CISO Stories Podcast (Audio)

Latest Episodes:

Collective Defense: The Importance of Partnerships in Cybersecurity - Jamil Farshchi - CSP #139 Sep 12, 2023

Show notes

With cybersecurity emerging as a board-level agenda item, collaboration is becoming increasingly high-stakes and multifaceted. Join us as we examine the opportunities and potential pitfalls of this new era, as well as the skills needed.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-139

Teams are Built around Key Players Performing Great Functions - Ralston Simmons - CSP #138 Sep 05, 2023

Show notes

Skills can be evolved and provide teams with the necessary talent. Join Ralston as he shares his experiences in recruiting, rotational programs, and supporting the key players with the right support system.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-138

Championship Results: No Bank Breaking or Boat Rocking! - Steve Hunt - CSP #137 Aug 29, 2023

Show notes

Top-performing CISOs shared with me their hacks for creating a team atmosphere, getting excellent and consistent results, and creating buy-in from management for their budgets, projects, and big ideas. This discussion goes beyond risk management into the realm of performance excellence. Impact Leaders Pod Training for Cyber Teams is a unique 8-week program to up-level performance in information technology professionals and teams. Participants grow leadership, emotional intelligence, teamwork, and performance excellence while excelling at their daily job responsibilities. For more information contact Steve or visit impactleaderscoaching.com

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-137

Supply Side Security: How to Maintain a Talent Pipeline - Helen Patton - CSP #136 Aug 22, 2023

Show notes

There are a ton of entry-level candidates for security roles, but we need mid- to late- career cyber candidates to fill our open positions. Hiring managers need to partner with non-security people to build and maintain that pipeline. Let's talk about how to go about getting this done.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-136

Deploying Zero Trust Without Destroying End User Trust - Mike Zachman, Colin Chisholm - CSP #135 Aug 15, 2023

Show notes

Deploying SASE (Secure Access Service Edge) is a critical step on your Zero Trust journey. It is not without risk, especially to the end user experience. Join us as we discuss our lessons-learned fresh from the deployment trenches.

This segment is sponsored by Google. Visit https://securityweekly.com/chrome to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-135

Security Musings from a Psychotherapeutic Perspective - Mark Eggleston - CSP #134 Aug 08, 2023

Show notes

Come listen in on hearing a CISO's story of going from carpenter to psychotherapist to security leader. The stories told will help anyone working in cyber - from those looking to break into cyber to those who are battle tested and looking for new support or coping strategies.

Morin, A. 2017. 13 Things Mentally Strong People Don't Do. Harper Collins. 13 Things Mentally Strong People Don't Do: Take Back Your Power, Embrace Change, Face Your Fears, and Train Your Brain for Happiness and Success: Morin, Amy: 9780062358301: Amazon.com: Books

This segment is sponsored by Google.

Visit https://securityweekly.com/chrome to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-134

Cyber Risk Governance: The Hype, Hope, & Harsh Reality - John Sapp - CSP #133 Aug 01, 2023

Show notes

Cyber Risk Governance or Cyber Risk Management has been an often talked about concept for more nearly two decades yet remains one of the most elusive and sought after outcomes by every C-level executive across every line of business in every industry sector and particularly in the Board room. In this session, we are going to jump into the shoes of the C-level executives and Board members as we describe "what they want" and how we achieve the visual representation of cyber risk in a way that is easily consumable in a language that is universally understood across three levels of stakeholders (Operational/Technical, IT Management, C-level / Board). This segment is sponsored by Google.

Visit https://securityweekly.com/chrome to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-133

The Tactics of Being Strategic in Cybersecurity - Jason Elrod - CSP #132 Jul 25, 2023

Show notes

Discussion about what it means to be strategic as a CISO and, more importantly, what specific, tactical steps are you can take to bring that into reality.

This segment is sponsored by Google.

Visit https://securityweekly.com/chrome to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-132

Protecting the Nation's Most Sensitive Information & 800-171 Update - Ron Ross - CSP #131 Jul 18, 2023

Show notes

NIST recently released the initial draft of a major update to its cybersecurity guidelines for protecting sensitive unclassified information. The update is intended to help federal agencies and government contractors implement cybersecurity requirements more consistently. The revised draft guidelines, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations (NIST Special Publication [SP] 800-171 Revision 3), will be of particular interest to the many thousands of businesses that contract with the federal government. Federal rules that govern the protection of controlled unclassified information (CUI), which includes such sensitive data as health information, critical energy infrastructure information and intellectual property, reference the SP 800-171 security requirements. Systems that store CUI often support government programs containing critical assets, such as design specifications for weapons systems, communications systems, and space systems. The changes are intended in part to help these businesses better understand how to implement the specific cybersecurity safeguards provided in a closely related NIST publication, SP 800-53 Rev. 5. The authors have aligned the language of the two publications, so that businesses can more readily apply SP 800-53's catalog of technical tools, or "controls," to achieve SP 800-171's cybersecurity outcomes. The update is designed to help maintain consistent defenses against high-level threats to information security. Many of the newly added requirements specifically address threats to CUI, which recently has been a target of state-level espionage. NIST wants to implement and maintain state-of-the-practice defenses because the threat space of hostile adversaries is changing constantly. Protecting CUI is critical to the national and economic security interests of the United States. This segment is sponsored by Google.

Visit https://securityweekly.com/chrome to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-131

The Evolution & Portability of the CISO Role - Sheldon Cuffie - CSP #130 Jul 11, 2023

Show notes

As a function of CISOs responsibilities, the best are multi-faceted leaders that shift between cyber, technical, and business domains in response to shifting cyber-risk landscape. This level of adaptability makes them portable to other CISO roles in different industries, and C-level roles that they may not have thought of and frankly, others may not have thought of for them.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp-130

Our TOPPODCAST Picks

Follow Us

Stay Connected

CISO Stories Podcast (Audio)

Related Podcasts

Links

Stay Connected