#CISOlife

In this episode of #CISOLife, hosts Brian Haugli and Dmitriy Sokolovskiy, delve into the dynamics of the RSA Conference, exploring its evolving relevance and the broader implications for cybersecurity. They discuss the nature of cybersecurity events, the benefits of smaller, local conferences like Secure World, and the importance of vendor relationships and ROI in cybersecurity. The conversation a...

" #CISOlife " is a podcast that explores the challenges and strategies of cybersecurity leadership. In a compelling episode, host Brian Haugli welcomes Andrew Pendergast , Managing Director at NFP , to delve into the intricacies of Directors & Officers (D&O) Insurance. This episode provides a thorough breakdown of how D&O Insurance operates and its significance for Chief Info...

What does good look like? ISSA Keynote by Brian Haugli, CEO, SideChannel Cybersecurity program goals are often centered around the comparison to sector peers, “best practices”, and “reasonable controls”. These terms and approaches leave much ambiguity in an industry that’s seeking defined, focused expectations on outcomes. While most acknowledge the existence of frameworks like NIST CSF or CIS Con...

Welcome back to #CISOlife with your host, Brian Haugli! In this episode, we dive deep into the world of CISO searchability, placement, and the evolving landscape of cybersecurity leadership. 🎙️ Joining us from across the Atlantic, Joe Head, the director of CISO search at Intaso, shares his valuable insights on what makes a top-tier CISO, the nuances of the role across different industries, and how...

The world of finance and cybersecurity has entered a new chapter with the U.S. Securities and Exchange Commission’s (SEC) recent final rule on cybersecurity disclosure. Effective September 5, 2023, this new regulation requires public companies to enhance transparency around cybersecurity risks and incidents. We will delve into the details of the final rule, discuss its impact on registrants, and e...

Review of an engagement and initial work as the CISO or a vCISO. More at SideChannel Why do organizations start a cybersecurity program?  1. Customer demands  2. Board or C-suite requests  3. Regulation requires it  4. Right thing to do  5. Post post breach Assess against a cybersecurity standard, framework or regulation Build cybersecurity roadmap to address gaps

A #CISOlife overview of the public information of the recent American Airlines breach by Brian Haugli, CEO, SideChannel.     Brian presents an explanation and walk through of how an O365 tenant can be hacked where legacy authentication methods are still available; specifically with IMAP.   The info released so far shows a series of steps: American Airlines has a breach of O365&...

vCISO provider SideChannel 's approach to building a cybersecurity program for startups and mid-market companies.   [2:15] The vCISO should be able to do the following (part of the #cisolife)   [3:30] Develop, or mature currently existing, documentation for the following:   [4:30] Information Security Strategy (3 to 18 months) - taking into account information from Risk Assessment a...

Brian Haugli & David Chasteen discuss potential impacts on privacy post Roe v Wade being overturned by the Supreme Court.  Both share ideas and concerns that could have negative impacts on privacy and personal data usage by companies using big data analytics.  #cisolife #cybersecurity #privacy

Overview of Access Control & Zero Trust concepts, specifically with system to system & user to system access.   Ideal outcomes for micro-segmentation using software defined networking (SDN) include:   Reduced costs for management  Reduced costs for licensing  Reduced costs for hardware   Increased security and control of accesses across end-points, users, and syste...

Review of 4 articles - https://feedly.com/i/subscription/feed%2Fhttps%3A%2F%2Ffeedly.com%2Ff%2FqCoqRqeJcihgymBxwp6qby2x SecurityWeek Analysis: Over 230 Cybersecurity M&A Deals Announced in First Half of 2022 What to look for when taking out a cyber insurance policy Cyber insurers split on what's most important in a security posture assessment Virtual ciso services platforms

#Cybersecurity has an ability now within the new CISO paradigm to lead and help maintain trust with an organization's customers. Video from CISOlife™ about how cybersecurity is treated as an operational risk within the business.

Interview with Delisha Hodo, SANS Institute Historically Black Colleges and Universities (HBCU) Chair & Senior Student Advisor   Nowhere is the workforce skills gap more pronounced than in cybersecurity, as the U.S. continues to endure a severe cybersecurity workforce shortage amidst an onslaught of sophisticated attacks. This is exasperated by the lack of diversity in the field—according...

Join us for a Fireside chat on CMMC, brought to you by the CMMC-CoE  Honest Broker of Cyber Capabilities that leverages standards, design expertise, and lessons learned from leading industry groups, standards bodies, public sector leaders and cyber communities of practice to improve and enhance the overall security and resilience of the supply chain for the defense industrial base and the U.S...

Industry-leading coaching techniques and assessments supported by expertise in Human Resources, Talent Management and Organizational Development   We talk with Christine Bilotti Peterson about applying best practices to being an executive.  She's offering a free consult to discuss your goals!  Schedule on her website here:   https://whatsyourlongview.com/   "I founded Long...

A very light CISOlife with return guests Dom Vogel and Dutch Schwartz. What happens when we get together and openly discuss the cyber industry? Tune in to find out.

Join Dutch Schwartz and Brian Haugli  as they  discuss pre COVID cyber risks, being the business enabler and risk management. They also cover what the new water cooler talk and best way to kick back on a Friday is.

Dominic Vogel sits down with me to talk the Canadian SMB markets, how companies are still reactive vs proactive in addressing their #cybersecurity posture, and his views on company mindsets. #CISOlife

#CISOlife - Off the top of the head thoughts and back from #vacation. Here I overview why vacation's are much needed to avoid burnout and how most organizations are causing issues with their 3rd party vendor #cybersecurity risk assessment questions. Help the supply chain and help yourself on this episode of CISOlife YouTube and Podcast from SideChannel Security.

Welcome back to CISOlife.  I sit down with Yaron Levi, CISO at Blue Cross Blue Shield Kansas City (not just Kansas! Thank Yaron)  We talk about his view on small businesses working with larger enterprises, the effects of 3rd party vendor risk management and how the cyber community can work with law makers on better policy.  Enjoy! #cisolife   Follow us -   Website - http:/...

Interview with Jennifer Pilat, VP Strategy at MxD.  MxD is the Department of Defense's National Center for CyberSecurity in Manufacturing (NCCM).    MxD (Manufacturing x Digital) is where innovative manufacturers go to forge their futures. In partnership with the Department of Defense, MxD equips U.S. factories with the digital tools and expertise they need to begin building every p...

Recorded from the 5/27/2020 LinkedIn Live stream.   Allan Alford and I sit down to discuss examples from our past of where NIST CSF controls were missed or not implemented.  Listen as we trade war stories on failures and successes.

#CISOlife Full Discussion Video - Leslie Weinstein of CMMC Consulting LLC and the US Army joins me to talk #CMMC, #cybersecurity efforts, DoD standards, Cybersecurity Maturity Model Certification Accreditation Body (CMMC AB) opportunities, Defense Contract Management Agency (DCMA) reviews and much more!

#CISOlife - Full discussion with Karl Sharman at BeecherMadden on job hunting and recruiting!

Chris Tillett interview - Surviving COVID Support from cyber & healthcare communities