HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

How Are New SEC Rules Impacting CISOs?

We're seeing increasing regulations and legal responsibilities applying to CISOs. But are CISOs set up to succeed in meeting these within their organizations? And...

Managing the Risk of GenAI Tools

We know new generative AI tools come with risk. What are you doing NOW to manage those? Check out this post for the discussion that...

Defending Against What Criminals Know About You

Are we ready to shift left on identity? What more do we need to know about identities before they enter our environment? Check out this...

Will We Ever Go Back From WFH?

We're seeing increasing evidence that no in-office perks are enough to satisfy employees into returning to the office full-time. If hybrid work is the...

The Lurking Dangers of Neglected Security Tools

Should we look at money lost from deteriorating security products the same way we look at money lost to threat actors? If so, we...

When You Just Can’t Take It Anymore in Cyber

What are the factors that lead to burnout in cybersecurity? And is the industry getting more stressful or are we finally opening up about...

Is It Possible to Inject Integrity Into AI?

When it comes to generative AI systems, often we're concerned about the quality and reliability of the output. But do we risk losing sight...

Are Phishing Tests Helping or Hurting Our Security Program?

Are we missing the point with phishing tests? We know attackers will just craft better messages to get clicks. So how can we make...

Who Is Responsible for Securing SaaS Tools?

Haven’t we already discussed at great length the cloud shared security model? We've had the cloud for a few decades. Why can't we just...

Hiring Cyber Teenagers with Criminal Records

Threat actors don’t need certifications or a degree to be good at their job. So why do we keep trying to demand those from...

What’s Working With Third-Party Risk Management?

We know third-party risk management is a pain. If nobody likes the universally agreed upon solutions like questionnaires, what are we doing that's improving...

What Triggers a CISO?

CISOs are familiar with dealing with stress, making high-stakes decisions, and operating in an industry of unknown unknowns. But there are some things that...

Information Security vs. Cybersecurity

CISO stands for Chief Information Security Officer. So why do we sometimes pigeonhole their duties under "just" cybersecurity? Check out this post for the discussion...

Should Deny By Default Be the Cornerstone of Zero Trust?

How far can we extend a deny-by-default approach as we build out our zero-trust architecture? Can that aggressive security tactic work for the business...

What Is a Field CISO?

We're increasingly seeing the industry fill up with Field CISOs. Why is the CISO out in the field? What does that role entail? Check out...