HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Defense in Depth: Data Protection and Visibility

Where is your data? Who's accessing it? You may know if you have an identity access management solution, but what happens when that data...

Defense in Depth: What’s an Entry Level Cybersecurity Job?

Naomi Buckwalter, director of information security at Energage analyzed one thousand random information security job posts on LinkedIn. The most notable trend she found...

Defense in Depth: Securing Digital Transformations

Digital transformation. It's definition is broad and so are the mechanisms to secure it. Check out this post for the basis for our conversation on this week’s...

Defense in Depth: Leaked Secrets in Code Repositories

Secrets, such as passwords and credentials, are out in the open just sitting there in code repositories. Why do these secrets even exist in...

Defense in Depth: Measuring the Success of Your Security Program

How does a CISO measure the performance of their security program? Sure, there are metrics, but what are you measuring against? Is it a...

Defense in Depth: Privacy Is An Uphill Battle

Privacy is an uphill battle. The problem is those gathering the data aren't the ones tasked with protecting the privacy of those users for...

CISO Series Turns Two!

Today is officially the anniversary of the CISO Series. The concept of the CISO/Security Vendor Relationship Series started back in January 2018, and then...

Defense in Depth: Legal Protection for CISOs

What's the legal responsibility of a CISO? New cases are placing the liability for certain aspects of security incidents squarely on the CISO. And...

Defense in Depth: XDR: Extended Detection and Response

Is XDR changing the investigative landscape for security professionals? The "X" in XDR extends traditional endpoint detection and response or EDR to also include...

Defense in Depth: Calling Users Stupid

Many cybersecurity professionals use derogatory terms towards their users, like calling them "dumb" because they fell for a phish or some type of online...

Defense in Depth: Is College Necessary for a Job in Cybersecurity?

Where is the best education for our cyber staff of the future? Where does college fit in or not fit in? Check out this post for...

Defense in Depth: When Red Teams Break Down

What happens when red team engagements go sideways? The idea of real world testing of your defenses sounds great, but how do you close...

Defense in Depth: What Cyber Pro Are You Trying to Hire?

Do companies hiring cybersecurity talent even know what they want? More and more we see management jobs asking for engineering skills, and even CISO...

Defense in Depth: Junior Cyber People

There are so few jobs available for junior cybersecurity professionals. Are these cyber beginners not valued? Or are we as managers not creating the...

Defense in Depth: Trusting Security Vendor Claims

Do security vendors deliver on their claims and heck, are they even explaining what they do clearly so CISOs actually know what they're buying? Check...