HomePodcastDefense in Depth

Defense in Depth

 

Defense in Depth is a 25-minute weekly advice podcast (Thursdays at 6 A.M. ET) that’s based on a single online discussion. The show is co-hosted by technology journalist David Spark and Geoff Belknap, CISO, LinkedIn or Steve Zalewski, former CISO, Levi Strauss.

Subscribe

DEFENSE IN DEPTH

Defense in Depth

How Should We Measure the Performance of a CISO?

Rich Stroffolino -
How does the business determine what counts as success for a CISO? What warrants a raise in salary? Check out this post for the discussion...
Defense in Depth

How to Be Less Busy and More Effective in Cyber

Rich Stroffolino -
There's no shortage of frameworks that offer ways to manage and configure your security program. While they may be providing some guidance, are they...
Defense in Depth

How to Engage With a CISO When They Express Interest

Rich Stroffolino -
When a CISO walks up to a vendor booth, it should be a golden opportunity to connect. So why do so many vendors not...
Defense in Depth

Who is Responsible for the Conflict Between Security and Developers?

Rich Stroffolino -
We know there's tension between security teams and developers. But where does this tension start? Is the constant friction between developers and security teams...
Defense in Depth

Are Your Security Tools Creating More Work for Your Team?

Rich Stroffolino -
Security tools are supposed to solve problems and make our lives easier. Why does it seem like they're doing the opposite and creating more...
Defense in Depth

Why Overpromising is a Dangerous Sales Tactic

David Spark -
Cybersecurity sales lives and dies on trust. So why do so many vendors burn bridges just to get a foot in the door? Check out...
Defense in Depth

Should You Phish Your Employees or Not?

David Spark -
We know that phishing is a major threat vector. So why does it seem like phishing tests only make things worse? Check out this post...
Defense in Depth

How Much Autonomy Should You Give AI Agents in Your SOC?

David Spark -
Agentic AI was the buzzword of the year in 2025. Everyone wants to figure out how to use agents, but how do you know...
Defense in Depth

Cybersecurity’s Broken Hiring Process

David Spark -
Something is wrong with the math in the cybersecurity job market. If there are "millions" of unfilled jobs out there, why are so many...
Defense in Depth

Simple Security Solutions That Deliver a Big Impact

David Spark -
We all know what gets our attention in cybersecurity. But those big ticket flashy items are often not what pay the biggest dividends. What...
Defense in Depth

How Best to Prepare Your Data for Your Tools

David Spark -
If customers want cybersecurity vendors to solve a problem, it should be clear how to market the solution. Unfortunately, too many vendors are marketing...
Defense in Depth

How Best to Prepare Your Data for Your Tools

David Spark -
You can put practically anything into an LLM and the output will look acceptable if not fantastic. Unlike most things in technology, beautiful results...
Defense in Depth

Don’t Try to Win with Technical Expertise. Win by Partnering.

David Spark -
In security leadership, being right on a technical level only goes so far. How can we shift our mindset to embrace building consensus rather...
Defense in Depth

What Makes a Successful CISO?

David Spark -
It's pretty well established that the CISO's role is moving away from technical to that of a business leader. But all business leaders have...
Defense in Depth

How Should CISOs Talk to the Business

David Spark -
Most CISOs can talk tech inside and out. But when they have to communicate that to the business, the conversation doesn't flow nearly as...
123...24Page 1 of 24