Defense in Depth

Latest Episodes:

How To Get More People Into Cybersecurity Jun 22, 2023

Show notes

All links and images for this episode can be found on CISO Series.

There are millions of cybersecurity jobs open. Over time, that number has just been growing. What we're doing now does not seem to be working. So what's it going to take to fill all these jobs quickly?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our guest is Rich Gautier, former CISO for the U.S. Department of Justice, Criminal Division.

Thanks to our podcast sponsor, Brinqa

Understand your cyber assets, prioritize vulnerabilities, automate remediation, and continuously monitor cyber hygiene across the entire attack surface — infrastructure, applications and cloud — with Brinqa. See how at brinqa.com.

In this episode:

There are millions of cybersecurity jobs open. What's it going to take to fill all these jobs quickly?
Are job description requirements partially to blame for holding back the industry from tapping into greater diversity of expertise?
Is it better off if you hire, train, culturally integrate, and reward that person?
Does burn out and a steep learning curve keep adding to the problem?

How to Create a Positive Security Culture Jun 15, 2023

Show notes

All links and images for this episode can be found on CISO Series.

How do you create a positive security culture? It's rarely the first concept anyone wants to embrace, yet it's important everyone understands their responsibility. So what do you do, and how do you overcome inevitable roadblocks?

Check out this post and this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. We welcome our sponsored guest, Jadee Hanson, CISO/CIO for Code42.

Thanks to our podcast sponsor, Code42

Code42 is focused on delivering solutions built with the modern-day collaborative culture in mind. Code42 Incydr tracks activity across computers, USB, email, file link sharing, Airdrop, the cloud and more, our SaaS-based solution surfaces and prioritizes file exposure and data exfiltration events. Learn more at Code42.com.

In this episode:

How do you create a positive security culture?
Where do we run into struggles when trying to create a positive security culture?
Given its importance, why is it rarely the first concept anyone wants to embrace?
What do you do, and how do you overcome inevitable roadblocks?

How Should We Trust Entry Level Employees? Jun 08, 2023

Show notes

All links and images for this episode can be found on CISO Series.

All experienced security professionals were at one time very green. Entry level status means risk to your organization. That's if you give them too much access. What can you trust an entry level security professional to do that won't impose unnecessary risk? And how can those green professionals build trust to allow them to do more?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our guest is Kemas Ohale, vp, global information security, Lippert.

Thanks to our podcast sponsor, Normalyze

Normalyze is a cloud data security platform that continuously discovers sensitive data and their access paths across your cloud environments. Normalyze provides the ability to analyze, prioritize and respond to data threats to prevent damaging data breaches. Discover, visualize, and secure your cloud data in minutes with Normalyze Freemium.

In this episode:

What can you trust an entry level security professional to do that won't impose unnecessary risk?
How can those green professionals build trust to allow them to do more?
What can they do with zero experience?
How can they graduate upwards?

How Must Processes Change to Reduce Risk? Jun 01, 2023

Show notes

All links and images for this episode can be found on CISO Series.

What do we need to do to fix our processes to truly reduce risk and vulnerabilities?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our sponsored guest is Amad Fida (@brinqa), CEO, Brinqa.

Thanks to our podcast sponsor, Brinqa

In this episode:

What do we need to do to fix our processes to truly reduce risk and vulnerabilities?
How to work with all departments to improve process, communication, and motivation?
Why does security need to be treated as a function of the enterprise risk program?
What are the elements that make a great solution?

Reputational Damage from Breaches May 25, 2023

Show notes

All links and images for this episode can be found on CISO Series.

Security professionals talk a lot about the reputational damage from breaches. And it seems logical, but major companies still do get breached and their reputation seems spared. What's the reality of what breaches can do to a company's reputation?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. We welcome our guest Cecil Pineda, CISO, R1.

Thanks to our podcast sponsor, Brinqa

In this episode:

Security professionals talk a lot about the reputational damage from breaches, so why do companies still get breached?
What's the reality of what breaches can do to a company's reputation?
Does a breach really result in lasting reputation damage?
Are we more accepting of breaches now?

Do RFPs Work? May 18, 2023

Show notes

All links and images for this episode can be found on CISO Series.

Do RFPs or request for proposals work as intended? It seems they're loaded with flaws yet for some organizations who must follow processes, they become necessary evils for both buyers and sellers. What can we do to improve the process?

Thanks to our podcast sponsor, TrustCloud

TrustCloud is the all-in-one platform to accelerate sales and security reviews, automate compliance efforts, and map contractual liability across your business. Connect with us to learn how you can transform security from a cost center into a profit driver with TrustCloud's programmatic risk and compliance verification tools.

In this episode:

Do RFPs or request for proposals work as intended?
Does it seem they're loaded with flaws?
Have they become necessary evils for both buyers and sellers?
What can we do to improve the process?

Successful Cloud Security May 11, 2023

Show notes

All links and images for this episode can be found on CISO Series.

What are the moves we should be making in cloud to improve our security? What constitutes a good cloud security posture?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Andy Ellis, operating partner, YL Ventures. We welcome our sponsored guest Yoav Alon, CTO, Orca Security.

Thanks to our podcast sponsor, Orca Security

Orca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. With continuous first-to-market innovations and expertise, the Orca Platform ensures security teams quickly identify and remediate risks to keep their businesses secure. Connect your first account in minutes by visiting www.orca.security.

In this episode:

What does successful cloud security look like?
What are the moves we should be making in the cloud to improve our security?
What constitutes a good cloud security posture?
What should we be measuring when it comes to cloud security?

How Should Security Vendors Engage With CISOs? May 04, 2023

Show notes

All links and images for this episode can be found on CISO Series.

One CISO has had enough of the security vendor marketing emails and cold sales calls. He's blocking them all. But it's not a call to avoid all salespeople. He just doesn't have the time to be a target anymore. So how should vendors engage with such a CISO? And does CISO represent most CISOs today?

Thanks to our podcast sponsor, Code42

Code42 is focused on delivering solutions built with the modern-day collaborative culture in mind. Code42 Incydr tracks activity across computers, USB, email, file link sharing, Airdrop, the cloud and more, our SaaS-based solution surfaces and prioritizes file exposure and data exfiltration events. Learn more at Code42.com.

In this episode:

How should vendors engage with CISOs who are tired of being targeted?
How can vendors reach CISOs who have had enough of the security vendor marketing emails and cold sales calls?
Does CISO represent most CISOs today?
Is the sales "system" essentially broken?

Gartner Created Product Categories Apr 27, 2023

Show notes

All links and images for this episode can be found on CISO Series.

Do we really need more categories of security products? Every new Gartner magic quadrant complicates the marketplace but at the same time helps us understand the other vectors we need to protect. Do new categories of security products help or hurt the industry?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our guest is Corey Elinburg (@celinburg), CISO, CommonSpirit Health.

Thanks to our podcast sponsor, Egress

In this episode:

Do we really need more categories of security products?
Does it seem like every new Gartner magic quadrant complicates the marketplace but at the same time helps us understand the other vectors we need to protect?
Do new categories of security products help or hurt the industry?
Does this make it hard to keep up to date on all new products?

How to Always Make a Business Case for Security Apr 20, 2023

Show notes

All links and images for this episode can be found on CISO Series.

How can security leaders and how do they go about matching business case to every security action you want to take? Is this the right way to sell security to the board?

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our sponsored guest is Sravish Sridhar (@sravish), founder and CEO, TrustCloud.

Thanks to our podcast sponsor, TrustCloud

In this episode:

How can security leaders best make a case for security?
How do you go about matching business cases to every security action you want to take?
Is this the right way to sell security to the board?
How do you show that security can be aligned to business objectives?

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected

Our TOPPODCAST Picks

Follow Us

Stay Connected

Defense in Depth

Related Podcasts

1

2

3

4

5

6