CISO Stories Podcast (Audio)

10,500 storefronts. 2.3 million associates worldwide. $572.8 billion in revenue. Today's cybersecurity landscape is complex, as attacks can deliver disruption in the blink of an eye. The focus of Walmart's Information Security team is to secure our operating environment in the service of building and maintaining trust with our customers, associates and stakeholders. To perform at the necessary sca...

Joe Sullivan has shown all of us that CISOs are on the front lines when it comes to breaches and their legal aftermath. Unfortunately, most CISOs are not attorneys and may not understand the rules of engagement with law enforcement to the point where they may find themselves in legal jeopardy for 'doing the right thing'. Join Larry Dietz long time cybersecurity professional, attorney and retired U...

CISOs want to enable the business. But sometimes we must stand our ground and explain our position with rationale. So, how do we convince other people to act without telling their baby is ugly? Join us, as we discuss having difficult conversations.   Visit https://securityweekly.com/csp  for all the latest episodes! Follow us on Twitter: https://www.twitter.com/cyberleaders Follow us on LinkedIn:...

The CISO who can speak to the financial implications of cyber risk will be able to successfully work amongst the C-suite and in the board room to prioritize and address cyber initiatives. Building a view of the financial implications of those risks based on real data enhances not only the CISO's decision-making ability but also the CISO's credibility with stakeholders. Join us as we take a look at...

In April, the SEC is expected to finalize new rules on cybersecurity. The rules will require every publicly traded company to file disclosures with descriptions of their security strategy, governance, and risk management. Companies will need to explain to shareholders how they assess cyber risk, describe their security policies, and demonstrate a significant level of board oversight on cybersecuri...

All CISO roles are challenging. CISOs of large municipalities face many of the same risks with a unique set of challenges to overcome. Join us for a conversation about the rewarding experience of leading a government cybersecurity program for the nation's third largest city.   Visit https://securityweekly.com/csp  for all the latest episodes!  Follow us on Twitter: https://www.twitter.com/cyberlea...

Writing a cybersecurity strategy is an essential role of the CISO. How do you avoid the strategy from becoming outdated? Shelfware? Not in line with the business? Join us as Joey articulates his techniques for gaining stakeholder adoption of the strategy.   Visit https://securityweekly.com/csp  for all the latest episodes!  Follow us on Twitter: https://www.twitter.com/cyberleaders Follow us on Li...

Obtaining our first CISO role is an exciting and challenging experience at the same time. At some point, we will move on to another company. How have you prepared the person who needs to take your role? What knowledge and experience are you sharing with the next in line? Join Dave, as he has some great leadership lessons, approaches and tips for helping the next CISO and the organization.   Visit...

Everyone has a struggle or hurdle they will face. Your outcome is largely determined by your approach. Does this mean you will get OVER every hurdle? No. But sometimes, you can go around it or under it and still reach your final destination.   Show Notes: https://securityweekly.com/csp118  

Ensuring organizations have the proper governance, risk and compliance (GRC) practices is essential to ensuring risks are appropriately mitigated. Join us as we discuss the interconnectedness of risk, the process of GRC , and Michael's thoughts on how to improve the process.   Visit https://securityweekly.com/csp  for all the latest episodes! Follow us on Twitter: https://www.twitter.com/cyberlead...

How is County Government Security different from company cybersecurity? Is it difficult to get funding and attract resources? What are the advantages to working in Country government cybersecurity? Join two experienced County Government CISOS, with experience in leading cybersecurity in two of the largest counties in the U.S, Fairfax County and Los Angeles County.   Visit https://securityweekly.co...

Finding cyber talent is difficult in today's market. At a time when cyber salaries are high, working with universities to tap into the new cyber workforce is something all companies should be looking at. Today we will explore how to work with universities to bring talent to your organization. Visit https://securityweekly.com/csp  for all the latest episodes!  Follow us on Twitter: https://www.twit...

The role of CISO is one filled with challenges and decisions. Frequently, a CISO is faced with having to decide in compromise with Operations, in favor of Operations. This can be a very difficult and risky choice to make - but the ideal of having both get 100% of what they want, or need is not realistic. How to do this? In this session, we discuss how to analyze both POV, both sets of requirements...

Cybersecurity is becoming a #1 business risk for many organizations. For CISOs to effectively manage this risk, proper strategy, adequate resourcing, and leadership support are all essential, but not enough. CISOs need a trusted partner on the supplier side, a product CISO, known within industry as a Chief Product Security Officer, who understands customer risk, drives secure product design and de...

Now more than ever, the significant demand for cybersecurity professionals serves as an opportunity to align with your organization's DE&I priorities. Building a diverse and inclusive workforce is achievable and begins with intentional leadership. Learn from a cybersecurity leader's successful track record and how to stand by your organization's greatest asset. Visit https://securityweekly.com/csp...

As risk practitioners CISOs make risk vs reward decisions on a daily and sometimes hour by hour basis. As a profession we must understand our organizations risk tolerance and appetite as well as our own. Regulations are lagging indicators. SOX was established as a direct response to unethical behavior.  Unfortunately, regulations in cybersecurity and data privacy are also "lagging indicators" that...

The successful CISO STORIES podcast started by interviewing the 75 contributors to the #1 Best-selling (2019-2022) and 2020 CANON Cybersecurity Hall of Fame Winning CISO roadmap book CISO COMPASS: Navigating Cybersecurity Leadership with Insights from Pioneers. These 25–30-minute podcasts have brought many issues to life, leveraging the experience of CISOs and other top security industry leaders....

Every year brings new challenges in protecting our companies and nations from threat actors. Join our conversation with key CISOs as we look back at 2022 and review some of the key learnings, and look ahead with a laser focus on 2023 priorities for cybersecurity. This segment is sponsored by Wiz. Visit https://securityweekly.com/wiz to learn more about them! Follow us on Twitter:  https://www.twit...

With over 112 million viewers tuning into the Superbowl in 2022, it is arguably the most watched televised event in the USA, with many fans globally. Whether watching for the NFL game of the year, the Superbowl Ads, or the incredible half-time shows, one can appreciate the complexity in managing security and cybersecurity for this large event. Join us, as we the CISO for the NFL discusses the comp...

Join Erik Hart, CISO at Cushman & Wakefield, and Eden Naftali, CTO Operations at from Wiz for a discussion around key trends in the cloud with the rapid pace of innovation and new technologies in IaaS and PaaS. This segment is sponsored by Wiz. Visit https://securityweekly.com/wiz to learn more about them! Follow us on Twitter: https://www.twitter.com/cyberleaders Follow us on LinkedIn: https://ww...

While 5G has been designed with specifications and capabilities that make it more secure than previous generations, 5G is also being deployed in a more complex threat landscape that continues to grow and evolve. How do we transform cybersecurity across the enterprise to reduce risk, particularly within a hybrid and distributed workforce? And how can new innovations in 5G, Artificial Intelligence,...

CISOs often have a love/hate relationship with auditors, as it is the auditors that are placing judgment on the adequacy of company cybersecurity controls. Join this session from the perspective of an IT Audit leader and former CISO, as to how to view the auditors and strengthen the cybersecurity program amid adversity. Show Notes: https://securityweekly.com/csp105 This segment is sponsored by Wiz...

The skills that got us to the CISO seat are not all we need to lead our teams and companies now. Inclusive leadership is bigger than just building a diverse team, it's knowing how to lead and develop others. This discussion to engage further on the topic of cybersecurity leadership development, blind spot detection and adapting to changing business needs Visit https://securityweekly.com/csp for al...

The convergence of quantum computing, artificial intelligence, machine learning and material fabrication is allowing innovation to take place in weeks verses years. What are the security implications and how should CISO's be thinking and planning for the transformation in our security capabilities to meet these new demands? This segment is sponsored by Wiz. Visit https://securityweekly.com/wiz to...

Cybersecurity is so heavily focused on technical topics, but it's the soft skills that can make or break a person. Whether you're negotiating a budget, trying to persuade another team to prioritize security patches, or collaborating with another team on a product feature, soft skills will make a security team and the individual professional more impactful. This segment is sponsored by Wiz. Visit h...