Control 3: Data Protection (part 2) - Sponsored by Datto Artwork

The CyberCast

The CyberCast is purpose built for MSPs, MSSPs and IT Practitioners.In each episode you will learn about a new security control, how it maps to the different frameworks, the impact it has, building a policy around it, how the threat actors exploit it - via MITRE ATT&CK - what you can do to defend against it - MITRE Shield, common mistakes or oversights made when implementing into their tech stack and trends.Sponsors:Datto - CIS Control 3 - Data ProtectionNetwrix - CIS Control 3 - Data ProtectionDuo - CIS Control - Multifactor Authentication

All Episodes

The CyberCast

Control 3: Data Protection (part 2) - Sponsored by Datto

July 09, 2021 • Andrew Morgan

Abstract: CIS Control 3 is Data Protection and data is pretty much what's at stake for a high percentage of cyber attacks. Data is more valuable than oil and it fuels many organizations. Many of the baseline security recommendations from all of the security frameworks out there now recommend, or REQUIRE if you’re in a regulated industry such as healthcare, that certain things like full disk encryption are simply put into place no matter your risk profile. Much of what’s in the Data Protection Control represents the modern reality of cybersecurity.

Note: we split up Data Protection into two shorter podcasts (about 20 minutes each) and therefore, you will see a "part 1 & part 2".

Part 2 focuses in depth into CIS Control 3 and the Safeguards 3 - 7 (formerly called sub controls).

Co-hosts in part 2 are: Ryan Weeks, CISO of Datto and Wes Spencer, CISO of Perch Security.

Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Sponsor: Datto - https://www.datto.com/
Rob Rae, SVP of Business Development: https://www.linkedin.com/in/robtrae/
DattoCon: https://seattle.dattocon.com/