Episode 117: Leading Cyber Change: Allan Friedman on the Revolution of SBOM & Future Cybersecurity Initiatives
OODAcast
Allan Friedman is a senior strategist at CISA (the Cyber Security and Infrastructure Security Agency) where he coordinates all of their cross-sector activities on the topic of SBOM: The Software Bill of Materials. Allan is widely known as a change agent in both the public and private sector. In government he led initiatives that created positive change in major community-wide initiatives around vulnerability disclosure and vulnerability management. He also championed efforts that made dramatic improvements in the ability to reduce risk due to the proliferation of Internet of Things devices...
info_outline
Episode 116: Joe Sullivan on Managing Complex Security Challenges
OODAcast
Joe Sullivan has been at the forefront of managing security risk in rapidly growing high tech companies over the past 20 years serving as the Chief Security Officer at Facebook from early start-up through the IPO, CSO of Uber and CloudFlare, and as a security leader at eBay/PayPal. Joe was also involved in a landmark legal case for a breach at Uber which resulted in a criminal conviction that serves as a precedent for executive liability in cybersecurity going forward. In this OODAcast we discuss: Joe's early career and how he got interested and involved in technology and started his...
info_outline
Episode 115: Joe Tranquillo on the Revolution in Biological Science
OODAcast
Joe Tranquillo is a Professor of Biomedical Engineering at Bucknell University and a provost at the school. He is also and author and speaker with a knack for helping make new and at times complex subjects understandable. In this OODAcast we discuss many aspects of the revolution in biological sciences with Joe including topics like: New ways of delivering medicines that target specific tissues Discovery of the structure of almost every human protein Methods to synthesize biomolecules, which can result in ways to manufacture a wide range of materials like therapeutics, flavors, fabrics, food,...
info_outline
Episode 114: MITRE Futurist Charles Clancy on our Quantum Enabled Future
OODAcast
Charles Clancy has successfully led technology efforts in government, industry, academia and continues to lead and innovate in his current position as Senior Vice President and GM of MITRE Labs. He is MITRE's Chief Futurist. His role in technology leadership and his tracking of tech across multiple domains made for an incredibly insightful OODAcast. We review Charles' insights into: Quantum Computing Quantum Security Artificial Intelligence Microelectronics and Friendshoring/Reshoring The March 2023 National Strategy for Cybersecurity Governance in the age of ubiquitous computing ...
info_outline
Episode 113: Mark McGrath: John Boyd Is Far More Than The OODA Loop
OODAcast
Mark McGrath has applied the teachings of John Boyd to a career that began in the Marine Corps, included leadership positions in financial services firms and consulting with businesses with a need to learn to thrive in volatile, uncertain, complex and ambiguous (VUCA) environments. He co-founded the consultancy AGLX and serves as its Chief Learning Officer. He is the co-host of the popular podcast “No Way Out” which is dedicated to examining and advancing the use of the theories of John Boyd to help both individuals and businesses seeking to improve their capacity for free and independent...
info_outline
Episode 112: Serene - The Hacker Pianist Saving Cyberspace
OODAcast
Serene is a hacker in the truest sense of the word. She's applied a hacker mindset to learn coding, piano, and blend art and engineering in fascinating ways. You'll find her collaborating on-stage with Grimes one night and coding censorship resistant technologies the next day. As a self-taught coder she was the first engineer hired into Google Ideas when she was just a teenager. At Google she pioneered work on WebRTC proxies that she continued as a fellow at the Open Tech Fund and was eventually released as a Tor-enabling tool called Snowflake. Serene took a hiatus from working as a...
info_outline
Episode 111: Andy Bochman on Countering Cyber Sabotage
OODAcast
Andy Bochman is the Senior Grid Strategist-Defender for Idaho National Laboratory’s National and Homeland Security directorate. In this role, Andy provides strategic guidance on topics at the intersection of grid security and climate resilience to INL leadership as well as senior U.S. and international government and industry leaders. Andy is a frequent speaker, writer, and trainer who has testified before the U.S. Senate Energy and Natural Resources Committee on energy infrastructure cybersecurity issues and before FERC on the maturity of smart grid cybersecurity standards. He has had...
info_outline
Episode 110: Spencer Ante on Creative Capital and Disruptive Innovation
OODAcast
Spencer Ante is the author or "Creative Capital: Georges Doriot and the Birth of Venture Capital", which was on my Top 10 book list for 2022. In fact, I found Doriot's story so compelling that a portrait of him hangs on the wall at the Hack Factory start-up studio in Reston, VA. Doriot is a compelling figure with an incredible story as told in Spencer's book. He was a Harvard Business School professor, responsible for launching the modern American industrial management movement, served as a General in World War II where he solved critical supply chain and logistics issues while also...
info_outline
Episode 109: Bob Zukis and the Digital Directors Network: Helping corporate boards mitigate systemic risk
OODAcast
ob Zukis is a man on a mission to improve the ability of corporate America to succeed in a complex digital world, even when under constant cyber attack. Bob is the CEO and founder of the Digital Directors Network, the global pioneer in helping corporate directors advance their understanding of systemic risk. We consider Bob to be the world's leading advocate for improving cybersecurity governance. His many articles published in major business journals and impactful books on the topic make this case well. Bob has worked with, studied, and been on corporate boards for years and now teaches...
info_outline
Episode 108: Adam Shostack on Cybersecurity and What Every Engineer Should Learn From Star Wars
OODAcast
Adam Shostack is widely known in the cybersecurity world for his pioneering work on disclosing and discussing computer vulnerabilities (the CVE (common vulnerabilities and exposures) list). He also helped formalize and train leading approaches to threat modeling and wrote the foundational book on the subject (). In this OODAcast we seek lessons from Adam’s career and experiences (which range from startups to nearly a decade at Microsoft, as well as the Blackhat review board, as well as being an Affiliate Professor at University of Washington). We then dive deep into Adam’s most...
info_outlineIn this OODAcast we interview Michel Kwon, the founder and CEO of W@tchTower. She is a leader who has proven herself through an ability to success in three different career fields, first as a developer and programmer creating enterprise grade solutions, then as a government executive who would eventually lead the United States Computer Emergency Readiness Team (US-CERT)during a critical period in its transformation, and now as an entrepreneur and CEO adding value to enterprises seeking to reduce risk and improve cybersecurity posture.
We discuss Michel's foundational story and extract lessons relevant to those starting a career today, and also dive into how she leveraged her technical skills and desire to create into a winning presentation of a new type of WiFi antenna at Defcon. This event would prove to be pivotal for her next career in the Department of Justice, and makes a clear point of use to any who may be seeking opportunities to switch careers (her focus on continued learning and intention to always be herself were at play here).
We also discuss her government career and lessons learned for any professional government who would like to advance and make bigger differences for the nation. There are also lessons from Mischel's story for any leader who needs to motivate action across organizations when you are not in command. Her approach was to provide threat briefings and visions for the future that would motivate other leaders. This may be the only way that works on cross organizational efforts like those she had to lead. She also provides eye-opening anecdotes about the importance of knowing the rules (in her case, including the Constitution and the laws in place for how we protect privacy). She shares lessons and recommendations that flow from this for any commercial cybersecurity professional as well.
As CEO of W@tchTower she has led the firm from its formation to a highly performing value adding partner for any business which is in need of a security operations center (SOC) or with a need to improve current SOC operations. Watchtower provides the technology, guidance and expertise to enable security operations and mitigate problems of too much data, disorganized processes, overworked analysts and hard to measure metrics.
Additional Resources
OODA Research Reports:
Cyberwar Was Coming: A Reflection on the 25 Year Old Thesis that Predicted a Generation of Cyberconflict
“You’ve got to read what this kid is writing out of his basement at the University of Vermont…” – recently retired CIA officer to intelligence and military colleagues in 1994. A candid 25 year retrospective on a thesis that launched a tremendous amount of dialogue and action on the issues of information warfare, cyberterrorism, and cybersecurity. See:
Deception Needs to be an Essential Element of Your Cyber Defense Strategy
In the cyber defense community, we talk about a wide-range of risk mitigating technologies, strategies, and activities. We talk about attacker deterrence and increasing costs for the attacker. We invest in endpoint agents, threat intelligence, DLM, and other mitigating technologies on a daily basis. Here’s why one of the most compelling emerging use cases for increasing attacker costs is through the use of deception. For more see: Deception Needs to be an Essential Element of Your Cyber Defense Strategy
Traveling Executive’s Guide to Cybersecurity:
Traveling executives are frequent targets for cyber espionage. This report provides guidance for executives and their security teams on how to protect their information and technology while on the go. Produced by OODA co-founders Matt Devost and Bob Gourley, the report provides best practices, awareness of threats, and a deep understanding of the state of technology. A tiered threat model is provided enabling a better tailoring of actions to meet the threat. For more see: OODA Releases a Traveling Executive’s Guide to Cybersecurity