Alle afleveringen
431 afleveringen, van nieuw naar oud
-
Our CISO Certainly Puts the Tool in Multi-Tool (LIVE in LA)
11 november 2025 · 45 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Jeff Steadman, deputy CISO, Corning Incorporated. Joining them is Quincey Collins, CSO, Sheppard Mullin. This episode was recorded live at the ISSA LA Summit in Santa Monica, California.
In this episode:
The foundational debate
Strength over breadth
Beyond traditional backgrounds
Keeping perspective on risk
Huge thanks to our sponsors, Adaptive Security and Dropzone AI
AI-powered social engineering threats like deepfake voice calls, GenAI phishing, and vishing attacks are evolving fast. Adaptive helps security leaders get ahead with an AI-native platform that simulates realistic genAI attacks, and delivers expert-vetted security awareness training — all in one unified solution. Learn more at adaptivesecurity.com.
Dropzone AI autonomously investigates every security alert—no playbooks needed. This AI SOC analyst queries your CrowdStrike, Splunk, threat intel feeds, and 60+ other tools to build complete investigations in 5 minutes. Unlike black-box automation, it shows every query, finding, and decision. See it work yourself—explore the self-guided demo at dropzone.ai.
-
I Don't Just Guess About Effectiveness, I Make Educated Guesses!
4 november 2025 · 39 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining us is Sara Madden, CISO, Convera.
In this episode:
Optimizing for reality, not idealism
Engineering governance instead of monitoring compliance
When AI finds what humans miss
The measurement problem
Huge thanks to our sponsor, ThreatLocker
Human error remains one of the top cybersecurity threats. Just one wrong click can
open the door to ransomware or data loss. With ThreatLocker, unauthorized apps,
scripts, and devices are blocked before they can ever run. See how ThreatLocker can
help you gain more control over your environment. https://threatlocker.com
-
It's a Little Hard to Evaluate New Solutions When You're Screaming "AI" at Me All the Time (Live in Houston)
28 oktober 2025 · 44 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Jerich Beason, CISO, WM. Joining them on stage is Jack Leidecker, CISO, Gong. This episode was recorded live at HOU SEC CON 2025.
In this episode:
The open source sustainability problem
AI levels the geopolitical playing field
Cutting through AI vendor hype
Why the fundamentals still hurt
Thanks to Erik Bloch from Illumio for providing our "What's Worse" scenario.
Huge thanks to our sponsor, Vorlon Security
SaaS data moves fast—Vorlon gives security teams the context to move faster. Vorlon combines posture and secrets management, data flow visibility, and detection and response — so you can see the full picture: what's connected, what's at risk, and what needs immediate action. Learn more at https://vorlon.io/
-
Dear Abby: Why Should I Trust a Vendor Selling Me Zero Trust?
21 oktober 2025 · 30 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Dan Walsh, CISO, Datavant. Joining them is our sponsored guest, Rob Allen, chief product officer, ThreatLocker.
In this episode:
When EDR gets knocked out
Red flags in vendor theater
Configuration chaos
The sticker problem
Huge thanks to our sponsor, ThreatLocker
ThreatLocker® Defense Against Configurations continuously scans endpoints to uncover misconfigurations, weak firewall rules, and risky settings that weaken defenses. With compliance mapping, daily updates, and actionable remediation in one dashboard, it streamlines hardening, reduces attack surfaces, and strengthens security. Learn more at threatlocker.com.
-
The Difference with AI Red Teaming is We Added the Word AI
14 oktober 2025 · 38 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Khush Kashyap, senior director, GRC, Vanta.
In this episode:
Skip the Sermon
When to coach versus command
Making risk quantification useful
Recognizing a distinct discipline
Huge thanks to our sponsor, Vanta
Vanta automates key areas of your GRC program—including compliance, risk, and customer trust—and streamlines the way you manage information. A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get back time to focus on strengthening security and scaling your business at https://www.vanta.com/landing/demo-grc?utm_campaign=new-way-grc&utm_source=ciso-series-podcast&utm_medium=podcast&utm_content=banner
-
Don't Worry, We'll Get to Solving Your Problem on Slide 87
7 oktober 2025 · 37 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining them is Daniel Liber, CISO, Monday.com.
In this episode:
AI security's blind spot problem
Vendors don't understand the assignment
Marketing budgets overshadow actual innovation
Accuracy versus effectiveness
Huge thanks to our sponsor, Material Security
Built specifically for Google Workspace, Material is a detection and response platform that protects Gmail, Google Drive, and accounts by proactively eliminating security gaps, stopping misconfigurations, and preventing shadow IT before they turn into costly problems. See Material in action today - https://material.security/providers/google-workspace?utm_source=third-party&utm_medium=website&utm_campaign=20251007-cisoseries
-
Time to Choose a Security Vendor: Dart Board or Spin the Wheel?
30 september 2025 · 44 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is Pavi Ramamurthy, global CISO and CIO, Blackhawk Network.
In this episode:
We can't promise safe, but we can promise ready
Are we accidentally building security nightmares?
Being held accountable for things you had no say in
The safe space problem in vendor evaluation
Huge thanks to our sponsor, Adaptive Security
Sponsored by Adaptive Security — the first cybersecurity company backed by OpenAI. Adaptive helps security leaders defend against AI-powered social engineering threats like deepfakes, vishing, and GenAI phishing with advanced phishing simulations and next-generation security awareness training. Adaptive's new AI Content Creator enables teams to instantly convert threat intelligence and compliance updates into interactive, multilingual training — no instructional design required. Trusted by Fortune 500s and backed by Andreessen Horowitz and the OpenAI. Learn more at http://www.adaptivesecurity.com
-
Now That You Mention It I HAVE Heard Some Hype Around These AI Tools
23 september 2025 · 34 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is Erwin Lopez, CISO, SLAC National Accelerator Laboratory.
In this episode:
The AI experimentation phase isn't optional
When selling security becomes the hardest part of the job
Threat actors aren't hacking in anymore
We build, we bond, and we can't bear to let go
Huge thanks to our sponsor, ThreatLocker
Human error remains one of the top cybersecurity threats. Just one wrong click can open the door to ransomware or data loss. With ThreatLocker, unauthorized apps, scripts, and devices are blocked before they can ever run. See how ThreatLocker can help you gain more control over your environment. Learn more at Threatlocker.com/CISO
-
Wait, SMS Doesn't Stand for "Super Mega Secure?"
16 september 2025 · 43 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Brian Long, CEO, Adaptive Security.
In this episode:
Hiring North Korean operatives on a Tuesday
AI coding and the death of specifications
Deepfake personas beyond video calls
The middleman problem with SMS
Huge thanks to our sponsor, Adaptive Security
AI-powered social engineering threats like deepfake voice calls, GenAI phishing, and vishing attacks are evolving fast. Adaptive helps security leaders get ahead with an AI-native platform that simulates realistic genAI attacks, and delivers expert-vetted security awareness training — all in one unified solution.
And now, with Adaptive's new AI Content Creator, security teams can instantly transform breaking threat intel or updated policy docs into interactive, multilingual training — no instructional design needed. That means faster compliance, better engagement, and less risk.
Trusted by Fortune 500s and backed by Andreessen Horowitz and the OpenAI Startup Fund, Adaptive is helping security teams prepare for the next generation of cyber threats.
Learn more at adaptivesecurity.com.
-
We All Agree That Prevention Is the Best Advice We're Never Going to Follow
9 september 2025 · 44 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Jason Loomis, CISO, Freshworks.
In this episode:
Making organizations take their security medicine
Building CISO support systems
Holding the door for humans
Underappreciated risks: beyond the headlines
Huge thanks to our sponsor, Safe Security
SAFE is the category leader in Cyber Risk Quantification (CRQ) and the first vendor to deliver fully autonomous Third-Party Risk Management.We help CISOs, GRC, and TPRM leaders continuously and efficiently quantify, prioritize, and mitigate cyber risks across their entire attack surface — enabling digital growth and resilience. Learn more at tprmdemo.safe.security.
-
We're All for a Responsible AI Rollout as Long as It Goes as Fast as Possible
2 september 2025 · 40 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is Jennifer Swann, CISO, Bloomberg Industry Group.
In this episode:
Vulnerability management vs. configuration control
Open source security and supply chain trust
Building security leadership presence
AI governance and enterprise risk
Huge thanks to our sponsor, Vanta
Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get started today at Vanta.com/CISO.
-
New Study Finds No Email Has Ever "Found You Well"
26 augustus 2025 · 34 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is David Cross, CISO, Atlassian.
In this episode:
Breaking the Sales Cycle
Leadership Under Fire
Predicting the Unpredictable
Security Startups' Security Paradox
A huge thanks to our sponsor, ThreatLocker
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
I Just Can't Communicate With the Business. I've Tried Condescension AND Derision.
19 augustus 2025 · 36 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining us is Gary Chan, CISO, SSM Health. Be sure to check out Gary's security mentalism website: https://www.gschan2000.com.
In this episode:
Decision-making with incomplete information
Translation beats technical expertise
Influence trumps authority for CISOs
Technical prowess creates adversaries
Huge thanks to our sponsor, Vanta
Automate, centralize, & scale your GRC program with Vanta. Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. And the impact is real: A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get started at Vanta.com/ciso.
-
Impressive! Our AI is Approaching "One 9" of Accuracy.
12 augustus 2025 · 40 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining us is our sponsored guest, Kevin Tian, co-founder and CEO, Doppel.
In this episode:
AI fraud gets on the juice
Agentic AI demands a new security mindset
The new frontier for social engineering
We still need human verification
Huge thanks to our sponsor, Doppel
Doppel is the first social engineering defense platform built to dismantle deception at the source. It uses AI and infrastructure correlation to detect, link, and disrupt impersonation campaigns before they spread - protecting brands, executives, and employees while turning every threat into action that strengthens defenses across a shared intelligence network.
-
They Can't Hack All Our Tools If We Keep Buying New Ones
5 augustus 2025 · 34 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is their sponsored guest, Rajan Kapoor, CEO of Material Security.
In this episode:
AI creates security's catch-22
Delegation without abandonment
Google's security gaps demand better tools
Trust beats sophistication every time
A huge thanks to our sponsor, Material Security
What if you could get a view of security across Google Workspace–email, documents, and accounts–all in one place? Material Security unifies your Google Workspace security operations, simplifying and strengthening security with continuous monitoring and automatic issue resolution. See how Material Security simplifies your security for GMail, GDrive and Google accounts. Learn more at https://material.security.
-
Cosmo Quiz! 23 Ways to Make Your Vendors Obsessed With Your Security Standards
29 juli 2025 · 39 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Rob Allen, chief product officer, ThreatLocker.
In this episode:
Large enterprise security demands drive vendor improvements
Technical expertise becomes leadership liability without delegation
EDR evolution needs prevention focus
Career breaks require personal ownership and strategic timing
A huge thanks to our sponsor, ThreatLocker
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
We'll Worry About Recovering From the Attack Once We Ace This Audit
22 juli 2025 · 43 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Peter Clay, CISO, Aireon.
In this episode:
Purple teaming evolution misses operational realities
Effective postmortems require systematic failure analysis
Risk expertise requires business context over methodology
Compliance and resilience serve different purposes
Huge thanks to our sponsor, Safe Security
SAFE is reinventing Third-Party Risk Management with Agentic AI. Our AI Agents automate onboarding, assessments, and monitoring—giving security teams real-time visibility and zero-effort control across their vendor ecosystem. See why SAFE is the fastest-growing TPRM platform on the market at https://testdrive.safe.security/.
-
Once You Memorize the Manual, Our User Interface is Very Intuitive
15 juli 2025 · 39 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal, Duha. Joining us is our sponsored guest, Edward Wu, CEO and founder, Dropzone AI.
In this episode:
Building context-aware verification frameworks
Understanding why UX fails
Moving beyond AI replacement narratives
Building for a crisis
A huge thanks to our sponsor, Dropzone AI
Dropzone AI autonomously investigates every security alert—no playbooks needed. This AI SOC analyst queries your CrowdStrike, Splunk, threat intel feeds, and 60+ other tools to build complete investigations in 5 minutes. Unlike black-box automation, it shows every query, finding, and decision. See it work yourself—explore the self-guided demo at dropzone.ai.
-
Not Enough Hallucinations? Let's Outfit Your LLM with Another LLM
8 juli 2025 · 36 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Anthony Candeias, CISO, Weight Watchers.
In this episode:
AI agents require structured supervision, not autonomy
Hiring for potential over credentials in cybersecurity
AppSec training effectiveness depends on organizational relevance
AI oversight requires purpose-built models, not general solutions
A huge thanks to our sponsor, Vanta
Vanta's Trust Management Platform helps 10k+ companies—like Atlassian, Quora, and Chili Piper—start and scale their security programs and build trust with buyers. Vanta saves security teams time and improves program visibility by automating 35+ compliance frameworks, such as SOC 2 and ISO 27001, and GRC workflows, like risk management. Get started at Vanta.com/CISO
-
We Require 3-5 Years of Experience to Qualify for the Cyber Skills Shortage
1 juli 2025 · 38 min
All links and images can be found on CISO Series. Lees meer
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is Anne Marie Zettlemoyer, former vp of security, Activision Blizzard.
In this episode
SOC automation: Moving beyond alert fatigue
The entry-level security talent reality
Learning from security incidents without blame
Evaluating security vendor viability and partnerships
A huge thanks to our sponsor, ThreatLocker
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
We Can Either Build Resilience or Just Always Be Perfect
24 juni 2025 · 38 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Ryan Bachman, executive vice president and CISO, GM Financial.
In this episode
Identity consolidation versus simplification
Entry-level pathways into cybersecurity
Evolution of the CISO role toward business resilience
Applying simplification principles to cybersecurity complexity
Huge thanks to our sponsor, Doppel
Doppel is the first social engineering defense platform built to dismantle deception at the source. It uses AI and infrastructure correlation to detect, link, and disrupt impersonation campaigns before they spread - protecting brands, executives, and employees while turning every threat into action that strengthens defenses across a shared intelligence network.
-
We Checked the "Yes" Box for Cybersecurity. What Else Do We Have to Do?
17 juni 2025 · 41 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Alex Hall, CISO, Gensler.
In this episode:
Evaluating secure messaging beyond the app
Reframing compliance as a business enabler
Incremental security investment vs. crisis response
Why culture, not punishment, drives secure behavior
Huge thanks to our sponsor, Vanta
Automate, centralize, & scale your GRC program with Vanta
Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. And the impact is real: A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get started at Vanta.com/ciso. -
Aside From Text, Images, and Videos, GenAI Can't Fool Me (Live in Boston)
10 juni 2025 · 47 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, partner, YL Ventures. Joining us is our sponsored guest, Sam Curry, global vp, CISO at Zscaler. This episode was recorded at a Zscaler event in Boston, MA.
In this episode:
Guardrails for decision making under fatigue
Preparing for quantum threats
Strategic use of generative AI
Reassessing outdated knowledge
Huge thanks to our sponsor, Zscaler
Zscaler is a cloud-based cybersecurity company that provides secure internet access and private application access. Its platform replaces traditional network security by delivering Zero Trust architecture, protecting users, data, and applications regardless of location. Zscaler's scalable services help organizations modernize IT and reduce risk with seamless, cloud-native security solutions.
-
AI Isn't Going to Take Your Job, It's Going to Eliminate It! (LIVE at BSidesSF)
3 juni 2025 · 45 min
All images and links can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Alexandra Landegger, global head of cyber strategy & transformation, RTX.
In this episode:
A cybersecurity fast-track?
When Ambition Becomes a Liability
Giving the CVE Program the Credit It Deserves
Elevating human cyber talent with AI
Huge thanks to our sponsors, Nudge Security, SecurityScorecard, and Vanta
Take control of SaaS security and AI governance with Nudge Security. Start a free trial today and get a full inventory of all SaaS and GenAI accounts in minutes along with risk insights and automation to help you quickly improve your security posture. Get started here: nudgesecurity.com/cisoseries
Third-party risk doesn't stop at monitoring. SecurityScorecard delivers real-time detection and response across your supply chain—helping you fix vulnerabilities before they become breaches. Empower your team with expert-driven remediation, continuous vendor oversight, and board-ready insights that drive results.
Automate, centralize, & scale your GRC program with Vanta
Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. And the impact is real: A recent IDC analysis found that compliance teams using Vanta are 129% more productive.
Get started at Vanta.com/ciso.
-
I Can't Choose. I Love All My Assets Equally.
27 mei 2025 · 34 min
All links and images can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Tim Jacobs, vp, CISO, Commonwealth Care Alliance.
In this episode:
Starting from zero
Prepare for decisive decisions
Working back from unacceptable
Discovering inefficiencies
A huge thanks to our sponsor, ThreatLocker
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
Why Learn Security Fundamentals When We Could Just Chase Our Tails?
20 mei 2025 · 34 min
All links and images for this episode can be found on CISO Series. Lees meer
I host this week's episode, David Spark (@dspark), producer of CISO Series and Jesse Whaley, CISO, Amtrak. Joining them is their guest Vaughn Hazen, CISO, CN.
In this episode:
The classics endure
The rules of the rail
"Prove It. With data."
It's all just software
A huge thanks to our sponsor, Doppel
Doppel is the first social engineering defense platform built to dismantle deception at the source. It uses AI and infrastructure correlation to detect, link, and disrupt impersonation campaigns before they spread - protecting brands, executives, and employees while turning every threat into action that strengthens defenses across a shared intelligence network. Learn more at https://www.doppel.com/platform
-
I'm Not Looking Down at You, I'm Looking Down at What You're Doing
13 mei 2025 · 42 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is our sponsored guest, Saket Modi, co-founder and CEO, SAFE Security.
In this episode:
Elevating AI to table stakes
Security for the real world
Using dynamic models for TPRM
The agentic AI augmentation
Huge thanks to our sponsor, SAFE Security
SAFE (#1 platform to unify the management of all cyber risks) has reinvented cyber risk management with Agentic AI. We help CISOs, TPRM, and GRC leaders become strategic business partners by automating the understanding, prioritization and management of cyber risk—accelerating AI adoption and digital transformation.
-
They're Not AI Mistakes, They're Happy Little Incidents
6 mei 2025 · 46 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series, and Andy Ellis, partner of YL Ventures. Their sponsored guest is Jadee Hanson, CISO of Vanta.
In this episode:
Find a partner to work with
Fixing the root of burnout
The limitations of human vigilance
Balancing openness and control
Thanks to our sponsor, Vanta.
Automate, centralize, & scale your GRC program with Vanta
Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. And the impact is real: A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get started at Vanta.com/ciso.
-
Get ALL the Challenges of Cybersecurity AND Fewer Resources
29 april 2025 · 40 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is Charles Blauner, formerly of Team8 (at time of recording) and now operating partner, Crosspoint Capital.
In this episode:
Expanding collective defense
Getting talent to the municipal level
A mature reporting structure
A pill for that cyberailment
Huge thanks to our sponsor, Material Security
Material Security is purpose-built to protect the entire cloud workspace – email, data, and accounts. With deep integration and powerful automations, Material prevents and detects a wider range of threats, responds to active attacks faster, and secures data and accounts even after a breach. See Material in action today!
-
Data Minimization Means We Don't Tell You What We're Collecting
22 april 2025 · 42 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series, and Andy Ellis, partner, YL Ventures. Joining us is Mandy Huth, svp, CISO, Ultra Clean Technology.
In this episode:
Start with good defaults
Building talent bridges
Don't forget the humans
Differentiating with privacy
Automate, centralize, & scale your GRC program with Vanta
Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. And the impact is real: A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get started at Vanta.com/ciso.
-
Welcome to Cybersecurity: Where Everything Is Made Up and the Points Don't Matter
15 april 2025 · 41 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, partner, YL Ventures. Joining us is Mike D'Arezzo, executive director of infosec and GRC, Wellstar Health Systems.
In this episode:
The shift left myth
Reconsidering CISO evaluations
The power of "how"
Building bridges
Huge thanks to our sponsor, ThreatLocker
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
With AI, Don't Think Like a Hacker, Think Like the Whole of Society
8 april 2025 · 39 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, partner, YL Ventures. Joining us is our sponsored guest Nathan Hunstad, director, security at Vanta.
In this episode:
Thinking like AI
Building off a solid foundation
Start with ownership
Following the leader
Big thanks to our sponsor, Vanta
Automate, centralize, & scale your GRC program with Vanta. Vanta's Trust Management Platform automates key areas of your GRC program—including compliance, internal and third-party risk, and customer trust—and streamlines the way you gather and manage information. And the impact is real: A recent IDC analysis found that compliance teams using Vanta are 129% more productive. Get started at Vanta.com/ciso.
-
This Security Control Is So Good We Don't Even Have to Turn It On (LIVE in Clearwater, FL)
1 april 2025 · 45 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Christina Shannon, CIO, KIK Consumer Products. Joining them is Jim Bowie, CISO, Tampa General Hospital.
In this episode:
A journey, not a destination
The difference between pressure and stress
Fighting commodity deepfakes
Getting leadership on the same page
HUGE thanks to our sponsors, Proofpoint, Cofense, & KnowBe4
With an integrated suite of cloud-based cybersecurity and compliance solutions, Proofpoint helps organizations around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber attacks. Discover cutting-edge security insights and industry trends from leading experts at Proofpoint Power Series—a monthly virtual event designed to empower the security community. Learn more at proofpoint.com
Powered by 35 million trained employee reporters, the exclusive Cofense® PhishMe® Email Security Awareness Training with Risk Validation and Phishing Threat Detection and Response Platforms combine robust training with advanced tools for phishing identification and remediation. Together, our solutions empower organizations to identify, combat, and eliminate phishing threats in real-time. Learn more at cofense.com
KnowBe4's PhishER Plus is a lightweight SOAR platform that streamlines threat response for high-volume, potentially malicious emails reported by users. It automatically prioritizes messages, helping InfoSec and Security Operations teams quickly address the most critical threats, reducing inbox clutter and enhancing overall security efficiency. Learn more at knowbe4.com
-
The Security Incident Has Been Upgraded From "Ouch" to "Boiiiing" (LIVE in Orlando, FL)
25 maart 2025 · 42 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Trina Ford, CISO, iHeartMedia. Joining us is our sponsored guest Rob Allen, chief product officer, ThreatLocker.
This episode was recorded in front of a live audience at Zero Trust World in Orlando, Florida.
In this episode:
Severity versus impact
Breaking the anti-pattern
Take the first step to zero trust
What are your demands?
ThreatLocker® is a Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. With easy onboarding, management, and 24/7/365 support, ThreatLocker makes default deny a reality for businesses. Only allow what you need in your environment and block everything else, including ransomware!
-
How to Best Maintain a Healthy Work-Work Balance in Cybersecurity
18 maart 2025 · 41 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, partner, YL Ventures. Joining us is Edward Contreras, senior evp and CISO, Frost Bank.
In this episode:
A gradual language shift
Don't reflexively rise and grind
Lean into focus
Gauging the unmeasurable
Huge thanks to our sponsor, ThreatLocker
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
Our CISO Might Be Virtual, But the Lack of Respect Is Genuine
11 maart 2025 · 34 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Mike Wilkes, former CISO, Major League Soccer.
In this episode:
Are we misusing vCISOs?
Cybersecurity is out to sea
Planning for your exit
Building up your quantum reflexes
Thanks to our podcast sponsor, Tines
Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at https://tines.com/cisoseries
-
All Cybersecurity Problems Are Easy to Fix… With Unlimited Time and Budget
4 maart 2025 · 39 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Adam Holland, former CISO, the Wendy's Company, now CISO of Ascension Healthcare.
In this episode:
The long road to influence
The effort to build a bridge
Living within limits
Motivation for security awareness
Thanks to our podcast sponsor, Vanta!
Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you'll streamline compliance— and never duplicate your efforts.
-
Every Failed Startup Starts as a Dream for a Single Pane of Glass
25 februari 2025 · 37 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Shaun Marion, vp, CSO, Xcel Energy.
In this episode:
Setting policy
The hard thing about soft skills
Never let a good crisis go to waste
Avoiding the tarpit
Thanks to our podcast sponsor, Noma Security!
Secure your entire Data & AI Lifecycle—from development to production and classic data engineering to GenAI. Noma's full-lifecycle platform delivers seamless protection against risks like misconfigured data pipelines, malicious models, and adversarial AI attacks, empowering AppSec teams with complete visibility, security, and compliance—without disrupting data and AI teams' workflows.
-
Fix it? Let's Just Get Rid of It.
18 februari 2025 · 37 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is our sponsored guest, Danny Jenkins, CEO, ThreatLocker.
In this episode:
A zero-day upgrade
Don't let a pentest go bad
Improving user training
Cybersecurity is made for people
Thanks to our podcast sponsor, ThreatLocker!
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.
-
Zero Trust Purple Team DevSecOps Mesh: A CASB Journey Through the Identity Fabric
11 februari 2025 · 38 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our sponsored guest, Matt Muller, field CISO, Tines.
In this episode:
Seeking the early AI adopters
Taking the SOC back to basics
Changing our automation expectations
Communicate risk
Thanks to our podcast sponsor, Tines!
Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.
-
Our Developers' New Motto is "LLM Take the Wheel"
4 februari 2025 · 37 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Deneen DeFiore, Vice President & Chief Information Security Officer, United Airlines.
In this episode:
Minding the gap
Copilot overreliance
Opening up the field
Navigating the SMB cyber insurance conundrum
Thanks to our podcast sponsor, Vanta!
Say goodbye to spreadsheets and screenshots
Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you'll streamline compliance— and never duplicate your efforts.
-
As Long as We Keep Moving the Goalposts, We Have a Great Security Culture (LIVE in Dallas, TX)
28 januari 2025 · 42 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Rinki Sethi, vp and CISO, BILL. Joining us is our sponsored guest, Lamont Orange, CISO, Cyera.
This episode was recorded in front of a live audience at Cyera's first DataSec conference (November 2024) in Dallas. Thanks to Adam Holland, CISO, Wendy's, Farray Rahman of Vibrant Emotional Health and 988 Lifeline, and Biji John of USAA for our questions in the episode.
In this episode:
Shifting from traditional recovery
Do you know where your data is?
The science of tradeoffs
How do you measure security culture?
Thanks to our podcast sponsor, Cyera!
Cyera's data security platform discovers your data attack surface, protects sensitive data, governs data access, monitors critical data events, and quickly responds to data risks. Cyera's agentless design allows us to deploy within minutes across any environment and provide a 95% precision rate through our AI-powered classification engine. Learn more at Cyera.io
-
4th Party Data Breach? We Can Barely Catch the 1st Party Ones!
21 januari 2025 · 38 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is George Finney, CISO, The University of Texas System and author of Project Zero Trust.
In this episode:
Aligning on privacy
Bringing Zero Trust to OT
Restores and resilience
Focus on what you can control
Thanks to our podcast sponsor, Vanta!
Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you'll streamline compliance— and never duplicate your efforts.
-
I Support Open Source as Long as I Don't Have to Invest in It
14 januari 2025 · 37 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our guest, Brett Perry, CISO, Dot Foods.
In this episode:
A new MDR policy
Staying on top of the technical debt cycle
Beating retention struggles
In the gully of SOAR
Thanks to our podcast sponsor, Tines!
Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.
-
Ewww! How Long Has This Router Been in the Fridge?
7 januari 2025 · 39 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Yabing Wang, VP and CISO, Justworks.
In this episode:
Building a path to action
Cracking the EOL conundrum
The burning platform question
Uncertainty is our only constant
Thanks to our podcast sponsor, Entro!
Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today's complex digital ecosystem.
-
Why Bother Helping Users When We Can Complain About Them?
17 december 2024 · 38 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Daniel Daraban, senior director of product management, Bitdefender.
In this episode:
Practice makes perfect
Shaming doesn't help anyone
Cybersecurity is a flat circle
Building the bridge
Thanks to our podcast sponsor, Bitdefender!
Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services. Learn more at Bitdefender.com.
-
Can't Our Employees Just Go Back to Stealing Pens?
10 december 2024 · 38 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Itzik Alvas, co-founder and CEO, Entro.
In this episode:
What to expect when you're offboarding
The threats are coming from inside the organization
The risk of stale identities
Working backward to risk
Thanks to our podcast sponsor, Entro!
Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today's complex digital ecosystem.
-
We Take Software Security Seriously, As Long As It Ships on Time
3 december 2024 · 35 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Jeremy Epling, chief product officer, Vanta.
In this episode:
What is the future of cybersecurity?
Designing the outcomes we want
The promise and peril of AI
Is open-source open to more threats?
Thanks to our podcast sponsor, Vanta!
Say goodbye to spreadsheets and screenshots.
Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across 30 frameworks, you'll streamline compliance— and never duplicate your efforts. Learn more at Vanta.com.
-
Aww, Your Cybersecurity Concerns Are So Adorable (LIVE in La Jolla)
26 november 2024 · 41 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Gary Hayslip, CISO, Softbank Investment Advisors. Joining us is Keith McCartney, VP, Security and IT, DNAnexus.
In this episode:
Closing the Credibility Gap
Clarifying the Role of Security Engineering
Building Resilience at Scale
AI Frameworks and Cybersecurity
Thanks to our podcast sponsor, Entro!
Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today's complex digital ecosystem.
-
Once You Show Me Your Diploma, I'll Explain Why We Don't Gatekeep
19 november 2024 · 40 min
All links and images for this episode can be found on CISO Series. Lees meer
This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Jimmy Benoit, vp, cybersecurity, PBS.
In this episode:
Starting early on security awareness
The limits of gamification
Technically qualified
Understanding your risk tolerance
Thanks to our podcast sponsor, Bitdefender!
Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services.