HomePodcastDefense in Depth

Defense in Depth

 

Defense in Depth is a 25-minute weekly advice podcast (Thursdays at 6 A.M. ET) that’s based on a single online discussion. The show is co-hosted by technology journalist David Spark and Geoff Belknap, CISO, LinkedIn or Steve Zalewski, former CISO, Levi Strauss.

Subscribe

DEFENSE IN DEPTH

Defense in Depth

We’ve Been Fooled. There Is No Talent Shortage.

David Spark -
We've never had a cybersecurity talent shortage. Turns out we're being sold that story from certification vendors and companies not wanting to pay for...
Defense in Depth

Is There an Increasing Consolidation of Vendors in the SOC?

David Spark -
We've seen a wave of attempts at platform consolidation across the security operations center. But will the unique challenges of the SOC ultimately favor...
Defense in Depth

Are CISOs Struggling to Get Respect?

David Spark -
Are we headed for a mass CISO exodus? Organizations may have budget for cybersecurity, but without a committment to process, will it leave CISOs...
Defense in Depth

Is Platformization Vs Best-of-Breed a False Dichotomy?

Rich Stroffolino -
When it comes to buying cybersecurity solutions, we’re often told the choice comes down to buying the best single tool available or buying into...
Defense in Depth

Protecting Your Backups from Ransomware

David Spark -
For the past few years, the focus of cybersecurity has increasingly been shifting to resilience. Core to a resilience program are backups... a safety...
Defense in Depth

Can a Security Program Ever Reach Maintenance Mode?

David Spark -
CISOs like to think of their job as managing risk. But once you get risk to an acceptable level, when do you start prioritizing...
Defense in Depth

The Hardest Problems in Security Aren’t “Security Problems”

David Spark -
Security faces many problems. Asset inventory, patching automation, config management, and device administration are all perennial challenges. But how many of them are related...
Defense in Depth

If and When Should a CISO Have a Long Term Security Plan?

David Spark -
How does a CISO approach strategy as they become more comfortable in their role? Is a long-term strategy even possible for a new CISO? Check...
Defense in Depth

Do We Want CISOs Dictating How Salespeople Should Engage?

David Spark -
Sales is a tough job in cybersecurity. But does that make it okay to bombard a CISO for a meeting? Check out this post by...
Defense in Depth

Is AI Benefiting Attackers or Defenders?

David Spark -
We've been mired in endless discussions on how Adversaries and Defenders are (or could be) taking advantage of AI. Does one side have the...
Defense in Depth

CISOs DO Own the Risk

David Spark -
CISOs often feel excluded from company leadership. But do they need to step up and own risk to do so? Check out this post for...
Defense in Depth

How Can We Fix Alert Fatigue?

David Spark -
Useful alerts are critical in cybersecurity. But getting inundated with useless alerts wastes resources and our attention. How do we build out an alerting...
Defense in Depth

Vulnerability Management ≠ Vulnerability Discovery

David Spark -
Why have we conflated vulnerability discovery with vulnerability management? There are lots of tools that classify what's out there, but they don't help you...
Defense in Depth

Are Security Awareness Training Platforms Effective?

David Spark -
Security awareness is a key part of any security program. So why are we so skeptical of security awareness programs? Check out this post for...
Defense in Depth

The Argument For More Cybersecurity Startups

David Spark -
What is success and failure for a cybersecurity startup? The failure of a cybersecurity startup often looks like success from the outside, with most...
1...456...25Page 5 of 25