CRF

Wait Just An Infosec – An Interview with James Tarala

Businesswoman in Outdoor Cafe

Speaker: James Tarala Event: RSA Conference Date: May 9, 2023 Watch on YouTube: https://www.youtube.com/watch?v=9shrhvEiW0I  Introduction  At the RSA Conference 2023, James Tarala joined SANS Institute’s live broadcast to discuss cyber hygiene, risk management, and evolving cybersecurity trends. Tarala, a senior SANS instructor and cybersecurity expert, has over 20 years of experience in cybersecurity education, governance, […]

Using Open Tools to Convert Threat Intelligence into Practical Defenses

Digital Cybersecurity 2FA Two-Factor Authentication

Speaker: James Tarala Event: SANS Summit Date: May 11, 2016 Watch on YouTube: https://www.youtube.com/watch?v=5rdGOOFC_yE Introduction Threat intelligence is a valuable asset, but it is only effective when transformed into actionable defenses. In this SANS Summit presentation, James Tarala explores how organizations can leverage open-source tools and frameworks to convert threat intelligence into practical security controls. […]

Understanding the Risk Management Mandates in 2024 Cybersecurity Regulations

Coder using computer

Speaker: James Tarala Event: SANS Webcast Date: December 4, 2024 Watch on YouTube: https://www.youtube.com/watch?v=hIqP1i3e99k  Introduction  With the evolving cybersecurity landscape, organizations must adapt to new risk management mandates outlined in 2024 regulations. In this SANS webcast, James Tarala provides an in-depth analysis of key regulatory changes, explaining how organizations can comply effectively while improving security […]

Understanding the 2024 Updates to the NIST Cybersecurity Framework

Young Woman in Computer Lab

Speaker: James Tarala Event: SANS Webcast Date: December 4, 2024 Watch on YouTube: https://www.youtube.com/watch?v=3JACdIrexzI  Introduction  The NIST Cybersecurity Framework (CSF) Version 2.0 was officially released in 2024, bringing several key updates aimed at refining and improving cybersecurity governance. In this SANS webcast, James Tarala breaks down the changes, providing a detailed comparison between CSF 1.1 […]

Tools for Simplifying Regulatory Requirements for Risk Assessment

Secretary by computer

Speaker: James Tarala Event: SANS Webcast Date: September 23, 2024 Watch on YouTube: https://www.youtube.com/watch?v=Z4wmagDyTF8  Introduction  Regulatory compliance requirements can be overwhelming, especially when organizations need to balance security risks with business operations. In this SANS webcast, James Tarala provides practical guidance on simplifying regulatory risk assessments by leveraging efficient tools, frameworks, and automation.  James Tarala […]

Rekt Casino Hack: The Critical Security Controls We Should Follow

Hacker teaching youngster to hack PCs

Speaker: James Tarala Event: SANS Webcast Date: March 11, 2021 Watch on YouTube: https://www.youtube.com/watch?v=Hn0jxdw1e40  Introduction  Cybersecurity breaches are increasingly common, and the Rekt Casino Hack serves as a cautionary tale for organizations failing to implement essential security controls. In this SANS webcast, James Tarala walks through how this breach could have been prevented, what security […]

Practical Threat Modeling Based on Community Templates

Cybersecurity Team Working on Project in Office

Speaker: James Tarala Event: SANS Webcast Date: August 29, 2024 Watch on YouTube: https://www.youtube.com/watch?v=lLwxSOTWFTE&t=8s  Introduction  Threat modeling is a critical component of cybersecurity risk management, yet many organizations struggle to implement it effectively. In this SANS webcast, James Tarala discusses practical threat modeling techniques that leverage community templates to make the process more structured, scalable, […]

How to Present Cybersecurity Risk to Senior Leadership

Partners analyzing situation at business presentation

Speaker: James Tarala Event: SANS Webcast Date: July 27, 2020 Watch on YouTube: https://www.youtube.com/watch?v=_uCmvfOhR_E  Introduction  Effectively communicating cybersecurity risk to senior leadership and boards of directors is critical for ensuring organizations allocate resources to security initiatives. In this SANS webcast, James Tarala shares best practices for presenting cybersecurity risk in a way that resonates with […]

Elevating Your Audit Strategy: Insights from the CRF Audit Framework

Happy businessman using laptop during a seminar in convention center.

Speaker: James Tarala Event: SANS Webcast Date: August 29, 2024 Watch on YouTube: https://www.youtube.com/watch?v=iS-Qx4dDaDU  Introduction  Cybersecurity audits are essential for ensuring organizations are effectively managing risk. In this SANS webcast, James Tarala shares insights from the Cybersecurity Risk Foundation (CRF) Audit Framework, providing actionable guidance on enhancing audit practices.  James Tarala emphasizes that audits should […]

Cybersecurity Standards Scorecard: 2024 SANS Edition

Team startup business discussion with tablet computer.

Speaker: James Tarala Event: SANS Webcast Date: September 17, 2024 Watch on YouTube: https://www.youtube.com/watch?v=5Vc_zcNmTZI  Introduction  The Cybersecurity Standards Scorecard is an annual analysis of cybersecurity frameworks, comparing their effectiveness, applicability, and governance structure. James Tarala, a senior SANS instructor, presents the 2024 SANS Edition, sharing a data-driven evaluation of over 70 security frameworks to help […]