『The ITSM Practice: Elevating ITSM and IT Security Knowledge』のカバーアート

The ITSM Practice: Elevating ITSM and IT Security Knowledge

The ITSM Practice: Elevating ITSM and IT Security Knowledge

著者： Luigi Ferri
無料で聴く

概要
 Join Luigi Ferri, an experienced ITSM & IT Security Professional, in 'The ITSM Practice.' Explore IT Service Management and IT Security, uncovering innovations and best practices with insights from leading organizations like Volkswagen Financial Services, Vodafone, and more. Each episode offers practical guides and expert discussions for learning and growth. Ideal for all ITSM and IT Security Professionals! Stay Connected: LinkedIn: https://www.linkedin.com/in/theitsmpractice/ Youtube: https://www.youtube.com/@theitsmpractice Website: http://www.theitsmpractice.comLuigi Ferri
エピソード
  • AI Is Faster Than Your CAB: Are You Ready for an AI Incident?

    AI Is Faster Than Your CAB: Are You Ready for an AI Incident?
    2026/11/10

    AI adoption is moving faster than traditional IT security processes. But can your organization recognize and respond to an AI incident? Discover how CISOs can manage Shadow AI, embedded AI, prompt injection, and autonomous AI agents. Learn how to strengthen AI governance, improve incident response, identify AI security risks, and build practical AI incident response playbooks aligned with ISO 27001 and OWASP guidance.


    In this episode, we answer to:

    How can CISOs identify and manage AI security incidents that traditional cybersecurity incident response processes might miss?

    How can organizations detect and control Shadow AI, embedded AI, and unauthorized AI tools to reduce security and data privacy risks?

    How can CISOs prepare incident response teams to handle prompt injection attacks, autonomous AI agents, and AI-related security incidents?


    Resources Mentioned in this Episode:

    OWASP GenAI Security Project, guide "GenAI Incident Response Guide 1.0", link https://genai.owasp.org/resource/genai-incident-response-guide-1-0/


    International Organization for Standardization (ISO), standard "ISO/IEC 27001:2022 – Information Security, Cybersecurity and Privacy Protection — Information Security Management Systems — Requirements", link https://www.iso.org/standard/27001


    OWASP GenAI Security Project, article "LLM01:2025 Prompt Injection", link https://genai.owasp.org/llmrisk/llm01-prompt-injection/


    American Bar Association, article "BC Tribunal Confirms Companies Remain Liable for Information Provided by AI Chatbot", link https://www.americanbar.org/groups/business_law/resources/business-law-today/2024-february/bc-tribunal-confirms-companies-remain-liable-information-provided-ai-chatbot/


    Connect with me on:

    LinkedIn: https://www.linkedin.com/in/theitsmpractice/

    Website: http://www.theitsmpractice.com

    And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.


    Credits:

    Sound engineering by Alan Southgate - http://alsouthgate.co.uk/


    Graphics by Yulia Kolodyazhnaya
    続きを読む 一部表示
    15 分
  • Your SOC Doesn’t Need Another Dashboard. It Needs to Act Faster.

    Your SOC Doesn’t Need Another Dashboard. It Needs to Act Faster.
    2026/11/03

    Is your Security Operations Center detecting threats but responding too slowly? In this episode of The ITSM Practice Podcast, Luigi Ferri explores why more security tools and dashboards won't fix inefficient SOC operations. Discover how better security visibility, SOC automation, incident response training, and clear decision-making can accelerate threat detection and containment, reduce operational risks, and improve cybersecurity performance for MSPs and MSSPs.


    In this episode, we answer to:

    Why is your Security Operations Center still too slow despite having advanced cybersecurity tools, SIEM, and EDR solutions?

    How quickly can your SOC analysts connect security alerts, understand cyber threats, and contain incidents before attackers cause damage?

    How can MSPs and MSSPs improve SOC efficiency through security automation, incident response training, and clearly defined decision-making authority?


    Resources Mentioned in this Episode:

    HashiCorp website, article "The Risks of Cybersecurity Tool Sprawl and Why We Need Consolidation", link https://www.hashicorp.com/en/blog/the-risks-of-cybersecurity-tool-sprawl-and-why-we-need-consolidation


    Trend Micro website, eBook "Reduce Complexity Through Cybersecurity Consolidation", link https://www.trendmicro.com/content/dam/trendmicro/global/en/research/23/j/reduce-complexity-cybersecurity-consolidation/cybersecurity-consolidation-ebook.pdf


    Netenrich website, article "Security Tool Consolidation", link https://netenrich.com/blog/security-tool-consolidation


    Sayers website, article "Cybersecurity Consolidation and Platformization: Strategic Insights for CISOs", link https://www.sayers.com/blog/cybersecurity-consolidation-and-platformization-strategic-insights-for-cisos


    Red Canary website, article "Tool Consolidation with Microsoft", link https://redcanary.com/blog/microsoft/tool-consolidation-microsoft


    Palo Alto Networks website, article "What Is Cybersecurity Platformization?", link https://www.paloaltonetworks.com/cyberpedia/what-is-cybersecurity-platformization


    Connect with me on:

    LinkedIn: https://www.linkedin.com/in/theitsmpractice/

    Website: http://www.theitsmpractice.com

    And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.


    Credits:

    Sound engineering by Alan Southgate - http://alsouthgate.co.uk/


    Graphics by Yulia Kolodyazhnaya
    続きを読む 一部表示
    15 分
  • Is Your Security Team Built Around Vendors?

    Is Your Security Team Built Around Vendors?
    2026/10/27

    Is your cybersecurity team built around security capabilities or vendor products? In this episode of The ITSM Practice Podcast, Luigi Ferri explores why CISOs should prioritize security skills, detection and response, identity security, and operational resilience over vendor-specific expertise. Discover how to build adaptable cybersecurity teams, reduce vendor dependency, eliminate knowledge silos, and align security technology with business risks and strategic objectives.


    In this episode, we answer to:

    How can CISOs build cybersecurity teams around security capabilities rather than vendor-specific technologies?

    How can organizations reduce vendor dependency, eliminate knowledge silos, and improve cybersecurity operational resilience?

    Should mid-market organizations develop cybersecurity expertise internally or leverage MSPs, MSSPs, and external security specialists?


    Resources Mentioned in this Episode:

    Meriplex website, article “Cybersecurity Services for Mid-Market Businesses: What You Really Need in 2025”, link: https://meriplex.com/cybersecurity-services-for-mid-market-businesses/


    HashiCorp website, article “The Risks of Cybersecurity Tool Sprawl: Why Consolidation Is a Strategic Priority”, link: https://www.hashicorp.com/en/blog/the-risks-of-cybersecurity-tool-sprawl-and-why-we-need-consolidation


    MES Computing website, article “What Midmarket CIOs Must Prove By EOY 2026: Fewer Platforms, Faster Security, Measurable Outcomes”, link: https://www.mescomputing.com/news/2026/business/what-midmarket-cios-must-prove-by-eoy-2026


    CyberNeurix website, article “Security Tool Consolidation in 2026: Why CISOs Are Deleting Tools Instead of Buying Them”, link: https://blogs.cyberneurix.com/blog/security-tool-consolidation-2026/


    Red Canary website, article “Why CISOs Under Consolidation Pressure Are Embracing Microsoft Security Solutions”, link: https://redcanary.com/blog/microsoft/tool-consolidation-microsoft


    Bitdefender website, article “The Security Platform Is Dead. Long Live the Security Platform.”, link: https://businessinsights.bitdefender.com/security-platform-is-dead-long-live-security-platform


    Connect with me on:

    LinkedIn: https://www.linkedin.com/in/theitsmpractice/

    Website: http://www.theitsmpractice.com

    And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.


    Credits:

    Sound engineering by Alan Southgate - http://alsouthgate.co.uk/


    Graphics by Yulia Kolodyazhnaya
    続きを読む 一部表示
    14 分
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません