BROADCASTS.com

b'

Fortra\'s Core Security has conducted it\'s fourth annual survey of cybersecurity professionals on the usage and perception of pen testing. The data collected provides visibility into the full spectrum of pen testing\\u2019s role, helping to determine how these services, tools, and skills must evolve.

\\xa0

Segment Resources:

\\xa0https://www.fortra.com/resources/guides/2023-pen-testing-report

\\xa0

This segment is sponsored by Fortra\'s Core Security. Visit https://securityweekly.com/fortracoresecurity\\xa0to learn more about them!

\\xa0

Compliance with cyber security frameworks such as NIST, PCI, HIPAA, etc. have largely been driven by paper-based processes in Word and Excel. With the rise of cloud computing, containers, and ephemeral systems, paper-based processes can no longer keep up with the speed of business and compliance has become the new bottleneck to progress for highly regulated industries such as government, finance, and energy sector. This session will cover how RegScale is leading a RegOps movement to bring the principles of DevOps to compliance with the world\\u2019s first real-time GRC system that enables compliance as code via NIST OSCAL. RegOps seeks to shift compliance left to make it real-time, continuous, and complete so that paperwork is always up to date, self-updating, and takes less manual resources to manage.

\\xa0Segment Resources:

Website \\u2013 https://www.regscale.com

Documentation/Learn More \\u2013 https://regscale.readme.io

\\xa0

In this news segment, we discuss the art of branding/naming security companies, some new cars just out of stealth, 5 startups just out of Y Combinator, and Cybereason\'s $100M round from Softbank. We also talk new features (Semgrep\'s new GPT-4 use case), new newsletters, and new reports. We break down Nexx\'s broken vulnerability disclosure program and its broken products. We also discuss the FDA\'s new ability to block device certification for security reasons. Android announces rules to make it easier for consumers to delete accounts and remove data when they uninstall apps. IT and Security professionals everywhere are asked not to report breaches, but in some countries more than others. CISOs are more prone to drinking problems, and finally, for our squirrel stories, we discuss a crazy app called Newnew and new ideas in prosthetics.

\\xa0

Visit https://www.securityweekly.com/esw\\xa0for all the latest episodes!

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

\\xa0

Show Notes: https://securityweekly.com/esw313\\xa0