Off the Wire: A Play by Play on Cybersecurity and Technology Issues

Episode 27 - Cloud Dreams vs On-Prem Realities – How to determine what's best?

Cloud Dreams vs. On-Prem Realities | Episode 27

In this episode of 'Off The Wire,' hosts Anthony and Tanner tackle the ongoing debate between cloud and on-premise solutions: 'Cloud Dreams vs. On-Prem Realities.' They discuss myths, pros, and cons of each, share their experiences, and delve into specific scenarios and examples, such as cost implications, security considerations, and integration challenges. They also explore the future of hybrid environments and how businesses can navigate these choices effectively. Tune in to gain insights and practical advice on making the best decisions for your IT infrastructure.

00:00 Introduction and Episode Overview

01:34 Cloud vs On-Premise: Personal Experiences

02:57 First Steps into the Cloud

04:30 The Ongoing Debate: Cloud or On-Premise?

09:22 Advantages of Cloud Solutions

17:51 On-Premise Benefits and Cost Considerations

25:22 Real-World Scenarios and Lessons Learned

27:15 Second Guessing Decisions During the Storm

27:43 Inherited Cloud Solutions and Their Challenges

29:05 On-Premise Phone System Issues

29:43 Deciding Between Cloud and On-Premise Solutions

31:20 Surprises and Costs in Cloud Services

33:27 Security Concerns in Cloud vs. On-Premise

42:41 Building IT Infrastructure from Scratch

46:09 Future Plans and Final Advice

52:41 Closing Remarks and Listener Engagement

E26 - Tech Support or Customer Support? IT’s Both!

Mastering Customer Service in IT: Strategies and Best Practices

In this episode, we dive into the importance of customer service within IT departments, emphasizing its crucial role in driving innovation and improving user satisfaction. We discuss how IT professionals can develop and hone their customer service skills, the importance of effective hiring practices, and the benefits of using tools like ticketing systems to manage and resolve issues efficiently. We also touch on the significance of empathy, building trust and credibility, and maintaining good relations with other departments. Tune in for valuable tips and insights on enhancing customer service in your IT organization.

00:00 Introduction to Customer Service in IT

01:17 Challenges IT Professionals Face with Customer Service

02:38 The Importance of Hiring the Right People

04:50 Key Attributes for Customer Service Excellence

07:57 The Role of IT in Enhancing Business Efficiency

15:34 Proactive vs. Reactive IT Support

20:25 Implementing Effective Ticketing Systems

28:14 Building Relationships and Empathy

39:46 Maintaining High Morale for Better Service

40:38 Final Thoughts and Encouragement

E25 - Clean Up Your Act: Boosting Security Through Account Hygiene

In this comprehensive episode, we explore critical aspects of managing IT security, focusing on Active Directory audits, password hygiene, and privilege management. We share practical strategies for conducting thorough security audits, managing group policies, and ensuring effective password practices using tools like CrowdStrike and Microsoft Azure.

Emphasis is placed on minimizing over-privileged accounts, leveraging secure remote access tools, and implementing Multi-Factor Authentication (MFA) to enhance security. The discussion extends to the importance of dynamic employee groups, regular auditing of both AD and non-AD integrated systems, and the necessity of maintaining detailed documentation for enhanced cybersecurity. Real-life examples and practical advice underscore the importance of curiosity and constant improvement in IT security practices, with regular reviews and a proactive approach to identifying and mitigating risks.

 

Microsoft Entra Password Protection - Microsoft Entra ID | Microsoft Learn https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises

Group Policy: Automatically Delete User Profiles Older Than Certain Number of Days Win 10 not working. - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/441800/group-policy-automatically-delete-user-profiles-ol

 

00:00 Introduction and Episode Overview

00:04 Listener's Request: Active Directory Audit

02:14 Account Hygiene Tips and Auditing Processes

02:36 Handling Stale Accounts and Group Policies

04:48 Group Memberships and Elevated Access

09:35 Password Management and Security

16:41 Auditing GPOs and Password Expirations

19:56 Dynamic Groups and Documentation

29:34 File Sharing and Ransomware Stories

31:38 The Dangers of Open Shares

32:37 The Importance of Regular Audits

32:55 Onboarding and Job Role Audits

33:49 Offboarding and Permission Management

34:48 Curiosity in Cybersecurity

35:40 Overprovisioning Security Permissions

41:12 Vendor Access and Security Tools

46:30 Monitoring and Auditing Best Practices

47:57 Tools and Techniques for Better Security

51:36 The Importance of Continuous Improvement

01:01:52 Final Thoughts and Listener Engagement

E24 - Lessons from Hurricane Helene: Enhancing Resilience and Preparedness

Crisis Management: Lessons from Hurricane Helene In this episode of Off the Wire, hosts Anthony and Tanner discuss the impact of Hurricane Helene on regions like Western North Carolina and Eastern Tennessee, focusing on technological challenges and solutions. Tanner, from Blue Ridge Energy, shares insights into infrastructure resilience and the importance of multiple internet connections during disasters. They explore the role of alternative internet sources like Starlink, and highlight the value of having redundant systems and communicating with service vendors during crises. The episode also delves into challenges with cellular networks, emergency power setups, and the need for maintaining cybersecurity protocols during disasters. They emphasize the importance of supporting relief efforts and the psychological impact of witnessing such devastation.

00:00 Introduction and Welcome

00:09 Impact of Hurricane Helene

01:17 Devastation and Recovery Efforts

02:21 Technology Challenges During the Disaster

02:37 Internet Connectivity Issues

04:08 Starlink as a Backup Solution

10:09 Cellular Connectivity During the Crisis

18:53 Burnout and Mental Health

 

Please feel free to contact us at show@offtheirepodcast.com

E23 – The Science and Art of an IT Budget

In Episode 23 of Off The Wire, Tanner and Anthony, two seasoned IT executives, delve into IT budgeting. They discuss their experiences, tips, and strategies for creating effective technology budgets, emphasizing the importance of aligning budgets with strategic plans. The episode covers auditing existing technology stacks, communicating with stakeholders, leveraging automation, and investing in staff training. Tanner and Anthony also explore future technology trends for 2025, such as AI, project management tools, and enhanced cybersecurity measures. Listeners are invited to contribute their thoughts on 2025 investments, making this a comprehensive guide for IT professionals navigating budget season.

E:22 - ChatGPT: The Newest Member of Your Cyber Team

Integrating ChatGPT: Your Newest Cyber Team Member In this episode of 'Off the Wire,' Anthony and Tanner explore the impact of ChatGPT on the cybersecurity field. With a combined 35 years of experience, they discuss harnessing ChatGPT to enhance cybersecurity measures and tackle modern technology challenges. They delve into ways ChatGPT can assist, such as generating policies, creating scripts, aiding in tabletop exercises, supporting incident response, and more. The episode also covers potential concerns about privacy and data security when using ChatGPT. Concluding with actionable insights, the hosts emphasize the importance of embracing AI technologies to improve efficiency and cybersecurity posture.

00:00 Introduction to Off the Wire Podcast

00:35 ChatGPT: The Newest Member of Your Cyber Team

01:32 Generative AI: Benefits and Concerns

03:33 Practical Uses of ChatGPT in Cybersecurity

04:51 Enhancing Cybersecurity Policies with AI

07:38 Incident Response and Script Creation with ChatGPT

11:58 Advanced Uses: Tabletop Exercises and Phishing Training

13:33 Incident Response Support and Log Analysis

19:14 Summarizing Reports and Enhancing Efficiency

27:12 Privacy Concerns and Safe Usage of AI

31:13 Final Thoughts and Podcast Outro

E21 - One Password to Rule Them All: The Case for Password Managers in the Enterprise

- Hosts: Anthony and Tanner, IT executives with 35 years of combined experience.

- Episode Title: One Password to Rule Them All: The Case for Password Managers in the Enterprise.

- Overview: Discussing the importance and benefits of password managers in the enterprise, sparked by personal experiences.

 

Segment 1: The Need for Password Managers

 

Problem Statement: 

  - Frequent issues with lost passwords and user frustration with managing multiple complex passwords.

  - Importance of providing a password manager to prevent unapproved, less secure solutions.

  - 34% of employees use unapproved apps/tools, increasing security risks.

 

Segment 2: Benefits of Enterprise Password Managers

 

Security & Convenience:

  - Simplifies creation of complex passwords and supports MFA.

  - Allows secure sharing of passwords within teams.

  - Can lower cybersecurity insurance costs and help with compliance.

 

Segment 3: Choosing the Right Password Manager**

 

Open Source vs. Closed Source:

  - Open Source: Transparency, community review (e.g., KeePass, Bitwarden).

  - Closed Source: Often better support and UI (e.g., Keeper, 1Password).

 

Tool Highlights:

  - Bitwarden: Open source, highly secure, supports self-hosting.

  - Keeper: Closed source, user-friendly, dark web monitoring.

  - LastPass: Not recommended due to past security breaches.

 

Segment 4: Implementation Tips

 

Start Small:

  - Pilot with a small, tech-savvy group.

  - Gradual rollout with strong training and support.

  

Balance Security and Usability:

  - Tailor security settings to user needs and require MFA.

 

Segment 5: The Future - Passkeys

 

Passkeys Overview:

  - Passwordless authentication using cryptographic keys, a potential future replacement for passwords.

 

Conclusion:

 

Final Thoughts:

  - Encourage providing password managers that align with security policies.

  - Call to Action: Subscribe, share, and provide feedback for future episodes.

- Closing Remarks: Thanks to listeners and recent giveaway winners.

Bonus E3 - The Patrick Kelley Story: Resilience, Redemption, and the Road to Cybersecurity Excellence!

**Introduction**

- **Welcome Back:** Recap of the podcast’s focus on cybersecurity risk and technology challenges.

- **Hosts’ Background:** Brief intro of Anthony and Tanner.

- **Guest Introduction:** Anthony introduces Patrick Kelley from Leargas Security and Critical Path Security, who spoke about mental health at a recent cybersecurity conference.

 

**Main Discussion**

 

1. **Guest’s Personal Journey**

   - Patrick shares his struggles with reading during childhood and how he overcame these challenges to succeed in cybersecurity.

   - The role of spite and determination in his early career, transitioning to more positive motivations later.

 

2. **Mental Health in Cybersecurity**

   - Discussing how Patrick manages imposter syndrome and the importance of mental health in leadership.

   - Patrick’s approach to supporting his team’s well-being, including forced PTO and promoting work-life balance.

 

3. **Leadership and Delegation**

   - The challenges of delegation, especially with trust issues.

   - Practical tips on effective delegation and building trust within a team.

 

4. **Cybersecurity Insights**

   - Importance of calm leadership during cybersecurity incidents.

   - Tips for SMBs, focusing on consolidating tools and starting with cybersecurity basics.

 

5. **Role of a Virtual CISO**

   - Explanation of what a vCISO is and how it can benefit SMBs, particularly in the energy sector.

   - Patrick’s commitment to serving the EMC community with affordable cybersecurity solutions.

 

**Conclusion**

- **Final Thoughts:** Emphasizing the importance of mental health in the cybersecurity industry.

- **Call to Action:** Encouraging listeners to subscribe and follow on social media.

- **Closing:** Thanking the guest and listeners, with a reminder to tune in for future episodes.