Mergers & Acquisitions
mnemonic security podcast
12/20/21
•45m
About
Comments
Featured In
The business of cyber security: Mergers & Acquisitions
What separates the acquisitions that go well from those that don’t?
To discuss the business side of security, Robby is joined by Brian Contos; returning guest, fellow podcast host, serial security entrepreneur and CISO & Vice President of Mandiant Security Validation.
Mandiant Security Validation, previously known as Verodin, was acquired by Mandiant little over two years ago. In this episode, Brian shares from his experience going through that process, as well as other similar transitions he’s been a part of throughout his 25 year long career in security.
In their discussions, they go into everything that leads up to an acquisition decision, picking the right company with the right DNA and how to get the two companies to fit together.
Brian also shares what he’s learned about how to start your own security company, and why he believes there’ll be more mergers and acquisitions happening in the security space in the next years than we’ve seen in the last two decades.
Producer: Paul Jæger
Previous Episode
Initial Access Brokers
December 6, 2021
•37m
Initial Access Brokers (IABs)
The growth and professionalisation of the Initial Access Market has fascinated many in recent years. Few know as much about who the threat actors operating in these markets are, and how the market of providing others with remote access to corporate networks work as Dmitry Shestakov, Head of Cybercrime Research at the cyber intelligence company Group-IB.
In his conversation with Robby, Dmitry shares some of his findings after researching these underground communities over several years. He also goes into how his team of researchers work with Initial Access Brokers, and shares some light onto some of their on-going investigations.
They also discuss where these groups operate from, how many of them manage to remain uncovered, and who they actually sell their information to.
Producer: Paul Jæger
Next Episode
CMMC
December 27, 2021
•37m
CMMC: Cybersecurity Maturity Model Certification
Your security reflects your maturity.
For this episode, Robby is joined by two of mnemonic’s security experts from our Governance, Risk and Compliance department to talk about CMMC and the alphabet soup that comes with it.
Both of them have experience preparing organisations for what CMMC actually means for them. Anders Hval Olsen as an Information Security Management Implementation subject-matter expert, and Kenneth Crawford, using his long experience with US Defense and defense contracting, among other things as a Cybersecurity Manager at Lockheed Martin.
They discuss how the new cybersecurity requirements to work with the US Defense industry will influence both US organisations and international subcontractors performing everything from software development to human resource services. As well as what CMMC actually means for securing your supply chain and investing in your security posture, why they believe every security professional should have knowledge of CMMC and how CMMC 2 differs from the original certification model.
Related reading: https://www.mnemonic.no/blog/cmmc/
Producer: Paul Jæger
If you like this episode you’ll love
Promoted