App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

Mike Johnson

David Spark

and Andy Ellis

Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

CISO Series Podcast

All links and images for this episode can be found on CISO Series.
 
This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Itzik Alvas, co-founder and CEO, Entro.
 
In this episode:
 
 • What to expect when you’re offboarding
 • The threats are coming from inside the organization
 • The risk of stale identities
 • Working backward to risk
 
Thanks to our podcast sponsor, Entro!
 

 
Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

Can’t Our Employees Just Go Back to Stealing Pens?

All links and images for this episode can be found on CISO Series.
 
This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Daniel Daraban, senior director of product management, Bitdefender.
 
In this episode:
 
 • Practice makes perfect
 • Shaming doesn’t help anyone
 • Cybersecurity is a flat circle
 • Building the bridge
 
Thanks to our podcast sponsor, Bitdefender!
 

 
Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services. Learn more at Bitdefender.com.

Why Bother Helping Users When We Can Complain About Them?

All links and images for this episode can be found on CISO Series.
 
This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Yabing Wang, VP and CISO, Justworks.
 
In this episode:
 
 • Building a path to action
 • Cracking the EOL conundrum
 • The burning platform question
 • Uncertainty is our only constant
 
Thanks to our podcast sponsor, Entro!
 

 
Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

Ewww! How Long Has This Router Been in the Fridge?

All links and images for this episode can be found on CISO Series.
 
This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our guest, Brett Perry, CISO, Dot Foods.
 
In this episode:
 
 • A new MDR policy
 • Staying on top of the technical debt cycle
 • Beating retention struggles
 • In the gully of SOAR
 
Thanks to our podcast sponsor, Tines!
 

 
Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.

I Support Open Source as Long as I Don't Have to Invest in It

All links and images for this episode can be found on CISO Series.
 
This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is George Finney, CISO, The University of Texas System and author of Project Zero Trust.
 
In this episode:
 
 • Aligning on privacy
 • Bringing Zero Trust to OT
 • Restores and resilience
 • Focus on what you can control
 
Thanks to our podcast sponsor, Vanta!
 

 
Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over 350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you’ll streamline compliance— and never duplicate your efforts.

4th Party Data Breach? We Can Barely Catch the 1st Party Ones!

All links and images for this episode can be found on CISO Series.
 

 
This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Rinki Sethi, vp and CISO, BILL. Joining us is our sponsored guest, Lamont Orange, CISO, Cyera.
 
 
 
This episode was recorded in front of a live audience at Cyera’s first DataSec conference (November 2024) in Dallas. Thanks to Adam Holland, CISO, Wendy's, Farray Rahman of Vibrant Emotional Health and 988 Lifeline, and Biji John of USAA for our questions in the episode.
 

 
In this episode:
 
 • Shifting from traditional recovery
 • Do you know where your data is?
 • The science of tradeoffs
 • How do you measure security culture?
 
Thanks to our podcast sponsor, Cyera!
 

 
 Cyera’s data security platform discovers your data attack surface, protects sensitive data, governs data access, monitors critical data events, and quickly responds to data risks. Cyera’s agentless design allows us to deploy within minutes across any environment and provide a 95% precision rate through our AI-powered classification engine. Learn more at Cyera.io

As Long as We Keep Moving the Goalposts, We Have a Great Security Culture (LIVE in Dallas, TX)

I’m proud and excited to announce the launch of the CISO/Security Vendor Relationship Podcast based on the series of articles and videos I produced that examine the relationship between security buyers and sellers. That series was heavily inspired by the writings, posts and insane engagement that Mike Johnson, CISO of Lyft, continues to drive on LinkedIn. And what’s even more awesome, Mike agreed to be my co-host! For our first episode, Mike and I invite Dwayne Melançon (@ThatDwayne), CTO, Innovyze. In this episode we have:
 
 • 10-second security tips.
 Tidal claims “breach” when they’re accused of faking streaming numbers Google Chrome switches its “secured” website alert to one of “not secured” Juro introduces a privacy policy that anyone can read. • How security vendors helped me this week
 • How to improve your pitch
 • And ASK a CISO
 
The written content for this podcast was first published on Security Boulevard.

A Privacy Policy Written in English (Introducing the CISO/Security Vendor Relationship Podcast with Mike Johnson and David Spark)

After tackling some dodgy audio issues, we have released the second episode of the CISO/Security Vendor Relationship podcast with our guest Kip Boyle (@KipBoyle), CEO of Cyber Risk Opportunities. Subscribe to Kip’s podcast. As always, the show is hosted by myself, David Spark (@dspark), Founder, Spark Media Solutions and Mike Johnson, CISO, Lyft. In this episode, “Security Vendors Buy Their First Pack of Condoms”:
 
 • 10-second security tip.
 • Amazon Alexa hacked or just a failure of the technology?
 • Does rebooting your router help or is it just security theater?
 • Will automation replace entry-level SOC jobs and if so, how do we bring in new security talent?
 • How security vendors helped me this week.
 • Security vendors padding their pitches.
 • Mitigating new risks or getting back to security basics?
 
 The written content for this podcast was first published on Security Boulevard. Creative Commons photo attribution to Peter Rivera.

Security Vendors Buy Their First Pack of Condoms

Don’t bother trying to craft a potentially clever, funny and adorable email that you hope will tickle a security practitioner; it’s simply not going to work. When it comes to security pitches, practitioners just want the facts. While humor is appreciated, a cold email pitch is not the time to showcase your creative writing skills. As always, the show is hosted by me, David Spark (@dspark), founder, Spark Media Solutions and Mike Johnson, CISO, Lyft. Our guest this week is Jeremiah Grossman (@jeremiahg), CEO, Bit Discovery. On this week’s CISO/Security Vendor Relationship podcast, You’ll discover that InfoSec truism and:
 
 • 10-second security tip (do you have these security controls in place?).
 • The correct pronunciation of CISO (and whether anyone cares).
 • Consumers and activists issuing lawsuits in the name of GDPR and why that’s a good thing for the future of GDPR.
 • The increasing cost of breaches.
 • A new method to get a security practitioner’s time (Is the idea so crazy it will work? Or do we just need more crazy ideas?).
 • How a security vendor helped me this week.
 
 The written content for this podcast was first published on Security Boulevard.

CISOs Don’t Care About Your Funny Sales Pitch

On this week’s episode of the CISO/Security Vendor Relationship podcast we ask, “What good is a security alert if there’s no actionable item?” As always, the show is hosted by me, David Spark (@dspark), founder, Spark Media Solutions and Mike Johnson, CISO, Lyft. Our guest this week is Wendy Nather (@wendynather), director, advisory CISOs, Duo Security. On this episode, you’ll learn:
 
 • Flex your incident response muscles.
 • Does your cybersecurity policy change around high-profile events?
 • What’s the definition of cybersecurity and why do so many people care?
 • How a security vendor helped me a long time ago, but Mike thought about them this week.
 • A couple of vendors submit their pitches for a critique. One is confusing and one is almost perfect.
 • And a couple of “Ask a CISO” questions.
 
 The written content for this podcast was first published on Security Boulevard.

I Support Open Source as Long as I Don't Have to Invest in It

Lyt når som helst, hvor som helst

Other podcasts you might like ...