CISO Series Podcast

All links and images for this episode can be found on CISO Series Should you monitor your staff? I mean reallymonitor them. Some bosses are installing screen grabbing and click tracking software to monitor employees and by most estimates employees hate it so much that half of them would quit if their supervisors installed monitoring software on their computers . But in some cases an employee's beh...

All links and images for this episode can be found on CISO Series Next time you're annoyed by a security vendor's pitch, instead of firing back at them at what an idiot they are, or complaining about it on social media, why not see if you can find a friendly manager at the vendor company and explain what happened so they can actually address the problem appropriately? This week's episode is hosted...

All links and images for this episode can be found on CISO Series I have no idea what I need to spend to demonstrate our security program is working. What's it going to take? Or maybe I need just others on my team to just validate that they truly do care about security. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating...

All links and images for this episode can be found on CISO Series How dangerous is it for a cybersecurity professional to pull a G-d complex with the email server just because they didn't like the way one salesperson behaved? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL Ventures . Our sponsored guest i...

All links and images for this episode can be found on CISO Series What if we could convince management that security is not a cost center, but a means to actually make and save money for the business? The concept isn't so completely outrageous. Companies are using privacy and security as differentiators, and certain security tools such as single sign on, password managers, and passwordless reduce...

To see the blog post and read the transcript, head over to CISO Series . We don't celebrate quitting. Maybe we should. When should you do it when you don't have another offer? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our guest is Hadas Cassorla , CISO, M1 . On this episode: When a "good" security control is actually bad for busines...

All links and images for this episode can be found on CISO Series I have talked to vendors who get all excited about Gartner opening up a new category for them. All I can think is uggh, something new to confuse the security marketplace. I know there's a need to label products in categories to simplify sales. But the complexity is driving buyers nuts. This week's episode is hosted by me,  David Spa...

All links and images for this episode can be found on CISO Series Are bad security policies of yesteryear just because we didn't know any better at the time, or were they some bozos idea of legitimate security yet the rest of us knew it was just security theater? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our guest is Dr. Diane M Jan...

All links and images for this episode can be found on CISO Series Legacy tech can often be the anchor that prevents an organization from growing. Put the issue of dealing with legacy tech long enough and the problem could get bigger than the business itself. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL...

All links and images for this episode can be found on CISO Series People violate cybersecurity policies at a rate of one out of every 20 job tasks. It's just a matter of time before all your employees are in violation. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL Ventures . Our guest is Bruce Schneier...

All links and images for this episode can be found on CISO Series A young woman is killing it in her first cybersecurity job out of college. Management is so thrilled with her that they want to give her a promotion. Problem is the promotion reveals a lot of other innerworkings that don't speak well of the company's culture. This week's episode is hosted by me,  David Spark  ( @dspark ), producer o...

All links and images for this episode can be found on CISO Series First job out of college and you get the cybersecurity job of your dreams... and nightmares. It's just too much, and you definitely don't have the experience to handle it all. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our guest is Rick Doten ( @rick_doten ), CISO, Car...

All links and images for this episode can be found on CISO Series "No business wants more security, they want less risk," said a redditor on the cybersecurity subreddit. Executives seem to not care about cybersecurity because they're not talking in those terms. They talk in terms of managing risk. It's the InfoSec professional's job to do the translation. This week's episode is hosted by me,  Davi...

All links and images for this episode can be found on CISO Series A CISO hears about your company's product from some other CISOs. Eager to find more information like a video demo they could watch on their own, they visit your site. They can't find anything except a prominently placed "Request a Demo" button. Fearing the marketing and salespeople who will hound them if they fill out the informatio...

All links and images for this episode can be found on CISO Series The web is awash with sites claiming they know what the security trends will be for 2022. All of them were filled with quotes from security experts at different vendors who "surprise" we're saying the big trend is what their product can fix. One publication, eWEEK, had probably the only logical set of trends and they look a lot like...

All links and images for this episode can be found on CISO Series Are security conferences really helpful in advising you on making your business more secure, or are they just adding more worries to your plate that aren't actually going to be threats your business is going to have to face? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @c...

All links and images for this episode can be found on CISO Series Our entire network launched because of the irritation CISOs had with vendors could have stopped some breach that happened to another company. Then the chest pounding subsided, and we thought we were making an impact, until Log4j appeared... This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and ...

All links and images for this episode can be found on CISO Series The trick to getting the attention of CISOs is to create an awesome company. Focus on that and the attention will follow. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL Ventures . Our guest is  Katie Stebbins ( @ktlgs ), board president, G...

All links and images for this episode can be found on CISO Series If you're up against Google, Facebook, or Apple for hiring talent, chances are pretty good that your company is not going to match their pay and benefits. So if they're the bar for salary and benefits, your business' offerings will inevitably be subpar. So how do you build your employer brand to contend in areas where you're deficie...

All links and images for this episode can be found on CISO Series Every organization has an Acceptable Use Policy (AUP) for their computers and network. Nobody reads it and everybody violates it. How the heck do you enforce or discipline people who violate your company's AUP? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), oper...

All links and images for this episode can be found on CISO Series Yikes, this security hole one concerned student found in the school's network is going to require one heck of a pep rally to fix. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Andy Ellis  ( @csoandy ), operating partner,  YL Ventures . Our guest is Dave Stirling , CISO, Zions Bancorpora...

All links and images for this episode can be found on CISO Series If we had such a great conversation at the conference, why don't you want to respond to my emails? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson . Our guest is Julie Tsai ( @446688 ), cybersecurity leader. Thanks to our podcast sponsor, Varonis What is your ransomware blast...

All links and images for this episode can be found on CISO Series Winning at vulnerability management is not a numbers game. It's a tactical exercise of what matters most in your environment. Surprisingly, experts tell us close to two thirds of your vulnerabilities can and should be ignored. Why and which ones are those? This week's episode is hosted by me,  David Spark  ( @dspark ), producer of C...

 All links and images for this episode can be found on CISO Series If you're asking what certification you should go after to get the perfect cybersecurity job, you're asking the wrong question. Most hiring managers are inundated with resumes so they're looking for ways to get rid of yours. Don't be fooled thinking you're going to be seen because you have the "perfect" resume. This week's episode...

All links and images for this episode can be found on CISO Series CISOs agree that multi-factor authentication is the one security control that once deployed has the greatest impact to reduce security issues. Yet with all that agreement, it's still so darn hard to get users to actually use it. This week's episode is hosted by me,  David Spark  ( @dspark ), producer of CISO Series and  Mike Johnson...