HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Do You Have a Functional Policy or Did You Just Write One?

Do you have a policy for a certain issue that people know about, have been trained on, and actually apply? Or did you write...

Where are We Struggling with Zero Trust

Everyone seems like they are on board with the principles of zero trust. So why do we see implementation lagging? Check out this post for...

Cybersecurity Has a Prioritization Problem

If all it took was effort to keep an organizations secure, we'd see a fewer breaches. Our industry doesn't suffer from a lack of...

How Can AI Provide Useful Guidance from Fragmented Security Data?

How poorly fragmented is our security data? We've got a lot of it, but connecting it, having it understand from each other, especially as...

Why Salespeople’s Knowledge of Cybersecurity Is Critical for the Ecosystem

Do many cybersecurity sales professionals lack a deep understanding of cybersecurity? If true, does that cause problems for people who have to use their...

What Are the Cybersecurity Trends We Need To Follow?

We are awash in technologies, ideas, and processes. So much to look at. So much to learn. Where should we be paying the most...

Is It Even Possible to Fast-Track Your Way Into Cybersecurity?

With one simple training course, in just 8 weeks, you could have a good-paying job working in cybersecurity. Too good to be true? Well,...

What’s the Most Efficient Way to Rate Third-Party Vendors?

Organizations don't have the time to do in-depth vetting on every third-party. This leaves them turning to "better than nothing" security rating vendors. These...

Don’t Ask “Can” We Secure It, But “How” Can We Secure It

Do security professionals limit themselves when they ask "if" they can secure something? How would the approach, and the problem solving change if they...

Has the Shared Security Model for SaaS Shifted?

Are we all on board with the shared security model in cloud security? We always said it, but I don't know if everyone knew...

Improving the Efficiency of Your Threat Intelligence

We're increasingly using threat intelligence to move our organizations to a more proactive security posture, making them more resilient against cyberattacks. It's a combination...

Why Cybersecurity Professionals Lie on Their Resumes

A survey found 72% of cybersecurity professionals took "creative liberties" on their resumes. Why do so many otherwise qualified professionals feel forced to spice...

What Should Be in a CISO Job Description?

CISO job descriptions are all over the map in terms of what is desired and what the company is willing to pay. What are...

The CISO’s Job Is Impossible

Over the past decade, the CISO role has evolved into a seemingly impossible job. But someone still has to do it. How must CISOs...

Can You Have a Secure Software Environment Without Traditional Vulnerability Management?

The reality is that vulnerability management is mostly about catching up. You find out about vulnerabilities and then rush to patch them based on...