CISO Series Podcast

All links and images for this episode can be found on CISO Series . This week's episode is hosted by me,  David Spark ( @dspark ), producer of CISO Series and guest co-host Jesse Whaley , CISO, Amtrak . Our guest was Paul Branley , CISO, TSB Bank . We recorded this episode in front of a live audience in Tel Aviv as part of Team8's CISO Summit 2023. CISO Series is honored to have been invited to re...

All links and images for this episode can be found on CISO Series . Troy Hunt's new site, "Dumb Password Rules," demonstrates yet another slice of security theater. Rules designed to make the creator believe they're making the business more secure, but appear to do nothing more than create unnecessary roadblocks and confusion. This week's episode is hosted by me, David Spark ( @dspark ), producer...

This week's episode was recorded in front of a live audience at the Colorado Convention Center in Denver as we kicked off the Rocky Mountain Information Security Conference ( RMISC ). See the blog post for this episode here. Joining me,  David Spark ( @dspark ), producer of CISO Series , on stage was my guest co-host, Jay Wilson , CISO for Insurity . Our guest is Michelle Wilson , CISO, Movement M...

All links and images for this episode can be found on CISO Series . Why does it seem that the only time we hear about a company's concern about security and privacy is after they're compromised. It is only at that moment they feel compelled to let us know that they're taking this situation very seriously because as we've ll heard before "security and privacy are very important to us." This week's...

All links and images for this episode can be found on CISO Series . There is a long history of security professionals complaining about the insecurity of new technologies. When new technologies take off, they rarely have lots of great security built in. The populace never comes around and says, "Security is right. We should stop using this thing we love." The popular technology ALWAYS wins. This w...

All links and images for this episode can be found on CISO Series . When cybersecurity needs to cut budget, first move is to look where you have redundancy. That way you're not actually reducing the security effort. But after that, the CFO needs to know what are the most important areas of the business to protect. Where will they be willing to take on more risk? Because, with less security, the ch...

All links and images for this episode can be found on CISO Series . As children, we don't dream of becoming a CISO, but yet we still have them. What is it a security professional can learn or even show, to demonstrate that they're getting ready for the position of a CISO? This week's episode is hosted by me,  David Spark , producer of CISO Series and  Andy Ellis , operating partner,  YL Ventures ....

All links and images for this episode can be found on CISO Series . It seems anything that's added to a business, like a new app or a third party vendor, just adds more risk. Risk definitely piles up faster than CISOs can reduce it. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our guest is Kurt Sauer ( @kurtsauer ), CISO, DocuSign (whe...

All links and images for this episode can be found on CISO Series . This show was recorded in front of a live audience in New York City! This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series, and a special guest host, Aaron Zollman , CISO & vp, platform engineering, Cedar . Our guest is Colin Ahern , chief cyber officer for the State of New York . Thanks to our po...

All links and images for this episode can be found on CISO Series . Turns out cybersecurity professionals lie on their resumes . They add degrees and certifications they don't have. They omit degrees for fear of looking overqualified. And sometimes, they flat out invent jobs. But given the responses as to why people do it, it's because they're trying to get by the unnecessary barriers of cybersecu...

All links and images for this episode can be found on CISO Series . Companies want to hire security professionals who know everything. Eager professionals who want all those skills are screaming please hire me and train me. But unlike the military which can turn a teenager into a soldier in 16 weeks, corporations in dire of cybersecurity help have little to no means to train. They're just hoping t...

All links and images for this episode can be found on CISO Series . Given the ease of sharing data, our sensitive information is going more places that we want it. We have means to secure data, but you really can't do that if you don't know where your data actually is. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating p...

All links and images for this episode can be found on CISO Series . No department is immune to budget cuts. When the budget cuts come in, where can security look first to save money? Mike Johnson said, "An expensive tool that doesn't mitigate risk should be at the top of the chopping block." This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson ....

All links and images for this episode can be found on CISO Series . Is chaos engineering the secret sauce to creating a resilient organization? Purposefully disrupt your architecture to allow for early discovery of weak points. Can we take it even further to company environment, beyond even a tabletop exercise? How far can we test our limits while still allowing the business to operate? This week'...

All links and images for this episode can be found on CISO Series . In order to get any work done we try to shut out all possible distractions. That includes messaging apps. But those people who want to connect become annoyed that they can't reach you. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL Ventu...

All links and images for this episode can be found on CISO Series . What happens to your team after the layoffs? Your overextended team now realizes they're going to have to pick up the slack for those who left. How do you shift responsibilities in such a situation? Does anything fall away? Because you can't still operate at the same level. How do you adjust while maintaining morale and not burnin...

All links and images for this episode can be found on CISO Series . Future cybersecurity talent is frustrated. The industry demand for cybersecurity professionals is huge, but the openings for green cyber people eager to get into the field are few. They want professional training, and they want the hiring companies to provide the training. Problem is not enough companies have training programs in...

All links and images for this episode can be found on CISO Series . I don't need another vendor to find my problems. Finding my problems has not been the issue. That's the easy part. Fixing them with the staff I have is definitely "the problem." Vulnerability management must include ways to remediate, quickly. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series...

All links and images for this episode can be found on CISO Series . It's pretty darn easy to just utter the words "we're 100% secure." Pulling that off seems universally impossible, but some organizations are adamant about certain types of safety so they aim for 100%. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our sponsored guest is...

All links and images for this episode can be found on CISO Series . A CISO calls on security vendors to stop the spamming and cold calling. Are these annoyances the direct result the way salespeople are measured? Is that what drives the desperation and bad behavior? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating part...

All links and images for this episode can be found on CISO Series . We are all very easily distracted, and adversaries know that. So they'll try any little trick to make us not pay attention, look away, or do what we're not supposed to do all in an effort to break our human defenses. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy...

All links and images for this episode can be found on CISO Series . For those security practitioners who leave a job to go work for a security vendor, please stop calling it "going to the dark side." This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our sponsored guest is Jason Mar-Tang , director of sales engineering, Pentera . Thanks to o...

All links and images for this episode can be found on CISO Series . Tabletop exercises are critical procedures to learn how everyone will react during an actual attack. Panic is usually the first response, so why don't we do that when we're playing our pretend game of getting our business compromised by a nefarious hacker? This week's episode of CISO Series Podcast was recorded in front of a live...

All links and images for this episode can be found on CISO Series . Everyone's favorite meeting is a short meeting. But does anyone want a fun or entertaining meeting? Or is that a bad idea? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and Mike Johnson. Our guest is Jeremy Embalabala , CISO, HUB International . Thanks to our podcast sponsor, SlashNext Wit...

All links and images for this episode can be found on CISO Series . What happens when you want to adhere to more secure behavior, but the tool you're using forces you to be less secure, solely because they didn't architect in more stringent security when they created the program. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our guest i...