CISO Stories Podcast (Audio)

Latest Episodes:

Cybersecurity Myths & Misconceptions: Avoiding the Pitfalls - Eugene Spafford - CSP #100 Dec 13, 2022

Show notes

Many people working in cybersecurity fall victim to myths, advertising hype, and misconceptions about fundamental concepts. The speaker has recently coauthored, with two distinguished colleagues, a book that is intended to dispel some of the common myths and provide information about how to better copy with the changing environment of cybersecurity. Spafford, E. et al. 2022. Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls That Derail Us. 1st Ed.

Available for Pre-Order on Amazon.com.

This segment is sponsored by Wiz.

Visit https://securityweekly.com/wiz to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp100

Build a Cybersecurity Vision and Strategy They Can Visualize - Jason Clark - CSP #99 Dec 06, 2022

Show notes

Cybersecurity leaders are evaluated by their ability to build and sell a strategy that meets the needs of the organization. Listen to Jason's experience in creating an impactful vision and cybersecurity strategy executive management can embrace!

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://files.scmagazine.com/wp-content/uploads/2022/11/CISOSTORIES_JasonClark_Article.pdf Clark, J. 2019. Building a Security Vision and Strategy. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pgs. . Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald.

This segment is sponsored by Wiz.

Visit https://securityweekly.com/wiz to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp99

What is a vCISO? What Do They Do? Does Having One Make Sense? - Michael Phillips & Matthew DeChant - CSP #98 Nov 29, 2022

Show notes

Gartner says, "Organizations who recognize the value of a security leader but can't afford a traditional CISO should consider virtual options. "With a current total cash compensation ranging from $208K to $337K, hiring a chief information security officer (CISO) may not be in the budget for small or midsize organizations, especially those that aren't heavily regulated. Join 2 CISOS that have taken the plunge into the world of being a vCISO, as they share their experiences.

This segment is sponsored by Wiz.

Visit https://securityweekly.com/wiz to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp98

SMB vs Large Infosec: Different Approaches Required! - Dane Sandersen - CSP #97 Nov 22, 2022

Show notes

Are you a Small or Medium Business (SMB) or a Large Business grappling with infosec challenges? Dane moved from a large, well-funded organization to a smaller organization which accelerated global business growth during his tenure! Join us as we discuss these differences and how to adapt to the different environments.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://files.scmagazine.com/wp-content/uploads/2022/11/CISOSTORIES_DaneSandersen_Article.pdf Sandersen, D. 2019. Moving From a Large Company to Small-Medium-Sized Company as CISO. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pgs. 484-485. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald.

This segment is sponsored by Wiz.

Visit https://securityweekly.com/wiz to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp97

How the CISO can Make the Biggest Impact for the Company - Tim Callahan - CSP #96 Nov 15, 2022

Show notes

Information Security is often seen as a cost center and drain on the revenue of a company. It may be seen as necessary to protect the company, but the value is not always understood by leadership and peers to the CISO. Taken from personal experience, in this talk, we will explore some suggestions on how CISOs can bring and show value to their companies.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp96

The Value of Cyber Defense Competitions in Building a Strong SOC - Brian Wickenhauser - CSP #95 Nov 08, 2022

Show notes

The Security Operations Center is often the first line of engagement for security incidents. It's essential that SOC teams are planned, practiced, and prepared to act. One of the best ways to do that? Cyber Defense Exercises. Join us as we discuss how these work and the value to the program.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp95

Surviving and Thriving in the CISO Role for the Long Run - Jim Cameli - CSP #94 Nov 01, 2022

Show notes

The average tenure of a CISO is 18 Months to 5 years, depending upon the research. Learn from a CISO who has been employed by the same organization for almost 4 decades! Learn as Jim shares some of his key learnings as he has worked with an organization that has gone through many changes during his tenure, and some ideas to add to your own CISO career strategy.

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp94

Approaching Cloud Security from a Cloud-Native Perspective - Josh Dreyfuss - CSP #93 Oct 25, 2022

Show notes

What is the best way to approach cloud security as the cloud environment evolves and what should security leaders consider as they think about scaling their security? Join us to learn about how CISO of Wiz, Ryan Kazanciyan thinks about cloud security from a cloud-native perspective, what makes securing your cloud infrastructure so challenging, and what makes your cloud security posture "good"?

This segment is sponsored by Wiz.

Visit https://securityweekly.com/wiz to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp93

NIST Privacy Framework 101 - Dylan Gilbert - CSP #92 Oct 18, 2022

Show notes

The NIST Privacy Framework is a voluntary tool developed in collaboration with stakeholders intended to help organizations identify and manage privacy risk to build innovative products and services while protecting individuals' privacy. Join the leader of the NIST development team to learn about why the framework was created, how it can be used, and the resources available.

NIST Privacy Framework, https://www.nist.gov/privacy-framework

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp92

Cybersecurity Leadership Through Adversity - Marc Varner - CSP #91 Oct 11, 2022

Show notes

The Covid-19 pandemic caused many organizations to quickly pivot to a remote environment, while for others, this was more business as usual and simply acquiring more VPN licenses. Marc has led technology risk management/security for several large companies, experiencing even more impactful changes. How do you lead through this adversity? How do you get the organization to change? Join us as Marc shares his experience.

This segment is sponsored by Wiz.

Visit https://securityweekly.com/wiz to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Show Notes: https://securityweekly.com/csp91