Cybersecurity Where You Are (video) - TopPodcast.com

View Top 200 Chart

Back to Rankings Page

Cybersecurity Where You Are (video) — Technology
Cybersecurity Where You Are (video)

Welcome to video version of “Cybersecurity Where You Are,” the podcast of the Center for Internet Security® (CIS®). Cybersecurity affects us all, so join us on Wednesdays as Sean Atkinson, CISO at CIS; Tony Sager, SVP & Chief Evangelist at CIS; and Ed Skoudis, President of the SANS Technology Institute discuss trends and threats, explore security best practices, and interview experts in the industry. Together, we’ll clarify these issues, Creating Confidence in the Connected World®. Subscribe to the audio version of our podcast here: https://fast.wistia.net/embed/channel/wbyhaw35xf?wchannelid=wbyhaw35xf.

Copyright: © 2021

Latest Episodes:

Episode 151: 2025 Cybersecurity Predictions H2 Review — Pt 2 Sep 03, 2025

Show notes

In episode 151 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager conclude their mid-year review of 12 Center for Internet Security® (CIS®) experts' cybersecurity predictions for 2025. Here are some highlights from our episode:

01:12. The importance of consolidating security operations and using what already exists
03:18. The promise of generative artificial intelligence (GenAI) in relieving grunt work
08:26. The great responsibility and burden of integrating GenAI into business operations
10:53. How control and inspection generate trust in systems
17:57. Post-quantum cryptography, IoT in edge computing, and GenAI's sociopolitical risks
30:21. The need for a more holistic understanding of compliance
33:34. Why zero trust doesn't mean "no trust"
36:56. The need for AI as an element of critical security control
41:33. The dynamic challenge of protecting all assets with varying levels of security

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 150: A Roundtable Chat to Celebrate 150 Episodes Aug 27, 2025

Show notes

In episode 150 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Chad Rogers, Sr. Manager, Digital Media Services, at the Center for Internet Security® (CIS®); Rudy Uhde, Video Editor at CIS; and David Bisson, Sr. Content Strategist at CIS. Together, they use a roundtable chat to celebrate 150 episodes of Cybersecurity Where You Are. Here are some highlights from our episode:

01:33. How the cybersecurity landscape and podcast have changed since Episode 100
05:40. The "labor of love" that goes into editing and preparing an episode for publication
12:13. Memorable guests and moments that changed the team's thinking about cybersecurity
25:45. How the larger podcast team drives continuous improvement and innovation
30:13. Parting thoughts for the audience

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 149: Human Error, AI Missteps, and Other VM Risks Aug 20, 2025

Show notes

In episode 149 of Cybersecurity Where You Are, Sean Atkinson is joined by Chris McCullar, Director of Sales, Cloud Security, at the Center for Internet Security® (CIS®); and Mishal Makshood, Sr. Cloud Security Account Executive at CIS. Together, they discuss how to navigate human error, artificial intelligence (AI) missteps, and other landmarks in a new frontier of virtual machine (VM) risks. Here are some highlights from our episode:

00:50. Introductions with Chris and Mishal
02:20. The ongoing need to address the risk of human error when configuring VMs
04:55. The value of building trusted security into a VM image by design
07:28. A reality check of what the shared responsibility model means to an organization
13:06. How the integration of AI into DevOps accelerates both automation and mistakes
15:21. The importance of a secure foundation in the cloud on which you can build with AI
18:19. Automated enforcement and AI's role in complementing human judgment
21:03. Two examples how CIS resources can drive governance and policy integration
28:05. Cybersecurity as a community-driven team sport
30:33. Lifecycle management as a way of addressing organizations' security needs

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 148: How MDR Helps Shine a Light on Zero-Day Attacks Aug 13, 2025

Show notes

In episode 148 of Cybersecurity Where You Are, Sean Atkinson is joined by Rob Reese, Cyber Incident Response Team Manager at the Center for Internet Security® (CIS®); Dustin Cox, Cyber Incident Response Team Analyst at CIS; and Cliff Moten, Manager, Cybersecurity Solutions Engineering at CIS. Together, they discuss how organizations can use Managed Detection and Response (MDR) tools to help defend against zero-day attacks. Here are some highlights from our episode:

01.06. Demystifying zero-day vulnerabilities with a definition
02:36. Why zero-day attacks are some of the most serious threats facing organizations today
04:19. Examples of zero-day exploits and how these threats affect Incident Response (IR)
10:06. The importance of understanding your environment and patch management
13:58. How MDR assists with behavioral analysis, assembling holistic inventories, and IR
20:02. The role of asset inventories in determining scope and containing a zero-day incident
24:08. Why it's important to have humans managing and monitoring an MDR solution
27:11. MDR as a means of centralizing evidence of a zero-day attack
30:05. Parting thoughts for those concerned with their endpoint security posture

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 147: Actualizing Threat Intel for Effective Defense Aug 06, 2025

Show notes

In episode 147 of Cybersecurity Where You Are, Sean Atkinson is joined by John Cohen, Executive Director of the Program for Countering Hybrid Threats at the Center for Internet Security® (CIS®); and Kaitlin Drape, Hybrid Threat Intelligence Analyst at CIS. Together, they discuss how to actualize threat intel for the purpose of building effective defense programs and operational response plans. Here are some highlights from our episode:

01:27. Which two questions you want to answer when providing intelligence on a threat
05:19. How to avoid underutilizing or misunderstanding the utility of threat intel
13.18. A real-life story from John of when intelligence made a difference in a security incident
17:05. The foundation and building blocks of maturing your threat intelligence program
22:14. The value of working with non-intelligence groups to formulate effective response plans
24:22. CIS's ongoing work to help organizations proactively ingest and use threat intel
28:24. How cross-collaboration across an organization brings threat intel into a lifecycle
31:01. Kaitlin's work as an exemplar of how to make threat intelligence operational
36:20. The ongoing evolution of hybrid threat intel to inform meaningful operational responses

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 146: What Security Looks Like for a Security Company Jul 30, 2025

Show notes

In episode 146 of Cybersecurity Where You Are, Tony Sager is joined by Angelo Marcotullio, Chief Information Officer at the Center for Internet Security®(CIS®); and Stephanie Gass, Sr. Director of Information Security at CIS. Together, they look back on periods of transition at CIS to discuss what security looks like for a security company. Here are some highlights from our episode:

00:58. Introductions with Angelo and Stephanie
02:07. A pro and a con of IT consulting work
04:12. The importance of soft skills in bringing the Multi-State Information Sharing and Analysis Center® into CIS
06:12. Looking at security from a corporate perspective with the CIS Critical Security Controls
07:08. How IT and IT security are essential to corporate strategy
07:45. The use of governance to support merging three business units into an integrated security company
12:04. The value of security champions in adapting to regulatory and business changes
15:15. What IT and Security teams can accomplish when they work as partners
17:18. The use of data to inform Board decisions and conversations around risk
20:38. How getting a seat at the table helps with understanding a Board's risk appetite and communicating that out to teams
25:01. How infrastructure built for growth, not the smallest business case, produced a smooth transition to work from home in March 2020
29:30. Advice for folks starting out in security
31.28. The importance of collaboration and culture in implementing security as an organization

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 145: 2025 Cybersecurity Predictions H2 Review — Pt 1 Jul 23, 2025

Show notes

In episode 145 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager begin their mid-year review of 12 Center for Internet Security® (CIS®) experts' cybersecurity predictions for 2025. Here are some highlights from our episode:

01:14. Verizon's Data Breach Investigations Report as a source of enlightenment and humility
02:28. The use of generative artificial intelligence (GenAI) to finely tune phishing emails
06:31. Cyber threat actors' Darwinian efficiency in adopting new technology
07:50. Policies, oversight, and compliance in slowing defenders' adoption of technology
10:30. The two-sided, dynamic challenge of managing supply chain risk
18:23. Cybersecurity as a strategic business investment in protecting revenue
20:40. The value of partnerships in determining rational social expectations for cybersecurity
26:45. Rapid recap of several of our 2025 cybersecurity predictions
28:43. Designing technology with human awareness to create a culture of responsibility
32:29. The need to rethink what "connected" means in our complex world

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 144: Carrying on the MS-ISAC's Character and Culture Jul 16, 2025

Show notes

In episode 144 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager are joined by Carlos Kizzee, Senior Vice President of Multi-State Information Sharing and Analysis Center® (MS-ISAC®) at the Center for Internet Security®(CIS®). Together, they discuss how the MS-ISAC's new funding model helps to carry on the character and culture of this collaborative cyber defense community. Here are some highlights from our episode:

01:11. The unique mission, history, and value of building community at the MS-ISAC
05:36. A new fee-based model to preserve services and support amid federal funding changes
07:08. Service continuity as a commitment to U.S. State, Local, Tribal, and Territorial entities
09:45. Initial feedback and considerations heard at the 2025 ISAC Annual Meeting
11:40. The new membership funding model and how it preserves SLTT collaboration
15:25. A cost-effective approach to securing the "cyber-underserved"
19:31. The range of U.S. SLTT government organizations who can enroll as members now
21:59. The illusion of "free" in helping U.S. SLTTs to strengthen their cyber defenses
22:55. Why U.S. SLTTs need to enroll in paid MS-ISAC membership before October 1, 2025
28:03. Scale as the key to making MS-ISAC activities as cost-effective as possible
30:05. The essential need for U.S. SLTT government organizations to invest in the MS-ISAC

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 143: Iran's Growing Multidimensional Threat Activity Jul 09, 2025

Show notes

In episode 143 of Cybersecurity Where You Are, Sean Atkinson is joined by John Cohen, Executive Director of the Program for Countering Hybrid Threats at the Center for Internet Security®(CIS®). Together, they discuss Iran's evolving multidimensional threat activity following U.S. airstrikes on Iranian nuclear facilities in June 2025. Here are some highlights from our episode:

00:49. Lessons from the past on how Iran might respond to the U.S. airstrikes in June 2025
04:56. The use of informed practice and continuous awareness to better prepare defenders
06:41. Recap of Iranian multidimensional threat activity observed between 2024 and 2025
11:53. The impact of contextual intelligence and education in driving threat awareness
19:17. Why understanding of impact is critical to addressing a business risk
23:09. Three things you need to do to be an effective threat briefer
25:07. The use of tabletop exercises (TTXs) to promote incident response
26:56. The 2024 General Election as a case study of what threat preparedness can do

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Episode 142: SLTTs and Their Nuanced Cybersecurity Needs Jul 02, 2025

Show notes

In episode 142 of Cybersecurity Where You Are, Sean Atkinson is joined by Anthony Essmaker, former Product Marketing Manager at the Center for Internet Security®(CIS®); and Randy Rose, VP of Security Operations & Intelligence at CIS. Together, they discuss the nuanced, empathetic approach that's required to help U.S. State, Local, Tribal, and Territorial (SLTT) government organizations to address their cybersecurity needs. Here are some highlights from our episode:

01.10. What the acronym "SLTT" means to CIS's operational mission
05:39. Using a flexible approach to support the different cybersecurity needs of the 50 states
09:43. How different resources and experiences contextualize "best practices" at the local level
11:49. Trivia question: Which two U.S. states don't have counties?
13:20. The complexity of cybersecurity challenges and resources for U.S. tribal entities
20:11. A 20-year history of working with U.S. SLTTs to meet them where they are
21:30. Relationships as the bedrock for a community model of SLTT cyber defense
26:29. Geographical isolation and other factors affecting U.S. territories' cybersecurity needs
32:42. A closing fun fact about the first U.S. fire district

Resources

If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.

Related Podcasts