Retail & Hospitality ISAC Podcast
RH-ISAC
Subscribe
The Retail & Hospitality ISAC interviews members of the InfoSec community about the latest cybersecurity challenges and best practices unique to the retail and hospitality industry.
Available episodes
Newest first
Oldest first
Sep 13, 2023
Cybersecurity Awareness Month & SEC Updates
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Jay Banks, senior information security analyst of IT risk and compliance at Dick’s Sporting Goods, to talk about Cybersecurity Awareness Month in October. They explore the mechanisms Dick’s Sporting Goods employs to advocate for cybersecurity throughout the month. Then, Luke sits down with Christian Beckner, vice president of retail technology and cybersecurity at the National Retail Federation (NRF), to discuss the recent rules governing cybersecurity released by the U.S. Securities and Exchange Commission (SEC).
playlist_add
Aug 23, 2023
Charles Fedorko Member Spotlight, Cyber Safety for Children, & Intel Briefing
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Charles Fedorko, director of IT security at Sage Hospitality Group, to discuss his role, journey leading to his career in cybersecurity, and the current cybersecurity landscape surrounding the hospitality industry. Then, Luke sits down with Ellen Sabin, president of Watering Can Press, to discuss her new book educating children on proper cyber safety, The Super Smart Cyber Guide for Kids. Finally, Lee Clark, cyber threat intelligence analyst & writer at RH-ISAC, provides the latest intel briefing.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Aug 9, 2023
Discussion with Summit Title Sponsor, Synack, & Natura &Co’s CISO
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Blake Sobczak, Synack’s head of communications and README’s editor-in-chief, to discuss the latest news impacting the cybersecurity world. Keep an eye out for Synack at the upcoming RH-ISAC Cyber Intelligence Summit. Then, Luke sits down with Natura &Co’s CISO, Jonathan Lloyd White, to expand upon his background, current role, and Natura &Co’s founding principles.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Jul 26, 2023
Safeguarding Security with Associate Member Accenture, the Role of a BISO, & the Latest Intel Briefing
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Piyush Jain, global managing director of security (retail, consumer goods, life sciences, mobility, and travel) at Accenture, to discuss safeguarding an organization’s security. Then, Luke chats with Suzie Brown, hospitality solutions BISO (Business Information Security Officer) at Sabre Corporation, about her background, the role of a BISO, and provides aspiring and current BISOs with tips for success. Finally, Lee Clark, cyber threat intelligence analyst & writer at RH-ISAC, delivers the latest intel briefing including a full run-down of the ongoing CL0P/MOVEit vulnerability.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Jul 12, 2023
NACD Accelerate, Ian Furr’s Volunteer Work, & Bidemi (Bid) Ologunde Member Spotlight
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by John Scrimsher, chief information security officer (CISO) at Kontoor Brands, Inc., and Marcel Bucsescu, senior director of credentialing and strategic engagement at NACD, to expand upon the NACD Accelerate program. Then Ian Furr, security integration engineer at RH-ISAC, talks about his volunteer work with the Information Technology Disaster Resource Center (ITDRC) and the Fairfax County Fire and Rescue Department. Finally, Luke chats with Bidemi (Bid) Ologunde, intelligence analyst at Expedia Group, about his own podcast, The Bid Picture, background, and the trajectory of cybersecurity.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Jun 28, 2023
Securing the Store of the Future & Intel Briefing
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Shad Taylor, solution architect for retail & hospitality at Fortinet, to expand upon securing the store of the future. Then, Lee Clark, cyber threat intelligence analyst & writer at RH-ISAC, provides the latest intel briefing.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Jun 14, 2023
Homographs in Domain Spoofing & Rafia Noor Member Spotlight
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Dom Lutz, an information security engineer at URBN, to expand upon a personal research project he is working on, homographs in domain spoofing. Then, Luke sits down with Rafia Noor, an information security engineer in the operation technology division at Colgate-Palmolive, to discuss her career path, intelligence sharing at the RH-ISAC, and the trajectory of cybersecurity.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
May 24, 2023
Hyatt’s CISO, Intel Briefing, & Third-Party Risk Management with Cyber GRX
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Ben Vaughn, senior vice president and CISO at Hyatt. During the second part of this interview, Ben reviews Hyatt’s guiding principles and how Hyatt optimizes cyber insurance renewal. Luke also highlights N2K’s new podcast, T-Minus. Then, Lee Clark, cyber threat intelligence analyst & writer at RH-ISAC, provides the latest intel briefing. Finally, Luke chats with Dave Stapleton, Cyber GRX’s CISO, on accelerating business growth while minimizing third-party risk.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
May 10, 2023
Hyatt’s CISO & PCI DSS v4.0
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Ben Vaughn, senior vice president and CISO at Hyatt. During this two-part interview, Ben discusses diversity in the cybersecurity industry and explains Hyatt guiding principles. The second part of this interview will air during the May 24 episode.
Then, Luke is joined by co-host Alicia Malone, senior manager of public relations at PCI SSC, Kandyce Young, manager of data security standards at PCI, and Tony James, director of cyber security at Target to discuss the rollout of PCI DSS v4.0. Questions relating to the rollout? Register here for the RH-ISAC and PCI DSS v4.0 webinar on May 25 at 3 p.m. ET. More information about PCI and the new version can be found on the following resources page.
playlist_add
Apr 26, 2023
Cyber Risk Quantification, Level 6 Cybersecurity, & Intel Briefing
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Cam Sabatini, senior analyst of information security, planning, and architecture at Abercrombie & Fitch Co., and Kristen Dalton, director of strategic cyber engagement, research, and analytics at RH-ISAC, as they explore cyber risk quantification (CRQ). Then, Kevin Jackson, founder and CEO of Level 6 Cybersecurity, expands upon how Level 6 came to fruition, the business model, and new offerings. Finally, Lee Clark, cyber threat intelligence analyst & writer at RH-ISAC, provides the latest intel briefing.
Link to episode 21 on 2023 CISO and Practitioner Benchmark Survey.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Apr 12, 2023
Threat Actor Profile Catalog, Upcoming Europe Events, & Cybersecurity First Principles
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Bryon Hundley, RH-ISAC’s VP of intelligence operations, and JJ Josing, RH-ISAC’s principal threat researcher, to discuss the recent launch of RH-ISAC’s threat actor profile catalog. Then, Suzie Squier, RH-ISAC’s president, and Rafael (Rafa) Villoria Ferrer, head of global cyber security operations centre at Nestlé, discuss the upcoming events occurring in Europe. The episode concludes with a feature from Rick Howard, N2K's CSO and The CyberWire’s chief analyst and senior fellow, who expands upon his new book, Cybersecurity First Principles: A Reboot of Strategy and Tactics.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Mar 22, 2023
360 Privacy, Intel Briefing, & Jeffrey Davidhizar Member Spotlight
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Benjamin Barrontine, vice president of executive services at 360 Privacy. Then, Lee Clark, RH-ISAC's cyber threat intelligence analyst & writer, reviews the latest intel briefing. Finally, Luke speaks with Jeffrey Davidhizar about how he transitioned from teaching math to middle and high school students, to his career in cybersecurity at Crutchfield Corporation.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Mar 8, 2023
Consumer Safety in the Cyber Landscape & Chris De La Rosa Member Spotlight
In this episode of the Retail & Hospitality ISAC podcast, host Luke Vander Linden is joined by Courtney Radke, field CISO, retail & hospitality at Fortinet, and Ryan Lange, IT director infrastructure and security at Batteries Plus. Together they investigate the risks and latest threats confronting the cyber industry impacting customers, effective technologies in addition to mitigation tactics, and learning to pivot in the rapidly evolving retail space. Then, Luke speaks with Chris De La Rosa, about how he cultivated a career in cybersecurity and his current role at DICK'S Sporting Goods as their senior threat intelligence analyst.
To hear the full interview of Luke's interview with Ira Winkler, check out Episode 16.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Feb 22, 2023
National Retail Federation, Intel Briefing, and 2023 Events Kick-off
In this episode of the Retail & Hospitality ISAC podcast, RH-ISAC's president, Suzie Squier, and Christian Beckner, National Retail Federation’s vice president of retail technology and cybersecurity, expand upon RH-ISAC’s new partnership with NRF. Then, Lee Clark, RH-ISAC's cyber threat intelligence analyst & writer, reviews the latest intel briefing. Finally, host Luke Vander Linden and Alex Brown, RH-ISAC’s director of events, discuss this year’s Regional Workshop series.
Thank you to Fortinet for their sponsorship of the Retail & Hospitality ISAC podcast.
playlist_add
Jan 18, 2023
2023 CISO and Practitioner Benchmark Survey
In this episode of the RH-ISAC podcast, Kristen Dalton, director of strategic cyber engagement, research, and analytics, shares the results of this year's CISO and Practitioner Benchmark Surveys, including CISO priorities, budget, staffing, and skill gaps.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Dec 13, 2022
Retail Threat Trends: Holidays and Beyond
In this episode of the RH-ISAC podcast, Lee Clark, RH-ISAC cyber threat intelligence analyst & writer, provides an update on holiday threat trends. Then, Courtney Radke, retail CISO and principal architect at Fortinet, shares predictions for top retail threats in 2023.
Download the Holiday Threat Trends Report. Not a member? Learn more about exclusive member benefits.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Nov 29, 2022
Bug Bounty Programs: The Good, the Bad, and How To Get Started
In this episode of the RH-ISAC podcast, RH-ISAC member, Rob Fuller, shares his first-hand experience with vulnerability disclosure, or bug bounty programs, the benefits, the challenges, and some tips for getting your program off the ground.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Nov 17, 2022
API Security & Target’s Take on Ransomware Resilience
In this episode of the RH-ISAC podcast, Matt Tesauro, distinguished engineer at Noname Security, discusses API vulnerabilities and how API testing is shifting left. Then, Kelsey Helms, principal analyst, and Ryan Miller, senior director, cybersecurity, at Target share how they're taking ransomware resiliency beyond the basics and collaborating across their organization.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Oct 26, 2022
Getting Started with MISP & Commercialization of Bots in Fraud
In this episode of the RH-ISAC podcast, our intel team shares how members can start taking advantage of the new RH-ISAC community instance of the threat intel platform, MISP. Then, Lee Clark, RH-ISAC cyber threat intelligence analyst and writer, and Sam Crowther, founder & CEO of Kasada, discuss the trends they're seeing in the fraud space, including how bots have become commercialized, lowering the barrier of entry for fraud attacks.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Oct 12, 2022
You Can Stop Stupid: Security Awareness Month
In this episode of the RH-ISAC podcast, Ira Winkler, author of "You Can Stop Stupid", shares how we can start designing systems with controls in place to limit the damage caused by human error. Then, Mike Britton, CISO of Abnormal Security, shares how they're using automation to stop the next generation of email threats.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Sep 28, 2022
Preparing for PCI DSS 4.0 & Monthly Intel Threat Briefing
In today's podcast episode, Lee Clark, RH-ISAC's cyber threat intelligence analyst & writer, shares monthly threat trends including information on the recent Lockbit builder code leak and MFA bombing. Then, Idan Cohen from Reflectiz shares how you can prepare for PCI DSS 4.0 to make sure you remain compliant.
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Sep 13, 2022
Creating the 2022 Summit & Christy Elgee Member Spotlight
In this episode of the RH-ISAC podcast, Alex Brown, director of events, talks with members of the Summit Working Group about the content at this year's event. Then, Kristen Dalton, director of strategic cyber engagement, research, and analytics, chats with our September Member Spotlight, Christy Elgee, about how she transitioned from business into cybersecurity with the help of the SANS Institute's Women's Immersion Academy.
Not registered for the Summit yet? Register now for next week's event!
Thank you to Fortinet for their sponsorship of the RH-ISAC podcast.
playlist_add
Aug 30, 2022
Jordan Bodily Member Spotlight & The Future of Cloud Security
In this episode of the RH-ISAC podcast, Ian Furr, our security integrations engineer, interviews Jordan Bodily, infrastructure security engineer at BigCommerce. Jordan describes his start in cybersecurity, “drinking from a firehose”, and how being a member of the RH-ISAC sharing community has helped him and his team. Then, our president, Suzie Squier, interviews Jim Reavis and Troy Leach from the Cloud Security Alliance who share with us some of the trends they're keeping an eye on, such as blockchain and post-quantum cryptography.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Aug 17, 2022
Fraud Along the Customer Journey & Retail Intel Sharing Trends
In this podcast episode, Nate Kharrl and Anthony Micara from Spec discuss organizational challenges that prevent fraud detection across the customer journey. Then Lee Clark, from RH-ISAC's intel team, shares how RH-ISAC's member community sharing trends compare to those of the broader retail industry.
You can find the Verizon DBIR report referenced in this episode, on the RH-ISAC website.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Jul 27, 2022
Shadow IT & Passwordless Authentication
In this episode of the RH-ISAC podcast, Bel Lepe, Co-Founder & CEO of Cerby, shares how security teams can regain control of their shadow IT, or unmanageable applications. Then, Derek Hanson Vice President, Product Evangelist, at Yubico discusses how passwordless authentication and phishing-resistant MFA can help you accomplish business goals and improve the retail and hospitality customer experience.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Jul 13, 2022
Cybersecurity Professionals Helping Victims of Abuse
In this episode of the RH-ISAC podcast, RH-ISAC member, Nick Leicht, interviews Tony Hunt and Chris Cox from Operation: Safe Escape, or OSE. They share with us how their volunteers use cybersecurity skills to help victims of domestic abuse, stalking, and harassment, safely escape from their abusers.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
https://safeescape.org/
info@safeescape.org
playlist_add
Jun 29, 2022
Zero Trust Is Not a Product
In this episode of the RH-ISAC podcast, Bryon Hundley, VP of intel operations at RH-ISAC and Courtney Radke, Retail CISO and principal architect at Fortinet, discuss zero trust, what it is, what it isn't, and how organizations can work towards implementing zero trust policies.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Jun 15, 2022
Threats Across the Globe & Benchmarking with CyberGRX
In this episode, Luke Vander Linden, RH-ISAC's VP of membership and marketing, interviews the intel team who provide an update on the threat landscape in Asia and how MISP, a threat intel platform heavily used overseas, has grown in popularity among RH-ISAC members in the US. Then, Fred Kneip from CyberGRX shares with Suzie Squier, RH-ISAC president, how their risk assessment tools can be used to benchmark your security posture.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
May 25, 2022
Using OSINT for Good & the Cybercrime Support Network
In this episode, RH-ISAC member, Nick Leicht, interviews Tom Hocker, director of Trace Labs, an organization dedicated to using open source intelligence to assist law enforcement in the search for missing persons. Then, Andrew Dolan, director, cybersecurity strategic engagement, research & analytics sits down with Bob Burda, chief strategy officer for the Cybercrime Support Network. Bob shares with us CSN's mission and the top four things they advise everyone include in their security awareness training programs.
To learn more about these organizations, visit:
Trace Labs: https://www.tracelabs.org/
Cybercrime Support Network: https://cybercrimesupport.org/
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
May 11, 2022
Cybersecurity Legislation & Lowering Your Cyber Insurance Premium
In this episode of the RH-ISAC Podcast, former Cybersecurity Coordinator for President Obama, and current CEO of the Cyber Threat Alliance, Michael Daniel, shares the work CTA is doing to help CISA implement new cyber incident reporting legislation. Then, Justin Huff, security managing director at Accenture, provides tips for lowering your cyber insurance premium.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Apr 27, 2022
Defining Playbooks & Application Security in the Modern World
In this episode, two members of RH-ISAC's Incident Response Working Group, Jeff Mercer from Kontoor Brands and Logan Johnson from Discount Tire, discuss what defines a "playbook". Then, Dan Holden from BigCommerce gives us a preview of the content in his upcoming Cyber Thursday session, Client-Side Security Challenges Caused by the Usage of Third-Party Applications.
To learn more and register for Dan's session visit https://rhis.ac/appsec_podcast
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Apr 13, 2022
Risks that Lead to Ransomware & Confirming Spring4Shell
This episode features an interview with Kelly White, founder of RiskRecon, sharing the risk factors that have the highest correlation with successful ransomware attacks. Plus, RH-ISAC's intel team shares the work that was done to confirm the proof of concept of the Spring4Shell vulnerability.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Mar 29, 2022
Diversity Conversations in Cybersecurity and Live Events in 2022
In this episode of the RH-ISAC podcast, two female CISOs, Lauren Dana Rosenblatt, vice president & CISO at International Flavors & Fragrance and Chandra McMahon, senior vice president & CISO at CVS Health discuss how conversations about diversity have changed over the course of their careers. Then, RH-ISAC's director of events, Alex Brown, shares exciting news about the return to live events, kicking off in May with regional workshops.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Mar 16, 2022
Women in Cybersecurity and Holiday Retail Fraud Trends
March is Women's History Month, and to celebrate, we're dedicating this month's episodes to highlighting some of the amazing women in our cybersecurity community. In this episode of the RH-ISAC podcast, RH-ISAC's president, Suzie Squier talks to Lynn Dohm, executive director of Women in Cybersecurity (WiCyS) about their workforce development programs for students and how your organization can implement gender neutral hiring practices. Then, RH-ISAC's VP of intelligence operations, Bryon Hundley, sits down with Ashley Allocca of Flashpoint to discuss her research on the 2021 holiday season's retail fraud trends and the continued importance of security awareness for both customers and employees.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add
Feb 28, 2022
Insights from the 2021 CISO Benchmark Report
In this episode of the RH-ISAC Podcast, moderator Julia Hare, editor in chief of RETHINK Retail and panelists Courtney Radke, retail CISO, principal architect at Fortinet, Bryon Hundley, RH-ISAC VP of intelligence, and Diane Brown, vice president of IT risk management and CISO, discuss top initiatives for CISOs in 2022. The panelists discuss how their organizations are prioritizing critical projects like ransomware planning and implementation of multi-cloud environments, as well as limitations, such as lack of security awareness across company staff.
Thank you to Fortinet for their sponsorship of the RH-ISAC Podcast.
playlist_add