Defense in Depth

Latest Episodes:

How Security Leaders Deal with Intense Stress Aug 31, 2023

Show notes

All links and images for this episode can be found on CISO Series.

When you have an incident and you're engulfed by the stress that lasts more than a day, how do you manage and deal with it? And not only how do you manage your stress, but how do you manage everyone else's?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining us is our special guest, Tim Brown, CISO, Solarwinds.

Thanks to our podcast sponsor, Push Security

Do you have visibility of all the SaaS apps your employees are storing corporate data on? Are employees protecting all their accounts against identity-based attacks? Discover all the SaaS your employees use - including shadow apps and identities - and secure your data. Find out more at pushsecurity.com.

In this episode:

When you have an incident and you're engulfed by the stress that lasts more than a day, how do you manage and deal with it?
And not only how do you manage your stress, but how do you manage everyone else's?
During a major incident, which stress is more difficult to manage? Your own, or those around you?
How is this everyone's concern?

How Do We Influence Secure Behavior? Aug 24, 2023

Show notes

All links and images for this episode can be found on CISO Series.

We all know that our employees need to be more security aware, but what are the methods to get them there? How can we make our employees more security conscious?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest Jack Chapman, vp, threat intelligence, Egress.

Thanks to our podcast sponsor, Egress

Egress helps organization stop email security risks is by addressing both inbound and outbound threats together,. We recognize that people get hacked, make mistakes, and break the rules. Egress's Intelligent Cloud Email Security suite uses patented self-learning technology to detect sophisticated inbound and outbound threats, and protect against data loss. Learn more at egress.com.

In this episode:

We all know that our employees need to be more security aware, but what are the methods to get them there?
How can we make our employees more security conscious?
What does it take to get security to "stick" with your coworkers?
Why does security remain so darn difficult?

Security Concerns with ChatGPT Aug 17, 2023

Show notes

All links and images for this episode can be found on CISO Series.

Users have tried to upload sensitive company information and PII, personally identifiable information, into ChatGPT. Those who are successful getting the data in, have now made that data free to all. Will people's misuse of these generative AI programs be our greatest downfall to security and privacy?

Thanks to our podcast sponsor, Opal

Opal is building the next generation of intelligent identity. Identity is one of the last great enterprise frontiers. It's fragmented with legacy architecture. Opal's mission is to empower teams to understand and calibrate access end to end, and to build identity security for scale. Learn more by at www.opal.dev.

In this episode:

Will people's misuse of these generative AI programs be our greatest downfall to security and privacy?
Is AI the problem? Or is poor human judgement the problem?
Is it better to get started with any guardrails until setting up a full policy?
What are we going to do now?

Create A Pipeline of Cyber Talent Aug 10, 2023

Show notes

All links and images for this episode can be found on CISO Series.

The demand for cybertalent is sky high. It's very competitive to get those people with skills. What if you were to train your staff and give them the skills you want? Essentially, what if you were to grow your own unicorn?

Thanks to our podcast sponsor, Opal

In this episode:

What if you were to train your staff and give them the skills you want?
What if you were to grow your own unicorn?
What's the best way to grow your staff?
How do you figure out the right mix of talent and prioritize the hiring, training, on the job, and other experiences?

Improving Adoption of Least Privileged Access Aug 03, 2023

Show notes

All links and images for this episode can be found on CISO Series.

What are we doing to improve access management? Make it too loose and it's the number one way organizations get breached. Put on too many controls and now you've got irritated users just trying to do their job. How does each organization find their sweet spot?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. We welcome our sponsored guest Paul Guthrie (@pguthrie), information security officer, Blend.

Thanks to our podcast sponsor, Opal

In this episode:

What is the one most significant action you've taken to improve access management?
What are we doing to improve access management?
What is the correct balance between too many controls and not enough?
How does each organization find their sweet spot?

Securing SaaS Applications Jul 27, 2023

Show notes

All links and images for this episode can be found on CISO Series.

With the growth of business-led IT, does SaaS security need to be a specific focus in a CISO's architectural strategy?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Our guest is Steve Zalewski who also hosts Defense in Depth.

Thanks to our podcast sponsor, AppOmni

Do you know which 3rd party apps are connected to your SaaS platforms? After all, one compromised 3rd party app could put your entire SaaS ecosystem at risk. Get visibility to all 3rd party apps — and their level of data access — with AppOmni. Visit AppOmni.com to request a free risk assessment.

In this episode:

With the growth of business-led IT, does SaaS security need to be a specific focus in a CISO's architectural strategy?
Is the problem the architecture of the applications themselves or the fact that a non-security group is bringing these applications online? Is it both?
Is this problem solvable?
What technical controls can you put in place to mitigate risk from apps you deem risky?

How Do We Get Better Control of Cloud Data? Jul 20, 2023

Show notes

All links and images for this episode can be found on CISO Series.

When it comes to data, compliance, and reducing risk, where are we gaining control? Where are we losing control? And what are we doing about that?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. We welcome our sponsored guest Amer Deeba, CEO and Co-founder, Normalyze.

Thanks to our podcast sponsor, Normalyze

Normalyze is a cloud data security platform that continuously discovers sensitive data and their access paths across your cloud environments. Normalyze provides the ability to analyze, prioritize and respond to data threats to prevent damaging data breaches. Discover, visualize, and secure your cloud data in minutes with Normalyze Freemium.

In this episode:

When it comes to data, compliance, and reducing risk, where are we gaining control?
Where are we losing control? And what are we doing about that?
Is "losing control" inevitable?
Is SaaS really extremely difficult to work with at scale?

Finding Your Security Community Jul 13, 2023

Show notes

All links and images for this episode can be found on CISO Series.

If you're struggling to get your first job in security or you're trying to get back into the industry after being laid off, you need to lean on your security community. But like networking, you should find it before you need it.

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski.

Thanks to our podcast sponsor, Egress

In this episode:

Are you struggling to get your first job in security or trying to get back into the industry after being laid off?
What is the importance of building your security community network ?
What should you look for in a community?
What should you expect to put into it, and what should you expect to get back?

Let's Write Better Cybersecurity Job Descriptions Jul 06, 2023

Show notes

All links and images for this episode can be found on CISO Series.

What should a cyber job description require, and what shouldn't it? What's reasonable and not reasonable?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Our guest is Rob Duhart (@robduhart), deputy CISO, Walmart.

Thanks to our podcast sponsor, Normalyze

In this episode:

What should a cyber job description require, and what shouldn't it? What's reasonable and not reasonable?
Do these completely unrealistic job descriptions hurt the entire industry?
What is it we need to put in a cyber job description, and what do we need to leave out?
Who's losing out here?

How Should Security Better Engage with Application Owners? Jun 29, 2023

Show notes

All links and images for this episode can be found on CISO Series.

Since so much technology today is not launched by the IT department, but by business units themselves. How do security professionals engage with business and application owners and have a conversation about security policy and procedures?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. We welcome our sponsored guest Harold Byun (@haroldnhoward), chief product officer, AppOmni.

Thanks to our podcast sponsor, AppOmni

Do you know which 3rd party apps are connected to your SaaS platforms? After all, one compromised 3rd party app could put your entire SaaS ecosystem at risk. Get visibility to all 3rd party apps — and their level of data access — with AppOmni. Visit AppOmni.com to request a free risk assessment.

In this episode:

What's your experience talking about security policy and procedures with business and application owners?
How do security professionals engage with business and application owners?
How do they have a conversation about security policy and procedures?
Is there anything you learned that you didn't realize before?

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected

Our TOPPODCAST Picks

Follow Us

Stay Connected

Defense in Depth

Related Podcasts

1

2

3

4

5

6