CISO Talk

Immediately following his AWS re:Inforce 2024 Keynote talk, AWS CISO Chris Betz joins Mitch Ashley on CISO Talk. Chris shares his comprehensive approach to security, including creating a culture of security, AWS chip security, secure programming languages like Rust, securing AI and the data AI uses, and more. Mitch considers Chris Betz an example of the modern-day CISO, a CISO for 2024 and beyond....

Recent collaborative actions by U.S. and international law enforcement against ransomware rings such as LockBit, BlackCat, and Ragnar Locker serve as a critical wake-up call for CISOs and security leaders. These operations highlight ransomware’s sophistication and pervasive nature, emphasizing the need for robust incident response measures that may involve law enforcement. In this special edition...

CISO Talk finishes 2023 with a year-end review hosted by Mitch Ashley (Techstrong Research) and Jennifer Minella (Viszen Security), joined by Allison Miller (executive security leader) and Dan Glass (CISO, NTT DATA). Our cyber leaders reflect on the rapid rise of generative AI (and whether it lives up to its billing), the career and legal risks of CISO following the SEC's actions, security as a pr...

Anton Chuvakin, security advisor at Office of the CISO at Google Cloud and former Gartner distinguished analyst, joins Mitch and JJ to discuss AI and its security implications, software supply chain security and moving and securing workloads in the cloud, including its similarities and differences from operating in traditional data centers.

In episode two of a two-part series , CISO Talk hosts Mitch Ashley and Jennifer "JJ" Minella, continue their conversation with Andy Ellis, former CISO at Akamai and current operating partner at Weill Ventures. They delve into topics like building security teams, adapting to change and the impact of AI on the security landscape. Andy emphasizes the need for organizations to understand the value the...

In episode one of a two-part series, CISO Talk hosts Mitch and Jennifer "JJ" Minella introduce Andy Ellis, a renowned figure in the security industry with a long tenure at Akamai and currently an operating partner at Weil Ventures. Andy shares insights into the role of a CISO, particularly focusing on whether they belong in the boardroom and the challenges associated with their role(s). They discu...

Third-party software and services, including SaaS applications, are integral to our everyday operations. But this widespread dependency on third parties also introduces risk and vulnerabilities, and cyberattacks and breaches continue to surge -- the MOVEit breach being a relatively recent vulnerable service of note. In this episode of CISO Talk, host Mitch Ashley and JJ Minella are joined by Eve M...

There's a lot going on in the cybersecurity industry today -- new SEC incident and security program reporting requirements, the discovery of pervasive Chinese malware in critical infrastructure systems and the wild west of generative AI adoption. In this episode of CISO Talk, Jennifer Minella and Mitch Ashley discuss security topics that are top-of-mind for security leaders.

Ever wondered what it's like to lead product security at a massive, global, name brand enterprise technology company? Now's your chance! Lisa Bradley, senior director, product & application security at Dell Technologies, brings you into her world as a product security leader. Bradley explores her experiences as a security leader across technology products and software initiatives and discusses lea...

Today's highly distributed workforce is introducing new challenges for CISOs who must carefully navigate the journey from traditional perimeter-based network security to, well, the exact opposite. Securing remote work and managing BYOD on top of the usual challenges of protecting the software development life cycle (SDLC) means CISOs need to strike a balance between strong security policies and de...

Every CISO knows it’s not a matter of 'if' a cybersecurity incident will occur, but 'when.' Fortunately, there's one name at the top of every CISO's incident response list: Stephen Reynolds, partner in Baker McKenzie’s Intellectual Property & Technology Practice. Reynolds built a well-deserved reputation as a bulwark between organizations and the cybercriminals who attack them, and he is rightly s...

Whether on-premises, cloud-based or cloud-native, the basics of securing digital systems are similar. In this episode of CISO Talk, Chuck Kesler, CISO at Pendo.io, shares his journey from a sysadmin, IT leader and CISO at Duke University Health System and his CISO role today with Pendo.io. Chuck works with software leaders and developers to secure software pipelines, remote development, infrastruc...

RSA Conference 2023 is fast approaching, and the conference organizers are hard at work putting together an amazing lineup of keynotes, speakers, sessions and events. If you just can't wait to find out what's in store, join CISO Talk hosts Mitch Ashley and JJ Minella along with Britta Glade, VP, Content & Curation at RSA Conference and Kacy Zurkus (Senior Content Manager, RSA Conference, for a sne...

Dan Glass, vice president and CISO with NTT DATA (previously CISO at American Airlines), joins CISO talk co-hosts Jennifer (JJ) Minella and Mitch Ashley to talk about what really grinds his gears lately. Glass discusses the latest LastPass breach disclosure, what security vendors need to do to keep pace with IT, pursuing zero-trust in small-to-medium-sized businesses and hiring strategies for entr...

They might be leaders in the cybersecurity industry and top of the ladder within their organization, but CISOs still need advice ! And when they do, they often turn to trusted advisors to help them with strategy, product, network and vulnerability decisions. So, who are these CISO advisors? How did they achieve their 'CISO whisperer' status, and what role do they play? New co-host, cybersecurity e...

As hackers become more sophisticated, we need to be able to keep up with new threats and reconsider our cybersecurity readiness. An effective strategy involves constant evolution and continuous learning. By practicing and failing repeatedly, we are able to test our security plans, learn more about potential vulnerabilities and be more prepared to effectively handle attacks. In this episode, our ho...

Join Mitch Ashley, Jennifer Minell (Viszan Security), Anthony Johnson (Delve Risk) and Allison Miller (Reddit) at RSAC 2022. The role of the CISO has not only changed, it is evolving by the day and will be completely different moving forward. We will discuss this shift as well as how we keep the lights on while getting rid of our corporate networks and using managed solutions instead of internally...

In this episode, Mitch Ashley and Mat Newfield are joined by Anthony Johnson (Delve Risk) and Joel Fulton (Lucidem) discuss the key elements of an active response strategy, how to test the readiness of an organization if a breach occurs and the best way to identify gaps in your process.

In this discussion, Mitch Ashley and Mat Newfield are joined by Beth-Anne Bygum (Acxiom) and Mike Rothman (DisruptOps) to discuss the importance of adopting frameworks and having a foundation that establishes a common understanding for managing risk across the organization in an efficient and effective manner.

Join Mitch Ashley, Jennifer Minell (Viszan Security), Anthony Johnson (Delve Risk) and Allison Miller (Reddit) at RSAC 2022. The role of the CISO has not only changed, it is evolving by the day and will be completely different moving forward. We will discuss this shift as well as how we keep the lights on while getting rid of our corporate networks and using managed solutions instead of internally...

Join host Mitch Ashley, Anthony Johnson (DelveRisk) and Mike Rothman (Securosis) as we discuss the changing role of CISOs, how they balance business and security needs and how CISOs are bridging the communication gap between the executive team and IT teams.

Mitch Ashley and Mat Newfield welcome Wendy Reynolds-Dobbs (Unisys) and Nicole Dove (WarnerMedia) to discuss the meaning and importance of diversity, equity and inclusion, and how to create meaningful change in the workplace.

Mitch Ashley and Mat Newfield are joined by Larry Whiteside (Cyversity), Karen Moore (Unisys) and Michelle Beistle (The Nature Conservancy) to discuss the bias and ethics in biometrics.

Jennifer Minnela (Viszen Security), Julian Waits (Rapid7), Richard Stiennon (IT-Harvest) join hosts Mitch Ashley and Mat Newfield to discuss what to do once your data has been compromised, new security measures beyond an IRP, and how to avoid future breaches.

Although CISOs talk about security to board members, sometimes they fail to translate the security language into a business language that C-level executives understand. Once they speak the same language, they will be able to build a collaborative workplace, increase productivity, accelerate decision making, avoid miscommunication and improve governance. In this episode, hosts Mitch Ashley and Mat...