Cybersecurity Where You Are (video)

Latest Episodes:

Episode 121: The Economics of Cybersecurity Decision-Making Feb 05, 2025

Show notes

In episode 121 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Tyler Moore, Ph.D., Chair of Cyber Studies at the University of Tulsa. Together, they discuss the role of economics in cyber risk quantification and cybersecurity decision-making.

Here are some highlights from our episode:

01:55. How incentives, market failures, and other economic principles intersect with cybersecurity
08:39. A model of translating shared information as a way to capture complexity in cybersecurity decision-making
13:20. Pressing issues when making decisions about cybersecurity
18:08. How to have enough confidence and a cyber risk quantification model that's useful
23:45. How rigorous recommendations can help to match modeling and techniques like minimization
29:23. The role of the Board in making cybersecurity decisions and how to speak its language
34:57. Parting thoughts about risk quantification in cybersecurity

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 120: How Contextual Awareness Drives AI Governance Jan 29, 2025

Show notes

In episode 120 of Cybersecurity Where You Are, Sean Atkinson explores how contextual awareness of generative artificial intelligence (GenAI) deployment in the business creates a foundation for AI governance strategy.

Here are some highlights from our episode:

01:58. Why specificity is important when we use the term "AI" in the governance space
04:10. Two AI distributions and how contextual function varies between them
13:52. The importance of engagement and asking the right questions
18:28. The role of lifecycle approaches and risk tolerance in understanding AI integration
23:45. Navigating two common questions that arise when governing AI

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 119: Multidimensional Threat Defense at Large Events Jan 22, 2025

Show notes

In episode 119 of Cybersecurity Where You Are, Sean Atkinson is joined by John Cohen, Executive Director of Countering Hybrid Threats at the Center for Internet Security® (CIS®). Together, they discuss the importance and provide examples of multidimensional threat defense as a means of securing large events.

Here are some highlights from our episode:

01:42. An overview of the multidimensional threat landscape from 2024 going into 2025
07:00. The shift to multidimensional threat analysis in crisis management
10:52. The importance of a sustainable, actionable approach to addressing today's threats
16:10. How CIS is working to help organizations build safety against multidimensional threats, including at large events

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 118: Preparing for Post-Quantum Cryptography Jan 15, 2025

Show notes

In episode 118 of Cybersecurity Where You Are, Sean Atkinson is joined by Andy Smith, Security Architect for BP and Instructor at the SANS Institute. Together, they review the state of post-quantum cryptography as well as share recommendations for how organizations and individuals can prepare to move into the post-quantum era.

Here are some highlights from our episode:

02:55. What post-quantum cryptography is and why we need to pay attention
04:11. The impact of a cryptographically relevant quantum computer on symmetric vs. asymmetric cryptography
08:58. How media attention contributes to preparedness from an infrastructure perspective
14:30. The importance of a cryptography bill of materials (CBOM)
21:58. How organizations can prepare against quantum-enabled cyber attacks
29:05. How individuals need to understand quantum infrastructure in order to protect it
32:24. Optimism for the future of post-quantum cryptography

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 117: 2025 Cybersecurity Predictions from CIS Experts Jan 08, 2025

Show notes

In episode 117 of Cybersecurity Where You Are, Sean Atkinson reflects on the 2025 cybersecurity predictions of 12 experts at the Center for Internet Security® (CIS®), as shared on the CIS website.

Here are some highlights from our episode:

01:40. Artificial intelligence (AI) as a means for crafting higher quality phishing emails
04:24. Zero trust with identity as a catalyst in 2025
07:55. A governance focus for K-12 school districts
12:37. Secure by design as part of the DNA of IT departments
14:22. The need for continuous patching with Internet of Things (IoT) devices
15:27. Training and adherence to basic cybersecurity practices as ongoing emphases
17:15. Consolidation from an operations perspective
20:40. The integration of AI into business operations
24:07. The socio-political impacts of emerging technologies on multidimensional threats
26:46. Growing attention on cloud security and data location
29:13. Cybercriminal markets and Phishing as a Service models
32:16. The benefit of AI to organizations

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 116: AI-Enhanced Ransomware and Defending Against It Jan 01, 2025

Show notes

In episode 116 of Cybersecurity Where You Are, Sean Atkinson discusses the threat of AI-enhanced ransomware along with the use of generative artificial intelligence (GenAI) to defend against it.

Here are some highlights from our episode:

02:10. How AI in the cybersecurity space has advanced over the past few years
05:12. Why cybercriminals are incorporating artificial intelligence into their attacks
19:24. The application of AI in various stages of a ransomware attack
26:10. How AI can inform different aspects of a ransomware defense strategy

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 115: Continuous Feedback as CIS Employee Culture Dec 25, 2024

Show notes

In episode 115 of Cybersecurity Where You Are, Sean Atkinson is joined by Carolyn Comer, Chief Human Resources Officer at the Center for Internet Security® (CIS®); Heidi Gonzalez, Sr. Employee Experience Specialist at CIS; and Jennifer Myers, Sr. Director of Learning and Development at CIS. With an in-person holiday open house and office party as their backdrop, they celebrate the continuous feedback that sustains and grows the employee culture at CIS.

Here are some highlights from our episode:

02:35. How the holiday open house and office party celebrate CIS employee culture
04:11. How the workforce culture at CIS has changed over time
07:57. What types of employee feedback CIS obtains after in-person events
09:33. How in-person interactions guide a continuous learning program for CIS employees
10:55. How events such as the holiday open house and office party continue to evolve
16:48. Why CIS has been so successful in helping employees to navigate remote work
20:04. The impact of an engaged Board of Directors on workplace culture
21:40. Celebrations and upcoming plans for culture and learning at CIS

Resources

CIS Cares

Episode 114: 3 Board Chairs Reflect on 25 Years of Community

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 114: 3 Board Chairs Reflect on 25 Years of Community Dec 18, 2024

Show notes

In episode 114 of Cybersecurity Where You Are, Tony Sager is joined by three past and current Board Chairs of the Center for Internet Security® (CIS®): Frank Reeder, CIS Director Emeritus and Founding Chair as well as Director of the National Cybersecurity Scholarship Foundation; John Gilligan, President and Chief Executive Officer of CIS; and Bobbie Stempfley, CIS Board Chair and Business Security Officer of the Infrastructure Solutions Group at Dell Technologies. Together, they reflect on 25 years of CIS building community in the cybersecurity space.

Here are some highlights from our episode:

07:04. Perception of the problem that led to the idea of CIS
10:18. The value of building community outside of government
17:31. A sustainable and powerful business model for CIS
21:28. John's priorities during his transition from Board Chair to CEO
34:38. What CIS will focus on next
39:00. Parting thoughts for the future

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 113: Cyber Risk Prioritization as Ransomware Defense Dec 11, 2024

Show notes

In episode 113 of Cybersecurity Where You Are, Tony Sager is joined by Phyllis Lee, VP of SBP Content Development at the Center for Internet Security® (CIS®); Adam Bobrow, Co-Founder and President of Veribo Analytics; and Sridevi Joshi, Co-Founder and CEO of Veribo Analytics. Together, they discuss how the Business Impact Analysis tool created by CIS and Veribo Analytics empowers individuals and organizations to use cyber risk prioritization as a basis for their ransomware defense strategy.

Here are some highlights from our episode:

04:35. Background on the impetus for the tool's development
07:57. How our understanding of cybersecurity risk differs from other areas of risk
12:21. Insight into Sridevi's learning process about cyber risk prioritization as a technologist
18:23. How the development process of the Business Impact Analysis tool got underway
21:05. What went into the process of translating the goal into tooling
31:34. Reflections on the tool's reception and what's next

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 112: How SANS Fosters Action on Cybersecurity Trends Dec 04, 2024

Show notes

In episode 112 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Rob T. Lee, Chief of Research and Head of Faculty at SANS Institute. Together, they discuss how SANS Institute applies an operational or "do" model of leadership to gather expertise, build shared purpose, and foster action on evolving cybersecurity trends.

Here are some highlights from our episode:

05:47. How Rob ended up teaching at SANS Institute
08:49. Rob's first experience meeting and working with the late Alan Paller
12:07. How Rob's responsibility at SANS Institute has expanded
20:02. Key cybersecurity trends on Rob's agenda as Chief of Research
23:52. The need to refine our understanding of AI based on its different applications
36:28. Guidance for the 47th U.S. Presidential Administration

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cybersecurity Where You Are (video)

Related Podcasts

Links

Stay Connected