app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

David Spark

Geoff Belknap

Steve Zalewski

Defense in Depth promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead our discussion.

Defense in Depth

All links and images can be found on CISO Series
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Heath Renfrow, co-founder, Fenix24.
 
 In this episode:
 
 • Knowing which systems to save first
 • Recovery is a business conversation, not an IT ticket
 • Not all systems are created equal
 • Recovery knowledge as a governed asset
 
 A huge thanks to our sponsor, Fenix24
 
 
 
 Fenix24 is the world's leading breach recovery firm, providing rapid ransomware restoration, full asset visibility, and threat informed hardening. Alongside expert recovery services, Fenix24 delivers ongoing managed protection that secures backups, infrastructure, and critical controls, helping organizations stay resilient, recoverable, and prepared for modern cyber threats. Learn more at fenix24.com.

How Do You Know If Your Backups Will Survive a Ransomware Attack?

What Makes a Successful Security Vendor Demo?
 
 All links and images can be found on CISO Series.
 
 Check out this post from Adam Palmer for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Geoff Belknap. Joining is Ken Beasley, BISO, Kaiser Permanente.
 
 In this episode:
 
 • Show me the problem, not the product
 • Walking in blind
 • Discovery is the demo
 • Define the use case, set the clock
 
 A huge thanks to our sponsor, Fenix24
 

 
 Fenix24 is the world's leading breach recovery firm, providing rapid ransomware restoration, full asset visibility, and threat informed hardening. Alongside expert recovery services, Fenix24 delivers ongoing managed protection that secures backups, infrastructure, and critical controls, helping organizations stay resilient, recoverable, and prepared for modern cyber threats. Learn more at fenix24.com.

What Makes a Successful Security Vendor Demo?

Should You Use Native or 3rd Party Cloud Management Tools?
 
 All links and images can be found on CISO Series.
 
 Check out this post from Steve Zalewski for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is their sponsored guest, Gal Ordo, co-founder and CPO, Native.
 
 In this episode:
 
 • More tools, more problems
 • A gap in design
 • Catching what slips through
 • Competence over complexity
 
 A huge thanks to our sponsor, Native Security
 
 
 
 Native makes secure-by-design inherent to how the cloud operates. It's the control plane for built-in cloud security, unifying and governing native controls, so security intent is defined once and applied consistently across providers. Learn more at native.security.

Should You Use Native or 3rd Party Cloud Management Tools?

How Should We Measure the Performance of a CISO?
 
 All links and images can be found on CISO Series.
 
 Check out this post from the cybersecurity subreddit for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining them is Jason Richards, vp, information security, CHG Healthcare.
 
 In this episode:
 
 • Likability as a career strategy
 • The storytelling gap
 • How the math actually gets done
 • The unofficial scorecard
 
 A huge thanks to our sponsor, ThreatLocker
 

 
 ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.

How Should We Measure the Performance of a CISO?

All links and images can be found on CISO Series.
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Ross Young, co-host, CISO Tradecraft. Joining them is Dan Walsh, CISO, Datavant. Be sure to check out Ross's book Cybersecurity's Dirty Secret: Why Most Budgets Go to Waste.
 
 In this episode:
 
 • Patterns hiding in plain sight
 • Activity vs. advancement
 • The human cost
 • Frameworks about frameworks
 
 A huge thanks to our sponsor, Fenix24
 

 
 Fenix24 is the world's leading breach recovery firm, providing rapid ransomware restoration, full asset visibility, and threat informed hardening. Alongside expert recovery services, Fenix24 delivers ongoing managed protection that secures backups, infrastructure, and critical controls, helping organizations stay resilient, recoverable, and prepared for modern cyber threats. Learn more at fenix24.com.

How to Be Less Busy and More Effective in Cyber

All links and images can be found on CISO Series.
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode, co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining them is Adam Palmer, CISO, First Hawaiian Bank. Be sure to check out David's book, Three Feet from Seven Figures: One-on-One Engagement Techniques to Qualify More Leads at Trade Shows.
 
 In this episode:
 
 • Lead with insight, not persuasion
 • Recognize the opportunity when it arrives
 • Strategy over features
 • Keep it efficient
 
 A huge thanks to our sponsor, Endor Labs
 
 
 
 Discover how AI coding agents are reshaping software supply chain risk in the State of Dependency Management. Original research from Endor Labs shows 49% of dependency versions have known vulnerabilities (and that 34% don't actually exist). Get the report to see how "shadow AI" is reshaping attack surfaces. Learn more at endorlabs.com.

How to Engage With a CISO When They Express Interest

All links and images can be found on CISO Series.
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode, co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining is their sponsored guest, Matt Brown, solutions architect, Endor Labs.
 
 In this episode:
 
 • The development disconnect
 • Functionality first, security second
 • The incentive problem
 • Speed as the common ground
 
 A huge thanks to our sponsor, Endor Labs
 
 
 
 Discover how AI coding agents are reshaping software supply chain risk in the State of Dependency Management. Original research from Endor Labs shows 49% of dependency versions have known vulnerabilities (and that 34% don't actually exist). Get the report to see how "shadow AI" is reshaping attack surfaces. Learn more at www.endorlabs.com.

Who is Responsible for the Conflict Between Security and Developers?

All links and images can be found on CISO Series.
 
 Check out this post by Caleb Sima for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Evan McHenry, CISO, Robinhood.
 
 In this episode:
 
 • The information paradox
 • Setting realistic expectations
 • Prioritization over noise
 • The cart before the horse
 
 Huge thanks to our sponsor, Endor Labs
 
 
 
 Discover how AI coding agents are reshaping software supply chain risk in the State of Dependency Management. Original research from Endor Labs shows 49% of dependency versions have known vulnerabilities (and that 34% don't actually exist). Get the report to see how "shadow AI" is reshaping attack surfaces.

Are Your Security Tools Creating More Work for Your Team?

All links and images can be found on CISO Series.
 
 Check out this post, CISO, Upwind Security, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Geoff Belknap, CISO, LinkedIn. Joining us is Octavia Howell, vp and CISO, Equifax Canada.
 
 In this episode:
 
 • Beyond the quota
 • The hard truth beats the polished bluff
 • Paying for someone else's mistakes
 • Reducing friction, increasing trust
 
 Huge thanks to our sponsor, ThreatLocker
 
 
 
 ThreatLocker takes a deny-by-default approach to endpoint security — controlling what applications can run, what can access data, and what can elevate privileges. Used by organizations that want to reduce attack surface without relying on detection alone. Learn more at threatlocker.com/ciso.

Why Overpromising is a Dangerous Sales Tactic

All links and images can be found on CISO Series.
 
 This week's episode is co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Mark Eggleston, CISO, CSC.
 
 In this episode:
 
 • Breaking trust to test it
 • Technical controls over testing
 • The measurement imperative
 • Fire drills, not gotchas
 
 Huge thanks to our sponsor, Scanner
 
 
 
 All your security logs end up in cloud storage like AWS S3. Scanner makes them searchable in seconds and runs real-time detections directly on that data. No pipelines, no re-ingestion. 100x faster than traditional data lakes, 10x cheaper than SIEMs. Loved by analysts. Built for AI agents. Learn more at scanner.dev.

How Do You Know If Your Backups Will Survive a Ransomware Attack?

Lyt når som helst, hvor som helst

Other podcasts you might like ...