The ITSM Practice: Elevating ITSM and IT Security Knowledge20 Feb 2024

What does 'Security by Design' really mean?

In this enlightening episode of "The ITSM Practice," host Luigi Ferri unpacks the concept of 'Security by Design' and its fundamental principles. Luigi explains that 'Security by Design' is an approach where security is embedded as a foundational element from the beginning of the IT system development and management process, rather than being an afterthought. The episode dives into the core principles that underpin this approach, including Defense in Depth, Secure by Default, Least Privilege, Separation of Duties, Minimizing Attack Surface, Complete Mediation, Open Design, Isolated Compartments, Evidence Production, and Application Coding Best Practices. Luigi emphasizes that integrating these principles into ITSM is not just a technical endeavor but also involves fostering a culture where IT Security is prioritized at every stage of Service Design and Implementation. The discussion culminates with the importance of adopting a mindset where IT Security is an integral part of every IT Process and decision-making activity, highlighting its role in building a secure, resilient foundation for IT Services that are aligned with business goals and capable of countering evolving digital threats. Tune in for an in-depth exploration of 'Security by Design' and its significance in today's digital landscape, and join Luigi on LinkedIn for further insights into adapting IT Practices for enhanced IT Security.

LinkedIn: https://www.linkedin.com/in/theitsmpractice/

Website: http://www.theitsmpractice.com

Credits:

Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(165)

Should Your CMDB Know Your Business Risk?

A critical vulnerability is not automatically a critical business risk. If your CMDB only tells you which server is affected but not the customer, service, contract, SLA, or revenue behind it, you are...

22 Sep 19min

Is Your Security Stack Too Big?

Is your security stack actually protecting you, or are you just paying for too many tools? This episode looks at security tool sprawl, unused capabilities, overlapping products, skills gaps and vendor...

15 Sep 13min

24/7 IT Support: Why Coverage Is Not Capability

24/7 support does not automatically mean 24/7 capability. In this episode of The ITSM Practice Podcast, Luigi Ferri explores how MSPs can design profitable 24/7 IT support using follow-the-sun models,...

8 Sep 11min

The Last Human-Only Leadership Generation: How AI Is Transforming the Workforce

AI is no longer just a technology tool, it is becoming part of the workforce. In this episode, Luigi Ferri explores why AI represents a workforce transformation rather than a technology project, and h...

1 Sep 11min

ENISA Cyber Exercises: Why Testing Cybersecurity Isn't Enough

Are cyber exercises actually improving your cybersecurity resilience, or just satisfying compliance requirements? In this episode, Luigi Ferri explores ENISA's cyber exercise methodology, the gap betw...

25 Aug 8min

Projects Deliver Outputs. Services Deliver Outcomes.

Projects Deliver Outputs, Services Deliver Outcomes: The Ownership Crisis Nobody Discusses. Discover why the biggest risk in any IT project begins after go-live. In this episode, Luigi Ferri explores ...

18 Aug 11min

MSPs: Your AI Contracts Are Obsolete

AI is transforming Managed Service Providers (MSPs) from managing technology to managing AI behavior. This episode explains why traditional service design, governance, contracts, and risk models are n...

11 Aug 16min

DARE25: Why Defense Isn't Enough

Discover why traditional cybersecurity defense is no longer enough in the AI era. Luigi Ferri explores the DARE25 framework, dynamic risk management, governance, Purple Teaming, accountability, and ad...

4 Aug 9min