CISO Stories Podcast (Audio)

Latest Episodes:

The CISO Six Minute Rule - Renee Stark - CSP #60 Mar 08, 2022

Show notes

Sharing sensitive information on a website is likely to solicit a 'No Way" response from the CISO. Renee was faced with these decisions early in her career and needed a way to determine and communicate the right pragmatic and ethical decision. She developed the 'Six-Month Rule", which has evolved into the "Six-Minute Rule" to guide these decisions. Just us as Renee articulates how to help appropriate stakeholders make informed risk/reward decisions.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/12/CISOSTORIES_Renee_Guttmann-Stark_Article.pdf

Guttmann-Stark, R. 2019 Six-Minute Rule. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 194-195. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp60

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Lessons Learned from Building an ISAC - Grant Sewell - CSP #59 Mar 01, 2022

Show notes

Information Sharing and Analysis Centers (ISACs) were formed to promote the centralized sharing of threat intelligence within a particular sector. These have grown since the first ISAC in the late 1990's and now represent over 20 industry sectors. Grant shares his experience in working with an ISAC and how this benefited his organization and the broader CISO community.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/12/CISOSTORIES_Grant_Sewell_Article.pdf

Sewell, G. 2019. Experience with an Information Sharing and Analysis Center. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 116. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp59

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Getting the Board on Board With Security - Richard Clarke - CSP #58 Feb 22, 2022

Show notes

Richard spent several decades serving Presidents of both parties and understands what is necessary to implement effective security programs. Join us as he provides pragmatic tips for working with the Board of Directors to effectively communicate the investment need and articulate the benefits in terms the Board can support.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/12/CISOSTORIES_Richard_A_Clarke_Article.pdf

Clarke, R. A. 2019 Getting the Board on Board. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 499. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp58

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Understanding and Preparing for the Next Log4j - Benny Lakunishok - CSP #57 Feb 15, 2022

Show notes

The issues created by the recently disclosed Log4j vulnerability are bigger than you might expect and will have long-lasting implications. So, what was the Log4j vulnerability really, what can be done to reduce the risk it poses to organizations, and how can we better prepare for the next Log4j-level event? Benny Lakunishok, co-founder and CEO of Zero Networks, takes us deeper…

Show Notes: https://securityweekly.com/csp57

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

A Cost-Effective Approach to Security Risk Management - Jack Jones - CSP #56 Feb 08, 2022

Show notes

Risk management is arguably one of the most important functions of the CISO. How does the CISO establish the value proposition for an investment? Using a well-tested risk framework, Jack discusses how to evaluate and compare the current state of loss exposure and the expected reduction from applying a set of alternative controls.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/12/CISOSTORIES_Jack_Jones_Article.pdf

Jones, J. 2019. Meeting The Cost-Effective Imperative. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 286-7. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp56

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Creating Security Budgets Where There is No Budget - Kevin Richards - CSP #55 Feb 01, 2022

Show notes

Kevin walks through a very creative method of getting the budget necessary. Over the years, security departments acquire tool after tool, sometimes integrated, and many times under-utilized. Kevin describes how to leverage the current environment to "find" new sources of budget to fund the right cybersecurity investments.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/12/CISOSTORIES_KevinRichards_Article.pdf

Richards, K. 2019. Creating Budget Where There Is No Budget. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 482. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp55

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

When Should You Just Do It Internally or Hire a Consultant? - John Iatonna - CSP #54 Jan 25, 2022

Show notes

With the talent shortage expected to last many years into the future, when a new cybersecurity skill is needed that is available within the current team, what do you do? Should you hire someone externally, or bring in a consultant? What are the pitfalls of each approach? Join John as he discusses his experience in making these tough decisions.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/12/CISOSTORIES_John_Iatonna_Article.pdf

Iatonna, J. 2019. Develop from Within or Hire a Consultant. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 423-4. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp54

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Designing a Shared Vision with IT and the Business - Scott King - CSP #53 Jan 18, 2022

Show notes

The locus of control has been slipping away from IT teams (and by default Security teams), and this "challenge" to IT governance has accelerated post-covid with a more distributed workforce. The fact that IT governance is eroding as easily and quickly should tell IT and infosec teams that they need to ditch their legacy models of service delivery and adopt an approach that addresses the current business needs and digital transformations many companies are undertaking. The security implications of this are significant in that security programs are not typically sized nor funded to deal with one technology approach yet alone two. Scott King, CISO at Encore Capital Group joins the podcast to discuss strategies to remain agile in the face of rapid change.

Show Notes: https://securityweekly.com/csp53

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Moving to the Cloud? Don't Forget Hardware Security! - Steve Orrin - CSP #52 Jan 11, 2022

Show notes

While the cloud computing infrastructure is designed to be very agile and flexible, transparency to where the information is being processed is very important due to global privacy and security concerns. Steve discusses approaches to remaining compliant with the various laws (i.e., restricting where the data may reside) when moving to the cloud.

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/10/CISOSTORIES_Steve_Orrin_Article.pdf

Orrin, S. 2019. Why Hardware Matters in Moving Securely to The Cloud. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 122. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp52

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!

Privacy Hunger Games: Change The Rules - Samantha Thomas - CSP #51 Jan 04, 2022

Show notes

Information is meant to be shared with others- others that is with a need to know. CISOs may find that their organization is sharing with other entities without proper procedures in place. What if there are 90 of these organizations? Join this podcast to learn from a healthcare CISO who tackled this dilemma and subsequently changed a government law!

To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/10/CISOSTORIES_Samantha_Thomas_Article.pdf

Thomas, S. 2019. Privacy Hunger Games: Change the Rules. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 344. Fitzgerald, T. CRC Press, Boca Raton, Fl. www.amazon.com/author/toddfitzgerald

Show Notes: https://securityweekly.com/csp51

This segment is sponsored by Cybereason. Visit https://www.cybereason.com/cisostories to learn more about them!

Visit https://securityweekly.com/csp for all the latest episodes!