Security Visionaries

Connect with Parag Thakore on LinkedIn

The Evolution of SD-WAN and Converged Networking and Security Principles with Parag Thakore, SVP of Borderless WAN at Netskope Apr 17, 2023

This episode features an interview with Parag Thakore, Senior Vice President of Borderless WAN at Netskope. Prior to Netskope, Parag was the CEO and co-founder of Infiot, which was acquired by Netskope in May 2022, and served as the Vice President of Products and founding member of Velocloud Networks.

In this episode, Mike sits down with Parag to discuss the convergence of networking and security teams, how SD-WAN helps the hybrid workforce, and simplifying the end user journey.

-----------------

“I would say, encourage security buyers and security people to also start thinking about performance characteristics and optimization, and whether that infrastructure can deliver that for them or not. And they don't need to be experts. It's a very simple question in terms of, ‘Can I get this high performance connectivity from this cloud security that I'm purchasing or that security vendor that I'm looking for?’ I think ease of operations and that high performance connectivity is something that security should also look at as a criteria when they look at security platforms.” – Parag Thakore

-----------------

Episode Timestamps:

*(02:12): Parag’s background

*(07:18): Parag’s take on security as a team sport

*(12:48): The convergence of networking and security teams

*(24:02): How SD-WAN helps the hybrid workforce

*(27:01): The consolidation opportunity SD-WAN provides

*(29:58): Creating better digital citizens through SD-WAN and converged principles

*(31:54): 2030 Goggles

*(35:23): Quick Hits

*(38:54): Mike’s takeaways

-----------------

Links:

Connect with Andreas on LinkedIn

Building Security Relationships Through Transparency with Andreas Rohr, CTO at DCSO Feb 21, 2023

This episode features an interview with Andreas Rohr, founding manager and CTO at the German Cyber-Security Organization (DCSO). At DCSO, Andreas is responsible for Innovation and Security Engineering and its Managed Cyber Defense Services. He has over 15 years of experience in IT and cybersecurity, holding management positions in the energy and automotive industries.

In this episode, Mike and Andreas discuss aligning with works councils, forging business relationships through transparency, and embedding security into value streams.

-----------------

“Transparency is key for working with the works council, who are actually not there to prevent security or the company doing the right things, they’re there to make sure that the data is not abused against the employees. This is their mission, their task, and it’s a valid one." – Andreas Rohrohr

-----------------

Episode Timestamps:

*(02:06): Andreas explains what DCSO is

*(09:18): Guideposts DCSO is helping companies align to

*(15:45): How Andreas is helping companies navigate the German Works Council

*(19:27): Andreas’s journey from CISO to CTO

*(23:34): Andreas’s advice on determining the budget for security

*(27:30): How Andreas advises companies on making security part of the fabric of their organization

*(34:29): 2030 Goggles

*(43:01): Quick Hits

-----------------

Links:

Connect with Alvina on LinkedIn

Empowering People to Be Security Champions with Alvina Antar, CIO at Okta Feb 07, 2023

This episode features an interview with Alvina Antar, CIO at Okta. Alvina leads the Business Technology Organization and is responsible for enabling a smooth customer and employee experience. Prior to joining Okta, she spent 17 years at Dell and served as Zuora’s first ever CIO.

In this episode, Mike and Alvina discuss identity-first security, automating business processes through AI and ML, and leading by example to achieve a more diverse industry.

-----------------

“For the longest time we've heard how there's a ton of friction between the CIO and CISO and IT and security teams. Where the security organization is developing strategies and IT hears about it and has to somehow deliver and execute against that strategy without any input around the decisions or choices that are made. And in reality, in order for us to be successful, we really need to operate as one team. And that's exactly what we're doing here. The only way we can really build a security-first culture is if we operate as one team. And not only just between IT and security, it's really building security champions across every part of the business. Every single employee should feel accountable for hardening our security posture.” – Alvina Antar

-----------------

Episode Timestamps:

*(02:37): Alvina’s journey to becoming a CIO

*(05:01): How Okta uses Okta

*(10:38): How Alvina thinks of her role in the current environment

*(18:17): Alvina’s take on security as a team sport

*(22:22): Alvina’s advice for speaking to the board about security

*(26:29): How Alvina is building a human firewall

*(30:31): 2030 Goggles

*(33:10): How we can get more diversity in security

*(35:29): Quick Hits

*(38:09): Mike’s takeaways from his conversation with Alvina

-----------------

Links:

Connect with Joe on LinkedIn

Fostering Relationships for Security Awareness with Joe Topinka, CXO Advisor at Netskope Jan 19, 2023

This episode features an interview with Joe Topinka, CXO Advisor at Netskope. Joe is a mentor, author, speaker, and CIO with more than 35 years of experience leading IT organizations to drive business results. He is the founder of CIO Mentor, a consulting company that aims to help IT leaders achieve success in their organizations.

In this episode, Mike sits down with Joe to discuss enterprise risk management, fostering relationships with business units, and people-powered frameworks.

-----------------

“I think having an enterprise risk management program is really huge. Whether it's formal or not, somebody has to be responsible for risk overall. That gets to this whole idea that it is a team sport and everyone has a role to play, especially business unit leaders that are making decisions on cloud platforms on their own. They're playing a huge role on that. [...] The idea around cybersecurity several years ago, it wasn't quite where it is now, but the enterprise risk management team has done a really solid effort of elevating the dialogue and getting everyone more cognitive and aware that cybersecurity is not just an IT thing, it's a company thing and it fits into the whole cybersecurity framework overall.” – Joe Topinka

-----------------

Episode Timestamps:

*(02:53): Joe’s journey to becoming a CIO

*(11:07): How Joe advises people on translating business management to security

*(15:52): Joe’s new CIO acronym

*(20:25): Mike and Joe discuss the business relationship aspect of security

*(29:42): The importance of enterprise risk management programs

*(37:35): 2030 Goggles

*(41:13): Quick Hits

-----------------

Links:

Connect with Mike on LinkedIn

Connect with Ilona on LinkedIn

Looking Forward to 2023: Predictions and Resolutions Jan 03, 2023

This episode features Mike Anderson leading a roundtable discussion with Ilona Simpson, Chief Information Officer EMEA at Netskope and David Fairman, Chief Information & Chief Security Officer APAC at Netskope.

In this episode, Ilona and David share their predictions and resolutions for cybersecurity in 2023. You’ll hear predictions about the industrial metaverse, confidential computing, quantified risk reduction plans, and convergence of priorities for security teams.

-----------------

“If you think about cybersecurity, we are just a subset of a broader operational risk. Operational risk actually has a much better approach or a little bit more maturity in being able to quantify operational risk in the organization. CISOs need to be able to stand toe-to-toe and be able to have a discussion at parity in regards to risk buydown for this subset of operational risk. And that's really where we are. I think as an industry, as a practice, as a profession, we need to get much smarter at figuring out how do we make this a much more quantitative conversation.” – David Fairman

-----------------

Episode Timestamps:

*(02:47) - Prediction & Resolution: The Industrial Metaverse

*(12:23) - Prediction & Resolution: Confidential Computing

*(17:54) - Prediction & Resolution: Quantified Risk Reduction Plans

*(25:27) - Prediction & Resolution: Convergence of Priorities as a Result of Transformation

*(30:38) - Mike’s Prediction: Vendor Consolidation

-----------------

Links:

Connect with David on LinkedIn

Connect with Marilyn on LinkedIn

Building Security Into The Fabric of an Organization with Marilyn Miller, Chief People Officer at Netskope Dec 22, 2022

This episode features an interview with Marilyn Miller, Chief People Officer at Netskope. Marilyn is responsible for Netskope’s global human resources functions, including employee experience and talent acquisition. She has over 20 years of experience in high-visibility HR roles, including Anaplan, Alfresco, and Cisco Systems.

In this episode, Mike and Marilyn discuss building security into the fabric of your organization, working collaboratively with CIOs and CISOs, and using storytelling to attract talent.

-----------------

“We talk about security as a team sport and a shared responsibility and accountability. I think the more that you can drive it from it's instilled in your culture and your values, you have less of a dependency than on the policing and the policy requirements of it. You still need to have those things in place, but I believe a lot in how do we educate, how do we enroll, how do we talk about the importance, how do we make it part of the fabric and culture of the company? And everybody understands their responsibility around data security, and the protection of it.” – Marilyn Miller

-----------------

Episode Timestamps:

*(02:33): Marilyn’s journey to becoming Chief People Officer

*(04:44): How Marilyn works with security leaders when recruiting talent

*(11:55): How Marilyn has seen cybersecurity becoming a company value

*(18:58): Examples of personal security hygiene translating to the office

*(21:53): Examples of CIOs and CISOs partnering with HR and People leaders

*(26:45): How the pandemic changed hybrid work and what Marilyn hopes will stay

*(33:56): Marilyn’s advice for Chief People Officers in other organizations

*(36:42): How we can get more diversity in security

*(39:38): Quick Hits

-----------------

Links:

Connect with Mike on LinkedIn

Connect with Daniel Hartert on LinkedIn

Building Permanent Security Awareness with Daniel Hartert, CXO Advisor at Netskope Nov 29, 2022

This episode features an interview with Daniel Hartert, CXO Advisor at Netskope. Over the last 20 years, Daniel has held CIO and CEO positions at large international organizations like Bayer Business Services and Philips Group. He is also a co-founder of DCSO (Deutsche Cyber Security Organisation), a company working to strengthen protection against evolving and growing cyber threats.

In this episode, Mike sits down with Daniel to discuss communicating with C-suite executives, how advisors can enable people through security, and the critical success factors of a CIO.

-----------------

“I'm coming from industries where manufacturing and health and safety was a big point. So, in these industries, there is a mindset around EHS; environmental, health, and safety. [...] I see a strong analogy because watching out for a malicious email or malicious emails is very similar to using the handrailing when walking down the staircase. So, this is what we need to build into the DNA of an organization, this permanent security awareness. And if we can build this, then this protection level of a company will immensely increase. Because in the end, the doors to malicious actions are always the people.” – Daniel Hartert

-----------------

Episode Timestamps:

*(02:27): Daniel’s journey to becoming a CIO

*(05:25): How Daniel transitioned into an advisory role

*(07:37): Daniel’s take on security as a team sport

*(17:57): How Daniel communicates security to C-suite executives

*(24:09): Ways Daniel thinks about enabling people through security

*(29:22): 2030 Goggles

*(32:09): How we can get more diversity in security

*(34:29): Daniel’s take on zero trust

*(36:50): Quick Hits

-----------------

Links:

DCSO Germany

Connect with Max on LinkedIn

Enabling Security Top-Down with Max Chan, Chief Information Officer at Avnet Nov 15, 2022

This episode features an interview with Max Chan, Chief Information Officer at Avnet. In his role, Max is responsible for the delivery of strategic business IT and digital transformation initiatives. Prior to Avnet, Max held several IT leadership roles at publicly traded companies like VF Corporation and Johnson Controls.

In this episode, Mike and Max discuss digital enablement, fostering security from the top down, and how to talk to the board about security.

-----------------

“Do not play adversary with your security organization, whether or not they are part of your group. At the end of the day, truly see that as your personal accountability and looking at it through the lens of the enterprise. That will ensure success. That will ensure the right tone from the top, down to through the organizations to ensure that everyone embraces that vigilance that is so needed to secure the company.” – Max Chan

-----------------

Episode Timestamps:

*(02:30): Max’s explains what Avnet does

*(03:28): Max’s journey to becoming a CIO

*(08:11): Max’s take on security as a team sport

*(14:30): How Max is aligning teams across his organization

*(22:04): How Max talks to the board about security

*(28:51): 2030 Goggles

*(32:15): How we can get more diversity in security

*(37:34): Quick Hits

-----------------

Links:

Visit Avnet

Connect with Amanda on LinkedIn

Establishing a Security Mindset Early with Amanda Crawford, Chief Information Officer for the State of Texas Oct 31, 2022

This episode features an interview with Amanda Crawford, Executive Director & Chief Information Officer of the Texas Department of Information Resources (DIR). Prior to her role at DIR, Amanda served at the Office of the Attorney General of Texas for more than 17 years. Her roles included Deputy Attorney General for Administration and General Counsel. At DIR, Amanda is responsible for the leadership, direction, and daily operations.

In this episode, Mike and Amanda discuss building security across federated groups, diversity in the workforce, and why security education needs to start young.

-----------------

“If you use a computer or the internet, you have a role to play in keeping our state safe. If you're a developer, it means that security needs to be injected throughout the development process. If you're a network manager, the tools need to be tuned to be able to respond to those threats. So role by role, each of us really need to consider how we are part of the team.” – Amanda Crawford

-----------------

Episode Timestamps:

*(01:46): Amanda’s background and role with the state of Texas

*(03:40): Amanda’s take on security as a team sport

*(08:40): Adoption of the cloud in Texas

*(10:35): How Amanda builds security across federated groups

*(19:15): How Amanda is building a human firewall

*(25:52): 2030 Goggles

*(29:01): How we can get more diverse in security

*(35:24): Quick Hits

-----------------

Links:

Connect with Harvey on LinkedIn

Challenging the Security Status Quo with Harvey Ewing, Chief Information Officer at R1 RCM Oct 18, 2022

This episode features an interview with Harvey Ewing, Chief Information Officer at R1 RCM. Harvey has over 25 years of experience in cybersecurity, governance risk, and compliance. At R1 RCM, he is responsible for security, delivery, and improvement of enterprise technology.

In this episode, Mike and Harvey discuss prioritizing patient data, the importance of healthy conflict, and speaking to board members in a language they understand.

-----------------

“When you say security is a team sport, you hit the nail on the head. This is something that we have to be spot on with our operators, our clinicians, the people that are supporting the process front, middle, and back, in addition to our technologists. And we focus across that spectrum. And I don't think that there's a better way to put it today in that it has to be a team sport because, as you well know, the perimeter is essentially gone in today's day and age. And we have to focus from a human aspect all the way down to the lowest level of the technology stack that we have.” – Harvey Ewing

-----------------

Episode Timestamps:

*(02:09): Harvey’s background and transition from CISO to CIO

*(04:53): How R1 RCM is making security a priority

*(16:46): Harvey’s advice for getting organizations to think of security as a team sport

*(22:39): How Harvey is reducing friction in security

*(25:03): How R1 RCM is enabling people to be human firewalls

*(30:59): 2030 Goggles

*(34:06): Quick Hits

-----------------

Links:

Connect with Jason Clark on LinkedIn

Empowering People for a Secure Future with Jason Clark, Chief Security Officer at Netskope Oct 04, 2022

This episode features an interview with Jason Clark, Chief Strategy, Security and Marketing Officer at Netskope. Jason hosted season 1 of the Security Visionaries Podcast and has spent nearly 30 years in security, serving companies like The New York Times, Optiv, and Emerson.

In this episode, Jason passes the baton to Mike Anderson, Chief Digital and Information Officer at Netskope. They discuss security as a team sport, creating a human firewall, and what the future of security holds.

-----------------

“I think that security needs to be built into everything from the beginning. You build security in, and that's still probably a challenge at a lot of places. But that's the only way to have really good security, and it's to simplify. The enemy of security is complexity. Everybody's probably seen the aspects of quality and security that the difference of the cost of building it in right to begin with, versus the cost of coming and being reactive and trying to remediate is significant. So I think security should be in the beginning of that conversation.” – Jason Clark

-----------------

Episode Timestamps:

*(05:03): Jason’s take on security as a team sport

*(07:03): How budgets influence security

*(12:39): What role security plays in determining a tech stack

*(22:25): How to enable a human firewall

*(26:29): Examples of HR being essential to security

*(29:33): 2030 Goggles

*(32:19): What CIOs and CISOs should invest in

*(35:25): Quick hits questions

-----------------

Links:

Connect with Marene on LinkedIn

Season 2 Trailer Sep 27, 2022

Security only works if everyone across an organization is pulling their own weight. Whether you’re a longtime executive or a recent hire, security should be everyone’s responsibility. But, only half of US companies actually have a cybersecurity plan in place, leaving them vulnerable to attacks and at risk of exposing important data.

We think security should be a team sport. And we’re here to show you how.

On this next season of the Security Visionaries podcast, you’ll hear from some of the smartest, most forward-thinking minds in technology. Get an honest and credible take on how to tackle transformation from voices of experience including CIOs, CISOs, networking leads, and many more from across industries. We’ll deep dive into how these leaders are teaming up on security, rethinking budgets, pushing innovative thinking, and enabling people across their organizations to be better digital citizens.

So if you want to learn more about what’s next, tap the follow button and get ready to help us create the future of digital security.

Welcome to Security Visionaries.

Powered by the team at Netskope.

Defining the Mission of the Modern CISO with Marene Allison, CISO at Johnson & Johnson Mar 01, 2022

This episode features an interview with Marene Allison, Chief Information Security Officer for Johnson & Johnson. Marene was among the first class of women to graduate from the U.S. Military Academy at West Point. She went on to become a Special Agent in the FBI and has held corporate security roles at publicly traded companies such as Medco and Avaya.

On this episode, Marene shares how West Point translated to a security career, the evolution of security over the last decade, and what areas need the most innovation.

-----------------

“In cyber, everything changes every six months. And there's a new lens and there's a whole new set of new technologies that are going to be out there. And as CSO, I got to take the new threat, my IT environment that doesn't change as rapidly as security environment does. And then wrap it again, and look at what works. I think we have an awesome job because we get all these new technologies. We get to look at all the different ways an adversary's gonna come after us and then look at how we're going to secure it.” - Marene Allison

-----------------

Episode Timestamps

*(02:15): Marene’s background

*(04:09): Marene’s transition into cyber

*(05:37): How security has changed over the last decade

*(07:15): How acquisitions have become easier

*(09:22): Marene’s greatest learning experience in cyber

*(12:13): What makes the CISO job so stressful

*(20:43): Marene’s favorite domain in cyber

*(21:45): What areas of cyber need the most innovation

*(25:15): The Zero Trust approach

*(29:56): Segment: Quick Hits

-----------------

Links:

Connect with Steve on LinkedIn

Bonus Episode: The Importance of Security Service Edge (SSE) and Your Cloud Security Evolution with Steve Riley, Field CTO at Netskope Feb 18, 2022

This bonus episode features an interview with Steve Riley, Field CTO of Netskope. Steve is a widely-renowned expert speaker, author, researcher, and analyst. Prior to Netskope Steve came from Gartner, where for five years he maintained a collection of cloud security research that included the Magic Quadrant for Cloud Access Security Brokers and the Market Guide for Zero Trust Network Access.

On this episode, Steve elaborates on his background as it pertains to being an analyst at Gartner, the exciting future of SSE, and so much more.

-----------------

"The benefits of SSE, or security service edge and a SASE journey is very clear. It's the first time, to me its the perfect reset for security. They get to move the majority of their inspection points closer to the user, closer to the data, they get to move it out of the data center and into the cloud, where it can be applied everywhere their data goes, everywhere the user goes." - Steve Riley

-----------------

Episode Timestamps:

*(0:40) - Steve’s background

*(2:50) - Avoiding boredom

*(6:29) - Huge announcement

*(11:13) - The moment that helped drive this new change

*(18:22) - The difference between SSE vs. SAS

*(21:55) - All things SSE

*(24:51) - Surprises with the new MQ

*(28:00) - What Steve loved/ddin’t love about publishing MQ

*(31:34) - The future of SSE

Links

Connect with Sanjay on LinkedIn

The Heart & Culture of Security with Sanjay Beri, Founder & CEO of Netskope Feb 09, 2022

This episode features an interview with Sanjay Beri, Founder and CEO of Netskope. Sanjay has over 2 decades of innovation and success in the cloud, networking, and security industries. Prior to Netskope, Sanjay held leadership roles at Juniper Networks and McAfee.

On this episode, Sanjay shares why he is obsessed with creating and maintaining culture, how to be the best organizational partner, and why innovation is a lifeline for security companies.

-----------------

“The first thing you want to do is make it clear what that culture is. So you embed it into your systems, your processes, and how you think, from myself to everybody else, how they think and hire. The second is if you hire on that culture and you espouse it, hopefully all your other leaders will do the same.” — Sanjay Beri

-----------------

Episode Timestamps:

*(3:10): Sanjay’s background

*(6:23) - Segment: Taboo Topics

*(6:52): Early days of SAS

*(12:18) - Segment: Deep Dive

*(12:26): Difference between SSE and SASE

*(15:33): What Sanjay is doing to stay true to at Netskope

*(17:28): How to maintain culture of customers, partners, and employees

*(22:35): Sanjay’s biggest learning experiences

*(27:30) - Segment: Quick Hits

-----------------

Links:

Connect with Rehman on LinkedIn

Everything Starts with People with Rehman Khan, Director of Security Strategy Research & Design at Charles Schwab Jan 19, 2022

This episode features an interview with Rehman Khan, Director of Security Strategy Research & Design at Charles Schwab. Rehman has over 20 years of technology innovation and transformation experience in the financial, biotechnology, hospitality, and technology industries.

On this episode, Rehman shares his love for teaching the next generation of security leaders, how cloud security is changing the security landscape, and what goes into a successful security team.

-----------------

“I think it will be the design security, like I said, really focusing on security design and making sure that the way we approach security is not just with a whole bunch of tools, but we should be really stepping back and designing security into the overall organization and the process.” — Rehman Khan

-----------------

Episode Timestamps:

*(1:53) - Rehman’s background

*(4:25) - Segment: Deep Dive

*(7:28) - Rehman’s most/least favorite security domains

*(10:37) - Teaching the next generation of security leaders

*(16:11) - How to keep up with the industry

*(18:17) - A.I and cyber security

*(22:03) - How cloud security is changing the landscape

*(26:41) - Best career decisions Rehman has made

*(30:20) - Segment: The Future

*(32:48) - Segment: Quick Hits

-----------------

Links

Follow Rehman on Twitter

Connect with Shamla on LinkedIn

Big Things on the Horizon: Cybersecurity Predictions for 2022 Jan 04, 2022

This episode features a roundtable discussion with Shamla Naidoo, CISO, Head of Cloud Strategy at Netskope, Steve Riley, Field CTO at Netskope, Mike Anderson, Chief Digital & Information Officer at Netskope, and last but certainly not least, David Fairman, APAC CSO at Netskope.

On this episode, Shamla, Steve, Mike, and David all share their predictions for 2022 and beyond. You’ll hear predictions ranging from more mental health support for security leaders to the increase of companies measuring their carbon footprint, and everything in between. If you’re in security and are curious about what the future of the industry might look like, this is an episode you won’t want to miss.

----------------

“My last prediction, Jason, is that what we’re going to see is CEOs in particular creating programs to support the mental health and wellbeing of the security leaders…this job is really hard and it continues to get harder, but at this point, there's very little in the way of mental health support for the security leaders and for the security teams. So I really think that CEOs are going to start to double down on not just innovating for the business. But also helping the CSOs to create both innovations for security, giving them the tools, the technology, and the solutions to kind of help them do their jobs better, but also supporting that with mental health and wellness support programs…And I think with that needs to come, not just funding and the support that we be seeing today, but it needs to come with mental health and wellness support because this job is probably the most stressful in the C-suite today.” — Shamla Naidoo

----------------

Episode Timestamps:

*(3:23) - Prediction: Increase of Insider Threats

*(5:20) - Prediction: Rebranding of Technology Specific Security Vendors

*(9:21) - Prediction: Rise in Deep Fakes, Voice Cloning, & Misinformation

*(15:08) - Prediction: Increase in Companies Measuring Their Carbon Footprint

*(18:26) - Prediction: Autonomous Cybersecurity & Removing Human Delay

*(25:02) - Prediction: APIs as a Growing Attack Surface Risk

*(33:54) - Prediction: The Risk of & Managing Machine Learning in the Future

*(37:40) - Prediction: CEOs to Create More Programs to Support the Mental Health of Security Leaders

----------------

Links

Connect with David on LinkedIn

Connect with Steve on LinkedIn

Connect with Mike on LinkedIn

Connect with Dan on LinkedIn

Being Ready For Anything with Dan Lohrmann, Field CISO of Presidio Dec 16, 2021

This episode features an interview with Dan Lohrmann, Field CISO of Presidio, a global digital services and solutions provider accelerating business transformation through secured technology modernization. Dan has more than 30 years of experience in the computer industry and is an internationally recognized cybersecurity leader, technologist, keynote speaker and author.

On this episode, Dan covers why every security leader needs to check out his new book, the biggest vulnerability that the government potentially isn’t aware of, and his top advice for a 1st-time CISO.

-------------------

“The idea here is to marry up three parts: before, during and after an incident. So what can you do before, four chapters of the book is about, preparing everything from having playbooks and doing exercises, tabletop exercises, real true stories, what people learned and the good, the bad ugly. Then during incidents in the middle, real stories about that. And then at the end, what about afterwards? What, like the last chapter is turning cyber lemons into organizational lemonade. So really the idea of how can we take what we learned and then roll it back into our plan, into our playbooks, in our scenarios, and to get better and improve.” — Dan Lohrmann

-------------------

Episode Timestamps:

*(2:54) - Dan’s first job in security

*(4:42) - Dan’s current role as Field CISO of Presidio

*(5:44) - Dan’s perspective on the changing speed of the government

*(7:19) - The biggest vulnerability that the government potentially isn’t aware of

*(11:43) - Segment: The Deep Dive

*(25:44) - Dan’s predictions for the future

*(30:12) - Dan’s favorite security domain

*(34:16) - Top advice for a 1st time CISO

*(37:01) - If Dan could go back in time what he’d do differently

-------------------

Links

Follow Dan on Twitter

Check out Dan’s new book!

Connect with Gary Harbison on LinkedIn

Achieving Security Nirvana with Gary Harbison VP, Global CISO at Bayer Dec 01, 2021

This episode features an interview with Gary Harbison VP, Global CISO at Bayer. Bayer is a global enterprise with core competencies in the Life Science fields of healthcare and agriculture with a market cap of $53.5B. Gary has over 19 years of experience in the Information Security domain (21 years of overall IT experience) that includes roles at multiple global fortune 500 companies, as well as public sector experience with the US Department of Defense.

On this episode, Gary delves into where he thinks the largest gaps in security are today, what he believes will be a major issue in the future that nobody is currently aware of, and why he analogizes security leaders to car brakes.

-------

“I would say that more than anything, I think people look at security as we exist to stop things. And while yes, we do want to stop attacks from happening and such, but in much the same way that having brakes on a car enables you to go faster, having a good security team that is able to assess and balance risk and bring forward solutions that allow you to take the right risks in a responsible way, can actually help the company move faster and help achieve business goals. So looking at it as we’re here to say no, or to stop things, we’re actually here to help figure out a way to say yes in a responsible way, and that can actually help the business move faster.” — Gary Harbison

-------

Episode Timestamps:

*(3:17) - How Gary got into security

*(4:42) - Gary’s current role at Bayer

*(5:40) - Segment: Taboo Topics

*(5:40) - What outsiders get wrong about security

*(7:40) - The fasting growing risk in security today

*(9:15) - How to do drive real-time risk assessment

*(9:28) - Segment: Deep Dive

*(28:52) - How Gary keeps up with security and gets better at his job

*(31:27) - What Gary would tell his younger CSO-self

*(33:30) - Segment: The Future

*(33:43) - What nobody is talking about right now that will be a major issue in the future

*(35:22) - What CSOs need to invest in for the future

*(36:49) - Segments: Quick Hits

-------

Links

Connect with Matthew McCormack on LinkedIn

Creating a Pipeline of Future Cyber Leaders with Matthew McCormack, SVP & CISO, GSK Nov 16, 2021

“How do we help create a pipeline of future cyber leaders, but then also, that pyramid, how do we get millions more people into the discipline? And just convince them that you don’t have to be a computer scientist or an engineer to do this. All you have to be is inquisitive. I want somebody who looks at something and says, ‘well, that’s interesting. That doesn’t make sense. Let me figure out why,’ that’s the person who would make a good security person. If you are somebody that looks at something and says, ‘I don’t understand why it looks like that, but I’m going to go figure out why,’ then you’re right for this field.” — Matthew McCormack

-------

Episode Timestamps:

*(2:30) - Matthew’s first job in security

*(4:10) - Segment: Taboo Topics

*(5:30) - Matthew’s role at GSK

*(7:05) - How Matthew keeps up with the changing industry of security

*(8:30) - Segment: Deep Dive

*(8:35) - What it was like going from federal security to commercial security

*(13:10) - The fastest growing risk in security today

*(24:10) - Birds-eye-view on the current state of frameworks

*(29:00) - Segment: The Future

*(30:00) - What security leaders can do about the talent gap

*(35:25) - Matthew’s favorite domain in security

*(38:10) - Segment: Quick Hits

Links

The Transforming Role of Security Leaders Post-Pandemic with Emily Health, SVP, Chief Trust & Security Officer at DocuSign Nov 02, 2021

“This landscape is changing and it comes to a point where I honestly believe CSOs are going to be some of the highest paid professionals in the future. And it's already heading in that direction. Over the last few years, we've seen a lot of change already, but this is going to be one of the most highest paid jobs in business because it will get to a point that you're not going to be able to pay people enough money to take on this amount of risk.” — Emily Health

-------

Episode Timestamps:

*(2:40) - How Emily and Jason met

*(3:10) - Emily’s first security job

*(4:10) - Emily’s current role at DocuSign

*(5:15) - Segment: Taboo Topics

*(6:35) - Paying ransom or not paying ransom

*(8:00) - Other rapid growing risks that people aren’t aware of

*(10:35) - Segment: Deep Dive

*(12:15) - Careers are jigsaw puzzles

*(15:05) - Differences and similarities between United Airlines and DocuSign

*(17:35) - The “Trust” portion of Emily’s DocuSign title explained

*(21:25) - How the pandemic affected Docusign and Emily’s role

*(26:50) - Segment: Feeling vulnerable

*(27:55) - Emily’s thoughts on gut made decisions vs. data/biased made decisions

*(31:25) - Why CSOs are leaving their jobs

*(37:40) - What retirement looks like for Emily

*(39:30) - Segment: Into the Future

*(42:40) - Segment: Quick Hits

Links

Emily’s LinkedIn

Emily’s Twitter

James Robinson’s LinkedIn

Defining the Principles of Security Transformation Oct 19, 2021

“To be an innovator, to be a leader, you have to keep challenging the status quo. You have to keep challenging yesterday's thoughts. that's what we really did when we sat down and as a team started listening to our colleagues. And taking that input to really develop out these principles, It was about challenging the way we've been doing things and really thinking about how business digitalization is changing us and our organizations” — James Christiansen

-------

Episode Timestamps:

*(2:05) - Setting the theme for the 2nd half of discussion & introductions

*(5:00) - Principle One: Challenge Your Existing Principles!
*(7:29) - Principle Two: Stop Buying Blackbox Solutions — Buy “Open and Integrated” Instead

*(10:54) - Principle Three: Focus on Five Foundational Technologies that Integrate with Your Entire Security Ecosystem

*(15:05) - Principle Four: Only Buy Cloud-Powered New Technologies!

*(18:50) - Principle Five: Protect Business Data with Security Controls that Can Follow Data Everywhere

*(21:55) - Principle Six: Prioritize Business Risk/Reward When Making Security Strategy

*(27:50) - Principle Seven: Build Threat Models and Use Them in Every Architecture Decision You Make

*(29:34) - Principle Eight: Expand Security Operations Automation

*(37:16) - Principle Nine: Demand Continuous Visibility and Risk Assessment for Every Security Control

*(41:09) - Principle Ten: Reduce Attack Surface Using Zero Trust Principles

Links

Lamont Orange’s LinkedIn

James Christiansen’s LinkedIn

Erick Rudiak’s LinkedIn

Setting the Stage for the Security Transformation Playbook Oct 19, 2021

“I think what I'd love for people to think about this series is the spirit of camaraderie and the spirit of community that has always been there in information security. And I think one of the really cool things about this series is that it creates a concentrated digestible version of that really enriching, magical experiences, where people who are passionate about their topic and just kind of get together and talk. And it's not about getting the predictions right so much as it is about having a conversation.” — Erick Rudiak

-------

Episode Timestamps:

*(2:20) - How Erick and Jason met

*(3:20) - How Erick got into security & how he became the SVP & CTO of Northwestern Mutual

*(7:00) - What Erick would do differently with what he knows now

*(9:30) - Why Erick wanted to get involved in writing the book

*(12:30) - The purpose behind the book

*(14:30) - COVID-19 has accelerated everything

*(16:55) - The convergence of network and security teams

*(19:35) - Who should be consuming this resource

*(21:50) - What’s changed the most in security since the start of the pandemic

*(23:40) - What CISOs will have wish they invested in now in 5-10 years time

*(29:15) - Closing thoughts

Links

Erick Rudiak’s LinkedIn