ESW #313 - Pablo Zurro, Travis Howerton

<p>Fortra's Core Security has conducted it's fourth annual survey of cybersecurity professionals on the usage and perception of pen testing. The data collected provides visibility into the full spectrum of pen testing’s role, helping to determine how these services, tools, and skills must evolve.</p> <p> </p> <p>Segment Resources:</p> <p> <a href= "https://www.fortra.com/resources/guides/2023-pen-testing-report">https://www.fortra.com/resources/guides/2023-pen-testing-report</a></p> <p> </p> <p>This segment is sponsored by Fortra's Core Security. Visit <a href= "https://securityweekly.com/fortracoresecurity">https://securityweekly.com/fortracoresecurity</a> to learn more about them!</p> <p> </p> <p>Compliance with cyber security frameworks such as NIST, PCI, HIPAA, etc. have largely been driven by paper-based processes in Word and Excel. With the rise of cloud computing, containers, and ephemeral systems, paper-based processes can no longer keep up with the speed of business and compliance has become the new bottleneck to progress for highly regulated industries such as government, finance, and energy sector. This session will cover how RegScale is leading a RegOps movement to bring the principles of DevOps to compliance with the world’s first real-time GRC system that enables compliance as code via NIST OSCAL. RegOps seeks to shift compliance left to make it real-time, continuous, and complete so that paperwork is always up to date, self-updating, and takes less manual resources to manage.</p> <p> Segment Resources:</p> <p>Website – <a href= "https://www.regscale.com">https://www.regscale.com</a></p> <p>Documentation/Learn More – <a href= "https://regscale.readme.io">https://regscale.readme.io</a></p> <p> </p> <p>In this news segment, we discuss the art of branding/naming security companies, some new cars just out of stealth, 5 startups just out of Y Combinator, and Cybereason's $100M round from Softbank. We also talk new features (Semgrep's new GPT-4 use case), new newsletters, and new reports. We break down Ne