Latest / Brian Thomas / Tech Friday w/ Dave Hatter - Sponsored by Intrust IT - 10/2/2026

Transcript

Tech Friday w/ Dave Hatter - Sponsored by Intrust IT - 10/2/2026 · Brian Thomas

• 0:00
  Speaker 1: The Talk Station. 631 on a Friday. It's that time
• 0:04
  Speaker 1: of week. IntrustIT.com sponsors Tech Friday with Dave Hatter. Dave's company,
• 0:08
  Speaker 1: although it's employee-owned, and they are there for your business
• 0:12
  Speaker 1: computer needs. Business Courier says they are the best in
• 0:14
  Speaker 1: the business, so get in trust with IntrustIT. IntrustIT.com to
• 0:17
  Speaker 1: do that. Find Dave Hatter on LinkedIn where you can
• 0:20
  Speaker 1: get all of his resource materials. And also throughout the week,
• 0:22
  Speaker 1: it's worth a LinkedIn check or search for Dave Hatter.
• 0:26
  Speaker 1: You'll find him. Dave Hatter, welcome, man. I appreciate what
• 0:29
  Speaker 1: you do each and every week here on The Morning Show.
• 0:31
  Speaker 2: Always my pleasure, Brian. Happy to be here.
• 0:33
  Speaker 1: Thank you. And you came to peddle iPhones today.
• 0:35
  Speaker 2: I guess. Well, not necessarily.
• 0:39
  Speaker 1: Well, to speak my curiosity, I don't have an iPhone,
• 0:42
  Speaker 1: but it makes me feel like I want one because
• 0:44
  Speaker 1: I guess you can, well, make a setting to stop spam.
• 0:48
  Speaker 2: You might be able to do this on an Android.
• 0:50
  Speaker 2: I haven't had an Android for a long time because
• 0:53
  Speaker 2: they come from Google. So I don't use them. And
• 0:58
  Speaker 2: generally speaking, Brian, Apple tends to be a lot more
• 1:00
  Speaker 2: privacy friendly than most of these other tech companies. But
• 1:03
  Speaker 2: all of that said, regardless of what type of phone
• 1:06
  Speaker 2: you have, there's really three things you can do. First off,
• 1:09
  Speaker 2: I suggest people add themselves to the Do Not Call registry. Now,
• 1:12
  Speaker 2: that's not going to stop Bad guys. No, it doesn't.
• 1:15
  Speaker 2: But it will stop legitimate companies, right? Go to the
• 1:17
  Speaker 2: FTC's Do Not Call Registry. Put your phone number on it.
• 1:20
  Speaker 2: That will stop legitimate sales calls, right? Legitimate companies will
• 1:24
  Speaker 2: adhere to that. Illegitimate companies will not. If you go
• 1:27
  Speaker 2: to the FTC's website, by the way, they've got a
• 1:30
  Speaker 2: lot of good resources out there on this. And they
• 1:32
  Speaker 2: focus in on three things to try to stop the
• 1:34
  Speaker 2: bad guys, the bad spam, the people that aren't going
• 1:36
  Speaker 2: to adhere to the Don't Call Registry. First thing you
• 1:40
  Speaker 2: can do is start with your cellular carrier. All the
• 1:43
  Speaker 2: big players all have various things you can do. Now,
• 1:47
  Speaker 2: they call them different things. They work a little differently.
• 1:50
  Speaker 2: Some are free. Some you might have to pay for. But,
• 1:52
  Speaker 2: you know, like I have an Apple phone on Verizon,
• 1:54
  Speaker 2: so I can go to Verizon and I can see
• 1:56
  Speaker 2: what options I have to try to get Verizon to
• 2:00
  Speaker 2: stop these kinds of spam calls and texts. And I'll
• 2:05
  Speaker 2: come back to why this is all happening, but start
• 2:08
  Speaker 2: with your carrier and then On your phone, see what
• 2:11
  Speaker 2: sort of options you might have on the phone itself
• 2:14
  Speaker 2: to try to stop this. So Apple does provide some
• 2:17
  Speaker 2: pretty good capabilities. I've been using this for a long time.
• 2:20
  Speaker 2: Is it foolproof? No. But it does, at least for me,
• 2:24
  Speaker 2: significantly reduce the amount of spammy stuff that I get.
• 2:30
  Speaker 2: On an Apple phone, go into the settings, go to apps,
• 2:33
  Speaker 2: go to phone, right? Settings, apps, phone. And then from there,
• 2:37
  Speaker 2: you hit the spam switch, turn that on, and then
• 2:40
  Speaker 2: you have some options about, well, what do you want
• 2:42
  Speaker 2: to do? And basically, you can say screen unknown callers,
• 2:46
  Speaker 2: and then there are three options. Don't ever screen unknown callers,
• 2:49
  Speaker 2: which is by generally the default setting, and you don't
• 2:52
  Speaker 2: want that. Ask for a reason for calling. So it
• 2:55
  Speaker 2: will literally tell your caller, hey, why are you calling
• 2:58
  Speaker 2: this person? They have to essentially leave a message. Or
• 3:01
  Speaker 2: just silence those calls, and they just go off into oblivion.
• 3:05
  Speaker 2: It'll show up in your recent calls list. Now, if
• 3:06
  Speaker 2: you turn on silence, and that's how I have mine,
• 3:09
  Speaker 2: you do have to check that occasionally because you'll get
• 3:11
  Speaker 2: legitimate calls from people that aren't in your contacts list,
• 3:14
  Speaker 2: and you'll never know if you don't check it. And
• 3:17
  Speaker 2: then the third thing you could do, Brian, is buy
• 3:19
  Speaker 2: an app. There are apps out there like RoboKiller. These
• 3:22
  Speaker 2: things cost money. So this is the typical defense in
• 3:25
  Speaker 2: depth I talk about with you all the time. One
• 3:27
  Speaker 2: layer is the carrier. One layer is whatever the phone
• 3:30
  Speaker 2: itself may or may not be capable of. And then
• 3:33
  Speaker 2: the third layer would be you buying an app at
• 3:35
  Speaker 2: your own expense, possibly a free app. But remember, if
• 3:38
  Speaker 2: it's free, you're paying with money, not data, that altogether
• 3:41
  Speaker 2: will try to reduce the amount of spam. And the
• 3:44
  Speaker 2: reason this happens is because the phone system is old.
• 3:47
  Speaker 2: And as a result, there's no way to authenticate a
• 3:49
  Speaker 2: phone number. It is trivially easy. Any one of your
• 3:52
  Speaker 2: listeners within 10 minutes can go find a website that
• 3:55
  Speaker 2: will allow them to type in a phone number and
• 3:57
  Speaker 2: make a call from that number or send a text
• 3:59
  Speaker 2: from that number. You cannot. You cannot look at the
• 4:03
  Speaker 2: phone number on your screen and know that it's legitimate.
• 4:06
  Speaker 2: And of course, the bad guys will make calls that
• 4:08
  Speaker 2: appear to be coming from local area codes. So my
• 4:11
  Speaker 2: general advice is never answer a call from anyone from
• 4:14
  Speaker 2: any number that you don't recognize.
• 4:15
  Speaker 1: Right.
• 4:16
  Speaker 2: And if you have an Apple phone, turn these settings on.
• 4:19
  Speaker 2: Even if you don't have an Apple phone, see what
• 4:21
  Speaker 2: you can do on an Android, check with your carrier,
• 4:23
  Speaker 2: consider an app like RoboKiller, and you can significantly reduce
• 4:28
  Speaker 2: the amount of this garbage.
• 4:29
  Speaker 1: And you can reduce the amount of political ads in
• 4:31
  Speaker 1: your mailbox by just going out and voting, because once
• 4:34
  Speaker 1: you vote, they stop targeting you. So there's another fun
• 4:37
  Speaker 1: fact to get people to get out to vote beginning
• 4:38
  Speaker 1: next Tuesday. Dave Hatter, don't go away. We've got more
• 4:40
  Speaker 1: to talk about, including this huge drive station. It's 640-65-KRCD
• 4:48
  Speaker 1: Talk Station, intrustit.com. Dave Hatter and the crew help you
• 4:52
  Speaker 1: out with all your business needs and, of course, sponsoring
• 4:54
  Speaker 1: the segment, Dave Hatter does. And, you know, while you
• 4:56
  Speaker 1: were talking, the last thing I went over to the
• 4:58
  Speaker 1: Do Not Call Registry, I completed the whole process in
• 5:01
  Speaker 1: less than a minute, Dave. It's really simple to do.
• 5:03
  Speaker 1: I thought I had already put my phone on that registry,
• 5:05
  Speaker 1: so I don't know if it'll tell you you've already
• 5:08
  Speaker 1: registered if you try to do it again, but either
• 5:11
  Speaker 1: my recollection was failed or you can just go ahead
• 5:13
  Speaker 1: and try again if you think you're not on there.
• 5:15
  Speaker 2: It's easy to do. Exactly. It is easy to do.
• 5:18
  Speaker 2: It takes a few seconds, as you see. And again,
• 5:20
  Speaker 2: there are some good tips for this sort of thing
• 5:23
  Speaker 2: from the FTC at their website. Excellent.
• 5:25
  Speaker 1: Moving on, we heard about this before. I think you
• 5:28
  Speaker 1: brought up one of the prior interest IT segments here,
• 5:31
  Speaker 1: that huge driver's license data breach. All of the information
• 5:37
  Speaker 1: and high-res photographs were on this database, in spite of
• 5:40
  Speaker 1: the fact I don't think they were supposed to be,
• 5:41
  Speaker 1: but those were all stolen, 153 million of them. Dave,
• 5:45
  Speaker 1: what does this mean for us?
• 5:46
  Speaker 2: Yeah, this is bad. So one of the reasons we
• 5:50
  Speaker 2: ran out of time in the last segment that you
• 5:51
  Speaker 2: get all these spam calls and you get all the
• 5:53
  Speaker 2: spam emails and the constant barrage of cybercrime is because
• 5:57
  Speaker 2: your data is everywhere now. Thanks to our extremely interconnected world,
• 6:02
  Speaker 2: these so-called smart devices that everyone has that's sucking up
• 6:05
  Speaker 2: all kinds of information, your data is everywhere, Brian. So
• 6:08
  Speaker 2: it makes it easy for bad guys to know how
• 6:10
  Speaker 2: to reach you, to send you these spam calls and
• 6:13
  Speaker 2: texts and emails and so forth. But this is much
• 6:16
  Speaker 2: worse than just the standard, oh, hey, you know, they've
• 6:19
  Speaker 2: got my email address. And this is one of the
• 6:22
  Speaker 2: reasons why you may recall, I'm pretty sure we talked
• 6:25
  Speaker 2: about this around two years ago. It came out that
• 6:28
  Speaker 2: various large chains were now wanting to scan your driver's
• 6:33
  Speaker 2: license to buy liquor, right?
• 6:35
  Speaker 1: Kroger was doing that. They quit doing it because people
• 6:38
  Speaker 1: were all pissed off about it, Dave.
• 6:40
  Speaker 2: Well, I told people at the time, there is no
• 6:42
  Speaker 2: way I'm going to let some store scan my driver's
• 6:45
  Speaker 2: license to buy a beer or something. I'll go to
• 6:49
  Speaker 2: a different place because I don't know what's happening with
• 6:54
  Speaker 2: that data once it goes through that scanner. First off,
• 6:59
  Speaker 2: anyone can look at my ID and look at me
• 7:01
  Speaker 2: and see that clearly I'm old enough to buy alcohol.
• 7:06
  Speaker 2: there's literally no legitimate reason, in my opinion, to need
• 7:11
  Speaker 2: to scan your driver's license. And your driver's license contains
• 7:15
  Speaker 2: very sensitive information. You can't just get a new driver's license.
• 7:18
  Speaker 2: I mean, you can get a new driver's license, but
• 7:21
  Speaker 2: it's not like you just get one online. You've got
• 7:23
  Speaker 2: to go through a whole process. There's a number on there.
• 7:26
  Speaker 2: That number's tied to things. They get your height. They
• 7:28
  Speaker 2: get your weight. They get your eye color. They get
• 7:30
  Speaker 2: other sensitive information that can't just be easily replaced. Like,
• 7:33
  Speaker 2: I can't get a new height. You can't get a
• 7:35
  Speaker 2: new eye color.
• 7:36
  Speaker 1: I keep waiting. I keep waiting to grow an extra
• 7:38
  Speaker 1: couple inches so I can be six feet tall.
• 7:41
  Speaker 2: Yeah, I can't I can't get a new face. I
• 7:43
  Speaker 2: wish I could. I'd order, you know, or Mel Gibson today. Right.
• 7:47
  Speaker 2: I can't I can't do that. So when when you're
• 7:50
  Speaker 2: handing over your driver's license willy nilly. Now, I get
• 7:53
  Speaker 2: there are some instances where you must you're legally required
• 7:56
  Speaker 2: to provide identity. I get that. OK, but for purchasing
• 8:00
  Speaker 2: something in a store, absolutely insane. This article points out,
• 8:04
  Speaker 2: I mean, this was originally broken by Krebs on Security,
• 8:06
  Speaker 2: which is a well-known website for this thing. He found
• 8:09
  Speaker 2: himself in this breach and believes that it was him
• 8:12
  Speaker 2: renting a car. I think he said Hertz. I don't
• 8:15
  Speaker 2: remember for sure. And it's not in this particular story
• 8:17
  Speaker 2: we're talking about today. And again, I'll post these links.
• 8:20
  Speaker 2: But we built a society where your data is being
• 8:25
  Speaker 2: collected at all the time, all the time. Your identity
• 8:28
  Speaker 2: is needed for things that, in my opinion, aren't really necessary.
• 8:32
  Speaker 2: And as a result, now it's becoming a vast and
• 8:35
  Speaker 2: valuable target for the bad guys. Because if I can
• 8:37
  Speaker 2: steal this information, I can use it to impersonate you
• 8:41
  Speaker 2: to conduct fraud in your name. Or maybe even worse,
• 8:44
  Speaker 2: I can use it to convince you that I am
• 8:47
  Speaker 2: some legitimate authority, some legitimate place you've done business with,
• 8:52
  Speaker 2: and fool you into allowing me to hack you, steal
• 8:55
  Speaker 2: your money or whatever. Because I have information it seems
• 8:58
  Speaker 2: that only the legitimate agency would have. So in this case,
• 9:02
  Speaker 2: you know, it's 153 million driver's licenses. I know the
• 9:05
  Speaker 2: FBI is looking into this. The finger so far has
• 9:08
  Speaker 2: been pointed at ID scan, a third party verification service.
• 9:12
  Speaker 2: So you run your driver's license through that scanner. The
• 9:15
  Speaker 2: data gets sent to them and they say, yeah, this
• 9:18
  Speaker 2: is that legitimate person. And again, going back to my
• 9:21
  Speaker 2: concern about letting someone just scan my driver's license, I
• 9:24
  Speaker 2: don't know. How long they store that, I don't know
• 9:27
  Speaker 2: where it goes. I don't know what they do with it.
• 9:29
  Speaker 2: I don't know what their terms of service say. So yeah,
• 9:31
  Speaker 2: right off the bat, I said, there is no way
• 9:34
  Speaker 2: I will do this. Again, if I'm required by law
• 9:36
  Speaker 2: to do it, so be it. But I'm not, and
• 9:38
  Speaker 2: I encourage every one of your listeners, do not give
• 9:41
  Speaker 2: your driver's license to just some random person to scan
• 9:44
  Speaker 2: or passport or anything like that. Because once it's out there,
• 9:48
  Speaker 2: and now 153 million are, they say roughly 63%. of
• 9:53
  Speaker 2: every single driver's license in the United States, it's out there.
• 9:56
  Speaker 2: It is. What are you going to do?
• 9:58
  Speaker 1: Dave, I, I, have a quick question for you. Got
• 10:01
  Speaker 1: to know this. Is there a database that we can
• 10:03
  Speaker 1: scan to find out whether ours is part of this breach?
• 10:07
  Speaker 2: As far as I know, I have not been able
• 10:09
  Speaker 2: to find one yet. I looked into that and so
• 10:12
  Speaker 2: far I have not seen that. That would be very helpful.
• 10:15
  Speaker 2: Kind of like the Have I Been Pwned service by
• 10:17
  Speaker 2: Troy Hunt, where you can see if you're Using your
• 10:20
  Speaker 2: email address, you can see if your information is on
• 10:22
  Speaker 2: the dark web. If and when I find this, I'll
• 10:25
  Speaker 2: definitely let you know. We can talk about it here
• 10:27
  Speaker 2: again because it would be helpful to know. The last
• 10:29
  Speaker 2: point for our time, Brian, because of this, and because
• 10:32
  Speaker 2: as far as I know, there currently is no way
• 10:34
  Speaker 2: to know if your driver's license is in there. Every
• 10:38
  Speaker 2: single one listening to us today should go, okay, I'm
• 10:41
  Speaker 2: not ever going to hand my driver's license out again
• 10:43
  Speaker 2: unless I'm required to by law. And then secondarily, up
• 10:47
  Speaker 2: your skepticism. Be aware that this sort of data is everywhere.
• 10:51
  Speaker 2: And if your driver's license is out there, you know,
• 10:53
  Speaker 2: you could get a call from someone claiming to be
• 10:55
  Speaker 2: the Hamilton County Sheriff or the Kenton County Sheriff or
• 10:58
  Speaker 2: whatever and claiming, you know, you've done something. They've got
• 11:01
  Speaker 2: this information. They're reading it off to you. They've gone
• 11:04
  Speaker 2: to the Hamilton County Sheriff's website and looked up Deputy
• 11:07
  Speaker 2: Doakes and they claim to be Deputy Doakes and they say,
• 11:10
  Speaker 2: go to this page. I'm this person. These people are
• 11:13
  Speaker 2: smart and devious, and the more information that's out there,
• 11:16
  Speaker 2: the easier it is for them to fool you. You
• 11:18
  Speaker 2: need to be skeptical. Trust nothing. Hang up on a
• 11:21
  Speaker 2: call like that. Oh, yeah. If you call the Hamilton
• 11:24
  Speaker 2: County Sheriff's Office directly, more skepticism, less Internet of Things devices,
• 11:29
  Speaker 2: less putting your data out there, Brian.
• 11:31
  Speaker 1: Or just ignore them outright and don't follow up because
• 11:34
  Speaker 1: they're not going to come to arrest you. And if
• 11:35
  Speaker 1: they do, that means they've got probable cause and a
• 11:37
  Speaker 1: reason to do so, and then you would probably know
• 11:39
  Speaker 1: it if you'd done something wrong. Anyway. Hawk Station. 651
• 11:44
  Speaker 1: at 55KRCD Talk Station. Dave Hatter, Tech Friday. Got one
• 11:49
  Speaker 1: more segment here. And, of course, interestit.com is where you
• 11:51
  Speaker 1: find Dave and the crew for your business needs. And
• 11:54
  Speaker 1: linkedin.com to find Dave Hatter and the resources he talks about,
• 11:57
  Speaker 1: like this one. We had a recent water utility attack,
• 12:00
  Speaker 1: but apparently they've learned something from it. Have I got
• 12:02
  Speaker 1: that right, Dave?
• 12:03
  Speaker 2: Yeah. The good news, Brian, is there are tons of
• 12:07
  Speaker 2: resources out there available for businesses, utilities, small local governments.
• 12:13
  Speaker 2: to harden their defenses and become more resilient. I'll come
• 12:16
  Speaker 2: back to that in a minute. You mentioned the water attack. So,
• 12:19
  Speaker 2: you know, we saw a few months ago and, you know,
• 12:21
  Speaker 2: I've been warning about this forever, Brian, critical infrastructure. Yeah.
• 12:24
  Speaker 2: Can't live long without water. Electricity makes water possible. The
• 12:28
  Speaker 2: telecom system, now it was interconnected, everything. You know, we
• 12:32
  Speaker 2: have got to focus and I share information about this
• 12:35
  Speaker 2: on all. Yeah. I've talked about this till I'm blue
• 12:37
  Speaker 2: in the face. It is extremely urgent that we focus
• 12:41
  Speaker 2: on addressing our critical infrastructure. And now we're seeing the
• 12:44
  Speaker 2: real world impacts. Over 100 water plants in 12 states
• 12:48
  Speaker 2: were recently attacked. It's been linked to the Iranians. Who
• 12:51
  Speaker 2: knows for sure, because if you're good, you're going to
• 12:53
  Speaker 2: make it look like someone else did it. But they
• 12:56
  Speaker 2: were able to get into many of these places. One
• 12:58
  Speaker 2: of them was shut down for a period of time.
• 13:00
  Speaker 2: It's super critical that across the 16 critical infrastructure sectors
• 13:05
  Speaker 2: that the FBI has identified that we focus on these things.
• 13:09
  Speaker 2: So the Center for Internet Security, you Think of it
• 13:13
  Speaker 2: like a chamber of commerce for cybersecurity nerds like me.
• 13:18
  Speaker 2: We pay to belong to this thing to be able
• 13:20
  Speaker 2: to use their resources commercially. They have incredible resources. The
• 13:25
  Speaker 2: state of Ohio last year, we talked about this, passed
• 13:27
  Speaker 2: a law. Again, kudos to Ohio for tending to lead
• 13:31
  Speaker 2: in this space. Ohio revised code 9.64 that amongst other
• 13:35
  Speaker 2: things requires any political subdivision, any taxing authority in Ohio
• 13:40
  Speaker 2: to have a cybersecurity program. And they actually reference the
• 13:44
  Speaker 2: Center for Internet Security Critical Controls, one of the things
• 13:47
  Speaker 2: CIS provides as a baseline, a framework for you to
• 13:50
  Speaker 2: build your cybersecurity program around. And other states have done
• 13:53
  Speaker 2: this as well. So my point is Center for Internet
• 13:56
  Speaker 2: Security is a well-known, well-respected organization. It's been around for decades.
• 14:01
  Speaker 2: And even states like Ohio recognize the quality of the
• 14:06
  Speaker 2: information they're putting out there, the tools and so forth.
• 14:09
  Speaker 2: So CIS recently put out this article. And one of
• 14:12
  Speaker 2: the things we do for businesses, Brian, is we can
• 14:15
  Speaker 2: come in and I usually lead these myself. We'll do
• 14:18
  Speaker 2: a security assessment of your organization based on the Center
• 14:21
  Speaker 2: for Internet Security Framework. So this isn't Dave Hatter's opinion.
• 14:24
  Speaker 2: This isn't InTrust's opinion. This isn't Microsoft's opinion. This is
• 14:28
  Speaker 2: a third-party organization with thousands of people like me involved
• 14:31
  Speaker 2: in it who have come up with these guidelines, frameworks,
• 14:34
  Speaker 2: and so forth.
• 14:35
  Speaker 1: It's like a medical standard of care.
• 14:39
  Speaker 2: Yes, or it's like a financial audit using– Like if
• 14:44
  Speaker 2: you're a city, you get audited, right? So again, this
• 14:48
  Speaker 2: is something we can do for businesses. There are plenty
• 14:50
  Speaker 2: of other people that can do this. But I encourage
• 14:52
  Speaker 2: anyone that owns a business, is an executive in a business,
• 14:55
  Speaker 2: you should be looking at some kind of security assessment
• 14:58
  Speaker 2: on a regular basis, especially because AI is accelerating the
• 15:02
  Speaker 2: attacks and making it easier for less sophisticated criminals to
• 15:05
  Speaker 2: pull these things off. And a framework like the Center
• 15:07
  Speaker 2: for Internet Security Critical Controls is the way to go.
• 15:10
  Speaker 2: I'm a big fan. So they came out and said, okay,
• 15:14
  Speaker 2: in light of these recent attacks, five things that utilities
• 15:18
  Speaker 2: in particular in the wastewater and water treatment space should
• 15:21
  Speaker 2: be doing. But this is good advice for any organization.
• 15:25
  Speaker 2: Any organization should be doing these five things. And CIS
• 15:28
  Speaker 2: has always focused on visibility. How can you protect something
• 15:33
  Speaker 2: if you don't know you have it? How can you
• 15:34
  Speaker 2: understand the risk something creates if you don't know you
• 15:37
  Speaker 2: have it? You've got to have an inventory, hardware, software, users, data.
• 15:42
  Speaker 2: You've got to have an inventory of this stuff. That's
• 15:44
  Speaker 2: the first point they make in here. And it's hammered
• 15:47
  Speaker 2: throughout this control framework I just mentioned. They mentioned connectivity
• 15:51
  Speaker 2: creates opportunity and risk. Yeah, it's great that now everything
• 15:54
  Speaker 2: is connected to the internet and you can get to
• 15:56
  Speaker 2: it remotely and work from home and all this stuff.
• 15:58
  Speaker 2: But if you can get to it from the internet,
• 16:00
  Speaker 2: so can the bad guys. 10 years ago, the controllers
• 16:03
  Speaker 2: that controlled the water, probably weren't accessible to the internet. Most,
• 16:07
  Speaker 2: like me, would argue they still shouldn't be. But anything
• 16:10
  Speaker 2: that is visible to the outside world is at risk
• 16:13
  Speaker 2: to your organization. They mentioned resilience. Yeah, you have to
• 16:17
  Speaker 2: defend against these kinds of attacks, and there are ways
• 16:20
  Speaker 2: to do it. But we've crossed the Rubicon where now
• 16:24
  Speaker 2: you can just assume if you have a firewall, you're good. Right.
• 16:27
  Speaker 2: They're coming at you in every angle. You've got to
• 16:29
  Speaker 2: focus on resilience. What happens when the system does go
• 16:32
  Speaker 2: down for whatever reason? Tornado, earthquake doesn't have to be
• 16:36
  Speaker 2: a cyber attack. These are critical systems that, you know,
• 16:39
  Speaker 2: we rely on and in some cases are, you know,
• 16:42
  Speaker 2: create an existential threat when they go down. They mentioned
• 16:46
  Speaker 2: third party risk. Everything's connected to the Internet now, connected
• 16:49
  Speaker 2: to the cloud, third party vendors. Third party risk is
• 16:52
  Speaker 2: a huge problem in cybersecurity now. And then their last point,
• 16:56
  Speaker 2: and then we'll be out of time. This is not
• 16:58
  Speaker 2: a business issue, especially in the critical infrastructure. It's a
• 17:02
  Speaker 2: public service issue. It's a safety issue. It's a societal issue.
• 17:09
  Speaker 2: When the water plant goes down and is out for days,
• 17:12
  Speaker 2: then what? If the grid goes down and is out
• 17:14
  Speaker 2: for months, then what? We've got to get serious about this.
• 17:17
  Speaker 2: Organizations like CS have these great resources out there. Anyone
• 17:21
  Speaker 2: that's listening to me, you got questions, I'm happy to
• 17:24
  Speaker 2: talk about this, point you in the right direction. The
• 17:27
  Speaker 2: Center for Internet Security Critical Control is super, super valuable.
• 17:31
  Speaker 1: And this is something that you do for businesses in
• 17:34
  Speaker 1: the world performing this analysis.