Episodes

  • From Bootcamps to Battlefields: Keith Gologorsky on Modern Cyber Training
    Dec 4 2025

    In this episode of the Safe House Initiative podcast, host Jeff Edwards welcomes Keith Gologorsky, Head of Public Sector at Hack the Box, for an in-depth conversation about building a successful career in cybersecurity. Keith shares his personal journey from computer science graduate to government analyst, recounting pivotal moments in military operations, threat analysis, and international collaboration. The discussion explores the limitations of traditional certifications, the importance of hands-on training, and the need for regularly updated, gamified learning experiences. Keith also addresses the cybersecurity skills gap, the evolving role of AI, and offers actionable advice for organizations of all sizes: prioritize cross-training and real-world practice to build resilient teams. Tune in for practical insights and strategies to future-proof your cybersecurity workforce.

    Show More Show Less
    25 mins
  • Cyber Decision Diagrams for OT/ICS: Turning Tribal Knowledge into Action w/ Sarah Flukes, CTO, Admeritia
    Nov 13 2025

    Host Jeff Edwards talks with Sarah Flukes, CTO of Admeritia, about a simple but powerful idea: cyber decision diagrams. Born from real-world work in water utilities and industrial sites, these function-oriented maps turn complex OT/ICS environments into clear, shared understanding—for security, operations, incident response, and design.

    In this episode

    • Why traditional network/asset maps fail engineers—and what “function-first” fixes
    • Using diagrams for OT/ICS risk, IR restart plans, and security-by-design
    • Cognitive effectiveness: diagrams people actually understand and use
    • Free, no-login tool and why data stays local (no tracking)
    • How SMBs and critical infrastructure can start today

    Resources: Free tools & guides at SafeHouseInitiative.org (no tracking, no fees)

    Guest: Sarah Flukes • Host: Jeff Edwards

    🎬 Production Team:

    Alan Gin – Executive Producer

    Jen Carpenter – Editor & Post Production Supervisor

    Keith Fukuhara – Production Manager & Technical Director

    Dorian Naveh – Marketing & Social Media Manager

    #️⃣ Hashtags:

    #CyberSecurity #OTSecurity #ICS #CriticalInfrastructure #IndustrialSecurity #RiskManagement #IncidentResponse #SecurityByDesign #WaterUtilities #SMB #Admeritia #CyberDecisionDiagrams #SafeHousePodcast

    Show More Show Less
    32 mins
  • SMB Cybersecurity in the Age of AI — Practical Defense with Chuck Brooks (Georgetown | Brooks Consulting)
    Oct 30 2025

    Host Jeff Edwards sitsdown with Chuck Brooks—adjunct professor at Georgetown andpresident of Brooks Consulting—to cut through the noise on SMB cybersecurity.From AI-supercharged phishing and IoT sprawl to zero trust, CMMC/NIST, and why MFAisthe #1 first step, Chuck translates complex threats into clear actions anysmall or midsize business can take today.

    You’ll learn

      Resources: Free guides at SafeHouseInitiative.org (notracking, no fees)

      Guest: Chuck Brooks • Host: JeffEdwards

      🎬 Production Team:

      Alan Gin – Executive Producer

      Jen Carpenter – Editor & Post ProductionSupervisor

      Keith Fukuhara – Production Manager &Technical Director

      Dorian Naveh – Marketing & Social MediaManager

      #️⃣ Hashtags:

      #CyberSecurity #SMB #SmallBusiness #AI#Phishing #MFA #ZeroTrust #CMMC #NIST #IoT #OTSecurity #RiskManagement#BusinessContinuity #IncidentResponse #SafeHousePodcast

      Show More Show Less
      28 mins
    • SMB Cyber Insurance: Why Only 4% Buy — Myths, Budgets & Better Options (w/ Erik Cernak)
      Oct 16 2025

      Why do only ~4% of small and midsize businesses carry a standalone cyber policy? Host Jeff Edwards digs in with returning guest Erik Cernak (Hanover Insurance Group) to separate myth from reality and lay out practical next steps for SMBs, brokers, and MSPs.

      In this episode:

      • “We’re too small to be a target” — how modern threat actors actually operate
      • Bolt-ons vs. standalone: where coverage (and limits) really differ
      • Budget tradeoffs in a hard insurance market
      • Why early incident reporting helps outcomes (and renewals)
      • Warranties, MSPs, and where to get trustworthy guidance
      • One thing you can do today: start asking better questions

      Who should listen: SMB owners, CISOs at resource-constrained orgs, MSPs, brokers/agents, and anyone shaping cyber risk decisions.

      Resources: Free guides & checklists at SafeHouseInitiative.org (no logins, tracking, or fees)

      Hosts & Guest: Jeff Edwards • with Erik Cernak

      #️⃣ Hashtags:

      #CyberInsurance #SMB #SmallBusinessSecurity #BusinessContinuity #Ransomware #RiskManagement #InsuranceBrokers #MSP #SupplyChainRisk #GenerativeAI #DataBreach #SafeHousePodcast

      Show More Show Less
      26 mins
    • Thoughtful Reflection: Cyber Insurance Summer Series Conclusion with Tawana Johnson
      Sep 25 2025

      And that's a wrap on our Cyber Insurance Summer Series! 🎬 In this must-watch conclusion, series co-host Tawana Johnson joins Jeff Edwards to distill the biggest lessons, surprising insights, and actionable advice from our expert guests.


      If you're a small to mid-size business owner trying to navigate the complexities of cyber insurance, this episode ties everything together. Tawana walks us through the entire lifecycle—from quantifying risk and applying for a policy to handling a claim and dealing with potential litigation. Find out the key themes that every single expert agreed on and the concrete steps you can take today to protect your business.


      -------------

      Key Takeaways from the Series

      Throughout the series, our experts consistently highlighted several crucial themes:


      🔑 Know Your Data: Understanding what data you have and where it's stored is the foundation of your entire security and insurance strategy.

      🤝 A Good Broker is Essential: An educated broker is your guide through the application, risk quantification, and claims process.

      ⏰ Timely Notification is Critical: Report incidents to your broker and insurance carrier immediately to ensure coverage.

      ⚖️ An Emerging Area of Law: There isn't much case law for cyber claims, making settlements common and expert guidance vital.

      🎯 "It's Not If, But When": Every organization, regardless of size, is a target.


      -------------

      Top 4 Action Items You Can Do Today

      Want to improve your cybersecurity posture right now? Our guests recommend focusing on these four things:


      Know Your Data: Identify and classify all the data you handle.


      Enable Multi-Factor Authentication (MFA): Enforce it for every user on every application.


      Maintain Good Backups: Ensure you are backing up frequently and that your backups are secure. This is your best defense against paying a ransom.


      Have an Incident Response Plan: Create a plan and have a team in place before an incident occurs. Important: Keep a printed copy offline!


      -------------

      About The Safe House

      The Safe House podcast is brought to you by The Safe House Initiative. We're dedicated to providing insights and practical advice to help organizations become more secure and resilient.


      Connect with us:

      📧 Email: info@safehouseinitiative.org

      💻 Website: https://safehouseinitiative.org


      Thanks for joining us! Remember to be safe, be resilient, and be kind.


      #CyberInsurance #SmallBusiness #Cybersecurity #RiskManagement #DataBreach #IncidentResponse

      Show More Show Less
      28 mins
    • When Business Stops: Coverage Litigation and the Fight for Recovery with Ted Brown
      Aug 28 2025

      In this episode of the Safe House Initiative, hosts Jeff Edwards and Tawana Johnson are joined by Ted Brown, a partner at Lavin Rindner Duffield. Ted provides an expert legal perspective on cyber claims, discussing how they are far more complex than traditional insurance claims due to a multitude of moving pieces. He highlights common coverage disputes, such as late reporting and application issues, and stresses that cyber insurance is meant to bring a business back to where it was, not to "make them better." Ted advises that the single most important step for any business is to work with their insurer and legal counsel as soon as an incident occurs, as this can prevent massive headaches and ensure a smooth recovery.

      #CyberClaims #LegalPerspective #InsuranceLaw #CyberResilience #SMBs #IncidentResponse #RiskManagement #LegalCounsel #SafeHouseInitiative

      Show More Show Less
      22 mins
    • When Business Stops: BI Litigation and the Fight for Recovery with Jane Warring
      Aug 21 2025

      In this episode of the Safe House Initiative, host Jeff Edwards and Tawana speak with Jane Warring, a partner at Zel Law, who specializes in handling business interruption (BI) claims. She shares her expertise on the complexities of these claims for small and midsize businesses, emphasizing the importance of documentation and proving causation.Jane also reveals how the cyber insurance market is shifting to favor buyers, offering more competitive and broader policies. Don't get caught unprepared. Learn why your business needs to have the right team in place, including forensic accountants, and how a prompt claim submission can make all the difference in your recovery.#CyberInsurance #BusinessInterruption #Cybersecurity #SMB #LegalAdvice #RiskManagement #ZelLaw

      Show More Show Less
      25 mins
    • Breach to Bench: How Class Actions Are Born From Cyber Incidents with Chris Wood
      Aug 14 2025

      In this episode of the Safe House Initiative, host Jeff Edwards and Tawana Johnson speak with Chris Wood, a partner at Lewis Brisbois law firm, on the complexities of data breach litigation. He reveals that class action lawsuits have surged sixfold and are now targeting small and midsize businesses, not just large corporations. The litigation process often begins with regulatory breach disclosures, with plaintiffs' attorneys focusing on claims of negligence and breach of contract.Wood emphasizes that businesses can mitigate risk by implementing strong cybersecurity policies, conducting penetration tests, and adhering to standards like NIST and ISO. He also stresses that cyber insurance is essential for covering the high costs of legal defense and settlements.#DataBreach #Cybersecurity #CyberLiability #LegalRisk #ClassAction #SMBs #CyberInsurance #NIST #Compliance #LewisBrisbois

      Show More Show Less
      38 mins