1 00:00:00,000 --> 00:00:06,640 All right, so today we're diding into something that I think we can all relate to keeping our digital stuff safe. 2 00:00:06,640 --> 00:00:12,560 Definitely important. Yeah, and we've got some interesting excerpts to dig into. 3 00:00:12,560 --> 00:00:19,040 Let's just say the title 004, Chris Domain 7, section 5.pdf, isn't exactly catchy. 4 00:00:19,040 --> 00:00:23,440 Right, not exactly a page turner title. But I have a feeling there's good stuff in there, 5 00:00:23,440 --> 00:00:26,240 especially since they keep mentioning this whole media management thing. 6 00:00:26,240 --> 00:00:31,520 It seems like they're talking about more than just hitting Chrisville plus S every few minutes, right? 7 00:00:32,080 --> 00:00:35,920 What do you make of that whole long-term needs thing they keep going on about? 8 00:00:35,920 --> 00:00:40,160 Yeah, it's definitely more nuanced than just like making backups. It's almost like, 9 00:00:40,160 --> 00:00:44,160 imagine you're building a library. You wouldn't just dump books on shelves. Definitely not. 10 00:00:44,160 --> 00:00:48,800 I'm all about organizing by color. There you go. So, media management is kind of like that, 11 00:00:48,800 --> 00:00:53,280 but for your digital life, operating system images, those software installations you need, 12 00:00:53,280 --> 00:00:59,120 and yeah, backups too, obviously. But this source, they're really pushing us to think long-term, 13 00:00:59,760 --> 00:01:05,680 how confidential does this need to be, how fast might I need to get to it later on? Even down to, 14 00:01:05,680 --> 00:01:09,680 like, how long is this storage method actually going to last? So, it's not just about having 15 00:01:09,680 --> 00:01:13,840 the files somewhere. It's about being able to actually access them. Maybe even years from now, 16 00:01:13,840 --> 00:01:19,760 if you need to, what surprised you about their take on all that? Honestly, it's the variety of 17 00:01:19,760 --> 00:01:24,000 what they lump under media. Obviously, you've got your hard drives, clouds, stuff, all that. But 18 00:01:24,000 --> 00:01:29,680 they even talk about paper, actual paper, in 2024. You know, I remember seeing that kind of being 19 00:01:29,680 --> 00:01:33,440 like, wait, really? But they weren't messing around where they're. Not even a little. They actually 20 00:01:33,440 --> 00:01:38,320 make a really good point, especially for really sensitive info. Which gets into this thing that I find 21 00:01:38,320 --> 00:01:45,680 so interesting. Everyone thinks of cybersecurity is all high tech, ones and zeros, but this document 22 00:01:45,680 --> 00:01:52,560 seems to be saying the real world matters just as much. 100%. They talk about, get this, 23 00:01:52,560 --> 00:01:59,440 meantime between failure MTBF, which in plain English, is how long until your storage method 24 00:01:59,440 --> 00:02:04,480 kicks the bucket. And they really hammer home that you've got to factor that in when you're deciding 25 00:02:04,480 --> 00:02:09,760 what to store and how. So, like, a hard drive might be fine for your average files, but something 26 00:02:09,760 --> 00:02:15,600 irreplaceable, maybe you want something a bit more long lasting. Exactly. They even bring up 27 00:02:15,600 --> 00:02:20,640 a fireproof safe, might sound old school, but if your house burns down in your backups or toast, 28 00:02:20,640 --> 00:02:24,480 you're going to wish you'd got old school. Exactly. And that plays into their whole layered 29 00:02:24,480 --> 00:02:29,520 defense thing later. One security measure isn't enough. You need multiple layers backing each other 30 00:02:29,520 --> 00:02:33,040 up just in case. Okay. Now we're talking, what kind of layers are we even talking about here? 31 00:02:33,040 --> 00:02:37,440 Is this where it gets super techy? We'll keep it understandable, don't worry. But yeah, they 32 00:02:37,440 --> 00:02:43,040 break it down into categories. First up, policies and procedures. This one's less about gadgets, 33 00:02:43,040 --> 00:02:48,240 more about behavior, like who gets to access what data, how do you handle it, all that? 34 00:02:48,240 --> 00:02:52,960 It's setting the ground rules for your digital life. So, even if you have all the fancy security 35 00:02:52,960 --> 00:02:59,760 software, if someone's password is on a sticky note. Game over. Human error, still a huge factor. 36 00:02:59,760 --> 00:03:04,560 They actually spend a good chunk of the document on that. Which makes sense. Okay. So, one layer is 37 00:03:04,560 --> 00:03:09,120 the human element. What else do they focus on? Well, they talk about access control systems, 38 00:03:09,120 --> 00:03:13,840 passwords, biometrics, all that jazz. And they get into the nitty gritty of different approaches, 39 00:03:13,840 --> 00:03:18,640 which I found pretty interesting. And I'm guessing this is where it gets pretty specific to tech, right? 40 00:03:18,640 --> 00:03:23,440 It does. But they do a good job of explaining it in a way that's relevant, even if you're not a 41 00:03:23,440 --> 00:03:29,760 coder. Like the easy example of a bank vault to explain multifactor authentication. You got the 42 00:03:29,760 --> 00:03:34,400 vault door that's your password. But then you've got the security guard who checks your ID and key 43 00:03:34,400 --> 00:03:38,640 card before they even let you near it the second factor. You know, it's funny. I'm realizing this 44 00:03:38,640 --> 00:03:43,760 document is just as much about psychology as it is technology. Like they really want you to get the 45 00:03:43,760 --> 00:03:50,080 Y behind this stuff, not just the how to. For sure. Because at the end of the day, it's about protecting 46 00:03:50,080 --> 00:03:55,120 what's valuable to you. And speaking of valuable, that's another thing the document gets into. And 47 00:03:55,120 --> 00:03:59,280 it's not just about protecting your gadgets. It seems like they're saying we need to rethink what 48 00:03:59,280 --> 00:04:05,280 valuable even means in the digital age. Yeah, they really get into this whole tangible versus 49 00:04:05,280 --> 00:04:10,320 intangible assets thing. All right, break that down for me. Tangible assets. That's like the easy stuff, 50 00:04:10,320 --> 00:04:15,440 right? My laptop, my phone, all that. Exactly. The physical stuff. But here's what gets interesting. 51 00:04:15,440 --> 00:04:21,120 They specifically call out software licenses. Like that old CD in your drawer could be worth more 52 00:04:21,120 --> 00:04:26,320 than you think. Oh, man. I've got to stack of those from like the early 2000s nostalgia and 53 00:04:26,320 --> 00:04:31,680 dee valuable. See, this is why I love these deep dives. Right. But it's the intangible assets that 54 00:04:31,680 --> 00:04:36,160 I thought were really interesting. Patents copyrights, the company's reputation. All that's if you 55 00:04:36,160 --> 00:04:41,120 can't actually hold, but still super important. So if I'm hearing you right, if I'm a small business owner, 56 00:04:41,120 --> 00:04:46,320 that means my website design, my customer list, even the name I probably spent weeks stressing over. 57 00:04:46,960 --> 00:04:52,080 Those are all assets I need to protect just as much as my laptop. Exactly. The source even talks 58 00:04:52,080 --> 00:04:58,640 about things like brand loyalty and customer relationships as intangible assets. They say in this 59 00:04:58,640 --> 00:05:03,600 day and age, those can make a break you. Which makes sense when you think about it. Like a 60 00:05:03,600 --> 00:05:09,520 beta breach that leaks customer info that can do some serious damage to a company. Absolutely. 61 00:05:09,520 --> 00:05:15,200 And that loops back to their whole thing about a holistic approach to protection. It's not just 62 00:05:15,200 --> 00:05:20,480 firewalls and encryption. It's having good policies in place, training your employees, building 63 00:05:20,480 --> 00:05:24,880 that culture of security. It's like they say you can have the strongest fortress in the world, 64 00:05:24,880 --> 00:05:27,920 but if you leave the gate open. Exactly. It's about thinking ahead, 65 00:05:28,720 --> 00:05:34,160 really anticipating those threats and having a plan. Which is probably good advice for like life 66 00:05:34,160 --> 00:05:39,600 in general, not just cybersecurity. Probably true. So ready for another security layer they get into. 67 00:05:39,600 --> 00:05:44,240 This was especially interesting in our super connected world. Lay it on me, expanding my digital 68 00:05:44,240 --> 00:05:48,480 vocabulary today. All right. So you've got data at rest, which we kind of touched on earlier, 69 00:05:48,480 --> 00:05:52,880 that's the data just chilling in your hard drive and the cloud, whatever. Locked up tight, ideally. 70 00:05:52,880 --> 00:05:58,240 Right. Then you've got data in transit. Anytime data is moving across networks like when you send an 71 00:05:58,240 --> 00:06:03,680 email or even just load a website. So I'm guessing that's all about making sure those pathways 72 00:06:03,680 --> 00:06:08,720 are secure. You got encryption is key there. The source actually says that data in transit is more 73 00:06:08,720 --> 00:06:14,320 vulnerable than data at rest. Because it's literally out there for anyone who knows what they're doing 74 00:06:14,320 --> 00:06:19,440 to try and grab. So what they're saying is don't send your credit card number on a postcard. 75 00:06:19,440 --> 00:06:22,880 Pretty much. They don't get two into the weeds on the specifics of encryption methods, 76 00:06:22,880 --> 00:06:27,280 which honestly I appreciate. The takeaway is just be aware where your data's going and how it's 77 00:06:27,280 --> 00:06:32,880 being protected. Makes sense. Okay. So we've got data hanging out on our devices, data out there 78 00:06:32,880 --> 00:06:36,720 exploring the internet. There's going to be one more category, right? There is. And this one's 79 00:06:36,720 --> 00:06:43,280 interesting because it's the trickiest to really get your head around. They call it data in use. 80 00:06:43,280 --> 00:06:47,440 Data in use. Okay. Give me an example. What does that even mean? Think about what's happening 81 00:06:47,440 --> 00:06:54,000 right now as we record this. Our voices are being turned into data processed by software sent out 82 00:06:54,000 --> 00:07:01,280 over the internet. That's data in use happening right now. So if data at rest is like a book on a shelf 83 00:07:01,280 --> 00:07:06,960 and data in transit is that book being mailed, data in use is someone actually reading the book. 84 00:07:06,960 --> 00:07:11,360 Perfect analogy. And just like you don't want someone reading over your shoulder while you're trying 85 00:07:11,360 --> 00:07:17,520 to enjoy a book, you need ways to protect data while it's being used. Which seems really hard. 86 00:07:17,520 --> 00:07:22,400 You can't exactly put a password on a thought. Right. And this is where it gets really complicated 87 00:07:22,400 --> 00:07:27,200 on the tech side. They mentioned this thing called homomorphic encryption, which basically lets 88 00:07:27,200 --> 00:07:32,160 you do calculations on encrypted data without ever actually decrypting it. Okay. That is some 89 00:07:32,160 --> 00:07:36,960 sci-fi stuff right there. Yeah. You're saying they can do math on data that's still scrambled. 90 00:07:36,960 --> 00:07:43,040 That's the just. It's super advanced stuff, but it has huge implications for privacy and security. 91 00:07:43,040 --> 00:07:47,280 So it's like being able to tell what the forest looks like even if you can't see the individual trees. 92 00:07:47,280 --> 00:07:51,840 Exactly. They also touch on things that are a little more down to earth like roll-based access 93 00:07:51,840 --> 00:07:57,200 control. So limiting who can access what even within a company. Right. Because not everyone needs 94 00:07:57,200 --> 00:08:01,600 to see everything. It's like security clearance levels in those spy movies we're talking about. 95 00:08:01,600 --> 00:08:06,800 Exactly. Compartmentalization. If one part gets compromised, it doesn't mean 96 00:08:06,800 --> 00:08:11,040 the whole thing goes down. This is all super fascinating, but I'm not going to lie. It's a 97 00:08:11,040 --> 00:08:16,320 little overwhelming. Like if we need to be thinking about all the different types of data, 98 00:08:16,320 --> 00:08:21,520 the layers of security, that sounds like a full-time job. It can definitely feel that way. 99 00:08:21,520 --> 00:08:24,320 But that's why it's so important to at least be having these conversations. You know, 100 00:08:24,320 --> 00:08:28,560 understand the basics and what the risks are. Because knowledge is power, right? Exactly. 101 00:08:28,560 --> 00:08:32,880 And it's how you make smart decisions about protecting your digital stuff. Well said. 102 00:08:32,880 --> 00:08:37,920 So where do we go from here? We've covered a ton of ground from this whole media management thing 103 00:08:37,920 --> 00:08:44,000 understanding MTBF to this multi-layered approach to security. What's the key takeaway for our 104 00:08:44,000 --> 00:08:48,720 listeners? What do they really need to remember from all this? You know, it's funny. After really 105 00:08:48,720 --> 00:08:53,520 getting into this document, the biggest thing I'm left with isn't any specific tech or anything. 106 00:08:53,520 --> 00:08:58,240 It's more about like your mindset. Mindset. Okay. I like where you're going with this. 107 00:08:58,240 --> 00:09:03,760 It's about going from just reacting to stuff to actually being proactive. Instead of waiting 108 00:09:03,760 --> 00:09:08,960 for something bad to happen and then freaking out, they want you to think about digital protection 109 00:09:09,600 --> 00:09:14,400 strategically, holistically. Which makes sense, right? I mean, it's not like the old days where you 110 00:09:14,400 --> 00:09:19,520 could just put a password on something in college a day. Exactly. It's about knowing what you have 111 00:09:19,520 --> 00:09:25,440 both that tangible stuff and the intangible and then actually putting things in place to protect it. 112 00:09:25,440 --> 00:09:29,200 And that's something anyone can do. You don't need to be a tech wizard or anything. That's good to 113 00:09:29,200 --> 00:09:33,680 hear. Because I think a lot of people get overwhelmed like they need to be cybersecurity experts 114 00:09:33,680 --> 00:09:38,000 just to keep their stuff safe. And this document, they get that. They're not saying you need to 115 00:09:38,000 --> 00:09:43,040 become some kind of hacker overnight. It's more about those small practical steps that actually 116 00:09:43,040 --> 00:09:48,080 make a difference. So like what? What's something people can do right now that'll make things a bit 117 00:09:48,080 --> 00:09:54,400 safer? Easy one. Yeah. Turn on that multi-factor authentication everywhere you can. It's such a 118 00:09:54,400 --> 00:09:59,120 small thing, but it adds that extra layer of protection. It makes it way harder for the bad guys to 119 00:09:59,120 --> 00:10:05,440 get in. Simple but effective. What else? Pay attention to what you click on. Email, social media, 120 00:10:05,440 --> 00:10:11,040 all that. Those fishing scams, they're getting sneakier. So if something seems off, it probably is. 121 00:10:11,040 --> 00:10:17,040 Like they always say, if it sounds too good to be true. Exactly. And this one seems obvious, but 122 00:10:17,040 --> 00:10:22,000 keep your software updated. Those updates, they're not just for fun new features. A lot of times 123 00:10:22,000 --> 00:10:26,160 they're fixing security holes that hackers could use. Right. It's like patching up the leaks before 124 00:10:26,160 --> 00:10:33,200 they become a flood. Exactly. And finally, never underestimate a good, strong password. Mix it up. 125 00:10:33,920 --> 00:10:39,280 Big letters, small letters, numbers, those weird symbols. And please don't use the same 126 00:10:39,280 --> 00:10:43,680 one everywhere. That's where a password manager is a lifesaver. No more trying to remember a 127 00:10:43,680 --> 00:10:48,080 million different ones. Absolutely. These are just the basics, but the point is it doesn't 128 00:10:48,080 --> 00:10:52,880 have to be overwhelming. Just start with small steps. Be consistent and you make yourself a much 129 00:10:52,880 --> 00:10:57,360 harder target. That's a good message. You don't need to be some kind of tech genius to be smart about 130 00:10:57,360 --> 00:11:03,680 your digital security. Not at all. And it goes back to that mindset thing. Be proactive, be aware, 131 00:11:03,680 --> 00:11:08,560 and take charge of your own digital life. I love that. So it's like we went on this crazy journey 132 00:11:08,560 --> 00:11:14,160 through the world of digital protection. And in the end, it all comes back to ourselves. In a way, 133 00:11:14,160 --> 00:11:20,560 yeah, it's about realizing we've got the power to protect our stuff, our data, our digital lives. 134 00:11:20,560 --> 00:11:25,520 It's all in our hands. Couldn't have set up better myself. Huge thanks to you for breaking 135 00:11:25,520 --> 00:11:30,160 all this down for us today. Really appreciate it. Happy to do it. Always love a good deep dive. 136 00:11:30,160 --> 00:11:34,400 And to everyone listening, we hope this has given you some things to think about. Maybe some new 137 00:11:34,400 --> 00:11:40,240 tools for your toolbox as you navigate the digital world. Remember, knowledge is power. 138 00:11:40,240 --> 00:11:45,360 And the more you know, the better equipped you are to protect what matters. Until next time, 139 00:11:45,360 --> 00:12:01,280 stay curious, stay informed, and stay safe.