On the Off the Wire podcast, hosts Tanner and Anthony welcome back Brian Williams, Sales Engineering Manager at Rubrik for East Coast public sector, to discuss how cyber recovery has evolved beyond immutable backups into a focus on mean time to recovery (MTTR), SaaS (especially Microsoft 365), and identity as the new primary attack surface. Brian explains that dwell time is shrinking for identity-based attacks like stolen session tokens, while AI accelerates vulnerability discovery and exploitation through speed and parallel “hive mind” agents. He emphasizes treating identity providers (AD/Entra/Okta) like crown-jewel data, noting Microsoft’s native Entra backup covers only users, groups, and roles, not enterprise apps or conditional access, making rebuilds slow. They cover why bulk M365 restores are throttled, the shared responsibility model, the risks of in-tenant backups, and the need for tested, prioritized recovery plans driven by revenue, regulatory, and safety needs.

00:00 Untitled project from SquadCast

01:18 Welcome and guest introduction

02:54 What's changed: immutability is now table stakes

04:22 Attack speed and dwell time

05:44 Why identity became the target

07:29 AI on offense

11:06 Recovery is the plan, not the last resort

12:40 Using AI on defense

14:57 Protecting identity: what native Entra backup misses

17:57 Evaluating identity protection tools

20:11 The shared responsibility model

24:21 Choosing vendors and asking the right questions

27:48 Why restoring everything at once fails

29:19 Deciding what comes back first

34:13 White glove hosting: trust but verify

39:24 Closing thoughts

In this Off The Wire episode, the hosts interview Chris about what makes co-ops better partners to their vendors, especially amid merger-related change and uncertainty. Chris says great members stand out by being engaged partners, coming prepared with clear outcomes and detailed requirements, and communicating early rather than at the last minute. He highlights how unclear or poorly thought-out requests drive rework, and outlines three preparation essentials: internal alignment across teams, defining the desired outcome, and setting realistic expectations about value and effort. The discussion covers how collective, multi-co-op requests gain priority, why “minor tweaks” often create cascading work, and how misalignment during major migrations can waste time and money. Chris emphasizes encouragement and respectful feedback, noting relationships can drift with turnover, and recommends strategic planning and relationship-building to strengthen partnerships.

00:00 Flip the Script

01:54 Great Co-op Partners

03:46 Costly Behaviors

05:42 Three Keys Prepared

09:27 Strategy and Buy In

10:43 Too Little Detail

13:25 Misalignment Migration

18:45 Communicate Earlier

20:10 Roadmap Priority Rules

21:37 Feedback That Matters

23:51 Toxic Feedback Lines

25:09 When Partnerships Drift

26:36 Managing Turnover Handoffs

27:42 Lightning Round Rapid Fire

29:43 Merger Reactions And Anxiety

32:17 Deeper Partnerships Post Merger

33:24 Strategy Alignment With Vendors

36:33 Wrap Up And Podcast Plug

Anthony and Tanner each built a top 5 list plus one honorable mention, and neither of us knew what was on the other's list. Real-time reactions, real gear, and a price range that runs from $36 to a few thousand dollars. Anthony's list ran cheap and practical. Tanner's ran toward infrastructure. Somehow we ended up at opposite ends of the spectrum on almost every single pick.

ANTHONY'S LIST

5. Anker 65W charger bricks

4. Wyze camera system

HM. AliExpress soldering station with heat gun

3. Bambu Lab P1S 3D printer

2. CM3588 flash-based NAS

1. OpenClaw AI agent server

TANNER'S LIST

5. Segway Navimow robot mower

4. Tempest home weather station

HM. Password manager (family plan)

3. EcoFlow battery and solar

2. Lutron Caseta smart switches

1. Ubiquiti network gear

CHAPTERS

00:00 Intro and the rules

03:55 Anthony #5: Anker chargers

05:40 Tanner #5: Robot mower

09:15 Anthony #4: Wyze cameras

10:40 Tanner #4: Tempest weather station

14:15 Why co-op people are obsessed with weather

15:20 Anthony honorable mention: Soldering station

17:30 Tanner honorable mention: Password manager

19:55 Anthony #3: Bambu Lab 3D printer

22:30 Tanner #3: EcoFlow batteries

26:45 Anthony #2: Flash NAS build

29:20 Tanner #2: Lutron Caseta and the Wife Approval Factor

32:20 Anthony #1: Running your own AI agent

35:30 Tanner #1: Ubiquiti

41:00 Wrap up

What's your number one piece of personal tech? Drop it in the comments. Got an episode idea, a question, or want to come on the show? Reach out on LinkedIn or email show@offthewirepodcast.com. Off the Wire covers cybersecurity, IT leadership, and technology for electric cooperatives and small business IT teams. Subscribe so you don't miss an episode.

In this Part 2 philosophical episode of Off The Wire, Tanner and Anthony discuss internal leadership temperament: adopting a “duck” mindset to let criticism and setbacks roll off, and a “bison” mindset to face hard situations head-on rather than avoiding them. They explore staying slightly unsatisfied as a leader while still enjoying wins, avoiding judgment of others’ intent without context, and remembering your roots by staying humble and authentic as you advance. They emphasize the patience required for long-term decisions, including a story about a delayed promotion that ultimately made sense because the speaker wasn’t ready. The conversation shifts to bandwidth and prioritization—every “yes” means a “no,” organizations must be ready for change, leaders should speak last, and effective work requires managing energy and making time to think.

They preview an Apex Meridian Conference session on becoming better customers to vendors.

00:00 philosophy part 2

01:01 Be the duck: letting things roll off

03:05 Tattoo Versus Bruise

03:05 CLIP: Tattoo Versus Bruise

04:14 Be the bison: walk into the storm

05:04 Bison Into The Storm

05:10 CLIP: Bison Into The Storm

05:49 CLIP: Embrace The Suck

05:51 Embrace The Suck

05:58 Staying unsatisfied without burning out

08:21 You were preceded by good leaders

08:53 Preceded By Good Leaders

10:08 Intent versus actions

11:09 Judged By Intentions

11:09 CLIP: Judged By Intentions

11:58 Don't forget your roots

12:43 Walked Down The Hall

12:43 CLIP: Walked Down The Hall

14:57 Patience, and the promotion that didn't come

15:09 CLIP: TSA Job Description

18:23 I Wasn't Ready

18:23 CLIP: I Wasn't Ready

19:02 Prioritization: every yes is a no

20:14 Silently Saying No

20:14 CLIP: Silently Saying No

22:05 Speak Last

22:05 CLIP: Speak Last

22:48 Managing energy, not just time

27:56 CLIP: Multitasking Counter

28:08 One piece of advice for pre-leader Anthony

29:17 Don't Dwell On The Past

29:17 CLIP: Don't Dwell On The Past

How do you lead an IT team well? In Part 1 of this IT leadership series, Anthony Kent and Tanner Greer get out of the tech stack and into the people side of leading IT teams: managing people, giving feedback, taking blame, sharing credit, and earning your team's trust. Topics covered: why the golden rule fails at work and what to do instead, why a performance review should never contain a surprise, how to make IT's work visible to executives and the board, taking responsibility when things go wrong and passing credit when things go right, hiring people smarter than you and getting out of their way, and why recognition has to happen before you ask your team for extra effort. Off The Wire is a podcast for IT leaders, IT managers, and directors at electric cooperatives and small-to-midsize businesses. Real talk on IT leadership, cybersecurity, and strategy from two operators who do this work every day.

Chapters:

00:00 Cold open: a leader takes the blame

00:28 Intro and episode framing

01:54 Why IT leaders avoid people topics

02:49 IT is getting a seat at the table

05:40 Treating people how they want to be treated

07:57 Reading people and figuring out what they need

09:01 Asking directly how someone wants to be led

12:17 Performance reviews should never surprise anyone

20:11 Defining the direction for your team

20:31 Taking blame when things fail, giving credit for wins

22:55 Making IT work visible to the rest of the organization

26:02 Get out of your team's way: hire people smarter than you

27:38 Do what you ask your team to do

29:52 The cardboard box story: character is always visible

30:49 Recognition: find something genuine for everyone

34:00 Replenishing the cup: earning the right to make demands

Part 2 drops soon. Subscribe so you don't miss it. #ITLeadership #Leadership #TechLeadership

Tanner and Anthony discuss why business continuity plans (BCPs) are often one of the last cybersecurity “baseline” goals organizations complete, largely due to documentation burdens and the fear of committing to recovery metrics. They clarify how a BCP differs from an incident response plan, emphasizing that BCPs define how to maintain or restore operations after major disruptions using recovery time objectives and acceptable data loss. They outline practical ways to build a plan using NIST guidance, peers, and industry templates, and cover key components including defined roles with backups, tiering critical systems, backup/retention details, known alternatives, recovery strategies with dependencies and workarounds, communication plans with update cadence and message templates, and regular testing and review. They also note tailoring plans to each organization and avoiding unnecessary separate documents.

00:00 Intro & Why Business Continuity Planning Matters 01:59 Recovery Time Objectives and Metrics 03:56 Why Put Metrics on Paper: Fears and Benefits 06:07 Why Build a BCP: Reasons, Structure, and Tiers Overview 13:17 Risk Assessment and Incident Levels 16:10 Defining System Criticality Tiers 26:55 Building Known Alternatives into Each Tier 36:14 Wrap-up

ABOUT OFF THE WIRE

Off the Wire is a podcast on cybersecurity and IT leadership for the electric cooperative and small business world. Real operations, real tradeoffs, and the decisions that actually keep the lights on. Hosted by Anthony Kent and Tanner.

Subscribe for new episodes, and if this was useful, leave a comment with how your team handles continuity planning.

#BusinessContinuity #ElectricCooperative #ITLeadership #Cybersecurity #DisasterRecovery

The hosts discuss how IT leaders can successfully propose adding staff when teams are overextended and work keeps piling up. They emphasize starting with the real problem—unmet business value, security/compliance risk, cyber insurance requirements, ticket backlogs, and burnout/retention risk—then backing the request with data such as project lists, vulnerability and compliance gaps, device and ticket growth, peer staffing comparisons, and feedback from other departments. They advise focusing on responsibilities and business impact rather than job titles, researching comparable organizations carefully, and presenting alternatives like contractors, interns, or part-time roles with true fully loaded costs. The conversation also covers delivery tactics: have an in-person sit-down, be confident and prepared, time the meeting well, seed the narrative in advance, rehearse tough questions (including via AI role-play), and keep a tiered fallback plan with follow-ups if the answer is no.

00:00 Intro 02:04 Keep the List 05:10 Start With the Problem 08:00 Do Your Research 10:19 Responsibilities Over Titles 13:40 Weigh the Alternatives 17:16 The Real Cost of a Hire 18:24 Delivering the Proposal 20:52 Timing the Ask 22:20 Plant the Seeds Early 25:20 Rehearse It (and Use AI) 28:15 Have a Fallback Plan 31:53 Final Thoughts 33:40 Outro

Keywords: IT headcount proposal, how to justify new IT staff, IT staffing business case, getting headcount approved, building a business case for hiring, IT budget proposal, IT leadership, IT management, IT workforce planning, understaffed IT team, IT burnout and retention, cybersecurity staffing, compliance risk, cyber insurance requirements, ticket backlog, fully loaded cost of an employee, contractors vs full-time, presenting to leadership, executive buy-in, electric cooperative IT, utility IT, SMB IT, Off the Wire podcast

#ITLeadership #Cybersecurity #ITManagement #ITStaffing #ElectricCooperative #SMBIT #ITStrategy #OffTheWire

Hardware budgets are breaking. Quotes that were good for 30 days are now expiring in hours. That $80k workstation quote? It's $160k now. That server quote near $1M? Already $1.3M — and climbing. In this episode, Tanner and Anthony break down what's actually driving the spike in RAM, SSDs, hard drives, servers, and networking gear — and it's not just tariffs. AI data center buildouts are pulling manufacturers toward high-margin HBM memory (roughly 10x the margin of standard DRAM), leaving everything else fighting for supply. With only three major players (Samsung, SK Hynix, Micron) and factory expansions that take 2-3 years, relief isn't coming fast.

More importantly — what do you do about it right now? They cover practical steps: faster approval cycles, buying ahead, standardizing hardware, right-sizing, considering refurb and used gear, extended refresh cycles, cloud compute, and leasing. Plus how to brief leadership before the budget conversation catches you off guard.

This one's for anyone managing IT budgets at a lean organization — co-op, municipal, small enterprise. The volatility is real and it's not going away anytime soon.

00:00 Truck Price Shock Skit

01:54 Hardware Quotes Going Wild

02:46 Real World Sticker Stories

04:36 Why Memory Costs Surge

07:01 HBM vs DRAM Margins

09:08 Factories Tariffs New Normal

13:44 Beyond RAM Storage Crunch

16:53 Quotes Expire Faster Than Ever

20:23 Practical Ways To Cope

26:36 Refurb Longer Cycles Cloud

32:21 When Relief Might Come

37:01 Wrap Up Lead With Communication

Off the Wire is a cybersecurity and IT leadership podcast for practitioners at small-to-medium organizations and electric cooperatives.

In this episode of Off The Wire, Anthony and Tanner discuss the “SaaSpocalypse”—how AI is disrupting and potentially replacing many SaaS products—citing examples like Figma being hit after Claude Design launched, reduced need for Canva due to AI tools, and vulnerable niche apps like Grammarly as Copilot and Google tools bake AI directly into core suites. They debate whether AI pricing is currently subsidized, noting high API, hardware, and power costs that could drive subscriptions much higher over time. They explore how AI could become the primary interface layer, reducing the need for traditional web UIs and even replacing documentation platforms by querying SharePoint-backed datasets through an agent. For IT leaders, they recommend evaluating SaaS at renewal time, starting with narrow tools, moving gradually, and prioritizing cost savings while accounting for change management and human behavior.

00:00 SaaSpocalypse Explained

00:14 Figma And Canva Wakeup Call

01:35 SaaS Vendors Racing To Add AI

02:53 Why AI Pricing Will Rise

07:25 Which Tools Are Most Vulnerable

11:20 AI As The New Interface Layer

16:47 Advice For CIOs And IT Leaders

25:10 LinkedIn And The AI Slop Problem

31:00 Final Takeaways And Wrap Up

Hosts Tanner and Anthony discuss reports of Anthropic’s new “frontier” general-purpose model, Mythos (Mythos Preview), described as exceptionally strong at finding and exploiting novel security bugs and allegedly sitting on thousands of unpatched zero-days affecting major operating systems and browsers. They review examples cited, including decades-old FreeBSD and OpenBSD flaws and a Linux kernel issue, and note a separate security firm (Aisle) replicated parts of the findings using open-weight models, though Mythos appears better at moving from detection to exploitation. The episode explains how Mythos became public via leaks, then outlines Anthropic’s Project Glasswing: about 50 vendors received 90 days of access plus credits to patch systems, with Mozilla reportedly patching 271 Firefox issues. They close with preparation steps for lean IT teams: asset inventory, vendor outreach, risk-based prioritization, mitigation and isolation, patch validation, workload planning, governance and insurance review, stronger detection controls, least privilege/zero trust, and verifying backups.

00:00 Too Dangerous to Release

01:45 Meet Mythos Preview

02:25 Zero Days Found

05:19 Can Others Replicate It

06:46 Efficiency and Edge Models

08:17 Leaks and Access Blunders

10:42 Project Glasswing Explained

15:10 90 Day Clock and Fallout

16:24 Break and Subscribe

17:05 Prep Plan for IT Teams

19:05 Patching Priorities and Testing

21:00 Controls Backups and Wrap Up

24:02 Final Thoughts and Sign Off

In this Off the Wire episode, Tanner and Anthony wrap part four of their OT security miniseries by focusing on OT monitoring and why it’s needed, noting that over 90% of small and medium businesses with OT environments lack monitoring and that AI is lowering the time and effort required for attacks. They explain how legacy OT systems were built without security, often use unencrypted or proprietary protocols, and can’t run agent-based tools like EDR, making specialized monitoring essential. The discussion covers how monitoring complements preventive controls, helps establish a communications baseline, flags anomalies (like unexpected east-west traffic), supports forensics and log retention, integrates alerts with email and SIEMs, and validates segmentation and documented exceptions.

They also debunk the “air-gapped OT” myth, stress mapping all IT/OT bridges, recommend an OT-specific incident response plan, and list tool options including Malcolm, Security Onion, Dragos (free under $100M revenue), and vendors like Darktrace, Tenable OT, Cisco Cyber Vision, Nozomi, and SCADAfence, alongside drivers like NERC CIP, CMMC, mandates, and cyber insurance.

00:00 Recording The Intro

00:02 Why OT Monitoring Matters

00:31 Small Targets AI Threat

02:31 OT Risks Real World Impact

05:39 OT Is A Different Animal

08:35 Baselines For Segmentation

10:03 Air Gap Myth Bridges

12:09 SCADA Migration Opportunity

13:21 Realistic OT Attack Chain

15:47 What to Monitor in OT

16:11 Five Key Visibility Signals

19:21 OT Incident Response Planning

20:27 Picking Monitoring Tools

22:41 Compliance and Budget Levers

24:13 OT Security Checklist

26:52 Final Thoughts and Next Episode

In part three of Off the Wire’s four-part miniseries, the hosts discuss third-party remote access risks and why VPNs with MFA alone are insufficient, citing major breaches like Target and Toyota and a 2023 vendor compromise as wake-up calls. They review third-party access tools (BeyondTrust/Bomgar, SecureLink, ManageEngine PAM360, and OT-focused options like Claroty and Slo), explaining benefits such as role-based access control, detailed logging and session recording, layered approvals, session time limits, vendor-managed user provisioning, automatic deprovisioning, individual accountability, passwordless access, and rapid access shutdown when relationships end.

They describe these tools as proxy-based “airlocks” that prevent lateral movement and enable oversight. Implementation advice includes treating it as non-negotiable while documenting exceptions, requiring ticket numbers, routing requests via chat, ensuring multiple approvers, sending logs to a SIEM, updating incident response plans, auditing access annually, and providing vendors a setup one-pager.

00:00 Third Party Access Intro

01:19 Why VPN Is Not Enough

01:51 Real World Breach Examples

02:44 Wake Up Call Story

04:33 Tool Options Overview

06:11 Key Features And Benefits

14:39 How These Tools Work

16:51 Vendor Pushback And Compliance

21:49 Implementation Tips Checklist

26:59 Wrap Up And Final Tip

In this Off the Wire Podcast OT miniseries episode based on the Dragos OT report, the hosts explain how OT environments are often compromised through IT networks and focus on the browser as a major attack target alongside email. They discuss practical ways to harden browser security, including DNS filtering (with examples like blocking newly registered domains and improving visibility), CIS browser hardening benchmarks and policies (updates, extension restrictions, disabling built-in password saving, limiting browsers), and the role of secure web gateways/web proxies with SSL inspection and DLP considerations. They also cover enterprise password managers, passkeys, and new enterprise browser tools that provide granular controls and DLP for web apps (including AI use cases), plus how EDR and SIEM telemetry support detection and response. They close with a recommended rollout order and preview upcoming episodes on third-party vendor management and OT network monitoring.

00:00 Mini Series Setup

00:43 Why Browsers Are Targeted

03:43 DNS Filtering Basics

06:41 Remote Protection Benefits

09:06 CIS Browser Hardening

11:30 Locking Down Extensions

14:11 Secure Web Gateway Proxies

16:56 Subscribe and Share

17:43 Enterprise Password Managers

19:23 Password Manager Benefits

20:22 Hosting and Vendor Risks

21:12 Passkeys and Unique Logins

23:37 KeyPass and Offline Vaults

24:05 Enterprise Browser Overview

25:53 DLP and Download Controls

26:40 BYOD Visibility and AI Policies

30:21 AI Extensions and Control

32:14 EDR and SIEM Telemetry

35:37 Layering Tools Before EDR

36:54 Practical Rollout Roadmap

40:55 OT Tie In and Next Episodes

In this Off the Wire Podcast episode (part 1 of a four-part miniseries inspired by the Dragos OT security report), Tanner and Anthony explain why email remains one of the most common paths attackers use to move from IT into OT, highlighting growing sophistication from LLM-enabled spearphishing and simple employee-impersonation attacks using lookalike Gmail accounts. They argue that relying only on built-in Microsoft 365 tools can leave gaps and require heavy manual work, and they outline key capabilities of dedicated email security platforms: behavioral detection, impersonation protection, post-delivery remediation to remove emails from many mailboxes, mailbox visibility, DLP for PII, shadow IT/SaaS discovery, and automated user reporting workflows. They discuss major vendors, compare gateway vs API-based deployments, stress proof-of-concept testing in monitor mode, and preview upcoming episodes on browser protection, third-party remote access, and OT monitoring.

00:00 Impersonation Email Crisis

00:51 OT Report Sparks Mini Series

02:12 Phishing Gets Smarter With AI

03:13 Why Email Is The Weak Link

04:57 Why Built In Tools Fall Short

08:23 Modern Email Security Features

12:36 Break And Subscribe

13:22 Top Vendors And Deployment Models

17:43 How To Evaluate The Right Tool

22:02 Proof Of Concept And Rollout Tips

25:35 Results And OT Security Takeaway

27:23 Final Thoughts And Next Episode

In this Off The Wire episode, Anthony and Tanner break down the 2026 Dragos OT report, describing it as sobering and highlighting claims that foreign adversaries are already embedded in U.S. utility networks. They discuss how these actors differ from typical fast-moving ransomware by staying hidden, mapping OT environments, studying SCADA points, alarms, configuration files, and normal process behavior, with detection potentially taking days even in best cases.

The conversation covers attacker specialization and handoffs between teams for initial access, reconnaissance, and exploitation, sometimes involving transactions between groups. They highlight the gap between vulnerability disclosure, patch availability, and exploitation (reported as ~24 days), and emphasize the need for mitigation beyond patching. Visibility is a major theme: only 46% reportedly have OT monitoring, with average detection cited as ~5 days with monitoring versus ~42 days without, often only discovered after something breaks. They discuss why OT is hard to secure (limited logging, fragile legacy systems, insecure protocols like Telnet/LDAP, flat networks, and weak IT/OT separation) and why monitoring helps detect anomalies and insecure traffic. The episode also addresses third-party and remote-access risk, including targeting of engineering firms and edge devices, exploitation of cellular router devices, and the growing reliance on stolen credentials and valid logins (including MFA fatigue), citing a stat that 73% of breaches involve stolen credentials. They note a reported 49% increase in ransomware groups affecting OT, 119 groups targeting OT, and over 3,300 impacted OT environments, with many OT incidents misclassified as IT-only. The hosts recommend focusing on fundamentals: an OT incident response plan, asset inventory, behavior-based monitoring, tight restrictions on remote access, and unique credentials supported by password managers. They announce a five-episode miniseries springboarding from this overview, with upcoming episodes on OT monitoring/visibility, securing users via a secure browser approach, improving email defenses against phishing, and revisiting third-party remote access.

00:00 Dragos 2026 OT Report: Why This One Hits Different

01:24 Adversaries Already Inside: Quiet Recon in Utility OT Networks

02:59 Specialized Attack Teams & Access Handoffs (Initial Access → Recon → Exploit)

05:07 Patch Lag vs Exploit Speed: Why Mitigation Matters in OT

06:24 Visibility Gap: OT Monitoring Stats and Detection Time Reality

07:49 Why OT Monitoring Works: Protocols, Anomalies, and Holistic Context

09:56 Third-Party Remote Access: Vendors, VPNs, Edge Devices, and Cellular Routers

13:07 Valid Credentials Are the New Exploit: Detecting “Legit” Logins

17:06 Ransomware Moves Into OT: Scale, Misclassification, and Rising Risk

18:56 Old Problems Still Breaking OT: Flat Networks, Legacy Protocols, No Segmentation

22:15 Disruption Is the Goal: OT Security Fundamentals to Focus On Now

25:58 Mini-Series Preview + Final Takeaways (Stolen Credentials, Next Episodes)

29:01 Wrap-Up and What’s Next: OT Monitoring & Visibility Episode Teaser

In this episode of Off the Wire Podcast, we dive deep into effective cost-saving strategies for IT departments. We discuss the pros and cons of reports versus alerts, the rising costs of technology, and how to make every dollar count. We also share insights on consolidating tools and platforms, justifying hardware and software expenses, and leveraging AI to maximize efficiency. Join us as we explore practical tips to help you save money and optimize resources amidst an environment of increasing costs. Don't miss our real-world examples and actionable advice to streamline your IT operations!

00:00 Introduction Hook: Reports vs Alerts 00:51 Welcome to Off the Wire Podcast 01:07 Rising Costs in Technology 02:14 Cost-Saving Strategies 09:19 Vendor Relationships and Consolidation 11:41 Tool and Platform Consolidation 22:27 Open Source Solutions: Pros and Cons 23:32 The Downside of Open Source Systems 24:28 AI: A Different Paradigm 25:57 Optimizing Hardware Costs 27:16 Support and Warranties: Are They Worth It? 32:34 Vendor Negotiations and Cost Savings 35:53 Auditing and Automating for Efficiency 44:32 Engaging Employees for Cost-Saving Ideas 46:08 Final Thoughts and Recommendations

In this episode of 'Off the Wire,' join Hosts Anthony and Tanner as they discuss the essential strategies for preparing for impending storms, particularly how to handle weather-related crises, with a focus on risk management and maintaining efficiency. Topics covered include the importance of having a storm prep checklist, the necessity of contingency plans, the balance of mitigating risks while maintaining operational flexibility, and the crucial role of effective communication and leadership during a crisis. Listen in for invaluable insights on how to ensure the safety of personnel and continuous operation of essential services during critical events.

00:00 Introduction and Setting the Scene

00:11 Storm Preparation Mindset

01:02 High-Level Storm Preparation Process

01:20 Detailed Preparation Steps

03:20 Importance of Checklists and Risk Assessment

05:37 Technology and Field Operations

08:38 Internet Connectivity During Storms

12:02 Managing Personnel During Crises

19:17 Flexibility and Adjustments During Crises

25:23 Final Thoughts and Tips

29:35 Closing Remarks

In this episode of Off The Wire, we dive into the challenges and solutions for effective communication between IT professionals and end users. Through realistic role-playing scenarios, we highlight common issues and frustrations faced when trying to extract necessary details for troubleshooting. Our hosts share actionable advice for both IT personnel and non-IT staff on how to provide clear, specific information, making the problem-solving process more efficient. Tune in to learn useful tips that can improve workflow and response times in your organization.

00:00 Introduction and Initial Problem

00:15 Understanding the Issue

00:47 Challenges in IT Communication

01:52 Effective Communication Strategies

04:26 Generational Differences in IT

06:12 Importance of Detailed Information

09:03 Ticketing Systems and Prioritization

17:33 Role-Playing Scenarios

20:10 Common IT Issues and Solutions

24:01 Final Thoughts and Communication Tips

30:48 Conclusion and Call to Action

In this episode of 'Off The Wire,' hosts Anthony and Tanner reflect on past episodes and discuss the various strategies and innovations they've implemented at their organization. They cover key topics such as cybersecurity, asset management, backup testing, employee mental health, and training methods. The episode dives into specific episodes like 'Low-Cost, High-Impact Cybersecurity Investments,' 'Zero Trust,' and 'Talent Tetris,' providing insights on how they've taken their learnings to enhance their company's safety, efficiency, and employee satisfaction. Join them as they share practical advice, valuable lessons, and their goals for future implementations.

00:00 Introduction and Reflection

01:12 Implementing Crown Jewels Concept

02:12 Zero Trust Network Implementation

03:17 CIS Benchmarks and Hardening Systems

05:20 Talent Tetris: Building the Perfect Team

07:38 Communicating with Leadership

09:52 Remote Access Solutions

13:55 Low Cost, High Impact Cybersecurity Investments

16:50 Backup Testing and Cloud Recovery

19:30 Breaking Up With One and Done Training

22:28 Employee Mental Health and Leadership

27:14 Bonus: Future Implementations

31:18 Conclusion and Final Thoughts

In this episode of Off the Wire, hosts Tanner and Anthony dive into the top reasons why software projects fail and share practical tips on how to avoid these common pitfalls. They discuss a range of crucial points, including the importance of keeping solutions simple, building strong user rapport, effective communication strategies, comprehensive training, and the value of user input. If you're in the midst of rolling out a new technology project or planning one for the future, this episode is packed with valuable insights to help ensure your project's success. Tune in as they share personal anecdotes, industry best practices, and engage in a thoughtful discussion aimed at improving your project management skills.

00:00 Welcome and Year-End Reflections

00:31 Holiday Chaos and Project Planning

01:20 The Importance of Year-End Reviews

02:10 Discussing Project Failures

02:51 Impact of Failed Projects on Teams

03:29 Balancing Risk and Simplicity in Projects

03:39 Real-Life Example of Project Impact

05:42 Top Five Reasons Projects Fail

06:26 Complicated Solutions and the KISS Method

08:24 Building Rapport and Empathy with Users

10:35 The Final 5%: Completing Projects Fully

13:57 Effective Communication Strategies

17:23 Training and Vendor Reliance

19:27 Quick Response to Issues and Drip Campaigns

21:05 Gathering Feedback and Following Up

21:46 Appreciation and Podcast Growth

23:05 Weak Testing and QA Issues

26:16 Challenges of Rapid Change

29:16 Importance of User Input

32:10 Effective Training Strategies

38:20 Final Thoughts and Community Support

In this episode, Tanner and Anthony discuss the challenges IT departments face in communicating their value within an organization. They explore methods for showcasing daily work and major projects to both employees and senior leadership. Key topics include effective internal marketing, handling visibility problems, and balancing technology wins with transparency about challenges. The episode also features a fun game where the hosts put each other on the spot to come up with marketing strategies for various IT scenarios. Whether you're struggling with perception issues or looking to improve your communication strategy, this episode offers valuable insights and practical tips.

00:00 Understanding the Importance of Communication in IT

00:48 Common Misconceptions About IT Roles

02:43 The Visibility Problem in IT Departments

03:36 The Impact of Improved IT Systems

05:21 The Role of Security Tools in IT

06:36 The Challenge of IT Perception

10:30 The Importance of Framing Communication

17:30 Sharing Technology Wins and Success Stories

23:25 Celebrating Security Wins

24:18 Importance of Employee Testimonials

26:07 Branding IT Solutions

28:18 Communicating IT's Value to Leadership

30:08 Transparency in IT Struggles

31:26 Effective Metrics and Reporting

33:34 Marketing IT Initiatives

38:10 Interactive Marketing Exercise

45:19 Key Takeaways and Final Thoughts

Join us in this episode of Off the Wire as we interview Glenn Hasteadt, a retired IT director and longtime leader in local government. Glenn shares his insights on the importance of great government leadership, the impact technology has on communities, and the lessons he's learned throughout his career. From managing emergency services during Hurricane Florence to fostering a supportive and dynamic work culture, this conversation explores the numerous ways local government can uplift communities, states, and even the nation. Tune in to discover how intentional leadership and empathy can make a real difference in public service.

00:00 The Power of Great Local Government

00:50 Introducing Glenn Hasteadt

01:39 Debunking Myths About Local Government

04:34 Handling Crises and Team Dynamics

08:42 Building a Strong Team Culture

12:40 Leadership Lessons and Personal Growth

15:18 Communication in Crisis Situations

23:13 Resourcefulness in Local Government

25:35 The Impact of Local Government IT

30:47 Final Thoughts and Farewell

00:00 Introduction to Cybersecurity Podcast

00:23 Meet Slade: The Cybersecurity Expert

00:48 Slade's Attention-Grabbing Demos

05:30 Memorable Pen Testing Stories

08:51 Challenges in Cybersecurity

11:49 Small IT Departments and Security

16:12 Effective Security Measures

24:41 Business and Technical Perspectives

29:41 The Importance of Measurement and Incentives

31:05 Emerging Technologies and AI Challenges

33:24 Cybersecurity Threats and Preparedness

43:56 Soft Skills and Career Advice

46:55 Technical Skills and Budgeting in Cybersecurity

49:05 Reflections and Personal Growth

53:59 Future Topics and Final Thoughts

Join us in this insightful episode of the Off the Wire podcast as we welcome Lindsay, a cybersecurity professional who transitioned from a decade in real estate to making impactful strides in the world of cybersecurity. Lindsay shares her unique journey, beginning with multinational moves from Minnesota to Hawaii to South Dakota, and ultimately settling in Colorado. She speaks candidly about the ethics of real estate, a chance podcast that led her to reconsider her career, and her dive into the world of cybersecurity education.

Lindsay discusses the importance of patience, empathy, and understanding users' backgrounds to effectively teach cybersecurity. She also sheds light on the value of community support through organizations like ISSA, her experience with micro training, and the challenges and opportunities presented by AI in the cybersecurity landscape. Don't miss Lindsay's tips on how to improve cybersecurity awareness in organizations and her special focus on training for small businesses and seniors.

00:00 Introduction and Guest Welcome

00:35 Lindsay's Early Life and Career Path

02:10 Transition from Real Estate to Cybersecurity

04:39 Impact of Political Science Degree on Cybersecurity Career

08:07 Teaching Cybersecurity in Plain Language

13:21 Building Trust and Positive Culture in Cybersecurity

17:40 Tailoring Cybersecurity Training for Small Businesses and Seniors

21:43 Building Engagement in Classes

21:56 Advice for New Instructors

22:31 Humorous Classroom Anecdotes

22:57 Encouraging Listener Interaction

23:21 Introduction to ISSA

24:07 The Cybersecurity Community

26:02 Networking and Career Growth

27:18 The Importance of Community

29:15 Women in Cybersecurity

32:08 Overcoming Imposter Syndrome

35:52 The Future of Cybersecurity Training

37:01 The Impact of AI on Cybersecurity

39:14 Effective Communication in Cybersecurity

41:15 Final Thoughts and Contact Information 

In this episode, join Anthony and Tanner as they share their experiences and insights on evaluating tech products, from avoiding long-term contracts based on sales pitches to the importance of defining specific needs and conducting rigorous proof of concepts. They discuss their unique approaches in the co-op world and various tools and strategies to ensure they make the best decisions for their organizations. Additionally, they delve into what they're excited about for 2026, including micro-segmentation, AI use cases, server upgrades, camera systems, and much more. Don't miss their tips and stories to help you navigate through the complex landscape of tech evaluations.

00:00 Introduction: The SIEM Purchase Story

00:22 Breaking Down the Sales Pitch

01:24 Evaluating New Products: Processes and Challenges

02:57 Defining the Problem and Setting Criteria

04:00 The Importance of Demos and Objective Guides

05:33 Handling Large Group Evaluations

13:43 Contract Length and Vendor Relationships

18:05 Proof of Concepts and Pilots

22:40 Gathering References and Final Thoughts

24:39 Evaluating Group Sizes and Demos

25:11 Microsegmentation Software Evaluation

25:46 Bonus Tip: Re-evaluating Before Purchase

26:25 Exploring Container Tools and Virtualization

28:31 Starlink for Emergency and Broader Deployment

30:01 Email Protection and Human Element in Cybersecurity

31:24 Replacing End-of-Life Devices

32:45 Enhancing Browser Protection

34:06 Server 2016 Retirement Plan

35:05 Standardizing Email Signatures

37:29 Camera Project for Physical Security

38:28 Advanced AI Use Cases

39:52 Process Improvement and R&D Budget

41:21 Expanding Video Conferencing Rooms

46:12 Revisiting Co-Pilot for Enhanced Productivity

49:00 Final Thoughts and Appreciation

In this episode of 'Off The Wire,' hosts Anthony and his colleague discuss critical aspects that can influence your career progression. From key behaviors that get positively noticed to pitfalls that can set you back, they share valuable insights from their extensive careers. Topics include: being a problem solver rather than a task-doer, the importance of efficiency, being interviewed daily, the significance of being a principled person, and the balance of risk-taking. Tune in to learn how to stand out and advance in your professional journey.

00:00 Introduction: Seizing New Opportunities

01:06 The Importance of Problem Solving

02:44 Being Noticed Every Day

04:44 Principles and Leadership

10:39 Avoiding Complacency

23:18 The Value of Communication

25:29 Taking Risks and Owning Challenges

27:45 Conclusion: Sharing Knowledge and Growing

Welcome to Off The Wire, the podcast that helps you curb your cybersecurity risk and tackle technology challenges. In this episode, Tanner and Anthony, seasoned IT executives, discuss the ins and outs of selecting the right vendors for your business. They explore the qualities to look for in a good vendor, the red flags to avoid, and how to maintain a healthy vendor-customer relationship. The duo delves into anecdotes from their own experiences, providing practical advice on transparency, communication, and trust. Whether you're sifting through vendors for new technology or reassessing current relationships, this episode is packed with valuable insights to help you make informed decisions. Tune in for expert tips on ensuring your vendor relationships are mutually beneficial and long-lasting.

00:00 Introduction to Off The Wire Podcast

00:19 The Vendor Dating Game

01:03 Qualities of a Good Vendor

04:04 Red Flags in Vendor Selection

08:06 Vendor Size and Culture

09:54 Maintaining Good Vendor Relationships

14:13 The Importance of Loyalty and Trust

17:19 Getting Multiple Quotes

23:18 Commodity Vendors vs VARs

23:35 Vendor Preferences: VARs vs. Commodity Vendors

24:50 The Role of VARs in Selection and Support

26:39 Consulting Vendors: Experiences and Insights

31:52 Identifying When to Move On from a Vendor

41:09 Vendor Breakups and Quiet Quitting

44:06 Final Thoughts on Vendor Relationships

Join Tanner Greer, Chief Technology Officer at Blue Ridge Energy, and Anthony Kent from Four County EMC as they share their perspectives on integrating artificial intelligence in the cooperative industry. With a combined 35 years of IT experience, they discuss practical approaches, use cases, and challenges of AI adoption.

Discover the benefits of intelligent search, simple language query, and customized AI solutions, as well as important considerations for data privacy and addressing AI-related job impacts. Tune in to learn how cooperatives can leverage AI to enhance efficiency, productivity, and strategic thinking. Don't miss out on these valuable insights from North Carolina's IT leaders!

00:00 Introduction and Welcome

00:13 Meet the Presenters

01:21 AI in the Cooperative Sector

02:55 Understanding AI and Its Impact

06:16 AI Use Cases in Cooperatives

08:30 Building and Implementing AI Solutions

10:58 Challenges and Considerations

12:57 AI Hardware and Cost Management

16:34 Leveraging AI for Efficiency

19:26 Integrating AI with Documentation

20:04 Future Goals for AI Implementation

20:14 Empowering Knowledge Base with AI

22:13 Challenges and Concerns with AI

25:28 Misconceptions About AI

30:35 Data Privacy Issues

31:57 Impact of AI on Jobs

37:25 Final Thoughts and Call to Action

In this episode of Off the Wire, hosts Tanner and Anthony are joined by Adam W., a Senior Workflow Engineer at Shift Four, to dive deep into the world of low-code and no-code development. Adam shares his journey from help desk technician to low-code expert, discusses the various levels of coding, and explains how low-code platforms can revolutionize businesses, especially for small to medium-sized companies.

The discussion also touches on AI integration, security concerns, and the overall impact of low-code solutions in today's tech landscape. Tune in for an insightful conversation about modern coding and its potential to transform business processes.

00:00 Introduction to Off The Wire Podcast

00:19 Meet Our Guest: Adam W, Senior Workflow Engineer

00:36 Adam's Journey into Low-Code Development

03:32 Understanding Low-Code, No-Code, and Traditional Coding

05:55 Impact of Low-Code on Small and Medium Businesses

07:13 Cool Low-Code Projects and Their Impact

09:52 Balancing Technical and Soft Skills in Low-Code Development

21:05 Choosing the Right Low-Code Platform

26:01 Security Considerations in Low-Code Platforms

29:18 The Role of AI in Low-Code Development

32:48 Encouragement for Aspiring Low-Code Developers

34:21 Conclusion and Listener Engagement

Welcome to Off The Wire, the podcast that helps you curb your cybersecurity risk and tackle technology challenges. In this episode, hosts Tanner and Anthony discuss the concept of microsegmentation, its implementation, and its importance in improving network security. With decades of IT experience, they provide insights into the basics of microsegmentation, tools and methods for implementation, and the benefits of integrating this approach in business environments. Learn how to ensure network security, reduce vulnerabilities, and implement effective microsegmentation strategies. Don't forget to like, subscribe, and stay tuned for more cybersecurity insights!

00:00 Introduction to Off The Wire Podcast

00:22 Discussing Microsegmentation

02:07 Understanding Microsegmentation Tools and Techniques

05:05 Challenges and Solutions in Microsegmentation

16:40 Implementing Zero Trust and Microsegmentation

30:30 Final Thoughts and Conclusion

In this special edition of Off The Wire, IT executives Tanner and Anthony dive deep into a discussion on the impact of artificial intelligence (AI) on the job market and cybersecurity. With 35 years of combined experience, they share personal insights, debate differing viewpoints, and explore the potential future of AI in various industries. They also discuss advice for the younger generation, the role of regulation, and practical use cases of AI in current workflows. Tune in for an engaging conversation packed with expert opinions and thought-provoking questions about the evolving tech landscape.

00:00 Introduction to Off The Wire

00:20 Today's Unique Format

01:18 Diving into AI's Impact on Jobs

01:56 Advice for the Next Generation

04:16 AI in Cybersecurity

06:01 The Double-Edged Sword of AI

08:40 Challenges and Limitations of AI

18:46 Real-World AI Applications

23:16 AI's Current Limitations and Future Potential

23:50 The Challenge of Knowledge Transfer

24:53 AI in the Workplace: Opportunities and Hurdles

27:04 The Future of AI and Human Adaptation

30:01 Speculations on AI's Long-Term Impact

34:44 Embracing AI: Strategies for Success

43:04 Final Thoughts and Call to Action

Welcome to Off The Wire, the podcast that helps you curb your cybersecurity risk and tackle technology challenges. In this episode, hosts Tanner and Anthony dive deep into the intricacies of technology training. They discuss how current training methods can be improved, the importance of training throughout the lifecycle of technology, and share real-world success stories and challenges. The conversation also touches on the role of AI in future training methods, the impact of organizational size, and the importance of having dedicated training personnel. Tune in to learn how to make training more engaging and effective in your organization!

00:00 Introduction to Off The Wire Podcast

00:20 Technology Training Overview

01:08 Challenges in Technology Training

05:52 Effective Training Methods

07:34 Training Tools and Techniques

21:25 The Role of AI in Training

26:34 Real-World Training Successes

33:18 Conclusion and Next Episode Teaser

Welcome back to Off The Wire Podcast!

Join Tanner and Anthony, IT executives with 35 years of experience, as they delve into the crucial topic of system monitoring. Discover why this less-than-flashy software is indispensable for maintaining reliability and preempting issues before they impact end users. Learn about the key tools available, both open-source and paid, and explore how to effectively set up your environment. Also, hear unique use cases and war stories that underscore the value of robust system monitoring. Don't forget to subscribe for more insights on tackling cybersecurity risks and technology challenges. Share with friends to help our community grow!

00:00 Introduction to Off The Wire Podcast

00:50 The Importance of System Monitoring

04:00 Key Components to Monitor

06:05 Open Source and Paid Monitoring Tools

12:36 Agent-Based vs. Agentless Monitoring

14:23 Managing Alerts and False Positives

17:49 Benchmarking and Performance Metrics

20:52 Unique Monitoring Alerts

21:29 API and Service Monitoring

22:18 VMware Snapshots and Password Expirations

23:51 User Account Monitoring

24:32 Application-Specific Monitoring

26:43 War Stories: Monitoring in Action

32:59 The Importance of System Monitoring

38:05 Final Thoughts and Takeaways

41:34 Closing Remarks and Listener Engagement

Welcome back to Off The Wire! In this episode, hosts Tanner and Anthony dive deep into the 2025 Verizon Data Breach Investigations Report (DBIR). With 35 years of combined IT experience, they discuss the evolving threat landscape, notable trends in cybersecurity, and the importance of proactively researching and analyzing risks. From third party breaches and rising ransomware attacks to the increasing impact of AI and the critical role of patch management, we break down the actionable insights every small to medium-sized business needs to know. Tune in to understand the current cybersecurity dynamics and how they can affect your organization. Don’t forget to subscribe and share the podcast to help us grow and aid others in their cybersecurity journey!

00:00 Introduction to Off The Wire Podcast

00:20 Diving into the Evolving Threat Landscape

01:14 Unpacking Verizon's DBIR Report

04:11 Notable Trends and Rising Threats

04:25 Third Party Breaches and Risks

09:09 Ransomware: Trends and Insights

14:03 Espionage and Nation-State Threats

18:11 Understanding Attack Vectors

23:03 Mitigating Zero-Day Exploits

23:34 Importance of Regular Scanning and Patching

24:19 Internal vs External Vulnerability Management

25:21 Credentialed Vulnerability Scans

28:14 BYOD and Credential Security

30:43 AI's Role in Cybersecurity

34:23 Phishing and Training Effectiveness

35:43 Ransomware Threats to SMBs

37:17 Backup Strategies and Recovery

43:43 Final Thoughts and Encouragement

In this episode of 'Off the Wire,' IT executives Tanner and Anthony dive into the evolution of office communications, discussing whether phone calls are becoming obsolete. They explore the use of chat applications like Microsoft Teams, the rise of email, and the role of face-to-face interactions.

The discussion also covers the generational differences in communication preferences, the potential impact of AI on office communication, and the integration of third-party vendors through chat systems. Tune in to gain insights into how technology is reshaping workplace interactions and managing cybersecurity risks.

00:00 Introduction to Off The Wire Podcast

00:21 Is the Phone Call Dead?

01:03 Current Communication Methods in Modern Offices

01:27 Internal vs External Communication Preferences

06:27 Evolution of Phone Systems

14:14 The Rise of Chat Systems

18:35 Generational Differences in Communication

21:02 Generational Differences in Communication Styles

21:51 The Role of Punctuation and Informality in Chats

23:12 Departmental Variations in Communication

24:31 Choosing the Right Communication Medium

28:07 AI's Impact on Office Communication

35:25 Third-Party Collaboration and Security Concerns

42:11 Final Thoughts and Recommendations

In this episode of 'Off the Wire,' Tanner and Anthony discuss 'Shadow IT' and its implications on organizational security and efficiency. They delve into concrete examples, such as unauthorized software subscriptions and unapproved hardware purchases. Tanner and Anthony provide insights on why users engage in Shadow IT and the risks associated with it. They emphasize the importance of communication and understanding user needs to manage and potentially reduce Shadow IT. They also share practical tips and tools for identifying and mitigating the risks related to unauthorized technology use within an organization.

00:00 Introduction and Welcome

00:49 Understanding Shadow IT

01:36 Real-Life Examples of Shadow IT

03:20 Addressing Shadow IT Concerns

08:48 Risks and Security Implications

11:48 Tools and Strategies to Detect Shadow IT

15:59 Effective Communication and User Engagement

24:33 Final Thoughts and Conclusion

In this episode of 'Off The Wire,' IT executives Tanner and Anthony delve into the intricacies of technology evaluations, covering both hardware and software. With 35 years of combined experience, they discuss the importance of starting with the 'why,' involving the right people, and the significance of demos, pricing, and references. They also explore best practices for evaluating new vendors and products to ensure successful implementation. Whether you're an IT leader or simply interested in technology strategies, this episode offers practical advice you won't want to miss. Don't forget to subscribe and share if you find our content valuable!

00:00 Introduction to Off The Wire Podcast

00:32 Subscribe and Support

00:54 Starting Technology Evaluations

01:38 Involving the Right People

03:24 Balancing Team Size

05:31 Evaluating IT-Specific Projects

07:22 Objective Evaluation Criteria

17:20 Effective Demo Strategies

24:39 Importance of References

29:43 Considering Price and Value

33:40 Final Thoughts and Conclusion

In this episode of 'Off the Wire,' we dive deep into the essential topic of strategic technology planning and the importance of effectively communicating these plans to CEOs, executive leaders, and board members. Hosts Anthony and Tanner discuss their personal experiences and approaches to planning, including the facets of building on previous years, incorporating feedback from all company levels, and ensuring alignment with company goals and strategic plans.

They emphasize the significance of clear communication, especially avoiding technical jargon when conveying plans to non-technical stakeholders. The episode also tackles the critical aspects of cost, risk, and impact assessment and underscores the importance of a feedback loop post-approval to track progress and continuously refine strategic initiatives. Tune in to learn actionable insights on how to gain trust and buy-in from your organization's leadership for your tech proposals.

00:00 Introduction and Episode Overview

00:42 Importance of Strategic Planning

01:38 Building and Updating Technology Plans

02:46 Involving Other Departments

04:23 Leadership and Strategic Partnerships

07:07 Communicating with Leadership

12:12 Feedback and Continuous Improvement

14:54 Presenting to the Board and CEOs

18:15 Effective Communication Strategies

25:47 Final Thoughts and Tips

Welcome to Off the Wire, the podcast dedicated to helping you manage cybersecurity risks and tackle technology challenges. In this episode, hosts Tanner and Anthony dive deep into the world of project management, specifically IT project management. They begin by recounting their experiences and the critical importance of having clear goals, plans, and user buy-in to make projects successful. They discuss the significance of strong communication, flexibility, and involving end-users in the process for better outcomes.

The episode also covers evaluating project management tools such as ClickUp, Asana, and Smartsheet, along with practical tips and tricks to improve project management in your organization. Lastly, the hosts emphasize the need for continuous improvement and leveraging the strengths of your team members. Join Tanner and Anthony as they share valuable insights and real-life experiences to help you master IT project management.

00:00 Introduction to Off The Wire Podcast

00:59 Upcoming Conferences and Events

02:42 Diving into IT Project Management

04:14 Defining Project Success

06:37 Challenges and Lessons in Project Management

16:51 Current Project Management Practices

26:41 Scoring Vendor Demos

28:15 Project Management Tools Overview

30:03 Choosing the Right Tool

33:14 Implementing ClickUp

39:56 Virtual vs. In-Person Meetings

41:08 Effective Communication Strategies

45:03 Cybersecurity in Projects

47:00 Improving Project Management

49:43 Final Thoughts and Wrap-Up

In this episode, hosts Tanner and Anthony, sit down with special guest Fletus Poston, a senior manager of security operations at CrashPlan, to discuss the creation and sustainment of a strong security culture within an organization.

Fletus shares his extensive cybersecurity experience and emphasizes a human-centric approach to security. 

See more from Fletus on his channel:

https://youtube.com/@fletusposton?si=OXDTXSBLDgx_jb63

00:00 Introduction to Off The Wire Podcast

00:20 Creating a Lasting Security Culture

00:53 Meet Fletus Poston: A Journey in Cybersecurity

02:34 The Human Element in Security

03:42 Real-World Security Scenarios

07:15 Building a Security Culture in Organizations

08:49 Practical Steps for Enhancing Security

14:23 Effective Communication in Security

23:32 Building Security Champions

23:47 Practical Security Tips for Different Roles

24:50 Creating a Security-Conscious Culture

25:41 Engaging the Board and Leadership

33:35 Gamification and Creative Training Methods

39:06 Mentorship and Knowledge Sharing

42:54 Final Thoughts and Contact Information

In this episode of Off the Wire, Tanner and Anthony dive deep into the world of operational technology (OT) systems, discussing what they are, their importance in various industries, and how to protect them effectively. The duo covers the significance of reliable hardware and software controls, referencing the infamous Stuxnet incident as a wake-up call for OT security. They outline critical controls and practical tips for safeguarding OT environments, from network segmentation to passive monitoring and endpoint security. Tune in to learn actionable strategies to secure your OT systems and ensure operational reliability.

00:00 Introduction and Subscription Request

00:48 Understanding Operational Technology (OT)

02:07 The Importance of OT Security

04:56 Common OT Security Issues

11:13 Critical Controls for OT Security

15:02 Practical Tips for OT Security

25:12 Final Thoughts and Collaboration

26:55 Conclusion and Contact Information

Join Anthony and Tanner in this insightful episode of Off the Wire as they discuss their philosophies on tech hardware, life cycles, and share their experiences with new tech devices. Whether it's choosing between desktops, laptops, iPads, smartphones, or even drones, Anthony and Tanner cover it all with real-world examples and helpful tips. Don’t miss out on their recommendations for reliable docking stations, innovative conference room setups, and how to handle surplus equipment. Tune in for a comprehensive guide to tech hardware that will help you make informed choices for your setups.

00:00 Introduction and Podcast Promotion

01:12 Philosophy on Hardware

02:09 Experiences with Different Brands

03:26 Desktop and Laptop Preferences

04:01 Challenges with Micro Form Factor PCs

07:58 Memory and Storage Specifications

14:19 Rugged Machines for Field Work

17:41 Monitor Setups and Preferences

21:30 Mobile Devices and iPads

26:36 Device Longevity and Battery Life

26:41 Company Policy on Device Rotation

27:48 Carrier Choices and Coverage

28:10 Private Networks and Device Restrictions

29:03 iPads and Cellular Service

29:39 Company Phones vs. Personal Phones

31:50 Managing Old Equipment

33:14 Internal Auction System

34:39 New Hardware Purchases

35:14 Docking Stations and Conference Room Equipment

41:24 Monitors with Built-in Docking Stations

45:30 Remarkable Tablets for Note-Taking

47:30 Drone Usage and Recommendations

50:51 Final Thoughts and Recommendations

In this episode of 'Off the Wire,' we dive into a major decision facing businesses of all sizes: should you continue using VMware or explore alternatives like Nutanix? With VMware's recent acquisition by Broadcom and subsequent pricing changes, enterprises are re-evaluating their virtualization strategies. Hosts Anthony and Tanner are joined by two special guests: Devin Costa from Jones Onslow EMC and Ben Hubbard from Flint EMC. Devin and Ben share their experiences and insights on sticking with VMware versus transitioning to Nutanix. They discuss pros and cons, cost implications, support structures, and the future of virtualization in their respective organizations. Whether you are contemplating a move or seeking to optimize your current setup, this episode provides valuable perspectives to guide your decision-making process. Don't forget to subscribe, leave a review, and share this episode if you find it helpful!

00:00 Introduction and Topic Overview

00:57 VMware's Acquisition by Broadcom

01:39 Guest Introductions: Devin Costa and Ben Hubbard

03:11 Ben Hubbard's Experience with VMware

09:32 Devin Costa's Experience with Nutanix

14:12 Comparing Costs and Decision-Making Processes

18:03 Future Hardware and Cloud Considerations

26:34 Exploring Cloud Solutions for Disaster Recovery

27:03 The Importance of Virtualization in Modern Infrastructure

27:55 Challenges and Benefits of Virtualization

31:09 Learning and Transitioning to New Virtualization Platforms

33:12 Support Experiences with VMware and Nutanix

40:02 Concerns About Future Price Increases

45:36 Advice for Organizations Considering Virtualization Options

51:53 Final Thoughts and Leadership Insights

In this episode of Off The Wire, hosts Anthony and Tanner cover a detailed review of 2024, focusing on significant advancements and incidents in technology and cybersecurity. They discuss notable headlines like the global IT outage caused by CrowdStrike, the Salt Typhoon incident involving Chinese hackers, and the implications of potential DJI drone bans. The episode delves into the rise of AI and its applications in everyday workflows, the ongoing shift to hybrid cloud models, and the increasing trend towards zero trust security frameworks. As they reflect on the year's technological strides, they also share insights on what to expect in 2025, including potential AI advancements and continued focus on zero trust architectures. Tune in for an engaging discussion on the past year's tech and cybersecurity landscape and a glimpse into the future.

00:00 Introduction and Episode Overview

01:06 Major Cybersecurity Incidents of 2024

01:15 CrowdStrike Global IT Outage

04:24 Salt Typhoon: Chinese Hackers and Telecoms

07:42 The DJI Drone Ban and Chinese Technology Concerns

12:37 The Rise of Generative AI in 2024

13:54 AI Integration in Everyday Tasks

17:22 Power Usage and Limitations of AI

20:33 Shift to OpEx Model and Hybrid Cloud

24:57 Changing Communication Trends

25:28 The Shift from Email to Chat

26:02 The Rise of Internal Chat Systems

30:00 The Impact of Starlink

32:15 Zero Trust Architecture Gains Traction

33:56 Looking Ahead to 2025

35:01 Building Internal AI Systems

37:28 AI Use Cases and Challenges

48:34 Optimizing Existing Technologies

50:02 Wrapping Up and Listener Engagement

Welcome to Off The Wire, the podcast that helps you curb cybersecurity risks and tackle technology challenges. In this episode, IT executives Tanner and Anthony share insights on effective alert systems in cybersecurity. Drawing from their combined 35 years of experience, they discuss real-life scenarios, types of alerts crucial for situational awareness, and strategies to prevent alert fatigue. They also explore alert sources, essential configurations, and future considerations for OT environments. Join us to better understand how to tailor your alert system for optimal performance and security.

Remove info from Zoom Info Trust Center | ZoomInfo

00:00 Introduction to Off The Wire Podcast

00:24 A Real-World Cybersecurity Incident

01:11 Understanding and Managing Alerts

03:50 Endpoint Detection and Response (EDR) Alerts

07:21 Domain and Firewall Alerts

12:58 Multi-Factor Authentication (MFA) and Network Activity Alerts

20:19 Situational Awareness and Account Hygiene

23:06 Environment Hygiene and Group Policy Changes

23:54 Firewall Commit Alerts and Protocols

25:32 Backup Alerts: Successes and Failures

27:11 Endpoint Monitoring and USB Drive Policies

28:39 Misconfigurations and VM Backups

29:22 MFA Bypass and Snapshot Alerts

31:41 Application Installations and Phishing Attacks

35:00 Physical Security and Surveillance

36:34 Future Alerts and Vulnerability Tools

37:57 Alert Sources and SIEM Alternatives

39:20 Managing Alert Fatigue

46:05 Final Thoughts and Listener Engagement

In Episode 28 of the 'Off the Wire' podcast, hosts Tanner and Anthony delve into Microsoft 365 (Office 365), offering a comprehensive guide on migrating, optimizing, and securing the suite. The episode covers essential aspects like hybrid architecture configurations, licensing tiers, and the importance of 2FA and logging for security. They also explore tools like Outlook, Teams, OneDrive, and SharePoint, providing actionable insights on feature utilization, retention policies, and efficient file sharing. Along with personal anecdotes and practical tips, this episode is a must-listen for IT professionals looking to maximize their organization's use of Microsoft 365.

00:00 Introduction and Episode Overview

00:49 Thanksgiving Recap and Personal Stories

01:37 General Tips for Microsoft 365 Migration

03:02 Licensing and Vendor Recommendations

05:33 Retention Policies and Legal Holds

07:11 Training and Continuous Learning

09:50 Backup Solutions and Internet Redundancy

13:42 Automation and Efficiency in Microsoft 365

15:57 Security Best Practices

20:47 Outlook and Exchange Tips

24:52 Microsoft Teams Tips

29:59 OneDrive Tips

35:11 SharePoint Tips

41:57 Conclusion and Final Thoughts

In this episode of 'Off The Wire,' hosts Anthony and Tanner tackle the ongoing debate between cloud and on-premise solutions: 'Cloud Dreams vs. On-Prem Realities.' They discuss myths, pros, and cons of each, share their experiences, and delve into specific scenarios and examples, such as cost implications, security considerations, and integration challenges. They also explore the future of hybrid environments and how businesses can navigate these choices effectively. Tune in to gain insights and practical advice on making the best decisions for your IT infrastructure.

00:00 Introduction and Episode Overview

01:34 Cloud vs On-Premise: Personal Experiences

02:57 First Steps into the Cloud

04:30 The Ongoing Debate: Cloud or On-Premise?

09:22 Advantages of Cloud Solutions

17:51 On-Premise Benefits and Cost Considerations

25:22 Real-World Scenarios and Lessons Learned

27:15 Second Guessing Decisions During the Storm

27:43 Inherited Cloud Solutions and Their Challenges

29:05 On-Premise Phone System Issues

29:43 Deciding Between Cloud and On-Premise Solutions

31:20 Surprises and Costs in Cloud Services

33:27 Security Concerns in Cloud vs. On-Premise

42:41 Building IT Infrastructure from Scratch

46:09 Future Plans and Final Advice

52:41 Closing Remarks and Listener Engagement

In this episode, we dive into the importance of customer service within IT departments, emphasizing its crucial role in driving innovation and improving user satisfaction. We discuss how IT professionals can develop and hone their customer service skills, the importance of effective hiring practices, and the benefits of using tools like ticketing systems to manage and resolve issues efficiently. We also touch on the significance of empathy, building trust and credibility, and maintaining good relations with other departments. Tune in for valuable tips and insights on enhancing customer service in your IT organization.

00:00 Introduction to Customer Service in IT

01:17 Challenges IT Professionals Face with Customer Service

02:38 The Importance of Hiring the Right People

04:50 Key Attributes for Customer Service Excellence

07:57 The Role of IT in Enhancing Business Efficiency

15:34 Proactive vs. Reactive IT Support

20:25 Implementing Effective Ticketing Systems

28:14 Building Relationships and Empathy

39:46 Maintaining High Morale for Better Service

40:38 Final Thoughts and Encouragement

Emphasis is placed on minimizing over-privileged accounts, leveraging secure remote access tools, and implementing Multi-Factor Authentication (MFA) to enhance security. The discussion extends to the importance of dynamic employee groups, regular auditing of both AD and non-AD integrated systems, and the necessity of maintaining detailed documentation for enhanced cybersecurity. Real-life examples and practical advice underscore the importance of curiosity and constant improvement in IT security practices, with regular reviews and a proactive approach to identifying and mitigating risks.

Microsoft Entra Password Protection - Microsoft Entra ID | Microsoft Learn https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises

Group Policy: Automatically Delete User Profiles Older Than Certain Number of Days Win 10 not working. - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/441800/group-policy-automatically-delete-user-profiles-ol

00:00 Introduction and Episode Overview

00:04 Listener's Request: Active Directory Audit

02:14 Account Hygiene Tips and Auditing Processes

02:36 Handling Stale Accounts and Group Policies

04:48 Group Memberships and Elevated Access

09:35 Password Management and Security

16:41 Auditing GPOs and Password Expirations

19:56 Dynamic Groups and Documentation

29:34 File Sharing and Ransomware Stories

31:38 The Dangers of Open Shares

32:37 The Importance of Regular Audits

32:55 Onboarding and Job Role Audits

33:49 Offboarding and Permission Management

34:48 Curiosity in Cybersecurity

35:40 Overprovisioning Security Permissions

41:12 Vendor Access and Security Tools

46:30 Monitoring and Auditing Best Practices

47:57 Tools and Techniques for Better Security

51:36 The Importance of Continuous Improvement

01:01:52 Final Thoughts and Listener Engagement

00:00 Introduction and Welcome

00:09 Impact of Hurricane Helene

01:17 Devastation and Recovery Efforts

02:21 Technology Challenges During the Disaster

02:37 Internet Connectivity Issues

04:08 Starlink as a Backup Solution

10:09 Cellular Connectivity During the Crisis

18:53 Burnout and Mental Health

Please feel free to contact us at show@offtheirepodcast.com

00:00 Introduction to Off the Wire Podcast

00:35 ChatGPT: The Newest Member of Your Cyber Team

01:32 Generative AI: Benefits and Concerns

03:33 Practical Uses of ChatGPT in Cybersecurity

04:51 Enhancing Cybersecurity Policies with AI

07:38 Incident Response and Script Creation with ChatGPT

11:58 Advanced Uses: Tabletop Exercises and Phishing Training

13:33 Incident Response Support and Log Analysis

19:14 Summarizing Reports and Enhancing Efficiency

27:12 Privacy Concerns and Safe Usage of AI

31:13 Final Thoughts and Podcast Outro

Learn and Test DMARC (learndmarc.com)

DMARC Check Tool - Domain Message Authentication Reporting & Conformance Lookup - MxToolBox

• Welcome back to "Off the Wire," the podcast helping you curb cybersecurity risks and tackle technology challenges.
• Hosts: Tanner and Anthony, IT executives with a combined 35 years of experience in IT and cybersecurity.
• Teaser for Episode 20: Upcoming giveaway in two weeks—details to come.

Main Topic: Low-Cost, High-Impact Cybersecurity Investments

1. Introduction to the Topic

   • Discuss the challenges faced by small to medium-sized businesses in allocating budgets for cybersecurity.
   • The importance of prioritizing cybersecurity efforts even with limited resources.

2. Understanding Budget Constraints and Other Challenges

   • Budget limitations and other constraints like legacy applications and organizational resistance to change.
   • The need to prioritize cybersecurity based on the greatest risk and potential impact.

3. Cybersecurity Prioritization Strategies

   • Utilizing free or low-cost open-source tools when possible.
   • Considerations for choosing between free tools and paid solutions based on staff availability and skill level.

4. Cybersecurity Frameworks and Assessment

   • Importance of assessing the current state of cybersecurity.
   • Recommendations for using the CIS framework or similar tools for benchmarking and setting priorities.
   • The value of starting with a basic maturity level and progressively advancing.

5. Key Focus Areas for Low-Cost Cybersecurity Measures

   • Asset Management:
     • Importance of knowing what's on your network.
     • Free and low-cost tools like Snipe-IT and Spiceworks for asset management.
   • Strong Passwords and Multi-Factor Authentication (MFA):
     • Using free tools like Microsoft Authenticator or Google Authenticator.
     • Implementing password managers for better security and efficiency.
   • Regular Updates and Patching:
     • The critical role of updates in preventing security breaches.
     • Options for automated patch management solutions.
   • Incident Response and Business Continuity Planning:
     • Developing and maintaining security plans and policies.
     • Storing physical copies of these plans for accessibility during crises.

6. Additional Low-Cost Solutions

   • Threat Intelligence:
     • Leveraging free industry-specific threat intelligence resources and communities.
     • Utilizing platforms like Reddit for real-time information on vulnerabilities and threats.
   • Email Security:
     • Importance of investing in additional layers of email security.
     • Mention of tools like Avanan and Microsoft Defender.
   • Optimizing Existing Investments:
     • Making full use of existing tools and software, especially in environments like Microsoft 365.
   • EDR Solutions:
     • The importance of Endpoint Detection and Response (EDR) in mitigating breaches.
     • Notable EDR solutions and their benefits.

7. Backups and Disaster Recovery

   • The necessity of regular and tested backups.
   • Considering both free and paid backup solutions.
   • The importance of documenting and testing backup processes.

8. Creating a Cyber Go-Bag

   • The concept and contents of a cyber go-bag for emergency response.
   • Recommendations for setting up a go-bag, including tools and documentation.

9. Connecting Cybersecurity to Business Objectives

   • Emphasizing the alignment of cybersecurity goals with overall business objectives.
   • Importance of communicating cybersecurity successes and needs to leadership.

Conclusion:

• Recap of key points and encouragement to implement the discussed strategies.
• Reminder about the upcoming Episode 20 giveaway.
• Call to action: Subscribe, share the podcast, and reach out with episode ideas or feedback.

Closing Remarks:

• Next episode preview and sign-off.

• Host Introduction: Tanner Greer and Anthony Kent, two IT executives with 35 years of combined experience in the IT field, specializing in cybersecurity.
• Episode Overview: Discussion on Zero Trust security.

Segment 1: Conference Recap

• Anthony's recent attendance at the IT conference for South Carolina co-ops.
• Key takeaway: Importance of IT communication with non-IT stakeholders, avoiding jargon and using relatable examples.

Segment 2: Understanding Zero Trust

• Zero Trust explained: "Never trust, always verify."
• History of Zero Trust: Coined by John Kindervag in the 90s and popularized in the 2000s.
• Shift in mindset: From securing trusted internal networks to assuming all networks are potentially hostile.

Segment 3: Key Concepts of Zero Trust

• Basic principles: Never trust, always verify; least privilege; and assume breach.
• NIST guidance on Zero Trust (800-207).

Segment 4: Implementing Zero Trust

• Defining the protect surface: Identify what needs protection.
• Mapping transaction flows: Understand how data moves.
• Architecting Zero Trust: Building a secure infrastructure.
• Creating Zero Trust policies: Setting rules and guidelines.
• Monitoring and maintaining: Continuous improvement and vigilance.

Segment 5: Real-world Application

• Anthony's recent project: Redesigning an OT environment using Zero Trust principles.
• Challenges and solutions: VLAN segmentation, micro-segmentation, and user/device checks.

Segment 6: Lessons Learned

• Importance of strategic goals: Integrating Zero Trust into organizational strategy.
• Using existing tools effectively: Leveraging current technology to implement Zero Trust.
• Practical tips: Start with test environments, prioritize critical applications, and consider business operations.

Segment 7: Pitfalls and Considerations

• Usability impact: Balancing security measures with operational needs.
• Internal threats: Monitoring for suspicious internal activities.
• Continuous monitoring: Importance of regular checks and updates.

Segment 8: Resources and References

• Recommended reading: "Project Zero Trust" book.
• Key documents: NIST 800-207 and CISA's Zero Trust Maturity Model.

Conclusion:

• Recap of the episode.
• Encouragement to start the Zero Trust journey: Don't be overwhelmed; take it step by step.
• Final thoughts: Zero Trust as a critical part of modern cybersecurity strategies.

Closing:

• Reminder to check previous episodes.
• Contact information: Website, email, and social media handles.
• Episode release schedule: Every other Monday.

Sign-off:

• Hosts' sign-off and thanks for listening.

• Anthony’s Update:

  • Recap of the conference attended.
  • Key takeaways and interesting trends observed.
  • Details on the new SCADA system being prepared for implementation.
  • Challenges and excitement related to the new system.

• Tanner’s Update:

  • Current issues being tackled in the company.
  • Specifics about the online ads issue and its impact on the business.
  • Steps taken to mitigate the problem.
  • Broader discussion on the state of online ads and cybersecurity concerns.

• Brief Introduction:
  • Overview of the main topic: The critical aspects of finding, hiring, and retaining technology employees.
  • Why this topic is particularly relevant now.
  • Personal experiences and why this topic matters to Anthony and Tanner.

• Attracting Talent in SMBs:

  • The difficulty small and medium-sized businesses (SMBs) face compared to larger corporations.
  • Discussion on limited resources and lesser-known brand recognition.

• Location-Based Challenges:

  • How geographical location affects the talent pool.
  • Case examples from Anthony and Tanner’s experiences.

• Remote Job Market Competition:

  • The rise of remote work and its impact on local hiring.
  • Specific roles (e.g., data analysts, developers) that are particularly affected.

• Salary Disparities:

  • Comparison of pay scales between SMBs and large enterprises.
  • Strategies to offer competitive compensation packages.

• Close-Knit Work Environment:

  • Describing the family-like atmosphere in smaller organizations.
  • Personal anecdotes from Anthony and Tanner.

• Direct Interaction with Leadership:

  • Opportunities for employees to interact with top executives.
  • The benefits of having a direct line to decision-makers.

• Impact and Recognition:

  • How individual contributions are more visible in smaller settings.
  • Examples of significant projects led by team members.

• Flexibility and Work-Life Balance:

  • Offering flexible schedules and remote work options.
  • Balancing personal interests and professional responsibilities.

• Highlighting Advantages in Job Postings:

  • Crafting compelling job descriptions that attract top talent.
  • Emphasizing unique benefits and company culture.

• Promoting Company Culture and Values:

  • The importance of a strong organizational culture.
  • Ways to communicate this during the hiring process.

• Competitive Salary and Benefits Packages:

  • Offering market-competitive salaries.
  • Additional benefits that make a difference (e.g., healthcare, retirement plans).

• Community Involvement and Reputation:

  • How being active in the community can enhance your company’s attractiveness.
  • Success stories from Anthony and Tanner’s companies.

• Work-Life Balance:

  • Policies that support employees’ personal lives.
  • Encouraging hobbies and outside interests.

• Team-Building Activities:

  • Organizing regular team outings and events.
  • The role of informal gatherings in building team cohesion.

• Autonomy and Leadership Opportunities:

  • Allowing employees to lead projects.
  • Offering professional development and career growth opportunities.

• Flexible Work Arrangements:

  • Implementing hybrid work models.
  • Adapting to individual needs for remote work.

• Benefits of Internships:

  • How internships can serve as a talent pipeline.
  • Providing real-world experience to interns.

• Challenges of Implementing Internship Programs:

  • Security and training concerns.
  • Ensuring meaningful projects for short-term interns.

• Success Stories:

  • Examples of interns who became full-time employees.
  • The impact of internships on both the company and the interns.

• Technical Interviews and Assessments:

  • Different approaches to evaluating technical skills.
  • The importance of practical assessments.

• Cultural Fit and Team Dynamics:

  • Assessing candidates for cultural and team fit.
  • Techniques for determining alignment with company values.

• Pre-Employment Tests:

  • The role of cognitive and personality tests in the hiring process.
  • Pros and cons of using these tests.

• Balancing Long-Term and Immediate Impact:

  • The value of hiring for both short-term gains and long-term stability.
  • Strategies for keeping high-impact employees engaged.

• Fostering a Positive Work Culture:

  • Continuous efforts to maintain and improve workplace culture.
  • Engaging employees in meaningful ways to ensure retention.

• Continuous Improvement of Recruitment Processes:

  • Regularly reviewing and refining hiring practices.
  • Staying updated with industry trends and best practices.

• Listener Engagement:

  • Encourage listeners to share their experiences and strategies.
  • Invite feedback and topic suggestions for future episodes.

• Call to Action:

  • Subscribe to the podcast.
  • Leave reviews and share the podcast with others.
  • Follow on social media platforms.

• Reminder of Release Schedule:

  • Biweekly episodes released every other Monday.
  • Tease the topic of the next episode to keep listeners engaged.

• Thank You:

  • Thank listeners for their support and engagement.
  • Encourage them to reach out with questions, feedback, or topic ideas.

Episode Highlights: 

• Rising Cybersecurity Threats:Discussing the increasing threat levels and the growing importance of cybersecurity. 
• Incident Response Plans (IRPs): Why IRPs are essential and how they serve as a playbook during cyber incidents. 

Key Topics Covered: 

1. Need for IRPs: 

• Importance for regulatory compliance (HIPAA, GDPR, PCI). 
• Legal requirements and state breach laws. 
• Adhering to cybersecurity frameworks like NIST and CIS. 

• IRPs should be simple enough for the least experienced technical staff to understand and use. 

• Importance of annual or quarterly reviews to keep the IRP current. 
• Conducting tabletop exercises to test and refine the IRP. 

• Importance of centralized and proper documentation during incidents. 

• Involving legal, communications, accounting, and other relevant departments in the IRP. 

• Securing support from top management to facilitate smoother implementation and adherence. 

• Creating a "go bag" with necessary tools and documentation for incident response. 

• Utilizing resources like the CIS IRP template and industry-specific frameworks for effective IRPs. 

• Start with what you have, involve stakeholders, keep the plan simple, and ensure regular reviews and updates. 

Additional Resources: 

• CIS IRP Template: Link to CIS IRP Template 
• Contact Us: Email us atshow@offthewirepodcast.com or visit our website for more information. 

Stay Connected: 

• Subscribe: Don’t miss an episode – subscribe to our podcast. 
• Follow Us: Connect with us on YouTube, X, Facebook, and LinkedIn. 
• Join the Conversation: Share your thoughts and engage with us on social media. 

Next Episode: 

• Join us next time for more insights on cybersecurity and technology. New episodes drop every other Monday! 

• We hope you enjoyed this episode. If you found it helpful, please share it with your colleagues and friends. Thank you for listening to Off the Wire Podcast! 

### Episode: Backups and Data Recovery with Brian Williams from Rubrik

**Guest:** Brian Williams, Rubrik

**Location:** NCLGISA Conference 2024, Downtown Wilmington

### Key Topics Discussed

#### Importance of Backups - **Personal Anecdote:** Anthony shares advice from his mentor on the importance of backups. - **Monthly Backup Reviews:** Ensuring regular checks and recovery plans.

#### Transition to Rubrik - **Migration Experience:** Anthony discusses his positive experience migrating to Rubrik. - **Onboarding Process:** Highlights the comprehensive onboarding and quarterly meetings Rubrik provides.

#### Role of Backup Engineers - **Critical Role:** Brian emphasizes the evolving and crucial role of backup engineers. - **Backups Beyond Cybersecurity:** Discussion on various scenarios where backups are vital.

#### Tape Backups and Air Gapping - **Nostalgia:** Reminiscing about tape backups. - **Air Gapping:** Importance of air-gapped backups for data security.

#### Modern Backup Strategies - **Three-Two-One Method:** Explanation of three copies, two types of media, one off-site. - **Four-Three-Two Method:** Discussion on more extensive backup strategies.

#### Cloud-Based Backups - **Pros and Cons:** Evaluating the benefits and drawbacks of cloud-only backups. - **Internet Dependency:** Challenges with relying solely on internet connections for backup and recovery.

#### Immutability and Data Security - **Defining Immutability:** Data that cannot be edited or changed. - **Zero Trust for Backups:** Ensuring no unauthorized access or changes to backup data.

#### Data Integrity and Reliability - **Testing Restorations:** Regularly testing backup data for integrity and reliability. - **Fingerprints and Checksums:** Using these methods to ensure data consistency.

#### Regional Backup Strategies - **Geographic Distribution:** Replicating data to different locations to ensure regional disaster recovery.

#### Real-World Examples - **Local Government Incidents:** Discussing the impact of ransomware on local governments and the importance of having robust backups.

### Quarterly Checkups with Rubrik - **Relationship Building:** Importance of maintaining a strong relationship between Rubrik and its clients. - **Health Checks:** Regular assessments of the backup system’s health and client needs.

### Recommendations for All Organizations - **Robust Testing:** Developing a rigorous and regular testing schedule for backups. - **Self-Scouting:** Continuously evaluating and improving backup strategies. - **Courage to Address Gaps:** Identifying and addressing potential security gaps proactively.

### Conclusion - **Final Thoughts:** Emphasis on the importance of backups and continuous improvement. - **Next Steps:** Encouraging organizations to adopt best practices for data security and backup integrity.

### Call to Action - **Subscribe to the Podcast:** Encouragement to subscribe to Off The Wire on all major podcast platforms. - **Share the Podcast:** Request to share the podcast with others who might benefit from the content.

---

For more information on Rubrik and their backup solutions, visit [Rubrik's website](https://www.rubrik.com). 

Stay tuned for more episodes and insightful discussions on Off The Wire!

**Hosts:** Anthony Kent and Tanner Greer

**Episode Overview:** In this episode of Off the Wire, hosts Anthony Kent and Tanner Greer dive deep into the Verizon 2024 Data Breach Investigations Report (DBIR). With their combined 35 years of experience in the IT industry, they provide valuable insights into the latest trends and findings in cybersecurity.

**Key Topics Discussed:**

1. **History and Importance of the DBIR:**    - The DBIR, introduced by Verizon in 2008, has become a cornerstone report in the cybersecurity industry, analyzing thousands of real-world security incidents annually.    - This year’s report analyzed 30,458 security incidents and 10,626 confirmed data breaches across 94 countries.

2. **Ransomware and Extortion:**    - Ransomware and extortion account for 32% of all breaches. While ransomware attacks declined by 23%, extortion incidents rose by 9%.

3. **Human Element in Breaches:**    - Human errors continue to play a significant role, with 68% of breaches involving a human element such as social engineering or misuse of privileges.    - Financial costs of breaches vary widely, with the average cost in the 95th percentile being $46,000.

4. **Vulnerability Exploitation:**    - Exploitation of vulnerabilities increased by 180% over the previous year, highlighting the importance of minimizing internet attack surfaces.

5. **Attack Vectors:**    - The most common attack vectors include web application credentials, phishing emails, and web application vulnerabilities.

6. **Denial of Service Attacks:**    - 50% of incidents involved denial of service (DoS) attacks, which are relatively easy to deploy and often highly successful.

7. **Lost and Stolen Assets:**    - Laptops are the most likely assets to go missing, with lost assets more likely to result in data breaches than in previous years.

8. **Privilege Misuse:**    - Privilege misuse, mainly by internal actors, remains a steady threat, with personal and banking data being the most targeted.

9. **Artificial Intelligence:**    - Despite the hype, AI’s role in cyberattacks is minimal, though there is some concern about its potential use in social engineering and deep fakes.

**Mitigation Strategies:** - Stick to cybersecurity fundamentals like updating and patching systems. - Leverage multifactor authentication and employee training. - Implement device hardening and least access policies. - Follow the CIS controls referenced in the DBIR to strengthen cybersecurity frameworks.

**Call to Action:** - Subscribe to Off the Wire on your favorite podcast platform for more cybersecurity and technology insights. - Visit their new website, offthewirepodcast.com, and follow them on social media (YouTube, X, Facebook, LinkedIn). - Download the full Verizon 2024 DBIR at verizon.com/DBIR.

**Upcoming Episodes:** - Off the Wire will release new episodes every other Monday before 8 AM, perfect for your commute.

### Episode Summary Welcome to the Off the Wire podcast, your go-to source for insights into the fast-paced world of cybersecurity and technology. This episode features a new co-host, Tanner Greer, who joins Anthony Kent to discuss a critical topic: what happens when users work from home.

### Key Topics Covered 1. **Introduction of New Co-host Tanner Greer**    - Anthony Kent introduces Tanner Greer, highlighting his extensive experience in the co-op world and his contributions to the field of IT and cybersecurity.    - Tanner shares his background and journey from entry-level IT roles to his current position as CTO.

2. **Impact of COVID-19 on Remote Work**    - Discussion on how COVID-19 has forced organizations to support remote work, highlighting both challenges and opportunities.    - The shift to remote work and its implications on cybersecurity, including the need for new security measures.

3. **Challenges of Securing Remote Work Environments**    - The increased complexity of securing networks as employees work from home or other remote locations.    - The vulnerabilities of home networks and the risks posed by mobile devices and personal usage on work devices.    - Real-life examples of phishing attacks and other security breaches.

4. **Best Practices for Remote Work Security**    - The importance of endpoint protection and hardening, including the use of EDR (Endpoint Detection and Response) tools like CrowdStrike.    - Strategies for patch management and remote support using tools like Endpoint Central and Secure Gateway Server.    - Implementing DNS protection and micro-segmentation to limit lateral movement and protect sensitive data.

5. **User Education and Awareness**    - The role of continuous user education in maintaining security, including live training sessions and the use of security awareness platforms.    - Encouraging good security habits like locking devices when not in use and avoiding the use of work email addresses for personal accounts.    - The importance of tools like Duo for multifactor authentication and additional security checks.

6. **The Future of Remote Work Security**    - Emphasizing the need for organizations to adopt a Zero Trust approach, treating all devices and networks as potentially insecure.    - The potential benefits of using VDI (Virtual Desktop Infrastructure) to maintain control over remote work environments.    - The ongoing need for adaptation and vigilance in cybersecurity practices as remote work continues to evolve.

### Key Takeaways - Remote work introduces significant security challenges that require robust solutions and continuous education. - Tools like EDR, DNS protection, and multifactor authentication are essential in securing remote environments. - User education is crucial in fostering a culture of security awareness and proactive behavior. - Adopting a Zero Trust approach and leveraging modern security tools can help mitigate risks associated with remote work.

### Resources Mentioned - CrowdStrike for EDR and vulnerability scanning. - Endpoint Central and Secure Gateway Server for patch management and remote support. - Duo for multifactor authentication and device security checks. - Cisco Umbrella for DNS protection. - Have I Been Pwned for checking compromised email addresses.

### Closing Remarks Anthony and Tanner emphasize the importance of staying vigilant and continuously improving security practices to protect against evolving threats in the cybersecurity landscape. They encourage listeners to implement the discussed strategies and remain proactive in their security efforts.

Tune in next time for more insights and expert analysis on the Off the Wire podcast!

Discover how CIS supports the cyber threat prevention, protection, response, and recovery efforts of U.S. State, Local, Tribal, and Territorial government entities through the Multi-State Information Sharing and Analysis Center® (MS-ISAC®) and the Elections Infrastructure Information Sharing and Analysis Center® (EI-ISAC®). 

Learn about CIS Membership pricing tiers and the benefits they offer, including access to essential cybersecurity resources like the CIS Controls and CIS Benchmarks. Explore the different Implementation Groups (IG) within the CIS Controls and the recommended security settings provided by CIS Benchmarks for various systems, such as Microsoft Server, Linux, and IOS.

Find out about other CIS offerings and how CIS, in partnership with Accenture and CrowdStrike, provides Managed Security Services (MSS) and Endpoint Security Services (ESS) to help organizations enhance their cybersecurity posture. Additionally, discover innovative solutions like Malicious Domain Blocking and Reporting Plus (MDBR+) and Albert Network Monitoring and Management, designed to bolster security for government organizations and private hospitals. Join us to uncover the comprehensive cybersecurity offerings available through CIS and why they're essential for safeguarding your digital assets in today's threat landscape.

We kick off by exploring the pros of enhancing cybersecurity measures. From fortified security protocols to streamlined centralized management and strict compliance adherence, we uncover how these solutions can bolster your organization's defenses against cyber threats.

However, as with any solution, there are potential drawbacks to consider. We delve into how implementing robust cybersecurity measures may inadvertently slow down support processes, increase overhead for IT departments, and result in ongoing costs that can strain budgets.

Join me as we navigate the intricate landscape of cybersecurity, empowering you with the knowledge to make informed decisions to safeguard your organization's digital integrity.

Available on Apple Podcasts, Spotify, YouTube, and your favorite podcast app, this episode promises valuable insights into cybersecurity and its implications for your business. Stay tuned for expert analysis and practical advice.

Join us as we explore crucial topics such as patch management, application control, vulnerability scanning, and the principle of least privilege. With insights gleaned from years of experience in protecting sensitive networks, we offer actionable strategies that apply to every level of your organization.

Learn why patching everything is non-negotiable, and why it's imperative to speak with authority when it comes to operating securely. Discover the importance of limiting applications and questioning the necessity of ubiquitous tools like Chrome.

We delve into the necessity of vulnerability scans, emphasizing the need for regular, credentialed scans to ensure your defenses remain robust. And when vulnerabilities are found, we discuss mitigation strategies to minimize risk effectively.

But security isn't just an IT concern—it's a company-wide responsibility. Find out why all IT personnel, from help desk to data analysts, should possess a baseline understanding of security principles.

Discover how the use of Security Technical Implementation Guides (STIGs) and CISA Benchmarks can elevate your security posture, reinforcing the principle of least privilege and hardening your systems against potential threats.

In our discussion on policy enforcement, we highlight the importance of technical solutions in achieving compliance. While policies are crucial, we emphasize the need for practical, technical measures to fortify your network against evolving threats.

So join us as we share our insights, lessons learned, and practical advice in "Securing Your Network." Because in today's digital landscape, proactive defense is the key to staying ahead of the curve.

Tune in to uncover the 10 essential lessons learned from protecting a DoD network, and embark on your journey towards a more secure tomorrow.

Introduction: - The podcast welcomes listeners with a brief introduction to the episode. - The episode overview discusses the future of the IT Manager role.

Main Content: - The role of IT Managers is explored, detailing responsibilities such as overseeing IT systems, managing personnel, training, budget management, and day-to-day operations. - Differences between an IT Manager, VP of IT, and CIO are outlined. - The importance of having a strategic IT leadership role, such as a CIO or VP of IT, is emphasized, including their responsibilities in aligning technology with business objectives, long-term planning, and ensuring efficiency. - The absence of a CIO or similar leadership role can lead to various challenges such as lack of strategic direction, inefficient resource utilization, security vulnerabilities, limited innovation, and poor decision-making. - The increasing importance of technology in organizations, with IT leaders potentially transitioning into CEO roles. - IT professionals are encouraged to adopt a CIO mindset regardless of their current role, and the importance of seeking organizations that support professional growth is highlighted.

Outro: - The episode concludes with a recap of key points and closing remarks thanking listeners and encouraging engagement through social media.

Timeline Bullets: - Responsibilities of IT Managers are detailed, covering various aspects of IT operations and management. - Responsibilities of CIOs are outlined, focusing on strategic direction and long-term planning. - Challenges associated with the absence of a CIO or similar leadership role are highlighted. - The evolving role of technology in organizations, with potential opportunities for IT professionals to transition into CEO roles, is discussed. - The importance of adopting a CIO mindset and seeking growth-supportive organizations is emphasized.

Anthony, a staunch advocate for the integration of EDR in OT security, laid out compelling reasons why EDR systems are indispensable in today's increasingly interconnected and cyber-threat-prone world. His arguments centered on:

• Proactive Threat Detection: Anthony emphasized how EDR provides real-time monitoring and rapid response capabilities, crucial for thwarting cyber attacks in their infancy.
• Bridging IT and OT: He highlighted the importance of integrating IT and OT security strategies, considering the blurring lines between these once-separate domains.
• Compliance and Advanced Intelligence: With growing regulatory demands, Anthony argued that EDR systems help in meeting compliance standards while leveraging advanced threat intelligence to combat sophisticated cyber threats.

On the flip side, Jon presented a well-articulated case against the use of EDR in OT environments. His main points included:

• Integration and Complexity Concerns: Jon pointed out the unique complexities of OT environments, which might not mesh well with EDR systems primarily designed for IT networks.
• Risk of Disruption: He raised concerns about the potential for EDR systems to unintentionally disrupt sensitive industrial processes.
• Resource and Cost Implications: Highlighting the resource-intensive nature of EDR systems, Jon questioned the feasibility of their deployment in resource-constrained OT settings.

What made this episode particularly engaging was the balanced nature of the discussion. Both Jon and Anthony presented well-researched arguments, backed by real-world examples and expert insights. This not only enlightened our listeners but also sparked a thought-provoking dialogue about the future of cybersecurity in OT environments.

As our podcast wrapped up, it was clear that the debate on EDR in OT security is far from settled. The episode ended on a note that encourages listeners to consider both sides of the argument, weigh the pros and cons, and think critically about the best path forward for their specific OT environments.

KIKrr is an innovative platform designed for the cybersecurity industry. It acts as an automated demo marketplace with a built-in events arena, showcasing the functionality of cybersecurity software. KIKrr enables users to experience products in a real-world, interactive environment. Additionally, it fosters a community of professionals seeking new cybersecurity solutions and provides a unique marketplace for connecting buyers with vendors.

Learn more and connect with KIKrr at kikrr.co. Don't miss this captivating exploration of the HACKERverse!

Follow Mariana and Craig on LinkedIn!

️ Exclusive Insights:

• ️ Inside the Attack: The critical moments and decisions
• Turning Point: Strategies that turned the tide
• Team Effort: How collaboration and training made the difference
• Future-Proofing: Lessons learned for enduring cybersecurity

Why You Can’t Miss This:

• Learn from real-world experiences
• Gain insights on effective incident response
• Understand the importance of proactive cybersecurity

️‍️ Whether you’re in IT, manage a team, or just love a good comeback story, this interview is a must-listen!

Tune in to discover how resilience, expertise, and quick thinking can triumph in the face of digital adversity.

Subscribe and Follow: Don’t forget to subscribe to “Off the Wire” for more insightful conversations. Stay tuned for our next episode!

Key Points Discussed:

1. Eric’s Path in Cybersecurity: We delve into Eric’s background, exploring his transition into becoming a cybersecurity expert.
2. The Role of Cybersecurity in Energy: Eric discusses the critical importance of cybersecurity in the energy sector and its impact electric cooperatives.
3. Strategic Security Architecture: Learn about Eric’s approach to creating robust security architectures that align with both security standards and operational objectives.
4. Challenges and Triumphs: Eric shares his experiences in handling complex cybersecurity challenges, and his successes in implementing effective strategies.
5. The Human Element: Beyond technology, Eric emphasizes the role of trust, commitment, and teamwork in cybersecurity, influenced by his roles as a parent, husband, and friend.
6. The Tim Peede Technology Excellence Award Eric received at the 2023 CTCE conference. 

Guest Bio: Eric Braxton is a seasoned cybersecurity professional with a Master’s Degree in Cybersecurity. He’s currently advancing cybersecurity initiatives at Central Electric Membership Corp. As a member of the Cybersecurity Members Advisory Group at NRECA, he is deeply invested in safeguarding electric cooperatives.

Resources Mentioned:

• Eric Braxton’s LinkedIn Profile
• Donate to Off the Wire

Closing Thoughts: Eric Braxton’s dedication to cybersecurity, particularly in electric cooperatives, is not only inspiring but also crucial in today’s digital age. His insights remind us of the importance of safeguarding our systems and the values they represent.

Subscribe and Follow: Don’t forget to subscribe to “Off the Wire” for more insightful conversations. Stay tuned for our next episode!

Highlights:

• Pros of ChatGPT:
  • Described as a virtual personal assistant, ChatGPT’s capabilities in generating, revising, and summarizing various documents – from emails to legal texts – are discussed.
• Cons of ChatGPT:
  • The episode addresses the alarming statistic that 2.3% of workers have inadvertently shared confidential information via ChatGPT, raising questions about company confidentiality and the need for robust data loss prevention strategies.
  • We examine the recent Samsung data leak, highlighting the need for document label classification and integrating ChatGPT into data security policies.
  • An in-depth analysis of how top corporations like Disney, New York Times, and JPMorgan Chase & Co. are responding to the potential risks posed by generative AI platforms.
• Navigating the Challenges:
  • Discussion on OpenAI’s recent terms of service update and the essential role of a Large Language Model Acceptable Use Policy in today’s digital landscape.

Join us in this episode as we explore the multifaceted world of ChatGPT, discussing its implications for privacy, security, and the future of AI integration in the cooperative world.

• Defining Geoblocking: Learn about the mechanisms that allow for regional blocking and how it can be applied in real-world settings.
• The Good, The Bad, and The VPN: While geoblocking can fortify your network security, it’s not without its downsides—such as easily being bypassed by VPNs and potentially alienating customers.
• Real-Life Examples and Case Studies: Get firsthand accounts and studies that show how geoblocking is used in the real world, including insights into firewalls that support it natively, like Palo Alto.

Connect with Us: At the end of the episode, learn how you can get in touch with Jon Watkins Consulting and share your thoughts about geoblocking through our social media channels or via email.

Support Us: If you love what you hear, consider supporting us by donating. Your support means financial sustainability, quality improvement, and the growth and longevity of the podcast. Donate here

Don’t miss this eye-opening episode; hit that subscribe button now!

We kick things off by exploring why the traditional advice has been to change passwords frequently and what experts like NIST and Microsoft have to say about it today. We’ll break down the arguments for and against regular password changes:

• Against: Learn why most password attacks don’t care about password complexity and why Multi-Factor Authentication (MFA) might be a better security measure.
• For: Discover scenarios where changing your password could actually save you from a breach.

We also share real-life examples and dive into Payment Card Industry (PCI) password requirements that every cooperative should know.

Don’t miss this episode packed with actionable advice and real-world implications. Whether you’re a seasoned IT professional or just someone who wants to improve their online security, this episode has something for everyone.

https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/your-pa-word-doesn-t-matter/ba-p/731984

https://www.sans.org/blog/time-for-password-expiration-to-die/

https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id

Love what you’re hearing? Your support can go a long way in making Off the Wire even better. By contributing, you’re not just helping us cover costs—you’re investing in quality content, cutting-edge topics, and the longevity of a show that’s committed to enlightening you about the evolving world of cybersecurity and technology.

Choose from one-time or recurring donations and be part of our mission to educate and empower. Every contribution counts in maintaining the financial sustainability, quality improvement, and growth of the podcast. Visit our donation page today and make an impact!

In this inaugural episode, we dive deep into the world of phishing simulations. We explore the pros and cons, and discuss whether they are a necessary evil or a cybersecurity savior.

October is Cybersecurity Awareness Month, and there’s no better time to kickstart a dialogue about the importance of cybersecurity in today’s digital age.

• Expert debate about cybersecurity topics
• Real-world case studies
• Interviews with cooperative defenders
• And much more!

Who Should Listen?

• Cybersecurity professionals
• Cooperative leaders
• Tech enthusiasts
• Anyone else interested in staying secure online

We invite you to tune in, share your thoughts, and join us in making the digital world a safer place for everyone.

Stay Connected

Follow us to stay updated on future episodes and join the conversation using the hashtag #OffTheWire.

We can’t wait for you to join us on this exciting journey!