All links and images for this episode can be found on CISO Series The trick to getting the attention of CISOs is to create an awesome company. Focus on that and the attention will follow. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our guest is Katie Stebbins ( @ktlgs ), board president, Global Epic . Thanks to our podcast sponsor, Kenna Security Kenna Security , now part of Cisco, is the pion...
Mar 08, 2022•33 min
All links and images for this episode can be found on CISO Series If you're up against Google, Facebook, or Apple for hiring talent, chances are pretty good that your company is not going to match their pay and benefits. So if they're the bar for salary and benefits, your business' offerings will inevitably be subpar. So how do you build your employer brand to contend in areas where you're deficient in areas you can't compete? This week’s episode is hosted by me, David Spark ( @dspark ), produce...
Mar 01, 2022•33 min
All links and images for this episode can be found on CISO Series Every organization has an Acceptable Use Policy (AUP) for their computers and network. Nobody reads it and everybody violates it. How the heck do you enforce or discipline people who violate your company's AUP? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our sponsored guest is Matt Radolec , senior director, incident response an...
Feb 22, 2022•36 min
All links and images for this episode can be found on CISO Series Yikes, this security hole one concerned student found in the school's network is going to require one heck of a pep rally to fix. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our guest is Dave Stirling , CISO, Zions Bancorporation . Thanks to our podcast sponsor, Varonis On average, an employee can access 17 million files on day ...
Feb 15, 2022•33 min
All links and images for this episode can be found on CISO Series If we had such a great conversation at the conference, why don't you want to respond to my emails? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Julie Tsai ( @446688 ), cybersecurity leader. Thanks to our podcast sponsor, Varonis What is your ransomware blast radius? The average user can access 17 million files. Varonis reduces your blast radius in days, not y...
Feb 08, 2022•34 min
All links and images for this episode can be found on CISO Series Winning at vulnerability management is not a numbers game. It's a tactical exercise of what matters most in your environment. Surprisingly, experts tell us close to two thirds of your vulnerabilities can and should be ignored. Why and which ones are those? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our sponsored guest is Ed Bel...
Feb 01, 2022•34 min
All links and images for this episode can be found on CISO Series If you're asking what certification you should go after to get the perfect cybersecurity job, you're asking the wrong question. Most hiring managers are inundated with resumes so they're looking for ways to get rid of yours. Don't be fooled thinking you're going to be seen because you have the "perfect" resume. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Mik...
Jan 25, 2022•37 min
All links and images for this episode can be found on CISO Series CISOs agree that multi-factor authentication is the one security control that once deployed has the greatest impact to reduce security issues. Yet with all that agreement, it’s still so darn hard to get users to actually use it. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Arvind Raman ( @arvind78 ), CISO, Mitel . Huge thanks to our sponsor, Horizon3.ai See y...
Jan 18, 2022•36 min
All links and images for this episode can be found on CISO Series It's all risk, all show, for the entire show. It's just the kind of risk we like to take. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our sponsored guest is Derek Vadala ( @derekvadala ), chief risk officer, BitSight . Thanks to our podcast sponsor, BitSight These are challenging times for security professionals. From managing third party supply chain risk, to quantifyin...
Jan 11, 2022•35 min
All links and images for this episode can be found on CISO Series What do you give to the person who wants to learn how to steal everything? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our sponsored guest Jim Wachhaus ( @imanapt ), risk intelligence evangelist, CyCognito . Thanks to our podcast sponsor, CyCognito By understanding risks, attacks, and behaviors from attack surface management dat...
Jan 04, 2022•33 min
All links and images for this episode can be found on CISO Series What do you do if your boss gave you a corporate laptop and you fear they installed some tracking software? Should you wipe the drive or simply quit? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our sponsored guest is Purandar Das ( @dasgp ), co-founder and president, Sotero . Thanks to our podcast sponsor, Sotero Today’s compliance requirements require a security mindset...
Dec 21, 2021•35 min
All links and images for this episode can be found on CISO Series Risk is scary. Cyber risk is scarier. Not because it's worse, but mostly because we barely understand it. We've gone this long not understanding it. Maybe just ignoring it will allow us to wish it away. On this week's episode of CISO/Security Vendor Relationship Podcast we have our first in-studio guest (since we moved the studio). Joining me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson is our in-studio guest...
Dec 14, 2021•36 min
All links and images for this episode can be found on CISO Series There's no question calculating risk is tricky. Because once you understand your risk then you can assign budget appropriately to reduce your risk. OR, you could just wait until you're breached and you'll know exactly what your risk is and how much it costs. This week's episode of CISO/Security Vendor Relationship Podcast is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Dan Walsh , ...
Dec 07, 2021•37 min
All links and images for this episode can be found on CISO Series Don't look at me to explain zero trust to you, because I'm just as confused. I've heard plenty of definitions, and they all sound good. I just don't know which one is right, or maybe they're all right. This week's episode of CISO/Security Vendor Relationship Podcast was recorded in front of a live audience at KeyConf at the City Winery in New York City. My guest co-host for this special episode is JJ Agha , CISO, Compass . Joining...
Nov 30, 2021•46 min
All links and images for this episode can be found on CISO Series It's extremely easy to say you want to diversify. In fact, I'll do it right now three times. We want diversity. We're very pro diversity and it's our focus for the next year. Diversity is a very important part of our security program. Please don't ask to though look at the lack of diversity on our staff. It doesn't match our rhetoric. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy El...
Nov 23, 2021•39 min
All links and images for this episode can be found on CISO Series Do the cybercriminals know my vacation schedule? If they’re already in our network, they probably do. Why don’t they share their vacation schedule with me. That way we can all enjoy our time off. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Patti Titus ( @rusecur ), CISO, Markel . Thanks to our podcast sponsor, Sotero Today’s compliance requirements require a...
Nov 16, 2021•37 min
All links and images for this episode can be found on CISO Series At one point a sales representative will get so desperate trying to get a reply from a prospect that they'll resort to some tepid attempt a humor. We've all seen the email that is trying to understand why we're not replying. And the salesperson tries to make it easy for the recipient to respond by just pressing a single digit. 1: You're too busy, 2: You didn't see my email, 3: You really wanted to respond but you're stuck in a wel...
Nov 09, 2021•50 min
All links and images for this episode can be found on CISO Series "Look, you wanna be elite? You have to do a righteous hack." This entire episode we pay tribute to the movie "Hackers" with quotes all throughout the programming. This episode is hosted by me, David Spark ( @dspark ), producer of CISO Series, and my guest co-host Roland Cloutier ( @CSORoland ), CISO, TikTok . Joining us in this discussion is Steve Tran ( @steveishacking ), CISO, MGM Studios . Thanks to our podcast sponsor, Code42 ...
Nov 02, 2021•38 min
All links and images for this episode can be found on CISO Series It’s extremely hard to tell if a cybersecurity leader is doing a good job. In fact, it’s tough for even them to know. Our best bet is watching for an improvement in the cybersecurity program over time. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our sponsored guest is Mark Wojtasiak ( @markwojtasiak ), vice president, research & strategy, Code42 and co-author of “Inside ...
Oct 26, 2021•35 min
Here's an awesome bonus episode of CISO/Security Vendor Relationship Podcast featured as the closing event at Evanta's Global CISO Virtual Executive Summit. Here's what went down. The day before our recording, three representatives presented their unique and innovative security solutions to a panel of CISOs and the virtual audience in attendance. The next day, everyone came back to offer up a quick elevator pitch and to be grilled by the CISOs. That's exactly what you get to hear on this bonus e...
Oct 22, 2021•41 min
All links and images for this episode can be found on CISO Series What game should we play where we can trust you to behave fairly, but at the same time see how you could take advantage of us? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Deneen DiFiore ( @deneendifiore ), CISO, United Airlines . Thanks to our podcast sponsor, Code42 As organizations gradually and cautiously move out of adapt out of adapt-or-die mode into th...
Oct 19, 2021•36 min
All links and images for this episode can be found on CISO Series Do you really need hundreds of questions to know if you want to work with a vendor? Won’t just two or three well-pointed questions really give you a good idea? This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Our guest is Nick Selby (@fuzztech), CSO, Paxos Trust Company and co-host of Tech Debt Burndown podcast. Thanks to our podcast spon...
Oct 12, 2021•35 min
All links and images for this episode can be found on CISO Series OK, you showed us our vulnerability. But we really don't want to fix it now. Could we just pay you off to keep quiet, and to buy us some more time to deal with this in a "not so timely" manner? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Sameer Sait ( @sameersait ), CISO, Amazon - Whole Foods . Thanks to our podcast sponsor, Code42 As organizations gradually...
Oct 05, 2021•35 min
No, please not another acronym. I can't take another education cycle on another product segment. Oh, I'm sure Gartner is launching it. And I'm sure they'll make yet another Magic Quadrant to tell us which companies are in this new market segment. And we're going to have to buy this report so we understand this new category so we can create yet another line item on our budget sheet. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our sponso...
Sep 28, 2021•37 min
You don’t want anything to happen, but you also want security to somehow to calculate ROI. Maybe the ROI could be calculated from actual sales that security allowed to actually happen. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our sponsored guest is Ryan Gurney , CISO-in-residence, YL Ventures . Thanks to our sponsor, YL Ventures YL Ventures , a global VC firm, manages over $300 million and ...
Sep 21, 2021•37 min
All links and images for this episode can be found on CISO Series It’s imperative we speak to him. We want to make sure they landed safely. And if he has some available time, maybe we can show him our slide deck. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our guest is Branden Newman , svp, CISO, MGM Resorts . Thanks to our podcast sponsor, Grip Security Ask yourself – do I know what SaaS my c...
Sep 14, 2021•41 min
All links and images for this episode can be found on CISO Series I know your friends say they use excellent passwords, but they don't take the time and care we put into choosing the right combination of letters, numbers, and special characters that's unique to your personality. Once your friends and the dark web have a chance to see them, they'll want to emulate you by using your password over and over again. This week's CISO/Security Vendor Relationship Podcast was actually recorded in front o...
Sep 07, 2021•43 min
All links and images for this episode can be found on CISO Series We've heard the question "How secure are we?" many times, and we know what it really means. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our guest is Kevin Morrison , CISO, Alaska Air . Thanks to our podcast sponsor, Enso Enso , an Application Security Posture Management platform, helps security teams scale and gain control over ...
Aug 31, 2021•34 min
All links and images for this episode can be found on CISO Series What questions should we be asking of a consultant's referrals to see if they're really worth the money they're trying to overcharge us? This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Mike Johnson . Our guest is Ira Winkler ( @irawinkler ), CISO, Skyline Technology Solutions . Thanks to our podcast sponsor, Varonis Varonis will help you get meaningful data security results faster than you...
Aug 24, 2021•34 min
All links and images for this episode can be found on CISO Series You think it's easy carrying around the burden of being so perfect all the time? It's tough to carry that responsibility to tell others what they need to do. This week’s episode is hosted by me, David Spark ( @dspark ), producer of CISO Series and Andy Ellis ( @csoandy ), operating partner, YL Ventures . Our guest is Ed Contreras ( @cisoedwardc ), CISO, Frost Bank . Thanks to our podcast sponsor, Varonis Varonis will help you get ...
Aug 17, 2021•36 min
