HomePodcastDefense in Depth

Defense in Depth

 

Defense in Depth is a 25-minute weekly advice podcast (Thursdays at 6 A.M. ET) that’s based on a single online discussion. The show is co-hosted by technology journalist David Spark and Geoff Belknap, CISO, LinkedIn or Steve Zalewski, former CISO, Levi Strauss.

Subscribe

DEFENSE IN DEPTH

Defense in Depth

What’s the Most Efficient Way to Rate Third-Party Vendors?

David Spark -
Organizations don't have the time to do in-depth vetting on every third-party. This leaves them turning to "better than nothing" security rating vendors. These...
Defense in Depth

Don’t Ask “Can” We Secure It, But “How” Can We Secure It

David Spark -
Do security professionals limit themselves when they ask "if" they can secure something? How would the approach, and the problem solving change if they...
Defense in Depth

Has the Shared Security Model for SaaS Shifted?

David Spark -
Are we all on board with the shared security model in cloud security? We always said it, but I don't know if everyone knew...
Defense in Depth

Improving the Efficiency of Your Threat Intelligence

David Spark -
We're increasingly using threat intelligence to move our organizations to a more proactive security posture, making them more resilient against cyberattacks. It's a combination...
Defense in Depth

Why Cybersecurity Professionals Lie on Their Resumes

David Spark -
A survey found 72% of cybersecurity professionals took "creative liberties" on their resumes. Why do so many otherwise qualified professionals feel forced to spice...
Defense in Depth

What Should Be in a CISO Job Description?

David Spark -
CISO job descriptions are all over the map in terms of what is desired and what the company is willing to pay. What are...
Defense in Depth

The CISO’s Job Is Impossible

David Spark -
Over the past decade, the CISO role has evolved into a seemingly impossible job. But someone still has to do it. How must CISOs...
Defense in Depth

Can You Have a Secure Software Environment Without Traditional Vulnerability Management?

David Spark -
The reality is that vulnerability management is mostly about catching up. You find out about vulnerabilities and then rush to patch them based on...
Defense in Depth

How Much Should Salespeople Know About Their Product?

David Spark -
Vendors want to sell you the product they have. Their approach frequently feels more like “treating symptoms” rather than diagnosing the root causes. Check out...
Defense in Depth

Why Are We Still Struggling to Fix Application Security?

David Spark -
Why does AppSec feel like it's being left behind in cybersecurity? We have a lot of tooling, but it remains labor-intensive and unable to...
Defense in Depth

What Can Someone with No Experience Do in Cybersecurity?

David Spark -
There's often skepticism about what those new to cybersecurity can do when they enter the field. But are we creating far too many unnecessary...
Defense in Depth

Are New Gartner-Created Categories/Acronyms Helping or Hurting the Cybersecurity Industry?

David Spark -
It seems like cybersecurity is content to suffer death by a thousand Gartner quadrants. Why do we insist on complicating an industry that's begging...
Defense in Depth

Can AI improve Third-Party Risk Management (TPRM)

David Spark -
Did you know AI can fill out your security questionnaire for you? Well, if you didn',t you've missed all cybersecurity marketing in the past...
Defense in Depth

Cybersecurity Is NOT an Entry-Level Position

David Spark -
We often wonder why there is a lack of entry-level jobs in cybersecurity. But does that job category even apply to the field? Is...
Defense in Depth

Hey Vendors, What Problem Is Your Product Solving?

David Spark -
Too often, vendors focus on new features and capabilities, which miss the ultimate point of why they are selling in the first place. CISOs...
1...345...25Page 4 of 25