If you are looking for insights about the intersection of cybersecurity, compliance, and security program lifecycle management, the Tuesday Morning Grind is the podcast for you. Each week,
Christian Hyatt and
Shane Peden dive into special topics related to security program management. Learn how to build and mature your own world class security and compliance program.
Our Current Series
Our current series covers the Systems Development Lifecycle from a security auditor and assessors’ perspective. In episode one we talked about different approaches to software development including Scrum, Kanban, and DevOps. In episode two we explored DevOps and DevSecOps and how the process has evolved in the market. Common tools implemented as part of their DevOps strategy are also discussed. Tomorrow morning, we will finish the series by discussing how to effectively map and audit the process. We plan to wrap that discussion up with some ideas on how you can identify security integration opportunities and take the team from DevOps to DevSecOps.Where to Find the Show
There are multiple ways you can catch the Tuesday Morning Grind.- TWITCH.TV: Live every Tuesday morning at 7am on our Twitch Stream: https://twitch.tv/risk3sixty
- YOUTUBE: On Youtube by searching for risk3sixty and subscribing to our channel.
- AUDIO: As an audio podcast on a service of your choice. Find a complete list at anchor.fm/risk3sixty.
Christian Hyatt
Like our content? Subscribe and stay informed.
Related posts
Tags
- Access Control (3)
- Amazon (1)
- Artificial Intelligence (3)
- Assessment (1)
- Attack Surface (2)
- Attack Surface Management (3)
- Attestation (1)
- Audit (1)
- Awareness Week (3)
- AWS (2)
- Backup And Recovery (1)
- BCAW (4)
- BCMS (1)
- Blackbasta (1)
- Business (16)
- Business Continuity (6)
- Business Continuity Planning (2)
- Caas (1)
- Certification (1)
- Christian Hyatt (19)
- CI (1)
- CISO (8)
- CISO Discussions (24)
- Cloud (1)
- CMMC (1)
- Competitive (1)
- Compliance (17)
- Compliance As A Service (5)
- COVID (1)
- Cyber Risk (6)
- Cyber Risk Management (59)
- Cyber Security Law (2)
- Cybersecurity (26)
- Cybersecurity Controls (4)
- Disaster Recovery (5)
- Engineers (1)
- Ethical Hacking (1)
- EU AI Act (3)
- Exercises (1)
- GDPR (4)
- GRC Tool (6)
- Grit (1)
- Hacking (3)
- Hashcat (1)
- HITRUST (16)
- IaaS (1)
- Information Security (11)
- Internal Audit (2)
- ISO (3)
- ISO 22301 (1)
- ISO 27001 (18)
- ISO 27001 Compliance (19)
- ISO 27018 (1)
- ISO 27701 (2)
- ISO 42001 (6)
- ISO 42005 (1)
- IT Audit (9)
- IT Audit And Compliance (33)
- Kahoot (1)
- Leadership (6)
- Management (1)
- Network Security (4)
- News (5)
- News And Events (20)
- NIST 800 Series (2)
- NIST 800-171 (1)
- OSINT (1)
- Outsourced Pci (1)
- P2pe (1)
- Passwords (3)
- PCI DSS (13)
- Penetration Test (7)
- Penetration Testing (31)
- Pentest Report (1)
- Phishing (1)
- PIA (1)
- Press Release (3)
- Privacy (8)
- Privacy Compliance (7)
- Privacy Impact Assessment (1)
- Privacy Shield (1)
- Ransomeware (1)
- Regulatory Compliance (12)
- Report (2)
- Risk Assessment (5)
- Risk Management (19)
- SDLC (2)
- Security (22)
- Security Advisory (1)
- SOC 2 (18)
- SOC Reporting (23)
- Soc2 (1)
- Strategy (1)
- System Backdoor (1)
- Tabletop (1)
- Training (5)
- VCISO (7)
- Vendor Management (2)
- Vulnerability Management (2)
- Vulnerability Scan (1)
- Wannacry (1)
- Webinars (9)