Best Members of Technical Staff Podcasts (2025)

1
Identifying and Mitigating Cyber Risk 47:33

7d ago47:33

47:33

An organization’s cyber risk management practices must be rooted in organizational goals to be truly effective. In this webcast, Matt Butkovic, Greg Crabbe and Beth-Anne Bygum explore how best to align business and resilience objectives.By Matt Butkovic, Greg Crabbe and Beth-Anne Bygum

1
"Osage Culture Meets the Courtroom: A Vision for Justice and Unity" 43:46

11d ago43:46

43:46

Explore how Osage culture and values are shaping the future of justice. Host Russ Tallchief sits down with Osage Nation Supreme Court Chief Justice Meredith Drent and Associate Professor Dr. Jean Dennison to discuss the integration of Osage language, traditions, and community values into the Nation’s judicial system. Hear how recent gatherings of t…

1
Updating Risk Assessment in the CERT Secure Coding Standard 26:04

15d ago26:04

26:04

Bringing a codebase into compliance with the SEI CERT Coding Standards, requires a cost of time and effort, namely in the form of a static analysis tool. But those who are familiar with static analysis tools know that the alerts are not always reliable and produce false positives that must be detected and disregarded. This year, we plan on making s…

1
Delivering Next Generation Cyber Capabilities to the DoD Warfighter 27:16

17d ago27:16

27:16

In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Gregory Touhill, director of the SEI CERT Division, sits down with Matthew Butkovic, technical director of Cyber Risk and Resilience at CERT, to discuss ways in which CERT researchers and technologists are working to deliver rapid capability to warfighters in …

1
Cyber Maturity Model Certification (CMMC): Protecting the Nation’s Defense Industrial Base 28:02

21d ago28:02

28:02

The Defense Industrial Base (DIB) is a core element of the national security ecosystem. This point of intersection between private industry and the Department of Defense is a perpetual target for the Nation’s adversaries. In this Intersect, Matthew Butkovic and John Haller explore the development, and implementation, of the Cyber Maturity Model Cer…

1
"Nation with a capital N" 26:48

1M ago26:48

26:48

What does it mean to be a sovereign nation in the 21st century? Join Osage Nation Communications Manager Russ Tallchief, Osage Nation Supreme Chief Court Justice Meredith Drent, and Associate Professor Dr. Jean Denison as they explore the governance, history, and culture of the Osage Nation. This inaugural episode, "Nation with a Capital N," delves…

1
Threat Hunting: What Should Keep All of Us Up at Night 57:09

1M ago57:09

57:09

When it comes to recognizing threats, cybersecurity professionals may become distracted by big promises or ignore some obvious inspections. New claims made by the latest and greatest new apps draw attention away from network situational awareness best practices—like a dog distracted when it spots a squirrel. We also may deviate from making routine …

1
Getting the Most Out of Your Insider Risk Data with IIDES 39:14

1M ago39:14

39:14

Insider incidents cause around 35 percent of data breaches, creating financial and security risks for organizations. In this podcast from the Carnegie Mellon University Software Engineering Institute, Austin Whisnant and Dan Costa discuss the Insider Incident Data Expression Standard (IIDES), a new schema for collecting and sharing data about insid…

1
Can a Cybersecurity Parametric Cost Model be Developed? 56:25

2M ago56:25

56:25

Can a cybersecurity parametric cost estimation model be developed? Every Department of Defense (DoD) program needs to account for, credibly estimate, budget/plan for, and assess the performance of its cybersecurity activities. Creating a cybersecurity parametric model would allow DoD programs to reliably estimate the effort and cost of cybersecurit…

1
A Sit-down with TCD's Board of Supervisors 57:18

2M ago57:18

57:18

On this month's episode of Conservation Starters, we are joined by TCD's Board of Supervisors TJ Johnson, Betsie De Wreede, Doug Rushton, Marianne Tompkins, and David Iyall. During this episode, we get to know each of our board members and hear more about TCD's organizational goals. We discuss the responsibilities of board supervisors and learn mor…

1
Grace Lewis Outlines Vision for IEEE Computer Society Presidency 18:14

2M ago18:14

18:14

Grace Lewis, a principal researcher at the Carnegie Mellon University Software Engineering Institute (SEI) and lead of the SEI’s Tactical and AI-Enabled Systems Initiative, was elected the 2026 president of the IEEE Computer Society (CS), the largest community of computer scientists and engineers, with more than 370,000 members around the world. In…

1
Elements of Effective Communications for Cybersecurity Teams 34:00

2M ago34:00

34:00

Communications, both in times of crisis and during normal operations, are essential to the overall success and sustainability of an incident response or security operations team. How you plan for and manage these communications and how they are received and actioned by your audience will influence your trustworthiness, reputation, and ultimately yo…

1
Improving Machine Learning Test and Evaluation with MLTE 29:06

2M ago29:06

29:06

Machine learning (ML) models commonly experience issues when integrated into production systems. In this podcast, researchers from the Carnegie Mellon University Software Engineering Institute and the U.S. Army AI Integration Center (AI2C) discuss Machine Learning Test and Evaluation (MLTE), a new tool that provides a process and infrastructure for…

1
DOD Software Modernization: SEI Impact and Innovation 27:12

2M ago27:12

27:12

As software size, complexity, and interconnectedness has grown, software modernization within the Department of Defense (DoD) has become more important than ever. In this discussion moderated by Matthew Butkovic, technical director of risk and resilience in the SEI CERT Division, SEI director Paul Nielsen outlines the SEI’s work with the DoD on sof…

1
Discovering Hedgerows Part 2 1:09:56

2M ago1:09:56

1:09:56

On this month's episode of Conservation Starters, we are joined by Senior WSU Extension Coordinator & Educator, Erica Guttman. During this episode we dive even deeper into the world of hedgerows, exploring hedgerow design and planting plans. We discuss how to examine your landscape and choose the best plants for your space. We also talk about sourc…

1
Operational Resilience Fundamentals: Building Blocks of a Survivable Enterprise 52:07

3M ago52:07

52:07

Surviving disruptive cyber events requires a specific form of planning. One must strike a balance between defending against threats (e.g., managing conditions) and effectively handling the effects of disruption (e.g., managing consequences). Employing a model (such as the CERT Resilience Management Model) provides a catalog of practices and a syste…

1
Cybersecurity Priorities in 2025 32:21

3M ago32:21

32:21

Chief Information Security Officers (CISOs) perpetually navigate a dynamic set of challenges. Applying focus and aligning resources is imperative for success. In this Intersect, Matthew Butkovic and Gregory Touhill, reflect on 2024 and explore the topics that should be front of mind for CISOs in 2025. They provide insights and advice for those cont…

1
Understanding the Need for Cyber Resilience: A Conversation with Ray Umerley 53:02

4M ago53:02

53:02

No organization can comprehensively avoid disruptive cyber events. All must strive to maintain operational resilience during times of organizational stress. Ransomware incidents create disruption that can be fatal to the unprepared. In this webcast, we explore how to maintain operational resilience during a ransomware incident. Experts with varied …

1
The Secret Strength of Freshwater Mussels 59:18

4M ago59:18

59:18

On this month's episode of Conservation Starters we are joined by Xerces Society's Senior Endangered Species Conservation Biologist and Freshwater Mussel Lead, Emilie Blevins and Washington Department of Fish & Wildlife's Native Freshwater Fish and Freshwater Shellfish Specialist, Marie Winkowski to discuss the secret strength of freshwater mussels…

1
Exploring the Fundamentals of Counter AI 27:57

4M ago27:57

27:57

As the strategic importance of AI increases, so too does the importance of defending those AI systems. To understand AI defense, it is necessary to understand AI offense—that is, counter AI. In this session, Matthew Butkovic, CISA, CISSP, technical director for risk and resilience, and Nathan VanHoudnos, senior machine learning researcher explore t…

1
Securing Docker Containers: Techniques, Challenges, and Tools 39:09

5M ago39:09

39:09

Containerization allows developers to run individual software applications in an isolated, controlled, repeatable way. With the increasing prevalence of cloud computing environments, containers are providing more and more of their underlying architecture. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Sasa…

1
An Introduction to Software Cost Estimation 22:55

5M ago22:55

22:55

Software cost estimation is an important first step when beginning a project. It addresses important questions regarding budget, staffing, scheduling, and determining if the current environment will support the project. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Anandi Hira, a data scientist on the SEI…

1
Farm Equipment FOR RENT! 50:12

5M ago50:12

50:12

On this month's episode of Conservation Starters we are joined by TCD's Senior Natural Resource Specialist, Emily Landrus and Natural Resource Specialist, Aimee Richardson to discuss our farm equipment rental program. Together, we discuss all the details about the low-cost farm equipment and hand tools we rent as a resource to our local community. …

1
Cyber Challenges in Health Care: Managing for Operational Resilience 53:37

6M ago53:37

53:37

Health-care organizations are seemingly besieged by a complex set of cyber threats. The consequences of disruptive cyber events in health care are in many ways uniquely troubling. Health-care organizations often face these challenges with modest resources. In this webcast, Matthew Butkovic and Darrell Keeling will explore approaches to maximize ret…

1
Independent Verification and Validation for Agile Projects 1:02:23

6M ago1:02:23

1:02:23

Traditionally, independent verification and validation (IV&V) is performed by an independent team throughout a program’s milestones or once the software is formally delivered. This approach allows the IV&V team to provide input at the various milestone gates. As more programs move to an Agile approach, those milestones aren’t as clearly defined sin…

1
Cybersecurity Metrics: Protecting Data and Understanding Threats 27:00

7M ago27:00

27:00

One of the biggest challenges in collecting cybersecurity metrics is scoping down objectives and determining what kinds of data to gather. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Bill Nichols, who leads the SEI’s Software Engineering Measurements and Analysis Group, discusses the importance of cyber…

1
3 Key Elements for Designing Secure Systems 36:28

7M ago36:28

36:28

To make secure software by design a reality, engineers must intentionally build security throughout the software development lifecycle. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Timothy A. Chick, technical manager of the Applied Systems Group in the SEI’s CERT Division, discusses building, designing, …

1
Fall Gardening with Your Local Master Gardener 46:45

7M ago46:45

46:45

On this month's episode of Conservation Starters, we are joined by our local Master Gardener, Cor Carlton, WSU Master Gardener and Master Recycler Composter Program Manager. Together, we talk about the two programs she manages and discuss how to get involved. She shares fall gardening tips and we share information about our annual plant sales. Reso…

1
Using Role-Playing Scenarios to Identify Bias in LLMs 45:07

8M ago45:07

45:07

Harmful biases in large language models (LLMs) make AI less trustworthy and secure. Auditing for biases can help identify potential solutions and develop better guardrails to make AI safer. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Katie Robinson and Violet Turri, researchers in the SEI’s AI Division,…

1
Best Practices and Lessons Learned in Standing Up an AISIRT 38:29

8M ago38:29

38:29

In the wake of widespread adoption of artificial intelligence (AI) in critical infrastructure, education, government, and national security entities, adversaries are working to disrupt these systems and attack AI-enabled assets. With nearly four decades in vulnerability management, the Carnegie Mellon University Software Engineering Institute (SEI)…

1
Demystifying Technical Assistance and the Cost-share Process 34:00

8M ago34:00

34:00

On this month's episode of Conservation Starters sit down with TCD's Senior Natural Resource Specialist, Kendall Carman to better understand the way we support community members in the Thurston County. Together, we break down what terms like technical assistance and cost-share mean. We also discuss what these processes look like and share resources…

1
3 API Security Risks (and How to Protect Against Them) 19:28

8M ago19:28

19:28

The exposed and public nature of application programming interfaces (APIs) come with risks including the increased network attack surface. Zero trust principles are helpful for mitigating these risks and making APIs more secure. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), McKinley Sconiers-Hasan, a solu…

1
Evaluating Large Language Models for Cybersecurity Tasks: Challenges and Best Practices 43:05

9M ago43:05

43:05

How can we effectively use large language models (LLMs) for cybersecurity tasks? In this Carnegie Mellon University Software Engineering Institute podcast, Jeff Gennari and Sam Perl discuss applications for LLMs in cybersecurity, potential challenges, and recommendations for evaluating LLMs.

1
Capability-based Planning for Early-Stage Software Development 33:55

10M ago33:55

33:55

Capability-Based Planning (CBP) defines a framework that has an all-encompassing view of existing abilities and future needs for strategically deciding what is needed and how to effectively achieve it. Both business and government acquisition domains use CBP for financial success or to design a well-balanced defense system. The definitions understa…

1
Interview with CorpInfoTech 37:04

10M ago37:04

37:04

CMMC compliance is not just IT- it has broad Operational component as well. Listen as Lawrence Cruciana and Miles Free explore how this process will impact and change your practices across your shop. For More Information visit www.pmpa.org/podcastsBy PMPA

Podcasts Worth a Listen

Members Of Technical Staff Podcasts

Podcasts Worth a Listen