HomePodcastDefense in Depth

Defense in Depth

 

Defense in Depth is a 25-minute weekly advice podcast (Thursdays at 6 A.M. ET) that’s based on a single online discussion. The show is co-hosted by technology journalist David Spark and Geoff Belknap, CISO, LinkedIn or Steve Zalewski, former CISO, Levi Strauss.

Subscribe

DEFENSE IN DEPTH

Defense in Depth

Cybersecurity Has Become a Cult

Rich Stroffolino -
We think of cybersecurity as a discipline. But when do ideas like best practices and NIST frameworks change into a system of belief? Check out...
Defense in Depth

What Does the Next Generation of Cloud Security Look Like?

Rich Stroffolino -
We know human-paced security controls can't be applied to autonomous AI agents. So what needs to change with CNAPP? Check out this post for the...
Defense in Depth

The Dangers of Picking the Wrong Vendor

David Spark -
Picking the wrong vendor can result in a costly transition. You have your roadmap and the vendor has its own. If you pick the...
Defense in Depth

Why Cyber Startups Need CISO Advisors

David Spark -
All security startups will tell you they talk to potential customers. The problem is that you limit your development when you only talk to...
Defense in Depth

Breaking the Reactive Cycle of Cybersecurity

David Spark -
We often frame cybersecurity as an endless reactive process. We've heard the term cat and mouse game between attackers and defenders. It's a viscious...
Defense in Depth

How Do You Know If Your Backups Will Survive a Ransomware Attack?

Rich Stroffolino -
Every organization wants to be able to recover from a ransomware attack. So why does no one seem to test properly for it? Check out...
Defense in Depth

What Makes a Successful Security Vendor Demo?

Rich Stroffolino -
Far too many vendor demos are falling short on just delivering the basics of what a security professional expects to see. Isn't the point...
Defense in Depth

Should You Use Native or 3rd Party Cloud Management Tools?

Rich Stroffolino -
"Secure by Design" gets thrown around in the cloud a lot, but what do we actually mean by that? And is it even achievable? Check...
Defense in Depth

How Should We Measure the Performance of a CISO?

Rich Stroffolino -
How does the business determine what counts as success for a CISO? What warrants a raise in salary? Check out this post for the discussion...
Defense in Depth

How to Be Less Busy and More Effective in Cyber

Rich Stroffolino -
There's no shortage of frameworks that offer ways to manage and configure your security program. While they may be providing some guidance, are they...
Defense in Depth

How to Engage With a CISO When They Express Interest

Rich Stroffolino -
When a CISO walks up to a vendor booth, it should be a golden opportunity to connect. So why do so many vendors not...
Defense in Depth

Who is Responsible for the Conflict Between Security and Developers?

Rich Stroffolino -
We know there's tension between security teams and developers. But where does this tension start? Is the constant friction between developers and security teams...
Defense in Depth

Are Your Security Tools Creating More Work for Your Team?

Rich Stroffolino -
Security tools are supposed to solve problems and make our lives easier. Why does it seem like they're doing the opposite and creating more...
Defense in Depth

Why Overpromising is a Dangerous Sales Tactic

David Spark -
Cybersecurity sales lives and dies on trust. So why do so many vendors burn bridges just to get a foot in the door? Check out...
Defense in Depth

Should You Phish Your Employees or Not?

David Spark -
We know that phishing is a major threat vector. So why does it seem like phishing tests only make things worse? Check out this post...
123...25Page 1 of 25