The Virtual CISO Podcast

Latest Episodes:

The Past, Present and Future of Cybersecurity From the Viewpoint of a Venture Capitalist Jun 07, 2022

Show notes

Alberto Yépez joins the show to share his perspective as a venture capitalist working to help entrepreneurs build Cybersecurity businesses. He started his wildly successful career at Apple and he is now the Co-Founder and Managing Director at Forgepoint Capital. Join us as we discuss:

Information security challenges from the 2000’s that we still face today
Alberto’s experience working at Apple
Criteria that makes investing in a company worthwhile
Three models of private equity

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here. Listening on a desktop & can’t see the links? Just search for The Virtual CISO Podcast in your favorite podcast player

Understanding Attack Surface Management and How It Applies to Your Cyber Security Strategy May 24, 2022

Show notes

We’ve spent the last two and a half years with rapidly rising cloud adoption. It was a rocket ship before that, but the COVID-19 pandemic has only accelerated it and caused everybody to scramble. We’re still trying to play catch up and get equivalent security treatments for people working remotely to the folks working in the office. Every client has concerns about their current exposure, which is why our guest on this episode of Virtual CISO is so important. Michelangelo Sidagni is the Chief Technology Officer at NopSec, and he was on this episode to talk to us all about:

Why his firm is all in on Attack Surface Management, and how it’s different than your standard vulnerability management
How ASM fits into current vulnerability & configuration management strategies
Attack Path Analysis, what it is and what it isn’t
The NopSec client customer journey

The Convergence of Physical & Cyber Security and the Impact to Cyber Security Professionals May 17, 2022

Show notes

As technology advances, there will always be new threats from malicious actors seeking to exploit these advancements — whether that be in the digital realm or physical. With technologies increasingly blurring the lines between the two, today’s security professionals must adapt as the sectors of physical security and cyber security converge into one. Today’s guest, Chris Ciabarra, Co-Founder and CTO of Athena Security, is one of the physical security experts leading the charge on this front and he joins the show to share his insights into the inevitable security convergence in our future. Join us as we discuss:

Why the lines between physical security and cybersecurity are increasingly blurred
The technologies Athena Security are advancing in the physical security domain
How Athena accidentally made a COVID-19 detector

What CMMC 2 Guidance Means for Managed Service Providers (MSPs) May 10, 2022

Show notes

As the implementation of CMMC by the DIB picks up pace, the frequently shifting requirements can be daunting — especially when the guidance is already so complex. And that’s doubly true for managed service providers (MSPs), who have to contend with some of the most confusing CUI requirements. In today’s episode, making his 3rd guest appearance, I’m joined by Caleb Leidy, CUI Protection and CMMC Consultant at Pivot Point Security, who is here to clear up the confusion and share his insights into how the rollout of CMMC into the DIB impacts MSPs. Join us as we discuss the current state of CUI for MSPs in the DIB, including:

The controls MSPs have responsibility for in a client’s environment
The controls clients have responsibility for in their environment
The controls MSPs have to implement in their own environment to meet DFARS flow down requirements

8 Ingredients for Baking Inclusivity into Your Culture May 03, 2022

Show notes

Inclusivity and diversity aren’t just about who you hire — it’s about the culture you create. Sure, you can get talent from all walks of life, but if you haven’t built an inclusive culture… Well, good luck getting them to stick around. Today, I’m speaking with Deidre Diamond, Founder and CEO at CyberSN, who shares her 8-step framework for creating an inclusive culture in your organization. Join us as we discuss each step and its importance, including:

The need for emotionally intelligent managers
The power of positivity
The art of win-win communication

Becoming More Efficient w/ a Cloud-Native Approach Apr 19, 2022

Show notes

What if you could be proactive in your approach to cloud data security rather than a reactive one once the attack has been made? This is exactly the solution our guest is providing at Panther Labs. We speak with Jack Naglieri, Founder & CEO, about the cloud-native approach and exactly why SIEMs are getting left behind. Join us as we discuss:

Developing Panther & taking a different cloud-native approach
Understanding Snowflake & data lakes
Creating a proactive security response rather than reactive
Interesting findings from the state of SIEM

Use the CSA Cloud Controls to Maximize Your Security & Reduce Your Risk of Breach Apr 05, 2022

Show notes

Even before the pandemic, the majority of businesses were already moving to the cloud. Now, it seems you can’t do business without it. Which means cloud security and compliance is more important than ever. That’s why I’m speaking to one of the authorities on cloud security, John DiMaria, Assurance Investigatory Fellow at Cloud Security Alliance, in today’s episode — to demystify cloud security. Join us as we discuss:

How CSA’s STAR program can help you strengthen your cloud security
The biggest vulnerabilities organizations face when operating in the cloud
How landing on CSA’s CCM registry can give your organization more visibility

Ongoing Challenges in CMMC Mar 29, 2022

Show notes

CMMC has come a long way in recent years… But organizations still face plenty of challenges navigating the guidance. What are the biggest hurdles and how can we reduce the confusion? To answer these questions, I’m joined by Kyle Lai, Founder and CISO of KLC Consulting, and Caleb Leidy, the CUI Protection and CMMC Consultant at Pivot Point Security. Join us as we discuss:

Why CMMC scoping continues to confuse organizations
How to accurately mark CUI
Contracts passing the buck and the costs associated with compliance

Is Open Source the Future of Endpoint Security Mar 22, 2022

Show notes

Open source is a transparency issue. Being able to see what code is running on your computer — as well as what’s being monitored — gives you practically SaaS-level visibility across data, apps, and usage. In this episode, former open source developer Mike McNeil, CEO at Fleet Device Management, an open source company, talks with me about why open source is so imperative. Join us as we discuss:

The business impact of open source
Why open source grants such necessary visibility
How the open source community removes friction
Vulnerability management and automation
What’s next for Mike and Fleet

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here. Links here: Mike McNeil, CEO at Fleet Device Management Listening on a desktop & can’t see the links? Just search for The Virtual CISO Podcast in your favorite podcast player

The AWS Approach to Provable Security Mar 15, 2022

Show notes

Traditionally, companies have relied on the promises of vendors when it comes to reaffirming their security stance. However, LimaCharlie has a far more radical approach—provable security. How are they doing it? In this episode, Maxime Lamothe-Brassard, LimaCharlie’s founder, explains the “AWS approach” the company employs for cybersecurity and how being born in the cloud provides infinite scalability and enables them to deploy a wide range of security capabilities. Join us as we discuss: