CISO Series Podcast

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Joining me is our guest, Bob Schuetter , CISO, Ashland . In this episode: What should a company do when their name is in the press, but they didn't actually suffer a security incident?...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Billy Norwood , CISO, FFF Enterprises . Joining us is our guest, Joshua Barons , head of information security at San Diego Zoo Wildlife Alliance . In this episode: Wasn't single sign-on supposed to solve all of our security woes? So why are w...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures .  Joining me is our guest this week, Mike Kelley , CISO, EW Scrips . In this episode: Why do a lot of security professionals feel unheard? Does this frustration lead to some turning int...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL Ventures . Joining me is our guest,  Richard Ford , CTO,  Praetorian . In this episode: Why do many CISOs think adopting new LLM-based tools will make breaches more likely? Why the rush to t...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson , CISO, Rivian . Joining me is our guest, Suresh Vasudevan , CEO, Sysdig . In this episode: What will the employment landscape look like with Generative AI becoming the next big thing? Will we be hiring prompt engineers in a few...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and sponsored co-host Jason Sabin , CTO, DigiCert . Joining us is our guest, Alexandra Landegger , executive director of security, Collins Aerospace . In this episode: Are CISOs prepared for the legal surprises that can come in the aftermath of a...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson , CISO, Rivian . Joining me is our guest, Kurt Sauer , CISO, Docusign . We recorded in front of a live audience at Microsoft's offices in Mountain View, CA as part of the ISSA-Silicon Valley chapter meeting. Check out all the pho...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Joining me is our guest, Arvin Bansal , former CISO for Nissan Americas . In this episode: Why are so many companies unprepared for phone-based social engineering? Why do many orgs not...

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Adam Zoller , svp, CISO at Providence . Joining me is our guest Sam Jacques , vp of clinical engineering, McLaren Health Care . In this episode: When should cybersecurity be brought into the discussion when a merger is underway? Why is securi...

All links and images for this episode can be found on CISO Series . In principle, we can generally all agree that security theater is a waste of time for security teams. But the reality is that these are things that look good, so it can be hard to justify to non-technical leadership why you're eliminating something they see as secure. So how can we positively identify actual security theater pract...

All links and images for this episode can be found on CISO Series . Usually the buck stops with the CEO. But for a CISO, what do you do when a CEO wants to exempt themselves from your security program? Whether it's granting privileged network access or just ignoring protocols, it can put a CISO in a tough spot. So how do you deal with a leader that thinks they're above the controls you have in pla...

All links and images for this episode can be found on CISO Series . When it comes to security awareness, the advice generally doesn't change. There are a set of best practices that have proven to be effective. So we know what we want to tell people. Communicate it consistently. So how do we relay that information without sounding like a broken record? This week's episode is hosted by me, David Spa...

All links and images for this episode can be found on CISO Series . Organizations know that securing SaaS is vital. But polls consistently show they also know their current security isn't cutting it. With security teams acting more as SaaS supervisors than app owners, how can we reduce the glaring gaps in our SaaS defenses? This week's episode is hosted by me, David Spark (@dspark), producer of CI...

All links and images for this episode can be found on CISO Series . If you search online, you'll find no dearth of lists claiming to rank the top security leaders. The question is, how do these actually get created? Most of the time, these lists include CISOs from the biggest companies, or the ones with the best name recognition. But is that any kind of objective criteria? These lists generally se...

All links and images for this episode can be found on CISO Series . CISOs are common among the Fortune 500. But it remains rare to see them listed in executive leadership. Given that every company says security is of prime importance, why aren't CISOs named within the top company echelons? This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series, and Allan Cockriel , C...

All links and images for this episode can be found on  CISO Series . We've heard a lot of talk about the security risks with emerging AI technologies. A lot of these center around employees using large language models. But what about the potential benefits of this technology for cybersecurity? Could we eventually see a de facto AI CISO on the job? This week's episode is hosted by me,  David Spark...

All links and images for this episode can be found on CISO Series . In everyday life, it's often clear when to call in the authorities. Someone egging your house might not rise to the occasion, but a break-in gets a call to the cops. It's less clear when it comes to a cyberattack. What constitutes a significant attack and what are the regulatory requirements? Once you make the call, how do they he...

All links and images for this episode can be found on CISO Series . Even before the pandemic, we've been increasingly living in online collaboration apps. So why are organizations still making basic security mistakes with them? Is this a case of shadow IT or do these apps present unique challenges? This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johns...

All links and images for this episode can be found on CISO Series . Every company deals with off-boarding employees. Yet it feels like many organizations make basic security mistakes in this process. Is it just a case of HR and IT being out of sync, or is this an inevitably leaky process? This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoand...

All links and images for this episode can be found on CISO Series . Security vendors want to engage with CISOs. Yet many choose tactics that seem blatantly insulting. It might seem obvious that asking a CISO if they care about security does nothing to ingratiate yourself, but we still have inboxes full of these types of messages. So what can a vendor do that will actually make a CISO want to respo...

All links and images for this episode can be found on CISO Series . We're seeing increasing recognition that cybersecurity jobs should focus on competency rather than years of experience. But how do you create job posts to encourage that? And how do applicants even show that on a resume? This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson , CISO,...

All links and images for this episode can be found on CISO Series . For some security problems, it can be tough to know when to try to fix the problem yourself or turn to a vendor. Deciding this shouldn't start with talking to someone that wants to sell you something. But how do you determine when it's time to call in a vendor? This week's episode is hosted by me, David Spark ( @dspark ), producer...

All links and images for this episode can be found on CISO Series . Shifting Left is so five years ago. Advice and best practices are great, but context is king. Is there a mixture of best practices AND doing what's right for your business that's actually practical? This week's episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Steve Zalewski . Joining us for the episode...

All links and images for this episode can be found on CISO Series . There are so many third party vendors we want to work with, but uggh, their security and privacy is so troublesome. Is it only the security department's job to vet these partners or should everyone have a responsibility of keeping tabs on third party security? This week's episode is hosted by me, David Spark ( @dspark ), producer...

All links and images for this episode can be found on CISO Series . Do you know what security categories were created this year? I have no idea. Do you know which ones were deleted? I don't think any. Is category growth designed to make more money for the industry? Does it help customers build a better security strategy? It seems like a necessary evil that just confuses customers. The number of ca...