Alle afleveringen
431 afleveringen, van nieuw naar oud
-
Once You Peel Back the Layers of Redundant Tooling, You'll Find the ROI
3 november 2026 · 38 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Todd Carroll, vp of information security, Aspect.
In this episode:
Surviving the CISO change
Trust over demos
The mid-pack tax
When guardrails block the defenders
A huge thanks to our sponsor, ThreatLocker
An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.
Download banner: ThreatLocker_AI Cant Stop AI Attacks_1920x320.jpg
-
We Lead the Industry in OT (Obviously Terrible) Security
27 oktober 2026 · 42 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Jerich Beason, CISO, WM.
This episode was recorded in front of a live audience at CYBR.SEC.CON. in Houston.
In this episode:
Contain first, ask questions later
Borrowed rules break in the field
Buy the thing everyone else already needed
Somebody still has to own the mistake
A huge thanks to our sponsor, Dragos
Dragos protects critical infrastructure with industry-leading OT threat detection and asset visibility. Six hundred organizations globally trust Dragos Platform, OT Watch, and Expert Services to safeguard their operational environments. Built on over a decade of OT-specific intelligence and frontline incident response experience. Learn more at dragos.com.
-
Why Should AI Give You Back Time When It Could Just Replace You?
20 oktober 2026 · 38 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series, and Jacob Combs, CISO, Tandem Diabetes Care. Joining us is Alexandra Landegger, corporate CISO, RTX.
In this episode:
The bug that wasn't a bug
Nobody reopens the decision
Outrun the slowest guy, not the tiger
Four questions every CEO should ace
Thanks to Dutch Schwartz of SideChannel for providing our "What's Worse" scenario.
A huge thanks to our sponsor, Vanta
Your GRC team is dealing with more and more frameworks, vendors, and risk. The board wants it all in one place, but your compliance data lives all over. Vanta's agentic trust platform connects compliance, risk, and trust at enterprise scale and delivers a 526% ROI over three years. 16,000+ companies trust Vanta, including Snowflake, Atlassian, and Ramp. Visit Vanta.com/CISO to learn more.
-
I Sent the AI a Strongly Worded Prompt. I Think We'll Be Fine.
13 oktober 2026 · 39 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Chad Rubin, svp cybersecurity, Publicis Re:Sources.
In this episode:
Getting started beats getting it perfect
Bring security in before the concrete dries
The instruction was never the control
If everyone likes your idea, you're already too late
Thanks to Joshua Carpenter of Alliance InfoSystems for providing our "What's Worse" scenario.
A huge thanks to our sponsor, Adaptive Security
Adaptive Security helps organizations stay ahead of AI-powered social engineering, including deepfake phishing, vishing, and multi-channel attacks. With simulations and personalized training, teams learn to recognize and respond to modern threats before they cause harm. Turn human risk into resilience with security awareness built for the AI era. Learn more at adaptivesecurity.com.
-
Data Is the New Oil, in That It's Useless Until You Refine It
6 oktober 2026 · 44 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Jake Lorz, vp information technology and CISO, Cintas.
In this episode:
Security's identity crisis
The AI that never has a bad day
Your permissions have secrets
Nobody wrote it down
A huge thanks to our sponsor, ThreatLocker
An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.
-
Mirror, Mirror on the Wall, Who Has the Best Infrastructure of Them All?
29 september 2026 · 42 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, the producer of CISO Series, and Geoff Belknap. Joining us is our sponsored guest Ryan Lloyd, chief product officer, GuardSquare.
In this episode:
Determinism was never the point
Every MCP server is an uncontracted vendor
Mobile security, the version everyone's tired of hearing
Architectural vanity
A huge thanks to our sponsor, Guardsquare
Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com.
-
Our AI Agents Are So Safe and Reliable You Can't Buy Insurance for Them
22 september 2026 · 46 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Aaron Stanley, former vp of security, DBT Labs.
In this episode:
Saying no just hides the agent
Communication is not a side project
Even OpenAI can't buy enough coverage
Identity governance beats the illusion of control
A huge thanks to our sponsor, Arctic Wolf
Security leaders need to reduce complexity, strengthen resilience, and prove value. Arctic Wolf's Security Operations ROI Calculator helps estimate operational value, potential risk exposure reduction, and projected payback based on your environment. See what a modern, AI-powered security operations model could mean for your business at arcticwolf.com/CISO today, right now.
-
BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection
21 september 2026 · 21 min
All links and images can be found on CISO Series Lees meer
This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available Friday at 1 p.m. Eastern.
In this episode, David Spark is joined by Karl Mattson, founder and managing director of Squared Circle Ventures, and Howard Holton, founder and principal analyst at Phronia Counsel LLC, to discuss how your existing environment shapes what you buy next — and whether that's a strategy or just inertia.
Watch the full one-hour show at Crowdcast.
Subscribe to Super Cyber Friday Express, or any show on CISO Series, at CISOseries.com/subscribe.
-
We Strongly Value Your Willingness to Accept Less
15 september 2026 · 44 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Gina Ciavarro, former managing director of infrastructure and CISO at Accordion.
In this episode:
Patching won't evict a squatter
Boards accept risk by saying nothing
Fast enough to hide the damage
Job posting for a unicorn
A huge thanks to our sponsor, Arctic Wolf
Security leaders need to reduce complexity, strengthen resilience, and prove value. Arctic Wolf's Security Operations ROI Calculator helps estimate operational value, potential risk exposure reduction, and projected payback based on your environment. See what a modern, AI-powered security operations model could mean for your business at arcticwolf.com/CISO today, right now.
-
Backlogs? Where We're Going We Don't Need Backlogs.
8 september 2026 · 42 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Steve Zalewski. Joining us is Varsha Agrawal, head of information security, Prosper Marketplace.
In this episode:
Lock-in was never about the tech
The board wants a green light, not a lesson
Time was never the constraint
What founders keep getting wrong about security
A huge thanks to our sponsor, Vanta
No, it's not your imagination. Risk and regulations ARE ramping up—and customers now expect proof of security just to do business. That's why Vanta is a game-changer. Vanta automates your compliance process and brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Companies like Ramp and Writer spend 82% less time on audits with Vanta. That's not just faster compliance—it's more time for growth. Get started at Vanta.com/CISO.
-
When Frameworks Stop Being Polite and Start Getting Real
1 september 2026 · 37 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Will Gregorian, CISO, Galileo Medical. Joining us is Ryan Brown, director and head of cybersecurity operations, Children's National Hospital.
In this episode:
Policy is easy. The exam room isn't.
Robotics, Asimov, and the gap before regulation
The token bill nobody can explain
The 3 AM call is a warning sign
A huge thanks to our sponsor, Guardsquare
Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com/CISO.
-
"Ignorance Is Bliss" Is Our Acceptable Use Policy
25 augustus 2026 · 39 min
http://www.Threatlocker.com/cisoAll links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker.
In this episode:
Not my job, still my problem
The tools people actually use
Mac, Windows, and the debate that won't quit
Hiring for imagination, not acronyms
A huge thanks to our sponsor, ThreatLocker
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.
-
Secure by Design. Ignored by Default.
18 augustus 2026 · 38 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Julie Davila, president, Security Tinkerers.
In this episode:
Two paths, one dead end
One size fits nobody
Own it or orphan it
The agent you should worry about
A huge thanks to our sponsor, Guardsquare
Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com/CISO.
-
Why Solve Your Problems When We Can Just Scare You?
11 augustus 2026 · 41 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Nada Noaman, SVP and CISO, Estee Lauder Companies.
In this episode:
Skipping the apprenticeship
Privileged users nobody manages like one
Findings without the authority to fix them
Security was always behavioral
A huge thanks to our sponsor, Native
The Cloud Security Control Plane. Native helps enterprises turn built-in cloud security controls into active, operational defenses across AWS, Azure, Google Cloud, and OCI, so teams can enforce secure-by-design architecture at the source, preview impact before rollout, and keep guardrails aligned as cloud environments change. Learn more at native.security.
-
See, Our Compliance Framework Includes a Checkbox for Resilience
4 augustus 2026 · 44 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Khush Kashyap, senior director of GRC at Vanta.
In this episode:
Running up the token meter
Some risks resist a price tag
Resilience isn't a vacation policy
Compliance is the wrong finish line
A huge thanks to our sponsor, Vanta
Still stuck on the quarterly audit treadmill? Meet Calm-pliance. Vanta combines compliance, risk, and proof on one Agentic Trust Platform—and continuously monitors your controls, keeping you audit-ready all year round. Find your Calm-pliance here.
-
Why Don't You Tell Me Which Metrics Sound Most Impressive?
28 juli 2026 · 48 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Pavi Ramamurthy, Global CISO and CIO, Blackhawk Network.
In this episode:
Numbers that make the board feel good and nothing else
The audit is not the same thing as the truth
Receipts aren't a strategy
Stop blaming the human, fix the system they're standing in
A huge thanks to our sponsor, ThreatLocker
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.
-
With AI, I Can Now Be Pulled in 5x More Directions at Once!
21 juli 2026 · 48 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is our sponsored guest, Brian Long, CEO, Adaptive Security.
In this episode:
Nobody clocks out anymore
The rules nobody wrote down are the ones that count
AI doesn't drain your empathy, it just shows your hand
Loyalty runs both directions, even out the door
A huge thanks to our sponsor, Adaptive Security
Adaptive Security helps organizations stay ahead of AI-powered social engineering, including deepfake phishing, vishing, and multi-channel attacks. With simulations and personalized training, teams learn to recognize and respond to modern threats before they cause harm. Turn human risk into resilience with security awareness built for the AI era. Learn more at adaptivesecurity.com.
-
The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt
14 juli 2026 · 44 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is Tim Callahan, CIO/CISO, AFLAC.
In this episode:
Week one is the wrong time to overreach
Nobody has the AI playbook
Vulnerability management wasn't built for this clock
Stop blaming the human, fix the system
A huge thanks to our sponsor, Vanta
No, it's not your imagination. Risk and regulations ARE ramping up—and customers now expect proof of security just to do business. That's why Vanta is a game-changer. Vanta automates your compliance process and brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Companies like Ramp and Writer spend 82% less time on audits with Vanta. That's not just faster compliance—it's more time for growth. Get started at Vanta.com/CISO.
-
What Part of Zero Trust Does Your Exception Not Understand?
7 juli 2026 · 38 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is Patti Degnan, operating partner, Andreessen Horowitz.
In this episode:
Identity built for one person at a time
Patching can't outrun the exploit timeline
The exception hiding inside zero trust
A revenue question nobody's answered yet
A huge thanks to our sponsor, ThreatLocker
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.
-
These Aren't Speed Bumps, They're Opportunity Ramps! (LIVE in NYC)
30 juni 2026 · 42 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Nick Vigier, CISO, Oscar Health. Joining is our sponsored guest, Mitchem Boles, field CTO, Intezer. This episode was recorded live at Intezer's AI SOC event held at the NASDAQ in NYC.
In this episode:
Who owns the risk
Before it gets better
The SOC of zero
The decision bottleneck
A huge thanks to our sponsor, Intezer
Intezer Forensic AI SOC is designed for enterprises managing high alert volumes across SIEM, EDR Network, identity, phishing, and cloud systems. These organizations often rely on MDRs to fill coverage gaps but face frustration with limited visibility, too many escalations, and missed incidents hiding in low-severity alerts. Learn more at Intezer.com.
-
It's Not That We Don't Value Your Experience, We Just Don't Want to Pay for It
23 juni 2026 · 40 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Megan Samford, vp product and supply chain security, Schneider Electric.
In this episode:
Two modes of CISO
The vendor has the keys
The economic argument for secure code
Burning through the talent
A huge thanks to our sponsor, Native Security
Native makes secure-by-design inherent to how the cloud operates. It's the control plane for built-in cloud security, unifying and governing native controls, so security intent is defined once and applied consistently across providers. Learn more at native.security.
-
Boards Love to Hear Jargon," Says Soon-to-Be-Fired CISO (LIVE in Boston)
16 juni 2026 · 48 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Dmitriy Sokolovskiy, senior vice president, information security, Semrush.
This episode was recorded in front of a live audience at the offices of Aqueduct Technologies in Canton, MA. See photos from the event.
In this episode:
A clock on everything
The oversight loop
Not a better tool, a different one
It's not the alerts
A huge thanks to our sponsor, Strike48
It's no secret that AI is only as good as the data available to it. Strike48 unifies agentic AI with unmatched log visibility while avoiding the typical hefty price tag. Build and deploy agents for phishing detection, alert triage, threat correlation and more. Queries existing logs where they currently live, so you can keep the technology you already have. Learn more at Strike48.com.
A huge thanks to our sponsor, Dropzone AI
Dropzone AI delivers a team of AI agents that investigate alerts, hunt threats, and respond to attacks across your full security stack. No playbooks required. No hidden humans in the critical path. Your analysts stay in control, directing strategy while AI agents handle the investigation workload at machine speed. Learn more at dropzone.ai.
-
There's Nothing an LLM Can Screw Up That the Cloud Didn't Do First
9 juni 2026 · 44 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is our sponsored guest, Danny Jenkins, CEO, ThreatLocker.
In this episode:
Permission creep at machine speed
The pattern we keep calling a mistake
Stop authenticating the human
Vibe coded out of existence
A huge thanks to our sponsor, ThreatLocker
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.
-
Our Data Security Policy Is Transparent in That It Doesn't Exist
2 juni 2026 · 38 min
Our Data Security Policy Is Transparent in That It Doesn't Exist Lees meer
All links and images can be found on CISO Series
This week's episode is hosted by David Spark, producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining is Mike Melo, CISO, TMX Group.
In this episode:
The weight of old controls
Data you can actually see
68 vendors and counting
Authority you never had to claim
A huge thanks to our sponsor, Vanta
Still stuck on the quarterly audit treadmill? Meet Calm-pliance. Vanta combines compliance, risk, and proof on one Agentic Trust Platform—and continuously monitors your controls, keeping you audit-ready all year round. Find your Calm-pliance here.
-
If You Love Cloud Misconfigurations So Much, Why Don't You Marry Them!
26 mei 2026 · 40 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is their sponsored guest Amit Megiddo, CEO and founder, Native.
In this episode:
The CISO you don't need
Misconfigurations aren't a cloud problem
Secure by design means enforcing it
Finding bugs faster isn't the bottleneck
A huge thanks to our sponsor, Native
Native makes secure-by-design inherent to how the cloud operates. It's the control plane for built-in cloud security, unifying and governing native controls, so security intent is defined once and applied consistently across providers. Learn more at native.security.
-
Why Be Responsible When We Can Just Blame AI?
19 mei 2026 · 42 min
All links and images can be found on CISO Series Lees meer
This week's CISO Series Podcast features David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Jadee Hanson, CISO, Vanta.
In this episode:
The compliance receipt nobody reads
Who signs off on the AI that wrote the code
The agent that wouldn't stop
The questionnaire that should not exist
A huge thanks to our sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
-
Can You Please Train the AI on Your Way Out the Door?
12 mei 2026 · 37 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Jean-Paul Calabio, vp and CISO, Grainger.
In this episode:
Scanning the map isn't securing the territory
CFOs don't fund faith
What your AI inherits
Nobody owns the gap
Thanks to Jonathan Waldrop, CISO, Acoustic for providing our "What's Worse" scenario.
A huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
-
AI Confidence: It's a Trap! (LIVE in San Francisco)
5 mei 2026 · 43 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Sara Madden, CISO, Convera. This episode was recorded live at BSidesSF 2026.
In this episode:
Playing vendor roulette
Confident and wrong
Making conferences count
The stakes problem in tabletops
A huge thanks to our sponsor, QuilrAI
Can you tell if an action in your environment was performed by a human — or an AI agent? QuilrAI's Decision Engine evaluates content, context, and intent before actions complete — across browsers, endpoints, SaaS, LLMs, and agents. Not more alerts. Better decisions, in real time. Visit quilr.ai.
A huge thanks to our sponsor, Nudge Security
Get a full inventory of AI assets on Day One of your free trial, even those introduced before you started using Nudge. Get started.
A huge thanks to our sponsor, Zenity
Help shape the future of AI agent security. On May 27th, the AI Agent Security Summit returns to San Francisco. Hear from leading researchers and security pioneers, and usher in the new age of secure AI deployment across the enterprise. Register at zenity.io/ai-security-summit.
-
Step 1: Deploy New AI Tool. Step 2: Discover Security Flaws. Step 3: Repeat. (LIVE in Orlando)
28 april 2026 · 43 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Michelle Wilson, CISO, Movement Mortgage. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker.
This show was recorded in front of a live audience at ThreatLocker's conference, Zero Trust World 2026.
In this episode:
Risk as a daily habit
AI agents talking to AI agents
The code on the lock
Words that shape decisions
A huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
-
Back in My Day, You Could Get a Cybersecurity Job at the Corner Store
21 april 2026 · 40 min
All links and images can be found on CISO Series Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Paul Drapeau, head of global information security, New Balance.
In this episode:
The logo trap
Immunity through exposure
The synthesis edge
The cost of holding tight
A huge thanks to our sponsor, Doppel
This episode is sponsored by Doppel, the AI-native social engineering defense platform. Doppel strengthens human risk management by training employees to recognize deception, while our digital risk protection detects and disrupts attacks across every channel. Learn more at doppel.com
-
Our Theoretical Controls Work Great Against Hypothetical Attacks
14 april 2026 · 43 min
Our Theoretical Controls Work Great Against Hypothetical Attacks Lees meer
All links and images can be found on CISO Series
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is David Nolan, former CISO, Asurion.
In this episode:
Influence, not control
The initiative gap
Skip the framework, patch the server
Confident code with no owner
A huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
-
Remember, Every Underappreciated Risk Is Just a Crisis Waiting to Be Discovered
7 april 2026 · 43 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Hilik Kotler, svp, CISO and IT, Expedia Group.
In this episode:
The numbers game
What makes a vendor worth your time
Humanity in the loop
Alignment is a prerequisite, not a nice-to-have
A huge thanks to our sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
-
Do You Think These Compliance Boxes Check Themselves? (LIVE in Clearwater, FL)
31 maart 2026 · 44 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Pam Lindemoen, CSO, vp of strategy, Retail and Hospitality-ISAC. Joining them is Jason Mayor, deputy CISO, Raymond James Financial.
This episode was recorded in front of a live audience at the National Cybersecurity Alliance's Convene conference in Clearwater, Florida.
In this episode:
Coaching security
Planned security theater
Making "nothing bad happened" a compelling story
Getting security teams to think like the business
A huge thanks to our sponsor, Adaptive Security
Sponsored by Adaptive Security – the first security awareness platform built to stop AI-powered social engineering. AI impersonation and deepfakes have made trust the new attack surface. Adaptive runs social-engineering simulations and instantly turns threats, policies, and compliance needs into interactive, multilingual training. Trusted by Fortune 500s. Learn more at adaptivesecurity.com.
A huge thanks to our sponsor, Zepo
Zepo Intelligence transforms employee behavior into measurable security capability. Moving beyond check-box compliance, our human risk management platform uses hyper-personalized simulations to turn your workforce into a proactive defense layer. We don't just improve human behavior; we enable mastery against modern social engineering threats. Learn more at zepo.ai.
A huge thanks to our sponsor, KnowBe4
KnowBe4 empowers workforces to make smarter security decisions every day. Trusted by over 70,000 organizations worldwide, we help strengthen security culture and manage human risk. Our comprehensive AI-driven HRM+ platform includes modules for awareness and compliance training, cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, and more. As the only global security platform of its kind, KnowBe4 utilizes personalized and relevant cybersecurity content, tools, and techniques to keep the modern workforce—both …
-
Why Highlight Diversity When We Can Just Hope You Don't Notice?
24 maart 2026 · 38 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Julie Myerholtz, CISO, Brunswick Corporation.
In this episode:
Your cloud, your problem
Kill your sacred cows
AI broke your vendor math
Feedback is a gift. Open it.
A huge thanks to our sponsor, Vanta
Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso.
-
They're Less "Best Practices" and More "Sounds Good on LinkedIn"
17 maart 2026 · 42 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Rebecca Harness, CISO, Deltek.
In this episode:
Let it fail
The CIO seat is empty. Now what?
Design for how people actually work
"We found 23 issues. That'll be $15,000."
Huge thanks to our sponsor, Strike48
Strike48 is the Agentic Log Intelligence Platform that actually puts AI agents to work, combining full log visibility with AI agents that investigate, detect, and respond 24/7. With pre-built agent clusters for security and a no-code agentic workflow builder, it's easy to get started. Learn more at strike48.com/security.
-
It's Okay to Put All Your Eggs in One Basket as Long as You Really Trust the Basket
10 maart 2026 · 48 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Rob Allen, chief product officer, ThreatLocker.
In this episode:
Your best employee is your biggest risk
Stop guessing the next attack
AI is not a feature
Stop blaming the user
Huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
-
Our Security Team's Love Language is Buying New Tools
3 maart 2026 · 41 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Tim Leehealey, vp of corporate strategy and operations, Strike48.
In this episode:
Defensible, not perfect
Tools aren't going to save you
Logs are wasted on the SOC
The myth of the lone wolf
Huge thanks to our sponsor, Strike48
Strike48 is the Agentic Log Intelligence Platform that actually puts AI agents to work, combining full log visibility with AI agents that investigate, detect, and respond 24/7. With pre-built agent clusters for security and a no-code agentic workflow builder, it's easy to get started. Learn more at strike48.com/security.
-
If We Can't Do Better, at Least Do It Faster
24 februari 2026 · 42 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining them is Vikas Mahajan, vp and CISO, American Red Cross.
In this episode:
Questionnaires aren't risk management
The good old days were worse
Buying or building your SOC
Start the conversation, not the checklist
Huge thanks to our sponsor, Adaptive Security
Sponsored by Adaptive Security—the first cybersecurity company backed by OpenAI. AI impersonation and deepfakes have made trust the new attack surface. Adaptive runs realistic social-engineering simulations and instantly turns threats, policies, and compliance needs into interactive, multilingual training. Trusted by Fortune 500s. Learn more at adaptivesecurity.com.
-
We Gave the CISO Risk and Liability, and Now They Want Authority. The Nerve.
17 februari 2026 · 42 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Steve Zalewski. Joining them is Tammy Klotz, CISO, Trinseo.
In this episode:
Accountability without authority
Kill your hacklore
Voice is no longer enough
Studies that tell us what we already know
Huge thanks to our sponsor, ThreatLocker
Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com.
-
When We See White Smoke, We Know We Have a New CISO
10 februari 2026 · 43 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining them is Russ Ayres, CISO, Principal Financial Group.
In this episode:
Metrics that matter
Tool babysitting problem
Automating the brokenness
Stay connected intentionally
Huge thanks to our sponsor, Strike48
Strike48 is the Agentic Log Intelligence Platform that actually puts AI agents to work, combining full log visibility with AI agents that investigate, detect, and respond 24/7. With pre-built agent clusters for security and a no-code agentic workflow builder, it's easy to get started. Learn more at strike48.com/security.
-
Take Two-Factor Authentication and Call Me in the Morning
3 februari 2026 · 39 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is Janet Heins, CISO, ChenMed.
In this episode:
Inbound gets ignored
Independence under constraint
Methodology means nothing
Lives over logins
Huge thanks to our sponsor, Guardsquare
Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com.
-
I'll Show You Our Resilience Plan Once Our Cloud Storage Is Back Online
27 januari 2026 · 38 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is Johann Balaguer, Global CISO, Hard Rock Hotels and Casinos.
In this episode:
Understanding the why
Own your digital self
Invest beyond tenure
Prepare for dependencies
Thanks to Louis Zhichao Zhang, AIA Australia for contributing this week's "What's Worse?!" scenario.
Huge thanks to our sponsor, Guardsquare
Guardsquare delivers mobile app security without compromise, providing advanced protections for both Android and iOS apps. From app security testing to code hardening to real-time visibility into the threat landscape, Guardsquare solutions provide enhanced mobile application security from early in the development process through publication. Learn more about how to protect your app at Guardsquare.com.
-
AI Is Very Efficient at Making Us Forget the Value of Humans
20 januari 2026 · 41 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining them is Sara Madden, CISO, Convera.
In this episode:
Hold developers accountable
Credibility through candor
Be strategic with AI deployment
Resources don't guarantee security
Huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
-
Managing Risk Has Been a Priority Ever Since You Asked About It (LIVE in NYC)
13 januari 2026 · 41 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Matthew Southworth, CSO, Priceline. Joining them is sponsored guest, Saket Modi, CEO, Safe Security. This episode was recorded live at FAIRCON25 in NYC.
In this episode:
AI won't stay broken
Identity before intelligence
People decide risk appetite
Automate with oversight
Huge thanks to our sponsor, Safe Security
SAFE is the leader in Cyber Risk Quantification and the first company to deliver 100% autonomous Third-Party Risk Management. Powered by Agentic AI and built on FAIRtm, SAFE empowers CISOs, cybersecurity, and TPRM leaders to continuously quantify, prioritize, and mitigate cyber risks across their entire attack surface – enabling digital growth and organizational resilience. Learn more at testdrive.safe.security/
-
Imagine Scaling Mistakes 5x Faster. Thank You, Automation! (LIVE in NY)
6 januari 2026 · 44 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Matt Southworth, CISO, Priceline. Joining us is our sponsored guest, Leslie Nielsen, CISO, Mimecast.
In this episode:
Automating dysfunction
Leading without dominating
Unglamorous wins
Code without comprehension
Huge thanks to our sponsor, Mimecast.
Cyber threats are getting smarter every day, and threat actors aren't just targeting your technology, they're targeting your most valuable asset - your people. Mimecast helps you identify and secure risk with a unified, intelligent platform that protects across the spectrum of threats; from email and chat to file sharing. Learn more at www.mimecast.com.
-
How Much Risk Would a CISO Risk if a CISO Could Risk Risk? (LIVE in Boca Raton)
16 december 2025 · 44 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Brett Conlon, CISO, American Century Investments. Joining them are Ryan Barras, CISO, Mount Sinai Medical Center.
In this episode:
Nobody understands what we do
Someone else should fix this
Make the audience care
Speaking CEO
Huge thanks to our sponsor, Dropzone AI
Dropzone AI autonomously investigates every security alert—no playbooks needed. This AI SOC analyst queries your CrowdStrike, Splunk, threat intel feeds, and 60+ other tools to build complete investigations in 5 minutes. Unlike black-box automation, it shows every query, finding, and decision. See it work yourself—explore the self-guided demo at dropzone.ai.
-
I'm Worried That We're Not Worried About the Right Worries With AI
9 december 2025 · 40 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is their sponsored guest, Danny Jenkins, CEO, ThreatLocker.
In this episode:
AI for AI's sake
Stop selling, start protecting
Stop calling everything sophisticated
Least privilege, rebranded
Huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
-
You Can't Fall Behind in AI if You Never Start
2 december 2025 · 35 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is John Barrow, CISO, JB Poindexter & Co.
In this episode:
Building unicorns, not hunting them
Cold War frameworks for modern threats
Trading dollars for stories
Mirror, mirror on the wall
Huge thanks to our sponsor, Vanta
Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information. A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get back time to focus on strengthening security and scaling your business at vanta.com/ciso
-
Why Architect for Human Error When We Can Make People Feel Really Bad About It?
25 november 2025 · 39 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining them is Richard Rushing, CISO, Motorola Mobility.
In this episode
Mindset over tools
When hygiene becomes risk
Systems for actual humans
Conversations over compliance
Huge thanks to our sponsor, ThreatLocker
ThreatLocker® Defense Against Configurations continuously scans endpoints to uncover misconfigurations, weak firewall rules, and risky settings that weaken defenses. With compliance mapping, daily updates, and actionable remediation in one dashboard, it streamlines hardening, reduces attack surfaces, and strengthens security. Learn more
at threatlocker.com.
-
Are You Implying This Line Graph Isn't a Compelling Cybersecurity Narrative?
18 november 2025 · 41 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining them is our sponsored guest, Nathan Hunstad, director, security, Vanta.
In this episode:
Metrics that matter
Testing for real
AI as an assistant
Intelligence without context
Huge thanks to our sponsor, Vanta
Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information. A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get back time to focus on strengthening security and scaling your business at vanta.com/ciso