Alle afleveringen van CISO Series Podcast – pagina 3 van 9

Wait, We Can Prioritize Data Privacy Before an Incident? (LIVE at Stanford University)

12 november 2024 · 46 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Amy-Steagall-Hess, CISO, Stanford University. Joining us is Michael Tran Duff, CISO, data privacy officer, Harvard University.

In this episode:

Turning a mirror on zero trust

Is AI coming for our jobs?

Responding to skepticism about CISOs

A CISO at the crossroads

Thanks to our podcast sponsor, Vorlon Security and Wiz!

Vorlon helps organizations take back control of their data by providing continuous visibility of sensitive data shared via API across third-party applications. Know what data goes where, when, and how between third-party apps with external threat intelligence. Reduce the complexity of investigating and responding to third-party security incidents with Vorlon.

Wiz transforms cloud security for customers – including 40% of the Fortune 100 – by enabling a new operating model. Wiz CNAPP empowers security and development teams to build fast and securely by providing visibility into their cloud environments. With Wiz, organizations can prioritize risk and stay agile.

Luckily, We Haven't Had to Adapt to Any New Technologies Before AI

5 november 2024 · 41 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is our sponsored guest Jadee Hanson, CISO, Vanta.

In this episode:

Embracing BYOAI

The changing government contractor landscape

Creating better security outcomes

Automating supply chain security

Thanks to our podcast sponsor, Vanta!

Say goodbye to spreadsheets and screenshots.

Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across 30 frameworks, you'll streamline compliance— and never duplicate your efforts.

We Need to Hire a Unicorn But We Only Have Budget for a Donkey

29 oktober 2024 · 35 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Jason Shockey, CISO, Cenlar FSB.

In this episode:

Ground the SOC in communication

Training and mentoring talent

Nailing a first security hire

A case for optimism

Thanks to our podcast sponsor, Bitdefender!

Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services.

Who Knows What Evil Lurks in the Heart of Low Code/No Code? (LIVE in Los Angeles)

22 oktober 2024 · 42 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Sasha Pereira, CISO, WASH. Joining us is Cyrus Tibbs, CISO, PennyMac. This episode was recorded live at ISSA-LA.

In this episode:

Building the foundation for data minimization

No-code needs to be no problem

Seeking alignment in a SOC career

MFA is not a cybersecurity panacea

Thanks to our podcast sponsor, Nudge Security!

Get a full inventory of all SaaS accounts ever created by anyone in your org, in minutes, along with automated workflows to scale SaaS security and governance. No agents, browser plug-ins or network changes required. Start today with a free 14-day trial.

Once the Panic Subsides You'll Appreciate This Phishing Test (LIVE in Houston, TX)

15 oktober 2024 · 43 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Jerich Beason, CISO, WM. Joining us is Teresa Tonthat, vp, associate CIO, Texas Children's Hospital. This episode was recorded live at HOU.SEC.CON.

In this episode:

Connecting with the business

Keep the users in mind

Ground security in reality

Teach, don't shame

Thanks to our podcast sponsor, Vorlon Security!

Vorlon helps organizations take back control of their data by providing continuous visibility of sensitive data shared via API across third-party applications. Know what data goes where, when, and how between third-party apps with external threat intelligence. Reduce the complexity of investigating and responding to third-party security incidents with Vorlon.

Does Burying Your Head in the Sand Count as a Security Posture? (LIVE in Boca Raton, FL)

8 oktober 2024 · 46 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Eduardo Ortiz, vp, global head of cybersecurity, Techtronic Industries. Joining us is Adam Fletcher, CSO, Blackstone.

In this episode:

Keeping our eyes on new risks

The hiring disconnect

Mental health in incident response

Moving on from CrowdStrike

Thanks to our podcast sponsors, Fortra, Quadrant Information Security, and Savvy Security!

Fortra's Data Protection solutions protect sensitive data while keeping users productive. Our interlocking data loss prevention (DLP), data classification, and secure collaboration tools can be SaaS deployed or on-premises, and we offer managed services to extend your team and reduce risk. Visit www.fortra.com/solutions/data-security/data-protection for more information.

Quadrant Security is bad news for bad dudes. Quadrant's XDR solution combines the best people, processes, and technology — managing your security so you can manage business operations. For a limited time, our analysts will provide your organization a free dark web report, detailing the data leaving you vulnerable. Learn more: quadrantsec.com/darkweb.

Despite significant investments in SSO, MFA, IGA, and PAM, organizations still face significant challenges in securing identities, particularly with SaaS apps. Savvy Security augments these tools with full app and identity visibility to discover and remediate shadow and shared accounts, misconfigured authentication, and weak, reused, or compromised credentials. Visit savvy.security/ciso-series to learn more.

We're Lowering the Requirement for Entry Level to Just 8 Years of Experience

1 oktober 2024 · 36 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Steve Person, CISO, Cambia Health.

In this episode:

The changing CISO landscape

Rethinking the cybersecurity talent shortage

Sharpening your CISO skills

Do CISOs need to go back to school?

Thanks to our podcast sponsor, Vanta!

Whether you're starting or scaling your security program, Vanta helps you automate compliance across SOC 2, ISO 27001, and more. Streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies use Vanta to manage risk and prove security.

… And the Business Listened to the CISO and Everyone Lived Happily Ever After

24 september 2024 · 37 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Stephen Harrison, CISO, MGM Resorts International.

In this episode:

Understanding the AI attack surface

Low code, low security?

Chief information storytelling officer

Finding the right partners

Thanks to our podcast sponsor, Vectra AI!

Vectra AI is the only extended detection and response (XDR) with AI-driven Attack Signal Intelligence. Vectra AI's attack signal intelligence platform uses AI to find attacks on networks, identities, clouds and GenAI tools. Learn more at vectra.ai/showme.

Our Guardrails Only Fail When You Try To Go Around Them (LIVE in Seattle)

17 september 2024 · 45 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode was recorded in front of a live audience in Seattle as part of the National Cybersecurity Alliance's event Convene. Recording is hosted by me, David Spark (@dspark), producer of CISO Series and Nicole Ford, SVP and CISO, Nordstrom. Joining us is guest, Varsha Agrawal, head of information security, Prosper Marketplace.

In this episode:

Who guards the AI guardrails?

What should security awareness training look like?

The authentication point of failure

Uncommon sense

Thanks to our podcast sponsors, KnowBe4, Proofpoint, and Vanta!

KnowBe4's PhishER Plus is a lightweight SOAR platform that streamlines threat response for high-volume, potentially malicious emails reported by users. It automatically prioritizes messages, helping InfoSec and Security Operations teams quickly address the most critical threats, reducing inbox clutter and enhancing overall security efficiency.

Proofpoint, Inc. is a leading cybersecurity and compliance company that protects organizations' greatest assets and biggest risks: their people. With an integrated suite of cloud-based solutions, Proofpoint helps companies around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber-attacks.

Whether you're starting or scaling your security program, Vanta helps you automate compliance across SOC 2, ISO 27001, and more. Streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies use Vanta to manage risk and prove security.

Our Cybersecurity Journey Starts With a Single Overworked Staffer

10 september 2024 · 41 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is Kush Sharma, Director Municipal Modernization & Partnerships, Municipal Information Systems Association, Ontario (MISA Ontario).

In this episode:

Your first security hire

Moving beyond the basics with critical infrastructure

Untangling the Gordian Knot of municipal cybersecurity

Starting from square one

Thanks to our podcast sponsor, Material Security!

Material Security is a multi-layered email threat detection & response toolkit designed to stop attacks and reduce the threat surface across all of Microsoft 365 and Google Workspace. Learn more at material.security.

Red Flag? My Vendor Just Asked for My Mother's Maiden Name

3 september 2024 · 38 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is Bethany De Lude, CISO, the Carlyle Group.

In this episode:

CISOs as storytellers

Grinding a CISO's gears

An evolving role

Earning trust with vendors

Thanks to our podcast sponsor, Scrut Automation!

Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Our best-in-class features like process automation, AI, and 75+ native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit www.scrut.io to learn more or schedule a demo.

Well, I Think My Relationship With the CIO Improved When I Took Their Job

27 augustus 2024 · 37 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is Ty Sbano, CISO, Vercel.

In this episode:

Perception is the reality for insider threats

Coaching rather than shaming

Working to make DevOps redundant

Fixing a strained relationship

Thanks to our podcast sponsor, Backslash!

Backslash Security is your modern AppSec solution, focusing on what truly matters—real risks. Gain clear visibility into your applications and fix only the code and open-source software that's actually in use, making your AppSec smarter and more efficient. Learn more at https://www.backslash.security/.

I Said I Was Technically a CISO, Not a Technical CISO

20 augustus 2024 · 42 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is Fredrick Lee (Flee), CISO, Reddit.

In this episode:

The case for the technical CISO

Making Recall safe for business

The aches and pains of cybersecurity hiring

Leveling up municipal cybersecurity

Thanks to our podcast sponsor, ThreatLocker!

ThreatLocker® is a global leader in Zero Trust endpoint security offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Why Are Fortune 500 Companies Swiping Right on 3-Person Startups?

13 augustus 2024 · 39 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is Justin Somaini, partner, YL Ventures.

In this episode:

The startup balancing act

Giving back is its own reward

When to pen test

Getting ahead with generative AI policy

Thanks to our podcast sponsor, Vanta!

Whether you're starting or scaling your security program, Vanta helps you automate compliance across SOC 2, ISO 27001, and more. Streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies use Vanta to manage risk and prove security.

We Make Threat Actors Read Our Resiliency Policy Before Attacking Us

6 augustus 2024 · 38 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is Patti Titus, CISO, Booking Holdings.

In this episode:

Defense vs. Resilience

Communication is on par with mitigation

Preparing like its post-quantum

The challenges and opportunities of diversity

Thanks to our podcast sponsor, Cyera!

Cyera's AI-powered data security platform gives companies visibility over their sensitive data, context over the risk it represents, and actionable, prioritized remediation guidance. As a cloud-native, agentless platform, Cyera provides holistic data security coverage across SaaS, PaaS, IaaS and on-premise environments. Visit www.cyera.io to learn more.

Incident Response Is So Important We Might Try Getting Good At It

30 juli 2024 · 35 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our sponsored guest, Amir Khayat, CEO and co-founder, Vorlon Security.

In this episode:

The evolving challenges of incident response

Repetition isn't always the mother of automation

Third-party APIs, first-party risk

You know what they say when you assume something

Thanks to our podcast sponsor, Vorlon Security!

Vorlon helps organizations take back control of their data by providing continuous visibility of sensitive data shared via API across third-party applications. Know what data goes where, when, and how between third-party apps with external threat intelligence. Reduce the complexity of investigating and responding to third-party security incidents with Vorlon.

Everyone Has a Zero-Trust Plan Until They Get Punched in the Face

23 juli 2024 · 39 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Danny Jenkins, CEO, ThreatLocker.

In this episode:

The limits of zero-trust

Pentesting for SMBs

An ounce of prevention is worth a pound of response

The cream of the security crop

Thanks to our podcast sponsor, ThreatLocker!

ThreatLocker® is a global leader in Zero Trust endpoint security offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

I Don't Want Insider Risk. You Take It.

16 juli 2024 · 34 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our sponsored guest, Abhishek Agrawal, CEO and co-founder, Material Security.

In this episode:

What does defense in depth look like in the cloud?

Collaborating on insider risk

Email is a vector and a target

Understand risk during an IPO

Thanks to our podcast sponsor, Material Security!

Material Security is a multi-layered email threat detection & response toolkit designed to stop attacks and reduce the threat surface across all of Microsoft 365 and Google Workspace. Learn more at material.security.

How to Get the Most for Yourself Through Altruism

9 juli 2024 · 39 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Jana Moore, CISO, Belron.

In this episode:

SEC disclosure rules require cyber readiness

Breaking up the "boys club"

Building a threat intelligence ecosystem

Blending InfoSec communities and careers

Thanks to our podcast sponsor, Vanta!

Whether you're starting or scaling your security program, Vanta helps you automate compliance across SOC 2, ISO 27001, and more. Streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies use Vanta to manage risk and prove security.

Who Owns AI Risk? NOT IT!

2 juli 2024 · 39 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Jason Clark, chief strategy officer, Cyera.

In this episode:

Does AI require new security measures?

Meeting the new SEC requirements

Empowerment through data security

Upskilling with Gen AI?

Thanks to our podcast sponsor, Cyera!

Cyera's AI-powered data security platform gives companies visibility over their sensitive data, context over the risk it represents, and actionable, prioritized remediation guidance. As a cloud-native, agentless platform, Cyera provides holistic data security coverage across SaaS, PaaS, IaaS and On-premise environments. Visit www.cyera.io to learn more.

How About This? Only Attack the Endpoints We Configured

25 juni 2024 · 40 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest and winner of Season 2 of Capture the CISO, Russell Spitler, CEO and co-founder, Nudge Security.

In this episode:

The Gordian knot of EDR

Can we keep up with patching?

Making AI practical

Standardization or granularity?

Thanks to our podcast sponsor, ThreatLocker!

ThreatLocker® is a global leader in Zero Trust endpoint security offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

The Post-it Note Clearly Says "Don't Share" Right Under My Password

18 juni 2024 · 37 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Allan Alford, CISO, Eclypsium.

In this episode:

Evolving public-private partnerships

New technology, but not a new challenge

Securing the hidden layers of the supply chain

Balancing usability and control

Thanks to our podcast sponsor, Eclypsium

Eclypsium is helping enterprises and government agencies mitigate risks to their infrastructure from complex technology supply chains. Our cloud-based and on-premises platform provides digital supply chain security for software, firmware and hardware in enterprise infrastructure. Get started today at eclypsium.com/spark.

Who You Gonna Call? LEGAL COUNSEL!

11 juni 2024 · 38 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest, Ryan Bachman, evp and global CISO, GM Financial.

In this episode:

A changing of the executive guard?

Playing nice with cyber insurance

What does leadership want out of a CISO?

Who does a CISO call first?

Thanks to our podcast sponsor, Vanta

Whether you're starting or scaling your security program, Vanta helps you automate compliance across SOC 2, ISO 27001, and more. Streamline security reviews by automating questionnaires and demonstrating your security posture with a customer-facing Trust Center. Over 7,000 global companies use Vanta to manage risk and prove security.

I'm Rewarding Your Successful Use of the Security Budget by Giving You Less of It

4 juni 2024 · 37 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is my guest, Aamir Niazi, executive director and CISO, SMBC Capital Markets.

In this episode:

Communicating security accomplishments

Spotting red flags in an interview

What does offensive security look like today?

Where Gen AI is fitting into cybersecurity

Thanks to our podcast sponsor, Cyera

Cyera's AI-powered data security platform gives companies visibility over their sensitive data, context over the risk it represents, and actionable, prioritized remediation guidance. As a cloud-native, agentless platform, Cyera provides holistic data security coverage across SaaS, PaaS, IaaS and On-premise environments. Visit www.cyera.io to learn more.

Ransomware? Why'd It Have to Be Ransomware? (Live in San Francisco)

28 mei 2024 · 44 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Steve Zalewski, co-host, Defense in Depth. Recorded live at BSidesSF.

In this episode:

Are companies taking the air out of the open source balloon?

What's broken about cybersecurity hiring?

Do we need minimum requirements for cybersecurity knowledge in sales?

Thanks to our podcast sponsors, Devo, Eclypsium & NetSPI

Devo replaces traditional SIEMs with a real-time security data platform.

Devo's integrated platform serves as the foundation of your security operations and includes data-powered SIEM, SOAR, and UEBA. AI and intelligent automation help your SOC work faster and smarter so you can make the right decisions in real-time.

Eclypsium is helping enterprises and government agencies mitigate risks to their infrastructure from complex technology supply chains. Our cloud-based and on-premises platform provides digital supply chain security for software, firmware and hardware in enterprise infrastructure. Get started today at eclypsium.com/spark.

NetSPI ASM continuously scans your external perimeter to identify, inventory, and reduce risk to both known and unknown assets. It blends scanning methodology with our consultants' human intelligence to identify previously undiscovered data sources and vulnerabilities so you can remediate what matters most.

You Can't Leak What You Don't Collect

21 mei 2024 · 34 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our sponsored guest, Jeremiah Roe, advisory CISO, OffSec.

In this episode:

What happens as data minimization in the US changes from a potential policy goal to a regulatory imperative?

How does this impact the rest of the industry?

How do CISOs start getting ready for compliance?

How to improve cybersecurity training and development?

Thanks to our podcast sponsor, OffSec

OffSec helps companies like Cisco, Google, and Salesforce upskill cybersecurity talent through comprehensive training and resources. With programs ranging from red team and blue team training and more, your team will be ready to face real-world threats. Request a free trial for your team to explore OffSec's learning library and cyber range.

Our Help Desk Plaque Reads "Over 100,000 Threat Actors Served"

14 mei 2024 · 36 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest, Martin Mazor, vp and CISO, onsemi.

In this episode:

Has the shine worn off the cybersecurity promise of MFA?

Why are threat actors increasingly finding ways to get around it?

Given the high profile attacks we've seen getting around MFA, how much security stock should we put into it going forward?

Thanks to our podcast sponsor, Material Security

Material Security is a multi-layered email threat detection & response toolkit designed to stop attacks and reduce the threat surface across all of Microsoft 365 and Google Workspace. Learn more at material.security.

Can't Talk, I'm Onboarding My Kids To Their First Soccer Practice (Live in Mountain View, CA)

7 mei 2024 · 45 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our guest, TC Niedzialkowski, CISO, Nextdoor.

In this episode:

Has the line between work and personal devices blurred?

Why are we seeing signs that that line no longer exists for employees?

What is the path of cybersecurity to keep company data secured when its continually commingling with personal devices?

Thanks to our podcast sponsors, Eclypsium and Normalyze

Eclypsium is helping enterprises and government agencies mitigate risks to their infrastructure from complex technology supply chains. Our cloud-based and on-premises platform provides digital supply chain security for software, firmware and hardware in enterprise infrastructure. Get started today at eclypsium.com/spark

Where is my data? Is it sensitive? Who has access to the data? What are the risks? What is the cost of exposure? Am I compliant now? Enter Normalyze.

Normalyze's agentless, machine-learning scanning platform continuously discovers sensitive data, resources, and access paths in all cloud environments. Learn more.

I Really Shouldn't Have Agreed to Variable Rate Technical Debt

30 april 2024 · 36 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our sponsored guest, Aaron Shaha, CISO, CyberMaxx.

In this episode:

Is technical debt an inevitability in any organization?

How do you go about "paying it down?"

How do you decide when you need a systematic refresh and when can you kick the can down the road a little longer?

Thanks to our podcast sponsor, CyberMaxx

CyberMaxx offers MaxxMDR, our next-generation managed detection and response (MDR) solution that helps customers assess, monitor, and manage their cyber risks. MaxxMDR fuels defensive capabilities with insights from offensive security, DFIR, and threat hunting, on top of a technology-agnostic deployment model. We think like an adversary but defend like a guardian.

We'll Invest in Resilience as Soon as the Ransom Payment Clears

23 april 2024 · 36 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is my guest, Thom Langford, CISO, Velonetic.

In this episode:

Why do lots of businesses pledge to never pay ransomware demands?

And why do their priorities quickly change when they need to get the business back to normal after an attack occurs?

What good is a pledge like that without the infrastructure and organizational commitment to make it possible?

Thanks to our podcast sponsor, CyberMaxx

CyberMaxx offers MaxxMDR, our next-generation managed detection and response (MDR) solution that helps customers assess, monitor, and manage their cyber risks. MaxxMDR fuels defensive capabilities with insights from offensive security, DFIR, and threat hunting, on top of a technology-agnostic deployment model. We think like an adversary but defend like a guardian.

We Could Lower Risk If We Shrunk Our Business

16 april 2024 · 38 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our sponsored guest, Matt Radolec, vp, incident response and cloud operations, Varonis.

In this episode:

Why is retaining cyber talent so hard?

How can organizations keep an employee from going elsewhere?

Why do organizations often not prioritize the factors to keep key employees?

Thanks to our podcast sponsor, Varonis

Ready to reduce your risk without taking any? Try Varonis' free data risk assessment. It takes minutes to set up and in 24 hours you'll have a clear, risk-based view of the data that matters most and a clear path to automated remediation. Get started for free today.

Our Benefits Include Medical, Dental, and Burnout

9 april 2024 · 43 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest, Joshua Brown, vp and global CISO, H&R Block.

In this episode:

Why is retaining cyber talent so hard?

How can organizations keep an employee from going elsewhere?

Why do organizations often not prioritize the factors to keep key employees?

Thanks to our podcast sponsor, CyberMaxx

CyberMaxx offers MaxxMDR, our next-generation managed detection and response (MDR) solution that helps customers assess, monitor, and manage their cyber risks. MaxxMDR fuels defensive capabilities with insights from offensive security, DFIR, and threat hunting, on top of a technology-agnostic deployment model. We think like an adversary but defend like a guardian.

Your Biggest Threats Don't Get a Ransom Payment, They Get a Paycheck

2 april 2024 · 36 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Alex Green, CISO, Delta Dental.

In this episode:

Is it true that employees cause as many significant cybersecurity incidents as outside threat actors?

Does this come down to a lack of awareness or poorly designed security implementation?

And what can we do to improve this situation?

Thanks to our podcast sponsor, Silk Security

Silk makes it easy for security teams to resolve more critical cyber risks in a fraction of the time. Instead of toiling over spreadsheets, and watching alert backlog graphs go up, Silk helps security teams contextualize, prioritize and collaborate with stakeholders in IT to regain control over their risk posture.

A Stressed CISO Is a Happy CISO

26 maart 2024 · 39 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest, Shawn Bowen, svp and CISO, World Kinect Corporation.

In this episode:

Is it true that CISOs feel their jobs are harder than ever with higher levels of stress?

Yet why does research also show that CISO job satisfaction increasing?

How do we make sense of this contradiction?

Thanks to our podcast sponsor, Silk Security

Silk makes it easy for security teams to resolve more critical cyber risks in a fraction of the time. Instead of toiling over spreadsheets, and watching alert backlog graphs go up, Silk helps security teams contextualize, prioritize and collaborate with stakeholders in IT to regain control over their risk posture.

BREAKING: "Department of No" Upgraded to "Department of Slow"

19 maart 2024 · 37 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our sponsored guest, Nadav Lotan, product management team leader, Cisco.

In this episode:

How can security teams do their jobs without seeming like an impediment to developers?

Why can this relationship seem oppositional?

How can both sides work together to better secure software without seeming like a road block?

Thanks to our podcast sponsor, Panoptica, Cisco's Cloud Application Security Platform

Panoptica, Cisco's Cloud Application Security solution, provides end-to-end lifecycle protection for cloud native application environments. It empowers organizations to safeguard their APIs, serverless functions, containers, and Kubernetes environments. Panoptica ensures comprehensive cloud security, compliance, and monitoring at scale, offering deep visibility, contextual risk assessments, and actionable remediation insights for all your cloud assets.

A Threat Actor Just "Liked" My Dashboard Screenshot

12 maart 2024 · 35 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Jamil Farshchi, evp and CISO, Equifax.

In this episode:

Data leaks are hard enough to deal with when caused by threat actors, but how bad is a self-inflicted data leak?

Why do these types of incidents happen?

How should an organization assess the risk it introduced?

Thanks to our podcast sponsor, Varonis

Ready to reduce your risk without taking any? Try Varonis' free data risk assessment. It takes minutes to set up and in 24 hours you'll have a clear, risk-based view of the data that matters most and a clear path to automated remediation. Get started for free today.

We Can't Fail at API Security If We Never Even Try

5 maart 2024 · 35 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our sponsored guest, Yoav Nathaniel, co-founder and CEO, Silk Security.

In this episode:

Why does it seem like securing APIs is so hard? Is it just a matter of complexity?

Why does it seem like we can't go a week without hearing reports of a data leak caused by a failure in API security?

Why do organizations struggle with API security?

Thanks to our podcast sponsor, Silk

Silk makes it easy for security teams to resolve more critical cyber risks in a fraction of the time. Instead of toiling over spreadsheets, and watching alert backlog graphs go up, Silk helps security teams contextualize, prioritize and collaborate with stakeholders in IT to regain control over their risk posture.

I'm Stuffed, I Just Couldn't Take Another Credential

27 februari 2024 · 39 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our sponsored guest, Jay Trinckes, director of compliance, Thoropass.

In this episode:

Why do credential stuffing attacks put organizations in such a tricky spot?

Why is blaming the victim rarely the right move?

What kind of reasonable expectations can companies have about how much users will do to protect themselves?

Thanks to our podcast sponsor, Thoropass

Still spending time collecting evidence and worrying about breaking free of an infinite audit loop? Relax! We fixed audits. Thoropass provides complete infosec compliance management, continuous monitoring, and security audits through AI-infused software and expert guidance – allowing you to do business with confidence. Learn more at www.thoropass.com.

Is There a Konami Code For Cyber Talent?

20 februari 2024 · 38 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest Kelly Haydu, vp, infosec, technology, and enterprise applications, CarGurus.

In this episode:

What other career fields are rife with talent that could successfully transition into our industry?

What kind of framework do we need to surface a more diverse array of talent?

Also, what happens when a vendor goes over your head to the CEO?

Thanks to our podcast sponsor, Panoptica, Cisco's Cloud Application Security Platform

Panoptica, Cisco's Cloud Application Security solution, provides end-to-end lifecycle protection for cloud native application environments. It empowers organizations to safeguard their APIs, serverless functions, containers, and Kubernetes environments. Panoptica ensures comprehensive cloud security, compliance, and monitoring at scale, offering deep visibility, contextual risk assessments, and actionable remediation insights for all your cloud assets.

It's Like a Trust Fall, But We Know You'll Hit the Floor

13 februari 2024 · 35 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Grant Anthony, CISO, Orion Health.

In this episode:

Why getting buy-in to your security awareness program is so critical?

Why do so many organizations get it so wrong?

What framework can we apply to actually build trust with security awareness?

Thanks to our podcast sponsors, Varonis

Ready to reduce your risk without taking any? Try Varonis' free data risk assessment. It takes minutes to set up and in 24 hours you'll have a clear, risk-based view of the data that matters most and a clear path to automated remediation. Get started for free today.

How Can We Apply Our Shadow IT Failings to Botch Our AI Policy? (LIVE in Clearwater)

6 februari 2024 · 42 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Brett Conlon, CISO, American Century Investments. Joining me is our guest, Mical Solomon, CISO, Port Authority of NY and NJ.

In this episode:

Does the hype around generative AI tools make it seem like these are a totally new technological challenge for cybersecurity?

Are many of the challenges with securing them the same that we've seen from the rise of SaaS and proliferation of shadow IT?

What lessons from that transition can we apply to AI?

Thanks to our podcast sponsors, Living Security & KnowBe4

Living Security is the global leader in human risk management. Our HRM platform Unify transforms human risk into proactive defense by quantifying human risk and engaging the workforce with relevant training and communications proven to change human behavior. Living Security is trusted by security-minded organizations, including Mastercard, Verizon, Biogen, AmerisourceBergen, and Hewlett-Packard. Learn more at www.livingsecurity.com.

KnowBe4's SecurityCoach enables real-time security coaching of your users in response to risky behavior. Based on the rules in your existing security software stack, you can configure your real-time coaching campaign to determine the frequency and type of SecurityTip that is sent to users at the moment risky behavior is detected.

Maybe If You Worked Harder Your Burnout Wouldn't Be Such a Liability

30 januari 2024 · 34 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Shyama Rose, CISO and head of IT, Affirm.

In this episode:

What is the impact of burnout to your security team directly?

Does burnout directly play a role in how an organization can respond to security incidents.?

All jobs involve dealing with stress, but what should we consider normal in cybersecurity? And when does that stress endanger your security mission?

Thanks to our podcast sponsors, Panoptica, Cisco's Cloud Application Security Platform

Panoptica, Cisco's Cloud Application Security solution, provides end-to-end lifecycle protection for cloud native application environments. It empowers organizations to safeguard their APIs, serverless functions, containers, and Kubernetes environments. Panoptica ensures comprehensive cloud security, compliance, and monitoring at scale, offering deep visibility, contextual risk assessments, and actionable remediation insights for all your cloud assets.

For CISOs, It's Less of a Golden Parachute and More a Pair of Brown Pants

23 januari 2024 · 45 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Trina Ford, CISO, iHeartMedia.

In this episode:

Why has the landscape for CISOs seemed particularly perilous in the past year?

Does there seem to be more responsibilities with very real legal consequences attached to the role?

There is a lot of guidance out there for CISO candidates negotiating for a new position, but what can a current CISO do once they are already in the role?

Thanks to our podcast sponsors, Thoropass

Still spending time collecting evidence and worrying about breaking free of an infinite audit loop? Relax! We fixed audits. Thoropass provides complete infosec compliance management, continuous monitoring, and security audits through AI-infused software and expert guidance – allowing you to do business with confidence. Learn more at www.thoropass.com.

Elvis Is Alive and He's Reusing Your Passwords

16 januari 2024 · 38 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Bob Schuetter, CISO, Ashland.

In this episode:

What should a company do when their name is in the press, but they didn't actually suffer a security incident?

How much difference is there in responding to a fake data breach versus a real one?

How would you handle responding to a fake breach claim?

Thanks to our podcast sponsors, Thoropass

Still spending time collecting evidence and worrying about breaking free of an infinite audit loop? Relax! We fixed audits. Thoropass provides complete infosec compliance management, continuous monitoring, and security audits through AI-infused software and expert guidance – allowing you to do business with confidence. Learn more at www.thoropass.com.

SSO No You Didn't (LIVE in La Jolla, CA)

9 januari 2024 · 43 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Billy Norwood, CISO, FFF Enterprises. Joining us is our guest, Joshua Barons, head of information security at San Diego Zoo Wildlife Alliance.

In this episode:

Wasn't single sign-on supposed to solve all of our security woes?

So why are we still seeing everything from phishing to session hijacking with SSO?

Is this just growing pains for SSO or does this hint at a persistent problem?

Thanks to our podcast sponsors, Praetorian

Praetorian helps companies adopt a prevention-first cybersecurity strategy by actively uncovering vulnerabilities and minimizing potential weaknesses before attackers can exploit them.

This Security Crisis Is the Perfect Time to Tell You I Was Right

2 januari 2024 · 43 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest this week, Mike Kelley, CISO, EW Scrips.

In this episode:

Why do a lot of security professionals feel unheard?

Does this frustration lead to some turning into scolds during a security incident, quick to say "I told you so"?

How do you manage these security pros when they don't feel heard, both before and during a crisis?

Thanks to our podcast sponsors, Praetorian

Praetorian helps companies adopt a prevention-first cybersecurity strategy by actively uncovering vulnerabilities and minimizing potential weaknesses before attackers can exploit them.

You're Not Leaving This House Until You Cover Up That LLM

12 december 2023 · 41 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Richard Ford, CTO, Praetorian.

In this episode:

Why do many CISOs think adopting new LLM-based tools will make breaches more likely?

Why the rush to throw money at them?

How do you go about building a security program that doesn't depend on individuals?

Thanks to our podcast sponsors, Praetorian

Praetorian helps companies adopt a prevention-first cybersecurity strategy by actively uncovering vulnerabilities and minimizing potential weaknesses before attackers can exploit them.

We Got This Far Without Hiring a Prompt Engineer

5 december 2023 · 45 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Suresh Vasudevan, CEO, Sysdig.

In this episode:

What will the employment landscape look like with Generative AI becoming the next big thing?

Will we be hiring prompt engineers in a few years?

Or will it become like putting "search engine proficiency" on your resume?

Thanks to our podcast sponsors, Sysdig

For businesses innovating in the cloud, every second counts. Sysdig strengthens cyber resilience by reducing the attack surface, detecting threats in real time, and accelerating incident response. Our platform correlates signals across cloud workloads, identities, and services to enable businesses to prioritize risks and act decisively. Sysdig. Secure every second.

Ugh, Lawyers Take All the Fun Out of Surviving a Cyberattack (LIVE in Las Vegas)

28 november 2023 · 44 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and sponsored co-host Jason Sabin, CTO, DigiCert. Joining us is our guest, Alexandra Landegger, executive director of security, Collins Aerospace.

In this episode:

Are CISOs prepared for the legal surprises that can come in the aftermath of a cyberattack?

What about the legal fallout that can occur afterward?

How does a security team work with legal beforehand to address these issues when drawing up incident response?

Thanks to our podcast sponsors, DigiCert

DigiCert is a leading global provider of digital trust, the infrastructure that enables individuals and businesses to have confidence that their digital interactions are secure. DigiCert's award-winning solutions enable organizations to establish, manage, and extend public and private trust across their digital footprint, securing users, servers, devices, software and content.

Dear Abby: Should I Sell to a CISO During a Cyberattack? (LIVE in Mountain View)

21 november 2023 · 45 min

Afspelen

All links and images for this episode can be found on CISO Series. Lees meer

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Kurt Sauer, CISO, Docusign.

We recorded in front of a live audience at Microsoft's offices in Mountain View, CA as part of the ISSA-Silicon Valley chapter meeting. Check out all the photos from the event.

In this episode:

Is a high profile cyberattack the best time for salespeople to come out of the woodwork asking if the affected CISO would like to see their product, which would have helped prevent the attack?

Is there any way for a vendor to positively reach out to victims after a cyberattack?

Also, what could be some effective ways to invest IP with generative AI to create value for the organization?

Thanks to our podcast sponsors, Veza, Sysdig, and SlashNext

75% of breaches happen because of bad permissions. The problem is that you don't know exactly WHO has access to WHAT data in your environment. For example, roles labeled as "read-only" can often edit and delete sensitive data. Veza automatically finds and fixes every bad permission—in every app—across your environment.

For businesses innovating in the cloud, every second counts. Sysdig strengthens cyber resilience by reducing the attack surface, detecting threats in real time, and accelerating incident response. Our platform correlates signals across cloud workloads, identities, and services to enable businesses to prioritize risks and act decisively. Sysdig. Secure every second.

SlashNext Complete delivers zero-hour protection for how people work today across email, mobile, and browser apps. With SlashNext's generative AI to defend against advanced business email compromise, smishing, spear phishing, executive impersonation, and financial fraud, your people are always protected anywhere they work. Request a demo today.