Is This Just Bad Or “Call The Feds” Bad?

<p>All links and images for this episode can be found on <a href= "https://cisoseries.com/is-this-just-bad-or-call-the-feds-bad/" target="_blank" rel="noopener">CISO Series</a>.</p> <p>In everyday life, it's often clear when to call in the authorities. Someone egging your house might not rise to the occasion, but a break-in gets a call to the cops. It's less clear when it comes to a cyberattack. What constitutes a significant attack and what are the regulatory requirements? Once you make the call, how do they help in your response?</p> <p>This week’s episode is hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/dspark">@dspark</a>), producer of CISO Series and <a href="https://www.linkedin.com/in/csoandy/">Andy Ellis</a> (<a href="http://twitter.com/csoandy">@csoandy</a>), operating partner, <a href="http://ylventures.com/">YL Ventures</a>. Joining us is our special guest, David Ring, section chief at <a href= "https://fbijobs.gov/">FBI</a>, <a href= "https://www.fbi.gov/investigate/cyber">Cyber Division</a>.</p> <p><strong id= "docs-internal-guid-253446e9-7fff-c2c5-1a75-4bd9d7b31d32">Thanks to our podcast sponsor, Hunters</strong></p> <p><a href="https://www.hunters.security/" target="_blank" rel= "noopener"><img src= "https://assets.libsyn.com/secure/show/24425/Hunters-banner-ad-600x100-for-CISO-Series_Podcast.jpg" alt="Hunters" width="600" height="100" /></a></p> <p><a href="https://www.hunters.security/"><em>Hunters SOC Platform</em></a> <em>is a SIEM alternative, delivering data ingestion, built-in and always up-to-date threat detection, and automating correlation and investigation processes to reduce risk, complexity, and cost for security teams. Learn more at <a href= "https://www.hunters.security/">hunters.security</a>.</em></p> <p>In this episode:</p> <ul> <li>What constitutes a significant attack and what are the regulatory requirements?</li> <li>Once you make the call, how do they help in your response?</li> <li>How do you approach "skills-and