HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Topic Takeover: API Security

When we set out on a "Topic Takeover" program, our goal is to generate a ton of content, across multiple media, in one topic...

Defense in Depth: How Vendors Should Approach CISOs

"How do I approach a CISO?" It's the most common question I get from security vendors. In fact, I have another podcast dedicated to...

Best Moments from “API Security” Episode of Defense in Depth

If you haven't had a chance to listen to the "API Security" episode of Defense in Depth. Watch this short three-minute clip highlighting three of the...

Defense in Depth: Secure Access

What is the Holy Grail of secure access? There are many options, all of which are being strained by our new work from home...

Defense in Depth: InfoSec Fatigue

Have we reached peak InfoSec fatigue? Revolving CISOs and endless cyber recruitment OR the fact that we're spending more money to reduce even greater...

Defense in Depth: Securing a Cloud Migration

You're migrating to the cloud. When did you develop your security plan? Before, during, or after? How aware are you and the board of...

Defense in Depth: API Security

APIs are gateways in and out of our kingdom and thus they're also great access points for malicious hackers. How the heck do we...

Defense in Depth: Shared Threat Intelligence

We all know that shared intelligence has value, yet we're reticent to share our threat intelligence. What prevents us from doing it and what...

Defense in Depth: Drudgery of Cybercrime

Why does the press persist on referring to all cyber breaches as sophisticated attacks? Is it to make the victim look less weak, or...

Defense in Depth: Security Budgets

How do you calculate a security budget? Is it a percentage of the IT budget? Something else? And why does it grow so drastically...

Defense in Depth: Role of the BISO

What is a business information security officer or BISO? Do you need one? Is it just an extension of the CISO or is it...

Defense in Depth: Shared Accounts

As bad as all security professionals know, shared accounts are a fact in the business world. They still linger, and from an operational...

Defense in Depth: Bug Bounties

What is the successful formula for a bug bounty program? Should it be run internally, by a third party, or should you open it...

Defense in Depth: Data Classification

The more data we horde, the less useful any of it becomes, and the more risk we carry. If we got rid of data,...

Defense in Depth: Prevention vs. Detection and Containment

We agree that preventing a cyber attack is better than detection and containment. Then why is the overwhelming majority of us doing detection and...