When cybercriminals take down your organization, you might have your technical response plan locked and loaded. But who’s calling the shots on when to bring the network offline for remediation efforts? Especially in multinational organizations, the decision-making process for cyberattack incident response isn’t always clearly defined. Any confusion about who makes critical decisions will hinder a fast response. As a follow-on to a previous HIP Podcast session about developing a technical response plan to a cyberattack, Sean Deuby chats with Benjamin Cauwel (Accenture Senior Security Manager) about how organizations can accelerate incident response by developing a decision-making plan that takes into consideration various factors such as different entities, different time zones, dfferent languages, and different national cybersecurity governing bodies.
Defining the Decision-Making Process for Cyberattack Incident Response with Benjamin Cauwel
In this episode, they walk through what the shared responsibility model actually means for Entra tenant data, how token-based attacks sidestep phishing-resistant authentication, and what happens when a threat actor hard-deletes objects and locks you out.
This episode features Jim Bowie, VP and CISO at Tampa General Hospital, joined by co-host Courtney Guss, Director of Crisis Management at Semperis. He discusses why healthcare is uniquely exposed during cyber incidents, why recovery is where most organizations are losing time, and how disciplined rehearsal is the highest-leverage move available to resource-constrained security teams.
This episode features Geoffrey Mattson, CEO of SecureAuth, joined by co-host Sarah Cecchetti, Director of Product Management at Semperis. He discusses why agentic …
In this episode, Mark explains how Gartner's research model works and what his team is prioritizing across identity verification, authorization, ITDR, and decentralized identity. He also breaks down what AI means for identity right now and why securing AI agents is harder than most teams realize.
In this episode, Angie dives into the organizational and cultural work that most identity programs skip. She shares why identity deserves its own program, how to apply OCM to bring resistant stakeholders on board, and why governance must come first. Angie's core argument is that if identity security creates too much friction, people will route around it, and that's where the real risk lives.
This episode features Sarah Cecchetti, Director of Product Management at Semperis. A veteran identity executive, Sarah co-founded IDPro and co-authored NIST SP 800-63-3C Digital Identity Guidelines. She previously led Amazon Cognito as Head of Product at AWS, where she also open-sourced Cedar, the policy language at the center of this conversation.
This episode features a virtual roundtable hosted by Michele Crockett, Associate VP of Product Marketing at Semperis.
This episode features Sander Berkouwer and Raymond Comvalius, two longtime identity security experts and Microsoft Most Valuable Professionals (MVPs). With decades of experience in …
With a career spanning healthcare, finance, crypto, and the Department of Defense, Krista brings a uniquely nontraditional path into cybersecurity, …
This episode features Cliff Fisher, Senior Solutions Architect at Semperis and former Senior Technical Program Manager on Microsoft’s Active Directory …