The Virtual CISO Podcast

Latest Episodes:

29. How COVID-19 Is Shaping Security’s Future w/Reg Harnish Sep 29, 2020

Show notes

Though 2020 has felt decades-long already… We still haven’t had to deal with the long-term effects of the pandemic. But we will. The question is: Can your security? If you’re not sure, today’s guest will surely boost your confidence. Reg Harnish, Founder and CEO at Slingshot Cyberventures and Founder at GreyCastle Security, joins the show to walk us through the threats and opportunities a post-pandemic world presents. We discuss: - How the pandemic is impacting security - The threats companies face now and in the future - Finding opportunities post-COVID-19 world
To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

28. Why 800-171 Compliance Isn’t Going Away Any Time Soon w/John Ellis Sep 22, 2020

Show notes

CMMC is coming... But that doesn’t mean 800-171 compliance is out the window. In this episode, I catch up with John Ellis, Director of the Software Division at DCMA. We discuss: - How DCMA is conducting assessments - Why 800-171 compliance doesn’t just go away until CMMC - Why CMMC is so needed To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

27. How DevOps Took Over (& Why You Should Care) w/Jon Bass Sep 11, 2020

Show notes

Not too long ago, DevOps seemed like a fringe buzzword… Now, it’s front-and-center. So, what is DevOps and why should you care? To answer, I invited Jon Bass, Co-Founder & CTO at Sym, onto the show. Jon’s expertise in the field makes him a perfect tour guide for the exciting — and often misunderstood — world of DevOps. Jon explains: - How DevOps moved from the fringe to the mainstream - How agile comes into the picture - What SecDevOps is and why it’s used To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

26: How to Optimize Your ISMS w/Rich Stever Aug 25, 2020

Show notes

When ISO 27001 is optimized for speed, it’s an amazingly effective and efficient way to manage security and compliance. Today’s guest is one of our most seasoned ISO experts in both client-facing and training roles. In this episode, I interview Rich Stever, IT Security Auditor at Pivot Point Security, about key artifacts for optimizing your ISMS. What we talked about: - Key artifacts of the ISMS, including security management policy - Objectives during your ISMS refresh - Privacy, ISO 27701 extensions, and all about the Information Security Management Committee - Poe Dameron (yes, the Star Wars pilot) To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

25: CMMC Compliance & Continuous Monitoring Made Simple w/Chris Lank Aug 17, 2020

Show notes

If your organization is in the DIB, CMMC compliance is a big deal. It’s probably the biggest thing to happen to information security in history. And you need to prepare. Your business could depend on it. That’s why for this episode, I sat down with Chris Lank, Founder and CEO at Ivis, a company offering a solution for monitoring any compliance, not just CMMC, year-round. Chris goes over the ins-and-outs of the changes CMMC will bring for your business — especially for smaller DIB organizations — and how to prepare. What we talked about: - Why CMMC is necessary - What your organization needs to start doing right now to prepare - How tools like Ivis’ can make the compliance process a whole lot easier To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

24: Everything You Need to Know About ISO 27001 Audits w/ Ryan Mackie Aug 11, 2020

Show notes

Prepping for an ISO 27001 audit can be a nerve-wracking process. But it doesn’t have to be. You just need to know what you’re getting into. And Ryan Mackie, as Principal and ISO Practice Director at Schellman & Company, is the perfect person to guide you through an audit. In today’s episode, he covers:

Both stages of the ISO 27001 audit process
What to expect on the day of the audit
What to look for in a registrar (and what to avoid)

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

23. Why Security Is So Important for a Growing SaaS w/ Jesse Nash Aug 04, 2020

Show notes

If you have a growing SaaS company, security may be far down your list of priorities. I’ll be blunt… it shouldn’t. Security maturity can be make-or-break for SaaS clients and maybe even more importantly, SaaS investors. As a Partner at Reitler Kailas & Rosenblatt, Jesse Nash has a wealth of experience representing early-stage SaaS companies and venture capital investors, so he’s seen how security helps and hurts deals from both sides. He joined me today to go over:

How he counsels SaaS on security matters
How he counsels venture capital & private equity firms when approaching a SaaS
Why security has become such an important part of the investment process

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

22. CMMC Training & Assessments: Rollout, Certification & Competition w/ Ben Tchoubineh Jul 24, 2020

Show notes

If you are scrambling to figure out CMMC, you aren’t alone. It’s perhaps the most sweeping information security change for DoD contractors in history… And that comes with an assessment program dwarfing any other. As Member of the Board of Directors for CMMC AB, the accreditation body for CMMC, Ben Tchoubineh is one of the minds behind these assessments… just don’t call it an audit :). Ben came on the show to demystify the CMMC assessment and certification process. He covered:

The challenge of assessments and training
How competition will help with scalability of getting qualified people in the market
Types of certifications and careers

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

21. CMMC Compliance Doesn’t Have to Be Hard (or Pricey) w/ Sanjeev Verma Jul 17, 2020

Show notes

If your company works with the DoD. You might be worried about CMMC compliance. But it doesn’t have to be hard or expensive. In this episode, I caught up with Sanjeev Verma, Co-Founder at PreVeil, a company offering one solution for CMMC’s requirement for encryption of email and file sharing that can save you money and hassle, while giving you unparalleled security. What we talked about:

The stakes of migrating from O365 Enterprise to O365 GCC High
How a simple end-to-end encryption solution can save you big
How to be as secure as the U.S. nuclear arsenal
Why we are all active combatants in a new kind of war

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

20. Faster, Better & Cheaper Vendor Due Diligence Reviews w/ Kevin Hermosura Jul 08, 2020

Show notes

Covid 19 has created lots and lots of challenges and opened our eyes to ones that lay dormant. One of the most stark realizations is how much we rely on our critical vendors. But how can you know a vendor is safe to work with, is reliable, and figure this out quickly and at a low cost? Enter ARM. Accelerated Risk Management Pivot Point Security’s answer to the need for rapid risk assessment. If you are looking for a paradigm shift in the way you manage risk and assess your vendors this is the show you need to hear. Kevin Hermosura, one of our Third Party Risk Management & Vendor Due DIlligence Security Consultants here at Pivot Point Security talks with John Verry about using ARM to assess vendor’s risk (in minutes, not days). What we talked about:

Third party risk management is generally lousy.
Thanks to Covid, businesses are relying on vendors more than ever.
Vendors are a massive security risk!
There is a better way to assess and manage vendor risk

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected