Maximizing Cyber Liability Insurance: Risk, Relationships & Renewal Strategies – Mandy Andress – CSP #211

April 14, 2025

Mandy Andress joins our show to discuss leveraging cyber liability insurance for risk reduction. They explore the importance of strong broker relationships and key steps for selecting or renewing a policy—starting with assessing organizational needs. Learn strategies to lower premiums while increasing coverage. Segment Resources: https://www.elast...

Incident Response

Breach by the Dozen: Incident Response Lessons from the Field – Mike Miller – CSP #210

March 10, 2025

In this episode of the CISO Stories Podcast, we’re joined by Mike Miller, a seasoned penetration tester and audit and compliance SME, to explore the real-world impact of incident response controls. From technical to managerial and physical safeguards, Mike shares eye-opening stories from the field—including how he once penetrated a network with not...

AI/ML

AI Governance: Navigating Risks, Frameworks, and the Future – Rock Lambros – CSP #209

February 10, 2025

In this episode, we sit down with author and AI expert Rock Lambros to explore the evolving landscape of AI governance. We discuss the risks of AI chatbots, comparing OpenAI and DeepSeek, and examine current and emerging governance frameworks. As AI adoption accelerates, organizations must determine the right guardrails and critical questions to as...

Privacy

Privacy Under Siege: Navigating Data Theft and the BadBox Threat – Gavin Reid – CSP #208

January 13, 2025

In this episode, we sit down with experienced CISO Gavin Reid to explore the escalating online threats to privacy, focusing on adversaries and companies illicitly scraping website data for profit. We dive into the implications of such unauthorized data collection and its impact on individual and organizational privacy. Reid also shares insights fro...

Cloud Security

Cloud Security in Higher Education: Balancing Trust and Risk – Sheena Thomas – CSP #207

December 31, 2024

In this episode of CISO Stories, Jess Hoffman and Sheena Thomas explore the challenges of cloud security in higher education. They discuss trust issues with cloud providers, the importance of understanding data sensitivity, and navigating regulatory compliance. Sheena highlights the vulnerabilities educational institutions face, the value of incide...

Cloud Security

Cybersecurity in the Cloud: Lessons for Businesses and Beyond – Melina Scotto – CSP #206

December 24, 2024

Jessica Hoffman and Melina Scotto discuss the evolution of cybersecurity, focusing on cloud security, business responsibilities, and the importance of basic cyber hygiene. They highlight the role of communication, consulting, and integrating security into business operations, concluding with advice for future cybersecurity professionals. This segm...

Cloud Security

Cloud Security for SMBs: Strategies, Risks, and Resources – Adam John – CSP #205

December 17, 2024

Jess and Adam discuss cloud security challenges for SMBs, emphasizing strategic planning, compliance with regulations like CMMC, and vendor due diligence. They highlight common pitfalls like the illusion of security and inadequate staffing while offering cost-effective solutions like virtual CISOs. Practical tips help SMBs secure their data, naviga...

Cloud Security

Cloud Security at Risk: Tackling Misconfigurations Head-On – Nadia Mazzarolo – CSP #204

December 10, 2024

In this episode, we dive into the critical role of proper configurations in cloud environments and why misconfigurations remain the leading cause of security breaches. From overly permissive access controls to unencrypted data stores and default credentials left unchanged, we explore real-world examples that adversaries exploit. Learn how organizat...

Cloud Security

Cloud Security: Lessons Learned and Applied to Emerging Tech – Bertrum Carroll – CSP #203

December 3, 2024

Bertrum Carroll dives into the evolution of cloud service adoption, comparing early concerns—like data storage, access, and usage—to current apprehensions about AI. We explore how leadership can empower teams with the right training to harness technology effectively. Learn why understanding the shared responsibilities between providers and customer...

OT Security

Identity Challenges in Manufacturing – Tammy Klotz – CSP #202

November 26, 2024

In this episode, we’re joined by Tammy Klotz, a 3x CISO in the manufacturing industry, to explore identity security challenges in manufacturing environments. Tammy discusses the differences in access management for frontline workers versus knowledge workers, touching on the unique devices and role-based training requirements. Tune in to learn how t...

Zero trust

Identity Security: Navigating the New Normal with Dr. Sean Murphy – Sean Murphy – CSP #201

November 19, 2024

In this episode of CSP, we sit down with Dr. Sean Murphy, the CISO of BECU, one of Seattle’s largest credit unions, to discuss the shifts in identity security brought on by the COVID-19 pandemic. Dr. Murphy highlights how Zero Trust architecture became crucial for verifying internal users, especially as remote work became the norm. He shares insigh...

Maximizing Cyber Liability Insurance: Risk, Relationships & Renewal Strategies – Mandy Andress – CSP #211

Breach by the Dozen: Incident Response Lessons from the Field – Mike Miller – CSP #210

AI Governance: Navigating Risks, Frameworks, and the Future – Rock Lambros – CSP #209

Privacy Under Siege: Navigating Data Theft and the BadBox Threat – Gavin Reid – CSP #208

Cloud Security in Higher Education: Balancing Trust and Risk – Sheena Thomas – CSP #207

Cybersecurity in the Cloud: Lessons for Businesses and Beyond – Melina Scotto – CSP #206

Cloud Security for SMBs: Strategies, Risks, and Resources – Adam John – CSP #205

Cloud Security at Risk: Tackling Misconfigurations Head-On – Nadia Mazzarolo – CSP #204

Cloud Security: Lessons Learned and Applied to Emerging Tech – Bertrum Carroll – CSP #203

Identity Challenges in Manufacturing – Tammy Klotz – CSP #202

Identity Security: Navigating the New Normal with Dr. Sean Murphy – Sean Murphy – CSP #201

Leadership News & Analysis

Microsoft takes down websites used to create 750 million fraudulent accounts

Zebra Technology’s Mike Zachman: Be a business enabler, not a hurdle

Lenovo’s Skip Mann: Exceptional security leadership like being a human Swiss Army knife

1,000 CISOs strong: How cross-company collaboration strengthens enterprise cybersecurity

Host Todd Fitzgerald reflects on 100 episodes of the CISO Stories podcast