HomePodcastDefense in Depth

Defense in Depth

Defense In Depth

What Leads a Security Program: Risk or Maturity?

When you think about building a plan (and budget!) for your security program, do you lead with risk, maturity, or something else? Check out this...

Limitations of Security Frameworks

Why do strongly supported security frameworks have such severe limitations when building a security program? Check out this post for the discussions that is the basis...

Why Is There a Cybersecurity Skills Gap?

Why is there a cybersecurity skills gap? Practically everyone is looking to hire, and there are ton of people getting training and trying to...

What Can the Cyber Haves Do for the Cyber Have Nots?

Given that your company's security is dependent on the security of your partners and others, what can we do to get more organizations above...

Securing Unmanaged Assets

"When the asset discovery market launched, every single company that offered a solution used the line, “You can’t protect what you don’t know.” Everyone...

Ambulance Chasing Security Vendors

A good high profile security threat seems like a good time to alert potential customers about how your product could help or even prevent...

Do CISOs Have More Stress than Other C-Suite Jobs?

Why do CISOs seem more stressed out than other C-level executives? Check out this post for the discussions that are the basis of our conversation on...

How Should We Discuss Cyber With the C-Suite?

How detailed do we get in our conversation with business leaders? Do we dumb it down? Or is that a recipe for trouble? Check out this...

Can You Be a vCISO If You’ve Never Been a CISO?

Why are there so many vCISOs who have never been a CISO? Isn't it difficult to advise on a role you've never done? Do...

How Should We Gauge a Company’s Cyber Health?

As an outside observer, how can you tell if a company is staying cyber healthy? While there is no financial statement equivalency to let...

Reducing the Attack Surface

The cyber attack surface just keeps growing to the point that it seems endless. Protecting it all is impossible. Is there anything that can...

Do We Need a Marketing Manager for the Security Team?

Those reports on security procedures for the business are falling short. No one is reading them. What good are security controls if your staff...

Cybersecurity Budgets

Cybersecurity budgets are increasing, by a lot. What's fueling the increase and where are those budgets being spent? Check out this post for the discussions that are...

How Can We Make Sense of Cybersecurity Titles?

What's the difference between a head of security, a vp of security, and a CISO? Do job responsibilities change whether you're a security analyst...

Walk a Mile in a Security Recruiter’s Shoes

Instead of complaining about the security hiring process, walk a mile in a recruiter's shoes and have a little compassion for what they're going...