HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Onboarding Security Professionals

Onboarding new cyber talent sets the tone for their tenure with your organizations. So what should CISOs do to make sure onboarding is effective...

How to Improve Your Relationship With Your Boss

Just like getting a job, advancing your career requires more than just technical skills. It requires you building relationships within your organizations, particularly with...

Improving the Responsiveness of Your SOC

When we think about improving efficiency in the SOC, we can often focus on tooling. Then why does it take so long to integrate...

The Demand for Affordable Blue Team Training

If you want to get into cybersecurity, there are a multitude of red teaming tools available for little to no cost. So why is...

Why are CISOs Excluded from Executive Leadership?

Every company claims they take cybersecurity "very seriously." If that's the case why do we see a dearth of CISOs listed in executive leadership?...

What Is Your SOC’s Single Search of Truth?

The whole point of a single pane of glass is making sense of your data. But when these dashboards are limited to a...

When Is Data an Asset and When Is It a Liability?

Data is the life blood of an organization. But only when you need it. When you collect too much, you put risk on both...

Tracking Anomalous Behaviors of Legitimate Identities

The Verizon DBIR found that about half of all breaches involved legitimate credentials. It’s a huge attack surface that we’re only starting to get...

Why Do Cybersecurity Startups Fail?

Why do security startups fail? All startups are an inherently risky proposition, but what are the specific challenges for startups in our industry? Check out...

Is “Compliance Doesn’t Equal Security” a Pointless Argument?

A security program shouldn't stop at compliance, but that doesn't mean we should undervalue it either. It's easy to just say compliance comes down...

CISO Responsibilities Before and After an M&A

Mergers and acquisitions always present challenges to an organization. When it comes to cybersecurity, how involved should a CISO be before AND after an...

Use Red Teaming To Build, Not Validate, Your Security Program

When did we all agree that red teaming was about validating security? It seems like increasingly red teaming is a catch all term for...

The Do’s and Don’ts of Approaching CISOs

Vendors need to reach out to CISOs, but what does a successful approach look like? Too often vendors spray and pray with outreach, rather...

Doing Third Party Risk Management Right

If third-party risk management becomes too broad, it effectively becomes worthless. But too narrow and you'll miss critical risks. So how do you strike...

Warning Signs You’re About To Be Attacked

What are the things that raise red flags that you're about to experience an attack? We know phishing is one major indicator, but what...