POPULARITY
In this The Security Podcasts episode, Kevin A. McGrail, Cloud Fellow at Dito, talks three factors that contribute to the cybersecurity workforce gap, including burnout, hiring and retention challenges. McGrail shares cybersecurity training advice from his nearly 30-year career in IT security, from the importance of organizational security awareness to how entry- and mid-level cyber professionals can further their careers with education.
In this The Security Podcasts episode, Kevin A. McGrail, Cloud Fellow at Dito, talks three factors that contribute to the cybersecurity workforce gap, including burnout, hiring and retention challenges. McGrail shares cybersecurity training advice from his nearly 30-year career in IT security, from the importance of organizational security awareness to how entry- and mid-level cyber professionals can further their careers with education.
In this episode of JavaScript Jabber the panel interviews security expert, Kevin A. McGrail. He starts by explaining what security frameworks and what they do. The panel wonders how to know if your developers are capable of self-auditing your security or if you need help. Kevin shares recommendations for companies to look at to answer that question. Aimee Knight explains the hell she has been in making changes to be compliant with CCPA. The panel considers how policies like this complicate security, are nearly impossible to be compliant with and how they can be weaponized. They discuss the need for technical people to be involved in writing these laws. Kevin explains how you can know how secure your systems actually are. He shares the culture of security first he tries to instill in the companies he trains. He also trains them on how to think like a bad guy and explains how this helps developers become security first developers. The panel discusses how scams have evolved and how the same scams are still being run. They consider the importance of automated training and teaching developers to do it right the first time. Finally, they consider the different ways of authentication, passwords, passphrases, sim card, biometrics. Kevin warns against oversharing or announcing vacations. The panel discusses real-world tactics bad guys use. Kevin explains what he trains people to do and look out for to increase security with both social engineering and technical expertise. Panelists Aimee Knight AJ O’Neal Charles Max Wood Dan Shappir Steve Edwards Guest Kevin A McGrail Sponsors ABOUT YOU | aboutyou.com/apply Split CacheFly ____________________________________________________________ "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon. Get Your Copy Today! ____________________________________________________________ Links Ghost in the Wires https://www.infrashield.com/ Follow DevChatTV on Facebook and Twitter Picks Aimee Knight: The More Gender Equality, the Fewer Women in STEM AJ O’Neal: I'll Let Myself In: Tactics of Physical Pen Testers Copying Keys from Photos, Molds & More The LED Traffic Light and the Danger of "But Sometimes!" Regina Spektor The Weepies Dan Shappir: This is what happens when you reply to spam email What is Your Password? Kevin A McGrail: XKCD Security IT Crowd https://spamassassin.apache.org/ Steve Edwards: XKCD Password Generator Nerd Sniping
In this episode of JavaScript Jabber the panel interviews security expert, Kevin A. McGrail. He starts by explaining what security frameworks and what they do. The panel wonders how to know if your developers are capable of self-auditing your security or if you need help. Kevin shares recommendations for companies to look at to answer that question. Aimee Knight explains the hell she has been in making changes to be compliant with CCPA. The panel considers how policies like this complicate security, are nearly impossible to be compliant with and how they can be weaponized. They discuss the need for technical people to be involved in writing these laws. Kevin explains how you can know how secure your systems actually are. He shares the culture of security first he tries to instill in the companies he trains. He also trains them on how to think like a bad guy and explains how this helps developers become security first developers. The panel discusses how scams have evolved and how the same scams are still being run. They consider the importance of automated training and teaching developers to do it right the first time. Finally, they consider the different ways of authentication, passwords, passphrases, sim card, biometrics. Kevin warns against oversharing or announcing vacations. The panel discusses real-world tactics bad guys use. Kevin explains what he trains people to do and look out for to increase security with both social engineering and technical expertise. Panelists Aimee Knight AJ O’Neal Charles Max Wood Dan Shappir Steve Edwards Guest Kevin A McGrail Sponsors ABOUT YOU | aboutyou.com/apply Split CacheFly ____________________________________________________________ "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon. Get Your Copy Today! ____________________________________________________________ Links Ghost in the Wires https://www.infrashield.com/ Follow DevChatTV on Facebook and Twitter Picks Aimee Knight: The More Gender Equality, the Fewer Women in STEM AJ O’Neal: I'll Let Myself In: Tactics of Physical Pen Testers Copying Keys from Photos, Molds & More The LED Traffic Light and the Danger of "But Sometimes!" Regina Spektor The Weepies Dan Shappir: This is what happens when you reply to spam email What is Your Password? Kevin A McGrail: XKCD Security IT Crowd https://spamassassin.apache.org/ Steve Edwards: XKCD Password Generator Nerd Sniping
In this episode of JavaScript Jabber the panel interviews security expert, Kevin A. McGrail. He starts by explaining what security frameworks and what they do. The panel wonders how to know if your developers are capable of self-auditing your security or if you need help. Kevin shares recommendations for companies to look at to answer that question. Aimee Knight explains the hell she has been in making changes to be compliant with CCPA. The panel considers how policies like this complicate security, are nearly impossible to be compliant with and how they can be weaponized. They discuss the need for technical people to be involved in writing these laws. Kevin explains how you can know how secure your systems actually are. He shares the culture of security first he tries to instill in the companies he trains. He also trains them on how to think like a bad guy and explains how this helps developers become security first developers. The panel discusses how scams have evolved and how the same scams are still being run. They consider the importance of automated training and teaching developers to do it right the first time. Finally, they consider the different ways of authentication, passwords, passphrases, sim card, biometrics. Kevin warns against oversharing or announcing vacations. The panel discusses real-world tactics bad guys use. Kevin explains what he trains people to do and look out for to increase security with both social engineering and technical expertise. Panelists Aimee Knight AJ O’Neal Charles Max Wood Dan Shappir Steve Edwards Guest Kevin A McGrail Sponsors ABOUT YOU | aboutyou.com/apply Split CacheFly ____________________________________________________________ "The MaxCoders Guide to Finding Your Dream Developer Job" by Charles Max Wood is now available on Amazon. Get Your Copy Today! ____________________________________________________________ Links Ghost in the Wires https://www.infrashield.com/ Follow DevChatTV on Facebook and Twitter Picks Aimee Knight: The More Gender Equality, the Fewer Women in STEM AJ O’Neal: I'll Let Myself In: Tactics of Physical Pen Testers Copying Keys from Photos, Molds & More The LED Traffic Light and the Danger of "But Sometimes!" Regina Spektor The Weepies Dan Shappir: This is what happens when you reply to spam email What is Your Password? Kevin A McGrail: XKCD Security IT Crowd https://spamassassin.apache.org/ Steve Edwards: XKCD Password Generator Nerd Sniping
Aaron Frost talks to Kevin A. McGrail, Director of Business Growth at InfraShield on this week's My Angular Story. Kevin specializes in cyber security and e-mail security. At InfraShield they specialize in cyber physical security in critical infrastructures. Kevin explains what cyber physical security entails and how it is different than IT security. It includes both information security and operational security including a wide spectrum from computer access to building access. Bridging both physical and cyber space security requires Kevin to use a lot of Angular but Angular is only one of the 40 languages Kevin uses in his job. Kevin gives examples of cyber security breaches he runs into and the number one failure he sees all the time is that there is a lack of process that goes from development to QA and then to production. He often asks his clients " if there is a security issue in your code and i give you a one line code of patch for it, how long will it take you to deploy that to production"? and the shorter the answer to that the better the client is in their cyber security implementation. One of the other issue Kevin runs into often is when clients fork their Angular and then they are hesitant to update their Angular version because of all the security patches they have in place. So that becomes a catch 22 example so Kevin warns against forking Angular because it becomes a big security risk. Kevin goes on to share some of the other common mistakes that companies make that puts at them risk for security. Host: Aaron Frost Joined By Special Guest: Kevin A. McGrail My Angular Story is produced by DevChat.TV in partnership with Hero Devs Sponsors Sentry– use the code “devchat” for two months free on Sentry’s small plan Adventures in DevOps CacheFly Links Kevin's LinkedIn Picks Aaron Frost: https://www.npmjs.com/package/angular-prerender Kevin A. McGrail: Learn about regular expressions - Global regular expression (GREP)
Aaron Frost talks to Kevin A. McGrail, Director of Business Growth at InfraShield on this week's My Angular Story. Kevin specializes in cyber security and e-mail security. At InfraShield they specialize in cyber physical security in critical infrastructures. Kevin explains what cyber physical security entails and how it is different than IT security. It includes both information security and operational security including a wide spectrum from computer access to building access. Bridging both physical and cyber space security requires Kevin to use a lot of Angular but Angular is only one of the 40 languages Kevin uses in his job. Kevin gives examples of cyber security breaches he runs into and the number one failure he sees all the time is that there is a lack of process that goes from development to QA and then to production. He often asks his clients " if there is a security issue in your code and i give you a one line code of patch for it, how long will it take you to deploy that to production"? and the shorter the answer to that the better the client is in their cyber security implementation. One of the other issue Kevin runs into often is when clients fork their Angular and then they are hesitant to update their Angular version because of all the security patches they have in place. So that becomes a catch 22 example so Kevin warns against forking Angular because it becomes a big security risk. Kevin goes on to share some of the other common mistakes that companies make that puts at them risk for security. Host: Aaron Frost Joined By Special Guest: Kevin A. McGrail My Angular Story is produced by DevChat.TV in partnership with Hero Devs Sponsors Sentry– use the code “devchat” for two months free on Sentry’s small plan Adventures in DevOps CacheFly Links Kevin's LinkedIn Picks Aaron Frost: https://www.npmjs.com/package/angular-prerender Kevin A. McGrail: Learn about regular expressions - Global regular expression (GREP)
Aaron Frost talks to Kevin A. McGrail, Director of Business Growth at InfraShield on this week's My Angular Story. Kevin specializes in cyber security and e-mail security. At InfraShield they specialize in cyber physical security in critical infrastructures. Kevin explains what cyber physical security entails and how it is different than IT security. It includes both information security and operational security including a wide spectrum from computer access to building access. Bridging both physical and cyber space security requires Kevin to use a lot of Angular but Angular is only one of the 40 languages Kevin uses in his job. Kevin gives examples of cyber security breaches he runs into and the number one failure he sees all the time is that there is a lack of process that goes from development to QA and then to production. He often asks his clients " if there is a security issue in your code and i give you a one line code of patch for it, how long will it take you to deploy that to production"? and the shorter the answer to that the better the client is in their cyber security implementation. One of the other issue Kevin runs into often is when clients fork their Angular and then they are hesitant to update their Angular version because of all the security patches they have in place. So that becomes a catch 22 example so Kevin warns against forking Angular because it becomes a big security risk. Kevin goes on to share some of the other common mistakes that companies make that puts at them risk for security. Host: Aaron Frost Joined By Special Guest: Kevin A. McGrail My Angular Story is produced by DevChat.TV in partnership with Hero Devs Sponsors Sentry– use the code “devchat” for two months free on Sentry’s small plan Adventures in DevOps CacheFly Links Kevin's LinkedIn Picks Aaron Frost: https://www.npmjs.com/package/angular-prerender Kevin A. McGrail: Learn about regular expressions - Global regular expression (GREP)