Shows
Cybersecurity SenseLBMC Went to PCI Community Meeting - Here's What Everyone's Talking AboutWhat's everyone still talking about from the 2025 PCI Community Meeting? In this episode of Cybersecurity Sense, LBMC's PCI QSA team take you behind the scenes of one of the industry's most talked-about events sharing expert insights on vendor risk, AI's role in compliance, and what your org should be thinking about now. Don't miss practical tips, key takeaways, and what's coming in 2026. đź“Ś Download our PCI 4.0 Maintenance Checklist: https://www.lbmc.com/wp-content/uploads/2025/10/PCI-4-0-Recurring-Task-Checklist.pdf đź“Ś Download our Six Questions to Take Charge of Your TPSPs card: https://www.lbmc.com/wp...
2025-10-3132 minCybersecurity SenseGuard Duty: A Conversation on Cyber Defense and Digital ResilienceLBMC's Mark Burnette and Bill Dean talk about some of the most common technical security issues that are discovered in penetration testing, as well as some tactics for improving cyber defenses.
2025-10-1626 min
Make It Count powered by LBMCElevating Others: The Blueprint for Servant LeadershipHal Cato, CEO of the Community Foundation of Middle Tennessee, joins us to share invaluable insights from his career journey spanning over four decades of community engagement, entrepreneurial spirit, and transformative leadership. Hal redefines success by focusing on community, collaboration, and living authentically from the inside out.
2025-04-1521 min
Stories from the HackeryData-driven Future: AI, Engineering, and Continuous Learning | Stories From the HackeryIn this episode of Stories from the Hackery, John Wark, founder and CEO of Nashville Software School, talks with Charlie Apigian, a well-known figure in Nashville's tech community with a significant academic background. Charlie discusses his journey from academia to consulting, the importance of bridging the gap between education and real-world application, and how his company, Data Inspire, integrates eager new coders into meaningful projects. The episode dives into the evolving roles in tech, particularly data engineering, and the impact of generative AI. Charlie also emphasizes the importance of teamwork, community building, and continuous learning in the fast-paced tech world.
00:00...
2025-03-2450 min
Make It Count powered by LBMCResilience, Purpose, and a Life Well LivedOlympic gold medalist, cancer survivor, and motivational speaker Scott Hamilton shares his incredible journey of overcoming challenges, embracing purpose, and finding joy in life's adversities. This episode is a masterclass in perseverance, faith, and learning to find peace even in life's most challenging moments.
2025-01-2829 min
The TDMA DownloadTDMA Marketer Spotlight - Suzanne Reed, MBA - CMO, LBMCThere's a lot to love about marketing, and whether you're part of an agency, on the nonprofit side or the corporate world, the quality of the team and the leadership helping it run smoothing is EVERYTHING. Join Chief Marketing Officer Suzanne Reed of LBMC, a Tennessee leader in accounting and related business consulting services, as she shares her journey in this challenging career, and her perspective on leadership as a CMO and mentor. If you've ever thought you might pursue the path to becoming a CMO, this episode is packed with insight. The TDMA Download is a T...
2025-01-0354 min
Make It Count powered by LBMCThe Leadership Superpower: Mastering the Art of ListeningTrue leadership isn't about being the loudest voice in the room. Stuart C. McWhorter, Tennessee's Commissioner of Economic and Community Development (TNECD), demonstrates how actively listening builds trust, uncovers fresh perspectives, and leads to more thoughtful decision-making. McWhoter brings with him decades of experience spanning entrepreneurship, public service, and venture capital and shares a roadmap to success for leaders at any stage.
2024-12-1723 min
Make It Count powered by LBMCBuilding Bridges: A Conversation on Community, Legacy, and the Tennessee TitansJohari Matthews, Vice President and Executive Director of ONE Community and the Tennessee Titans Foundation, shares her journey of leadership, community impact, and the transformative power of empathy. From spearheading initiatives that create generational change to celebrating Nashville's growth, Matthews highlights the Titans' ongoing commitment to winning beyond the field and building a legacy of connection and care for the Nashville community and beyond.
2024-12-0319 min
Make It Count powered by LBMCEnter the Culture WarriorFormer CEO of Tractor Supply Company and author of The Culture Warrior, Joe Scarlett, joins host Suzanne Reed to offer his insights on fostering a strong company culture, empowering a team, and leading with humility. Scarlett's successful leadership career spans decades, though his personal mission has remained consistent: focus on cultivating people-centered practices that outlast trends and ensure sustained business success. His story is a reminder that even in a fast-paced, ever-changing business environment, core values like empathy, listening, and a genuine investment in your people can lead to a sustainable and impactful legacy.
2024-11-1923 min
Make It Count powered by LBMCA Vision for Healthcare InnovationPresident of the Nashville Healthcare Council (NHCC), Apryl Childs-Potter, joins host Suzanne Reed to share her insights on leadership, growth, and plans to make Nashville a model for healthcare and innovation for the world. Their candid conversation includes a look back at Childs-Potter's career, the leadership lessons she's learned and imparted on others along the way, which includes fostering collaboration and driving innovation. You'll also learn more about NHCC's annual Sessions conference and the lasting impact they hope to have on the healthcare industry.
2024-11-0525 min
Make It Count powered by LBMCInsights on Leadership, Legacy, and Growth from the Founders of LBMCAs LBMC celebrates its 40th anniversary, host Suzanne Reed sits down with LBMC co-founders David Morgan and Mike Cain to discuss their personal and professional experiences building one of the Southeast's largest CPA and professional services firms, now with over 900 employees in five offices. Their true legacy goes beyond just the numbers—it's rooted in the relationships, thoughtful succession planning, and a drive to constantly evolve in a competitive industry. The insights shared here by LBMC's founders will serve as timeless lessons for leaders and professionals alike.
2024-10-2225 min
Business NinjasEmpowering Your Success with Accounting & Business Consulting | Business Ninjas: WriteForMe and LBMCIn this episode of Business Ninjas, host Andrew Lippman interviews Mark Burnette, Chief Growth Officer at LBMC, a top 40 professional services firm in the U.S. Mark takes us through LBMC’s impressive growth journey, from its early beginnings in Nashville to becoming a national leader in accounting, advisory, and cybersecurity services. He shares how the firm has stayed true to its people-first approach, which was key during the pandemic, helping them retain top talent, strengthen client relationships, and offer innovative solutions across a variety of industries.Join us as Mark reveals his journey from cybersecurity expert to...
2024-10-1728 min
Make It Count powered by LBMCIntroducing Make It Count: Conversations that MatterLBMC is celebrating its 40th anniversary by bringing together today's influential voices to inspire and inform tomorrow’s business leaders. All season we’ll explore the pivotal moments that have shaped the careers of top executives and entrepreneurs, uncovering the innovative strategies behind their success. From game-changing business decisions to career-defining leadership lessons, you'll get powerful insights and advice to help you make it count. Whether you're leading a team, planning for the future or just beginning your career, Make It Count will equip you with the inspiration and ideas to help you succeed and take your leadership journey to t...
2024-10-0302 min
The Virtual CISO MomentS6E45 - Authors Series 2 - Mark BurnetteMark Burnette is the Chief Growth officer for LBMC and the author of Risky Business: Cybersecurity Leadership the Right Way. Driving growth (increased revenue) has been an important part of his career. During his 30+ years in the professional world, he has helped start and build service lines for three major professional service firms, led a boutique consulting firm as President, and co-founded, built, and sold a software company, among other career experiences. W discuss lie after the CISO, how we all are sales persons in some way, his book, and much more. Viewers and listeners can obtain a free...
2024-09-1032 min
SaaS Expert Voices presented by MaxioFrom Cash Basis to Accrual: Transforming Financial Reports for SaaS with Chris MorganThis week on the Expert Voices podcast, Randy Wootton, CEO of Maxio, speaks with Chris Morgan, CEO of LBMC. Randy and Chris highlight the evolving intricacies in financial operations within B2B SaaS companies. They discuss the necessity for moving beyond simple cash accounting to sophisticated systems capable of managing accrual accounting and providing deeper insights into business performance. With a rich background in accounting and finance, Chris talks about the significance of order-to-cash cycles, the dangers of revenue leakage, and the sophisticated demands placed on modern CFOs in today's data-rich business environment.Quotes“I think it...
2024-08-2142 min
CEO's You Should Know - NashvilleStacy Schuettler, CEO of LBMC Technology Solutions, LLCThis week on CEOs You Should Know, we host Stacy Schuettler, CEO of LBMC Technology Solutions, LLC.
2024-02-2101 min
AHLA's Speaking of Health LawHealth Law Career Journeys: Katie Tarr, Shareholder, LBMCIn this series from AHLA’s Early Career Professionals Council, health law professionals share their career paths, what they wish they had known as students, and what a typical day in their job looks like. In this episode, Alé Dalton, Associate, Bradley Arant Boult Cummings LLP, speaks with Katie Tarr, Shareholder, LBMC. Katie talks about her experience as a non-lawyer in a “health law adjacent” field (health care valuation), the importance of identifying strong companies and leaders, her role in AHLA’s Women’s Leadership Council, why resource/affinity groups are good tools for companies, and how to engage with potent...
2023-11-1721 min
Cybersecurity SensePCI Monthly Update: August Highlights & Requirement 5 BreakdownTune in to the August edition of our PCI Monthly Update. We kick off with a sneak peek into the upcoming PCI North America Community Meeting in Portland and introduce the newly launched PCI Community Job Board—a dedicated platform for security talent and job postings in the payment industry. Next, we delve into Requirement 5, shedding light on anti-malware solutions. We explore the criteria for system components which do not require anti-malware, delve into the specifics of anti-malware implementation, and highlight the periodic evaluations required for maintaining optimal security. Wrapping up, our QSA Q&A se...
2023-09-0524 min
Cybersecurity SensePCI Monthly Update: July Insights & InnovationsDive into the latest PCI news in our July PCI Update. This episode covers key PCI developments, an in-depth exploration of Requirement 4, and a helpful QSA Q&A. We kick off this episode by previewing the upcoming PCI Community Meeting in Portland and discuss our hosts' presentation on "Generative AI: Your New Secret Weapon or an Insider Threat?" We also talk about the INFI worksheet and the importance of Continuous Compliance. In the Requirement 4 segment, we focus on strong cryptography, robust security protocols, and the need to secure PAN during transmission over public networks. We...
2023-08-0824 minCybersecurity SenseWorried about Ransomware?Do you know the average payout organizations are hit with for every attack? William Parks and Bill Dean discuss a service dedicated to helping your organization (big or small) withstand a ransomware attack. Bill and his team are ready to help you and your organization obtain peace of mind when it comes to these advanced threats. Questions for Bill? Find him here: bill.dean@lbmc.com
2023-05-2315 min
Enterprise Software PodcastEnterprise Software Podcast Episode 168 – LBMC’s Bryan Wilton and Intracontinental Eventshttps://traffic.libsyn.com/enterprisesoftwarepodcast/episode168.mp3
Â
Bryan Wilton, CRO:
LBMC / LinkedIn / Twitter
Jack Stack Barbeque
Â
Directions NA home / LinkedIn / Twitter / City of Orlando, FL
IT Alliance home / LinkedIn / Twitter / City of Vancouver, BC
The post Enterprise Software Podcast Episode 168 – LBMC’s Bryan Wilton and Intracontinental Events appeared first on Enterprise Software Podcast.
2023-05-0300 min
Enterprise Software PodcastEnterprise Software Podcast Episode 168 - LBMC’s Bryan Wilton and Intracontinental EventsEpisode 168 - LBMC’s Bryan Wilton and Intracontinental Events
2023-05-0335 minCybersecurity SenseAdvance Guard Could Save YouLBMC Shareholder Bill Dean and William Parks spend today's episode discussing Advance Guard, a new service offering from LBMC's Security Technical Team. Learn how Advance Guard may help protect your organization's most valuable assets, save time on compliance audits, and give peace of mind about your current security stance. Â Want to see Bill's "Prescription"? Check out the link below: https://www.lbmc.com/wp-content/uploads/2023/01/AdvanceGuard-Sample-Schedule.pdf Questions for Bill? Find him here: bill.dean@lbmc.com
2023-04-1117 minCybersecurity SensePCI Monthly Update: March News & Requirement 3 Stay up to date with the latest in PCI compliance. In this episode, William Parks, Andy Kerr, and Kyle Hinterberg discuss the latest in PCI news, new restrictions around PAN data, and how to master Requirement 3 while preparing for PCI 4.0. Don't miss our upcoming webinar: "How to Reduce Your PCI Scope: Tips & Technology Your Organization Needs to Know" on Thursday, April 13 at 11am CT. Register Now! For any questions, feel free to reach out to us here: Kyle Hinterberg: kyle.hinterberg@lbmc.com Andy Kerr:Â andy.kerr@lbmc.com William Parks: w...
2023-03-2935 minCybersecurity SenseChatGPT: What You Need to KnowChatGPT is making headlines worldwide and its impact is making a lot of business owners uncomfortable. What is ChatGPT? How will this tool change how you do business? Is ChatGPT a security risk? What to expect from ChatGPT4? William Parks interviews LBMC's Data Insights team members to discuss this controversial topic, dive into facts your organization needs to know, and explore probable scenarios that could happen with this level of Artificial Intelligence. Want more insights? Contact LBMC's Data Insights team: Jon Hilton, Shareholder (jon.hilton@lbmc.com) Will Son, Senior Manager (will.son...
2023-03-2156 min
OKHR Leads75. Mary Jo Swearingen - Emerging HRMary Jo Swearingen has a personal directive to connect people to their career goals. She found a way to do this by serving on the Emerging Professional Advisory Council or EPAC for SHRM. Mary Jo is an emerging progressional who helps other emerging professionals. Listen to episode 75 to learn more about what Mary Jo is up to from Nashville, Tennesse.
LBMC, Employment Partners
Middle Tennessee State University
SHRM EPAC
University of Tennessee
State of Tennessee
SHRM-CP
Tennessee Comptroller of the...
2023-03-2047 minCybersecurity SenseInterviewing a Real HackerWilliam Parks takes this podcast to introduce a key member of LBMC Information Security's Technical Services team, Daniel Nguyen. Daniel is a manager on the team with quite the insightful background. William and Daniel spend time discussing current steps to keep your organization successful in their journey to a healthier security posture. Questions for Daniel? Find him here: daniel.nguyen@lbmc.com Â
2023-02-1617 min
The Virtual CISO MomentThrowback Thursday - A Conversation with Mark BurnetteFrom September 28, 2022 -  Mark Burnette, Shareholder-In-Charge at LBMC Information Security, discusses his path from Senior IT Auditor to overseeing and directing LBMC’s Risk Services practice nationwide. He is very active in the information security community, including as co-founder and past president of the Middle Tennessee ISSA chapter (one of the largest in the world), and co-founder and board member of the Southern CISO Security Council. His certifications include CPA, CISA, CISSP, CISM, and CRISC, and he frequently speaks on information security topics, including a fabulous TEDx talk on the Humanity Behind Cyber Attacks - https://www.ted.com/tal...
2023-01-2626 minCybersecurity SensePCI Monthly Update: January News & Requirement 1Stay up to date with the latest in PCI compliance. In this episode, William Parks, Andy Kerr, and Kyle Hinterberg discuss the latest in PCI news and how to master Requirement 1 while preparing for PCI 4.0. For any questions, feel free to reach out to us here: Kyle Hinterberg: kyle.hinterberg@lbmc.com Andy Kerr: andy.kerr@lbmc.com William Parks: william.parks@lbmc.com
2023-01-1234 min
The Beer Mighty Things Podcast# 166 - On Cybersecurity Safety with Mike Ciunci of LBMCToday we're joined by Cybersecurity Specialist Mike Ciunci of LBMC Information Security to cover the state of the cyber industry. Â
We review & learn how to identify the common cyber scams: phishing, social engineering, ransomware and what to do if your systems are breached, but first we discuss his current fitness challenge: #75Hard
We discuss a few real-life examples of brewery hacks and we stress the importance of creating a trustworthy culture while educating your staff using the free tools available on the web.
We debunk the common myths like "We're too small to b...
2022-12-2057 min
Invest:Insights by Capital AnalyticsTraversing today’s information security landscapeMay 10, 2022
Today's economy is ripe with innovation, presenting a plethora of challenges and opportunities to businesses. With Invest:Insights, Shareholder-in-Charge of LBMC’s Information Security practice Mark Burnette discussed his unique approach to cybersecurity training, the importance of advisory teams in today's economy and his thoughts on the development of regulatory framework and subsequent compliance moving forward. 👉 Register to read all Capital Analytics reports for free: https://www.capitalanalyticsassociate...
2022-12-1908 min
Making Chips Podcast for Manufacturing LeadersExtreme Ownership for the Manufacturing Leader, 338Have you read the book, "Extreme Ownership: How U.S. Navy SEALs Lead and Win" by Jocko Willink and Leif Babin? The book talks about the mindset of Navy SEALs and how the techniques they employ in and out of combat can be embraced by leadership. So in this episode of MakingChips, we break down some of the facets of extreme leadership and share how they're applicable to the manufacturing nation. Because if you're not taking extreme ownership of your business, you're not making chips. And if you're not making chips, you're not making money. BAM! – Nick...
2022-12-1741 minCybersecurity SensePCI Monthly Update: December News & FAQsWilliam Parks, Andy Kerr, and Kyle Hinterberg discuss the latest PCI news, share how to create and what should be covered in an executive summary for a PCI assessment, and answer a few questions from our listeners. If you'd like us to answer and address questions on our next episode, reach out to us here: Andy Kerr – andy.kerr@lbmc.com Kyle Hinterberg – kyle.hinterberg@lbmc.com William Parks – William.parks@lbmc.com
2022-12-0634 minCybersecurity SensePCI SSC Community Meeting Top TakeawaysIn this podcast, Host William Parks discusses with LBMC Information Security Senior Managers Andy Kerr and Kyle Hinterberg some of the top takeaways at this year's PCI SSC Community Meeting. Topics discussed during this episode include changes to the "In-Place with Remediation" reporting option which was added in PCI DSS v4.0, what to do if you miss an ASV Scan, new ways to interact with the PCI Council, SAQ updates, and much more!
2022-11-0828 min
Renegade Marketers UniteB2B Marketing Mix-ologyAllocating your marketing budget but don't know where to start? Begin with the end in mind. That's where we start in today's episode with Mary Leigh Mackie of AvePoint, Sue Holub of OnSolve, and Suzanne Reed of LBMC, three marketing mix masters with tons of hard-earned wisdom about how to spend money wisely with a limited budget.  Tune in to hear each CMOs approach to their marketing mix, working backwards from who they target to how they spend to how they adjust their marketing mix along the way. This is both a timeless and a ti...
2022-10-2847 minCybersecurity SenseKeeping Your Digital Identity Secure with Mark BurnetteThe Internet provides access to lots of good data, useful websites, social media options, and entertainment, but unfortunately, it also poses some risks to the security and privacy of individuals. In this episode, William Parks and Mark Burnette will share some practical tips for how you can keep yourself and your family safe and secure online. You will learn how to keep your kids safe on social media, how to avoid having to remember hundreds of online passwords (and how to avoid having them hacked), and how to protect your privacy while surfing the Internet. Episode Bonus...
2022-10-1347 minCybersecurity SenseAll About HITRUSTIn this episode, Host William Parks interviews LBMC Shareholder Robyn Barton about HITRUST, what it is, the relationship between HITRUST and HIPAA, and the new HITRUST i1, r2, and bC Assessments.
2022-09-2913 min
The Virtual CISO MomentThe Virtual CISO Moment S4E44 - A Conversation with Mark BurnetteIn this month's special end of month Wednesday episode Mark Burnette, Shareholder-In-Charge at LBMC Information Security, discusses his path from Senior IT Auditor to overseeing and directing LBMC’s Risk Services practice nationwide. He is very active in the information security community, including as co-founder and past president of the Middle Tennessee ISSA chapter (one of the largest in the world), and co-founder and board member of the Southern CISO Security Council. His certifications include CPA, CISA, CISSP, CISM, and CRISC, and he frequently speaks on information security topics, including a fabulous TEDx talk on the Humanity Behind Cyber At...
2022-09-2826 minCybersecurity SenseAIG Cyber Mercenary Group Raises ConcernIn this episode, Host William Parks shares the latest on the new cyber mercenary group, Atlas Intelligence Group or AIG.
2022-08-2312 min
Renegade Marketers UniteTuesday Tips: Content MarketingThis is a Tuesday Tips episode where you will hear host Drew Neisser, CMOs, and other B2B experts share their hard-earned wisdom and fresh marketing insights in a bitesize format. To see the video versions, follow Drew Neisser on LinkedIn or visit our YouTube channel—The Renegade Marketing Hub! And if you're a B2B CMO, check out our thriving community: https://cmohuddles.com/​​ Featuring: Katrina Klier of PROS, Shirley Macbeth of Forrester, Rebecca Stone of Cisco Meraki, Kevin Briody of Edmentum, Amy Messano of Altair, Suzanne Reed of LBMC, Michelle Boockoff-Bajdek of Ski...
2022-05-3105 minCybersecurity SenseRansomware AwarenessIn this episode, Host William Parks shares ransomware awareness tips and cybersecurity best practices to keep your company safe from attacks.
2022-04-2807 min
Channel Up Your Marketing (The ISV Society)The Perspective of a Partner - Part 2Hello all! Welcome to another episode of The ISV Society podcast. And again, I have not 1 but 3 guests this week. This is Part 2 of The Perspective of a Partner with LBMC.Â
My guests are:
Margaret Bolding, Dynamics GP Practice Manager
Elizabeth Spector, Billing Specialist
Sarah Novak, Marketing Manager
It was so great to hear their perspective on things like:
how they engage with ISVs
how they help their clients find the right solution
ISV best practices
I'm so excited for you to hear this episode. And as a...
2022-04-2729 minChannel Up Your Marketing (The ISV Society)The Perspective of a Partner - Part 1Hello all! Welcome to another episode of The ISV Society. I have not 1 but 3 guests this week. I am so excited to have the team from LBMC here with me to chat about working with ISVs.
My guests are:
Margaret Bolding, Dynamics GP Practice Manager
Lise’ Cummings, Microsoft Dynamics Strategic Account Manager
Ashley Kennally, Microsoft Dynamics Strategic Account Manager
It was so great to hear their perspective on things like:
How they engage with ISVs
How do they help their clients find the right solution
ISV best practices
I...
2022-04-1330 minCybersecurity SenseWomen in CyberSecurityTo celebrate Women's History Month, LBMC interviews a panel of our women cybersecurity experts on their unique career journeys, what advice they would give to women looking to work in the field, and goals for the future.Â
2022-03-2428 min
Renegade Marketers UniteCalling All Compelling Content!Can your content cut through? Through the 27 touchpoints in a B2B buyer's journey. Through the flurry of emails hitting everyone's inbox every day. Through the clutter of millions of blogs, social posts, and videos online. It's a heavy task for any company to run a truly remarkable content program, but when done right, it can boost your brand to new heights. In this episode, CMOs Jamie Gier of Ceros, Suzanne Reed of LBMC, and Heidi Bullock of Tealium gather together to discuss all things content marketing. Tune in to learn how to create a content engine...
2022-01-1451 min
Nashville Business RadioTammy Wolcott, LBMC W SquaredTammy Wolcott, LBMC W Squared (Nashville Business Radio, Episode 36) Tammy Wolcott and her sister founded W Squared sixteen years ago to offer fractional business process services. Now as a part of LBMC, the firm provides an integrated financial, accounting, and procurement suite of services which cure back-office headaches and support the growth needs of [...]
2021-11-0432 min
Nashville Business RadioTammy Wolcott, LBMC W SquaredTammy Wolcott, LBMC W Squared (Nashville Business Radio, Episode 36) Tammy Wolcott and her sister founded W Squared sixteen years ago to offer fractional business process services. Now as a part of LBMC, the firm provides an integrated financial, accounting, and procurement suite of services which cure back-office headaches and support the growth needs of […]
The post Tammy Wolcott, LBMC W Squared appeared first on Business RadioX ®.
2021-11-0400 min
RHesenhaVamos olhar para o pĂłs-pandemia e a transição atĂ© lá?Com o avanço da vacinação contra o novo Corona vĂrus ou SARs-Cov2, já Ă© possĂvel vislumbrar um retorno ao trabalho pĂłs-covid. A pandemia nos pegou de surpresa e tivemos que trocar os pneus com o carro em movimento. Agora podemos planejar esse retorno para que seja o mais humanizado e produtivo possĂvel. EntĂŁo, nesse episĂłdio trago algumas dicas para que esse retorno seja planejado, focado nas pessoas e na nova realidade. Quer saber mais? Vem comigo!
Notas do episĂłdio:
1. Evento RH Influence...
2021-06-1524 min
Leading ForwardCommunications, Marketing and Leading Through Change with Suzanne Reed, CMO at LBMCEpisode #13: Suzanne Reed, CMO at LBMC- Communications, Marketing and Leading Through Change Â
In today's episode, Christie sat down with Suzanne Reed. Suzanne is currently the Chief Marketing Officer for the LBMC Family of Companies, the largest professional services firm in Tennessee and ranked in the top 20 across the southeast. She has more than 25 years of experience in the financial services, professional services, and payments industry. Suzanne is an executive business leader with a proven track record of enhancing brand equity, revenue and market share. She champions growth by using an integrated approach to marketing and sales that p...
2021-03-1533 minCybersecurity SenseHiring PerspectivesIn this episode, the LBMC team gives listeners insight into what to expect when interviewing for a role in information security. Learn what qualities hiring managers are looking for as you prepare for your job interview.
2020-12-0842 minCybersecurity SenseInformation Security Careers (Part 2)Part two of our Information Security Careers podcast series. Our panel of experts share their paths to their first infosec jobs and provide advice for pursuing a career in the field.
2020-11-1021 minCybersecurity SenseInformation Security CareersLearn how a few members of the LBMC Information Security team got started in their careers, and what you should consider when going into the field.Â
2020-10-2136 minCybersecurity SenseWhat is the Cybersecurity Maturity Model Certification (CMMC)?In this episode, Caryn Wooley joins us to discuss the Cybersecurity Maturity Model Certification (CMMC). Learn why the Department of Defense created the model to improve security for government contractors and subcontractors. Hear what you can do to start preparing for CMMC today.
2020-10-2128 minCybersecurity SenseBill Dean - Nancy SpizzoNancy Spizzo, Senior Manager at LBMC Information Security, joins Bill Dean to talk about HITRUST and the new LBMC Information Security HITRUST Guide being released later this fall.Â
2020-09-1813 minCybersecurity SensePCI Pen TestingIn this episode Bill Dean and Stewart Fey discuss penetration testing for PCI compliance. Learn about the differences between penetration testing and vulnerability assessments, and what is needed to meet requirements for PCI compliance.
2020-07-1027 minCybersecurity SenseThe Return to a "New Normal"In this episode Nancy Spizzo joins Bill Dean to discuss re-entry to the workplace. They'll discuss what items you should consider from a security and technology perspective as organizations plan to reopen their facilities.Â
2020-05-2021 minCybersecurity SenseThe Impact of Remote Work on IT AuditsIn this episode, Chelsea Smith talks with Bill Dean about the impact of remote work on IT audits during the COVID-19 pandemic.Â
2020-05-0615 minCybersecurity SenseUsing Zoom SecurelyZoom is soaring in popularity as a large population of remote workers are using it for video conferencing. With it's surging popularity, the platform's loose security protocols made it an easy target for hackers to take advantage and disrupt calls. "Zoombombing" allowed anyone to login to unprotected links to intrude on the calls often sharing lewd photos and videos. Listen to our most recent podcast to hear what you can do to use Zoom securely.Â
2020-04-2221 minCybersecurity SenseNot All Phishing Assessments Are EqualIn this episode, LBMC's cybersecurity experts discuss the topic of social engineering via phishing. Learn the difference in using phishing software solutions versus penetration testing services for your cybersecurity program.
2020-04-1016 minCybersecurity SenseMFA is NOT a Silver BulletLBMC Cybersecurity expert, Derek Rush, joins Bill Dean as they discuss the benefits and limitations of multi-factor authentication.Â
2020-04-1018 minEnterprise Software PodcastEnterprise Software Podcast Episode 109 – Charles Sterling and the Power Platformhttp://traffic.libsyn.com/enterprisesoftwarepodcast/episode109.mp3
Â
LBMC Technology Solutions Merges with Charlotte-based InterDyn ArtisÂ
Â
Charles (Chuck) Sterling – Senior Program Manager at Microsoft:
LinkedIn / Twitter / Blog
Â
http://www.summiteurope.comÂ
Daniel’s BroilerÂ
Â
The post Enterprise Software Podcast Episode 109 – Charles Sterling and the Power Platform appeared first on Enterprise Software Podcast.
2020-01-1000 min
Cybersecurity SenseLBMC HITRUST Conference RecapThe LBMC Information Security team recaps the 2019 HITRUST conference that was held in Texas in May. The team talks about the latest news on third-party assurance, HITRUST CSF adoption and controls implementation, SOC 2 + HITRUST, and the latest initiatives in the quality sub committee.
2019-08-1620 min
Cybersecurity SenseKey Insights on PCI DSS Version 4.0In this podcast, LBMC Information Security's Mark Burnette offers a summary and perspective on the council's insights—specifically addressing the three likely changes for the next version of the PCI DSS.
2019-05-3013 min
Cybersecurity SenseNew Tools for PCI ComplianceIn this podcast, LBMC Information Security's Bill Dean and John Dorling discuss some of the new tools available to help merchants who are trying to achieve PCI compliance.
2019-05-1515 min
Cybersecurity Sense2018 Was Second-Most Active Year for Data Breaches2018 was one of the biggest years for data breaches to date, with more than 6,500 data breaches reported throughout the year. In this podcast, LBMC Information Security's Bill Dean dives deeper into these recent data breach statistics and why it's important to keep investing in the hard work involved with combating cyber-attacks to prevent data breaches in the days to come.
2019-03-2010 min
Cybersecurity SenseTargeted Attacks Compared to Opportunistic AttacksAll companies are subject to opportunistic attacks, but do you know if you are subject to a targeted attack based on the data you generate or maintain? In this podcast, LBMC Information Security's Bill Dean addresses this question while diving deeper into the key differences between targeted attacks and opportunistic attacks.
2018-10-0308 min
Cybersecurity SenseIncident Response Should Be Common SenseSince incident response issues are no longer just an IT issue and can often involve legal issues, it is important for organizations to develop an incident response team, seek outside expertise, and have an overall action plan in the event of an incident. In this podcast, LBMC Information Security's Bill Dean discusses how a complex situation like incident response can be purely based on common sense.
2018-08-1607 min
Cybersecurity SenseAttack SimulationIn a previous podcast, we discussed purple-teaming as it compares to a conventional penetration test. Let's now build on that approach, starting with the differences between attack simulation and conventional penetration tests. The methodology of attack simulation is the assumption that the network or a system will become compromised and the current controls will not prevent the infection. So, how does attack simulation differ from purple-teaming? With purple-teaming, everyone know what controls are being tested and when. The attack simulation is a bit different, asthe focus is the emulation of a specific attacker group and their methods o...
2018-07-1806 min
Cybersecurity SensePurple-TeamingMost penetration testers are considered "red team," while most defenders are considered "blue team." Thus, the irony of a conventional penetration test is that these two groups are typically pitted against each other. When the red teams and blue teams are working together, you have what's called a "purple team." While purple-teaming has not always been a thing, it can be a win for both groups. Purple-teaming has now become somewhat of a buzzword. However, the effort behind it has great merit and value. In this podcast, LBMC Information Security's Bill Dean helps purple-teaming, as well some...
2018-07-1006 min
What's Your "And"?141: Hannah Horton and Abby Parsons fiddle their way to better coworker relationships [podcast]Hannah Horton had owned a fiddle since she was young but could never find somewhere to take lessons. Then she moved to Nashville, started working at LBMC and was staffed on a client with Abby Parsons. One day it came up that Abby also had always wanted to try to learn to play, so they decided to sign up for lessons. Not only did this give them a reason to look forward to Saturdays during busy season, but it helped them in ways they couldn't have imagined. In this episode, Hannah, Abby, and I talk about how...
2018-06-2019 min
Cybersecurity SenseGDPR and Preparing for DSARsThe EU's General Data Protection Regulation (GDPR) permits users certain rights (referred to as "data subject access rights" or "DSARs" in the documentation) that organizations will need to be prepared to accommodate if they must comply with GDPR. For organizations to be prepared to respond, it's important to have a clear understanding of DSARs before you risk consuming too much time, money, and resources in efforts to remain compliant. In this podcast, LBMC Information Security's Drew Hendrickson shares some considerations for how to prepare and respond when a customer chooses to request action on one of their new...
2018-05-0815 min
Cybersecurity SenseGDPR—How to PrepareAs organizations determine whether the E.U.'s General Data Protection Regulation (GDPR) is applicable to them, there are several important things to consider when it comes to compliance. Among those things involves preparing for and responding to personal data breaches which is not just a requirement of the GDPR; it's a good business practice in general), data consent, and how you are protecting our data (like data pseudonymisation). With GDPR, personal data is defined a bit differently, which means there's potentially much more data for organizations to protect. In this podcast, LBMC Information Security's Drew Hendrickson h...
2018-05-0816 min
Cybersecurity SenseDoes GDPR Apply to Me?As the May 25, 2018 GDPR enforcement date fast approaches, many organizations are asking, "How does the GDPR will apply to my organization?" As the GDPR extends to U.S. organizations that offer services to or monitor behaviors of E.U. citizens, it's important to understand how to classify your organization's data to determine GDPR applicability. While the GDPR presents new challenges for organizations storing or processing personal data, maintaining compliance with the proper guidance is essential. In this podcast, LBMC Information Security's Drew Hendrickson explains GDPR, how it can apply to you, and why GDPR compliance matters.
2018-05-0814 min
Cybersecurity SenseWhy Employees Are Your Number One RiskThe question is not, "Will your employees will get your company hacked?" but rather "When will your employees get your company hacked?" A recent article from HITECH Answers highlights this sad reality of human-error being the most common reason for a cyber intrusion and data compromise. So, while employee actions can circumvent most every security control you have invested in, security awareness training is critical to prevent your employees from being your number one risk. Users are often the last line in your cyber-defense efforts, and there is no patch for people wanting to be helpful or w...
2018-04-1909 min
Cybersecurity SensePhishing Emails with 100% Click RateIn a recent report from Wombat Security Technologies based on data from millions of simulated phishing attacks, it was found that 76% of organizations said they experienced phishing attacks in 2017, and nearly half of information security professionals said that the rate of attacks increased from 2016 to 2017. F-Secure also recently released research data indicating that over one-third of security incidents start with phishing emails or malicious attachments sent to company employees. In this podcast, LBMC Information Security's Bill Dean digs into these research findings and shares some reasons why training employees to spot phishing emails, messages, and pre-texting calls can...
2018-04-1006 min
Cybersecurity SenseIIA Knoxville—Implementing Cloud-Managed SecurityWhen cloud-managed security was first introduced, there was some concern about the levels of security as compared to the security of data on an organization's premises. Today, security professionals have implemented the appropriate controls to help could-based data management be safe and effective. As many organizations are now embracing and migrating to the cloud, it is important to know the risks and proper controls associated with the movement. In this podcast from the Institute of Internal Audit meeting in Knoxville, LBMC Information Security's Bill Dean and Sese Bennett discuss the effectiveness and concerns surrounding migrating to cloud-managed...
2018-04-1007 min
Cybersecurity SenseIIA Knoxville—Risky BusinessNo matter the industry—government, healthcare, financial, or even smaller, mom-and-pop businesses—each deal with some type of sensitive customer information, and each has decisions to make when it comes to managing risk. Most security and audit frameworks (HIPAA, ISO, PCI, NIST, SOC 2, etc.) have requirements for risk assessment, making them one of the first things auditors or regulators ask for. Many companies are still using spreadsheets when it comes to performing risk assessments, which can be ineffective and insecure. Such a lack of functionality can keep a company from moving beyond assessment and into true risk management. In...
2018-03-1907 min
Cybersecurity SenseIIA Knoxville—Dear President Trump: How to Secure the United States & Demonstrate That Your Company IsIn the information security world, we all wish we had more access to senior executives. Following that logic, if you're responsible for security at your organization, and you are lucky enough to ride on the same elevator with a senior executive from your company, you should be prepared with your "elevator pitch" on what to say about improving the cybersecurity posture of the organization. When asked, you want to have your message fine-tuned and be able to communicate it clearly and succinctly (before the elevator reaches the parking garage). In this podcast, LBMC Information Security's Mark Burnette d...
2018-03-1207 min
Cybersecurity SenseSOC for Cybersecurity—An Interview from IIA KnoxvilleThe AICPA Cybersecurity Working Group brought to life a new type of cybersecurity examination report in 2017 known as SOC (System and Organization Control) for Cybersecurity. These reports are intended to provide a consistent approach for evaluating and reporting on an entity's cybersecurity risk management program and give management the ability to consistently describe its cybersecurity risk management program. Additionally, the flexibility of the reports allows management to use any recognized security framework as a baseline while enabling a CPA to provide independent assurance on the effectiveness of the program's design. In this podcast from the Institute of...
2018-03-0505 min
Cybersecurity Sense5 Reasons Why Organizations Don't Detect a Cyber BreachIncident response consultants are often contacted by clients who are in complete shock that their systems or networks have been compromised. Many times, these clients are hoping our analysis will ultimately prove that the incident was just a "flesh wound" to their systems and that they didn't experience an actual data breach. It's quite common for organizations to assume that data breaches won't happen to them, and consequently, they typically don't have an incident response plan. Not only do organizations need an incident response plan, but they also need to test it via incident response tabletop exercises...
2018-01-1809 min
Cybersecurity Sense2017 Year-End Healthcare Breach ReviewIn comparison to previous years, 2017 was a good year as the number of healthcare records compromised was significantly down. As of December 30, there had been 341 breaches reported, affecting a little less than 5 million individuals. This compares to 327 breach reports in 2016 but with 16.6 million individuals affected. When this information is contrasted with 2015 statistics, fewer breaches (268) were reported, however more than 113 million patients were affected. So, why the significant drop in affected individuals? In this podcast, LBMC Information Security's Mark Fulford offers some leading theories for these statistics, as well as a quick rundown of the top five healthcare...
2018-01-1211 min
Cybersecurity SenseLaw Firms are Cybersecurity TargetsA recent report from cybersecurity firm, FireEye revealed that Chinese hackers have been actively targeting a shortlist of multinational law firms since at least June of 2017. This was an apparent effort to spy on lawyers and steal confidential information, proving that not only are law firms targets of nation states, but attackers are also keeping up with current news, using well-designed phishing campaigns that contain references to pertinent, high-profile U.S. news stories. Although law firm data breaches are not often in the news, they are happening at an alarming rate, and cybersecurity professionals need to be aware and...
2017-12-1907 min
Cybersecurity SenseSOC for CybersecuritySince business leaders and board members are not often technically-inclined, they tend to have many questions about cybersecurity. Because of this, the AICPA recently recognized the need for a new type of cybersecurity examination report and put together a task force to bring to life what's now known as SOC (System and Organization Control) for Cybersecurity. These reports will be beneficial in giving business leaders and board members an independent assurance and solid understanding of risk management and working with third-party cybersecurity professionals. In this podcast, LBMC Information Security's Mark Burnette and Drew Hendrickson discuss SOC for...
2017-12-1223 min
Cybersecurity SenseInformation Security Questions for SMBsA key observation that can be made within the information security industry today is that cybersecurity is not extremely difficult, it is just hard and requires long-term dedication, focus, and commitment. Considering this observation, a key question all cybersecurity professionals must ask is, "If you don't know where you are, how do you know where you need to improve?" Knowing the answer to this question is essential for beginning or enhancing an organization's cybersecurity program. In this podcast, LBMC Information Security's Bill Dean discusses some information security basics that many organizations are overlooking. Bill also walks through...
2017-12-0510 min
Cybersecurity SenseCloud Storage and User Authentication Compromises: Managing the Integrity of Your DataOften in the information security industry, professionals can be accused of spreading fear, uncertainty, and doubt with cybersecurity concerns. However, considering the implications of integrity attacks, it is essential to pay close attention to them. As more organizations move to cloud storage, user authentication compromises are increasing. If an organization has sensitive information that can be accessed from anywhere online by simply using a username and password, that information is at risk, and organizations should make an effort to make their networks more secure. Â In this podcast, LBMC Information Security's Jason Riddle and Mark Fulford discuss the g...
2017-11-2715 min
Cybersecurity SenseManufacturing and Industrial Sectors Are Cybersecurity TargetsAs operational technology (OT) networks are used with specialized Industrial Control Systems (ICS) to monitor and control physical processes such as assembly lines, mixing tanks, and blast furnaces, these networks have become ripe targets for adversaries. The lack of basic protections like antivirus can enable attackers to quietly perform reconnaissance before sabotaging these physical processes and compromising industrial devices. Once attackers have compromised an OT network, it is easier for them to learn how the equipment is configured and eventually manipulate it. Â In this podcast, LBMC Information Security's Bill Dean discusses how the manufacturing and i...
2017-11-1307 min
Cybersecurity SenseAttacking the InfoSec Supply ChainThough not in the recent limelight, it's no secret that espionage from nation states is happening once again. With sophisticated attacks on InfoSec supply chain companies in 2012, 2013—and as recently as the past few months—many people are left wondering who would target these specific companies? In the end, we know that despite agreements between countries, we have valuable intel within the United States that these attackers are seeking.  In this podcast, LBMC Information Security's Bill Dean offers valuable insight on attackers who focus on the InfoSec supply chain.  Listen, and discov...
2017-11-0108 min
touch point podcastTP39 - Cyber Security Risks for HospitalsFor hospitals and health systems trying to embrace the digital age, it’s important to understand the pros and cons of such an approach. In this episode, hosts Chris Boyer and Reed Smith discuss a very important topic: data and cyber security risks. Tasked with protecting HIPAA and PHI, the constant pressure to keep data safe and secure is critical. Chris and Reed share ways in which, CIOs and IT departments are adapting their tools and processes to adopt a safe digital environment while meeting the pressing demand by consumers for more open and transparent digital communications. They welcome da...
2017-11-011h 10
Cybersecurity SenseKaspersky vs the U.S. GovernmentFor the past 20 years, Kaspersky Lab has provided deep threat intelligence and security expertise for businesses, critical infrastructure, governments, and consumers around the globe. More than 400 million users benefit from protection services provided by Kaspersky, in addition to approximately 270,000 corporate clients. Recently, Kaspersky has found itself under question from the U.S. Government regarding accusations that the company is hiding backdoors into its software to help Russia spy on high-profile users. In fact, the U.S. Government removed Kaspersky from its approved vendor list, citing spying concerns as the reason. Â In this podcast, LBMC Information Security's Bill D...
2017-10-0309 min
Cybersecurity SenseRansomware and Unintended DisclosureWhen an organization experiences a data breach, one would hope that a quick recovery is ideal, right? But, did you know that there are instances when a quick breach recovery can hurt an organization? For one healthcare facility, this was the case, as it fell prey to a ransomware attack. While the organization was able to quickly recover operations, it recovered so quickly that it failed to preserve needed evidence for proper forensic analysis. So, what did this organization do as a result? In this podcast, LBMC Information Security's Bill Dean explains how quick breach recovery hurt...
2017-09-2409 min
Cybersecurity SenseRisk of Email Data BreachesSadly, email data breaches continue to be an increasing problem for businesses and organizations who retain large amounts of sensitive client and customer data. In fact, more than 700 million email accounts and millions of associated passwords were recently leaked in the biggest spambot dump ever. Breaches of this scale and impact have happened to Dropbox, LinkedIn, and Adobe in the past few years. So, what is the risk to your organization? In this podcast, LBMC Information Security's Bill Dean discusses the numerous ways these data breaches are also a risk to your organization. Take a...
2017-09-1410 min
Cybersecurity SenseThe Risks of Remote AccessRemote access to networks has become commonplace in today's IT environments, as this access is mainly used for IT support, power users, and developers. While this capability can be provided in a safe and secure manner, it can also be deployed in a manner that leaves the organization at great risk. When Remote Desktop is enabled, attackers can brute force administrator credentials, because you can't lock out the administrator account due to excessive failed logins. With this access, an organization's entire network could be at risk of compromise and data theft. In this podcast, LBMC Information Security's...
2017-08-2909 min
Cybersecurity SenseAttacker Dwell TimeEspecially for healthcare IT systems, cyber attacks can lead to the exposure of patient data, service disruptions, time-consuming recovery processes, and high costs in the form of paying a ransom or spending money on new servers, security systems, or consultants. However, that is only when an organization is aware of the breach. Some network breaches can go on for months or even years before an organization learns about it, and these can even be organizations that take information security very seriously with compliance requirements, appropriate budgets, and talented security personnel. The time elapsed between the initial breach...
2017-08-2208 min
Cybersecurity SenseCombating Insider ThreatsIt's true—insider threat events are typically much less frequent than external attacks. However, insider threats often pose a much higher severity of risk for organizations when they do happen. As insiders are given access to sensitive information for work purposes, there's a great potential for them to do a tremendous amount of damage to a business if they accidentally break policy or choose to steal. Even more, it has been reported that nearly a third of all organizations still have no capability to prevent or deter an insider incident or attack.  In this podcast, LBM...
2017-08-0809 min
Cybersecurity SenseBusiness Email Compromise: When The Threat is InternalSince January of 2015, all 50 of the United States have reported an increase in business email compromise (BEC) attacks—a 1,300 percent increase, to be exact. Even worse, organizations have reported a loss of nearly one billion dollars. With everyone now being a potential target, it's been noted that reconnaissance, social media, and social engineering has played a crucial role, as cyber thieves monitor and learn an organization's "system."  In this podcast, LBMC Information Security's Bill Dean addresses BEC attacks and offers a few solutions for how to combat business email attackers.  Listen in a...
2017-08-0812 min