The Virtual CISO Podcast

Latest Episodes:

9. When an SMB Should Implement a SIEM w/ Danielle Russell Apr 21, 2020

Show notes

As an SMB, you’re probably thinking you’re too insignificant for a targeted cyberattack. That’s not even a little bit true. In this episode, I interview Danielle Russell, Director of Product Marketing Management at AT&T Cybersecurity, about SIEM solutions for SMBs. What we talked about:

Why an organization needs a SIEM
Small orgs are definitely a target
How to get started with a SIEM
The #1 characteristic of a good SIEM for SMBs

To hear this episode in its entirety and others like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

8. Resilience Guidance and the SCA w/ Tom Garrubba Apr 14, 2020

Show notes

You’re a CISO at an SMB, and you see that the AUP is called the SCA now. So now what? Actually, there are 3 applications for this great tool alluded to by the relabeling. In this episode, I interview Tom Garrubba, VP and CISO at The Shared Assessments Program, about applications for the SCA. What we talked about:

SCA application
Resilience Guidance and the SCA
3 ways for SMBs to use the SCA
How the SCA compares to SOC 2 and ISO 27001

To hear this episode in its entirety and others like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

7: Dead CISO's Don't Get Bonuses w/ Dr. Joel Kahn Apr 07, 2020

Show notes

If you thought this podcast was supposed to be about information security, you might be confused about why we’re featuring heart disease. Bottom line: Dead CISOs don’t get bonuses. On this episode, I interview Dr. Joel Kahn, triple-board certified cardiologist, author of 6 books, and restaurant owner — also my physician — about techniques for managing stress and preventing heart disease. What we talked about:

The truth about stress
3 techniques and tools to invest in your health
How to uncover silent health risks
What Dr. Kahn is excited about for the future of preventative medicine

Check out these resources we mentioned during the podcast:

#kahnchronicle
Dr. Kahn’s website, which is full of free resources and articles

Dead Execs Don’t Get Bonuses

Forbes article on Cybersecurity Mental Health

To hear this episode, and many more like it, you can subscribe to Virtual CISO here.
If you don’t use Apple Podcasts, you can find all our episodes here.

6. The Virtual CIO: What it Is and What it Isn’t w/ Darek Hahn Mar 31, 2020

Show notes

In this world of remote work that we’ve found ourselves in, there are likely a lot of companies that are looking around and wondering if they’ve got the right staff.
With a fully remote workforce comes a lot of new challenges in the IT space, and if you’re a smaller company, you may not be in the space to bring on a full-time CIO, but you still need the governance and expertise of a CIO.
Cue the virtual CIO. And there are a lot of managed IT service companies that offer some level of virtual CIO support. That’s why on this episode of The Virtual CISO Podcast, we sat down with Darek Hahn, President & CEO at VelocIT, to discuss:

The role of the CIO vs the CTO
What makes a good virtual CIO
When you know you need one
The difference between a virtual CIO and a traditional MSP consultant.

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

5. Staying Secure in a COVID-19 World w/ John Verry Mar 23, 2020

Show notes

Can we all agree that this is a strange, confusing, and stressful time to be living through? That none of us really know what’s going to happen, or what the future holds? While restaurants, airlines, cruise ships, and countless other businesses are struggling, there’s one group of people that don’t seem to be slowing down at all, and that’s cybercriminals.
They’re exploiting this crisis and taking full advantage of people’s fear and panic, often causing untold damage in the process.
We at Pivot Point have received countless calls from customers with questions about the changes that this pandemic has brought on. How do they stay safe? What should they be focused on? How do they keep their companies safe during these trying times? While he’s usually the host of the show, on this episode John Verry, the CISO and Managing Partner here at Pivot Point Security, sat down to discuss a few of the biggest challenges he sees as companies try to stay safe in this current landscape. He talked through:

Why all the people working from home could present a challenge
How to safeguard against increased social engineering and phishing attacks.
What to do if vendors start closing up shop

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

4. True Confessions of a Real Virtual CISO w/ Andrew Farkas Mar 17, 2020

Show notes

Trust, but verify. These famous words of Ronald Reagan, who, incidentally, would make a fantastic CISO, are also the simplest explanation of what it’s like to work as a virtual CISO. If step one is building trust and relationship with clients, step two is being let in to see all the inner workings and operations to make informed and strategic decisions. In this episode, John interviews Andrew Farkas, Virtual CISO at Pivot Point Security, about his experience as a vCISO and why the need exists for such a role. What we talked about:

What is a vCISO and why you (probably) need one
Working with a vCISO to create a security plan
Real examples of what a vCISO does
Scope vs Risk vs Gaps

You can reach out to Andrew via the Pivot Point Security website. To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

3. ISO 27001 vs. SOC 2 – Which Attestation is Right For You? w/ Dan Schroeder Mar 10, 2020

Show notes

Considering an ISO 27001 certification? Wondering about SOC 2 attestation? Trying to figure out the differences between the two? We got you covered. We invited Dan Schroeder, Partner-in-Charge for Information Assurance Services at Aprio LLP, onto The Virtual CISO Podcast to explain attestation, certification, ISO 27001, and SOC 2. What we talked about:

What is attestation?
ISO 27001 certification v. SOC 2 attestation
Which does my company need: ISO 27001 or SOC 2?

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

2. How to Attract and Retain Cyber Talent w/ Deidre Diamond Mar 03, 2020

Show notes

The cyber talent search feels like a global, dangerous game of Marco Polo. We’re all looking for each other, but nobody can find anyone. (And even if we do, it’ll only last 18 months or less.) In this episode, I interview Deidre Diamond, Founder and CEO of CyberSN, about attracting and retaining cyber talent during the talent shortage. What we talked about:

How the fact that we are short 500K information security pros in the US impacts attracting and retaining them
How career planning is the #1 way to retain talent
Why job searching should be like using a dating app

Check out these resources we mentioned during the podcast:

Deidre’s not for profit, Secure Diversity
Get better at recruiting (CyberSN blog)
KnowMore talent search

This post is based on a Virtual CISO podcast with Deidre Diamond. To hear this episode, and many more like it, you can subscribe to Virtual CISO here.
If you don’t use Apple Podcasts, you can find all our episodes here.

1. CMMC: What You Need to Know About DoD Cybersecurity Regulation w/ Katie Arrington Feb 25, 2020

Show notes

Katie Arrington is THE expert in the national cyber security battle. As CISO for Acquisition and Sustainment at the United States Department of Defense, she’s well beyond needing analogies to understand cyber security news and trends. Yet, she had the best one on hand to explain Cybersecurity Maturity Model Certification (CMMC, for short). “At the end of the day, the CMMC is your cyber driver’s license to participate in the DoD supply chain.” Katie is the very first guest of the Virtual CISO podcast. She joined John Verry to discuss recent changes to verifying contractors’ ability to protect unclassified information. We also chat about:

How the Department of Defense CMMC program will ensure the supply chain is properly protecting unclassified sensitive information
When RFP’s will begin requiring CMMC certification
How and when CMMC audits will begin
What companies should do now to remain viable and competitive

Reach out to Katie: katherine.arrington.civ@mail.mil
You can find this interview (and many more to come) by subscribing to The Virtual CISO Podcast on Apple Podcasts or Spotify.

Welcome to The Virtual CISO Podcast Feb 12, 2020

Show notes

Information security is a serious topic. However, the host of The Virtual CISO Podcast and managing partner at Pivot Point Security, John Verry, doesn’t think security pros *always* need to be so serious. In this intro episode of The Virtual CISO Podcast, Logan Lyles of Sweet Fish Media catches up with John to find out what exactly the show’s going to be covering. John offers up:

His mantra that he shares with the great Tyrion Lannister
The challenges a CISO and managing partner faces every day
How the podcast will help to simplify information security processes
How the podcast will help Pivot Point’s customers (and their customers, too)

To hear this episode and more like it, subscribe to Virtual CISO on Apple Podcasts, Spotify, or wherever you get your podcasts.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected