Name: Behind the Book: Threat Modeling Gameplay with EoP
Start: 2025-06-10T18:00:00Z
End: 2025-06-10T18:00:51.000Z
Location: BrightTALK
Rating: 5

Zer0 Trusts Given provides webinars and content with unfiltered cybersecurity insights and knowledge delivered by candid subject matter experts. These events feature real talk and ideas that build real knowledge, skills and confidence. Connect. Learn. Lead.

In 2001, Eric O'Neill helped to capture the most notorious spy in the U.S. history, Robert Phillip Hassen. This story is covered in his book Grey Day and the spy thrilled film Breach.

In this episode of Behind the Book, Ben Rothke sits down with O'Neill to discuss his new book Spies, Lies, and Cybersecurity - Cybersecurity Tactics to Outsmart Hackers and Disarm Scammers, as well as revisiting his experience with the Hanssen investigation and capture.

Behind the Book with Eric O'Neill, Author of Spies, Lies and Cybercrime

Ed Rothke sits down with Ed Adams, author of See Yourself in Cyber.

Behind the Book with Ed Adams, Author of See Yourself in Cyber

A discussion with Alex East about his two books "A Parent's Guide to Online Safety" and "Cybersecurity for Seniors Made Easy".

Behind the Book with Alex East, Author "A Parent's Guide to Online Safety"

Ben Rothke hosts Bruce Schneier who will discuss his upcoming book Rewiring Democracy
How AI Will Transform Our Politics, Government, and Citizenship. This volume is an informative and wide-ranging exploration of how AI will alter every facet of democracy, and how to harness the technology to distribute rather than concentrate power. It cuts through the AI hype and examines the myriad ways that AI is transforming every aspect of democracy - for both good and ill.

Behind the Book with Bruce Schneier - Rewiring Democracy: How AI Will Transform Our Politics, Government and Citizenship

Losing people is more dangerous than losing to AI—because when talent walks out the door, operations collapse and risk skyrockets. Managers who fail to run effective workforce programs risk burnout, turnover, and dangerous inefficiencies that no technology can fix. This session exposes the hidden costs of poor workforce management and gives leaders a clear playbook for protecting their teams, retaining top talent, and preventing operational breakdowns before it’s too late.

Great managers don’t just oversee tasks—they build programs that protect people and performance. Workforce risks like turnover, burnout, and inefficiency can quietly erode an organization’s security and success. In this session, we’ll explore how managers can design and run effective workforce programs that retain talent, reduce risk, and create cultures where teams thrive. Leaders will leave with actionable strategies to safeguard both their people and their operations in an unpredictable future.

The managers who thrive are those who build workforce programs that retain talent, reduce risk, and keep operations running strong.

Building Workforce Programs that Prevent Talent Loss & Inefficiencies

Ben is joined by the authors of The Cybersecurity Canon: Measuring and Managing Information Risk: A FAIR Approach, Jack Freund and Jack Jones to discuss their book. The book uses  the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk.

Behind the Book - Jack Freund and Jack Jones

Arizona Congressman David Schweikert recently introduced the Scam Farms Marque and Reprisal Authorization Act of 2025. Should it be signed into law, it would give the US President much leeway in issuing letters of marque to create “internet privateers”.

Last used in the war of 1812, letters of marque gave privateers the right to ware war against British vessels. Rep. Schweikert proposes that issuing these letters and reprisals should be the way to address the cyberthreats posed by foreign countries.

In this webcast, Brandon Dunlap and the members of the CISO Law Firm will discuss what these new letters of marque would enable and how they would impact organizations both public and private.

Cyber Privateers – Bringing Back the Letters of Marque

Ben Rothke sits down with Cris Thomas (aka Space Rogue) to discuss his book Space Rogue: How the Hackers Known As L0pht Changed the World. 
In May 1998, the US Congress invited the seven members of the L0pht to testify on the state of government computer security. Two years later, that same group rode the Dot-com bubble to create the preeminent security consultancy the industry has ever known, @stake. Along the way, they stood up against tech giants like Microsoft, Oracle, Novell and others to expose weaknesses in those companies' premiere products. Despite the L0pht's technical prowess, the group could not keep what they had built together as money and internal politics turned friend against friend.

Behind the Book with Cris Thomas (Space Rogue) - Space Rogue: How the Hackers Known As L0pht Changed the World

Ben Rothke sits down with his co-authors to discuss their book The Definitive Guide to PCI DSS Version 4: Documentation, Compliance, and Management. This go-to reference on how to achieve PCI compliance contains  more than 400 PCI requirements, the updated PCI Data Security Standard (PCI DSS) v4.0 does not detail the specific documentation that a PCI auditor―known as a Qualified Security Assessor (QSA)―needs to know. This book is the first reference to detail the specific documentation needed for every PCI requirement. The authors provide real-world examples of complying with the 12 main PCI requirements and clarify many of the gray areas within the PCI DSS.

Behind the Book - The Definitive Guide to PCI DSS Version 4: Documentation, Compliance and Management

Our panel dives into topics such as the Tea App breach, an AI deleting a production database during a code freeze, Brazil's demand for removal of persona chatbots that eroticize children and the AI Grok chats which were shared and then indexed by search engines. 

These topics all point towards how in AI, privacy and security, nothing can be left to trust. Choices made in terms of defaults, guardrails and governance help to decide if users and data are protected or exposed. Every day, the stakes rise.

Rogue Agents and Open Secrets

Artificial intelligence is already replacing core management functions—tracking performance, allocating resources, even guiding decisions. If your value lies only in oversight, coordination, or reporting, AI can do it faster and cheaper. Managers who fail to adapt will be outpaced and outplaced. The future belongs to leaders who master the human edge: inspiring teams, resolving conflict, and making bold, strategic choices. Ignore this reality, and your management job won’t just be at risk—it will be obsolete.

Adapt or Be Automated - The Skills You Need to Survive AI

Differential privacy (DP) is an increasingly popular, though controversial, approach to protecting personal data. DP protects confidential data by introducing carefully calibrated random numbers, called statistical noise, when the data is used. Google, Apple, and Microsoft have all integrated the technology into their software, and the US Census Bureau used DP to protect data collected in the 2020 census. In this book, Simson Garfinkel presents the underlying ideas of DP, and helps explain why DP is needed in today's information-rich environment, why it was used as the privacy protection mechanism for the 2020 census, and why it is so controversial in some communities.

Behind the Book: Differential Privacy - Simson Garfinkle, Author

As organizations increasingly rely on third-party vendors, the downstream use of data—particularly in AI applications—has become a critical area for privacy, cybersecurity and compliance professionals. Areas to be discussed include reviewing vendor contracts to address legal, operational and ethical risks while aligning with global regulations.

Vendor Contract Reviews: Managing Privacy, Cybersecurity and AI Risks

From CISO of the Year to Most Innovative Information Security Team, the industry is replete with awards. But many of these are the best awards money can buy. In fact, some award programs charge you to submit or nominate. It’s time the industry says no to paid entries into Who’s Who directories and shallow awards. Join a panel of industry veterans to discuss this interesting topic.

Information Security Industry Awards and Pay-for-Play PR: Just Say No?

Ben Rothke sits down with Gene Spafford and Josiah Dykstra to discuss their book Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us

Behind the Book: Gene Spafford and Josiah Dykstra

Did you know that Israel has more security companies based there than the UK, Canada, India, Germany and France combined? Join Ben Rothke as he sits down with Alon Arvatz as they discuss Alon's latest book "The Battle for Your Computer: Israel and the Growth of the Global Cybersecurity Industry". They will discuss the evolution of the book, the history of Israeli cybersecurity firms like Check Point, the strength of the connection between the Israeli military and their high-tech industry and how the country is an incubator for Cybersecurity firms.

Behind the Book - Alon Arvatz, "The Battle for Your Computer: Israel & the Growth of the Global Cybersecurity Industry"

Ben Rothke sits down with Rick Howard to discuss his book Cybersecurity First Principles

Behind the Book - Cybersecurity First Principles with Rick Howard

Information governance professionals (security, privacy, audit) have always faced a heady stew of challenges from changing enterprise needs and evolving threat vectors to new developments in IT within a continually competitive marketplace. Yet 2025 feels especially different. These challenges are heightened by a volatile geopolitical and trade environment and the inherent complexity of AI (with Quantum on the horizon)  What does this pose for the data privacy rights and expectations of the consumers that most enterprises serve? How should practitioners adapt to these market and operational realities in order to achieve stronger data protections? Join us for a revealing discussion that lays out the landscape for the years ahead.

The New Landscape for Data Privacy

In this episode, Ben sits down with Brett Crawley, the author of Threat Modeling Gameplay with EoP: A reference manual for spotting threats in software architecture. 

The book serves as both a reference and support material for security professionals and privacy engineers, aiding in facilitation or participation in threat modeling sessions. It is also a valuable resource for software engineers, architects, and product managers, providing concrete examples of threats to enhance threat modeling and develop more secure software designs. Furthermore, it is suitable for students and engineers aspiring to pursue a career in application security. Familiarity with general IT concepts and business processes is expected.

Behind the Book: Threat Modeling Gameplay with EoP

Cyber Security

Information Security

CISSP

Threat Modeling

SDLC

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful learning and development insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge in the field.

Learning and Development

Human resources is intrinsically linked to business success and requires a thoughtful balance of a variety of complex issues. The human resources community on BrightTALK is made up of thousands of professionals in human resources exchanging human resources best practices and advice. Watch hundreds of on-demand webinars for immediate information or participate in upcoming live webinars and have your questions answered by respected HR thought leaders.

Human Resources

Leadership styles are continually evolving to incorporate new ways of thinking about employee satisfaction, motivation and performance. Find webinars and videos on the strategies, techniques and qualities that make an effective leader. By participating in this community you will gain insight into current leadership theories and how to optimize employee performance.

Leadership

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Behind the Book: Threat Modeling Gameplay with EoP

Presented by

About this talk

Zero Trusts Given