In Episode 25 of Tattoos, Code, and Data Flows, Matt Rose interviews , Paul Asadoorian, Firmware Security Evangelist at Eclypsium.

Paul Asadoorian spent time “in the trenches” implementing security programs for a lottery company and then a large university. Paul is offensive, having spent several years as a penetration tester. He is the founder of the Security Weekly podcast network, offering freely available shows on the topics of information security and hacking. As Product Evangelist for Tenable Network Security, Paul built a library of materials on the topic of vulnerability management. When not hacking together embedded systems (or just plain hacking them) or coding silly projects in Python, Paul can be found researching his next set of headphones.

Paul and Matt talk about:

↳ The lack of updates from firmware

↳ Building a management interface into your device

↳ Most common security issues with firmware

↳ Supply chain risk vs firmware risk

And so much more.

Be sure to listen to this episode, and so many of our other great episodes by hitting the follow button. Make sure to like and subscribe to the episode.

We hope you enjoy it!

In Episode 24 of Tattoos, Code, and Data Flows, Matt Rose interviews Robert Wood, CISO of Centers for Medicare & Medicaid Services.

Robert Wood leads enterprise cyber security, compliance, privacy, and counter intelligence functions at CMS and ensures the Agency complies with secure IT requirements while encouraging innovation. He has over 10 years of experience in information technology, information security and management consulting. Prior to CMS, Robert has built and managed several security programs in the technology sector. He was also formerly a Principal Consultant for Cigital where he advised enterprises about their software security programs. He also founded and led the red team assessment practice with Cigital, focused on holistic adversarial analysis, helping organizations identify and manage risks from alternative perspectives.

Robert and Matt talk about:

↳ Transitioning from start-ups to working for a federal enterprise

↳ The problem with "zero trust" today

↳ Shifting everywhere in the CI/CD pipeline

↳ Robert's story to becoming a successful CISO

And so much more.

Be sure to listen to this episode, and so many of our other great episodes by hitting the follow button. Make sure to like and subscribe to the episode.

We hope you enjoy it!

In Episode 23 of Tattoos, Code, and Data Flows, Matt Rose interviews Debbie Gordon, Founder & CEO of Cloud Range.

Debbie has focused her work on businesses that improve people’s lives. Her career began in technical education and certification, and she has built and sold several companies in eCommerce, IT asset management, and training. She is currently on the board of directors of Entrepreneurs’ Organization - Nashville. Debbie is a frequent speaker on cybersecurity readiness, simulation training, and team effectiveness at conferences and seminars all around the world.

Debbie's current role is founder and CEO of Cloud Range, the industry-leading cybersecurity simulation training solution that helps organizations reduce cyber risk. A globally recognized technology entrepreneur, Debbie founded Cloud Range on the premise that simulation training is as integral in cybersecurity as it is in other fields like medicine, aviation, or the military. The result was that Cloud Range led the development of a new category in cybersecurity. Only three years later, organizations around the globe are incorporating the company’s cyber readiness solution as a core element of their security programs.

Debbie and Matt talk about:

↳ The evolution of cybersecurity and finding talent

↳ Refining your technology stack and understanding your tools

↳ Investing in the people that make up your company

↳ Different types of simulation scenarios

And so much more.

Be sure to listen to this episode, and so many of our other great episodes by hitting the follow button. Make sure to like and subscribe to the episode.

We hope you enjoy it!