• As Long as We Keep Moving the Goalposts, We Have a Great Security Culture (LIVE in Dallas, TX)
    Jan 28 2025

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Rinki Sethi, vp and CISO, BILL. Joining us is our sponsored guest, Lamont Orange, CISO, Cyera.

    This episode was recorded in front of a live audience at Cyera’s first DataSec conference (November 2024) in Dallas. Thanks to Adam Holland, CISO, Wendy's, Farray Rahman of Vibrant Emotional Health and 988 Lifeline, and Biji John of USAA for our questions in the episode.

    In this episode:

    • Shifting from traditional recovery
    • Do you know where your data is?
    • The science of tradeoffs
    • How do you measure security culture?

    Thanks to our podcast sponsor, Cyera!

    Cyera’s data security platform discovers your data attack surface, protects sensitive data, governs data access, monitors critical data events, and quickly responds to data risks. Cyera’s agentless design allows us to deploy within minutes across any environment and provide a 95% precision rate through our AI-powered classification engine. Learn more at Cyera.io

    Show More Show Less
    42 mins
  • 4th Party Data Breach? We Can Barely Catch the 1st Party Ones!
    Jan 21 2025

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is George Finney, CISO, The University of Texas System and author of Project Zero Trust.

    In this episode:

    • Aligning on privacy
    • Bringing Zero Trust to OT
    • Restores and resilience
    • Focus on what you can control

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you’ll streamline compliance— and never duplicate your efforts.

    Show More Show Less
    38 mins
  • I Support Open Source as Long as I Don't Have to Invest in It
    Jan 14 2025

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our guest, Brett Perry, CISO, Dot Foods.

    In this episode:

    • A new MDR policy
    • Staying on top of the technical debt cycle
    • Beating retention struggles
    • In the gully of SOAR

    Thanks to our podcast sponsor, Tines!

    Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.

    Show More Show Less
    37 mins
  • Ewww! How Long Has This Router Been in the Fridge?
    Jan 7 2025

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Yabing Wang, VP and CISO, Justworks.

    In this episode:

    • Building a path to action
    • Cracking the EOL conundrum
    • The burning platform question
    • Uncertainty is our only constant

    Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    Show More Show Less
    39 mins
  • Why Bother Helping Users When We Can Complain About Them?
    Dec 17 2024

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Daniel Daraban, senior director of product management, Bitdefender.

    In this episode:

    • Practice makes perfect
    • Shaming doesn’t help anyone
    • Cybersecurity is a flat circle
    • Building the bridge

    Thanks to our podcast sponsor, Bitdefender!

    Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services. Learn more at Bitdefender.com.

    Show More Show Less
    38 mins
  • Can’t Our Employees Just Go Back to Stealing Pens?
    Dec 10 2024

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Itzik Alvas, co-founder and CEO, Entro.

    In this episode:

    • What to expect when you’re offboarding
    • The threats are coming from inside the organization
    • The risk of stale identities
    • Working backward to risk

    Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    Show More Show Less
    38 mins
  • We Take Software Security Seriously, As Long As It Ships on Time
    Dec 3 2024

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Jeremy Epling, chief product officer, Vanta.

    In this episode:

    • What is the future of cybersecurity?
    • Designing the outcomes we want
    • The promise and peril of AI
    • Is open-source open to more threats?

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots.

    Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across 30 frameworks, you’ll streamline compliance— and never duplicate your efforts. Learn more at Vanta.com.

    Show More Show Less
    35 mins
  • Aww, Your Cybersecurity Concerns Are So Adorable (LIVE in La Jolla)
    Nov 26 2024

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Gary Hayslip, CISO, Softbank Investment Advisors. Joining us is Keith McCartney, VP, Security and IT, DNAnexus.

    In this episode:

    • Closing the Credibility Gap
    • Clarifying the Role of Security Engineering
    • Building Resilience at Scale
    • AI Frameworks and Cybersecurity

    Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    Show More Show Less
    41 mins