Have you considered your team’s cognitive biases when selecting tools? – Dustin Sachs – CSP #196

October 15, 2024

What if there was more to making those impactful decisions that you haven’t considered? Let’s talk about how being open minded can directly impact the success of tool selection and optimization in your company. Is a SOC report enough or are there other criteria needed to make that risk based decision? Let’s discuss cognitive biases in tool select...

Risk Assessments/Management

Tokyo DriftSec: Who is going First? Who is going Smooth? – Lisa Landau – CSP #195

October 8, 2024

Let’s talk to our favorite Tokyo security leader about how she has experienced tool selection across the world. To be risk adverse or not to be risk adverse. What a question! Segment Resources: https://www.youtube.com/watch?v=BdFzJxSemKo

Threat Management

What are your pet peeves when it comes to tool selection? – Timothy Ball – CSP #194

October 1, 2024

Hear from expert TimBall, CISO for NGO-ISAC, on his experiences in the industry and how he advises his members on finding the right tool. Especially when it comes to making sure the tool isn’t a ‘shiny object’ purchase but actually addressing your organizations underlying issues and bringing value! Bonus, let’s talk about election security! Segme...

Incident Response

Tried and True. Going back to basics with Incident Response – Levone Campbell – CSP #193

September 24, 2024

Let’s talk about how regardless of your organizations data footprint being in the cloud or on prem, or if you’re a billion dollar organization or smaller, if the adversaries want in, they will find a way. Don’t fall victim because of bad cyber hygiene but instead work your experiences, your leadership, and train your people to limit exposure. Hear ...

Incident Response

The vCISO’s role in Incident Response Accountability – William Klusovsky – CSP #192

September 17, 2024

Let’s talk about the vCISO’s approach to Incident Response advisory with clients; particularly small and medium sized businesses (SMB). How can your cyber liability insurance support your organization outside of when an incident occurs? We will discuss strategies SMBs can take to strengthen their IR plans while keeping in mind their business need...

Incident Response

CISO & Legal: Partnerships Needed – Joe Sullivan – CSP #191

September 10, 2024

Listen to the importance of legal relationships and interaction with the CISO and security program. Jess and Joe talk about the need for legal to understand the security team's day to day and also what incident response means to your organization. Bringing your legal reps into the folds when a breach happens is too late! Work as a team early to ma...

Incident Response

Todd’s Moving On after 185+ Episodes – Future CISO Vision – Todd Fitzgerald – CSP #190

September 3, 2024

Todd Fitzgerald will be moving on from the CISO STORIES podcast after 185+ episodes, which was initiated almost 4 years ago following the publication of the #1 Best-Selling CISO COMPASS book, which has guided 1000’s of emerging, current, experienced, and new CISOs and their teams in their journey to protect our organizations’ and nation’s informati...

Vulnerability Management

Vulnerability Management: Tips and Techniques – John Kellerhals – CSP #189

August 27, 2024

Vulnerabilities are the ‘front doors’ for attackers to infiltrate our systems and a key process organizations must get right into order to protect our systems and information assets. Join us as we discuss vulnerability management, identification of assets, prioritization, threat intelligence, leveraging tools, desired vulnerability product features...

Vulnerability Management

Are You Vulnerable to Deep Fakes? Controlling the Risk – Paul Neff – CSP #188

August 20, 2024

Rapid advancement in the sophistication and availability of "deepfake" technology enabled by generative AI - the ability to generate convincing multimedia and interactive representations indistinguishable from the real thing - presents new and growing challenges for CISOs seeking to combat fraud, intrusion, disinformation, and other adverse consequ...

Vulnerability Management

Focus, Breadth, or Depth: Reduce Vulnerabilities with Less $ – Julian Mihai – CSP #187

August 13, 2024

Managing vulnerabilities is a large, complex problem that can't be completely fixed. And still, many cybersecurity organizations continue with a traditional approach that attempts to address all vulnerabilities, spreading staff too thin and increasing exploitation windows. With a small set of vulnerabilities being the cause of most of the breaching...

Leadership

No One Succeeds Alone! Why You Must Have an Informal Network – Gene Scriven – CSP #186

August 6, 2024

Join us as we discuss how critically important it is for a CISO to establish, maintain, and frequently leverage in informal network. With almost daily changes in the threat landscape across all industries, it's critical to have informal but trusted resources to rely on for advice, information, and just overall "sounding board" opportunities.

Have you considered your team’s cognitive biases when selecting tools? – Dustin Sachs – CSP #196

Tokyo DriftSec: Who is going First? Who is going Smooth? – Lisa Landau – CSP #195

What are your pet peeves when it comes to tool selection? – Timothy Ball – CSP #194

Tried and True. Going back to basics with Incident Response – Levone Campbell – CSP #193

The vCISO’s role in Incident Response Accountability – William Klusovsky – CSP #192

CISO & Legal: Partnerships Needed – Joe Sullivan – CSP #191

Todd’s Moving On after 185+ Episodes – Future CISO Vision – Todd Fitzgerald – CSP #190

Vulnerability Management: Tips and Techniques – John Kellerhals – CSP #189

Are You Vulnerable to Deep Fakes? Controlling the Risk – Paul Neff – CSP #188

Focus, Breadth, or Depth: Reduce Vulnerabilities with Less $ – Julian Mihai – CSP #187

No One Succeeds Alone! Why You Must Have an Informal Network – Gene Scriven – CSP #186

Leadership News & Analysis

Microsoft takes down websites used to create 750 million fraudulent accounts

Zebra Technology’s Mike Zachman: Be a business enabler, not a hurdle

Lenovo’s Skip Mann: Exceptional security leadership like being a human Swiss Army knife

1,000 CISOs strong: How cross-company collaboration strengthens enterprise cybersecurity

Host Todd Fitzgerald reflects on 100 episodes of the CISO Stories podcast