453 — Jeff Frisk & Jeff Pike w/ SANS
From Paul’s Security Weekly · hosted by Paul Asadoorian, Larry Pesce, Mike Perez
Audio for this episode is not yet linked on CastingBridges. Listen on the show's site →
Summary
This week on Security Weekly we interview Jeff Pike and Jeff Frisk from SANS GIAC. Paul and Larry talk about digital badges, CPEs, and SANS training. Paul, Larry, and Mike talk about the Hacker Summer Camp Planning Guide, Open DNS Blogs, and wireless mics and keyboards… The best place to get information about security! Stay tuned for the best in security news.
Learning Points (Q&A)
-
In addition to passing the written exam, which of the following is required to achieve GIAC Gold status?
- a) publishing a technical paper
- b) delivering a keynote speech
- c) media guest appearance
- d) agreeing to a code of ethics
-
GIAC certifications require 36 CPE credits every 4 years. Select the approved CPE option.
- a) Security B-Sides attendance
- b) Local security chapter participation
- c) Cyber Range activities
- d) All of the above
-
When presenting a software developer scenarios in which someone could hack their system, their initial response is, “Who or why would someone do that?” What is the significance of this response?
- a) Security was most likely considered appropriately during system design
- b) Security was most likely NOT considered appropriately during system design
-
Companies can face ruin if sensitive data is exposed and have reacted to ransomware demands how?
- a) relying on PR campaigns to recover
- b) creating chief ransom officer (CRO) roles
- c) not taking the threat seriously
- d) paying the bounty
-
90% of most security budgets are spent on preventative measures and fail to address the timely detection of a breach when it occurs.
True or False.
Interactive Q&A is shipping on a pilot episode first; the other 9 episodes display Learning Points read-only at v0. Full interactive rollout activates with v0.1.
Provider Status
This Executive Review is published under the v0 fair-use editorial posture, identical to the posture the February 2016 Cybersecurity Podcasts Today: Executive Series issue shipped under. The show's Provider has not yet been onboarded into CastingBridges' Provider compensation flow. When CastingBridges' first institutional partnership activates, this Executive Review will be re-issued under signed Provider consent with structured Provider compensation per the CastingBridges allocation model.