CISO Insights: Voices in Cybersecurity

As a Federal Cyber Center and Center of Excellence, the Department of Defense Cyber Crime Center (DC3) proactively builds and leverages strategic partnerships across the globe to enable insight and action in cyberspace and beyond. These vital collaborations span U.S. government entities, international allies, law enforcement agencies, the private sector, and ethical hacking communities. Through th...

The EU's Digital Services Act (DSA) is presented as a comprehensive digital censorship law, ostensibly designed for online safety, but criticized for targeting core political speech, humor, and satire, even when not illegal. This report uncovers how European regulators leverage the DSA to compel American social media companies to change their global content moderation policies, effectively imposin...

The 21st century's quiet revolution, the Internet of Things (IoT), has woven digital systems into our physical world, promising efficiency and convenience while simultaneously creating an attack surface of unparalleled scale and complexity. This episode delves into the inherent fragility of IoT, exploring how market pressures and design compromises have led to devices that are often "insecure by d...

Traditional network perimeters have dissolved in the hyper-connected world of IoT, escalating cyber threats into pervasive cyber-physical risks with tangible real-world consequences for organizations and human safety. This podcast guides Chief Information Security Officers (CISOs) through a paradigm shift, detailing how to build a proactive, intelligence-driven security posture leveraging Zero Tru...

In 2025, the global aviation industry has been rocked by an unprecedented wave of cyberattacks, compromising millions of passengers' personal data and disrupting critical infrastructure systems. This crisis is largely driven by the notorious cybercriminal group Scattered Spider, also known as UNC3944, Scatter Swine, or Muddled Libra, which employs sophisticated social engineering and Multi-Factor...

Explore the unprecedented, multi-front cyber crisis confronting the global healthcare sector as of July 2025, where technological innovation dangerously intertwines with cyber warfare, creating a hyper-connected ecosystem rife with vulnerabilities. We deconstruct the escalating threat landscape, including evolving ransomware with multi-extortion models and the "mega-breach era" driven by systemic...

Law firms are a "digital bullseye", acting as custodians of clients' "crown jewels" of confidential and strategic information, making them uniquely vulnerable to escalating cyber threats. Attackers are now leveraging AI to launch hyper-realistic attacks at an unprecedented scale, while the human element remains the primary point of failure, leading to devastating consequences like multi-faceted ex...

Traditional security awareness training (SAT) has often proven ineffective, with only 15% of participants actually changing their behavior and a significant majority of data breaches, predicted to be 90% in 2024, involving a human element. Artificial intelligence (AI) is fundamentally transforming SAT by enabling personalized learning experiences, real-time threat simulations, and behavioral analy...

Cloud Security Posture Management (CSPM) is a critical component for continuously monitoring, detecting, and remediating security risks and compliance violations across cloud environments, particularly addressing misconfigurations which account for over 90% of cloud security breaches. While essential for visibility, risk assessment, and compliance in complex multi-cloud setups, CSPM primarily offe...

An Incident Response (IR) playbook is a comprehensive, step-by-step guide essential for organizations to proactively mitigate, detect, respond to, and recover from ransomware incidents. It serves as a single source of truth, enabling swift action to limit an incident's impact, save data, time, and money, and accelerate the return to normal business operations. Structured around key phases like Pre...

This episode explores how Enterprise Risk Management (ERM) processes evolve from foundational structures and informal approaches to sophisticated, enterprise-wide analytical frameworks. We delve into how Key Risk Indicators (KRIs) serve as crucial early warning signals, examining their varied development, monitoring, and application across three distinct organizations: Midwestern Utilities, Wimble...

This episode delves into the critical and direct accountability of top management and management boards for NIS2 compliance. We explore the significant legal obligations placed upon them, including the requirement to approve and oversee cybersecurity risk management measures and ensure timely incident reporting. Learn how proactive engagement by leadership is essential for building a robust cybers...

This podcast dives into the Cyber Security Readiness Goals Cross-Sector Toolkit, providing essential insights for Canadian critical infrastructure owners and operators. We explore how organizations can prioritize investments and elevate their cyber security posture by understanding the 36 readiness goals. Each episode unpacks recommended actions, associated risks like MITRE ATT&CK TTPs, and pr...

This podcast provides an insightful look into the Security Information Service (BIS) of the Czech Republic, detailing its crucial efforts in safeguarding the nation's security during 2024. We explore the persistent threats posed by Russia through "Telegram agents," cyberattacks, and influence operations, and the challenges from China concerning espionage and critical infrastructure. It also highli...

El papel de un CISO se ha vuelto excepcionalmente complejo en los últimos diez años, especialmente con el auge del trabajo remoto y la creciente migración de datos a la nube, haciendo que los primeros 90 a 101 días en un nuevo puesto sean cruciales para establecer una base de seguridad sólida. Los nuevos CISOs enfrentan desafíos significativos como comprender infraestructuras y vulnerabilidades de...

Based on the 2024 UN Global Risk Report, this episode explores how global stakeholders perceive critical risks and the international community's readiness to address them. It reveals that humanity remains "dangerously unprepared" for the most important global vulnerabilities, particularly mis- and disinformation, and clusters of environmental, societal, and technological threats. The discussion hi...

This episode explores the dramatic transformation of the global cybersecurity services market in 2025, driven significantly by AI integration, evolving threat landscapes, and new regulatory pressures. We delve into how AI is fundamentally disrupting traditional per-user pricing models, paving the way for usage-based and outcome-based approaches that prioritize measurable security results. Discover...

Cognitive warfare is a national security imperative to understand, as it focuses on influencing an opponent's reasoning, decisions, and actions to secure strategic objectives, often with less military effort. Russia is a key player in this space, using cognitive warfare to shape global decision-making, obfuscate its objectives, and preserve its regime. This podcast explores how Russia wages war an...

This episode delves into the critical role of the Chief Information Security Officer (CISO) in navigating complex information protection landscapes and managing corporate-level security risks for sustained growth. We explore how modern security threats, such as ransomware, increasingly bypass traditional technical and administrative defenses by targeting the "human factor" — employee awareness and...

Facing unprecedented cyber threats and a severe global talent shortage, organizations are compelled to rethink how they secure their digital assets and operations. This episode explores various strategic solutions, from leveraging fractional CISOs and managed security service providers to integrating advanced AI tools for threat detection and response, alongside traditional in-house hiring. We del...

Boards often struggle to grasp complex cyber risks due to technical jargon and inconsistent, non-financial reporting, leading to an "accountability gap". This podcast explores how to effectively communicate cyber threats and vulnerabilities in financial and business terms, enabling informed decision-making and strategic resource allocation. Learn to move beyond fear-mongering and technical details...

In an era where most cyber breaches originate from human error, "Human Firewall" explores how organizations can empower their employees to become their most formidable defense against digital threats. This podcast delves into the essential strategies for cultivating a positive security culture, focusing on continuous security awareness training, transparent incident reporting, and comprehensive hu...

This podcast explores the critical intersection where Information Technology (IT), Operational Technology (OT), and the Internet of Things (IoT) converge, dissolving traditional limitations but introducing complex cyber-physical threats. We delve into the unique challenges and escalating risks faced by industries, from manufacturing and energy to healthcare and smart buildings, including sophistic...

This podcast explores MITRE's SAFE-AI framework, a comprehensive guide for securing AI-enabled systems, developed by authors such as J. Kressel and R. Perrella. It builds upon established NIST standards and the MITRE Adversarial Threat Landscape for Artificial Intelligence Systems (ATLAS)™ framework, emphasizing the thorough evaluation of risks introduced by AI technologies. The need for SAFE-AI a...

In today's interconnected world, organizational supply chains stretch far beyond direct vendors, creating complex multi-tiered ecosystems where risks lurk deep within the 'invisible links' of fourth-party providers and beyond. Organizations often "fly blind" regarding these deeper dependencies, yet remain fully responsible for the potential data breaches, operational failures, and reputational dam...