The Virtual CISO Podcast

Is your organization ready for CMMC? As CMMCs roll out over the next 6 years, it’s going to become a reality for more and more DoD subcontractors.  As many as 50,000 organizations by 2025. Thankfully there are folks out there who are experts at this.  On this episode of The Virtual CISO podcast, we heard from Stuart Itkin . Stuart is the Vice President of Marketing & Product Management at Exos...

As an SMB, you’re probably thinking you’re too insignificant for a targeted cyberattack. That’s not even a little bit true. In this episode, I interview Danielle Russell , Director of Product Marketing Management at AT&T Cybersecurity, about SIEM solutions for SMBs.   What we talked about: Why an organization needs a SIEM Small orgs are definitely a target How to get started with a SIEM The #1...

You’re a CISO at an SMB, and you see that the AUP is called the SCA now.   So now what?   Actually, there are 3 applications for this great tool alluded to by the relabeling.   In this episode, I interview Tom Garrubba , VP and CISO at The Shared Assessments Program, about applications for the SCA.   What we talked about: SCA application Resilience Guidance and the SCA 3 ways for SMBs to use the S...

If you thought this podcast was supposed to be about information security, you might be confused about why we’re featuring heart disease. Bottom line: Dead CISOs don’t get bonuses. On this episode, I interview Dr. Joel Kahn , triple-board certified cardiologist, author of 6 books, and restaurant owner — also my physician — about techniques for managing stress and preventing heart disease.   What w...

In this world of remote work that we’ve found ourselves in, there are likely a lot of companies that are looking around and wondering if they’ve got the right staff. With a fully remote workforce comes a lot of new challenges in the IT space, and if you’re a smaller company, you may not be in the space to bring on a full-time CIO, but you still need the governance and expertise of a CIO. Cue the v...

Can we all agree that this is a strange, confusing, and stressful time to be living through?  That none of us really know what’s going to happen, or what the future holds?  While restaurants, airlines, cruise ships, and countless other businesses are struggling, there’s one group of people that don’t seem to be slowing down at all, and that’s cybercriminals.  They’re exploiting this crisis and tak...

Trust, but verify. These famous words of Ronald Reagan, who, incidentally, would make a fantastic CISO, are also the simplest explanation of what it’s like to work as a virtual CISO. If step one is building trust and relationship with clients, step two is being let in to see all the inner workings and operations to make informed and strategic decisions. In this episode, John interviews Andrew Fark...

Considering an ISO 27001 certification? Wondering about SOC 2 attestation? Trying to figure out the differences between the two? We got you covered. We invited Dan Schroeder , Partner-in-Charge for Information Assurance Services at Aprio LLP , onto The Virtual CISO Podcast to explain attestation, certification, ISO 27001, and SOC 2.   What we talked about: What is attestation? ISO 27001 certificat...

The cyber talent search feels like a global, dangerous game of Marco Polo. We’re all looking for each other, but nobody can find anyone. (And even if we do, it’ll only last 18 months or less.) In this episode, I interview Deidre Diamond , Founder and CEO of CyberSN , about attracting and retaining cyber talent during the talent shortage. What we talked about: How the fact that we are short 500K in...

Katie Arrington is THE expert in the national cyber security battle.  As CISO for Acquisition and Sustainment at the United States Department of Defense, she’s well beyond needing analogies to understand cyber security news and trends. Yet, she had the best one on hand to explain Cybersecurity Maturity Model Certification (CMMC, for short). “At the end of the day, the CMMC is your cyber driver’s l...

Information security is a serious topic.     However, the host of The Virtual CISO Podcast and managing partner at Pivot Point Security , John Verry , doesn’t think security pros *always* need to be so serious.     In this intro episode of The Virtual CISO Podcast, Logan Lyles of Sweet Fish Media catches up with John to find out what exactly the show’s going to be covering.     John offers up:    ...