Defense in Depth
- Folgen
- 385
- Erscheint
- wöchentlich
- Letzte Folge
- 12. Nov. 2026
Über den Podcast
Defense in Depth, hosted by David Spark, Steve Zalewski, Geoff Belknap, and Edward Contreras, promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead our discussion.
Folgen 385
CISOs Have to Be Technical. Why Is This Even an Argument?
All links and images can be found on CISO Series Check out this post by Geoff Hancock, CISO at Unatel, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David …
Shownotes
All links and images can be found on CISO Series
Check out this post by Geoff Hancock, CISO at Unatel, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is Colin Anderson, SVP and CISO at Dayforce.
In this episode:
- Pragmatism over dogma
- Chief means executive, not technician
- Competence is the floor
- Both extremes fail
A huge thanks to our sponsor, ThreatLocker
An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.
Download banner: ThreatLocker_AI Cant Stop AI Attacks_1920x320.jpg
Is Our Dated Hiring Process Creating Vulnerabilities?
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Brett Conlon, CISO, American Century Investments. Joining us is Carla Sweeney, SVP of InfoSec at Red Ventures.
In this episode:
- Proof versus gatekeeping
- Talent is built one way and judged another
- What a multiple-choice exam can't teach
- The hire that got blocked
A huge thanks to our sponsor, ThreatDown
ThreatDown delivers elite Managed Detection and Response purpose-built for resource-constrained teams with high-efficacy protection without complexity. Combining artificial intelligence and expert analyst judgment, ThreatDown intercepts sophisticated attacks with speed and accuracy, scaling security effortlessly. Recognized by MRG Effitas, AVLab, and G2, ditch fragmented tools for fast, 24/7 protection without overhead. Learn more at threatdown.com
How the SDLC Evolves Once You Deploy LLM-Based Code Scanners
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by David Spark, the producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining them is Heather Hinton, CISO, Sitecore, and lecturer at Harvard Extension School.
In this episode:
- Humans were never deterministic either
- Making the report worth opening
- Coverage still needs both
- The record has to be more certain than the detection
A huge thanks to our sponsor, Horizon3.ai
Is your organization actually secure, or do you just hope it is? Horizon3's NodeZero® autonomously tests your defenses, finds real attack paths, and verifies that your fixes actually work. In an era of AI-powered attacks, don't assume you're secure. Prove it. Learn more at horizon3.ai/cisoseries
How Do You Demonstrate Resilience?
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining them is their sponsored guest, Snehal Antani, CEO, Horizon3.ai.
In this episode:
- Metrics that show risk actually declining
- Knowing which altitude you're talking to
- Recoverability over control checklists
- Proof the program outlives any one person
A huge thanks to our sponsor, Horizon3.ai
Is your organization actually secure, or do you just hope it is? Horizon3's NodeZero® autonomously tests your defenses, finds real attack paths, and verifies that your fixes actually work. In an era of AI-powered attacks, don't assume you're secure. Prove it. Learn more at horizon3.ai/cisoseries
How Should Security Be Architected for Human Error?
All links and images can be found on CISO Series We've all internalized that humans are the weak link in cybersecurity. Why do we not account for that when we're building our cybersecurity programs? Check out …
Shownotes
All links and images can be found on CISO Series
We've all internalized that humans are the weak link in cybersecurity. Why do we not account for that when we're building our cybersecurity programs?
Check out this post for the discussion that is the basis of our conversation on this week's episode, co-hosted by David Spark, the producer of CISO Series, and Geoff Belknap. Joining them is their sponsored guest, Kieran Human, lead cybersecurity engineer, ThreatLocker.
In this episode:
- Humans and automation checking each other
- Assume the click happens
- Catch it in the moment
- Take the manual step out entirely
A huge thanks to our sponsor, ThreatLocker
An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.
Can SMBs Get the Same Security as Everyone Else?
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by me, David Spark, the producer of CISO Series …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is their sponsored guest, Mark Stockley, cybersecurity evangelist, ThreatDown.
In this episode:
- The ripple effect
- The economics of ignoring SMB
- Let the defaults do the work
- Accountability doesn't get outsourced
A huge thanks to our sponsor, ThreatDown
ThreatDown MDR is a 24/7/365 security analyst service that explains and resolves suspicious endpoint events. Our team of cybersecurity experts delivers proactive monitoring, investigation, and remediation, catching threats before they escalate. With ThreatDown's always-on protection, organizations gain peace of mind and safeguard their data, reputation, and finances - backed by real analyst expertise, not just automation. Learn more at threatdown.com
Why Do We Keep Complaining About the Same Issues in Cybersecurity?
All links and images can be found on CISO Series LinkedIn used to have a decent reputation among cybersecurity professionals. But lately, it feels like our feeds are relitigating the same debates every day …
Shownotes
All links and images can be found on CISO Series
LinkedIn used to have a decent reputation among cybersecurity professionals. But lately, it feels like our feeds are relitigating the same debates every day, just with different faces. Has the situation changed?
Check out this post by Allan Alford of NTT Global Data Centers for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Geoff Belknap. Joining us is Howard Holton, founder, Phronia Counsel.
In this episode:
- The clichés that say nothing
- A discipline without shared answers
- Old topics, new lenses
- A people problem, not a security problem
A huge thanks to our sponsor, Teleskope
Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai
Securing AI-Generated Open Source Code
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Abby Kearns, CEO, ActiveState.
In this episode:
- Trust, but nobody verifies
- The economics of trust just changed
- Implicit trust doesn't scale anymore
- Rethinking what "open" even means
A huge thanks to our sponsor, ActiveState
ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at activestate.com.
BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection
All links and images can be found on CISO Series This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available …
Shownotes
All links and images can be found on CISO Series
This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available Friday at 1 p.m. Eastern.
In this episode, David Spark is joined by Karl Mattson, founder and managing director of Squared Circle Ventures, and Howard Holton, founder and principal analyst at Phronia Counsel LLC, to discuss how your existing environment shapes what you buy next — and whether that's a strategy or just inertia.
Watch the full one-hour show at Crowdcast.
Subscribe to Super Cyber Friday Express, or any show on CISO Series, at CISOseries.com/subscribe.
How AppSec Needs to Change For the Speed of AI
All links and images can be found on CISO Series Check out this post by Anand Singh, CSO, Symmetry Systems, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David …
Shownotes
All links and images can be found on CISO Series
Check out this post by Anand Singh, CSO, Symmetry Systems, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is Ryan Barrett, svp, security, Intermedia Cloud Communications.
In this episode:
- Risk by default, not by decision
- Identity, not just speed
- Building security into the pipeline, not around it
- Letting the machine make the fix
A huge thanks to our sponsor, ThreatLocker
An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.
Building Resilience for Microsoft 365
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Brett Conlon, CISO, American Century Investments. Joining us is our sponsored guest, Simon Hughes, vp of field security at CoreView.
In this episode:
- Ecosystem, not platform
- Beyond backup, into resilience
- What survives the restore
- Toward a digital twin
A huge thanks to our sponsor, CoreView
Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant configurations drift or get tampered with, recovery can take weeks and missed settings can reopen the door. The Cyber Resilience Framework for Microsoft 365 covers the five pillars, harden, govern, detect, respond, recover, and shows exactly where today's tools leave gaps. Download the free practical guide
Recommendations to Reboot the Security Vendor Pitch
All links and images can be found on CISO Series Check out this post by Val Tsanev of CyberRisk Alliance, for the discussion that is the basis of our conversation on this week's episode co-hosted by David …
Shownotes
All links and images can be found on CISO Series
Check out this post by Val Tsanev of CyberRisk Alliance, for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining is Jill Rhodes, svp, CISO, Option Care Health.
In this episode:
- The ten-minute test
- Relevance beats format
- Price the problem or lose the room
- Whose meeting is it, really
A huge thanks to our sponsor, Teleskope
Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai
Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity
All links and images can be found on CISO Series Check out this post from Joe Head of RELEX Solutions for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark …
Shownotes
All links and images can be found on CISO Series
Check out this post from Joe Head of RELEX Solutions for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining is Mary Rose Martinez, CISO, and vp of digital technology services, Marathon Petroleum Corporation.
In this episode:
- Left behind
- A hypothetical sale
- The philosophy problem
- Stop shifting the problems
A huge thanks to our sponsor, ActiveState
ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at activestate.com.
Will AI Replace Detection Roles in Cybersecurity?
All links and images can be found on CISO Series Check out this post from Caleb Sima of Whiterabbit for the discussion that is the basis of our conversation on this week's episode co-hosted David Spark, the …
Shownotes
All links and images can be found on CISO Series
Check out this post from Caleb Sima of Whiterabbit for the discussion that is the basis of our conversation on this week's episode co-hosted David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Adrian Ludwig, CSO, Rippling.
In this episode:
- The messy middle
- The automatable part
- Where automation stops
- The influence gap
A huge thanks to our sponsor, ThreatLocker
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.
What Makes a Good AI Security Deployment?
What Makes a Good AI Security Deployment? All links and images can be found on CISO Series Check out this post by Chris Matthews of UpGuard for the discussion that is the basis of our conversation on this …
Shownotes
What Makes a Good AI Security Deployment?
All links and images can be found on CISO Series
Check out this post by Chris Matthews of UpGuard for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Peter Liebert, CISO, Salesloft & Clari.
In this episode:
- Non-determinism changes everything
- The foundation problem
- Nobody owns the whole problem
- The authorization gap
A huge thanks to our sponsor, CoreView
Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant configurations drift or get tampered with, recovery can take weeks and missed settings can reopen the door. The Cyber Resilience Framework for Microsoft 365 covers the five pillars, harden, govern, detect, respond, recover, and shows exactly where today's tools leave gaps. Download the free practical guide
The Office Politics of Remediation
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Dan Walsh, CISO, Datavant. Joining is our sponsored guest, Elizabeth Nammour, founder and CEO, Teleskope.
In this episode:
- Data ownership before automation
- A shared vocabulary for agent risk
- Maturing from crawl to run
- Trust earns automation its place
A huge thanks to our sponsor, Teleskope
Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai
Why is Preventative Security So Difficult?
All links and images can be found on CISO Series Prevention in cybersecurity is a lot like flossing: everyone knows they should do it, but few do it enough. What's stopping us? Check out this post by Ross …
Shownotes
All links and images can be found on CISO Series
Prevention in cybersecurity is a lot like flossing: everyone knows they should do it, but few do it enough. What's stopping us?
Check out this post by Ross Haleliuk of Venture in Security for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Deneen DeFiore, vice president & chief information security officer, United Airlines.
In this episode:
- The sponsorship gap
- One strike and you're out
- Policy without position
- Prevention isn't static
A huge thanks to our sponsor, CoreView
Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant configurations drift or get tampered with, recovery can take weeks and missed settings can reopen the door. The Cyber Resilience Framework for Microsoft 365 covers the five pillars, harden, govern, detect, respond, recover, and shows exactly where today's tools leave gaps. Download the free practical guide
Identity and Access Management (IAM) in an Agentic AI World
All links and images can be found on CISO Series Check out this post by Tomás Maldonado, CISO, NFL, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark …
Shownotes
All links and images can be found on CISO Series
Check out this post by Tomás Maldonado, CISO, NFL, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Will Gregorian, vp of information technology & security, Galileo Medical.
In this episode:
- From who to what
- The manipulation problem
- Cryptographic accountability
- The audit gap
A huge thanks to our sponsor, ActiveState
ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at ActiveState.com.
Protecting AI Agents in O365 and Google Workspace
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining is their sponsored guest, Rajan Kapoor, vp, security, Material Security.
In this episode:
- Pre-existing conditions
- Architecture over rollout
- Access isn't legitimacy
- Data has a half-life
A huge thanks to our sponsor, Material Security
Legacy email security only watches the door. Material protects your entire cloud workspace—email, files, and accounts—as one ecosystem. It's more coverage for less than the cost of a legacy SEG. One price, no surprises: just security that covers the whole surface area. Learn more at material.security.
Humans Are Bottleneck in a Machine-Speed World
All links and images can be found on CISO Series We're evolving fast to secure AI. But are we evolving fast enough to secure WITH AI? Check out this post by Rinki Sethi, CSO, Upwind Security, for the discussion …
Shownotes
All links and images can be found on CISO Series
We're evolving fast to secure AI. But are we evolving fast enough to secure WITH AI?
Check out this post by Rinki Sethi, CSO, Upwind Security, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Howard Holton, former CEO, GigaOm. Joining is Adam Glick, CSO, PSG Equity.
In this episode:
- Human-in-the-loop math
- Should machines decide at all
- From assistant to autonomous
- Redefining the security role
A huge thanks to our sponsor, Palo Alto Networks
Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Visit paloaltonetworks.com/cortex/cloud.
Even With All These Security Vendors We Still Have Glaring Gaps
All links and images can be found on CISO Series There are thousands of cybersecurity vendors across categories. If there's a gap in the market, it's likely not for technical reasons. So, how do you actually …
Shownotes
All links and images can be found on CISO Series
There are thousands of cybersecurity vendors across categories. If there's a gap in the market, it's likely not for technical reasons. So, how do you actually find vendors that are a good fit rather than one that just meets technical requirements?
Check out this post by Joe Head of REFLEX Solutions for the discussion that is the basis of our conversation on this week's episode, co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Ajit Girn, CIO, Employment Development Department (EDD).
In this episode:
- Built for vendors, not users
- Signal versus noise
- Priced out
- The elegance gap
A huge thanks to our sponsor, ThreatLocker
ThreatLocker takes a deny-by-default approach to endpoint security — controlling what applications can run, what can access data, and what can elevate privileges. Used by organizations that want to reduce attack surface without relying on detection alone. Learn more at threatlocker.com/ciso.
Is the "Attackers Only Need to Be Right Once" a Misnomer?
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and George Finney, CISO, University of Texas System. Joining is Sean Walls, CISO, Bob's Discount Furniture.
In this episode:
- Asymmetric accounting
- Sometimes it really is that easy
- The spirit of the saying
- The cheapest way in
A huge thanks to our sponsor, Native Security
Native is the Cloud Security Control Plane. It helps enterprises enforce secure-by-design architecture across multi-cloud environments by translating security intent into the cloud provider's built-in controls, previewing impact before rollout, and keeping enforcement aligned as the environment changes.
What It Takes To Be Successful in Cyber Media
What It Takes To Be Successful in Cyber Media All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by …
Shownotes
What It Takes To Be Successful in Cyber Media
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Dave Bittner, producer and host, The CyberWire. Joining is Graham Cluley, host of Smashing Security podcast and Leo Laporte, founder of TWiT (This Week in Tech) and host of Security Now podcast.
In this episode:
- Format follows function
- The decision gap
- Practitioner fingerprints
- Beyond the news cycle
A huge thanks to our sponsor, Palo Alto Networks
Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Learn more at paloaltonetworks.com/cortex/cloud/demo.
CISOs Buy For Selfish and Politically Risk-Averse Reasons (Not Because Your Product is the Best)
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Howard Holton, CEO, GigaOm. Joining is Tyler King, senior director - threat operations and response, Sinclair.
In this episode:
- Career insurance
- In the trenches together
- Who are you actually selling to?
- Common sense, uncommon in sales
A huge thanks to our sponsor, Material Security
Legacy email security only watches the door. Material protects your entire cloud workspace—email, files, and accounts—as one ecosystem. It's more coverage for less than the cost of a legacy SEG. One price, no surprises: just security that covers the whole surface area. Learn more at material.security.
Has Cybersecurity Become a Cult?
All links and images can be found on CISO Series We think of cybersecurity as a discipline. But when do ideas like best practices and NIST frameworks change into a system of belief? Check out this post for the …
Shownotes
All links and images can be found on CISO Series
We think of cybersecurity as a discipline. But when do ideas like best practices and NIST frameworks change into a system of belief?
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Davi Ottenheimer, principal, Flying Penguin. Joining is Joshua Copeland, director of security, Crescendo.
In this episode:
- Tools, not religion
- The case for structured discipline
- The management problem underneath
- Fix the damn holes
A huge thanks to our sponsor, ThreatLocker
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.
What Does the Next Generation of Cloud Security Look Like?
All links and images can be found on CISO Series We know human-paced security controls can't be applied to autonomous AI agents. So what needs to change with CNAPP and cloud security? Check out this post for …
Shownotes
All links and images can be found on CISO Series
We know human-paced security controls can't be applied to autonomous AI agents. So what needs to change with CNAPP and cloud security?
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Dan Benjamin, vp product - data, identity, and AI security, Palo Alto Networks.
In this episode:
- The detection ceiling
- A category gap, not a feature gap
- Resilience by design
- An insider threat with no face
A huge thanks to our sponsor, Palo Alto Networks
Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Visit Palo Alto Networks and search cortex cloud.
The Dangers of Picking the Wrong Vendor
All links and images can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series.
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our guest, Paul Guerra.
In this episode:
- Read the contract
- How vendors win before the evaluation ends
- The fallout
- The real cost
A huge thanks to our sponsor, Native Security
Native makes secure-by-design inherent to how the cloud operates. It's the control plane for built-in cloud security, unifying and governing native controls, so security intent is defined once and applied consistently across providers. Learn more at native.security.
Why Cyber Startups Need CISO Advisors
All links and images can be found on CISO Series All security startups will tell you they talk to potential customers. The problem is that you limit your development when you only talk to CISOs who might buy …
Shownotes
All links and images can be found on CISO Series
All security startups will tell you they talk to potential customers. The problem is that you limit your development when you only talk to CISOs who might buy. It's not the same guidance you'll get from a CISO who advises.
Check out this post by Val Tsanev of the Cyber Risk Alliance for the discussion that is the basis of our conversation.
This week's episode is co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Steve Jensen, CISO, University of Maine System.
In this episode:
- Building for whom?
- The only feedback loop that matters
- Valid, but for whom?
- Rethink the advisor roster
A huge thanks to our sponsor, Material Security
Legacy email security only watches the door. Material protects your entire cloud workspace—email, files, and accounts—as one ecosystem. It's more coverage for less than the cost of a legacy SEG. One price, no surprises: just security that covers the whole surface area. Learn more at material.security.
Breaking the Reactive Cycle of Cybersecurity
All links and images can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series.
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Rob Allen.
In this episode:
- The vulnerable stack
- Changing the structural economics
- Change the terrain
- The cost-benefit equation
A huge thanks to our sponsor, ThreatLocker
ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.
How Do You Know If Your Backups Will Survive a Ransomware Attack?
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and …
Shownotes
All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Heath Renfrow, co-founder, Fenix24.
In this episode:
- Knowing which systems to save first
- Recovery is a business conversation, not an IT ticket
- Not all systems are created equal
- Recovery knowledge as a governed asset
A huge thanks to our sponsor, Fenix24
Fenix24 is the world's leading breach recovery firm, providing rapid ransomware restoration, full asset visibility, and threat informed hardening. Alongside expert recovery services, Fenix24 delivers ongoing managed protection that secures backups, infrastructure, and critical controls, helping organizations stay resilient, recoverable, and prepared for modern cyber threats. Learn more at fenix24.com.
Hier stehen die neuesten 40 von 385 Folgen. Ältere Folgen findest du im Feed des Podcasts.
Ähnliche Podcasts
Mehr Nachrichten-Podcasts
Ist das dein Podcast?
Bestätige es mit einem Eintrag in deinem Feed: Du bekommst hier einen Code, trägst ihn als podcast:txt in den Kanal deines Feeds ein, und wir prüfen ihn. Danach steht dein Podcast als „verifiziert“ bei SoundNode.