{"id":46049,"date":"2020-05-05T09:00:00","date_gmt":"2020-05-05T13:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=resource&#038;p=46049"},"modified":"2022-09-09T17:24:03","modified_gmt":"2022-09-09T21:24:03","slug":"organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2","status":"publish","type":"resource","link":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2","title":{"rendered":"Organizational Security: Part 1 with Jim Matthews | Where&#8217;s The Any Key? Podcast Episode 2"},"content":{"rendered":"\n<div id=\"buzzsprout-player-3542527\"><\/div>\n<script src=\"https:\/\/www.buzzsprout.com\/855292\/3542527-organizational-security-part-1-with-jim-matthews.js?container_id=buzzsprout-player-3542527&amp;player=small\" type=\"text\/javascript\" charset=\"utf-8\"><\/script>\n\n\n\n<p>The following is a transcription of an episode of our podcast, <em>Where\u2019s The Any Key?<\/em> Feel free to <a href=\"mailto:wherestheanykey@jumpcloud.com\">reach out with any questions<\/a> you may have in response to this recording. You can find our show on <a href=\"https:\/\/podcasts.apple.com\/us\/podcast\/wheres-the-any-key\/id1508025510?ign-mpt=uo%3D4\">Apple Podcasts<\/a>, <a href=\"https:\/\/open.spotify.com\/show\/38fFxEQkuDxLuWgyfoQZAP\">Spotify<\/a>, and <a href=\"https:\/\/anykey.buzzsprout.com\/\">wherever podcasts are available<\/a>. <\/p>\n\n\n\n<p>Welcome to <em>Where\u2019s the Any Key?<\/em> The podcast where we talk about anything IT related and even some topics that are IT adjacent. I&#8217;m your host Ryan Bacon, the IT Support Engineer at JumpCloud<sup>\u00ae<\/sup> Directory-as-a-Service<sup>\u00ae<\/sup>.&nbsp;<br><\/p>\n\n\n\n<p>Today I am joined by Jim Matthews, a Security Engineer at JumpCloud, to talk more about maintaining a secure environment while your workforce is remote.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A Bit of Background on Jim Matthews<\/h2>\n\n\n\n<p><strong>Jim:<\/strong> I used to play a lot of video games as a kid, which is how I got into computers. Then, I got a UNIX account at Rutgers University in 1992, and later became a UNIX system administrator. Along the way I worked for a small software development company and for Duke University in the Perkins Library.&nbsp;<br><\/p>\n\n\n\n<p>In 2007, I moved to Colorado and began working for another startup in the city of Boulder. I also spent some time working for DigitalGlobe and eventually made my way to JumpCloud about 16 months ago.&nbsp;<br><\/p>\n\n\n\n<p>At the last startup I worked at, we had an Active Directory setup. It was very expensive, redundant, and we had licensing issues which made it difficult to solve our simple problem of authentication. JumpCloud came to us as a potential client, and when I saw their pitch I thought it was great. JumpCloud could eliminate my AD instance and my hardware costs, and overall I thought it had value.<br><\/p>\n\n\n\n<p>So, when I was looking for a job a couple of years later, JumpCloud reached out to me and I eventually found my way there as an employee.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Jim Matthew\u2019s Role at JumpCloud<\/h3>\n\n\n\n<p><strong>Jim:<\/strong> I am a Security Engineer, and work as part of the security team here at JumpCloud. Given my background in system administration, infrastructure is my area of specialty within the team. So I maintain the security of our cloud infrastructure, and I do a little bit of teaching \u2014 I enjoy teaching people why they should be secure, not just forcing them to do so.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Securing a Remote Workforce<\/h2>\n\n\n\n<p><strong>Ryan:<\/strong> We are in the midst of the COVID-19 pandemic, and our workforce has all gone entirely remote. For today\u2019s discussion, we\u2019d really like to get your perspective on security with regard to remote working.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Process of Enabling Remote Work<\/h3>\n\n\n\n<p><strong>Jim:<\/strong> Nowadays we\u2019re all kind of being forced to work from home, which is both good and bad depending on how you look at it. From an IT admin\u2019s perspective, this situation is a little concerning. IT admins like to have control over devices, the network, and how people are connecting to their resources. And when the entire workforce disperses, they don\u2019t have the same control over user access as they would in an office.<br><\/p>\n\n\n\n<p>JumpCloud is kind of at the forefront of enabling remote work. We all work on laptops and are able to take them home because they\u2019re already provisioned by IT. Unfortunately, some organizations still operate on the \u201cdesktop\u201d model so IT admins are having to rely on people using their own devices at home.&nbsp;<br><\/p>\n\n\n\n<p><strong>Ryan:<\/strong> That is definitely one of things that our department is having to deal with, but then again JumpCloud was already kind of set up for people to work remotely. So when we moved the entire workforce to remote, it was just a matter of scaling what we\u2019d already done.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Prepare For VPN Usage<\/h3>\n\n\n\n<p><strong>Jim:<\/strong> Try to make it as seamless as possible for your employees to use VPNs. I heavily invest in a lot of testing up front so that when you do roll it out to the rest of your organization it\u2019s simple to understand. Think about it this way, if there&#8217;s a lot of hoops your users need to jump through, your adoption rate will drop significantly.<br><\/p>\n\n\n\n<p>I\u2019d also recommend evaluating exactly what you need from a VPN. There&#8217;s a lot of VPN software out there \u2014 both good and bad. Do your research carefully and make sure that what you&#8217;re signing up for with regard to a VPN service is exactly what you need, and make sure to work with a trusted company.<br><\/p>\n\n\n\n<p><strong>Ryan:<\/strong> From a VPN support point of view, I\u2019ve seen that a lot of people\u2019s home routers or firewalls were actually blocking certain types of VPNs. For example, I had to go into my home firewall to allow it to accept IPsec traffic.&nbsp;<br><\/p>\n\n\n\n<p><strong>Jim:<\/strong> That really highlights the importance of testing, which can be especially successful if it\u2019s done in phases. So rather than roll something out to all employees at once, I would suggest you do it in smaller batches to catch specific blockers. If you roll new processes or technology out to 15 users at a time, you can kind of solve these problems as they come up, rather than having to manage 300 helpdesk requests all at once.<br><\/p>\n\n\n\n<p><strong>Ryan:<\/strong> It\u2019s also a good idea to have these things up and running and tested before you even anticipate needing them. We have two main VPNs: one that comes into our office to allow people to access on-premises resources, and one that is for when employees are traveling. Neither of them got a ton of use, but I&#8217;m glad we had them set up \u2014 they were ready to go as soon as we needed them.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Keep On Top of Your Disaster Recovery Plan<\/h3>\n\n\n\n<p><strong>Jim:<\/strong> A <a href=\"https:\/\/jumpcloud.com\/blog\/disaster-planning-it-infrastructure-accessibility\">disaster recovery plan<\/a> is only as good as the last time you tested it, and if you&#8217;ve never tested it, then it&#8217;s not a good plan.<br><\/p>\n\n\n\n<p><strong>Ryan:<\/strong> The IT industry as a whole would definitely agree with you on that. A lot of times people say they don&#8217;t have the bandwidth to constantly check and test their disaster recovery plan, but if you don&#8217;t test it you might as well not have it. The less you test a plan the more likely it is to fail when you need it.&nbsp;<br><\/p>\n\n\n\n<p>I think that this pandemic has really opened up the workforce\u2019s eyes and shown them what the future of work is going to look like. And this is going to happen in the near future, not decades out. The technological need for various work forces is showing alongside the necessity to invest into infrastructure and security.<br><\/p>\n\n\n\n<p><strong>Jim: <\/strong>It\u2019s amazing to think about trying to do entirely remote work 15 to 20 years ago. Infrastructure and all those backend components really weren\u2019t set up for working from home, so I think if this had happened decades ago it would have been a global disaster. Now, most of us are working from home and the infrastructure allows us to do so comfortably.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">End User Education<\/h3>\n\n\n\n<p><strong>Ryan:<\/strong> I feel that end user education should be a priority because employees are the weakest link in the security chain. What you would mainly focus on when it comes to educating your end users on security best practices?<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Safe Password Practices<\/h4>\n\n\n\n<p><strong>Jim:<\/strong> The first area of focus should be on <a href=\"https:\/\/jumpcloud.com\/blog\/jumpcloud-com-blog-best-password-security-practices\">passwords, and more specifically, password security<\/a>. I used to have one password for everything, and if I needed to change it I added negligible characters to the end. But I\u2019ve come to understand that it\u2019s insecure to use the same password for all your resources, which is why I started using a password manager.<br><\/p>\n\n\n\n<p>There are a lot of password managers out there (LastPass, Keeper, etc.), I\u2019d strongly suggest that IT admins at least focus on educating end users on the benefits of using a password manager. Password managers store credentials so employees can confidently create unique, complex passwords for each of their resources.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Multi-Factor Authentication<\/h4>\n\n\n\n<p><strong>Jim: <\/strong>The second area of focus for educating end users should be on multi-factor authentication (<a href=\"https:\/\/jumpcloud.com\/platform\/multi-factor-authentication-mfa\">MFA<\/a>), which is also referred to as two-factor authentication (<a href=\"https:\/\/jumpcloud.com\/blog\/beginners-guide-2fa\">2FA<\/a>). A password is one part of the authentication puzzle, and by combining something you know (your credentials) with something you have (an MFA token typically generated by an app on your phone), you can make it harder for bad actors to hack user accounts. If all of your users are not currently using MFA for their endpoints, I would make that a top priority; it\u2019s just another way to help protect user accounts.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Beware Phishing<\/h4>\n\n\n\n<p><strong>Jim: <\/strong>The third area I\u2019d recommend you focus on would be training on <a href=\"https:\/\/jumpcloud.com\/blog\/phishing-protection\">phishing awareness<\/a>. A lot of people think the process of hackers penetrating your network is some sort of advanced, Mission Impossible-type process. However, it usually happens through a phishing email that compromises the company\u2019s security. Which is easier: Breaking into an AWS<sup>\u00ae<\/sup> data center, or sending out a thousand emails to a company knowing you&#8217;re going to get a return of at least 5%?<br><\/p>\n\n\n\n<p>So to make people aware of the dangers of phishing, I would start phishing my employees. A lot of companies actually do this type of training where they phish your company with sample emails, then provide education alongside them. This teaches people how to spot phishing emails. Keep in mind, no matter how many employees you have, there will always be that 5% that still click on emails, and the goal of phishing awareness is to get that rate as low as you possibly can.&nbsp;<br><\/p>\n\n\n\n<p><strong>Ryan:<\/strong> All three of those focus areas work really well when it comes to securing a remote workforce, especially with phishing emails. If you don&#8217;t have that ability to quickly communicate with a team member on whether the email is legitimate or not, then you\u2019re more inclined to just click on the link or email. And by adding MFA, you can get an extra layer of authentication on your endpoints, which is reassuring.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Make Teaching Personable<\/h3>\n\n\n\n<p><strong>Jim:<\/strong> It all starts with your IT admins. They need to be able to provision hardware (i.e. laptops) and enable security settings. This is where an MDM solution could help an IT team by making sure all laptops are configured in the exact way that IT admins expect.<br><\/p>\n\n\n\n<p>It also helps to teach people why they need to be secure. I\u2019m someone who needs to know why I\u2019m doing things a certain way, so I think it\u2019s important that people know why I\u2019m asking what I am from them. Users will do what you ask them to do if you explain the value behind it.&nbsp;<br><\/p>\n\n\n\n<p>You should also show how these practices for keeping an employee secure at work can roll over into their personal life. They\u2019ll take it a lot more seriously. The things that I&#8217;m talking about \u2014 password managers and MFA \u2014 apply to peoples\u2019 personal lives as well.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Resources That Help<\/h3>\n\n\n\n<p><strong>Ryan:<\/strong> What are some good resources you\u2019ve found that help you and your end users create a secure environment?<br><\/p>\n\n\n\n<p><strong>Jim:<\/strong> I think the best resources are the ones IT admins can create for their office environment. There are also a number of websites I think are great, such as the <a href=\"https:\/\/www.sans.org\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">SANS \u2122Institute<\/a>. The SANS Institute is a nonprofit organization that provides security training on best practices. In fact, they\u2019ve released a <a href=\"https:\/\/www.sans.org\/security-awareness-training\/sans-security-awareness-work-home-deployment-kit\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Security Awareness Work-From-Home Deployment Kit<\/a> in response to the pandemic.&nbsp;<br><\/p>\n\n\n\n<p>Also, the <a href=\"https:\/\/www.ftc.gov\/news-events\/blogs\/business-blog\/2017\/10\/stick-security-ftc-resources-your-business\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Federal Trade Commission (FTC)<\/a> has a number of great resources for users that may be traveling or working remotely. They\u2019ve also released resources to help organizations adjust to this new way of working.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Make it Easy for Users to Learn<\/h3>\n\n\n\n<p><strong>Ryan:<\/strong> And what IT teams can do is take these resources and curate them so that the information is easy for users to find and digest. Making the information with your organization in mind would greatly increase the adoption rate and overall usage of that information.&nbsp;<br><\/p>\n\n\n\n<p><strong>Jim:<\/strong> That\u2019s one of the great things and the not so great things about the internet. There\u2019s a whole world of information out there that would take more than a lifetime to parse through. So if you simply tell users to \u201cGoogle it\u201d or find the information themselves, you don\u2019t know what they\u2019re going to find. Maybe the information they find doesn\u2019t apply to your organization, it&#8217;s outdated, or it\u2019s incorrect. It helps your users to create an area for them to go to for finding that essential security information.&nbsp;<br><\/p>\n\n\n\n<p><strong>Ryan:<\/strong> When you curate types of environments you know the sites and information they\u2019re looking at are trusted. For example, we have a large fleet of Apple systems, composed largely of macOS<sup>\u00ae<\/sup> machines. One of the big fixes for when something goes wrong on a Mac is an SMC reset. So instead of telling a user to look up how to reset their SMC, I send them a detailed explanation that has diagrams and a link to <a href=\"https:\/\/support.apple.com\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Apple\u2019s support page<\/a>. It helps prevent people going on sketchy websites or finding unreliable information.&nbsp;<br><\/p>\n\n\n\n<p><strong>Jim:<\/strong> For the IT admins supporting a remote workforce, make sure to seek out resources related to the areas you\u2019re working in. So if you\u2019re a Google shop, you would obviously want to go to <a href=\"https:\/\/support.google.com\/?hl=en\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">Google support<\/a>.&nbsp;<br><\/p>\n\n\n\n<p>As a security guy, I have a number of different sites that I use. <a href=\"https:\/\/www.csoonline.com\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">CSO Online<\/a> is a great source for IT admins to get a high-level view on things like educating end users, password managers, and the benefits of a VPN.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Challenges Involved in Remote Work<\/h3>\n\n\n\n<p><strong>Jim: <\/strong>Unfortunately, during times like this you see scammers come out of the woodwork. For instance, people are sending our employees so-called advice on how to deal with COVID-19. I know that the government is currently working on getting out relief packages for a lot of workers, and users will soon be able to go out and claim benefits. Unfortunately, there exist a lot of people that are taking advantage of this.&nbsp;<br><\/p>\n\n\n\n<p>Hackers are sending emails to users saying, \u201cIf you want to get your benefits right away, please click here. Please provide us with your social security number so we can release your benefits.\u201d<br><\/p>\n\n\n\n<p>You do want to make your users aware that this is unfortunately a time when a lot of scams arise. Make sure they know to cast a wary eye when they receive an email purportedly from the government. The government will never contact an employee at their office email address. In fact, the government will never contact you by email about anything that would be for legitimate reasons.&nbsp;<br><\/p>\n\n\n\n<p>So make sure your end users are trained to be distrustful and not to take everything at face value. If you do get an email that says it&#8217;s from the government, reach out separately and find out if it\u2019s actually legitimate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Thanks For Tuning In!<\/h2>\n\n\n\n<p><strong>Ryan:<\/strong> That is it for today. Thank you Jim Matthews, Security Engineer at JumpCloud, for your time.&nbsp;<br><\/p>\n\n\n\n<p>Thank you for listening to <em>Where\u2019s the Any Key?<\/em> If you like what you heard, please feel free to subscribe. Again, my name is Ryan Bacon and I work for <a href=\"https:\/\/jumpcloud.com\/product\">JumpCloud Directory-as-a-Service<\/a>, where the team here is building a cloud-based platform for system and identity management. You can learn more and even set up a free account at <a href=\"https:\/\/console.jumpcloud.com\/signup\">jumpcloud.com<\/a>.<br><\/p>\n\n\n\n<p>So until next time, keep looking for that any key. If you find it, please let us know.<\/p>\n\n\n\n<div id=\"buzzsprout-large-player-855292\"><\/div><script type=\"text\/javascript\" charset=\"utf-8\" src=\"https:\/\/www.buzzsprout.com\/855292.js?container_id=buzzsprout-large-player-855292&amp;player=large\"><\/script>\n","protected":false},"excerpt":{"rendered":"<p>Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce. <\/p>\n","protected":false},"author":88,"featured_media":46050,"template":"","categories":[2337],"collection":[2775],"wheel_hubs":[],"platform":[],"resource_type":[2342],"funnel_stage":[],"coauthors":[2530],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Organizational Security: Part 1 with Jim Matthews - JumpCloud<\/title>\n<meta name=\"description\" content=\"Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Organizational Security: Part 1 with Jim Matthews | Where&#039;s The Any Key? Podcast Episode 2\" \/>\n<meta property=\"og:description\" content=\"Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-09T21:24:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"408\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"12 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Kayla Coco-Stotts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2\",\"url\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2\",\"name\":\"Organizational Security: Part 1 with Jim Matthews - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg\",\"datePublished\":\"2020-05-05T13:00:00+00:00\",\"dateModified\":\"2022-09-09T21:24:03+00:00\",\"description\":\"Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg\",\"width\":780,\"height\":408},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Resources\",\"item\":\"https:\/\/jumpcloud.com\/resources\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Organizational Security: Part 1 with Jim Matthews | Where&#8217;s The Any Key? Podcast Episode 2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Organizational Security: Part 1 with Jim Matthews - JumpCloud","description":"Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2","og_locale":"en_US","og_type":"article","og_title":"Organizational Security: Part 1 with Jim Matthews | Where's The Any Key? Podcast Episode 2","og_description":"Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce.","og_url":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2","og_site_name":"JumpCloud","article_modified_time":"2022-09-09T21:24:03+00:00","og_image":[{"width":780,"height":408,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"12 minutes","Written by":"Kayla Coco-Stotts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2","url":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2","name":"Organizational Security: Part 1 with Jim Matthews - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg","datePublished":"2020-05-05T13:00:00+00:00","dateModified":"2022-09-09T21:24:03+00:00","description":"Join Ryan as he sits down with Jim Matthews, the Security Engineer at JumpCloud to talk about securing your remote workforce.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/05\/Jim-LinkedIn.jpg","width":780,"height":408},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/resources\/organizational-security-with-jim-matthews-wheres-the-any-key-podcast-episode-2#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Resources","item":"https:\/\/jumpcloud.com\/resources"},{"@type":"ListItem","position":3,"name":"Organizational Security: Part 1 with Jim Matthews | Where&#8217;s The Any Key? Podcast Episode 2"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/resource\/46049"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/resource"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/resource"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/88"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/46050"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=46049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=46049"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=46049"},{"taxonomy":"wheel_hubs","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/wheel_hubs?post=46049"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=46049"},{"taxonomy":"resource_type","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/resource_type?post=46049"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=46049"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=46049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}