CISO Series Podcast

Latest Episodes:

A Threat Actor Just "Liked" My Dashboard Screenshot Mar 12, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Jamil Farshchi, evp and CISO, Equifax.

In this episode:

Data leaks are hard enough to deal with when caused by threat actors, but how bad is a self-inflicted data leak?
Why do these types of incidents happen?
How should an organization assess the risk it introduced?

Thanks to our podcast sponsor, Varonis

Ready to reduce your risk without taking any? Try Varonis' free data risk assessment. It takes minutes to set up and in 24 hours you'll have a clear, risk-based view of the data that matters most and a clear path to automated remediation. Get started for free today.

We Can't Fail at API Security If We Never Even Try Mar 05, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our sponsored guest, Yoav Nathaniel, co-founder and CEO, Silk Security.

In this episode:

Why does it seem like securing APIs is so hard? Is it just a matter of complexity?
Why does it seem like we can't go a week without hearing reports of a data leak caused by a failure in API security?
Why do organizations struggle with API security?

Thanks to our podcast sponsor, Silk

Silk makes it easy for security teams to resolve more critical cyber risks in a fraction of the time. Instead of toiling over spreadsheets, and watching alert backlog graphs go up, Silk helps security teams contextualize, prioritize and collaborate with stakeholders in IT to regain control over their risk posture.

I'm Stuffed, I Just Couldn't Take Another Credential Feb 27, 2024

Show notes

All links and images for this episode can be found on CISO Series.

In this episode:

Why do credential stuffing attacks put organizations in such a tricky spot?
Why is blaming the victim rarely the right move?
What kind of reasonable expectations can companies have about how much users will do to protect themselves?

Thanks to our podcast sponsor, Thoropass

Still spending time collecting evidence and worrying about breaking free of an infinite audit loop? Relax! We fixed audits. Thoropass provides complete infosec compliance management, continuous monitoring, and security audits through AI-infused software and expert guidance – allowing you to do business with confidence. Learn more at www.thoropass.com.

Is There a Konami Code For Cyber Talent? Feb 20, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest Kelly Haydu, vp, infosec, technology, and enterprise applications, CarGurus.

In this episode:

What other career fields are rife with talent that could successfully transition into our industry?
What kind of framework do we need to surface a more diverse array of talent?
Also, what happens when a vendor goes over your head to the CEO?

Thanks to our podcast sponsor, Panoptica, Cisco's Cloud Application Security Platform

Panoptica, Cisco's Cloud Application Security solution, provides end-to-end lifecycle protection for cloud native application environments. It empowers organizations to safeguard their APIs, serverless functions, containers, and Kubernetes environments. Panoptica ensures comprehensive cloud security, compliance, and monitoring at scale, offering deep visibility, contextual risk assessments, and actionable remediation insights for all your cloud assets.

It's Like a Trust Fall, But We Know You'll Hit the Floor Feb 13, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Grant Anthony, CISO, Orion Health.

In this episode:

Why getting buy-in to your security awareness program is so critical?
Why do so many organizations get it so wrong?
What framework can we apply to actually build trust with security awareness?

Thanks to our podcast sponsors, Varonis

How Can We Apply Our Shadow IT Failings to Botch Our AI Policy? (LIVE in Clearwater) Feb 06, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Brett Conlon, CISO, American Century Investments. Joining me is our guest, Mical Solomon, CISO, Port Authority of NY and NJ.

In this episode:

Does the hype around generative AI tools make it seem like these are a totally new technological challenge for cybersecurity?
Are many of the challenges with securing them the same that we've seen from the rise of SaaS and proliferation of shadow IT?
What lessons from that transition can we apply to AI?

Thanks to our podcast sponsors, Living Security & KnowBe4

Living Security is the global leader in human risk management. Our HRM platform Unify transforms human risk into proactive defense by quantifying human risk and engaging the workforce with relevant training and communications proven to change human behavior. Living Security is trusted by security-minded organizations, including Mastercard, Verizon, Biogen, AmerisourceBergen, and Hewlett-Packard. Learn more at www.livingsecurity.com.

KnowBe4's SecurityCoach enables real-time security coaching of your users in response to risky behavior. Based on the rules in your existing security software stack, you can configure your real-time coaching campaign to determine the frequency and type of SecurityTip that is sent to users at the moment risky behavior is detected.

Maybe If You Worked Harder Your Burnout Wouldn't Be Such a Liability Jan 30, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Shyama Rose, CISO and head of IT, Affirm.

In this episode:

What is the impact of burnout to your security team directly?
Does burnout directly play a role in how an organization can respond to security incidents.?
All jobs involve dealing with stress, but what should we consider normal in cybersecurity? And when does that stress endanger your security mission?

Thanks to our podcast sponsors, Panoptica, Cisco's Cloud Application Security Platform

Panoptica, Cisco's Cloud Application Security solution, provides end-to-end lifecycle protection for cloud native application environments. It empowers organizations to safeguard their APIs, serverless functions, containers, and Kubernetes environments. Panoptica ensures comprehensive cloud security, compliance, and monitoring at scale, offering deep visibility, contextual risk assessments, and actionable remediation insights for all your cloud assets.

For CISOs, It's Less of a Golden Parachute and More a Pair of Brown Pants Jan 23, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Trina Ford, CISO, iHeartMedia.

In this episode:

Why has the landscape for CISOs seemed particularly perilous in the past year?
Does there seem to be more responsibilities with very real legal consequences attached to the role?
There is a lot of guidance out there for CISO candidates negotiating for a new position, but what can a current CISO do once they are already in the role?

Thanks to our podcast sponsors, Thoropass

Elvis Is Alive and He's Reusing Your Passwords Jan 16, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Bob Schuetter, CISO, Ashland.

In this episode:

What should a company do when their name is in the press, but they didn't actually suffer a security incident?
How much difference is there in responding to a fake data breach versus a real one?
How would you handle responding to a fake breach claim?

Thanks to our podcast sponsors, Thoropass

SSO No You Didn't (LIVE in La Jolla, CA) Jan 09, 2024

Show notes

All links and images for this episode can be found on CISO Series.

This week's episode is hosted by me, David Spark (@dspark), producer of CISO Series and Billy Norwood, CISO, FFF Enterprises. Joining us is our guest, Joshua Barons, head of information security at San Diego Zoo Wildlife Alliance.

In this episode:

Wasn't single sign-on supposed to solve all of our security woes?
So why are we still seeing everything from phishing to session hijacking with SSO?
Is this just growing pains for SSO or does this hint at a persistent problem?

Thanks to our podcast sponsors, Praetorian

Praetorian helps companies adopt a prevention-first cybersecurity strategy by actively uncovering vulnerabilities and minimizing potential weaknesses before attackers can exploit them.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected