App Store

Google Play

DK - Details page - Device banner - 894x1036

Nyd den ubegrænsede adgang til tusindvis af spændende e- og lydbøger - helt gratis

Lyt når som helst, hvor som helst 

David Spark

Geoff Belknap

Steve Zalewski

Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

Defense in Depth

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Itai Tevet, CEO, Intezer.
 
In this episode:
 
 • Build for what you can handle
 • Rethinking alerts
 • Building trust into your system
 • Seeing the bigger picture
 
Thanks to our podcast sponsor, Intezer
 

 
 Intezer’s AI-driven solution automates alert triage and investigations, cutting through the noise to highlight serious threats. By integrating with your security tools, it escalates only 4% of alerts for fast remediation, helping SOC teams focus on what matters. Learn more at intezer.com today!

How Can We Fix Alert Fatigue?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Ross Young, CISO-in-residence, Team8, and Jeroen Schipper, CISO, Gemeente Den Haag.
 
In this episode:
 
 • Creating authority
 • Don’t reinvent the wheel
 • Accountable for quality
 • Make the distinction clear
 
Thanks to our podcast sponsor, Fenix24
 

 
You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works.

CISOs DO Own the Risk

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Joining us is our sponsored guest, Rob Allen, chief product officer, ThreatLocker.
 
In this episode:
 
 • The promise and perils of LLMs
 • A boon for defenders
 • Raising the bar
 • Muddying the waters
 
Thanks to our podcast sponsor, ThreatLocker
 

 
 ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Is AI Benefiting Attackers or Defenders?

All links and images for this episode can be found on CISO Series.
 
Check out this post by Marc Ashworth, CISO at First Bank for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Shawn Bowen, vp, deputy CISO - Gaming, Microsoft. Joining us is Ken Athanasiou, CISO, VF Corporation.
 
In this episode:
 
 • Frustration is a two-way street
 • Sales is data driven
 • Give customers the tools they need
 • Start a conversation
 
Thanks to our podcast sponsor, Noma Security
 

 
Secure your entire Data & AI Lifecycle—from development to production and classic data engineering to GenAI. Noma’s full-lifecycle platform delivers seamless protection against risks like misconfigured data pipelines, malicious models, and adversarial AI attacks, empowering AppSec teams with complete visibility, security, and compliance—without disrupting data and AI teams’ workflows.

Do We Want CISOs Dictating How Salespeople Should Engage?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is Gaurav Kapil, CISO, Bread Financial.
 
In this episode:
 
 • It helps to have a vision
 • The benefit of planning
 • It’s never too early to start
 • Don’t make rash decisions
 
Thanks to our podcast sponsor, ThreatLocker
 

 
 ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

If and When Should a CISO Have a Long Term Security Plan?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Joining us Sneha Parmar, information security officer, Lufthansa Group Digital Hangar.
 
In this episode:
 
 • Build the foundation
 • Building at scale
 • Excelling at boring
 • Knowing what you’ve got is half the battle
 
Thanks to our podcast sponsor, Fenix24
 

 
You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works.

The Hardest Problems in Security Aren't "Security Problems"

Just a quick welcome message to this weekly show covering controversial and confusing topics in cybersecurity.

Welcome to Defense in Depth

Defense in Depth is part of the CISO Series network which can be found at CISOSeries.com.
 
What are the most important metrics to measure when building out your security program? One thing we learned on this episode is those metrics change, as your security program matures.
 
This episode of Defense in Depth is co-hosted by me, David Spark (@dspark), the creator of CISO Series and Allan Alford (@AllanAlfordinTX), CISO at Mitel. Our guest is my co-host of the other show, Mike Johnson, CISO of Lyft.
 

 Fluency's correlation and risk scoring technology combined with their approach of using pseudonyms in place of certain PII data greatly facilitates your organization's path towards compliance. Over time, machine learning and artificial intelligence algorithms detect anomalies at an impressive level of scalability. Run Fluency as a standalone or integrate it into your existing SIEM. Learn more by visiting us at booth #4529 at the RSA® Conference 2019. On this episode of Defense in Depth, you'll learn: • There is no golden set of security metrics.
 • Metrics you use to measure your security program this year won't necessarily be the same ones you use next year.
 • Use the NIST model to determine your security program maturity.
 • Unlike B2C, B2B companies can use metrics to build a closer tie between security and the business.
 • Regulations and certifications is one easy way to align security with the business.

Security Metrics

Will the privacy outcry and new regulations limit companies’ abilities to do business, or will it span a whole new industry? We discuss building a business in the new age of privacy regulations on this week’s Defense in Depth.
 

 
Chris Jordan, CEO, Fluency Security
 
This episode of Defense in Depth is co-hosted by me, David Spark (@dspark), the creator of CISO Series and Allan Alford (@AllanAlfordinTX), CISO at Mitel. Our sponsored guest is Chris Jordan, CEO of Fluency Security.
 Thanks to this week’s podcast sponsor, Fluency Security: Fluency’s correlation and risk scoring technology combined with their approach of using pseudonyms in place of certain PII data greatly facilitates your organization’s path towards compliance. Over time, machine learning and artificial intelligence algorithms detect anomalies at an impressive level of scalability. Run Fluency as a standalone or integrate it into your existing SIEM. Learn more by visiting us at booth #4529 at the RSA® Conference 2019. On this episode of Defense in Depth, you’ll learn: • While new privacy regulations may hamper a company’s ability to collect and sell any data they want, they don’t necessarily stifle the economy. For example, the introduction of HIPAA regulations spawned a growing industry.
 • DuckDuckGo is a search engine that doesn’t collect your browsing history to determine your search results.
 • Even if you are very protective of your data, the people around you probably aren’t. Through relationships and triangulation a profile of you, sans your personal data, can still be created.
 • Because of this ability to triangulate data, your employees’ personal data, outside of work can become a risk to your company.

Privacy

Defense in Depth is part of the CISO Series network, which can be found at CISOseries.com.
 
Security for the business affects everyone and all departments. On this episode of Defense in Depth we discuss the values and difficulties of building an information security council. 
 

 
 Check out this post and discussion for the basis of our conversation on this week's episode which is co-hosted by me, David Spark (@dspark), the creator of CISO Series and Allan Alford (@AllanAlfordinTX), CISO at Mitel. Our guest is Nick Espinosa (@NickAEsp), host of nationally syndicated show The Deep Dive with Nick Espinosa, and his daily podcast is called Nick's Nerd News Daily. Find Nick on Facebook, YouTube, and his articles on Forbes.
 
 
 Thanks to this week’s podcast sponsor, Fluency Security: 

 Fluency's correlation and risk scoring technology combined with their approach of using pseudonyms in place of certain PII data greatly facilitates your organization’s path towards compliance. Over time, machine learning and artificial intelligence algorithms detect anomalies at an impressive level of scalability. Run Fluency as a standalone or integrate it into your existing SIEM. Learn more by visiting us at booth #4529 at the RSA® Conference 2019. On this episode of Defense in Depth, you’ll learn: • A good starting point for building an information security council is to develop a business continuity and disaster recovery plan with all departments and stakeholders.
 • Understand the risk tolerance of each division.
 • A well-informed information security council can often benefit from less security training.
 • The number one battle to develop an InfoSec council is never technical. It is always cultural.
 • Need to create a culture of not shaming people for making mistakes that compromise security. You want employees to feel free to speak up if they do make a mistake.

The Hardest Problems in Security Aren't "Security Problems"

Lyt når som helst, hvor som helst

Other podcasts you might like ...