Risk and Reels: A Cybersecurity Podcast

The Unlikely Hero

Jason Ozin, CISO for PIB Group joins Jeffrey Wheatman, SVP Security Evangelist for Black Kite to discuss unlikely heroes and the role of the CISO.

Heists, Fraud and Cons; Oh My!

During this Podcast Jonathan Care, Advisor at Lionfish and former Gartner Analysts, talks scams, cons and frauds and why they still work.

Can You See the Real Threats? | S2 Ep. 9 with Patrick Garrity

Patrick Garrity talks about the real threats, prioritizing vulnerabilities and movies where someone thinks they know what is going on and is wrong.

Tackling Risk | S2 Ep. 8 with Tomás Maldonado

Join us as Tomas Maldonado, CISO for the NFL and Jeffrey Wheatman, Black Kite Cyber Risk Evangelist discuss the best sports movies, the challenges of securing a league of disparate teams and collaboration for better security.

Building a Successful Security Program from Scratch | S2 Ep. 7 with George Al-Koura

During this episode George Al-Koura, CISO at Ruby and co-host of the Bare Knuckles & Brass Tacks podcasts shares his insights on building security programs from scratch.

The Overlap of Physical Security into Digital | S2 Ep. 6 with Angela Dogan

Meet Dr. Angela Dogan, the Associate Director for IT Cloud Computing at Kyndryl. Join us to talk about the Halloween movies, twists and turns, physical security, the evolution of physical security, cyber risk/posture, and the move to the cloud.

Security Operations: Learning what works | S2 Ep. 5 with Anton Chuvakin

Meet today's guest: Dr. Anton Chuvakin, an advisor at the Office of the CISO of Google Cloud. Join us to chat about sci-fi movies, technology predictions, security operations, solving security problems, three lines of defense, AI and using the cloud.

Security Architecture and what the structure entails | S2 Ep. 4 with Evgeniy Kharam

Jeffrey Wheatman is joined in this episode by Evgeniy Kharam, a fellow Cyber Evangelist! Today we are discussing learning from your mistakes, Avatar, CGI, New Zealand, firewalls, and security architecture.

Why open standards matter for streamlined cybersecurity | S2 Ep. 3 with David Mahdi

This week we have Jeffrey's old friend and colleague: Dave Mahdi, the current CIO (Chief Identity Officer) for Transmit Security. Join us to chat about movies (Natalie Portman's first film!), Ted Lasso, good guys vs. bad guys, and why standards (and open standards) matter in the world of cybersecurity when prioritizing risk resilience.

Prioritizing cybersecurity in the world of CISO burnout | S2 Ep. 2 with Rob Black

In this episode, join Jeffrey and Rob Black, CISSP, the founder and CEO of Fractional CISO. Buckle up to talk about Stephen King, Barbenheimer, and the main topic of CISO burnout/stress and how to combat it in our new cyber environment while still prioritizing security leadership.

Cybersecurity in the realm of Higher Education around the world | S2 Ep. 1 with Luqman Kondeth

Welcome to SEASON TWO of Risk and Reels! Get ready to talk about Indian film festivals, Abu Dhabi, cyber security within higher education (with an emphasis on third party cyber risk), and plenty of side stories. In episode one, Jeffrey Wheatman brings his good friend and colleague Luqman Kondeth to the show. He is the Director of Campus Technology Security Services for NYU Abu Dhabi.

The Bright Future of Public/Private Partnership in Cybersecurity | SEASON 1 FINALE Ep. 17 with Bailey Bickley

True crime, storytelling, Big Fish, the partnership between private sector and public sector, the new White House cybersecurity policy, power of strong minds in one room, resilience and redundancy, threat actors worldwide, and supply chain risk and security. We are thrilled to share this episode with special guest, Bailey Bickley, the Chief DIB Defense at the NSA.

From the Military to IT and Cybersecurity | Ep. 16 with Lewis Heuermann

Charlie and the chocolate factory, Tom Hanks, the Military, culture shifts, precision, training, accountability, the why for the what. Join Jeffrey Wheatman and Lewis Heuermann (current Cyber Risk Management leader at Booz Allen Hamilton) as they discuss what it looks like to move from a life in the service to a post-military role in cybersecurity, as well as stories and moments along the way.

Investing in Cyber and AI in 2023 | Ep. 15 with Rick Grinnell

Comedies, Young Frankenstein, History of the World, artificial intelligence, investments in cybersecurity, AI investors, third party risk, ChatGPT, the future of jobs in cyber. Hear from Rick Grinnell, the Founder of Glasswing Ventures (an investor of Black Kite!)

Cybersecurity in Higher Education – over the years and today | Ep. 14 with Gretchen Ruck

80s movies, Animal House, cyber in higher education, university CISOs, managing student data, healthcare within universities, compliance requirements, HECVAT, Educause, Today's episode features Gretchen Ruck, Senior Managing Director of Cybersecurity & Privacy at Ankura.

The People of Cyber: Diversity, Education and Empowerment | Ep. 13 with Juliana Vida

The Admiral, A Christmas Story, new policies, the New White House Cybersecurity Policy, information security importance, DEI, diversity in cyber, government training, empowering the people, poker, hiring, and zero trust. Welcome Juliana Vida to today's episode - she currently runs strategy for Public Sector at Splunk.

How to use cybersecurity tools properly to meet regulations | Ep. 12 with Larry Whiteside

Crafty hackers, super-smart villains, speaking the business language, GRC tools, risk and regulatory correlations, reg ops, being compliant, meeting regulations, and why vendors can't solve all your problems. This episode, features Larry Whiteside, the current CISO at RegScale and long-time friend of Jeffrey Wheatman.

Building a third-party risk program from the ground up | Ep. 11 with Tom Garrubba

SPECIAL double-time episode. Hear from Tom Garrubba, the Director of Third-Party Risk Management Services at Echelon Risk + Cyber and he talks through the journey of building a third party risk management program at CVS Caremark (plus everything after and in-between.) Plus, as always, movies (JAWS), Saturday night theater showings, Franco, and Schwarzenegger.

Threat Modeling in STRIDE, the basis for cybersecurity. | Ep. 10 with Matt Stamper

Forrest Gump, threat modeling, animal farm, application weaknesses, business impact analyses, resilience, accountability, and stride. Tune into the latest episode to hear from Matt Stamper, the CEO of Executive Advisors Group.

Productive risk processes = *truly* reducing risk. How has TPRM shifted? | Ep. 9 with Bob Maley

Star Wars, Star Trek, third party risk management, fallen heroes, best practices, triaging risk, cyber posture, the cloud, vendor access, productive risk process, and truly managing risk. How has third party risk management changed in the last 20 years? How should it be changing to promote better processes? Join Jeffrey Wheatman and Bob Maley, CSO of Black Kite, for this exciting discussion.

Talking with the former Director of Cybersecurity Coordination for the U.S. Dept. of Homeland Security | Ep. 8 with Mike Brown

Jeffrey speaks with the former Director of Cybersecurity Coordination for the U.S. Dept. of Homeland Security, Mike Brown, about strategic, tactical, and operational cybersecurity.

With a plethora of emerging AI, where does the cybersecurity industry stand? | Ep. 7 with Eric Cowperthwaite

Musicals, emerging AI, and understanding the risk within your third-party ecosystem. Our guest this week is Eric Cowperthwaite, COO at Threathunter.ai by Milton Security.

Managing the risk you quantify is half the battle | Ep. 6 with David Elfering

Black and white films, photography, risk quantification, FAIR, (ROI), the business case for risk, risk scenarios, sea monsters, and PII. Our guest this week is David Elfering, Sr. VP and Sr. Cybersecurity Specialist at Marsh.

It’s the dog that caught the car - how can security programs properly mature? | Ep. 5 with Dave Lewis

John wick, curiosity, organizational changes over time, security debt, risk appetite, chatGPT, dogs running around, and taking security seriously. Join Jeffrey Wheatman and Dave Lewis, (Global Advisory CISO at Cisco), as they discuss what it means for security teams to mature and address accepted risks that need to be revisited. As security is taken more seriously overall, leaders must adjust programs to complement that.

The anatomy of the 2023 Black Kite Third Party Breach Report | Ep. 4 with Ferhat Dikbiyik

Third party attacks, common ways hackers target companies, Turkish movies, outsmarting the bad guys, and the trajectory of 2023 data breaches. Listen to episode four as Jeffrey Wheatman and the Head of Research at Black Kite, Ferhat Dikbiyik discuss the latest Third Party Data Breach report (and its astonishing findings).

“We’ve always done it that way.” Why we *shouldn’t.* | Ep. 3 with Patti Titus

Security starts with people. Process requires purpose. | Ep. 2 with Brian Reed

People, process, tools, tech, Ocean’s Eleven, movie remakes, and a recession. Security is people-centric, and tools cannot exist independently. Learn why we must humanize our problems first. Tune into episode 2 with Jeffrey Wheatman and guest Brian Reed (Senior Director of Cybersecurity Strategy at Proofpoint).

Who's a hacker? | Ep. 1 with Jayson Street

Hackers, curiosity, security, pen-testers, kindness, analogies and Hollywood criminals. Welcome to the first episode of Risk and Reels with Jeffrey Wheatman, featuring Jayson Street (OG Pen Tester and Chief Chaos Officer for Trusec), a self-proclaimed hacker.

Introducing Risk and Reels: A Cybersecurity Podcast

It's me, Jeffrey. And the first three episodes of my new podcast release on February 13th. I want YOU to tune in and experience the fun and knowledge shared every week. I am inviting fellow cyber security experts and icons in the field to chat about relevant topics (plus all things cinema!) Stay tuned.