Control 1 & 2: Inventory Control of Enterprise Hardware & Software Assets - Sponsored by CyberCNS Artwork

The CyberCast

The CyberCast is purpose built for MSPs, MSSPs and IT Practitioners.In each episode you will learn about a new security control, how it maps to the different frameworks, the impact it has, building a policy around it, how the threat actors exploit it - via MITRE ATT&CK - what you can do to defend against it - MITRE Shield, common mistakes or oversights made when implementing into their tech stack and trends.Sponsors:Datto - CIS Control 3 - Data ProtectionNetwrix - CIS Control 3 - Data ProtectionDuo - CIS Control - Multifactor Authentication

All Episodes

The CyberCast

Control 1 & 2: Inventory Control of Enterprise Hardware & Software Assets - Sponsored by CyberCNS

June 09, 2021 • Andrew Morgan

Abstract: There is a cybersecurity saying; “you can’t protect what you don’t know about.” Without visibility into your information assets, their value, where they live, how they relate to each other and who has access to them, any strategy for protection would be inherently incomplete and ineffective.
Note sponsors are at the end at minute 28:30

The Why might an MSP want to listen? Most MSPs only capture 50% of the assets on a client's network.

Min 2:30 - 8:46 (Ryan Weeks, CISO of Datto discusses)

Importance of asset management.
What defines an asset.
What defines good asset management.
What are common assets missed in an MSPs inventory.

Min 8:47 - 16:06 (Wes Spencer, CISO of Perch Security)

The repercussions of poor asset management.
Importance of Asset Management, as it pertains to Incident Response.
How asset management help with IR plans & Tabletops.

Min 16:08 - 23:05 (Brian Blakely, Fractional CISO of Cosant Cybersecurity)

What your policy statement should include.
Learn the importance of Data Flow Diagrams (DFDs).
Control objectives and standards MSPs need to consider.
Asset considerations on the Right & Left side of "Boom".

Min 23:06 - 28:30 (Phyllis Lee, Sr. Director of Controls for CIS)

Why CIS and most frameworks start with asset management.
The progression of sub-controls as an organization moves from IG1 - IG3 in CIS.
What actionable steps should MSPs take to successfully implement Control 1 & 2.

Sponsors:
Center for Internet Security:
Phyllis Lee (28:30 - 30:58)
CSAT Pro - learn more here: https://www.cisecurity.org/cybersecurity-tools/cis-cat-pro/

Netalytics Security:
Shiva Shankar (31:00 - 38:50)
CyberCNS: https://www.cybercns.com/