))
Demystifying Vulnerability Management with Ariel Shin
סדרה בארכיון ("עדכון לא פעיל" status)
When?
This feed was archived on March 22, 2025 23:08 (
Why? עדכון לא פעיל status. השרתים שלנו לא הצליחו לאחזר פודקאסט חוקי לזמן ממושך.
What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.
Manage episode 382660198 series 3471650
תוכן מסופק על ידי Mark Graziano. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Mark Graziano או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.
Join Ariel Shin, Twilio's Product Security Team Lead, as she simplifies the complex topic of vulnerability management in governance, risk, and compliance (GRC). In this podcast, Ariel helps us grasp the various roles that stakeholders play, the essentials of policy and standards documents, and how vulnerabilities, risks, and incidents are connected. She clarifies technical terms like 'zero-day' and 'exploitability' and discusses why it's crucial for companies to be open about their security practices.
We also tackle the tricky subject of meeting compliance and security standards across different industries. Ariel uses the OWASP mobile checklist to highlight the challenges of applying one set of rules to all kinds of organizations and talks about the 'NIST peanut butter' approach in security discussions. We emphasize the need to communicate compliance requirements effectively to various audiences.
In the concluding part, Ariel and I discuss how GRC and developers can work together more effectively to manage vulnerabilities. We look at the obstacles in compliance and the importance of clear communication and influence in prompting developers to fix security issues. Ariel gives valuable advice on automated reporting and the best ways to report security matters to management.
So, tune in to get a clearer picture of vulnerability management, learn strategies for engaging with stakeholders, and gain insights into building a straightforward program that connects vulnerability management, security risk, and incident response.
For show notes, please visit The GRC Podcast website.
Sign up for our Bi-Weekly Newsletter
פרקים
1. Ariel Shin - Vuln Management (00:00:00)
21 פרקים
שתפו
