HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Securing Unmanaged Assets

"When the asset discovery market launched, every single company that offered a solution used the line, “You can’t protect what you don’t know.” Everyone...

Ambulance Chasing Security Vendors

A good high profile security threat seems like a good time to alert potential customers about how your product could help or even prevent...

Do CISOs Have More Stress than Other C-Suite Jobs?

Why do CISOs seem more stressed out than other C-level executives? Check out this post for the discussions that are the basis of our conversation on...

How Should We Discuss Cyber With the C-Suite?

How detailed do we get in our conversation with business leaders? Do we dumb it down? Or is that a recipe for trouble? Check out this...

Can You Be a vCISO If You’ve Never Been a CISO?

Why are there so many vCISOs who have never been a CISO? Isn't it difficult to advise on a role you've never done? Do...

How Should We Gauge a Company’s Cyber Health?

As an outside observer, how can you tell if a company is staying cyber healthy? While there is no financial statement equivalency to let...

Reducing the Attack Surface

The cyber attack surface just keeps growing to the point that it seems endless. Protecting it all is impossible. Is there anything that can...

Do We Need a Marketing Manager for the Security Team?

Those reports on security procedures for the business are falling short. No one is reading them. What good are security controls if your staff...

Cybersecurity Budgets

Cybersecurity budgets are increasing, by a lot. What's fueling the increase and where are those budgets being spent? Check out this post for the discussions that are...

How Can We Make Sense of Cybersecurity Titles?

What's the difference between a head of security, a vp of security, and a CISO? Do job responsibilities change whether you're a security analyst...

Walk a Mile in a Security Recruiter’s Shoes

Instead of complaining about the security hiring process, walk a mile in a recruiter's shoes and have a little compassion for what they're going...

Moving Security from a Prevention to a Resilience Strategy

Are security programs drifting from a prevention to a resilience strategy? If so, are you truly operating in a resilient environment? Or are you...

How to Engage with Non-Technical Business Leaders

How do you talk to non-technical business leaders about cybersecurity? It's a concern, it's a risk, they want to know so they can make...

Cybersecurity Burnout

Why are cybersecurity professionals burning out? What's the dynamic of the job, the pressures being put on them, that causes the best to leave?...

How to Build a Greenfield Security Program

You're starting a security program from scratch and you're trying to figure out where to start, what to prioritize, and how to architect it...