Defense in Depth

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ), CISO, LinkedIn . Joining me is our guest, David Christensen , VP, CISO, PlanSource . In this episode: How do you actually f...

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ), CISO, LinkedIn . Joining us is our guest, Jerich Beason , CISO, WM . In this episode: Does generative AI come with a new se...

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ), CISO, LinkedIn . Joining us is our sponsored guest, Himaja Motheram , Censys . In this episode: How can one create a securi...

All links and images for this episode can be found on CISO Series . Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Steve Zalewski . Joining us is our sponsored guest, Russell Spitler, CEO and co-founder, Nudge Security . In this episode: Are businesses walking a tightrop...

All links and images for this episode can be found on CISO Series . In increasingly complex technical defenses, threat actors frequently target the human element. This makes them a top attack vectors, but are they actually the weak leak in your defenses? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the...

All links and images for this episode can be found on CISO Series . We often talk about the contradiction of seemingly entry-level security jobs requiring years of experience. But maybe that's because entry-level jobs don't actually exist. Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CI...

All links and images for this episode can be found on CISO Series . The Securities and Exchange Commission issued new cyber rules. What do these new rules mean for CISOs and will they ultimately improve our cybersecurity posture? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series...

All links and images for this episode can be found on CISO Series . Are trade shows like RSA getting so big that there's not enough economic value for a CISO to attend? Or do these events have enough industry gravity to justify the spend? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CIS...

All links and images for this episode can be found on CISO Series . Work from home flourished during the pandemic. Many workers love it and don't want to go back. Some organizations are pushing for a return to the office. Is in-office work necessary to improve productivity and cybersecurity posture? Check out this post for the discussion that is the basis of our conversation on this week's episode...

All links and images for this episode can be found on CISO Series . Large language models and generative AI are today's disruptive technology. This is not the first time companies just want to ban a new technology that everyone loves. Yet, we're doing it all over again. Whether its ChatGPT or BYOD, people are going to use desirable new tech. So if our job isn't to stop it, how do we secure it? Che...

All links and images for this episode can be found on CISO Series . What do the people least in the know about cyber, want to know? What are they asking? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ), CISO, LinkedIn . Joining us is our sp...

All links and images for this episode can be found on CISO Series . A security data lake, a data repository of everything you need to analyze and get analyzed sounds wonderful. But priming that lake, and stocking it with the data you want to get the insights you need is a more difficult task than it seems. Check out this post for the discussion that is the basis of our conversation on this week's...

All links and images for this episode can be found on CISO Series . A threat intelligence program sounds like a sound effort in any security program. But, can you pull it off? There are so many phases to execute properly. Blow it with any one of them and your threat intelligence effort is moot. Check out this post for the discussion that is the basis of our conversation on this week's episode co-h...

All links and images for this episode can be found on CISO Series . When you have an incident and you're engulfed by the stress that lasts more than a day, how do you manage and deal with it? And not only how do you manage your stress, but how do you manage everyone else's? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Sp...

All links and images for this episode can be found on CISO Series . We all know that our employees need to be more security aware, but what are the methods to get them there? How can we make our employees more security conscious? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series...

All links and images for this episode can be found on CISO Series . Users have tried to upload sensitive company information and PII, personally identifiable information, into ChatGPT. Those who are successful getting the data in, have now made that data free to all. Will people's misuse of these generative AI programs be our greatest downfall to security and privacy? Check out this post for the d...

All links and images for this episode can be found on CISO Series . The demand for cybertalent is sky high. It's very competitive to get those people with skills. What if you were to train your staff and give them the skills you want? Essentially, what if you were to grow your own unicorn? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted...

All links and images for this episode can be found on CISO Series . What are we doing to improve access management? Make it too loose and it's the number one way organizations get breached. Put on too many controls and now you've got irritated users just trying to do their job. How does each organization find their sweet spot? Check out this post for the discussion that is the basis of our convers...

All links and images for this episode can be found on CISO Series . With the growth of business-led IT, does SaaS security need to be a specific focus in a CISO's architectural strategy? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ), CISO...

All links and images for this episode can be found on CISO Series . When it comes to data, compliance, and reducing risk, where are we gaining control? Where are we losing control? And what are we doing about that? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Steve Zal...

All links and images for this episode can be found on CISO Series . If you're struggling to get your first job in security or you're trying to get back into the industry after being laid off, you need to lean on your security community. But like networking, you should find it before you need it. Check out this post for the discussion that is the basis of our conversation on this week's episode co-...

All links and images for this episode can be found on CISO Series . What should a cyber job description require, and what shouldn't it? What's reasonable and not reasonable? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark ( @dspark ), the producer of CISO Series , and Geoff Belknap ( @geoffbelknap ), CISO, LinkedIn ....

All links and images for this episode can be found on CISO Series . Since so much technology today is not launched by the IT department, but by business units themselves. How do security professionals engage with business and application owners and have a conversation about security policy and procedures? Check out this post for the discussion that is the basis of our conversation on this week's e...

All links and images for this episode can be found on CISO Series . There are millions of cybersecurity jobs open. Over time, that number has just been growing. What we're doing now does not seem to be working. So what's it going to take to fill all these jobs quickly? Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (...

All links and images for this episode can be found on CISO Series . How do you create a positive security culture? It's rarely the first concept anyone wants to embrace, yet it's important everyone understands their responsibility. So what do you do, and how do you overcome inevitable roadblocks? Check out this post and this post for the discussion that is the basis of our conversation on this wee...