Lessons from the School of Security Hard Knocks

Today's guest is John Shegerian, the co-founder/CEO of ERI. In this episode, John discusses ERI and its founding as well as his role there, what drove him to write his book: "The Insecurity of Everything", prioritizing environmental or data protection, innovations pre and post COVID, "cross-contamination" of devices, and as always, his toughest lesson learned.

Today's guest is Min Kyriannis, founder/CEO of Amyna Systems. Does Min prefer silicone or carbon-based employees?! In this episode, Min discusses Amyna Systems and her role there, some of the challenges facing critical infrastructure, the importance of creating new cybersecurity standards and workflows, her work with Women In International Security (WIIS) and Curious Minds Foundation, founding the...

Have you ever wondered: "Where did Joe come up with the idea for this podcast?" or "Does the man who asks everyone for their toughest lesson have one himself?" How about: "Who is Alex O'Shea and what is she doing asking the questions this week?!" Listen to find out the answer to these questions and many more on this week's SPECIAL EDITION episode, where the tables have turned and we hear from Joe...

Today's guest is JB Benjamin, founder/CEO of Kryotech. In this episode, JB discusses Kryotech and his role there, Vox Messenger, the future of cryptocurrency, his thoughts on the metaverse, his biggest concerns about cybersecurity, the government's role and responsibility in regards to cybersecurity, quantum computing, how he got his start, what keeps him up at night, and as always, his toughest l...

Today's guest is Nico Bartolomeo, Senior Consultant of Cloud Security at Rockwell Automation. In this episode, Nico discusses Rockwell Automation as well as his role there, his aversion to the "if it ain't broke, don't fix it" mentality, the role economics plays in cybersecurity, the biggest threats facing cloud security right now, shared security models, his background in insider threat, what sec...

Today's guest is Mubarik Mustafa, OT/ICS Cybersecurity Consultant at ACET Solutions. In this episode, Mubarik discusses ACET Solutions and his role there, the current state of OT/ICS security, the major threats, the challenges of OT security over IT security, his background as a Process Automation Network engineer, what keeps him up at night, and as always, his toughest lesson learned. 

Today's guest is Matt Harless, Director of the Cyber Fusion Center at Carrier. In this episode, Matt discusses Carrier and his role there, what a day in the life is like, TMR (Tactical Mitigation Response), the importance of continuous improvement, the Veterans cohort program he is starting with SANS, the similarities and differences between working at a financial company versus an industrial OT p...

Today's guest is Chet Namboodri, SVP Business Development at Nozomi Networks. In this episode, Chet discusses Nozomi Networks and his role there, the state of OT and IoT security, which national security risks are posed, how OT differs from IT, product differentiation, how his career background impacted his current role, what he deems the largest security threats, and as always, his toughest lesso...

Today's guest is John Krzeszewski, Engineering Manager of Cybersecurity at Eaton.  In this episode, John discusses Eaton and his role there, his role as chair of the SAE Vehicle Cybersecurity Systems Engineering Committee and co-convener with ISO on post ISO/SAE 21434, what security concerns keep him up at night, zero-day attacks, what core issues they are working to solve, Eaton's commitment to s...

Today's guest is David Scott, Cyber Division Deputy Assistant Director at the FBI. In this episode, David discusses his time in the military to his past roles and now current role in the Cyber Division at the FBI, his current main priorities, who the FBI coordinates with to prevent cyber attacks, who the bad actors are, how he got his start in cyber, new tools and technologies in development, and...

Today's guest is John Deskurakis, Chief Product Security Officer at Carrier. In this episode, John discusses Carrier and his role there, how Carrier is making the world a safer place, what its buyer and customers expect from them, managing software supply chain risk, the risks and benefits associated with open source software, his work with Security Industry Association and ISAGCA, and as always,...

Today's guest is Matthew Bohne, VP & Chief Product Cybersecurity Officer at Honeywell. In this episode, Matthew discusses Honeywell and his role there, what "secure by design" means to him, the importance of ISA/IEC 62443, how he builds the best environment/culture possible, how product security differs amongst organizations and customers, his advice for young professionals, how he got his sta...

Today's guest is Jake Norwood, Cyber Security Delivery Executive at Booz Allen Hamilton. In this episode, Jake discusses Booz Allen and his role there, the top security concerns clients face, the differences between cybersecurity in the US versus the EU/UK, what surprised him the within the field, what advances in threat intelligence are needed, how his volunteer work in Poland impacted his career...

Today's guest is Andrew Kling, Industry Automation VP Cybersecurity & Product Security Officer at Schneider Electric. In this episode, Andrew discusses Schneider Electric and his role as Industry Automation VP Cybersecurity & Product Security Officer, the key to managing a large cybersecurity portfolio, the necessity of security, elevated risk, addressing software supply chain risk at Schn...

Today's guest is Rick Tiene, VP of Government and Critical Infrastructure at Mission Secure. Need a crash course in the importance of OT? Today's your lucky day! In this episode, Rick discusses Mission Secure and his role as VP, OT cyber vulnerabilities, how protecting IT differs from protecting OT, software security supply chain from an OT perspective, how homeland security challenges have change...

Today's guest is Lee Kappon, co-founder and CEO of Suridata. Want to hear from a Forbes' "30 Under 30"?! In this episode, Lee discusses Suridata and her role as CEO, the founding story, why SaaS data is so valuable, being named one of Forbes' "30 Under 30", the root of cybersecurity's success in Israel, the leaders she admires most, her biggest professional fears, and as always, her toughest lesso...

Today's guest is Kristi Rogers, Managing Partner & Co-Founder of Principal to Principal. Go Green or Go Blue?! In this episode, Kristi discusses her roles on the board of Qualys and NowSecure as well as her involvement in the Women's Foreign Policy Group. She shares about NowSecure's work with Peloton and how ubiquitous player Qualys is evolving, mobile application security, mobile application...

Today's guest is Philippe Humeau, CEO of CrowdSec. In this episode, Philippe discusses CrowdSec and his role there, the advantages of open source, how they make their business model work, how pentesting and the security landscape have changed over the past few decades, how the open source movement is affecting society at large, the implications of gray zone war, how traditional powers should respo...

Today's guest is James Johnson, CISO of John Deere. "We're fighting a cyber battle." In this episode, James discusses John Deere and his role as CISO, developing his leadership, current innovation at John Deere, what the customers are asking for, the key in developing security professionals, how security is an enabler for business, managing supply chain security, what keeps him up at night, and as...

Today's guest is Megan Samford, VP, Chief Product Security Officer - Energy Management at Schneider Electric. Before Megan worked in cyber, she was an emergency manager. Learn how that has impacted her career and so much more! In his episode, Megan discusses Schneider Electric and her role there, top security concerns in energy management, how to best manage product security at different companies...

Today's guest is Brad Hawkins, CEO of SaferNet. In this episode, Brad discusses the mission and founding of SaferNet, the dangers of work-from-home, how he got his start in the security industry, the similarities and differences between running an investment company and a cybersecurity organization, what keeps him up at night, his view on society's biggest security risk, and as always, his toughes...

Today's guest is Phil Odence, General Manager of Black Duck Audit Business at Synopsys. In this episode, Phil discusses his responsibilities and Black Duck's role at Synopsys, open source software, the increased risk of visibility, his impression of the Executive Order and the emphasis on SBOMs, his opinion on standards arounds SBOMs, the impact of the pandemic on business, what keeps him up at ni...

Today's guest is Avi Rubin, computer science professor at Johns Hopkins University. Poker champion, boating captain, and computer science professor?! In this episode, Avi discusses what he's teaching and researching right now, Harvard Labs, what buffer overflow is, consumer IoT and medical devices, surprises within the last few elections, his testimony before Congress, the dangers of cryptocurrenc...

Today's guest is Jeff Williams, Co-Founder and CTO of Contrast Security. Would you rather be right or compelling? In this episode, Jeff discusses Contrast Security, how the application security space has evolved, what their "inside out" approach is, the impact and need of the Executive Order, how he got his start in cybersecurity, the relevance of his law degree, what keeps him up at night, and as...

Today's guest is Mike Vesey, President of IdRamp. Passwords and zero-trust and pink locker rooms, oh my! In this episode, Mike discusses IdRamp, what self-sovereign identity is, why we still have passwords today, zero-trust, what the near future holds, pink locker rooms!, his path to IdRamp, and as always, his toughest lesson learned.