple of fun-loving girls from Aberdeen have come up with a sinister twist on sextortion scams.All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley (from a mystery location) and Carole Theriault.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:The UK Covid-19 Inquiry.Court orders ministers to hand Boris Johnson's WhatsApps to Covid inquiry - The Guardian.Boris Johnson ‘has forgotten' passcode for phone wanted by Covid inquiry - The Guardian.The Lockdown Files: Matt Hancock rejected expert advice on care home testing, WhatsApp messages reveal - The Telegraph.Boris Johnson's Personal Phone Number Has Been Hiding in Plain Sight Online For 15 Years - Vice.Party girls netted £120,000 from terrified men in ‘sextortion' scam -The Times.Exclusive: Women posed as underage girls to blackmail men out of nearly £122000 -Press and Journal.Musicless music video of Lionel Richie's “Hello” - YouTube.Musicless music video of Rolling Stones performing live in 1964 - YouTube.Intrigue: Burning Sun - BBC podcast.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Device Trust for Okta. Watch the demo today!Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via

covid-19 girls journal court press whatsapp guardian rolling stones boris johnson gdpr inquiry iso telegraph aberdeen hipaa lionel richie podchaser okta uk covid soc2 graham cluley drata smashing security carole theriault kolide kolide

The Dangers of Googling Phone Numbers, an Attack on a Security Platform, and Typo Squatting on US Military Domains

Play Episode Listen Later Jul 20, 2023 83:24

This week on Hacker And The Fed you can't always count on Google for the right telephone number for an airline, an American cloud based directory as a service platform announces that they were hacked by a state sponsored threat actor, millions of US military emails may be ending up in the wrong hands, a new ransomware looks like a windows update, we answer listener questions, and Hector tells a fascinating story about a hacking methodology. Links from the episode: Airline Fake Contact Number on Google Maps https://twitter.com/Shmuli/status/1680669938468499458 https://twitter.com/SwiftOnSecurity/status/1680926780599812098 JumpCloud discloses breach by state-backed APT hacking group https://www.bleepingcomputer.com/news/security/jumpcloud-discloses-breach-by-state-backed-apt-hacking-group/ JumpClouds IOCs - https://jumpcloud.com/support/july-2023-iocs Domains like army․ml, pentagon․ml, navy․ml and af․ml all have Mail Exchange records pointing to 'handle․catchemail․ml' https://twitter.com/mikko/status/1680947795862200325 Watch out for this new malicious ransomware disguised as Windows updates https://www.foxnews.com/tech/watch-out-new-malicious-ransomware-disguised-windows-updates https://www.trendmicro.com/en_id/research/23/g/tailing-big-head-ransomware-variants-tactics-and-impact.html Listener Questions https://www.lsu.edu/mediacenter/news/2023/06/13-cyber-clinic.php Support our sponsors: Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees Get your Hacker and the Fed merchandise at hackerandthefed.com

american google attack security platform dangers windows hackers fed us military googling phone numbers domains apt squatting jumpcloud drata swiftonsecurity

USB malware spikes, Honeywell, Rockwell vulnerabilities, ransomware remains profitable

Play Episode Listen Later Jul 14, 2023 8:45

USB drive malware attacks spiking again in first half of 2023 Users of Honeywell Experion DCS platforms urged to patch 9 vulnerabilities immediately Ransomware gangs have extorted $449 million this year Thanks to this week's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. For the stories behind the headlines, head to CISOseries.com.

identity profitable remains users usb blend ransomware malware spikes rockwell vulnerabilities honeywell figma databricks drata ciso series

Week in Review: Threat actors access government email, USB drive attacks spiking, cloud environment breaches

Play Episode Listen Later Jul 14, 2023 27:10

Link to Blog Post This week's Cyber Security Headlines – Week in Review, July 10-14, is hosted by Sean Kelly with our guest, Yaron Levi, CISO, Dolby Thanks to our show sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. Visit Opal.dev. All links and the video of this episode can be found on CISO Series.com

identity government drive environment threats cloud attacks blend ciso figma breaches spiking sean kelly databricks drata actors access ciso series

Deepfake Martin Lewis, and a deadly jog in the park

Play Episode Listen Later Jul 13, 2023 39:51

Going for a jog can be bad for your privacy (but even worse for your health), and Britain's consumer finance champion finds his face is being faked.All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Russian commander shot dead after posting runs on Strava running app - Kyiv Post.Martin Lewis felt 'sick' seeing deepfake scam ad on Facebook - BBC News.How synthetic media, or deepfakes, could soon change our worldeing deepfake scam ad on Facebook - 60 Minutes on YouTube.Nicki Minaj wants to delete the “whole internet” after viral AI deepfake video -Technology Inquirer.Fears grow of deepfake ID scams following Progress hack - Ars Technica.“Deep Fake Neighbour Wars”: ITV's comedy shows how AI can transform popular culture -The Conversation.”My Old School” - BBC Scotland.”My Old School” trailer - YouTube.MP doesn't know whether she attended Downing St Party - YouTube.”Non-Censored” with Rosie Holt podcast - Audioboom.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Kolide - Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Device Trust for Okta. Watch the demo today!Sysdig - Is your cloud secure? Not without runtime insights! Sysdig delivers the industry's ONLY complete, consolidated Cloud-Native Application Protection Platform (CNAPP) - powered by runtime insights - to prioritize critical risks and stay ahead of unknown threats. Learn how runtime insights reduces fatigue so developers can focus on delivering software and your security teams can focus on other demands.Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on

fear conversations ai russian progress park britain id deadly nicki minaj mp gdpr deepfakes iso strava hipaa okta ars technica audioboom martin lewis sysdig soc2 rosie holt my old school graham cluley drata smashing security carole theriault kolide kolide

Are Your Lightbulbs a Security Risk? Voice Authentication May be Broken, and Logistics Security

google voice japan microsoft risk security raising fed logistics trinidad tobago authentication cybercriminals nagoya light bulbs google authenticator drata

Play Episode Listen Later Jul 13, 2023 71:11

This week on Hacker And The Fed your lightbulbs may be giving away the location of your house, could Microsoft end ransomware right now? Also, voice authentication may be broken, the latest ransomware attack shows us the important of logistics security, convenience has once again jeopardized Google authenticator security, and a listener shares a wild car theft story. Links from the episode: Your lightbulbs may be giving out your exact location twitter.com/haxrob/status/1676416949499338752 Microsoft Can Fix Ransomware Tomorrow darkreading.com/vulnerabilities-threats/microsoft-can-fix-ransomware-tomorrow Cybercriminals can break voice authentication with 99% success rate helpnetsecurity.com/2023/07/06/voice-authentication-insecurity/ INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime thehackernews.com/2023/07/interpol-nabs-hacking-crew-opera1ers.html Japan's biggest port, Nagoya, hit by suspected cyberattack asia.nikkei.com/Business/Technology/Japan-s-biggest-port-Nagoya-hit-by-suspected-cyberattack Raising concerns over Google Authenticator's new features techradar.com/pro/raising-concerns-over-google-authenticators-new-features Trinidad and Tobago facing outages after cyberattack therecord.media/trinidad-tobago-hit-with-cyberattack Listener Questions ksltv.com/563455/police-release-images-of-suspect-who-broke-into-familys-car-at-airport-then-their-home/ Support our sponsors: Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees

NATO cyber pledges, tax prep data shared, a decrease in crypto crime

Play Episode Listen Later Jul 13, 2023 6:52

What we know about NATO cyber pledges Tax prep companies “recklessly” shared data Report finds decrease in crypto crime Thanks to this week's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

identity data crime crypto nato shared cyber tax blend decrease pledges figma databricks tax prep drata

Silk Road advisor sentenced, HCA Health data breach, Google hit with AI tool training lawsuit

Play Episode Listen Later Jul 12, 2023 9:43

Silk Road's senior advisor sentenced to 20 years in prison 11 million HCA patients impacted by data breach Google hit with lawsuit alleging it stole user data to train its AI tools Thanks to this week's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. For the stories behind the headlines, visit CISOseries.com.

google ai training identity tool lawsuit advisor blend sentenced silk road data breach figma health data databricks ai tool hca drata ciso series

JumpCloud resets API keys, Genesis Market for sale, an EU-US data transfer agreement

Play Episode Listen Later Jul 11, 2023 6:57

JumpCloud resets customer API keys Would you be interested in a slightly used dark web market? US and EU agree on new data transfer agreement Thanks to this week's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale.

identity european union market keys sale agreement api blend figma resets databricks eu us data transfer jumpcloud drata genesis market

BigHead Windows ransomware, RedEnergy targets utilities. more MOVEIt problems

Play Episode Listen Later Jul 10, 2023 7:43

New ‘Big Head' ransomware displays fake Windows update alert RedEnergy stealer-as-a-ransomware threat targeting energy and telecom sectors Three new MOVEit bugs spur CISA warning as more victims report breaches Thanks to this week's episode sponsor, Opal Opal is the data-centric identity platform. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower enterprises to understand and calibrate access end to end. The best security teams from companies like Databricks, Figma, Blend, and Drata use Opal to build identity security for scale. For the stories behind the headlines, head to CISOseries.com.

identity windows targets blend ransomware utilities figma cisa databricks big head move it drata ciso series

Your Car's Data Might Be For Sale, a New Malware Payload Vector Using DNS, and Listener Questions

Play Episode Listen Later Jul 6, 2023 79:28

This week on Hacker And The Fed your car may be collecting up to 25 GB per hour of data about you and a new malware payload vector is using DNS, what is “encryptionless ransomware”. We also answer listener questions about a variety of topics, including how to prepare for a cybersecurity career in the US government, banking security, and hack-backs. Links from the episode: How Your New Car Tracks You https://www.wired.com/story/car-data-privacy-toyota-honda-ford/ DNS TXT Records Can Be Used by Hackers to Execute Malware https://cybersecuritynews.com/dns-txt-records-to-execute-malware/?amp Encryption-less ransomware: Warning issued over emerging attack method for threat actors https://www.itpro.com/security/ransomware/encryption-less-ransomware-warning-issued-over-emerging-attack-method-for-threat-actors Support our sponsors: Go to JoinDeleteMe.com/FED and use the code FED20 for 20% off Go to drata.com/partner/hacker-fed and get 10% off Drata and waived implementation fees

data sale hackers fed listener questions gb malware dns vector payload drata

Mark's metaverse for minors, and getting down to business

europe co founders executives lessons learned latin america unicorns helped saas relevant expand malone evernote global markets weebly wall street journal best selling all turtles drata

Play Episode Listen Later Jun 22, 2023 37:10

There's some funny business going on on Google, and Zuckerberg's $14 billion bet on the metaverse is beginning to look a little childish...All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Google sues alleged scammer over fake business and review scheme - The Verge.Meta to Lower Age for Users of Virtual Reality Headset to 10 From 13 - New York Times.Introducing New Parent-Managed Meta Accounts for Families - Meta Blog.Keep Connected - ages 10–14 - Keep Connected.The Metaverse Police: A VR content moderator shares his insights - Mixed News.“Untold: The Girlfriend Who Didn't Exist” - Netflix.Tommy Siegel - Some candy hearts comics I drew, a thread - Twitter.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Zero Trust for Okta. Watch a demo today!Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the

google new york times mark zuckerberg metaverse users verge gdpr iso mastodon minors hipaa podchaser zero trust okta getting down bitwarden soc2 graham cluley drata smashing security carole theriault kolide kolide

134: Deviant

Darknet Diaries

Play Episode Listen Later Jun 6, 2023 89:18

Deviant Ollam is a physical penetration specialist. That means he's paid to break into buildings to see if the building is secure or not. He has done this for a long time and has a lot of tricks up his sleeve to get into buidings. In this episode we hear 3 stories of him breaking into buildings for a living. You can find more about Deviant on the following sites: https://twitter.com/deviantollam https://www.instagram.com/deviantollam https://youtube.com/deviantollam https://defcon.social/@deviantollam https://deviating.net/ Sponsors Support for this show comes from ThreatLocker. ThreatLocker has built-in endpoint security solutions that strengthens you're infrastructure from the ground up with a zero trust posture. ThreatLocker's allow-listing give you a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker provices zero trust control at the kernel level. Learn more at www.threatlocker.com. This show is sponsored by Packetlabs. They've created the Penetration Testing Buyer's guide - a comprehensive resource that will help you plan, scope, and execute your Penetration Testing projects. Inside, you'll find valuable information on frameworks, standards, methodologies, cost factors, reporting options, and what to look for in a provider. https://guide.packetlabs.net/. Support for this show comes from Drata. Drata streamlines your SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR & many other compliance frameworks, and provides 24-hour continuous control monitoring so you focus on scaling securely. Listeners of Darknet Diaries can get 10% off Drata and waived implementation fees at drata.com/darknetdiaries. Learn more about your ad choices. Visit podcastchoices.com/adchoices

gdpr iso hipaa soc deviants penetration testing pci dss darknet diaries threatlocker drata deviant ollam

Lessons Learned from Executive Who Helped Expand 4 Unicorns to Global Markets | Troy Malone, Co-Founder of Relevant

Global Class Podcast

Play Episode Listen Later Apr 24, 2023 58:58

In this episode, we are excited to welcome Troy Malone, the Co-Founder of Relevant, a company that helps SaaS startup founders successfully enter new markets. In this role, he supports founders in unlocking an unfair competitive advantage in new markets through a uniquely profitable marketing system. Throughout his 15-year career as a growth and scale-up business leader, Troy has helped companies like Evernote, Weebly, All-Turtles, mmhmm and Drata to scale internationally. He loves the challenge of building teams for hyper-growth. Troy also embodies the global mindset and cultural empathy of a true “interpreneur,” as proven by his successful expansion efforts to Europe, Latin America, and Asia. Here, we discuss how to hire the right people who will lead your global growth initiatives, the importance of going on “Localization Discovery Tours” to truly understand a market, and examples of unusual marketing and promotions campaigns Troy came up with that drove results in new markets. Get your copy of our Wall Street Journal Bestselling book, GLOBAL CLASS, a playbook on how to build a successful global business. https://www.amazon.com/Global-Class-Fastest-Growing-Companies-Globally/dp/1637742185 This episode is sponsored by our partner, ZEDRA. Learn more about how the ZEDRA team can support you in expanding to new markets at https://www.zedra.com Find our entire podcast episode library at https://www.globalclassbook.com/podcast

Listener Questions: How To Protect Your Kids Online, Advanced Personal Cybersecurity, And What A “Red Team” Is

internet personal fbi cybersecurity hackers fed listener questions betterhelp red team kids online protect your kids drata

Play Episode Listen Later Mar 23, 2023 65:36

This week on Hacker And The Fed we catch up on some questions from our listeners: we discuss what a red teamer does, how the FBI works with other law enforcement agencies, how to upgrade your personal cyber security once you've got the basics down, and protecting children on the Internet. Support this episode's sponsors: Drata: Listeners of Hacker and the Fed can get 10% off Drata and waived implementation fees at drata.com/partner/hacker-fed BetterHelp: Hacker and the Fed is sponsored by BetterHelp. Visit BetterHelp.com/HATF today to get 10% off your first month. -- For more information on Chris and his current work visit naxo.com Follow Hector @hxmonsegur

Reliable RevOps Partnerships look like this

The Run Revenue Show

Play Episode Listen Later Mar 20, 2023 33:56

Being a successful CRO isn't just about setting goals for the sales team and driving revenue. It's about having the right data and processes in place so that your sellers can collaborate and run revenue. This is where partnering with the revenue operations team comes in to save the day. On this episode of The Run Revenue Show, Adam Aarons, CRO at Drata, shares how he partnered with RevOps to gain a better understanding of what was happening within the business, identify areas of improvement, and make data driven decisions. You'll gain insight on why this is a crucial move and how it ultimately builds a culture of trust and collaboration. Here's what's inside: Focus on relationships + data: The best way to build both of these muscles? Adam says trust, transparency, and collaboration. Audit your processes: Is your team actually adhering to your processes? Does anyone need a refresher? This week, take time to ensure everyone is on the same page. Adam says it's how you'll strike revenue gold. Clean up your data: Make a plan to clean up your data this week. Identify where your bad data lives, before it's too late. Adam says bad data is your biggest revenue killer. Grab this week's Checklist Check out RunRevenue.Pro for tips, playbooks, and advice for stopping revenue leak and achieving revenue precision. See how Clari's Revenue Platform can help you win more deals, protect your customer base, and achieve revenue precision—even in a downturn. → Clari.com

focus partnership identify audit reliable cro revops drata

Tesla twins and deepfake dramas

Play Episode Listen Later Mar 16, 2023 37:30

The twisted tale of the two Teslas, and a deepfake sandwich.All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:B.C. man says he accidentally unlocked and drove someone else's Tesla using the app - Global News.A College Girl Found Deepfake Porn of Herself Online. Who Did It Shocked Her - Rolling Stone.Denmark Tries to Attract Tourists Using ChatGPT, Deepfakes, and Famous Paintings UK PC Mag.Deepfake Tools Are Made To Facilitate Harassment—So Why Are They Available in the App Store? - MSN.Spot the Deepfake - Microsoft.Sholay trailer - YouTube.Sholay: Review of the monumental Indian epic - YouTube.Rent or buy Sholay - YouTube Movies.Jazz Pianist Brad Mehldau Plays The Beatles - NPR.Brad Mehldau - Brad Mehldau website.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Zero Trust for Okta. Watch a demo today!Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.Support the show:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via

indian tesla spot rent twins app store gdpr deepfakes iso msn hipaa dramas podchaser global news zero trust okta bitwarden soc2 sholay graham cluley drata smashing security carole theriault kolide kolide

Super grannies, bar trolls, and US Marshals

Play Episode Listen Later Mar 9, 2023 62:08

Scammers get pwned by a Canadian granny! Don't be seduced in a bar by an iPhone thief! And will the US Marshals be able to track down the villains who stole their data?All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.Plus don't miss our featured interview with Jason Meller of Kolide.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:They thought they could scam this Windsor grandmother of nearly $10K. She turned the tables on them - CBC.Canada grandma helps stop fraud scheme targeting senior citizens - BBC News.A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life - Wall Street Journal.Ransomware attack on US Marshals Service affects ‘law enforcement sensitive information' - CNN.Hackers steal sensitive law enforcement data in a breach of the U.S. Marshals Service - NPR.9 millionaires and billionaires with the most bizarre spending habits - Business Insider.Phishing still the leading way attackers breach security controls: IBM - IT World Canada.New White House cyber strategy picks a fight with ransomware - AXIOS. Happy Valley - BBC.My 80s TV.Everything Everywhere All at Once - IMDB.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Zero Trust for Okta. Watch a demo today!Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a...

tv canada canadian iphone cnn hackers trolls business insider cbc gdpr scammers 10k windsor iso ransomware phishing bbc news hipaa axios everything everywhere all zero trust okta grannies us marshals bitwarden soc2 graham cluley drata smashing security carole theriault kolide kolide anna brading

A Leaked Ransomware Negotiation, Twitter Security, And NSA Best Practices For Securing Your Home Network

network security negotiation best practices securing leaked nsa ransomware drata

Play Episode Listen Later Mar 2, 2023 46:16

This week on Hacker And Fed we discuss a leaked ransomware negotiation, how Twitter's new verification system may improve security, and the NSA releases its best practices for securing your home network. Support this episode's sponsor, Drata. For 10% off and waived implementation fees visit drata.com/partner/hacker-fed. Links from the episode: pwndefend.com/2023/02/15/lockbit-3-0-and-royal-mail-chats-published/ dice.com/career-advice/cybercriminals-increase-recruiting-tech-and-it-pros-across-the-darknet gizmodo.com/facebook-instagram-verified-elon-musk-was-right-twitter-1850139933 media.defense.gov/2023/Feb/22/2003165170/-1/-1/0/CSI_BEST_PRACTICES_FOR_SECURING_YOUR_HOME_NETWORK.PDF -- For more information on Chris and his current work visit naxo.com Follow Hector @hxmonsegur

193: Stair-Stepping with Plugins: Platforms to Build On

The Bootstrapped Founder

Play Episode Listen Later Feb 24, 2023 14:07

Stair-stepping into software entrepreneurship is a great way for developers to start their own businesses without taking on massive risks. Building a plugin on an established platform allows developers to leverage existing user bases and traffic to grow their business quickly, while also being aware of the risks associated with platform dependency, profit-sharing, and limited flexibility.My interview with Collen Schnettler: https://www.youtube.com/watch?v=PpcYTO5x3cYRob Walling's Stair-Stepping: https://robwalling.com/2015/03/26/the-stair-step-method-of-bootstrapping/Preetham Nath: https://www.preetamnath.com/blog/grow-shopify-micro-saas-to-25k-mrr-in-14-monthsThe blog post: https://thebootstrappedfounder.com/stair-stepping-with-plugins-platforms-to-build-on/The podcast episode: https://share.transistor.fm/s/51643e63The video: https://www.youtube.com/watch?v=PjOHqn4PJZMYou'll find my weekly article on my blog: https://thebootstrappedfounder.comPodcast: https://thebootstrappedfounder.com/podcastNewsletter: https://thebootstrappedfounder.com/newsletterMy book Zero to Sold: https://zerotosold.com/My book The Embedded Entrepreneur: https://embeddedentrepreneur.com/My course Find your Following: https://findyourfollowing.comFind me on Twitter: https://twitter.com/arvidkahl/This episode is sponsored by Drata.

founders building entrepreneurship stepping sold saas platforms bootstrapping plugins stair audience building monthsthe build in public arvid kahl drata embedded entrepreneur

191: Writing for Founders

The Bootstrapped Founder

Play Episode Listen Later Feb 17, 2023 11:37

Arvid shares what writing can bring to the founder table.Self-funded entrepreneurs can benefit from honing their writing skills, as it can be used to communicate ideas and thoughts clearly, attract attention, foster relationships, and build a personal brand. The blog post: https://thebootstrappedfounder.com/writing-for-founders/The podcast episode: https://share.transistor.fm/s/735924e4The video: https://youtu.be/1R5scFwM5XwYou'll find my weekly article on my blog: https://thebootstrappedfounder.comPodcast: https://thebootstrappedfounder.com/podcastNewsletter: https://thebootstrappedfounder.com/newsletterMy book Zero to Sold: https://zerotosold.com/My book The Embedded Entrepreneur: https://embeddedentrepreneur.com/My course Find your Following: https://findyourfollowing.comFind me on Twitter: https://twitter.com/arvidkahl/This episode is sponsored by Drata.

founders writing entrepreneurship sold saas bootstrapping arvid audience building build in public arvid kahl drata embedded entrepreneur

187: Negative Reviews are Good for You

The Bootstrapped Founder

Play Episode Listen Later Feb 3, 2023 7:15

Negative reviews are an important part of the customer experience, as they provide valuable feedback to creators about how their product or service is being perceived. Reviews can be a source of frustration for founders, as they may not reflect the quality of the work, but rather the disconnect between the customer's expectation and the reality of the product. It is important for creators to stay mindful of how they position their products in the marketplace and ensure that their messaging aligns with the customer's experience.00:00:00 Negative Reviews00:01:11 Reality vs Expectation00:02:43 Positioning ErrorsThe blog post: https://thebootstrappedfounder.com/negative-reviews-are-good-for-you/The podcast episode: https://share.transistor.fm/s/46b3421dThe video: https://www.youtube.com/watch?v=fulkEU1JAVUYou'll find my weekly article on my blog: https://thebootstrappedfounder.comPodcast: https://thebootstrappedfounder.com/podcastNewsletter: https://thebootstrappedfounder.com/newsletterMy book Zero to Sold: https://zerotosold.com/My book The Embedded Entrepreneur: https://embeddedentrepreneur.com/My course Find your Following: https://findyourfollowing.comFind me on Twitter: https://twitter.com/arvidkahl/This episode is sponsored by Drata.

founders reality entrepreneurship negative sold saas bootstrapping audience building build in public arvid kahl drata embedded entrepreneur

EP 24. 【年末专题2】2022：SaaS 的冰火两重天，三位投资人的年终拷问

OnBoard!

Play Episode Listen Later Jan 11, 2023 125:45

这次是我们2022年末专题的第二期。2022年对全球和中国企业服务市场，尤其是软件行业投资人，可谓是非常百感交集的一年。2022年3月，Onboard! 第一期的主题是回顾 2021 年的美国 SaaS IPO，那个时候真是市场一片红红火火。但是到了2022年的风云突变，让大家有冰火两重天的感觉。 Hello World, welcome Onboard! 在这个有点特殊的年末，我们邀请来一位投资人朋友，XVC的合伙人Leo，加入我们的对谈。Leo 在中美都有丰富的投资的经历。经历了这几年市场的剧变，放慢脚步后，我们反而有了更多的时间，静下心来，跟海外和本土的优秀SaaS公司有了更平和，更深度的交流。这次的市场回调，让从业者、投资人都回归本质，重新思考软件生意本身，中美的差异，还有未来发展方向。在市场的高高低低中，我们试图在噪音中沉淀思考，寻找变与不变的底层逻辑。这次的话题，切合实际又略有挑战（好多灵魂拷问啊！），希望能给各位启发，思考，和信心！最后，2022年是 Onboard! 的元年。前两天小宇宙的年度回顾，让两位主播对开播10个月以来的小成绩，充满欣喜，更是无限感恩。非常感谢7000多位粉丝的支持，以及每期在节目里的评论和建议的听众朋友。新的一年，OnBoard! 继续陪伴你~ 对谈阵容 Monica: Onboard! 主播，经纬创投投资人，前 AWS ML 硅谷团队打工人。 GN: Onboard! 主播，前 SaaS 投资人，公众号“我思锅我在”主理人。嘉宾 Leo Lu: XVC 合伙人，前蓝湖资本投资人我们聊了什么 02:08 嘉宾介绍 04:15 2022年美国SaaS二级市场发生了什么变化？ 07:59 二级市场的动荡对于一级市场有什么影响？ 12:26 SaaS公司还是一个抗周期的行业吗？ 16:38 Salesforce是否遇到了困境？ 19:12 又有哪些细分领域在下跌中受影响较小？ 24:07 但是在美国，SaaS一级市场相对依旧活跃；寒冬中仍然有亮点 33:04 电商SaaS在宏观环境的冲击下还有机会吗？ 35:24 Leo如何看待国内尤其企业服务公司出海的机会？ 38:22 为什么现在大家开始重视全球化的机会？ 43:12 中国软件团队做全球化SaaS主要遇到的挑战。 53:15 以科杰数据为例，投资做国内市场的SaaS公司与投出海SaaS有什么不同？ 59:19 整体来看，美元基金如今投资SaaS发生了什么变化？ 68:49 “PLG”热度退却了吗？在中国做PLG是伪命题吗？ 79:21 什么是中国式SaaS公司？有哪些不错的本土实践？ 84:49 新常态下，如何看待中国SaaS的市场空间和估值逻辑？ 94:05 未来大家会继续关注SaaS里哪些新机会？ 108:52 快问快答：推荐的书，产生变化的观点等等 121:25 彩蛋：主播和嘉宾2023年的小目标和小心愿！我们提到的公司科杰科技 API Fox Weee! WasmEdge Alteryx Gitlab Bill.com Agora Zoom UiPath Wix Shopify Klaviyo Salesforce Snowflake Datadog Hashicorp Confluent Splunk Crowdstrike 合规SaaS：Vanta, Drata, Secureframe, Safebase, Laika Snyk Tiktok Aftership 店小秘拼多多及Temu Airwallex Xtransfer Pingcap Databricks 蓝湖设计稿定设计即时设计创客贴小鹅通 ONES 凌迪科技金山办公 UserTesting UserZoom EMQ AIGC相关公司：Jasper.ai, Lensa, Grammarly 我们推荐的书《若干重大决策与事件的回顾》：book.douban.com 《中国出口之谜》：book.douban.com 《我曾走在崩溃的边缘》：book.douban.com 《创业的国度：以色列经济奇迹的启示》：book.douban.com 别忘了！同步关注两位 Host 的微信公众号，看更多干货内容哦： M小姐研习录 (ID: MissMStudy) by Monica 我思锅我在 (ID: thinkxcloud) by GN 大家的点赞、评论、转发是对我们最好的鼓励！希望你分享给对这个话题感兴趣的朋友哦~ 如果你有希望我们聊的话题，希望我们邀请的访谈嘉宾，都欢迎在留言中告诉我们哦！

saas salesforce hello world onboard grammarly gn drata secureframe

Troy Fine on Data Security Standards Audits [Podcast]

Compliance Perspectives

Play Episode Listen Later Dec 13, 2022 14:55

By Adam Turteltaub With enhanced concerns and vigilance over cybersecurity has come an increasing number of yardsticks that organizations much measure themselves against. As Troy Fine, Director, Risk and Compliance at Drata explains, in addition to legal requirements such as the European General Data Protection Regulation (GDPR), HIPAA and the California Consumer Privacy Act (CCPA) two key standards have emerged: SOC2: This standard was developed by the accounting body ISACA and is primarily of import to US-based technology companies and startups. Audits are performed by CPA firms on internal controls related to security ISO27001: More popular in Europe, it is a certification on information security management systems, examining how risks are identified and mediated and what control plans are in place To prepare for an audit he recommends first getting a good understanding of the relevant standard so you understand all the elements it requires and what it will take to meet those requirements. Next determine when you will need the certification in hand and start building a timeline backwards to determine when you need to start. Calculate, too, what it will cost in terms of time, people and everything else, including the price of the audit. How you work with the auditor will depend largely on which audit you pursue. He explains that SOC2 audits allow for more consultation than ISO27001 does. When hiring an auditor, it can be tempting to use the one with the lowest price. He recommends, though, being careful before going down that route since the auditor is likely to have less time to give. Be sure also to ensure that the auditor has the necessary expertise to be able to evaluate your technology. Some may not be as well versed on various elements, including cloud services, as they should. Once the audit begins, compliance teams can be helpful by ensuring that all the data and people the auditor needs are available. And, he advises, be transparent, even about your gaps. Listen in to learn more about having a successful data security standard audit.

director europe risk standards cpa compliance hipaa audits calculate data security isaca california consumer privacy act ccpa soc2 iso27001 drata

5 Minute Pre-IPO Stock Update - News - Week of Dec 09, 2022 | E12

This Week in Pre-IPO Stocks

Play Episode Listen Later Dec 12, 2022 4:27

Pre-IPO news for the week of Dec 09, 2022.Large pre-IPO company news;- Checkout.com (www.checkout.com) strikes product partnership with British retail giant Sainsbury.- Instacart (www.instacart.com) launched FSA and HSA product search feature.- Databricks (www.databricks.com) gets approval to sell US government agencies.- Getir (www.getir.com) buys Gorillas (www.gorillas.io) in all stock deal.Capital raise highlights for the week;- Drata (www.drata.com), a compliance technology company, raised a $200m Series C at a $2.0b valuation; a 96% increase from its $1.0b valuation Series B in Nov 2021, 14 months ago.- Runway (www.runwayml.com), an AI graphic design and video company, raised a $50m Series C at a $500m valuation; a 150% increase from its $200m valuation Series B in Dec 2021, 13 months ago. Aaron Dillon is the general partner of the AG Dillon Pre-IPO Equity Venture Capital Fund. AG Dillon & Co is a venture capital asset manager and publisher of the AG Dillon Pre-IPO Indexes.

ai british capital large stock ipo checkout newsweek runway instacart gorillas series b hsa sainsbury fsa series c databricks getir pre ipo drata

Episode 390: It's just a bunch of programming

Software Defined Talk

Play Episode Listen Later Dec 9, 2022 66:19

This week we discuss Werner's AWS Keynote, Event-Based Architectures and the potential of ChatGPT. Plus, some thoughts on International Condiments. Watch the YouTube Live Recording of Episode 390 (https://www.youtube.com/watch?v=CRy69wGMROM) Runner-up Titles It's never stopped us before. Ranch dressing divine/Before the Big Bang, it was/Eternal condiment Three kinds of mayonnaise An aspirational architectural pattern. There's not a lot of architectural thought out there. I don't have a computer science degree. Mid-Code It's just a bunch of programming, how hard could it be? Is it a utopian Wall-E or not? Rundown AWS re:Invent 2022 - Keynote with Dr. Werner Vogels (https://www.youtube.com/watch?v=RfvL_423a-I) Amazon announces Eventbridge Pipes, a simpler way to connect events (https://techcrunch.com/2022/12/01/amazon-announces-eventbridge-pipes-a-simpler-way-to-connect-events-from-multiple-services/) Design Patterns (https://www.amazon.com/gp/product/0201633612/) book ChatGPT: Optimizing Language Models for Dialogue (https://openai.com/blog/chatgpt/) ChatGPT will replace StackOverflow? (https://twitter.com/anildash/status/1599655544486187009) Automating bullshit - OpenAI ChatGPT removes office worker toil (https://buttondown.email/cote/archive/automating-bullshit-openai-chatgpt-removes-office/) Coté doesn't need to write those survey analysis blogs anymore (https://beta.openai.com/playground/p/w2tNHzzV7DXsz63ZWQfKGpD4?model=text-davinci-003). Relevant to your Interests Elastic Earnings (https://twitter.com/jaminball/status/1598068640137428992?s=46&t=eFF6wBlhOCFaLPPQf7nSLQ) Snowflake Earnings (https://twitter.com/jaminball/status/1598348082839977984?s=20&t=3ZTOl6JnPJu8vtcP7YUC4Q) IBM and Maersk Abandon Ship on TradeLens Logistics Blockchain (https://www.coindesk.com/business/2022/11/30/ibm-and-maersk-abandon-ship-on-tradelens-logistics-blockchain/) OpenStack cloud sees explosive growth (https://www.zdnet.com/article/openstack-cloud-sees-explosive-growth/) Amazon EC2 Instance Types - Amazon Web Services (https://aws.amazon.com/ec2/instance-types/?trk=3478554f-e06b-44d5-8171-41d0ea80c8c9&sc_channel=ps&s_kwcid=AL!4422!3!544066093425!p!!g!!graviton%20processor&ef_id=Cj0KCQiAvqGcBhCJARIsAFQ5ke48NKL5fH2ETDPdMavKJxSfxS6luQdG2ZGGW51UzVtV8ev8GSxc2ucaAqoCEALw_wcB:G:s&s_kwcid=AL!4422!3!544066093425!p!!g!!graviton%20processor) HYPR, the Leader in Phishing-Resistant MFA, Raises $25M (https://blog.hypr.com/press-releases/hypr-the-leader-in-phishing-resistant-mfa-raises-25m?_ga=2.20718968.1905140386.1669908801-1738015730.1669908801) Future is quietly shutting down (https://twitter.com/robaeprice/status/1598393044503502860) Andreessen Horowitz's buzzy tech publication Future is shutting down (https://www.businessinsider.com/a16z-future-closes-staff-exit-2022-11?international=true&r=US&IR=T) AWS launches Application Composer, a low-code tool for building serverless apps (https://techcrunch.com/2022/12/01/aws-launches-application-composer-a-low-code-tool-for-building-serverless-apps/) No one seemed to see Bret Taylor stepping away from Salesforce (even Marc Benioff) (https://techcrunch.com/2022/12/01/no-one-seemed-to-see-bret-taylor-stepping-away-from-salesforce-even-marc-benioff/) Major password manager LastPass suffered a breach — again (https://www.npr.org/2022/12/01/1140076375/major-password-manager-lastpass-suffered-a-breach-again) Here's everything AWS announced in its re:Invent data keynote (https://techcrunch.com/2022/11/30/heres-everything-aws-announced-today/) Cloudflare hikes prices by a quarter (https://www.theregister.com/2022/12/01/cloudflare_price_rises_annual_exemptions/) Twitter lawsuit (https://twitter.com/AkivaMCohen/status/1598487532764798983) the only cheat sheet you need (https://github.com/chubin/cheat.sh) Google Plans to Lay Off 10,000 'Poor Performing' Employees. Why That's a Big Lie, According to Harvard Professor (https://www.inc.com/nick-hobson/googles-plan-to-lay-off-10000-poor-performing-employees-is-based-on-a-big-lie-according-toharvard-professor.html) Broadcom again tries to quash VMware price rise rumors (https://www.theregister.com/2022/12/01/vmware_broadcom_prices_nutanix_q123/) Rackspace email outage continues as migrations prove hard (https://www.theregister.com/2022/12/05/rackspace_hosted_exchange_security_update/) If Rowy has its way, if you can use Excel, you can build software (https://techcrunch.com/2022/12/05/rowy-pre-seed/) Axiom launches its automated identity and access management platform (https://techcrunch.com/2022/12/06/axiom-launches-its-automated-identity-and-access-management-platform/) The E-Mail Newsletter for the Mogul Set (https://www.newyorker.com/news/annals-of-communications/the-e-mail-newsletter-for-the-mogul-set) The EU hosted a 24-hour party in its $400,000 metaverse to appeal to young people, but pretty much no one showed up (https://www.businessinsider.com/eu-hosts-400000-metaverse-party-barely-anyone-shows-up-2022-12) mIRC ended its lifetime license agreement with all who purchased its software 10 years out (https://www.pocnetwork.net/internet-news/mirc-ended-its-lifetime-license-agreement-with-all-who-purchased-its-software-10-years-out/) Security compliance and automation platform Drata nabs $200M at $2B valuation (https://techcrunch.com/2022/12/07/security-compliance-and-automation-platform-drata-nabs-200m-at-2b-valuation/) 9 insights on real world container use (https://www.datadoghq.com/container-report/) Bret Taylor to step down as Salesforce co-CEO (https://www.axios.com/2022/11/30/bret-taylor-salesforce-ceo-step-down?utm_source=newsletter&utm_medium=email&utm_campaign=newsletter_axioslogin&stream=top) Tableau Software CEO Mark Nelson steps down (https://www.geekwire.com/2022/tableau-software-ceo-mark-nelson-steps-down/) Confirmed: Slack CEO Stewart Butterfield stepping down in January (https://techcrunch.com/2022/12/05/report-slack-ceo-stewart-butterfield-stepping-down-in-january/) Microsoft Teams adds free communities feature to take on Facebook and Discord (https://www.theverge.com/2022/12/7/23497938/microsoft-teams-communities-feature) Nonsense Advent of Code (https://adventofcode.com/2022) The difference between a snafu, a shitshow, and a clusterfuck (https://qz.com/work/1225213/the-difference-between-a-snafu-a-shitshow-and-a-clusterfuck/) Dangerously Advanced Git (https://twitter.com/QuinnyPig/status/1598382103829544961?s=20&t=3ZTOl6JnPJu8vtcP7YUC4Q) Conferences THAT Conference Texas Speakers and Schedule (https://that.us/events/tx/2023/schedule/), Round Rock, TX Jan 15th-18th Use code SDT for 5% off New State of Open Con 2023, (https://stateofopencon.com/sponsors/) London, UK, February 7th-8th 2023 CloudNativeSecurityCon North America (https://events.linuxfoundation.org/cloudnativesecuritycon-north-america/), Seattle, Feb 1 – 2, 2023 DevOpsDays Birmingham, AL 2023 (https://devopsdays.org/events/2023-birmingham-al/welcome/), April 20 - 21, 2023 Listener Feedback Send “End of Year” listener questions to questions@softwaredefinedtalk.com (mailto:questions@softwaredefinedtalk.com). Tim recommends Stratechery (with Ben Thompson) | Acquired Podcast (https://www.acquired.fm/episodes/stratechery-with-ben-thompson) SDT news & hype Join us in Slack (http://www.softwaredefinedtalk.com/slack). Get a SDT Sticker! Send your postal address to stickers@softwaredefinedtalk.com (mailto:stickers@softwaredefinedtalk.com) and we will send you free laptop stickers! Follow us on Twitch (https://www.twitch.tv/sdtpodcast), Twitter (https://twitter.com/softwaredeftalk), Instagram (https://www.instagram.com/softwaredefinedtalk/), LinkedIn (https://www.linkedin.com/company/software-defined-talk/) and YouTube (https://www.youtube.com/channel/UCi3OJPV6h9tp-hbsGBLGsDQ/featured). Use the code SDT to get $20 off Coté's book, Digital WTF (https://leanpub.com/digitalwtf/c/sdt), so $5 total. Become a sponsor of Software Defined Talk (https://www.softwaredefinedtalk.com/ads)! Recommendations Brandon: Large Mouse Pad (https://www.amazon.com/dp/B0788LMLZL?psc=1&ref=ppx_yo2ov_dt_b_product_details) Matt: Ze Frank's True Facts: Tarantulas (https://www.youtube.com/watch?v=EhJYtmZuhV4) Sriracha History (https://www.vice.com/en/article/zmj4ae/the-story-of-sriracha-is-the-story-of-america) Coté: CleanShot X (https://cleanshot.com/) Photo Credits Header (https://unsplash.com/photos/LOHduxdd73s) CoverArt (https://unsplash.com/photos/tGBXiHcPKrM)

GHP #90 - VC #12 - Empowering the Next Generational Founders with Amanda "Robby" Robson!

The Generation Hustle Podcast

Play Episode Listen Later Nov 16, 2022 58:54

Episode 90 is with Amanda Robson, Partner at Cowboy Ventures! Originally from Ancaster, Ontario, Amanda, better known as Robby, invests in B2B seed & pre-seed founders and focuses on innovations in developer tooling, data management, security, applied AI, and supply chain. In November 2020, she led a US$3.2-million investment round in a securities-software company called Drata, now worth US$1 billion. When she's not crushing it as a newly minted and youngest partner at Cowboy Ventures, she's running her organization, Modern Angels, which seeks to democratize funding for women and non-binary people. She also co-hosts her own podcast, The Open Source Startup Podcast. Cowboy Ventures is a seed-stage focused fund investing in digital startups that seeks to back exceptional founders who are building products that re-imagine work and personal life in large and growing markets. We sit down to speak with Robby about her career journey from Ontario to Silicon Valley. She details the tech landscape across North America, the importance of DEI, why she's big on Open Source, the art of cold outreach, and much more. Cowboy Ventures https://www.cowboy.vc/index Timestamps 2:45 - Intro 5:24 - Importance of Cold Outreach 9:57 - Tech Industry - Canada vs. USA 12:32 - Amanda “Robby” Robson 15:59 - Joining Cowboy Ventures 18:25 - Cowboy Ventures Investment Thesis 25:17 - What Makes a Successful Founder 28:00 - Common Hiring Mistakes Founders Make 29:40 - Importance of Diverse Teams 32:50 - What is Open Source? Why is it important? 41:50 - The Open Source Podcast 47:20 - Modern Angels 51:24 - Time Management 55:40 - Lightning Round --- This episode is sponsored by · Anchor: The easiest way to make a podcast. https://anchor.fm/app

founders ai partner north america silicon valley empowering ontario b2b dei generational open source robson ancaster cowboy ventures drata

Build Brand Awareness via Demand Gen with Elliot Volkman

Breaking Through in Cybersecurity Marketing

Play Episode Listen Later Sep 28, 2022 41:20

Elliot Volkman, Director of Brand, Content, and Community at Drata, joins us in this episode to talk about demand generation strategies, also known more casually as demand gen. Demand gen consists of targeted marketing programs to drive brand awareness and build interest for qualified leads in products, services, and more. Tune in to our discussion with Elliot to learn how demand gen intersects with sales enablement, brand, content, and even community. Timecoded Guide: [03:52] Demand gen vs. brand message [07:40] The goal of demand gen in an organization [14:48] How demand gen ties into content and community members [22:45] Key metrics and KPIs to track brand awareness [31:04] Experimentation and demand gen How does demand gen differ from and bring focus to brand awareness? Elliot believes that a lot of C-level executives mistake brand awareness for traditional marketing or product marketing. Brand awareness is more about what customers see when they encounter your company via search engine. Product marketing is instead about targeting specific personas. Demand generation fits into brand awareness because it's designed to drive customer's awareness of your company and build interest in your products, rather than directly marketing those products to them through product marketing strategies. “The most important and critical aspect that organizations fail to pay attention to is building your brand, especially building voice and messaging around it that resonates.” What is the goal of demand generation if not to drive sales? A lot of organizations have an executioner and a product marketing lead, with various jobs for each role. Demand gen's job is to take the webinars the executioner makes and the messaging the product marketer makes, and then guide those towards business alignment and increased brand awareness. Elliot emphasizes that demand generation drives sales, but does not drive lead generation. Demand gen is not supposed to chase leads the way a product marketing manager might, it's instead supposed to build awareness. “I think there's two aspects of demand gen, depending on the organizational size and what they do, but at the end of the day, the demand generation strategy does have to drive pipeline.” How does demand gen tie into content and community? Oftentimes, in Elliot's opinion, marketing can rely too much on technology. While technology is critical, you don't have to educate anyone on why it's important. Demand gen focuses more on humanizing the brand and building something fully centered around the customer. You rely on internal experts to build a community that ties everything together from marketing to security to visuals, and beyond. And in the end, the customer should be the hero and should feel like one in your demand generation strategy. “It's about focusing on people, focusing on processes, and embracing technology, of course. At the end of the day, having our customers be a voice is absolutely critical to the success of our future.” What are the KPIs to track brand awareness? There may be numerous ways to track brand awareness, but Elliot explains that the main KPI is organic traffic to the website. The byproducts of increased organic website traffic include organic increases in demo requests, nurturing people through the buying process, and acting as fuel for the engine of marketing campaigns. There's no direct selling in a demand generation strategy. You can avoid those most-hated marketing tactics, like when you cold call or appear in their already crowded email inboxes. Demand gen is all organic and based on nurturing the customer. “We're not trying to brainwash people by any means, we're actually able to help educate them along the way. We build a relationship through that education and through those materials, and then, maybe they'll check out what our product does, or they've decided to download something, and we can continue to nurture them.” ---------- Links: Get tickets for our upcoming Cyber Marketing Con 2022. Spend some time with our guest Elliot Volkman on LinkedIn, Twitter, and his podcast, Adopting Zero Trust. Follow Gianna on LinkedIn. Catch up with Maria on LinkedIn. Join the Cybersecurity Marketing Society on our website, and keep up with us on Twitter. Keep up with Hacker Valley on our website, LinkedIn, Instagram, and Twitter.

director community brand product kpis kpi experimentation brand awareness demand gen drata

284: The Most Wanted Missing CryptoQueen

Play Episode Listen Later Jul 20, 2022 42:44

In this special edition of the "Smashing Security" podcast, computer security veterans Graham Cluley and Carole Theriault welcome back author and journalist Jamie Bartlett - host of "The Missing CryptoQueen" podcast. Jamie tells us about his new book, which shares more details about the disappearance of cryptocurrency scammer Dr Ruja Ignatova, and the subsequent hunt by law enforcement. Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Episode links: https://www.bbc.co.uk/programmes/p07nkd84 (The Missing CryptoQueen podcast) — BBC. https://www.penguin.co.uk/books/442256/the-missing-cryptoqueen-by-bartlett-jamie/9780753559581 (The Missing CryptoQueen book) — Penguin. https://www.bbc.co.uk/news/world-us-canada-62005066 (Missing Cryptoqueen: FBI adds Ruja Ignatova to top ten most wanted) — BBC News. https://www.smashingsecurity.com/store (Smashing Security merchandise (t-shirts, mugs, stickers and stuff)) Sponsored by: https://bitwarden.com/smashing/ (Bitwarden) – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. https://www.smashingsecurity.com/drata (Drata) – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance. https://www.cybersecurityinside.com/smashing (Cyber Security Inside podcast) -bringing you the most important and timely security topics as well as other industry experts for insightful conversations. Support the show: You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on https://apple.co/2J1YMCu (Apple Podcasts) or https://www.podchaser.com/podcasts/smashing-security-244729 (Podchaser). Become a https://www.patreon.com/smashingsecurity (Patreon supporter) for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at https://twitter.com/smashinsecurity (@SmashinSecurity), or on the https://www.reddit.com/r/smashingsecurity (Smashing Security subreddit), or https://www.smashingsecurity.com/ (visit our website) for more episodes.

280: Hot tub hijinx, and a sentient AI

Kruze Consulting's Founders and Friends Podcast for Startups

Play Episode Listen Later Jun 22, 2022 40:20

Internet-connected jacuzzis find themselves in hot water, and a Google engineer claims that their AI has developed feelings. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and https://www.smashingsecurity.com/hosts/carole-theriault (Carole Theriault). Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Episode links: https://www.youtube.com/watch?v=EM0VwEkxWTg (Hot Tub Time Machine trailer) — YouTube. https://eaton-works.com/2022/06/20/hacking-into-the-worldwide-jacuzzi-smarttub-network/ (Hacking into the worldwide Jacuzzi SmartTub network) — Eaton Works. https://apps.apple.com/us/app/smarttub/id1318260634 (SmartTub) — Apple iOS App Store. https://play.google.com/store/apps/details?id=com.jacuzzi.smarttub&hl=en_GB&gl=US (SmartTub) — Google Play store. https://www.bbc.co.uk/news/technology-46674706 (Hot tub hack reveals washed-up security protection ) — BBC News. https://www.washingtonpost.com/technology/2022/06/11/google-ai-lamda-blake-lemoine/ (Google engineer Blake Lemoine thinks its LaMDA AI has come to life ) — The Washington Post. https://www.theguardian.com/technology/2022/jun/12/google-engineer-ai-bot-sentient-blake-lemoine (Google engineer put on leave after saying AI chatbot has become sentient ) — The Guardian. https://www.theregister.com/2022/06/20/ais_most_convincing_conversations_are/?td=rt-3a (AI's most convincing conversations are not what they seem) — The Register. https://cajundiscordian.medium.com/ (Blake Lemoine's blog.) https://vangoghexpo.com/bristol/ (Van Gogh Bristol Exhibition: The Immersive Experience.) https://www.youtube.com/watch?v=ib34WI0H4qI (Van Gogh: The Immersive Experience ) — YouTube. https://www.bbc.co.uk/programmes/p029399x (The Inquiry) — BBC World Service. https://www.smashingsecurity.com/store (Smashing Security merchandise (t-shirts, mugs, stickers and stuff)) Sponsored by: https://l.kolide.co/3uSdmVj (Kolide) - the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack. https://bitwarden.com/smashing/ (Bitwarden) - Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing. https://www.smashingsecurity.com/drata (Drata) - Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance. Support the show: You can help the podcast by telling your friends and colleagues about "Smashing Security", and leaving us a review on https://apple.co/2J1YMCu (Apple Podcasts) or https://www.podchaser.com/podcasts/smashing-security-244729 (Podchaser). Become a https://www.patreon.com/smashingsecurity (Patreon supporter) for ad-free episodes and our early-release feed! Follow us: Follow the show on Twitter at https://twitter.com/smashinsecurity (@SmashinSecurity), or on the https://www.reddit.com/r/smashingsecurity (Smashing Security subreddit), or https://www.smashingsecurity.com/ (visit our website) for more episodes.

Adam Markowitz of Drata discusses how they help companies protect their data

Play Episode Listen Later Jun 15, 2022 26:33

Adam Markowitz, CEO and Founder of Drata (https://drata.com), discusses how Drata can streamline data audits and help companies protect their data, continuously monitor their data security, and produce reports for SOC 2 and other compliance programs. Kruze Consulting is a leader in Startup Tax (https://kruzeconsulting.com/startup-taxes) Filings, Payroll Tax Savings from R&D Tax Credits, professional advice and more! Find out why hundreds of seed and venture funded startups trust Kruze Consulting's tax experts, software and process to save them time and hassle.

ceo founders data protect companies soc markowitz drata kruze consulting

Why Engineers Make the Best Entrepreneurs w/ Drata's Co-founder & CTO Daniel Marashlian

Dev Interrupted

Play Episode Listen Later May 14, 2022 56:52

There are so many books, videos and workshops on starting your own company. The problem for anyone listening to this podcast is that none of them come from the perspective of a developer.That's why we were so excited that the founder & CTO of Drata, Daniel Marashlian – who has previously founded eight companies before hitting a billion-dollar valuation with Drata – was open to talking about what it's like to build a company from a coder's perspective.From the signs you're an entrepreneur at heart, to filling out your skills gap to leaning in to the edge you have with your background, this episode of Dev Interrupted is essential listening for anyone who can code - or anyone who has dreamed of founding their own company. Dev Interrupted survey: https://www.surveymonkey.com/r/PRYRNC5Drata's website: https://drata.com/Daniel's Screw Up story: https://bit.ly/3LbLHCXJoin our Discord Community ►► discord.gg/devinterruptedOur Website ►► devinterrupted.com/Want to try LinearB? Book a LinearB Demo and use the "Dev Interrupted Podcast" discount code.Have 60 seconds? Review the show on Apple Podcasts

entrepreneur co founders engineers cto screw up linearb drata

Adam Markowitz: The One Thing Competitors Can't Copy

The BreakLine Arena

Play Episode Listen Later Mar 11, 2022 46:54

Join us in the BreakLine Arena for a conversation with Adam Markowitz, co-founder and CEO of next-gen security compliance automation company Drata.To him, trust is one of the most powerful tools that an entrepreneur can have in their toolkit. Drata is on a mission to help businesses earn and keep the trust of their users, customers, partners, and prospects. Adam unpacks this belief for us and shares insights into Drata's company culture, which he views as a core competitive advantage. We dive into the values that inform his commitment to people, culture, and feedback, and examine his relationship with failure and competition. Adam shares some valuable advice for entrepreneurs as they navigate sales, hiring, and fundraising. We also touch on resilience as a key attribute for startups, speed as the ultimate currency, and what fatherhood has taught Adam about being a better leader.Please like, rate, subscribe, or review our show if you like what you've heard! We'd love to hear your thoughts. If you're interested in joining our community, please visit www.breakline.org.

ceo one thing copy competitors markowitz drata

Drata's CEO Adam Markowitz on creating a culture of cyber security

Inside Intercom Podcast

Play Episode Listen Later Jan 6, 2022 27:05

As more and more data gets stored in the cloud, proving that you can protect your customers' data is not just a nice-to-have – it's essential. In this episode we sit down to talk with aerospace engineer turned entrepreneur - Adam Markowitz, CEO of Drata. We talk about the SOC 2 framework, how to create a culture of security from scratch and how automation is key to turning a headache into a smooth operation.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

ceo cybersecurity creating a culture soc markowitz drata

Record Unicorns, SCYTHE Series A, SPAC Fails, McAfee Worth $14B, & Hashicorp IPO - ESW #250

Enterprise Security Weekly (Video)

Play Episode Listen Later Nov 16, 2021 42:26

In the Enterprise Security News for this week: Drata reaches unicorn status in record time with a $100m Series B, SCYTHE announces a $10m Series A, McAfee Consumer business acquired for $14b, WPScan acquired by Automattic (the company behind WordPress), QOMPLX SPAC is called off, HashiCorp IPO is not called off, open source CSPM and firmware emulation tools, Ghost kitchens and more. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw250

ghosts record unicorns fails wordpress mcafee spac series b scythe automattic hashicorp cspm drata enterprise security news

Record Unicorns, SCYTHE Series A, SPAC Fails, McAfee Worth $14B, & Hashicorp IPO - ESW #250

Paul's Security Weekly TV

Play Episode Listen Later Nov 13, 2021 42:26

ghosts record unicorns fails wordpress mcafee spac series b scythe automattic hashicorp cspm drata enterprise security news

Adam Markowitz, CEO & Co-Founder of Drata, on Maintaining SOC 2 Compliance and Healthy Competition

Founder Real Talk

Play Episode Listen Later Nov 11, 2021 29:47

Adam Markowitz is the Co-founder and CEO of Drata, the San Diego-based startup that provides companies with fast and efficient automated security compliance, a once painstakingly long and arduous process. A former rocket scientist, Adam founded his first startup, Portfolium, in 2013 and created a network of over 5M students, connecting them to mentors and future employers. Six years later he sold the company for $43M when he was just 32 years old. The first line of Drata's code was written in July 2020 and the company has skyrocketed. GGV led Drata's $25M Series A round earlier this year. Drata just announced a $100M Series B financing making the company a “unicorn” in an incredibly fast period. This episode is co-hosted by GGV Investor, Oren Yunger.

ceo co founders san diego maintaining compliance 5m markowitz healthy competition 43m ggv drata

The Future of Zero Trust with Troy Fine

Innovation in Compliance with Tom Fox

Play Episode Listen Later Nov 2, 2021 28:21

Troy Fine is Tom Fox's guest on this week's episode of the Innovation in Compliance Podcast. He is the Senior Manager of Cybersecurity Risk Management and Compliance at Drata. Troy joins Tom to talk about data security, data protection, and risk management. Internal and External Auditing Auditing is external and internal. External auditing entails third parties coming in to assess a company's controls, security frameworks, and determining if they meet compliance requirements. Internal auditing involves people who work directly for the company they are assessing. They are a lot more involved with the business, and understand the requirements of the business better, so they take a more collaborative approach. Internal audit identifies the gaps within the organization, so the business can remedy them quickly, and so that the business can be prepared for an external audit. Troy points out that sometimes internal audit would assist external audit, with external audit relying on the testing that internal already performed. How Drata Scales Your Company Integrity and trust are the core ethos of Drata. "We built this product so that our customers can prove to their customers that they could have trust in their data security," Troy tells Tom. Currently, the company has over fifty integrations that they can pull data and test from, as well as many new frameworks. What this means is that as Drata's customers get their own customers and more requests for compliance, Drata will be able to support them through additional controls. Customers and clients are able to create a more secure environment in their organizations and meet their compliance standards at the same time. Drata allows customers to manage their control environment via continuous monitoring. When an auditor comes in to assess, they can see the control operated over a long period of time. Assessing Third-Party Risk Within the Drata platform, there is a vendor management page where customers can start monitoring their vendors. Customers can rank them from low to medium to high risk. For medium- and high-risk vendors, customers can log and track how well those vendors are meeting security requirements. "Part of our control testing is to check if the customer is monitoring their vendors appropriately," Troy remarks. "We want to make sure they're also monitoring their vendors, so we provide them a template that allows them to make sure that we're viewing the SOC 2 reports appropriately, and identifying any risk or end-user controls that they need to perform." Zero Trust Tom asks Troy what companies need to be thinking about in terms of cybersecurity in the coming years. "A big area to focus on is going to be this idea of Zero Trust," Troy says. A greater emphasis on verification, based on location, customer behavior, or just a change in general, is going to be seen in the not too distant future. "As the workforce becomes more remote, the idea that somebody behind the keyboard is not the same person that was in your office is becoming a bigger question," he adds. Implementing Zero Trust frameworks is going to become more important. Resources Troy Fine | LinkedIn Drata

innovation customers internal compliance external senior manager soc zero trust tom fox drata compliance podcast

Dan Pantelo, CEO of Marpipe, on The Evolution of AdTech & The Need for Speed

Play Episode Listen Later Oct 28, 2021 44:39

Digital marketing is increasingly important to the success of every business, but it’s a dynamic industry, seeing major disruptions this year with the change to tracking brought by iOS 14. Our guest, Dan Pantelo, founder and CEO of Marpipe, is helping marketers figure out what’s actually working through scalable A-B testing and performance marketing with his platform Marpipe.We talk to Dan about the need for better testing, the current state of MarTech, and his recent $8M series A raise led by Stage 2 Capital along with ourselves at Ripple, Samsung Ventures, Laconia Capital Group, and others.About Dan Pantelo:Dan started out as a street salesman in some of NYC's lowest-income neighborhoods selling electronics on street corners. He went on to found Pantelo Group, an agency that quickly grew to $2M in monthly campaign spend. He founded Marpipe in 2019. Dan did his undergrad at Binghampton University.A word from our sponsor:For anyone that is lucky enough to be a part of building startups, we’ve all seen that mad-rush to answer extensive security questionnaires and implement SOC 2 controls the moment that big whale of a client is on the hook in order to not lose the deal. Which unfortunately ends up swallowing the entire organization's time and resources in the hopes to land that whale, right? Lucky for us at Ripple, we have partnered with compliance automation provider Drata. Drata saves our portfolio companies from these same issues when it comes to effectively proving a strong, ongoing security posture and achieving frameworks like SOC 2 and ISO 27001.Drata allows startups to put Security and Compliance on Autopilot. Companies using Drata experience an average time savings of 85% when compared to running the SOC 2 process manually. Build trust with customers by proving your commitment to security, and maintain continuous compliance in between your audits. Don’t take it from us, Drata works with all kinds of startups like ClearCo, Lemonade, FullStory, Slice and countless others. They're backed by top venture funds such as Okta Ventures and GGV, and are currently G2's number one ranked cloud compliance software provider for customer satisfaction. Listeners of Tank Talks can get set up with a demo of Drata and take advantage of a 15% discount offer and waived implementation fees by visiting drata.com/tanktalks to get setup today.In this episode we discuss:03:20 How personalization in advertising, data, and customization have evolved over the years since advertisers were forced online05:48 Every company is now a marketing company with a subject matter expertise09:28 Other challenges digital marketers face and how they are overcoming them11:30 How brands are using technology to harness User Generated Content (UGC)15:09 Why companies should be focused more on performance marketing20:16 The traditional ad creation process vs. the process with Marpipe24:27 Why creative is now more important with better tracking and recent changes to Facebook27:11 Typical ROI Marpipe customers are seeing31:14 the Marpipe target customer35:12 How Marpipe can use data to decipher trends and what works for specific clients36:46 The future of performance-based marketing39:22 Plans for the $8M Series A raiseFast FavoritesPodcastHow to Take Over The WorldNewsletter/BlogBanklessTech GadgetAirpod ProNew TrendDAOsBookBlack Swan by by Nassim Nicholas Taleb Life LessonOnly worry about things in your direct controlFollow Matt Cohen and Tank Talks here!Podcast production support provided by Agentbee.Agency This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit tanktalks.substack.com

Dan Park, CEO of Clutch on The Future of Auto-Tech

Play Episode Listen Later Oct 21, 2021 31:16

The market for cars in 2021 has been one of the most pandemic-affected markets. The supply of both new and used cars has never been tighter and our guest today is seeing it from all sides. Dan Park is the CEO of Clutch, Canada's first and largest online car retailer. We talk to Dan about the automotive industry, his path to becoming CEO, and about his plans for the $60M he recently raised from Canaan Partners, FJ Labs, and Real Ventures.About Dan Park:Dan is CEO of Clutch, an online platform for car buying and ownership. Prior to Clutch, Dan was GM & Head of Uber Eats Canada. During his time at Uber, Dan led the growth of Uber's food delivery platform in Canada. Previously, Dan was a Venture Partner at Azure Capital Partners and led the firm’s Canadian investment efforts.A word from our sponsor:For anyone that is lucky enough to be a part of building startups, we’ve all seen that mad-rush to answer extensive security questionnaires and implement SOC 2 controls the moment that big whale of a client is on the hook in order to not lose the deal. Which unfortunately ends up swallowing the entire organization's time and resources in the hopes to land that whale, right? Lucky for us at Ripple, we have partnered with compliance automation provider Drata. Drata saves our portfolio companies from these same issues when it comes to effectively proving a strong, ongoing security posture and achieving frameworks like SOC 2 and ISO 27001.Drata allows startups to put Security and Compliance on Autopilot. Companies using Drata experience an average time savings of 85% when compared to running the SOC 2 process manually. Build trust with customers by proving your commitment to security, and maintain continuous compliance in between your audits. Don’t take it from us, Drata works with all kinds of startups like ClearCo, Lemonade, FullStory, Slice and countless others. They're backed by top venture funds such as Okta Ventures and GGV, and are currently G2's number one ranked cloud compliance software provider for customer satisfaction. Listeners of Tank Talks can get set up with a demo of Drata and take advantage of a 15% discount offer and waived implementation fees by visiting drata.com/tanktalks to get setup today.In this episode we discuss:02:44 How the auto industry is evolving and why now is a great time for disruption04:56 The effect of the pandemic on modernizing the automotive industry and how its effected supply and demand for cars07:39 How consumer behavior during the pandemic pushed forward app adoption09:18 What the enduring lessons from the pandemic will be for the automotive industry10:30 Why the dealership model is ready for disruption11:42 How established players in the industry are fighting back against being disrupted from outsiders13:18 Breaking down the existing legal structures between dealerships and automotive brands16:16 How Clutch is using their data to analyze the aftermarket and used car market18:59 Why Clutch is a better way to buy a used car20:43 Real-world lessons Dan and his team have had to make while building Clutch22:06 How Clutch has captured market share23:18 How Dan defines Clutch’s company culture24:26 Why Dan left Uber Eats to become the CEO of Clutch26:46 Plans for Clutch’s recent $60M raiseFast Favorites:Favourite PodcastHow I Built ThisMasters Of ScaleRevisionist HistoryThis American LifeBlog/NewsletterThe PeakTech GadgetGoPro MaxTrendCanada’s startup sceneBookShoe Dog by Phil KnightFollow Matt Cohen and Tank Talks here!Podcast production support provided by Agentbee.Agency This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit tanktalks.substack.com

Gale Wilkinson of Vitalize VC on the future of work and how to invest in it

Play Episode Listen Later Oct 14, 2021 28:15

Our guest today, Gale Wilkinson, founder and managing director of Vitalize Venture Capital, is working to change how we work, how we learn, and how people can access investing in startups.Vitalize is known for investing in the future of work and the future of learning startups. They typically invest $250K-$1.5M at the pre-seed and seed stages. Portfolio companies include Placer, The Mom Project, Toucan, Zero Grocery, Zingtree, hiitide, and many more. They have also recently launched a platform that allows non-qualified investors to invest in start-ups before they hit the public markets.About Gale Wilkinson:Gale started in analyst roles at Nielsen and Orbitz before moving into investing in 2012 by founding Irish Angels, a network of angel investors affiliated with the University of Norte Dame. In 2017 she launched a formal fund, Vitalize Venture Capital. She did her undergrad at Notre Dame and got her MBA at the University of Chicago. She is currently a member of the Kauffman Fellows class of 2023.A word from our sponsor:For anyone that is lucky enough to be a part of building startups, we’ve all seen that mad-rush to answer extensive security questionnaires and implement SOC 2 controls the moment that big whale of a client is on the hook in order to not lose the deal. Which unfortunately ends up swallowing the entire organization's time and resources in the hopes to land that whale, right? Lucky for us at Ripple, we have partnered with compliance automation provider Drata. Drata saves our portfolio companies from these same issues when it comes to effectively proving a strong, ongoing security posture and achieving frameworks like SOC 2 and ISO 27001.Drata allows startups to put Security and Compliance on Autopilot. Companies using Drata experience an average time savings of 85% when compared to running the SOC 2 process manually. Build trust with customers by proving your commitment to security, and maintain continuous compliance in between your audits. Don’t take it from us, Drata works with all kinds of startups like ClearCo, Lemonade, FullStory, Slice and countless others. They're backed by top venture funds such as Okta Ventures and GGV, and are currently G2's number one ranked cloud compliance software provider for customer satisfaction. Listeners of Tank Talks can get set up with a demo of Drata and take advantage of a 15% discount offer and waived implementation fees by visiting drata.com/tanktalks to get setup today.In this episode we discuss:03:26 Why the future of work is such an important area of Gale’s investing07:37 Is future of work just a code name for automation09:23 How remote work and gig economy interact with each other10:42 What Vitalize is excited about with Future of Work13:23 How the metaverse and online will mix with real-world opportunities14:03 Overlooked opportunities in the future of workspace15:24 The ethical questions around working for multiple employers16:39 Areas Gale is wary of in the future of work19:10 Areas in the creator economy Vitalize is looking to bet on20:54 Future of learning and where college degrees will be in the coming years22:40 How the pandemic has affected the future of work and the future of learning23:32 Opening up Venture to populations that have been historically excluded from investing24:48 Gale’s goal for Vitalize and how founders and investors can connect25:26 Gale’s secret to being so great on TwitterFast favourites:PodcastVenture UnlockedNewsletter/BlogAxiosTech GadgetHer PhoneNew TrendEco-friendly packagingBookThe Startup Community Way: Evolving an Entrepreneurial Ecosystem by Brad FeldFollow Matt Cohen and Tank Talks here!Podcast production support provided by Agentbee.Agency This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit tanktalks.substack.com

university chicago future security mba invest companies notre dame future of work compliance areas venture slice nielsen overlooked lemonade 5m autopilot iso ripple wilkinson 250k placer soc g2 full story toucan orbitz norte dame entrepreneurial ecosystem vitalize clearco mom project ggv drata gale wilkinson vitalize venture capital

Anthony Mouchantaf and Peter van der Velden on Why Canadian LPs are starting to wake up to the Biotech Industry

Play Episode Listen Later Oct 7, 2021 64:53

As we’ve seen from the last two years, BioTech holds immense promise for the future but brings along challenges as an investor into the space. Today we have a lively discussion with two sides of the BioTech investing world, Peter van der Velden, General Partner and Managing director of Lumira Ventures, and Anthony Mouchantaf, Director, Venture Capital at RBCx.About Anthony Mouchantaf:As Director of Venture Capital with RBCx, Anthony works closely with partners across RBC on the bank’s venture investment strategy and leads the venture fund finance group. Prior to joining RBC Anthony was a VC-backed startup founder and a venture capital investor with OMERS Ventures, based out of the fund’s London and Toronto offices.About Peter van der Velden:With 28 years of investment and operating experience, Peter has participated in building companies from start-up through to expansion in the life sciences, information technology, and consumer sectors. Peter’s experience includes: Founder of a boutique merchant bank focused on private IT-based companies, Head of Investment Banking for a boutique investment bank focused on the public IT-based companies, Partner in a buyout partnership targeting retail and consumer-centric businesses; Vice President Business Development for a venture capital-backed drug delivery company; and an Associate role at Canada’s then-largest venture capital firm. Peter started his working career with Canada’s largest independent vaccine manufacturer.A word from our sponsor:For anyone that is lucky enough to be a part of building startups, we’ve all seen that mad-rush to answer extensive security questionnaires and implement SOC 2 controls the moment that big whale of a client is on the hook in order to not lose the deal. Which unfortunately ends up swallowing the entire organization's time and resources in the hopes to land that whale, right? Lucky for us at Ripple, we have partnered with compliance automation provider Drata. Drata saves our portfolio companies from these same issues when it comes to effectively proving a strong, ongoing security posture and achieving frameworks like SOC 2 and ISO 27001.Drata allows startups to put Security and Compliance on Autopilot. Companies using Drata experience an average time savings of 85% when compared to running the SOC 2 process manually. Build trust with customers by proving your commitment to security, and maintain continuous compliance in between your audits. Don’t take it from us, Drata works with all kinds of startups like ClearCo, Lemonade, FullStory, Slice and countless others. They're backed by top venture funds such as Okta Ventures and GGV, and are currently G2's number one ranked cloud compliance software provider for customer satisfaction. Listeners of Tank Talks can get set up with a demo of Drata and take advantage of a 15% discount offer and waived implementation fees by visiting drata.com/tanktalks to get setup today.In this episode we discuss:03:32 Peter’s journey to becoming a BioTech investor06:04 What the Canadian BioTech scene was like 10 years ago07:36 How Anthony convinced the team at RBCx to take BioTech seriously08:52 The pandemic’s role in convincing LPs to take BioTech seriously11:33 Peter’s take on why institutional investors have started to take BioTech investing more seriously15:09 How life sciences has more liquidity than traditional tech sectors17:07 How the life sciences market has matured over the last 10 years18:21 Insight into how investment committees at institutional investors work and how they look at biotech and life sciences23:26 Why life sciences can be intimidating to traditional investors30:57 What needs to happen to get Canadian investors more comfortable with investing in BioTech35:15 Why making unicorns isn’t everything in investing38:09 What value RBCx brings to the table besides capital41:40 How to manage LP communications in the BioTech space48:13 How Canada can become a global life sciences powerhouseFast FavoritesPodcastAnthonyThis is Actually HappeningPeterMasters of ScaleAmerican InnovationsNewsletter/BlogAnthonyVisual CapitalistPeterStat NewsTech GadgetAnthonyOura RingPeterApple WatchTrendAnthonyTikTokPeterWork-Life Balance from remote workBookAnthonyThe Federalist PapersPeterAtlas Shrugged by Ayn RandFollow Matt Cohen and Tank Talks here!Podcast production support provided by Agentbee.Agency This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit tanktalks.substack.com

Adam Markowitz of Drata on Why Startups Can't Hide From SOC 2 Anymore