HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Defense in Depth: Asset Valuation

What's the value of your assets? Do you even understand what they are to you or to a criminal looking to steal them? Do...

Defense in Depth: DevSecOps

We know that security plays a role in DevOps, but we've been having a hard time inserting ourselves in the conversation and in the...

Defense in Depth: Fix Security Problems with What You’ve Got

Stop buying security products. You probably have enough. You're just not using them to their full potential. Dig into what you've got and build...

Defense in Depth: Should Risk Lead GRC?

Defining risk for the business. Is that where a governance, risk, and compliance effort should begin? How does risk inform the other two, or...

Defense in Depth: Responsible Disclosure

Security researchers and hackers find vulnerabilities. What's their responsibility in disclosure? What about the vendors when they hear the vulnerabilities? And do journalists have...

Defense in Depth: Internet of Things

When Internet of Things or IoT devices first came onto the market, security wasn't even a thought, let alone an afterthought. Now we're flooded...

Defense in Depth: Is Governance the Most Important Part of GRC?

Your policy should rarely change. But your ability to achieve that policy is found in procedures or governance that should inform, steer, and guide...

Defense in Depth: Who Should the CISO Report To?

Who should the CISO report to? What factors determine that decision? And why is that single decision so critical to a company's overall security? Check...

Defense in Depth: Hybrid Cloud

The consistency of your security program becomes a challenge once you introduce the cloud. Controls and visibility are not necessarily transferable. How do you...

Defense in Depth: CISO Tenure

The CISO has the shortest tenure of any C-level role. Why so brief? Is it the pressure, the responsibility, the opportunities, or all of...

Defense in Depth: Toxic Security Teams

There's an endless number of variables that contribute to creating a toxic security teams. How does it happen, and what are ways to manage...

Defense in Depth: Personality Tests in the Workplace

As a cybersecurity leader, should you use personality tests for hiring and managing a team? Does it create diversity, understanding of communication styles, or...

Defense in Depth: Lack of Diversity in Cybersecurity

Cybersecurity teams are notoriously not diverse. At the same time we keep hearing and talking about the need for diversity. Is it critical? Can...

Defense in Depth: When Are CISOs Responsible for Breaches?

When is a CISO responsible for a breach or cyber incident? Should they be disciplined, fired, or let go with an attractive payout? Check...

Defense in Depth: Post Breach Desperation and Salary Negotiations

A data breach usually spells financial and reputational disaster. But such an event can also be an opportunity for a security professional to capitalize....