HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Defense in Depth: What Is Security’s Mission?

What's the mission of your security program? Is it to proactively secure the company against a compromise of the confidentiality, integrity, and availability, or,...

Defense in Depth: Vendor CISOs

It's hard to be a CISO. But, what's it like to be a CISO at a security vendor, doing the hard work while carrying...

Defense in Depth: How Much Log Data Is Enough?

You're a CISO struggling with an influx of log data into your SIEM. What's the data you want to keep, and for how long?...

Defense in Depth: Should Finance or Legal Mentor Cyber?

Cybersecurity leaders are constantly looking for ways to improve how they think about risk, and how they communicate risk. But they're not the only...

CISOs at LinkedIn and Levis Are the New Co-Hosts of Defense in Depth Podcast

I am very excited to formally announce that both Geoff Belknap (@geoffbelknap), CISO for LinkedIn and Steve Zalewski, deputy CISO, Levis will be joining...

Defense in Depth: Data Destruction

How do you deal with data at end of life? Holding onto data too long can be very costly and increase risk. So how...

Defense in Depth: How to Make Cybersecurity More Efficient

You're a new CISO told to hold headcount even and find the resources to do 20% more work. We're already maxed out. So how...

Defense in Depth: Does a CISO Need Tech Skills?

Does a CISO need technical skills to be an effective cybersecurity leader? Many CISOs don't have them. Are they still effective and does it...

Defense in Depth: How Do You Know if You’re Good at Security

What metrics or indicators signal to you that an organization is “good at security”? Check out this post for the basis for our conversation on this week’s...

Defense in Depth: Building a Security Team

You're a new CISO at a new org given a headcount of ten to build a cybersecurity team. What's your strategy to build that...

Defense in Depth: Are our Data Protection Strategies Evolving?

As we're evolving from putting data on premises to the cloud, are our data protection strategies evolving as well? There are issues of securing...

Defense in Depth: Should CISOs Be Licensed Professionals?

Many professionals are required to obtain a license before they can do their job legally. The demands of cybersecurity professionals, especially CISOs, has become...

Defense in Depth: Inherently Vulnerable By Design

Much of what we do as practitioners is to prevent inadvertent security problems - oversights, zero-days, etc. What about inherent and unavoidable problems? When...

Defense in Depth: Imposter Syndrome

For CISOs and other security leaders, suffering from imposter syndrome seems inevitable. How can you ever be really confident when there's an endless stream...

Defense in Depth: Why Don’t More Companies Take Cybersecurity Seriously?

With every cybersecurity breach, we still don't seem to be getting through. Many companies don't seem to be taking cybersecurity seriously. What does it...