Defense in Depth

All links and images for this episode can be found on CISO Series In most jobs there's often a clear indicator if you're doing a good job. In security, specifically security leadership, it's not so easy to tell. "Nothing happening" is not an effective measurement. So how should security performance be graded? Check out  this post  for the basis for our conversation on this week's episode which fea...

All links and images for this episode can be found on CISO Series If we're going to turn the tables against our adversaries, everything from our attitude to our action needs to change to a format where attacks and breaches are not normalized, and we know the what and how to respond to it quickly. Check out  this post  for the basis for our conversation on this week's episode which features me,  Da...

All links and images for this episode can be found on CISO Series Is it too much experience? Is it that they're difficult to work with? Do they want too much money? Will they not be motivated? Are cyber professionals over the age of 40 being discriminated in hiring practices? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me,  David...

All links and images for this episode can be found on CISO Series How do we turn the tide from reactive to proactive patch management? Does anyone feel good about where they are with their own patch management program? What would it take to get there? Check out this post and this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me,  David Spark  ( @...

All links and images for this episode can be found on CISO Series Check out this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host  Geoff Belknap  ( @geoffbelknap ), CISO,  LinkedIn , and our guest Tony Sager ( @sagercyber ), svp, and chief evangelist, Center for Internet Security .   Thanks to our podcast...

All links and images for this episode can be found on CISO Series Check out  this post  for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host  Geoff Belknap  ( @geoffbelknap ), CISO,  LinkedIn , and our guest Andy Ellis  ( @csoandy ), operating partner,  YL Ventures . Thanks to our podcast sponsor, Varonis What is y...

All links and images for this episode can be found on CISO Series When a senior person at your company asks you, "Are we secure?" how should you respond? Check out  this post  for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host  Steve Zalewski , and our guest Paul Truitt , principal US cyber practice leader, Mazar...

What are the tell tale signs you've got ransomware before you receive the actual ransomware threat? Check out  this post  and this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host  Geoff Belknap  ( @geoffbelknap ), CISO,  LinkedIn , and our sponsored guest Brian Vecci ( @BrianTheVecci ), field CTO, Varonis...

All links and images for this episode can be found on CISO Series Check out  this post  for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host  Geoff Belknap  ( @geoffbelknap ), CISO,  LinkedIn , and our guest  Robert Wood  ( @holycyberbatman ), CISO at  Centers for Medicare & Medicaid Services . Thanks to our podcas...

All links and images for this episode can be found on CISO Series SIEM tools that ingest and analyze data are ubiquitous in security operations centers. But just knowing what's happening in your environment is not enough. For competitive reasons, must SIEM tools expand and offer more automation, intelligence, and the ability to act on that intelligence? Check out  this post  for the basis for our...

All links and images for this episode can be found on CISO Series Check out this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host  Steve Zalewski , and our guest Adam Keown, director, information security, Eastman. Thanks to our podcast sponsor, VMware In this episode: What's more valuable to get hired: de...

All links and images for this episode can be found on CISO Series What is the most critical step to preventing ransomware? Security professionals may be quick to judge users and say it's a lack of cyberawareness. Could it be something else? Check out  this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host ...

All links and images for this episode can be found on CISO Series For four years in a row, Verizon's DBIR, has touted compromised credentials as the top cause of data breaches. That means bad people are getting in yet appearing to be legitimate users. What are these malignant users doing inside our network? What are the techniques to both understand and allow for good yet thwart bad lateral moveme...

All links and images for this episode can be found on CISO Series You've just joined a company as CISO, what's the very first step you would take to improve the security posture of your new company? Check out this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host Steve Zalewski , and our guest Olivia Rose ,...

All links and images for this episode can be found on CISO Series How is ransomware getting into your network? Is the path direct, like via email, or does it take a more circuitous route? Check out  this post  and this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host Steve Zalewski , and our sponsored gues...

All links and images for this episode can be found on CISO Series Why should security professionals get certifications? Do they actually teach you what you need to know to solve cybersecurity challenges? OR do they act as gateways or approval checks to be admitted into the field of cybersecurity? Check out  this post  for the basis for our conversation on this week's episode which features me,  Da...

All links and images for this episode can be found on CISO Series How are you measuring your progress and success with cloud security? How much visibility into this are you providing to your engineering teams? Check out  this post  and this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host Geoff Belknap ( @...

All links and images for this episode can be found on CISO Series What does a young person, eager to get into cybersecurity, have to show or prove to land their first help desk, tech support role? Check out  this post  for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host Geoff Belknap ( @geoffbelknap ), CISO, Linke...

All links and images for this episode can be found on CISO Series What do we want the Board and C-Suite to know about cybersecurity? If you could teach them one thing about cybersecurity that would stick, what would that be? Check out  this post  and this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-host Ge...

All links and images for this episode can be found on CISO Series The demand for CISOs is growing due to increased regulations and cyber threats. Yet, while the demand is there, the supply keeps rotating. Companies think the next CISO is going to fix the problems of the last one. Why is a CISO's tenure so short and why is the hiring process for CISOs so disjointed? Check out  this post  for the ba...

All links and images for this episode can be found on CISO Series Check out  this post  for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, guest co-host Liam Connolly , CISO,  Seek . and our guest Ben Sapiro  ( @ironfog ), head of technology risk and CISO,  Canada Life . Thanks to our podcast sponsor, RevCult On average,...

All links and images for this episode can be found on CISO Series https://cisoseries.com/defense-in-depth-salesforce-security/ Thanks to our podcast sponsor, RevCult On average, 18 percent of all your Salesforce data fields are highly sensitive and 89 percent of users have access to that data. RevCult is the only solution that helps you understand the data you have in Salesforce, and if you're pro...

All links and images for this episode can be found on CISO Series https://cisoseries.com/defense-in-depth-cloud-configuration-fails/ Why do we hear so many stories about incidents related to poor or misconfigured cloud services? Check out  this post  and this post for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, co-hos...

All links and images for this episode can be found on CISO Series https://cisoseries.com/starting-pay-for-cyber-staff/   What should an entry level cybersecurity person be paid? And what level of education and training should be expected of them? Check out  this post  for the basis for our conversation on this week's episode which features me,  David Spark  ( @dspark ), producer of CISO Series, gu...

All links and images for this episode can be found on CISO Series. https://cisoseries.com/fear-of-automation/ Why are security professionals so darn afraid of automation? We continue to hold on to the idea that people have to be integral in the real-time decision process to protect ourselves from the technology we deploy to protect us. Check out  this post  for the basis for our conversation on th...