James Yarnall's guest appearances

James Yarnall

ITSPmagazine

Redefining CyberSecurity

Julie Smith

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Caleb Barlow

Brian Kelly

OwlTail

Cody Wamsley

Security teams are very technical and tactical by nature, often looking at risk through a specific lens they've developed over time. But, of course, the reality is that the possible security incident can — and likely will be — much more extensive and require different teams and expertise. One bad mishandle and an event or incident could become an even more significant risk. Successfully managing risk is not just about InfoSec; it's not just business operations, and it's not just a legal risk either. The truth is, an incident is a business risk that requires the synergy of many teams within the organization — this includes the general counsel. As you listen to this episode, hopefully, you will start thinking a little more about how legal was (and should be) involved — or not, in some cases — in the information security program planning and incident response handling. ____________________________ GuestsJames YarnallOn Linkedin 👉https://www.linkedin.com/in/jamesyarnall/ Cody WamsleyOn Twitter 👉https://twitter.com/codywamsleyOn Linkedin 👉https://www.linkedin.com/in/codywamsley/ ____________________________ This Episode’s Sponsors HITRUST: https://itspm.ag/itsphitweb Semperis: https://itspm.ag/semperis-1roo ____________________________ To see and hear more Redefining Security content on ITSPmagazine, visit:https://www.itspmagazine.com/redefining-security Are you interested in sponsoring an ITSPmagazine Channel?👉 https://www.itspmagazine.com/podcast-series-sponsorships

Security teams are very technical and tactical by nature, often looking at risk through a specific lens they've developed over time. But, of course, the reality is that the possible security incident can — and likely will be — much more extensive and require different teams and expertise. One bad mishandle and an event or incident could become an even more significant risk. Successfully managing risk is not just about InfoSec; it's not just business operations, and it's not just a legal risk either. The truth is, an incident is a business risk that requires the synergy of many teams within the organization — this includes the general counsel. As you listen to this episode, hopefully, you will start thinking a little more about how legal was (and should be) involved — or not, in some cases — in the information security program planning and incident response handling. ____________________________ Guests James Yarnall On Linkedin 👉<a href="https://www.linkedin.com/in/jamesyarnall/" rel="nofollow" target="_blank">https://www.linkedin.com/in/jamesyarnall/</a> Cody Wamsley On Twitter 👉<a href="https://twitter.com/codywamsley" rel="nofollow" target="_blank">https://twitter.com/codywamsley</a> On Linkedin 👉<a href="https://www.linkedin.com/in/codywamsley/" rel="nofollow" target="_blank">https://www.linkedin.com/in/codywamsley/</a> ____________________________ This Episode’s Sponsors HITRUST: <a href="https://itspm.ag/itsphitweb" rel="nofollow" target="_blank">https://itspm.ag/itsphitweb</a> Semperis: <a href="https://itspm.ag/semperis-1roo" rel="nofollow" target="_blank">https://itspm.ag/semperis-1roo</a> ____________________________ To see and hear more Redefining Security content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/redefining-security" rel="nofollow" target="_blank">https://www.itspmagazine.com/redefining-security</a> Are you interested in sponsoring an ITSPmagazine Channel? 👉 <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

The Role Of General Counsel For Incident Response Planning And Handling | Redefining Security With Cody Wamsley And James Yarnall

Jill Orhun

In a SOC, there is the tech stack and the human one. Not really. The fact is, one cannot exist without the other, and the way their synergy manifests can make the difference between success and failure.The work of SOC analysts can be tedious, repetitive, and time-consuming; yet professionals filling this role need to be persistent, curious, and smart. It can prove difficult to get these things to weave together from the start (attracting and hiring talent) and over the long run (training and retaining talent). If the weave is loose and messy, success can be hard to define and achieve — and the “chaos” that comes with this messiness can lead to struggles for the individuals and the team overall.Sometimes, there are responsibilities and activities that just downright prove challenging. Other times, however, the organization may put practices, technologies, and unnecessary constraints in place that add even more challenge and angst in places that could otherwise be avoided.Are we expecting people to work hard/er simply because they want to do good for the company? Do we take that for granted? Do we know what motivates them and how they measure success for themselves?It's when those details align with the team’s goals and measurements and also align with the company’s business goals for growth, revenue, and cost savings, that the SOC operations can succeed without crushing the team in the process.Managers need ways to measure how SOC analysts can improve, to help guide a training and career plan for them, shore up their weaknesses, and expand on their strengths while keeping an eye out for where they want to go next. Bored and burnt-out analysts are also less effective analysts and are more prone to make mistakes; so it helps both the person and the company and to take heed of how they are managed, incentivized, and treated.(This contains promotional content: learn more)Guest(s)Jill Orhun, Vice President of Customer Success, DevoJames Yarnall, Director of Cyber Security Operations &amp; Intelligence, Freddie MacResourcesTo download and read the Tale of Two SOCs Report, visit https://itspm.ag/2YzLeFACatch all of the episodes in this series and access even more valuable resources by visiting www.itspmagazine.com/their-stories/a-tale-of-2-socs-technology-people-business-for-the-win-a-three-chapter-story-with-devoLearn more about their company and their offering: https://itspm.ag/itspdvwebAre you interested in telling your story?https://www.itspmagazine.com/telling-your-story

In a SOC, there is the tech stack and the human one. Not really. The fact is, one cannot exist without the other, and the way their synergy manifests can make the difference between success and failure.The work of SOC analysts can be tedious, repetitive, and time-consuming; yet professionals filling this role need to be persistent, curious, and smart. It can prove difficult to get these things to weave together from the start (attracting and hiring talent) and over the long run (training and retaining talent). If the weave is loose and messy, success can be hard to define and achieve — and the “chaos” that comes with this messiness can lead to struggles for the individuals and the team overall.Sometimes, there are responsibilities and activities that just downright prove challenging. Other times, however, the organization may put practices, technologies, and unnecessary constraints in place that add even more challenge and angst in places that could otherwise be avoided.Are we expecting people to work hard/er simply because they want to do good for the company? Do we take that for granted? Do we know what motivates them and how they measure success for themselves?It's when those details align with the team’s goals and measurements and also align with the company’s business goals for growth, revenue, and cost savings, that the SOC operations can succeed without crushing the team in the process.Managers need ways to measure how SOC analysts can improve, to help guide a training and career plan for them, shore up their weaknesses, and expand on their strengths while keeping an eye out for where they want to go next. Bored and burnt-out analysts are also less effective analysts and are more prone to make mistakes; so it helps both the person and the company and to take heed of how they are managed, incentivized, and treated.(This contains promotional content: <a href="https://www.itspmagazine.com/their-infosec-story" rel="nofollow" target="_blank">learn more</a>)Guest(s) <a href="https://www.linkedin.com/in/jillorhun/" rel="nofollow" target="_blank">Jill Orhun</a>, Vice President of Customer Success, Devo<a href="https://www.linkedin.com/in/jamesyarnall/" rel="nofollow" target="_blank">James Yarnall</a>, Director of Cyber Security Operations &amp; Intelligence, Freddie MacResources To download and read the Tale of Two SOCs Report, visit <a href="https://itspm.ag/2YzLeFA" rel="nofollow" target="_blank">https://itspm.ag/2YzLeFA</a>Catch all of the episodes in this series and access even more valuable resources by visiting <a href="https://dashboard.simplecast.com/accounts/d823831c-ffbb-4fae-bf47-47106f575cd4/shows/0310f993-fbb0-4fcc-b698-db9af99f73ca/episodes/07051ba7-5aa5-43ba-a636-8d224f9643ca/www.itspmagazine.com/their-stories/a-tale-of-2-socs-technology-people-business-for-the-win-a-three-chapter-story-with-devo" rel="nofollow" target="_blank">www.itspmagazine.com/their-stories/a-tale-of-2-socs-technology-people-business-for-the-win-a-three-chapter-story-with-devo</a>Learn more about their company and their offering: <a href="https://itspm.ag/itspdvweb" rel="nofollow" target="_blank">https://itspm.ag/itspdvweb</a>Are you interested in telling your story? <a href="https://www.itspmagazine.com/telling-your-story" rel="nofollow" target="_blank">https://www.itspmagazine.com/telling-your-story</a>

The Very Human Side Of A SOC. A Tale Of Two SOCs | A Devo Story — Part 2 of 3 | With Jill Orhun And James Yarnall