HomePodcastCISO Series Podcast

CISO Series Podcast

CISO SERIES PODCAST

How About This? Only Attack the Endpoints We Configured

How are threat actors getting around EDR? Every solution out there will show how well it does in benchmarks, but that doesn't seem to...

The Post-it Note Clearly Says “Don’t Share” Right Under My Password

How do you manage the risk introduced by your own staff? This can range from having written passwords in plain sight to using insecure...

Who You Gonna Call? LEGAL COUNSEL!

When a cybersecurity incident occurs, who should be the first call the CISO makes? And once that call gets made, what is the CISOs...

I’m Rewarding Your Successful Use of the Security Budget by Giving You Less of It

Do cybersecurity budgets suffer from recency bias? It seems organizations are most likely to significantly raise budgets after a cybersecurity incident. Meaning if you've...

Ransomware? Why’d It Have to Be Ransomware? (Live in San Francisco)

CISOs tend to be cool customers. But even in a role that requires nerves, there are still things that can scare a CISO. Some...

You Can’t Leak What You Don’t Collect

Data minimization in the US is changing from a potential policy goal to a regulatory imperative. Maryland's new Online Data Privacy Act requires any...

Our Help Desk Plaque Reads “Over 100,000 Threat Actors Served”

The shine is off the cybersecurity promise of MFA. While its certainly vital to implement, threat actors are increasingly finding ways to get around...

Can’t Talk, I’m Onboarding My Kids To Their First Soccer Practice (Live in Mountain View, CA)

For years, we've talked about the blurring line between work and personal devices. But increasingly we're seeing signs that that line no longer exists...

I Really Shouldn’t Have Agreed to Variable Rate Technical Debt

Technical debt is an inevitability in any organization. But how do you go about "paying it down?" This requires a framework to understand the...

We’ll Invest in Resilience as Soon as the Ransom Payment Clears

Lots of businesses pledge to never pay ransomware demands. That sounds good, but priorities quickly change when you need to get the business back...

We Could Lower Risk If We Shrunk Our Business

Every business wants to grow. But every CISO is tasked with managing and ultimately reducing risks. Being too cautious makes a CISO seem like...

PREVIEW: CISO Series Podcast LIVE in San Francisco 5-5-24

The CISO Series Podcast returns once again to the Bay Area on the eve of RSA Conference as part of the entertainment at BSidesSF!...

CISO Series Podcast LIVE at BSidesSF [05-05-24]

CISO Series Podcast will be returning to BSidesSF to do another live audience recording of our show, just before the RSA Conference launches in...

Our Benefits Include Medical, Dental, and Burnout

Retaining cyber talent isn’t easy. Organizations often don’t know what keeps an employee from going elsewhere. Compensation is always important but often not the...

Your Biggest Threats Don’t Get a Ransom Payment, They Get a Paycheck

Recent studies have shown that employees cause as many significant cybersecurity incidents as outside threat actors. Does this come down to a lack of...