Cyber Sip

In this episode, host Kevin Szczepanski and his guest, Bill Haber of TEKRiSQ, discuss tips to prevent phishing attacks, which, they remind listeners, are “fraudulent attempts to obtain personal information through electronic messages.” Kevin and Bill highlight the prevalence and success of phishing attacks, emphasizing the need for vigilance from both individuals and organizations. Covering examples and types of phishing attacks—spear phishing, smishing, man-in-the-middle attacks—they offer takeaways including slowing down, being cautious of urgency, verifying suspicious emails, conducting trainings, and implementing tools like VPN and DNS filtering. These practices can both enhance cybersecurity and improve the chances of obtaining cyber liability insurance.

Kevin Szczepanski and Arun Vishwanath, chief technologist of Avant Research Group, discuss the urgent need for cyber-hygiene education for children, including about security and privacy. They highlight frequent cyberattacks targeting schools and other education systems, which often have outdated technology and may lack sophisticated IT security skills and resources. The conversation also touches on the role of the private sector in providing cyber-literacy education. Kevin and Arun embrace reforming credit monitoring for children and expanding its scope to include reputation management, and they agree about the importance of protecting the next generation from cyber threats and the need for systemic changes.

Kevin Szczepanski and Kyle Cavalieri, president of Avalon Cyber, discuss the increasing risks of funds transfer fraud, covering topics such as understanding this type of fraud, how it works (including fake invoicing and “vishing” attacks), red flags, and how to respond. Red flags can include unexpected calls or emails, and it’s important to be prepared for when these contacts occur. Kevin and Kyle emphasize the growing threat of such attacks, which can result in significant financial losses. They discuss the importance of immediate action, including updating credentials, notifying the bank, involving an attorney, and reporting the incident to law enforcement. Listen in to learn more.

More than ever, cybersecurity risk assessments are essential for businesses of all sizes to understand and mitigate their risks. Done appropriately, assessments can provide help with remediation and a plan for moving forward and can even assist with pursuing insurance coverage. This episode, which features Bill Haber, co-founder of the cybersecurity company TEKRiSQ, emphasizes the need for actionable steps and justifying recommendations based on an organization's specific risks and compliance obligations. Even if your organization is not subject to specific regulations, conducting a risk assessment is crucial for protecting data, limiting liability, and maintaining cyber insurance coverage. Listen in to learn more.

From Barclay Damon’s new podcast studio, Kevin welcomes back University at Buffalo Professor Siwei Lyu. To start this fast-moving conversation, Siwei notes that what sets generative AI apart from analytical AI is that generative AI focuses on creating content rather than just answering questions or sorting through data, and he sheds light on what seemed to be the technology’s “sudden appearance.” Siwei and Kevin also discuss the introduction of ChatGPT, current and future applications of generative AI, and concerns about generative AI’s misuse. Throughout the talk, Siwei emphasizes the importance of responsible use and the need for safeguards.

Join Kevin Szczepanski as he explains his five need-to-know cyber action items for the year. They involve 1) conducting a cyber risk assessment, essential for identifying and prioritizing risks, 2) developing an incident response plan to help respond to and mitigate cyber incidents, 3) conducting tabletop exercises, which give organizations the opportunity to do run-throughs of real incidents, 4) reviewing policies, including determining which ones you need, and 5) considering appointing a virtual chief information security officer (CISO). Kevin also provides a preview of upcoming topics for Season 3 of the podcast, including AI, cybersecurity for kids, risk management, and insurance—all recorded in our new state-of-the-art podcast studio.

“Compliance” doesn’t have to be a dirty word. Check out the final episode of Season 2 of Barclay Damon Live: Cyber Sip™ when, for the first time ever, host Kevin Szczepanski welcomes two guests: his Barclay Damon colleague Bridget Steele and the founder and CEO of Opollo Technologies, Ryan Young. Using Ryan’s company as an example, you’ll hear how embracing compliance rather than avoiding it can be just the ticket to securing clients. Especially in the health care and other highly regulated sectors, when businesses successfully integrate compliance into their development, they can be more competitive. Listen in now.

In episode 46 of Barclay Damon Live: Cyber Sip™, Justin Daniels, an attorney with Baker Donelson and cohost of the podcast “She Said Privacy/He Said Security,” shares with host Kevin Szczepanski his thinking around the use—and risks—of AI in business. His concern comes with the explosion of tools like ChatGPT and the attitude of many business owners, investors, and software designers that if (or when) something goes wrong, especially regarding data and privacy, they’ll “fix it later.” Justin, also the coauthor of Data Reimagined: Building Trust One Byte at a Time, says that attitude needs to change and suggests following the nonpartisan National Institute on Standards and Technology (NIST) standards when thinking about AI use within your company. (Hint: It’s probably there already.) Listen for details.

Episode 45 of Barclay Damon Live: Cyber Sip™ addresses a critically important topic: “Building Trust One Deal at a Time: Due Diligence in M&A Transactions.” Once again, Brian Haugli, CEO of SideChannel, founder of RealCISO, and creator and host of CISO Life Podcast, joins host Kevin Szczepanski. This time, they’re covering cyber due diligence, assessments, and risks related to mergers and acquisitions. Brian notes that, though a deal rarely falls through because of cyber issues, it’s critical for the acquiring organization to know what it’s getting and how any gaps might affect the deal—especially financially. Watch or listen in for more.

Welcome to Barclay Damon Live: Cyber Sip™. In episode 44, host Kevin Szczepanski welcomes Brian Haugli, SideChannel CEO, founder of RealCISO, creator and host of CISO Life Podcast, and more, for “Your Cybersecurity Roadmap: Targeting Gaps and Assessing Risks.” Brian and Kevin first address a misconception: If you tick off the common boxes for security controls, you’ve done all you need to do. Not true, says Brian. Using his talent for visual explanations, Brian confirms that there’s a lot more to reducing your organization’s risks and making sure you have a solid program in place. Watch or listen for more.

Welcome to Barclay Damon Live: Cyber Sip™ episode 42, “‘California Emissions’: Is the CCPA a Bellwether for the Rest of Us?” Michelle Merola, leader of Hodgson Russ’s Cybersecurity & Privacy Practice, returns to talk with host Kevin Szczepanski about the changing landscape of privacy laws and specifically how California leads the way with its recently revised California Consumer Privacy Act (CCPA). Kevin and Michelle review the changes, which make the law even more consumer friendly, and touch on how other states across the country may follow suit (or not). Topics include the new regulatory agency the state has established as well as how even businesses based outside California may need to comply with the law. Listen now for this vital information.

Welcome to Barclay Damon Live: Cyber Sip™. In episode 42, “Social Engineering: The People Problem of Cybersecurity,” host Kevin Szczepanski is joined by Arun Vishwanath, a cybersecurity thought leader, author, and chief technology officer at Avant Research Group. Arun discusses his latest book from MIT Press, The Weakest Link: How to Diagnose, Detect, and Defend Users From Phishing, wrapping it into meaningful information about cybersecurity training and testing. Starting with a definition of “social engineering,” which refers to hackers directly targeting users with technology, Arun and Kevin agree that currently testing and training aren’t solving the problem and discuss potential solutions. Listen in for more.

Kevin Szczepanski, host of Barclay Damon Live Presents Cyber Sip™, welcomes Chicago-based Brian Dusek, senior vice president and head of Americas cyber with Mosaic Insurance Company. Brian is a cyber insurance underwriter and frequent speaker in this space, and he shares current ideas on a range of topics regarding the sustainability of the cyber insurance market. It’s a constantly evolving industry. In this episode, you’ll hear about trends over the last year, including an inflection point and a turn toward stability. Ransomware and business email compromise haven’t gone away, but brokers and insurers are working to ask potential insureds the right questions. Listen in for a deeper dive into privacy, security, where biometrics come into play—and how all of this can affect businesses.

It’s episode 40 of Barclay Damon Live: Cyber Sip™. Host Kevin Szczepanski is joined for the first time by Michelle Merola of Hodgson Russ, where she is a partner and leader of the law firm’s Cybersecurity & Privacy Practice. Kevin and Michelle start off by defining “privacy” as it’s currently conceived, which includes the right to protect your personal information and data. They then delve into the difference between cybersecurity and privacy and the recent paradigm shift from a focus on security to privacy. Listen in for more on developing privacy laws and how they may affect businesses across the country.

Learn about the hot topic of deepfakes in the newest episode of Barclay Damon Live: Cyber Sip™. In episode 39, Siwei Lyu, SUNY Empire Innovation Professor at the University at Buffalo, returns to talk with host Kevin Szczepanski about this polarizing issue, addressing both the notable harms and potential benefits of “generative AI technology” (that’s Siwei’s preferred, less inherently scary term for the field). Like so many issues today, it’s complicated, says Siwei, and neither extreme position—AI? No problem! Or…AI? We’re doomed!—is correct. With his combined background in media forensics, mathematics, neuroscience, and social psychology, Siwei brings a compelling perspective to the conversation. Listen in for more revealing information.

Episode 38 of Barclay Damon Live: Cyber Sip™ finds host Kevin Szczepanski talking about cybersecurity claims and coverage trends with John Farley, managing director of Gallagher Insurance. The landscape is constantly shifting, says John, and he’s seeing claims rising slightly after they dipped last year. John describes some of the many factors affecting trends in cyberattacks, and hence cyber coverage and claims, asserting that carriers are offering more services to help clients lower their risks and try to prevent attacks to stay insurable. It’s a win-win for the industry and for businesses that are in a constant battle to protect their data, their customers, and their bottom lines. Kevin and John also touch on the potential effects of new developments in artificial intelligence in this arena. Listen in for more information.

Listen in to episode 37 of Barclay Damon Live: Cyber Sip™, which finds host Kevin Szczepanski delving into the fascinating and sometimes unsettling topic of artificial intelligence with Siwei Lyu, SUNY Empire Innovation Professor at the University at Buffalo. Siwei and Kevin begin with a basic definition of artificial intelligence, or AI, and how it works. They then move into recent innovations like ChatGPT and both the excitement and concerns around its applications. With an optimistic attitude and a belief in the ability of humans to survive and thrive, Siwei offers insights for all.

Welcome to Barclay Damon Live: Cyber Sip™ episode 36. Host Kevin Szczepanski talks with Kyle Cavalieri, president of Avalon Cyber, about tabletop exercises. (No sit-ups involved.) Kevin and Kyle define the practice as a moderated exercise that tests an organization's ability to respond to a cyberattack. It’s helpful to evaluate incident-response plans; to gain clarity around stakeholders’ awareness of their roles, responsibilities, and communication; and to learn where its response program may have budget gaps. That’s some of the “whys” of companies conducting such exercises (which should minimally be held annually). They also get to the “who” and the “how.” Listen in for more on this hot topic.

It’s episode 35 of Barclay Damon Live: Cyber Sip™! Host Kevin Szczepanski and returning guest Reggie Dejean of Lawley Insurance take a look at the future of cyber liability coverage. Kevin kicks it off by noting that some in the insurance industry are making noises about cyber risk becoming uninsurable. Reggie, a 20-year veteran of the field, counters that, because cyber insurance (and reinsurance) are newer areas and because of the enormous disruption that major cyberattacks and breaches can cause, this is a natural phase of testing and potentially correcting the segment. Do we need legislation? What’s happening with litigation? And what’s the best type of cyber insurance for businesses to have? Listen in for answers and tips.

In episode 34 of Barclay Damon Live: Cyber Sip™, host Kevin Szczepanski welcomes back Bryan McCarthy of Transatlantic Reinsurance Company to discuss limiting exposure to biometric privacy claims. They continue the conversation they started in episode 28 about the effects of Illinois’s Biometric Information Privacy Act (BIPA). BIPA is intended to protect residents of Illinois but has ramifications for businesses across the country. Hear Kevin and Bryan review what companies can do to protect themselves through insurance coverage for biometric privacy claims—claims about fingerprints, retinal scans, and other biometric data not being handled properly under BIPA. Beginning with who is subject to the statute (you may be surprised) and then moving on to the wisdom, as Bryan says, of “everyone being on the same page” with regard to coverage, they give a solid overview. Tune in.