Trust vs.

Cybercrime isn’t just evolving, it’s industrializing. In this explosive season finale, Trust vs. is joined by one of cybersecurity’s most respected voices: Tom Kellermann , HITRUST’s new VP of Cyber Risk. Drawing on decades of experience advising the Secret Service, the World Bank, and the White House, Tom unpacks how today’s cyber cartels have outgrown narco-trafficking empires, how AI is transfo...

In this episode of Trust vs., cybersecurity law expert Cristin Flynn Goodwin joins the show to break down some of the most nuanced (and misunderstood) topics in cyber: active defense, regulation, and the legal implications of emerging tech like agentic AI. With over 17 years at Microsoft leading incident response and threat intel, Cristin shares what it really takes to disrupt nation-state actors,...

Autonomous AI agents are no longer science fiction, they’re already reshaping how we work, build, and protect digital systems. In this episode, Jeremy Huval and Ryan Patrick are joined again by Richard Diver, Security and Identity Strategist at Microsoft, to break down what "agentic AI" really means and why it matters now. Richard unpacks the core building blocks of agent behavior (like entitlemen...

Compliance shouldn’t come at the cost of security. In this episode, Leah McGrath (Executive Director, GovRAMP) and Brian Conrad (Director of Global Strategic Compliance Initiatives at Zscaler, formerly of FedRAMP) join the Trust vs. team to talk about multi-framework fatigue, the future of recognition and reciprocity, and why real cybersecurity progress depends on collaboration—not just more certi...

SOC 2 might be everywhere, but is it actually working? In this episode, the Trust vs. team welcomes cybersecurity leader, author, and GRC engineer AJ Yawn to break down the state of SOC 2 today and why its greatest strength may also be its biggest weakness. AJ brings years of hands-on experience in auditing, engineering, and startup leadership to explain how SOC 2 shifted from a signal of security...

You can’t plan for everything, but you can build for resilience. In this episode, the Trust vs. team sits down with cybersecurity leader Wendy Nather to explore the human side of resilience. From real-world chaos and crisis response to succession planning, decision authority, and chaos engineering, Wendy shares hard-earned wisdom on what it takes to build organizations that can bend but not break....

If AI is already in your cybersecurity stack, are you managing the risk? In this episode, the Trust vs. team sits down with Donnie Wendt, a Cybersecurity Researcher, and author of The Cybersecurity Trinity to talk about the growing risk surface AI creates. From data poisoning and third-party ML vulnerabilities to the real-world limits of vendor questionnaires, Donnie breaks down why traditional se...

What if the way we’ve been measuring cybersecurity risk is fundamentally flawed? Too often, organizations rely on color-coded charts and gut instinct to make critical risk decisions leading to a false sense of confidence and missed opportunities for real insight. In this episode, we’re joined by Douglas Hubbard, creator of the Applied Information Economics (AIE) method and founder of Hubbard Decis...

Is your third-party risk management process ready for the age of AI? In this episode of Trust vs., Jeremy, Robert, and Ryan sit down with industry leader Laz to unravel the complex (and often chaotic) intersection of artificial intelligence and third-party risk. They explore how AI is amplifying both risk and opportunity in vendor governance, what organizations get wrong about ownership and collab...

Kicking off Season 3 of Trust vs. with a bang, the team dives straight into one of the most pressing changes on the horizon for healthcare cybersecurity: the proposed updates to HIPAA. Hosts Jeremy Huval, Robert Booker, and new regular voice Ryan Patrick explore what the Notice of Proposed Rulemaking (NPRM) really means for covered entities and business associates. Is this HIPAA 2.0, or just long-...

Cyber threats are evolving fast and compliance alone isn’t enough. This season on Trust vs., HITRUST’s Robert Booker, Jeremy Huval, Ryan Patrick to explore how to build true cyber resilience in a world transformed by AI, rising vendor risk, and outdated frameworks. It’s time to go beyond checkboxes and build trust that lasts.

In today’s world, the demand for skilled cybersecurity professionals has never been greater, yet the gap between that demand and the available talent continues to grow. In this episode, we sit down with M.K. Palmore, an advisor, cybersecurity leader, and host of The Leadership Student podcast, to explore innovative ways to close this gap. M.K. shares insights on attracting new talent to the field,...

If we want to excel in working with our boards, communication is key, and no one understands this better than Mike Connly. As the former CTO at United Health Group and an experienced board member himself, Mike is sharing his top strategies for setting clear goals, reviewing progress, and ensuring accountability in the boardroom. He highlights the importance of grasping vulnerabilities, measuring p...

In the rapidly evolving world of artificial intelligence, grasping the layers of responsibility is essential for effectively implementing these technologies.  In this episode, Richard Diver, a Solutions Architecture specialist for cloud security, author of Guardians of AI, and Senior Manager of Story Design at Microsoft, delves into the framework for AI responsibility. He emphasizes that whil...

In this episode, we sit down with FC Freaky Clown, an ethical hacker and author of How to Rob Banks, to explore the evolving role of AI in cybersecurity. FC, known for his unique blend of physical and digital hacking skills, discusses how AI is transforming social engineering tactics and its impact on both attackers and defenders. He shares insights from his experience at Defcon and BlackHat, emph...

How can we balance innovation and regulation in the world of AI? In this episode, Rob van der Veer, an expert in AI, security, and privacy, takes us through his journey from AI startups in the 90s to leading security at the Software Improvement Group. He delves into the rapid evolution of AI, particularly with transformer models, and discusses the dual nature of AI’s potential and risks. Rob empha...

In this episode, Jason Clark, Chief Strategy Officer at Cyera shares insights on the evolving challenges of cybersecurity for organizations of all sizes. He breaks down the essentials of building a strong security strategy, emphasizing the importance of truly understanding your data and aligning cybersecurity efforts with your business goals. Whether you're a startup or an established company, thi...

Jeremy and Robert sit down with Ransomware Sommelier Allan Liska to unravel the complex world of Ransomware, the criminals that engage in this activity, and the growing risk of new forms of extortion. Allan, with over 20 years in the field, delves into the mindset of ransomware actors, crucial monitoring strategies, and the battle taking place on the cyber frontier. He reveals why paying ransoms i...

In a world full of digital threats, even the best cybersecurity can’t eliminate residual risk. That's where cyber insurance steps in. But securing it is no easy task, even for the most prepared organizations. In this episode, we are joined by Josh Ladeau, CEO of Trium Cyber and Sidney Prasse and Michael Giuliano from McGill and Partners to discuss the current state of cybersecurity insurance. Disc...

We’re kicking off season 2 with a familiar face: Omar Khawaja is back to discuss how generative AI technology is impacting business governance and security leadership. Like other technologies, AI poses significant risk management challenges, but how can we better understand these systems to protect against them? Omar joins Robert and Jeremy to highlight the difference between understanding the bus...

Join hosts Robert Booker and Jeremy Huval as they explore the critical importance of trust in cybersecurity in a whole new season of Trust Vs brought to you by HITRUST Alliance. This season, we’ll be speaking with industry experts to discuss the challenges and opportunities of artificial intelligence, cyber insurance, and emerging technologies. Tune in to learn strategies for building and maintain...

We’re back with a special episode, recording in the midst of the largest breach in the American Healthcare industry. With this event, there has been a lot of concern and loss of trust in the systems that we put in place to keep us and our data secure.  So how can we start to rebuild trust and confidence that we can better prepare for these attacks in the future? HITRUST CMO Steve Perkins join...

In the final episode of Season 1, Jeremy and Robert look into the future of cybersecurity, assurance and compliance. Listen to a collection of this season’s guests about their predictions for the future and how disruptive technologies like AI will shake up the industry. Find out how to maintain trust in this era of technology, and uncover how it might impact you and your business.  Meet Jerem...

Hosts Jeremy and Robert are joined by George DeCesare, Chief Technology Risk Officer at Kaiser Permanente, to discuss enterprise risk. George has the rare mix of skills of being both a lawyer and a cyber security expert and has also worked with the Los Angeles Sheriff’s Department. All of this experience makes for a great conversation about managing risk at complex organizations, and how risk mana...

In this episode, hosts Jeremy and Robert sit down with Omar Khawaja. Omar is an experienced CISO and cybersecurity professional. He is the Field CISO at Databricks and a HITRUST Board Member. He joins this episode to discuss third-party risk, and how to set the security bar with your vendors. Throughout the episode, Omar stresses the importance of effective communication when it comes to security...