Скачать или смотреть Talking Cybersecurity with Dr. Ron Ross of NIST

In this episode Jacob talks with Dr. Ron Ross from NIST! This is the final of a three-part series with Dr. Ross.

In the episode Dr. Ross shares his thoughts on topics like ChatGPT, zero trust, his top 5 security controls, advice to folks new to cybersecurity, and much more!

Here are some key topics we discussed:

Top challenges in federal cybersecurity compliance
How to enable positive cybersecurity culture
The missing strategic view in cybersecurity
Zero Trust
LLMs like ChatGPT
The importance of managing complexity
Dr. Ross's top 5 critical security controls
Advice to folks new to cybersecurity

Dr. Ross is the author of multiple publications including Risk Management Framework (RMF), NIST 800-53, NIST 800-171, and many more!

Dr. Ross leads the FISMA Implementation Project which includes the development of security standards and guidelines for the federal government, contractors, and the United States critical infrastructure.

He also leads the Joint Task Force, an interagency group that includes the DoD, U.S. Intelligence Community, and the Committee on National Security Systems, with responsibility for developing a unified information security framework for the federal government and its contractors.

Follow Ron on LinkedIn:   / ronrossecure  

NIST CSRC Website: https://csrc.nist.gov/

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_so...

Need a FedRAMP authorized Password Manager?

Start a free 14-day trial of Keeper: https://grcacademy.io/ref/keeper/b2b-...

See the CMMC controls that Keeper meets: https://grcacademy.io/ref/keeper/cmmc...

00:00 Beginning
00:24 Top challenges in federal cybersecurity compliance
03:25 How to enable positive cybersecurity culture
05:41 The missing strategic view in cybersecurity
09:46 Zero Trust
14:19 LLMs like ChatGPT
17:14 Managing complexity
20:04 Dr. Ross's top 5 critical security controls
24:44 Advice to folks new to cybersecurity
29:29 Conclusion