#S2Roadshow Recap – Week Six

Fargo, ND and Rochester, NY

If you’re new, or you’re confused about this #S2Roadshow thing, start here (maybe). It’s hard to believe that each week gets better, but it’s true, it does! Week #6 (this one) was the best yet.

Previous Week’s Recaps:

The purpose of the SecurityStudio Roadshow (#S2Roadhow) is to meet people and make partners. We want to meet people, understand their businesses, and help them grow using simple, fundamental, and compliant solutions (S2Score, S2Org, S2Vendor, and S2Team/S2Me).

Our mission is to fix the broken information security industry. Success requires collaboration, partnership, and transparency.

John and I spent half the week together and the other half in separate towns.

BBQ Reviews

In full transparency, we have a secondary mission on the #S2Roadshow. We eat as much BBQ as we can. After stuffing ourselves, I summarize our BBQ reviews at the end of each recap article (see below).

Fargo, North Dakota

If you’ve never been to Fargo in November, you’ve got to give it a try sometime. You can visit Bonanzaville USA, the Fargo Air Museum, or you could come to do what we did, attend Network Center’s nVision conference. We left on Tuesday for the 3-1/2 hour drive to Fargo, and got there just in time for the vendor social hour.

Network Center is a great company, and we’re big fans. It helps that they’re a trusted SecurityStudio partner.

On my trip up north, I was joined by three of my favorite SecurityStudio people; John Harmon, Justin Kallberg, and Steve Krause (all pictured below).

nVision 2019

We’ve been at the nVision conference for years now, and this one was the best yet. There were 500+ people packed into the Fargo Holiday Inn Conference Center, all there to learn and network together. Of course, there were plenty of vendor booths there (including ours – below) too.

This slideshow requires JavaScript.

There were so many incredible people at this event, and it was great catching up with people I hadn’t seen in a while. After spending a few hours hanging out with cool people, I gave my talk on the main stage at 1:00. I changed my talk at the last minute (as per usual) and decided to give the “How do we secure America” sermon that I developed the week prior.

This slideshow requires JavaScript.

The place was packed and the audience was amazing! We hung out at our booth afterwards and gave out a whole box of UNSECURITY books for free. I met countless awesome people, including Zoe Bundy (pictured below with her brother Grover), Frank LaLonde (from Nativity Church of Fargo – also pictured below), John Nagel (Cybernet Security), and Larry Schwab (Discovery Benefits CISO).

This slideshow requires JavaScript.

One person who stands out from the rest is Zoe. She’s incredible, and she’s the founder of Brainy Ladies. Brainy Ladies is a cool organization with an awesome purpose; “We help young girls find their inner genius by helping them remain interested in STEM.” I met Zoe for the first time at last year’s nVision conference, and it was wonderful to see her again. Read her story here, and tell me you’re not impressed! I’ll get her on the UNSECURITY Podcast one of these days, hopefully soon.

nVision was a great conference. Sadly, we didn’t have time to grab any BBQ in Fargo. Curious, is there any good BBQ in Fargo? The platter of bacon laid out at the nVision lunch buffet will have to do.

Rochester, New York

Made it back to the Twin Cities early enough to grab five hours of sleep before catching my 5:15am flight to Rochester. I have an affinity for Rochester because one of my favorite customers (@FRsecure) is Excellus BlueCross BlueShield. Funny thing is (sort of), I’ll be back in Rochester to do some work for Excellus the following week.

The purpose for this particular visit was to attend and present at the Rochester ISSA chapter meeting being held on Thursday night.

Two trips to Rochester in five days. Weird.

First thing after landing in Rochester was to find BBQ. Took out my phone, opened my Apple Map and typed “BBQ”. The closest BBQ joint that looked legit was Unkl Moe’s BBQ & Catering at 493 West Ave (review below). That’ll do.

After BBQ, it was time for an early check-in at the hotel and a short nap.

Rochester ISSA

The Rochester ISSA meeting started at 6:00pm, and I was almost late. I started doing some work in the hotel and got a little caught up in it. The meeting was held at the offices of Nixon Peabody, a nice law firm located at 1300 Clinton Square. Guess what they had catered in? BBQ! Before the meeting started, we enjoyed some Dinosaur BBQ (one of my favorites in Rochester) while we got to know each other.

The meeting was great! Attendance was good, participation was awesome, and they let me preach for a full hour and a half. I preached about mental health, getting our industry’s security #*(! together, and civic duties for security people. Great talk and discussion!

Gave away a few books, and headed back to the hotel at 10:00pm. Ray Feldman left me a nice shoutout before I got back.

Most of the day Friday was spent at Starbucks catching up on email and other things that I’d neglected over the week. Tried another BBQ joint before heading to the airport, Texas Bar-B-Q Joint in Spencerport (review below).

Overall, this was another great week. Met a ton of new and wonderful people!

BBQ Reviews

Only two BBQ reviews again. We still need to step up our game.

Unkl Moe’s BBQ & Catering – no website – Overall: 6.5

Hard to believe that I didn’t nab any BBQ this week until Thursday after getting off the plane in Rochester. It is what it is. I chose Unkl Moe’s because it was the closest BBQ joint to the Rochester airport and it got fairly good reviews.

I walked in the front door and the smokey smell hit me nicely. The inside of this place reminded me of a small town southern diner with most of the seats occupied by regulars. My hopes were high. I bellied up to the counter, grabbed a menu, and ordered the BBQ ribs and pulled pork platter (choosing french fries and cabbage as my sides).

This slideshow requires JavaScript.

Sadly, I was a little disappointed by the place, except for the conversations I had with the regulars. One conversation in particular was great! While eating, I struck up a conversation with a retired OTR trucker named Howard and we talked about all sorts of things; politics, his hometown in Georgia, etc.

The food definitely wasn’t the best thing about this place. The pulled pork had a nice texture, but the flavor was missing. The ribs were OK, but they were smothered in sauce. I’d go back to this place for the conversation, but not the food.

Texas Bar-B-Q Joint (Spencerport) – https://www.bbqrochester.com/spencerport – Overall: 7.00

I didn’t realize that this was a small chain of BBQ joints until I sat down to write this. This was my first trip to Spencerport and I was excited to try this place. The reviews were good and I felt like I could almost taste the pictures online.

This slideshow requires JavaScript.

Walked in and ordered my food at the bar (sliced brisket, pulled pork, and sausage with macaroni and cheese and steamed vegetables for sides). The guy taking my order was helpful, and I took my seat at one of the open booths in the corner. This joint looked very promising and the it smelled amazing. It was lunch time and there were maybe eight people in the place.

It didn’t take long before I realized how cold it was. They must have had the thermostat set at 60! Whatever, I blew it off. I came here for some meat.

The cook called my name, and I jumped to grab my tray. I was excited and hungry. Turned out, I was also a little disappointed. Everything was OK, but nothing was exceptional. The portions were good. The pulled pork was a little watery. The brisket was OK, but it was cut too thick and it wasn’t smokey enough. The best part of the meal was sadly the macaroni and cheese.

Remember how I said the place was cold? A cold BBQ joint makes things suck more. This is because the meat on your plate starts cooling off too quickly and by the time you’re getting towards the end, the meat is cold, dry, and chewy.

The BBQ wasn’t bad. Just not sure I’ll be back. Maybe in the summer.

BBQ Summary

Again, two new BBQ joints to add to our list. This was a disappointing BBQ week. The winner was Texas Bar-B-Q Joint (Spencerport, NY). Pecan Lodge easily retains it’s top place as overall #S2Roadshow leader with a score of 9, and Bowlegged BBQ is still in the #2 spot. The current overall standings are listed below.

Overall Standings (at the end of #S2Roadshow Week Three):

  • Pecan Lodge – 9
  • Bowlegged BBQ – 8.75
  • Divine Swine – 8.5
  • Big Ed’s BBQ – 8.25
  • Mission BBQ – 8
  • Cousin’s BBQ – 7.75
  • Blackwood BBQ – 7.5
  • Broad Street BBQ – 7.5
  • Hard Eight – 7.25
  • Spring Creek Barbeque – 7.25
  • Redd’s BBQ – 7.25
  • Lucille’s Smokehouse BBQ – 7
  • Texas Bar-B-Q Joint – 7
  • Smoque – 6.75
  • Sweet Lucy’s Smokehouse – 6.75
  • Red Coal BBQ – 6.75
  • Unkl Moe’s – 6.5
  • Hambone’s Smokehouse – 6.25
  • Shakedown BBQ – N/A (wasn’t open when it was supposed to be, wasted trip)

Next Week’s #S2Roadshow

This is a crazy week. I’ll be back in Rochester, NY on Monday and Tuesday, flying back to Kansas City, MO on Wednesday, then out to Sacramento, CA. John joins me in Kansas City and Sacramento.

I’m pumped about Kansas City BBQ, but I’m there to talk with members of Greater Kansas City ISACA Chapter . This will be a good meeting for sure. Some of the members have been hyping it up online.

On Friday, I’m speaking at the Sacramento Valley ISSA meeting. I’m excited to meet a bunch of cool people, but I’m also excited about the weather!

Looking forward to another great week!

Stay tuned for next week’s #S2Roadshow updates. You can follow us on Twitter (@evanfrancen, @HarmonJohn, @StudioSecurity, and the #S2Roadshow hashtag) and on LinkedIn.

See you next week! If you want to collaborate with us, get in touch!

#S2Roadshow Recap – Week Five

St. Paul, MN and Dallas, TX

If you’re new, or you’re confused about this #S2Roadshow thing, start here (maybe).

Previous Week’s Recaps:

The purpose of the SecurityStudio Roadshow (#S2Roadhow) is to meet people and make partners. We want to meet people, understand their businesses, and help them grow using simple, fundamental, and compliant solutions (S2Score, S2Org, S2Vendor, and S2Team/S2Me).

Our mission is to fix the broken information security industry. Success requires collaboration, partnership, and transparency.

Together again! This week, John and I were together doing our thing. Good times!

BBQ Reviews

In full transparency, we have a secondary mission on the #S2Roadshow. We eat as much BBQ as we can. After stuffing ourselves, I summarize our BBQ reviews at the end of each recap article (see below).

Sideshow – Cyber Security Summit

This wasn’t a stop on the SecurityStudio Roadshow, but a stop for FRSecure. FRSecure rocks and I love getting to preach for us/them! The Cyber Security Summit is an annual event that brings all sorts of great security folks together in the Minneapolis Convention Center for three days of security awesomeness. I gave my talk on Monday, titled “Tackling the Talent Shortage Problem: An Honest Look at Challenges Related to Finding and Retaining Information Security Talent.”

I’m the guy with the beard (in the pic). If you’d like a copy of my deck, it’s available here. Use it. Steal it. Distribute it. Do whatever you’d like with it. 😉

Great conference. Great attendance. Great everything. It was fun.

St. Paul, Minnesota

In case you didn’t know, John and I are both from Minnesota, so this is a short road trip. We traveled all the way from Minnetonka (where our offices are) to St. Paul on Wednesday.

John and I both spoke at the Minnesota Counties Computer Cooperative (MNCCC) Halloween Cybersecurity Workshop titled “The Wicked Web”. There were a hundred (or so) people there representing local governments throughout the state. Originally, only John was scheduled to speak at this event, but a scheduled speaker backed out at the last minute. The fine folks at MNCCC asked if I would fill in.

Sure I said! What will I talk about though? I whipped up a presentation titled “How do we secure America?” Why not, it’s fitting for government people, right? It turned out to be a good talk, primarily because the audience was awesome!

If you’d like a copy of this deck, I put it here. Same as the last one, feel free to use it however you’d like.

John gave a demonstration of the S2Org tool for the audience and we invited them all to use it. It’s free for crying out loud! It was nice to see many counties/cities (~10) take us up on our offer. If you haven’t tried the free S2Org tool yourself, do it!

Dallas, Texas

John and I left for Dallas on Thursday morning. We grabbed our car from Wonder Woman, then headed to our first meeting.

We drove straight to Hard Eight BBQ where we had a meeting scheduled with some of the guys from @Risk Technologies. The BBQ was good (see below) and the meeting was great! @Risk has some really cool things going on and we’re happy to be friends!

We took a partner phone call in the car while we drove to another meeting. This meeting was with Ryan at FRG Solutions to collaborate on some cool go to market ideas. Great ideas and a great call!

Along the way, we were a little troubled with this picture.

Our next meeting was with John Ross, a super cool technology executive from Dallas. John was in the audience during my ISC2 keynote a few weeks back. In the middle of that talk, he went out to the lobby and grabbed me a cup of coffee. How cool is that! Anyway, we’re meeting again. He chose this coffee shop called Ascension, and these guys take coffee to a whole new level!

This slideshow requires JavaScript.

It was cool to catch-up with John and talk about ways to work together. We talked a lot about starting businesses, finding the right path, and our faith. I LOVE good people and I love working with them too. This was a wonderful way to end my day (John went on to have another meeting or two after this one).

ICI Events

On Friday, we attended a really cool event put on by ICI Events at the Four Seasons Resort and Club. The event featured a unique format for bringing vendors, partners, and business consumers together, starting with a speed dating round where a few business consumers would sit at your table for six minutes while you told them about your solution. After the six minutes was up, people would switch places, and you’d do it again. This would continue until all business consumers had seen all vendors. After the speed dating round, consumers would vote on which vendors they’d like to know more about. It was pretty cool and we made a lot of friends!

This slideshow requires JavaScript.

JP Hill (pictured above) was a key player in putting this all together and he made us feel very welcomed. JP was the key person who put together the ISC2 Cyber Aware Dallas event too, and he’s Dallas ISC2 Chapter President. In his free time (joking), he’s the CISO at Secutor Consulting.

Like I said, we made a lot of friends here.

Trip Home

Normally, my trip home is spent working on the plane, but this trip home was a little different. I met a guy named Chad on the plane. Chad is a social worker from MN, and we somehow got to talking about Jesus. We talked about everything from marriage and family to work and hobbies, and everything in between.

Well, that was that. Great trip(s) this week!

BBQ Reviews

Only two BBQ reviews again. We need to step up our game.

Hard Eight – https://hardeightbbq.com/ – Overall: 7.25

We met the guys from @Risk here and they paid for it, so the value was great! I don’t even know how much our food cost. The experience was unique. You walk up to a big pit full of meat and grab what you want. There’s everything in this pit; turkey, pulled pork, brisket, ribs, sausage, etc. There were even some kind of weird shrimp kabob things. Once you grab your meat, you go inside to pick your side dishes and beverages. At the end of the line is the cashier, and after paying, you go find a seat somewhere.

This slideshow requires JavaScript.

The meat was OK. It tasted sort of rushed and bulk-prepared where I like meat that feels like it was cooked in the back yard. I could hardly notice the smoke in the meat and the pulled pork was watery. The best meat I had was the turkey, which was really good. Overall, this place was OK. I’m not sure if it’s a place that I’d make a special trip to go back and visit.

Cousin’s BBQ – https://www.cousinsbbq.com/ – Overall: 7.75

I arrived at the DFW airport for the trip home and realized that I’d only done one BBQ joint so far on this trip! I sort of panicked a bit before finding this little gem in the DFW airport. Thank God! A man can’t take a trip with only one portion of BBQ.

This slideshow requires JavaScript.

My expectations for this place were low to begin with. After all, what kind of BBQ can you expect to get in an airport? Needless to say, I was very pleasantly surprised! I ordered pulled pork and brisket, with broccoli salad and cole slaw on the side. The meat was surprisingly moist a very flavorful. The smoke ring was good too. In a pinch, this place will definitely do!

BBQ Summary

Again, two new BBQ joints to add to our list. The winner this week was Cousin’s BBQ. Pecan Lodge is still the the overall #S2Roadshow leader with a score of 9, and Bowlegged BBQ is still in the #2 spot. The current overall standings are listed below.

Overall Standings (at the end of #S2Roadshow Week Three):

  • Pecan Lodge – 9
  • Bowlegged BBQ – 8.75
  • Divine Swine – 8.5
  • Big Ed’s BBQ – 8.25
  • Mission BBQ – 8
  • Cousin’s BBQ – 7.75
  • Blackwood BBQ – 7.5
  • Broad Street BBQ – 7.5
  • Hard Eight – 7.25
  • Spring Creek Barbeque – 7.25
  • Redd’s BBQ – 7.25
  • Lucille’s Smokehouse BBQ – 7
  • Smoque – 6.75
  • Sweet Lucy’s Smokehouse – 6.75
  • Red Coal BBQ – 6.75
  • Hambone’s Smokehouse – 6.25
  • Shakedown BBQ – N/A (wasn’t open when it was supposed to be, wasted trip)

Next Week’s #S2Roadshow

John and I are together again for the first half of the roadshow, then I’m going solo for the second half. We’re excited to go up to Fargo, ND this week to hang out with Network Center, our partners to the north. They put on this amazing event every year called nVision, and both John and I are speaking on the main stage there. John comes back home and I head out to Rochester, NY to make some new friends. I’ll be speaking at the ISSA chapter there.

Looking forward to another great week!

Stay tuned for next week’s #S2Roadshow updates. You can follow us on Twitter (@evanfrancen, @HarmonJohn, @StudioSecurity, and the #S2Roadshow hashtag) and on LinkedIn.

See you next week! If you want to collaborate with us, get in touch!

The UNSECURITY Podcast – Episode 52 Show Notes

Yay us! This is the one year anniversary of the UNSECURITY Podcast! 

Episode 52. One year, one episode per week, fifty-two episodes. Hard to believe it’s already been a year. We didn’t miss a single week, and if you know us (well, me anyway), you know that’s almost miraculous. Some weeks were tough to get something recorded, but we did it anyway.

Last week was a good one around here. I’m not sure what Brad’s been up to because we haven’t caught up with each other yet.

For me, I gave a couple talks at a couple of conferences, made a short Dallas trip, and did some other neat stuff.

Last week was a great show with special guest, lead pen-tester, and all around awesome guy Eric Hanson. We’re pleased to have another special guest this week! David Kruse is joining us to share his perspectives on things. It’s gonna be another great show!

My show to lead this week and these are my notes.


SHOW NOTES – Episode 52

Date: Monday, November 4th, 2019

Show Topics:

Our topics this week:

  • One Year Anniversary
  • Introducing David Kruse
    • How’d you get here? 
    • Cyber Insurance
    • Speaking
  • Industry News
Opening

[Evan] Hey UNSECURITY Podcast listeners! This is episode 52, the date is November 4th, 2019, and I’m your host, Evan Francen. My guy is with me, Brad Nigh. Tell the folks something Brad.

[BradWords, words, words, etc.

[Evan] Alright, we’ve got a great show planned!

  • We’re going to talk about 0ur first year of podcasting, and some of what we’ve learned.
  • We’re going to welcome our guest David Kruse. He’s an awesome dude who’s got a cool career story. He also knows a ton about cyber insurance, so we’re going ask him all sorts of challenging cyber insurance questions.
  • After all this, we’re going to discuss some interesting news stories, including Google’s Fitbit purchase announcement.\

Ready Brad?

[Brad] Of course he is.

[Evan] OK. Joining us this morning is a pretty swell guy, David Kruse. Good morning David!

[David] Unless we have technical issues, David will probably say something.

[Evan] You guys, I can’t believe this is the one year anniversary of the UNSECURITY Podcast! We’ll do the official One Year Anniversary Show next week, but let’s talk about this.

One Year Anniversary Discussion
  • Reminiscing – some cool and some funny show moments
  • People we’ve met, and some of our favorite peeps
  • What’s next? Ideas.

[Evan] It’s been a good year. Here’s to an even better one ahead! OK, now let’s talk about you David. 

Introducing David Kruse
  • How’d you get here? – One of the most fascinating things David shared with me was his career path. It’s pretty wild. There are some interesting parallels between his path and mine. Should be a good talk!
  • Cyber Insurance – David has some awesome cyber insurance experience and advice.
  • Speaking – David does some speaking, including keynotes. Let’s get his perspective, tips, and tricks on this too.

[Evan] It’s great talking to you and it’s great knowing you David! Thanks for sharing brother. Let’s wrap the show up with some news stories. 

News

[Evan] We’ve got two (maybe three) news stories to discuss this week, but one news story in particular that caught my eye was Google’s intended purchase of FitBit. Ugh.

Closing

[Evan] Episode 52 is a wrap. Well, almost. Thank you for joining us David! Hopefully we can do this again in the future.

Thank you to our listeners! Keep the questions and feedback coming. We love it,. Send things to us by email at unsecurity@protonmail.com. If you’re the social type, socialize with us on Twitter, I’m @evanfrancen, and Brad’s @BradNigh. David, do you have a way you want people to social ice with you? 

Follow SecurityStudio (@studiosecurity) and FRSecure (@FRSecure) for more goodies!

That’s it! Talk to you all again next week!

#S2Roadshow Recap – Week Four

San Diego, CA and Wise, VA

If you’re new, or you’re confused about this #S2Roadshow thing, start here (maybe).

Previous Week’s Recaps:

The purpose of the SecurityStudio Roadshow (#S2Roadhow) is to meet people and make partners. We want to meet people, understand their businesses, and help them grow using simple, fundamental, and compliant solutions (S2Score, S2Org, S2Vendor, and S2Team/S2Me).

Our mission is to fix the broken information security industry. Success requires collaboration, partnership, and transparency.

This week, John and I split up again, like we did in Week #2. I’ve got to be honest with you, traveling with John is more fun than not.

BBQ Reviews

In full transparency, we have a secondary mission on the #S2Roadshow. We eat as much BBQ as we can. After stuffing ourselves, I summarize our BBQ reviews at the end of each recap article (see below).

San Diego, California

My visit to San Diego was a short one, only one night. Flight to San Diego on Wednesday morning, and a flight back to Minnesota Thursday night. The primary purpose of my trip was to speak at the San Diego ISSA chapter meeting on Thursday.

I caught a 6:05am flight out of Minneapolis (too early) and got to San Diego around noon. I didn’t have any meetings yet, and it was too early to check into my hotel, so I hung out a Starbucks to catch up on some work.

The weather in San Diego was incredible! Mid-80s and sunny. Beats Minnesota where it was in the low-40s and rainy. Life is good.

This slideshow requires JavaScript.

Eventually got caught up (almost), checked in, and grabbed some much desired BBQ (see below).

San Diego ISSA Chapter Meeting

Arrived a bit early to the meeting (not too early) and was surprised to see two of my favorite security people right when I walked in; Robert and Tina (pic in gallery below)! Got settled in and delivered my standard message. The meeting was well-attended, and I met some incredible people! I know that I use the word “incredible” a lot, but seriously, these were some of the best people I’ve met so far on our Roadshow. Met new friends Will, Alex, Jen, Salvador, Quinton, Tim, and Greg to name a few. I’m very excited to get to know them more and collaborate on cool things!

A copy of my standard presentation deck that I spoke from is here.

This slideshow requires JavaScript.

Loved every minute of this. After the chapter meeting, I stopped by a friend’s work to say “hi” before heading to the airport. Shared a cup of coffee and a quick chat with Brian Gibbs.

This trip was a huge success, certain to produce some great relationships and some new SecurityStudio partnerships too!

Wise, Virginia

John was in Wise, Virginia at the same time I was in San Diego. John says he got the fuzzy end of the lollipop on this deal, but whatever. He was in Wise to speak at BSides Southwest Virginia, and I haven’t had much of a chance to catch up with him yet. I assume the event went well because he’s still alive and stuff. I saw him on Friday in the office, but we just didn’t get a chance to talk about his trip. So many meetings!

BBQ Reviews

Only two BBQ reviews this week, one from San Diego and one from Kingsport, Tennessee.

San Diego

Only had time to visit one BBQ joint, so I figured I better make it a good one. I searched online and found this place called Bowlegged BBQ located at 4255 Market Street in San Diego. 149 Yelp reviews and a rating of five stars! Impressive. I asked a few locals if they’d heard of the place. None of the people I asked had heard of it. Well, let’s do it…

Bowlegged BBQ – no website – Overall: 8.75

OK, this was some good BBQ! I feel bad for all the people who live here, but never experienced the joy. The place is family-owned and the atmosphere was perfect for a BBQ joint. A little cluttered, a little dirty, a little nostalgic, and a whole bunch of character. Ordered my meat from Jordan behind the counter, and I told him all I wanted was meat, no sides. Ordered rib tips, ribs, and brisket. The price? 20 bucks.

1o minutes later, I get this Styrofoam container filled with deliciousness. Like really filled and like really delicious! As you can see in the picture, the meat is drowning in sauce, and that’s generally a big no-no for me. For some reason it worked. The sauce was some sort of rural Georgia-tasting stuff with a hint of cinnamon. Weird, but delicious! I texted John and told him it was like a love fest between my mouth, my brain, and my belly. Definitely recommended!

This slideshow requires JavaScript.

Kingsport, Tennessee

Broad Street BBQ – https://www.broadstreetbbq.com/ – Overall: 7.5

John’s words, “BBQ Review: Broad Street BBQ, Kingsport, TN. Brisket was decent, the rest was just ok. Will do in a pinch, but probably one and done on this one. Super nice people though!

That’s what he said.

OK, just two BBQ reviews. Sort of sad really. 🙁

BBQ Summary

Those were two new BBQ joints to add to our list. The winner this week was Bowlegged BBQ. Pecan Lodge is still the the overall #S2Roadshow leader with a score of 9, but Bowlegged BBQ jumps in at the #2 spot! The current overall standings are listed below.

Overall Standings (at the end of #S2Roadshow Week Three):

  • Pecan Lodge – 9
  • Bowlegged BBQ – 8.75
  • Divine Swine – 8.5
  • Big Ed’s BBQ – 8.25
  • Mission BBQ – 8
  • Blackwood BBQ – 7.5
  • Broad Street BBQ – 7.5
  • Spring Creek Barbeque – 7.25
  • Redd’s BBQ – 7.25
  • Lucille’s Smokehouse BBQ – 7
  • Smoque – 6.75
  • Sweet Lucy’s Smokehouse – 6.75
  • Red Coal BBQ – 6.75
  • Hambone’s Smokehouse – 6.25
  • Shakedown BBQ – N/A (wasn’t open when it was supposed to be, wasted trip)
  • Hard Eight BBQ – INC (we were too full, need to go back)

Next Week’s #S2Roadshow

John and I are together again, and we’re back in Dallas! It’s going to be hard to pass up Pecan Lodge and we definitely need to visit Hard Eight again (this time we’ll eat it).

We’re heading to Dallas this week to participate in an ICI Cybersecurity Forum. Should be fun.

Stay tuned for next week’s #S2Roadshow updates! You can follow us on Twitter (@evanfrancen, @HarmonJohn, @StudioSecurity, and the #S2Roadshow hashtag) and on LinkedIn.

See you next week! If you want to collaborate with us, get in touch!

The UNSECURITY Podcast – Episode 51 Show Notes

Things have gotten wild at work lately. The #S2Roadshow is in full swing, Brad’s been VERY busy, and business is good. John Harmon and I are four weeks into the SecurityStudio Roadshow (#S2Roadshow). Last week he was at BSides in Virginia and I was at the San Diego ISSA chapter. I’ll write the week four recap on my blog (here) soon.

Brad’s on the East coast this weekend and won’t make it back until Tuesday morning.

All of this means that we’re going to be a day late recording this episode of the UNSECURITY Podcast. We’ve got a great show planned though! Special guest, Eric Hanson (FRSecure’s Penetration Testing Lead) will join us from Reno, NV.

Brad’s show this week, and these are his notes.


SHOW NOTES – Episode 51

Date: Tuesday, October 29th, 2019

Show Topics:

Our topics this week:

  • Quick Catch-up/Roadshow Week #4
  • Penetration Testing Discussion
    • Introduction to Pentesting
    • Common Questions
    • FRSecure’s Penetration Testing Team
    • Other Stuff
  • Industry News
Opening

[Brad] – Hi everybody, and welcome to another episode of the UNSECURITY Podcast! This is episode 51, and I’m  Brad Nigh, your host.  Joining me today is my good friend, Evan Francen. Good Morning Evan.

[Evan] Evan has been traveling a lot, I’m hoping he’s functional.

[Brad] Joining us as a special guest this week is FRSecure’s Lead Pentester, Eric Hanson. Welcome Eric!

[Eric] Says “hi”. Eric is one of the nicest guys you’ll meet.

[Brad] We’re very excited to talk to Eric, but before we dive head first into pentesting stuff, let’s catch up real quick. We’ve all been very busy. Evan, you just wrapped up week four of the SecurityStudio Roadshow, how’d it go?

[Evan] Some things. Evan’s been meeting some awesome people all over the country. Let’s get some #truth.

[Brad] Good stuff. We’ve been doing a lot of preaching lately! I just got back from speaking myself… (tell about it). OK, back to Eric now. Eric, do you do any speaking?

[Eric] Tells it like it is.

[Brad] One member of your team, “Ben” has been doing some awesome research and will be speaking again soon. I think he’s speaking at a big ISACA conference in Chicago. Let’s talk about that and let’s talk about this whole pentesting “thing”.

I’d like to spend most of the show talking about this.

Penetration Testing Discussion
  • Introduction to Pentesting
  • Common Questions
  • FRSecure’s Penetration Testing Team
  • Other Stuff

[Brad] Great discussion. Hopefully we covered some of the common questions and misconceptions people have about penetration testing. Penetration testing is serious business, and we’re VERY grateful to have such a highly-skilled team like we do here at FRSecure.

Let’s dig into some news stories before we close this episode out.

News

[Brad] We’ve got four news stories to discuss this week:

Closing

[Brad] There you go, episode 51 is a wrap! Like many of you listening, we’ve got another busy week ahead.

Special thanks to Eric for joining us this week.

Thank you to our loyal listeners! Thank you for your tips and feedback. Send us your wisdom, questions, advice, whatever, by email to unsecurity@protonmail.com. If you’re the social type, socialize with us on Twitter, I’m @BradNigh and Evan’s @evanfrancen. Also, be sure to follow SecurityStudio (@studiosecurity) and FRSecure (@FRSecure) for more goodies!

That’s it! Talk to you all again next week!

#S2Roadshow Recap – Week Three

Chicago, IL and Dallas, TX

If you’re new, or you’re confused about this #S2Roadshow thing, start here (maybe).

Previous Week’s Recaps:

The purpose of the SecurityStudio Roadshow (#S2Roadhow) is to meet people and make partners. We want to meet people, understand their businesses, and help them grow using simple, fundamental, and compliant solutions (S2Score, S2Org, S2Vendor, and S2Team/S2Me).

Our mission is to fix the broken information security industry. Success requires collaboration, partnership, and transparency.

BBQ Reviews

In full transparency, we have a secondary mission on the #S2Roadshow. We eat as much BBQ as we can. After stuffing ourselves, I summarize our BBQ reviews at the end of each recap article (see below).

Chicago, Illinois

John and I started the roadshow this week on Monday night with our flight to Chicago.

HSBC Talk

We were invited to Chicago by HSBC to talk with employees about information security. This was part of the company’s annual awareness campaign coinciding with National Cybersecurity Awareness Month. Their theme for this week was “Cyber Week #3: Cybersecurity in Our Personal Lives/Cybersecurity on the Move”, and it was an honor to be a part of it. Our talk was delivered in their Arlington Heights headquarters and it was telecast live all over the world. Super cool experience!

John took this pic and posted it to his LinkedIn feed:

In the talk, I discussed how people are creatures of habit. The same good (or poor) security habits they exhibit at home are the same ones they are bringing into the workplace. I also discussed:

  • Limitations in traditional training and awareness programs.
  • Motivating people by making information security personal.
  • If security doesn’t motivate, maybe privacy will. If privacy won’t motivate, maybe safety will.
  • The free S2Me personal security assessment and results from our audience (this was eye-opening for many).

Feedback was awesome, and we hope we made a difference. After the talk, there were a dozen(ish) people who came up to us with questions and requests for more information. If you’d like a copy of my presentation deck, I made it available here on SlideShare.

Partners

Our HSBC meeting was arranged by one of our amazing partners, Ryan Heining from FRG Solutions. Ryan met us at HSBC before the talk, and after the talk we collaborated over lunch. You get one guess about what we had for lunch (read the review below).

We also met a new prospective partner while we were in Chicago; Spector Security. It’s funny how you can tell right off the bat if there’s a fit between two organizations. Spector is in business for the right reasons, to help organizations be more secure by focusing on fundamentals first. They’re not in business to sell snake oil or take your money regardless of need. The company is run by two upstanding guys; Kevin and Zach. They’re the real deal. The conversation was awesome, and I’m excited to stay in touch while they grow their company. Check them out on their website or follow them on Twitter.

We love finding and helping companies who are serving their clients’ best interests. Companies like Spector Security are friends in this mission to fix the broken industry.

Overall, Chicago was nice. We ate some good BBQ, gave a good talk, and made a bunch of friends. By Wednesday afternoon we were on our way to Dallas, Texas.

Dallas, Texas

John and I were both excited for our visit to Dallas, for a number of reasons:

  • We had some meetings scheduled with security folks in the area.
  • John is originally from Dallas.
  • My wife and daughter were flying down from Minnesota to meet me.
  • We were participating in the ISC2 Cyber Aware Dallas Conference, where I was also giving the keynote.
  • There are rumors that the BBQ in Dallas is the bomb.

We landed on Wednesday night, got cars, met people, and got settled for what turned out to be a great couple of days!

ISC2 Cyber Aware Dallas Conference

The conference was held at the Davidson-Gundy Alumni Center on the campus of the University of Texas at Dallas on Friday (10/18). It was a beautiful venue!

This slideshow requires JavaScript.

I kicked things off with my keynote. My talk was one that I had given a few times before, and if you’ve followed me at all, you’ve probably seen it a few times already. Nothing earth shattering, just basic and fundamental information security truth. I even kept the title the same; “WANTED – People Committed to Solving our Information Security Language Problem”. I’ll keep preaching this until it feels like people really get it (and apply it). If you’d like a copy of this slide deck, here it is. Feel free to share it, use it, steal from it, or whatever else you’d like, as long as you’re helping fix this industry with it.

After my talk, I met a bunch of really good people. It’s hard to remember all of their names and all of the places they work, and I need to get much better at this. Three people in particular stuck out to me:

  • A man who runs IT (and infosec) for a group of colleges in Texas. He stuck out to me because he asked a great question during my talk, he followed up with me afterwards, and we ran into each other five or six times later throughout the day. He’s been in information security for a long time, and he really get’s it (the importance of fundamentals, how S2Org/S2Score are great tools, and how we need to solve our problems together). He became an advocate for us at the conference and brought many people to our booth. I can’t remember, but I think I gave him a signed copy of my book. Anyway, meeting him and talking with him was a wonderful experience for me.
  • There was a guy here who participated in FRSecure’s CISSP Mentor Program! We talked briefly before my keynote, but he didn’t know who I was. He didn’t know that I was Evan Francen or that I was the same guy who runs the CISSP Mentor Program with Brad Nigh (FRSecure). After my talk he ran me down to express how excited he was to meet me in person and to thank me. These encounters are always a little awkward for me, but I told him that he made my day by sharing.
  • Someone who works at a Fortune 500 company and feels unfulfilled in his work. He wants to start his own information security consulting company because he wants to help SMBs be better protected. He was looking for some advice in starting his own business and wanted to know how SecurityStudio’s tools could help him. This conversation brought back memories. I’m looking forward to seeing him get up and running!
  • JP Hill III is the President of the (ISC)² Dallas/Fort Worth Chapter and he was instrumental in putting this conference together. He’s a great guy with a lot of energy! I loved meeting and collaborating with him. We’ll be visiting with the (ISC)² Dallas/Fort Worth Chapter many more times in the future as we work together to serve this community.
  • One last person who really stood out was a guy who made it a point to track me down and tell me how much my talk meant to him. He stuck out because of his enthusiasm and authenticity. I pray he never loses either. 🙂

There were many others, but these are the conversations that stick out right now. It was a very good conference and all of my conversations were great! Huge success.

Partners

We met a handful of partners in Dallas, and I’m pretty sure we’ll formalize at least three of our relationships here. There’s a great deal of potential in the Dallas/Fort Worth area, so I’m sure we’ll make more friends here.

We will be back in Dallas in a few weeks, so we didn’t overdo this trip.

P.S. While we were in Dallas, we took calls from a potential partner in North Carolina and started conversations with a company in the UK. Things are heating up! Good things.

BBQ Reviews

Holy buckets, we had some great BBQ this week! There’s no shortage of BBQ joints to try out in Chicago or Dallas, so we had plenty of choices. John and I also receive suggestions everywhere we go now.

Chicago

We visited three BBQ joints while we were in Chicago. Here’s what we thought…

Blackwood BBQ – https://www.blackwoodbbq.com/ – Overall: 7.5

There are five locations for Blackwood BBQ, and we visited the Schaumburg location for lunch. John and I both ordered combos. He got sliced brisket, pulled pork, and burnt ends. I got sliced brisket, burnt ends and ribs. It was a really nice BBQ joint with a rustic, busy, but open atmosphere. The BBQ is self-service, meaning you order at the counter and grab your food when it’s ready. The portions were generous and the taste was pretty darn good. I’d say overall, it was definitely above average is all aspects.

This slideshow requires JavaScript.

If you’re in the Chicago area, it’s definitely worth the trip.

Big Ed’s BBQ – http://bigedsllc.com/ – Overall: 8.25

We made the drive up to Waukegan to give Big Ed’s BBQ a try, and we’re definitely glad we did! This is a BBQ joint that is run by Ed (a few of his business partners) and his lovely family. You can read about the Big Ed story on their website. The atmosphere is great, with Ed’s son preparing the meat while Ed’s wife rings you up at the register. By the time we got there, they had already sold out of the brisket and burnt ends, so we settled for ribs and rib tips. We thought we were settling, but we were wrong! The ribs and tips were awesome!

This slideshow requires JavaScript.

The service was top notch, the portions were huge, and the meat was great! You have to visit this place. Highly recommended!

Smoque – https://smoquebbq.com/ – Overall: 6.75

Smoque was recommended to us by a friend. He claimed that they had the best BBQ in Chicago.

This slideshow requires JavaScript.

It was OK. They have two locations, and we visited the one in the Old Irving Park Neighborhood. The placed was cramped, the service was good, the portions were sort of small, and the taste was above average. Overall, it was good and worth the trip, but it wasn’t the best in Chicago as we were promised by our friend.

Dallas

We visited three BBQ joints while we were in Dallas, but we only ate at two. This is because we were both too full to eat at one of them, read on…

Pecan Lodge – http://pecanlodge.com/ – Overall: 9

We heard from multiple people that we had to go to Pecan Lodge located in Deep Elum, so we did. Are we ever glad we did! This was the best BBQ we’ve had yet on our three week-old #S2Roadshow, and I even made a friend.

This slideshow requires JavaScript.

I had the sliced brisket, pulled pork, and sausage. John had sliced brisket, pulled pork, and ribs. You should have seen the look on John’s face when he tasted the brisket for the first time! The atmosphere was awesome, with plenty of indoor and outdoor seating. The service was great. I even got the cook to show me his smokers (see pic). The portions were very generous too, but it was the taste that was amazing! I’ve never had better brisket and I may have never had better pulled pork in my life. I’ve had BBQ at 100+  of the best places all over the country, and I’ve never had brisket with the perfect mix of smoke flavor, fat cap, and rub.

Pecan Lodge is an absolute must visit for any BBQ lover. It’s almost worth a special visit to Dallas just to go to this place. The best I’ve had in a very long time, if ever.

P.S. My new friend’s name is Winston, and he’s from Michigan. He and his son travel the country riding roller coasters and trying new BBQ. BTW, he agreed that Pecan Lodge was awesome.

Hard Eight BBQ – https://hardeightbbq.com/ – Overall: INC

We had a happy hour visit with one of our potential partners here. They heard that we loved BBQ, so they arranged for the meeting here.

This was the first time that John or I have ever gone to a BBQ joint and left without eating BBQ. We’d been at Pecan Lodge earlier in the day. Bummer! We’ll be back…

Spring Creek Barbeque – https://springcreekbarbeque.com/ – Overall: 7.25

My tweet sums this one up. Just about everything about this place was OK, but nothing special. What the it special was sharing it with my girl. 🙂

This slideshow requires JavaScript.

BBQ Summary

That was five new BBQ joints to add to our list. The winner this week, hands down, was Pecan Lodge. Pecan Lodge is also the overall #S2Roadshow leader with a score of 9! The current overall standings are listed below.

Overall Standings (at the end of #S2Roadshow Week Three):

  • Pecan Lodge – 9
  • Divine Swine – 8.5
  • Big Ed’s BBQ – 8.25
  • Mission BBQ – 8
  • Blackwood BBQ – 7.5
  • Spring Creek Barbeque – 7.25
  • Redd’s BBQ – 7.25
  • Lucille’s Smokehouse BBQ – 7
  • Smoque – 6.75
  • Sweet Lucy’s Smokehouse – 6.75
  • Red Coal BBQ – 6.75
  • Hambone’s Smokehouse – 6.25
  • Shakedown BBQ – N/A (wasn’t open when it was supposed to be, wasted trip)
  • Hard Eight BBQ – INC (we were too full, need to go back)

Pecan Lodge takes the top stop from Divine Swine and Big Ed’s takes up third.

Next Week’s #S2Roadshow

I’m heading west again, and John’s heading east. I’ll be speaking at the San Diego ISSA chapter event and John will be speaking at BSides – SW Virginia. We’ll be taking meetings before and after our speaking engagements with partners and potential partners too!

Stay tuned for next week’s #S2Roadshow updates! You can follow us on Twitter (@evanfrancen, @HarmonJohn, @StudioSecurity, and the #S2Roadshow hashtag) and on LinkedIn.

See you next week! If you want to collaborate with us, get in touch!

The UNSECURITY Podcast – Episode 49 Show Notes

OK, late again. Show notes before the show recording though, so it’s not terrible.

Lately, Brad and I haven’t seen each other much (or at all). I’ve been on the SecurityStudio Roadshow (#S2Roadshow) and Brad’s been swamped running his part of the FRSecure business (solutions development, sales support, innovation, IR support, and Analyst team support, etc.). Brad’s got a lot of stuff!

FRSecure won another award last week, which is super cool! The company was ranked #22 of the 50 fastest growing companies in the Twin Cities! In addition to being the 22nd fastest growing company, FRSecure was also the highest ranked information security consulting company on the list. This is the 3rd consecutive year that FRSecure has made the Fast 50 list, and I AM SUPER PROUD of this team! HUGE CONGRATULATIONS on a great accomplishment! They are all amazing, top to bottom!

When you get out of the way, incredible people to do amazing things. This is how FRSecure works.

Let’s get to some show notes, shall we?


SHOW NOTES – Episode 49

Date: Monday, October 14th, 2019

Show Topics:

Our topics this week:

  • Quick Catch-up/Roadshow Week #2
  • IT Security, Information Security, Cyber Security, and Physical Security
  • Cybersecurity Maturity Model Certification (or “CMMC”)
  • What it takes to do this job
Opening

[Brad] – Hi UNSECURITY Podcast listeners! It’s me, Brad Nigh. This is episode 49 and the date is October 14th. Evan’s here too. Say “hi” Evan.

[Evan] I oblige. I’m nice.

[Brad] It’s been a couple weeks since you and I have been in studio together. Last week, you and John Harmon hosted episode 48 while I was traveling. This week I’m back!

[Evan] It’s good to have you back man! I’m excited to catch-up and record this episode with you!

[Brad] Holy cow, we’ve got a jam-packed show today. Is this what I get for letting you write the show notes?

[Evan] 😉

[Brad] OK, let’s catch-up quick. Let’s chat about the stuff I’ve been up to, and some of the stuff you’ve been up to.

Quick Catch-up/Roadshow Week #2 Discussion

[Brad] Good things. We receive good questions from our listeners each week, and this past week is no exception. There was one question in particular that I wanted to cover with you. It was nice to here that the listener  has adopted our definition of information security in his policies, but he struggling with the term “IT Security”. He’s not alone I guess, because he also provided a link to a CompTIA article titled “What Is the Difference Between IT Security and Cybersecurity?“.

[Evan] Yeah, this can be confusing for some people. Words really do matter, especially when we struggle with using them correctly.

[Brad] The CompTIA article is sort of confusing, as the author covers different approaches to the definitions of IT Security, Information Security, Cyber Security, and Physical Security.

In one diagram, he arranges information security, cyber security, and physical security inside of IT security. In another diagram he drops IT security altogether and puts cyber security and physical security inside of information security. 

He then poses the question “So, which is best? Who is right?”. His answer leaves us hanging and then he a attempts to address whether terminology even matters. Let’s discuss this and address our listener’s question.

IT Security, Information Security, Cyber Security, and Physical Security Discussion

[Brad] Glad we settled it. Maybe we should make a diagram too. Later.

[Evan] Pretty sure we’ve got one or two of these somewhere.

[Brad] Alright. Another listener emailed us this week and asked us about the new(ish) Cybersecurity Maturity Model Certification (“CMMC”). Should we talk about this quick?

[Evan] I’ll agree because I agree.

Quick Cybersecurity Maturity Model Certification Discussion
  • All companies conducting business with the DoD must be certified, regardless of the use/presence of Controlled Unclassified Information (CUI)
  • Initial implementation of the CMMC will only be within the DoD
  • The intent of the CMMC is to combine various cybersecurity control standards such as NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 27032, AIA NAS9933 and others into one unified standard for cybersecurity.
  • CMMC is intended to serve as a verification mechanism.
  • CMMC will implement multiple levels of cybersecurity. In addition to assessing the maturity of a company’s implementation of cybersecurity controls, the CMMC will also assess the company’s maturity/institutionalization of cybersecurity practices and processes.
  • accredited and independent third party commercial certification organization to request and schedule your CMMC assessment
  • Some of the higher level assessments may be performed by organic DoD assessors within the Services, the Defense Contract Management Agency (DCMA) or the Defense Counterintelligence and Security Agency (DCSA).
  • Your certification level will be made public
  • The government will determine the appropriate tier, contained in sections L & M of future Request for Proposals
  • On October 3rd, the DoD posted the RFI for the CMMC Accreditation Body.
  • The draft CMMC v0.4 is posted.
  • The draft CMMC v0.6 is expected for public review in November, 2019.
  • Finalization of CMMC v1.0 is expected by January, 2020.

[Brad] Lots to say about that. Last week, you mentioned me in a Twitter conversation you were engaged in. The tweet that started the conversation was “Lol lots of people whining about empathy in infosec this morning… what, are you all on the same sensitive mailing list or something?”

[Evan] Yeah. The author had a point and I thought it could be a good conversation about what it takes to be good at what we do from a slightly different perspective.

Discussion about what it takes to do this job

The Twitter thread:

Continues…

Good stuff to discuss, and shoutout to @c0Bchik for engaging in a discussion.

[Brad] Alright, let’s wrap this up with a few news stories.

News

[Brad] I’ve got three news stories to discuss this week:

Closing

[Brad] There you go, episode 49 is a wrap! Like many of you listening, we’ve got another busy week ahead.

Thank you to our loyal listeners! Thank you for your tips and feedback. Send us your wisdom, questions, advice, whatever, by email to unsecurity@protonmail.com. If you’re the social type, socialize with us on Twitter, I’m @BradNigh and Evan’s @evanfrancen. Also, follow SecurityStudio (@studiosecurity) and the #S2Roadshow hashtag.

That’s it! Talk to you all again next week!

#S2Roadshow Recap – Week Two

Orange County, CA and Madison, WI

Mission & Purpose Revisited.

The purpose of the SecurityStudio Roadshow (#S2Roadhow) is to meet people and make partners. We want to meet people*, understand their businesses, and help them grow using simple, fundamental, and compliant solutions (S2Score, S2Org, S2Vendor, and S2Team/S2Me).

John and I

John Harmon and Evan Francen, two guys known for our beards, our love of people, knowledge of security stuff, and our BBQ prowess. We both work for SecurityStudio, and we’re working hard on the mission. Follow us and you’ll get to know us pretty well!

Roadshow Summary

A quick summary of where the #S2Roadshow has taken us so far, and where we’re going next:

  • Week One in Central Pennsylvania exceeded our expectations
  • This last week (Week Two) we visited Orange County, California and Madison, Wisconsin
  • Next week (Week Three), we visit Chicago, Illinois and Dallas, Texas

This post is about Week Two.

Partners – Orange County

My two(ish) days in Southern California were full of really good meetings. Just like last week in PA, I met amazing people with really cool stories. For the sake of brevity, I’ll give you some highlights here.

Startup Consulting Company – Framework Security

My first meeting after landing in Santa Ana was coffee with Jerry Sanchez. Jerry is the Managing Partner and one of the founders of Framework Security, an expert-level information security consulting company. The company was established earlier this year (2019), and growing any company is hard.

Jerry has a strong background in this industry and his company is doing a great job serving customers (you know I would tell you if it weren’t so). His challenges include standing out from the noise, acquiring new customers, providing cost effective solutions (ones that SMB clients can afford), and engaging with customers relationally versus transactionally. I can sympathize with the struggle, especially given experiences in growing FRSecure over the years.

He shared a vision to grow his company, possibly employing as many as 50 people in the next few years. What impressed me the most was his ethics and credibility. He doesn’t just want to grow Framework Security, he wants to do it right.

SecurityStudio can help Jerry grow his business, and we’re excited to work together. Jerry can use our solutions to offer his customers and potential customers a wide variety of options, from free self-assessments to integrated full assessments (with higher margins) leading to long-term vCISO (or fractional CISO) relationships. Partnering with SecurityStudio will benefit him, his company, his customers, and our industry.

Jerry is a good guy, establishing a good company, and he will certainly make a difference!

Contact Information

Franchiser – TeamLogic IT

I had an initial collaboration meeting with the President of TeamLogic IT, Dan Shapero. Honestly, I had no idea who TeamLogic IT was until I started preparing for this meeting. Turns out, TeamLogic, Inc. is a leading managed IT services franchiser and has independently owned and operated TeamLogic IT offices located throughout the United States.

There are ~180 franchises in 38 states, and I had no idea! I feel so sheltered and ignorant of things outside of my little kingdom (Minnesota) sometimes. The #S2Roadshow is a real eye-opener to all sorts of new things!

I know I sound like a broken record, but this was another awesome meeting! Dan has been in the IT industry for many years and he’s willing to share his hard-earned wisdom with others (including me). Our discussion focused on understanding the TeamLogic IT business model and exploring how SecurityStudio could help all his franchisees serve their customers better. Our discussion also focused on other longer term collaboration opportunities between our organizations.

Dan and I came to a quick agreements on how SecurityStudio can help his business, his franchise owners, and their customers. We’ll be doing some cool and exciting things together in the future! It’s sort of funny that I didn’t consider how a franchise network could benefit from SecurityStudio’s platform. After this meeting, it’s an obvious business model. This relationship will be very valuable to all parties (our mission and theirs).

Contact Information

Established Consulting Company #1 – CISOSHARE

Seriously, another great meeting?! Yes, it’s true. Every meeting I’ve had has been great!

This meeting with CISOSHARE’s CEO Mike Gentile was like having a meeting in the mirror. We both see security the same way, he have similar experiences, and we’ve both earned our stripes building security programs for 100s of clients, big and small. When he said something, I could have finished his thought for him, and vice versa. Collaboration is a helluva lot easier between two people who understand information security deeply when they are driven to do things right and can put their egos in check.

We met over lunch at a local BBQ joint. The BBQ wasn’t great, but the conversation was! Thank God.

The discussion was fluid and included topics such as our careers, our past experiences, our businesses, and our philosophies about security, among other things. The parallels between Mike and I were sort of scary. He’s even an author like me. Our lunch ran long, but we got down to business too.

CISOSHARE is Mike’s third company and he’s building a great one. According to their website “CISOSHARE is the leading provider of cyber security services for rapidly growing organizations. Located in Southern California and recently ranked in 2019 as the 3rd fastest-growing private organization in Orange County, our team establishes a culture of continuous learning and teaching in security program development for ourselves, our clients, and our community.

Prior to the roadshow, I hadn’t really heard of CISOSHARE. Another example of being a bit sheltered in Minnesota I guess.

CISOSHARE is company that does things right, at least from what I can tell! They are a great partner candicate. We walked away from our meeting knowing that there are at least two or three ways in which our organizations (CISOSHARE and SecurityStudio) can (and probably will) work together. A CISOSHARE/SecurityStudio partnership will definitely help our mission!

Contact Information

Established Consulting Company #2 – Tevora

One major differentiator between CISOSHARE and Tevora is who they target as customers. CISOSHARE scales down to small companies and up to the Fortune 500. Tevora focuses solely on the Fortune 500. There are many other differences in between these two companies, but their target market is one that sticks out immediately. SecurityStudio can work with both of them, regardless! Everyone benefits from simple, fundamental, and compliant solutions.

I met with Tevora’s CEO, Ray Zadjmool for lunch. He’s built a cool company and he’s done it through innovative approaches to delivering services to clients and employee retention. Ray’s a go-getter who 1) knows what he wants and 2) knows how he wants to get it. His company focuses on helping large companies achieve compliance more than information security or risk management for the sake of information security or risk management.

The way Tevora approaches information security (or “cybersecurity”) isn’t the same way I would philosophically speaking, but it works for them and their clients (obviously). Fortune 500 clients are much different than SMBs, and Tevora is filling a nice niche.

He’s running a very successful company. I respect him and what he’s doing and I think the respect is mutual. We have next steps and we have opportunities to work together. I’m pretty sure we can help each other, and I’m excited to find out!

Tevora is a cool company, run by a cool CEO, located in cool places with cool offices. They’re not just cool, but they’re also very good at what they do. Ray is nice contact and I’m looking forward to building our relationship.

Contact Information

Madison

John Harmon was in Madison, Wisconsin with Steve Krause (SecurityStudio’s Partner Manager). John was speaking at an event hosted by Applied Tech, a great SecurityStudio partner.

This slideshow requires JavaScript.

It was an honor to speak to their customers about information security. I’m not sure how many additional meetings John and Steve may have had while they were in Wisconsin; John and I haven’t been able to catchup yet.

ISACA – Orange County

While john spoke in Madison, and I spoke at the ISACA Orange County Chapter event on Tuesday night. They gave me two hours(ish) to speak and the interaction was amazing! There were a ton of good questions and there were many interactive discussions. This was the first group of ISACA members that I’d spoken to on the roadshow, and they were all awesome!

If you’re interested, you can download my slides here.

Special thanks to Pauline Ang for coordinating everything, and also shoutouts to these folks for making me feel welcomed; Nemi George, Sanjeev Tak (pictured), Bin Du, Yu Chen, and Bill Olah, and Jan Olson. It’s not that the the rest of the group didn’t make me feel welcomed , it’s just that these folks went out of their way during my visit.

It feels good to know that the Orange County security community is in good hands!

BBQ Reviews

A roadshow isn’t a roadshow without a healthy dose of BBQ, or lots of doses of BBQ. John and I promise to eat at all the best BBQ places we can find during our travels and provide you with the lowdown. It’s the toughest part of our job, but you can count on us. We’re in it to win it!

We rate each BBQ joint we try on four characteristics on a scale of 1 (sucks) – 10 (best); Atmosphere, Service, Portions/Value, and Taste. The overall rating is the average of the four.

Last week’s winner was Divine Swine in Manheim, PA. Read on for this week’s winner.

Lucille’s Smokehouse BBQ – Overall: 7
  • Atmosphere – 7
  • Service – 8
  • Portion/Value – 6
  • Taste – 7

Lucille’s is well-known in the Orange County area, and sort of all over the southwest. They have have a bunch of locations throughout California, Nevada, and Arizona. I’d never had Lucille’s before, and I stopped here because it was the closest BBQ joint to the airport (after landing).

I had the house salad.

If you believe that, we should talk. I had the three meat combo; brisket burnt ends, sliced brisket, and baby back ribs. The sliced brisket and baby back ribs were OK, but the brisket burnt ends were amazing! I should have ordered three pounds of those (only). The atmosphere is nothing special, the service was good, and the portion was OK. If you go, get all the brisket burnt ends you can get your hands on.

This slideshow requires JavaScript.

Hambone’s Smokehouse – Overall: 6.25
  • Atmosphere – 5
  • Service – 7
  • Portion/Value – 8
  • Taste – 5

Hambone’s is another BBQ chain. Had lunch at the Huntington Beach location, and nothing was impressive. They drown their meat in sauce, so I ordered mine with the sauce on the side. I get why they drown their meat in sauce.

Service was good and there was plenty to eat. Unfortunately, the meat was bland (even with the sauce added). I didn’t even finish it.

This slideshow requires JavaScript.

Red Coal BBQ – Overall: 6.75
  • Atmosphere – 7
  • Service – 7
  • Portion/Value – 8
  • Taste – 5

John and Steve visited Red Coal BBQ in Eau Claire, Wisconsin during their road trip. The ratings are mine, based on what John told me, and they are subject to change. His exact words were:

Pork Belly pretty decent.  Not much flavor to the meats over all and only one, super sugary sauce available. Coleslaw was the highlight. Thinking this whole WI BBQ venture needs a redo.

We’ll see if John asks me to change these ratings later.

This slideshow requires JavaScript.

BBQ Winner

The winner for this week’s BBQ showdown for the #S2Roadshow was Lucille’s Smokehouse BBQ with a score of 7. We only reviewed three BBQ joints this week, and we need to step up our game next week. Next week we’re on the road for five days in two good food cities; Chicago and Dallas. We’ll step up our game!

Next Week’s #S2Roadshow

John and I are together again all week. First, we take the #S2Roadshow to Chicago for an event with HSBC. We’ll be in Chicago until Wednesday before heading down to Dallas for more meetings and an appearance at the ISC2 Dallas Cyber Aware event at the University of Texas at Dallas. If you’re in Dallas next week, come see us, catch my keynote, and/or grab some BBQ with us!

Stay tuned for next week’s #S2Roadshow updates! You can follow us on Twitter (@evanfrancen, @HarmonJohn, @StudioSecurity, and the #S2Roadshow hashtag) and on LinkedIn.

See you next week! If you want to collaborate with us, get in touch!

The UNSECURITY Podcast – Episode 48 Show Notes

OK. Late again. I’ve been busy, and so has Brad.

Most of my highlights from last week are written/posted in #S2Roashow Recap – Week One. If you haven’t read it yet, you should. 😉 There’s a recap of the BSides Harrisburg Conference (their first one ever), a recap of the Cybersecurity Awareness Summit, and our reviews of some of the best BBQ in Central PA. You need to check out who the winner was!

As far as Brad is concerned, I haven’t seen him much lately. I’ve been on the road, and I think he’s been on the road too. Actually, he’s on the road during this week’s show! It’s a very busy time of year for all of us at SecurityStudio (me) and FRSecure (Brad).

Let’s get to it, eh?


SHOW NOTES – Episode 48

Date: Monday, October 7th, 2019

Show Topics:

Our topics this week:

  • Roadshow Recap – Week One
  • More vCISO Talk
  • This Week & The News

[Evan] – Hey oh. It’s me, Evan Francen. This is episode 48 of the UNSECURITY Podcast and the date is Monday, October 7th, 2019. Brad’s on a plane somewhere maybe, or maybe he’s in a hotel somewhere. I don’t know. All, I know if that he couldn’t make it because he’s really, really busy. In Brad’s place this morning is my good friend, John Harmon. Care to say “hi” John?

[John] John is a leader and has the liberty to say what he wants. 😉

[Evan] So, this was sort of last minute. I texted Brad on Friday night to ask if he wanted me to write the show notes. He responded that he’s going to be in San Diego, doing a board of directors presentation for a customer. Planning isn’t my strong suit, so I went to my bullpen. There I find my ace reliever, John Harmon. Glad you’re here John!

[John] John’s probably glad to be here, but it’s early. He might not be awake yet.

[Evan] Last week was week one of the SecurityStudio Roadshow (#S2Roadshow). You and I were in Pennsylvania, spreading some security love/truth. I wrote about the week on my blog, but who reads anymore? Let’s talk about it here. Cool?

[John] You’ll love John. He’s agreeable and great at rolling with it.

Roadshow Recap – Week One Discussion

Refer to https://evanfrancen.com/the-securitystudio-roadshow-week1/ for more information.

[Evan] It was a fun week, a productive week, and a very successful week. One of the most popular topics on the show is the topic of vCISO, or virtual Chief Information Security Officer. We receive emails every week from listeners asking good questions. This past week was no exception.

The questions were:

  1. Can you help me with some vCISO materials? 
  2. Like a framework of where to start?

This is a good opportunity to discuss this because we have a guest too. John has hired numerous vCISOs over the years, so his perspective will be great!

Maybe we’ll mention the book that Brad and I are starting…

More vCISO Talk

[Evan] Let’s talk briefly about where the SecurityStudio Roadshow takes us this week, then get to some news.

This Week & The News

[Evan] Where are you going to be this week John?

[John] John will tell us about his week (and hopefully where he might grab some BBQ). He might ask me about mine. We’ll see.

News

Only three news articles to talk about this week, even though there are 1000s to choose from:

Closing

[Evan] There you have it. We’ve got another busy week ahead! Fixing a broken industry is a helluva lot of work. I’ll see if Brad is up for talking about the Cybersecurity Maturity Model Certification (CMMC) next week. Interesting stuff happening there.

Thank you to our loyal listeners! Thank you for your tips and feedback. Send us your wisdom, questions, advice, whatever, by email  at unsecurity@protonmail.com. If you’re the social type, socialize with us on Twitter, I’m @evanfrancen and John’s @HarmonJohn. Also, follow SecurityStudio (@studiosecurity) and the #S2Roadshow hashtag.

That’s it! Talk to you all again next week!