RunAs Radio

How does AI change the intranet? Richard chats with Susan Hanley about her work helping organizations build great intranets and how tools like M365 Copilot are changing the intranet. Susan talks about the new reality of an intranet, where some users no longer go to the intranet directly but use an agent to retrieve the information they need. This impacts search statistics, but also means it's important to write pages that an agent can easily understand. The conversation also dives into the bane of all intranets - archiving data. LLMs can help with organizing data, but getting stale data out of view is essential. There are also retention policies and governance, and there's a role for these tools there too - the intranet is evolving!

What if Microsoft Defender not only detected attackers - but also fought back? Richard talks to Liz Tesch about Microsoft Defender Automatic Attack Disruption and Predictive Shielding. Liz talks about how attacks are often detected before the payload executes, but by the time humans can respond, far more damage has been done. Automatic Attack Disruption acts immediately on detection to limit the attacker by locking accounts, restricting access on a compromised server, and more. Predictive Shielding goes a step further by limiting attackers' ability to respond to the disruption by turning off GPO changes, disabling safe mode, and otherwise interfering with the typical actions that attackers take once they know they have been detected. Add AI to the mix, and everything gets more complicated. The black hats are using AI to attack, and Microsoft Defender XDR is using it to defend - the race is on!

The risk of ransomware is real - are you ready? Richard talks with Heather Renze about her experiences dealing with a ransomware attack and how to get prepared when it happens to you. Heather talks about how ransomware has evolved into a business that has operators, affiliates, and even tech support. Making a plan is essential - involving finance, legal, and IT. Cyberinsurance plays a big role, as do regulatory bodies - it depends on the business you're in. But your plan needs to know three essential things: what breaks first, how long your company can function with it broken, and who can decide on what to do next in the first hour of the event. The plan may or may not work perfectly, but not having a plan is far worse. Get ready!

Bringing new software or SaaS into your organization is a security risk - how do you assess it? Richard chats with Jessie Schofer about her experiences in HR software acquisition, which led to the creation of secureless.ai. Jessie tells the story of evaluating various SaaS and other software products and realizing that, while the website says they are compliant with GDPR and/or SOC 2, are they really? This leads to a conversation about the product procurement process and about actually understanding the security risk you take on every time a new product is added to your organization. At what point does security block an acquisition? And after being acquired, how often do you reassess? Supply chain security hygiene starts at procurement - are you part of the evaluation?