Resilient Cyber

In this episode we chat with some of the leadership team from Army Futures Command We discuss: What exactly does a Chief Product and Innovation Officer do and why is a role like this needed in the DoD? How has AFC built on lessons learned from previous efforts, such as Kessel Run? We know there's a push for Soldier-led Software Development, why is that and what is it important for National Se...

Please give us a bit of a background on how you became a vCISO and what responsibilities come with that job? You have built several successful security programs from the ground up - what would you say is the most challenging part of that process? Now that we've talked about some of the challenges around creating a security program, what would you say is the most rewarding or most interesting...

Can you tell us a bit about your role as the Director of SW Modernization for the DoD? What does that entail? On the SW Modernization front, at a high-level, what are some of the primary SW modernziation objectives of the DoD? How does SW modernization tie into National Defense and why is it so critical to get right? There's an increased push to adopt DevSecOps, what are your thoughts on that...

1. Can you give us a brief description of your background in cognitive psychology and how you found your way into cybersecurity? 2. Can you describe how psychology is directly applicable to cybersecurity? 3. Can you discuss how philosophy is also applicable to cybersecurity? 4. How do you feel that neuroscience plays into cybersecurity - and maybe specifically discuss cognitive limitations and how...

Today's episode is a conversation between Dr. Nikki Robinson and Chris Hughes on Vulnerability Management. Dr. Nikki has a PhD which focuses in Vulnerability Chaining and the co-hosts discuss the difficulties of Vulnerability Management. What would you say are the biggest reasons why vulnerability management is still so difficult for organizations? Why is it so important to patch or mitigate...

What is Infrastructure-as-Code (IaC) and how does it differ from traditional ways of provisioning INF? How does IaC fit into the broader push of DevSecOps and pushing security-left?  What is Compliance-as-Code (CaC)? What does that look like and how can organizations benefit from implementing it? What are some of the challenges associated with adopting IaC and CaC? Where is the future of IaC/CaC h...

You're the Authorizing Official for the USMC, can you explain what you do in that role for those who aren't familiar with the team AO? The DoD is increasingly looking to adopt DevSecOps - can you tell us where the Marine Corps is on that journey, some of the challenges, and what opportunities DevSecOps would provide the USMC? Given your role, and the DoD's continued push to adopt De...

What is Tactical Edge Cloud Computing?  How does it apply to the DoD and Military and what advantages/challenges does it provide? I know you're involved with the Defense Entrepreneurs Forum (DEF) and the Joint Software Alliance (JSOFT), can you tell us a bit about those and why you think organizations like those are important for the DoD community? I've heard you say that "The futur...

-What first interested you in cloud technology and pursuing a career in cloud security?  -Do you feel that learning a cloud platform is essential for todays' IT and security workforce  -Do you recommend hybrid cloud environments? Do you think it adds too much complexity to provide proper security controls? -What are some of the biggest threats to cloud and hybrid environments? -What are some...

*   How can we go about breaking barriers for folks in our field   *   Workforce challenges and how changes to hiring practices can help   *   Security Theater (this is a good one!)   *   Security Not Enabling the Business   *   Ego   *   Overpriced Vendor Products   *   And as a running theme of our show, we would love to close with "What does cyber resilience mean to you?"

Do you think your lessons from athletics and the military contributed to your success in the Cyber career field? What are some of the hardest lessons you've learned so far since transitioning to being a CEO? What do you think technologies such as Cloud Computing change about the Compliance field? You're involved with the Nat'l Association of Black Compliance & Risk Management Pr...

Episode 1 of the Resilient Cyber podcast kicks off the show and covers the following: - Chris Hughes Introduction/Background - Dr. Nikki Robinson Introduction/Background - Why do each of us want to start a podcast? What do we hope we get out of it and how it may benefit others? - Deep Dive into Nikki's research First Doctorate (Vulnerability Scoring/Chaining) Current Doctoral Pursuit (Vulnera...