Defense in Depth

Latest Episodes:

Cybersecurity Budgets Nov 03, 2022

Show notes

All links and images for this episode can be found on CISO Series

Cybersecurity budgets are increasing, by a lot. What's fueling the increase and where are those budgets being spent?

Check out this post for the discussions that are the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. We welcome our sponsored guest sponsored guest Nick Kakolowski, senior director of research at IANS Research.

Thanks to our podcast sponsor, IANS Research

CISOs, how does your compensation compare with your peers? Download IANS + Artico Search's 2022 CISO Compensation Benchmark Report. Find objective insights and comprehensive compensation data from over 500 CISOs across the U.S. and Canada.

In this episode:

What's fueling the increase in cybersecurity budgets and where are those budgets being spent?
Do we understand where the money is being spent? Is it on new hires? More tooling?
Does training new hires provide a good ROI for an increased budget?
Should we equate the success of a security program with the size of the budget? Or not?

How Can We Make Sense of Cybersecurity Titles? Oct 27, 2022

Show notes

All links and images for this episode can be found on CISO Series

What's the difference between a head of security, a vp of security, and a CISO? Do job responsibilities change whether you're a security analyst or a threat engineer? Roles are confusing and so is the pay and responsibilities attached to them.

Check out this post and this post for the basis of today's discussion. this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Hadas Cassorla, CISO, M1. Our guest is Renee Guttman, former CISO of Coca-Cola, Time Warner, Campbells.

Thanks to our podcast sponsor, IANS Research

In this episode:

What's the difference between a head of security, a vp of security, and a CISO?
Do job responsibilities change whether you're a security analyst or a threat engineer?
Why are cyber security roles so confusing?
And why is there such a variance of pay and responsibilities attached to them?

Walk a Mile in a Security Recruiter's Shoes Oct 20, 2022

Show notes

All links and images for this episode can be found on CISO Series

Instead of complaining about the security hiring process, walk a mile in a recruiter's shoes and have a little compassion to what they're going through, and how you might be able to help, at any level.

Check out this post for the discussions that are the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap) with our guest Caleb Sima (@csima), CSO, Robinhood.

Thanks to our podcast sponsor, Safe Security

If your CFO or Board was to ask: 'How much could we lose to a cyber attack?' Would you know?

Introducing SAFE - the industry's most complete Cyber Risk Quantification solution to help you answer those crucial questions in real-time:

Visualize and measure cyber risk across your entire estate
Discover your $ risk exposure per attack vector
Gain personalized, actionable insights to tackle your most critical risks
Communicate your real-time cyber risk posture to your Board

Learn more at www.safe.security

In this episode:

Instead of complaining about the security hiring process, CISOs should walk a mile in a recruiter's shoes and have a little compassion to what they're going through.
Have we thought about the process we're creating for candidates?
Are we being responsible and thinking about the candidate's journey vs. being opportunistic?

Moving Security from a Prevention to a Resilience Strategy Oct 13, 2022

Show notes

All links and images for this episode can be found on CISO Series

Are security programs drifting from a prevention to a resilience strategy? If so, are you truly operating in a resilient environment? Or are you still acting in a prevention stance but you know you should be resilient?

Thanks to our podcast sponsor, HYAS

"Better production environment security starts with visibility. After all, how can you protect your most valuable asset if you don't know A: what's expected and B: when something's happening that isn't expected? This is why HYAS Confront monitors traffic to alert you to anomalies, letting you address risks, threats, and changes, while blocking infiltrations before they become successful attacks. Don't just react, take your security back with HYAS. Visit HYAS.com"

In this episode:

Are security programs drifting from a prevention to a resilience strategy?
If so, are you truly operating in a resilient environment? Or are you still acting in a prevention stance but you know you should be resilient?
What does a resilience strategy look like?
How does your security stack change when you choose resilience?

How to Engage with Non-Technical Business Leaders Oct 06, 2022

Show notes

All links and images for this episode can be found on CISO Series

How do you talk to non-technical business leaders about cybersecurity? It's a concern, it's a risk, they want to know so they can make logical business decisions. How do you help?

Thanks to our podcast sponsor, HYAS

In this episode:

How do you talk to non-technical business leaders about cybersecurity?
It's a concern, it's a risk, they want to know so they can make logical business decisions. How do you help?
Does storytelling and/or other strategies work?
How do you have a risk discussion while also avoiding FUD - fear, uncertainty, and doubt?

Cybersecurity Burnout Sep 29, 2022

Show notes

All links and images for this episode can be found on CISO Series

Why are cybersecurity professionals burning out? What's the dynamic of the job, the pressures being put on them, that causes the best to leave? And this industry can't afford to lose its best talent.

Check out this post for the discussions that are the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and special guest co-host Shawn Bowen (@SMbowen), CISO, World Fuel Services. Our guest is Bozidar Spirovski (@spirovskib), CISO, Blue dot.

Thanks to our podcast sponsor, HYAS

Better production environment security starts with visibility. After all, how can you protect your most valuable asset if you don't know A: what's expected and B: when something's happening that isn't expected? This is why HYAS Confront monitors traffic to alert you to anomalies, letting you address risks, threats, and changes, while blocking infiltrations before they become successful attacks. Don't just react, take your security back with HYAS. Visit HYAS.com

In this episode:

Why are cybersecurity professionals burning out?
What's the dynamic of the job, the pressures being put on them, that causes the best to leave?
Are certain areas of cyber are more prone to burnout than others?
Do we have a training and communication crisis in the field?

How to Build a Greenfield Security Program Sep 22, 2022

Show notes

All links and images for this episode can be found on CISO Series

You're starting a security program from scratch and you're trying to figure out where to start, what to prioritize, and how to architect it so it grows naturally and not a series of random patches over time.

Thanks to our podcast sponsor, Keyavi

Myth: Data can't protect itself. Fact: Now it does! You control where your data goes in the world, who can access it and when. On any device. Anytime. Anywhere. FOREVER. Learn more at Keyavi.com.

In this episode:

Have you ever had a purely greenfield situation?
When starting a security program from scratch, how do you figure out where to start and what to prioritize?
What are the top five actions if you were going to implement a brand new/greenfield security program?
How do you architect a security program so that it grows naturally and not a series of random patches over time?

Managing the Onslaught of Files Sep 15, 2022

Show notes

All links and images for this episode can be found on CISO Series

Files are still the core of how people do business. How are you dealing with the onslaught of files coming into your network? People are sharing files across a multitude of platforms, and many for which you may not even know about. What checks and balances do you put in place to make sure you've got file integrity no matter the source?

Check out this post for the discussion that are the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our sponsored guest is Aviv Grafi, founder and CTO, Votiro.

Thanks to our podcast sponsor, Votiro

Can you trust that your content and data is free of malware and ransomware? With Votiro you can. Votiro removes evasive and unknown malware from content in milliseconds, without impacting file fidelity or usability. It even works on password-protected and zipped files. Plus, it's an API, so it integrates with everything – including Microsoft 365. Learn more at Votiro.com. That's v-o-t-i-r-o.com

In this episode:

How are you dealing with the onslaught of files coming into your network?
What checks and balances do you put in place to make sure you've got file integrity no matter the source?
Who has the authority to decide whether a file should be protected or deleted?

Can You Have Culture Fit and Diversity, or Are They Mutually Exclusive? Sep 08, 2022

Show notes

All links and images for this episode can be found on CISO Series

Hiring managers speak about looking for culture fit and diversity, but never at the same time. Can they coexist? Are they mutually exclusive?

Thanks to our podcast sponsor, Votiro

Can you trust that the files entering your organization are free of hidden threats like malware & ransomware? With Votiro you can. Votiro removes evasive and unknown malware from files in milliseconds, without impacting file fidelity or usability. It even works on password-protected and zipped files. Plus, it's an API, so it integrates with email, cloud apps & storage, and content collaboration platforms like Microsoft 365 - wherever files need to flow. Learn more at Votiro.com.

In this episode:

Hiring managers speak about looking for culture fit and diversity, but never at the same time. Can they coexist? Are they mutually exclusive?
How can you learn and grow as a company if everyone fits into one box?
Is reaching diversity an overnight achievement, or a longer journey?

How to Follow Up With a CISO Sep 01, 2022

Show notes

All links and images for this episode can be found on CISO Series

Cyber sales is hard. But don't let the difficulty of doing it get in way of your good judgement. So what is the right way to follow up with a CISO?

Thanks to our podcast sponsor, SolCyber

At SolCyber we're hell-bent on delivering Fortune 500 level cyber security for small and medium-sized enterprises. When you're being targeted by the same bad guys, nothing else will do. We bring to the table a curated stack of leading technologies and around-the-clock SOC support, all simply priced per user. Let us do the heavy lifting.

In this episode:

What is the right way to follow up with a CISO?
How to prevent the difficulty of sales from clouding your good judgement?
What are some ideas on how best to reach out to CISOs and other potential customers?

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected

Our TOPPODCAST Picks

Follow Us

Stay Connected

Defense in Depth

Related Podcasts

1

2

3

4

5

6