app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Lyt når som helst, hvor som helst 

CISO Series

Defense in Depth, hosted by David Spark, Steve Zalewski, Geoff Belknap, and Edward Contreras, promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead our discussion.

Defense in Depth

All links and images can be found on CISO Series
 
Check out this post by Val Tsanev of CyberRisk Alliance, for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining is Jill Rhodes, svp, CISO, Option Care Health.
 
In this episode:
 
 • The ten-minute test
 • Relevance beats format
 • Price the problem or lose the room
 • Whose meeting is it, really
 
A huge thanks to our sponsor, Teleskope
 
 
 
Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai

Recommendations to Reboot the Security Vendor Pitch

All links and images can be found on CISO Series
 
Check out this post from Joe Head of RELEX Solutions for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining is Mary Rose Martinez, CISO, and vp of digital technology services, Marathon Petroleum Corporation.
 
In this episode:
 
 • Left behind
 • A hypothetical sale
 • The philosophy problem
 • Stop shifting the problems
 
A huge thanks to our sponsor, ActiveState
 
 
 
ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at activestate.com.

Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity

All links and images can be found on CISO Series
 
Check out this post from Caleb Sima of Whiterabbit for the discussion that is the basis of our conversation on this week's episode co-hosted David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Adrian Ludwig, CSO, Rippling.
 
In this episode:
 
 • The messy middle
 • The automatable part
 • Where automation stops
 • The influence gap
 
A huge thanks to our sponsor, ThreatLocker
 

 
ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.

Will AI Replace Detection Roles in Cybersecurity?

What Makes a Good AI Security Deployment?
 
All links and images can be found on CISO Series
 
Check out this post by Chris Matthews of UpGuard for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Peter Liebert, CISO, Salesloft & Clari.
 
In this episode:
 
 • 
Non-determinism changes everything • 
The foundation problem • 
Nobody owns • 
the whole problem • 
The authorization • 
gap 
A huge thanks to our sponsor, CoreView
 
 
 
Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant configurations drift or get tampered with, recovery can take weeks and missed settings can reopen the door. The Cyber Resilience Framework for Microsoft 365 covers the five pillars, harden, govern, detect, respond, recover, and shows exactly where today's tools leave gaps. Download the free practical guide

What Makes a Good AI Security Deployment?

All links and images can be found on CISO Series
 
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Dan Walsh, CISO, Datavant. Joining is our sponsored guest, Elizabeth Nammour, founder and CEO, Teleskope.
 
In this episode:
 
 • Data ownership before automation
 • A shared vocabulary for agent risk
 • Maturing from crawl to run
 • Trust earns automation its place
 
A huge thanks to our sponsor, Teleskope
 
 
 
Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai

The Office Politics of Remediation

All links and images can be found on CISO Series
 
Prevention in cybersecurity is a lot like flossing: everyone knows they should do it, but few do it enough. What's stopping us?
 
Check out this post by Ross Haleliuk of Venture in Security for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Deneen DeFiore, vice president & chief information security officer, United Airlines.
 
In this episode:
 
 • The sponsorship gap
 • One strike and you're out
 • Policy without position
 • Prevention isn't static
 
A huge thanks to our sponsor, CoreView
 
 
 
Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant configurations drift or get tampered with, recovery can take weeks and missed settings can reopen the door. The Cyber Resilience Framework for Microsoft 365 covers the five pillars, harden, govern, detect, respond, recover, and shows exactly where today's tools leave gaps. Download the free practical guide

Why is Preventative Security So Difficult?

All links and images can be found on CISO Series
 
Check out this post by Tomás Maldonado, CISO, NFL, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Will Gregorian, vp of information technology & security, Galileo Medical.
 
In this episode:
 
 • From who to what
 • The manipulation problem
 • Cryptographic accountability
 • The audit gap
 
A huge thanks to our sponsor, ActiveState
 
 
 
ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at ActiveState.com.

Identity and Access Management (IAM) in an Agentic AI World

All links and images can be found on CISO Series
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining is their sponsored guest, Rajan Kapoor, vp, security, Material Security.
 
 In this episode:
 
 • Pre-existing conditions
 • Architecture over rollout
 • Access isn't legitimacy
 • Data has a half-life
 
 A huge thanks to our sponsor, Material Security
 
 
 
 Legacy email security only watches the door. Material protects your entire cloud workspace—email, files, and accounts—as one ecosystem. It's more coverage for less than the cost of a legacy SEG. One price, no surprises: just security that covers the whole surface area. Learn more at material.security.

Protecting AI Agents in O365 and Google Workspace

All links and images can be found on CISO Series
 
 We're evolving fast to secure AI. But are we evolving fast enough to secure WITH AI?
 
 Check out this post by Rinki Sethi, CSO, Upwind Security, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Howard Holton, former CEO, GigaOm. Joining is Adam Glick, CSO, PSG Equity.
 
 In this episode:
 • 
Human-in-the-loop math • 
Should machines decide at all • 
From assistant to autonomous • 
Redefining the security role 
 A huge thanks to our sponsor, Palo Alto Networks
 
 
 
 Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Visit paloaltonetworks.com/cortex/cloud.

Humans Are Bottleneck in a Machine-Speed World

All links and images can be found on CISO Series
 
 There are thousands of cybersecurity vendors across categories. If there's a gap in the market, it's likely not for technical reasons. So, how do you actually find vendors that are a good fit rather than one that just meets technical requirements?
 
 Check out this post by Joe Head of REFLEX Solutions for the discussion that is the basis of our conversation on this week's episode, co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Ajit Girn, CIO, Employment Development Department (EDD).
 
 In this episode:
 
 • Built for vendors, not users
 • Signal versus noise
 • Priced out
 • The elegance gap
 
 A huge thanks to our sponsor, ThreatLocker
 

 
 ThreatLocker takes a deny-by-default approach to endpoint security — controlling what applications can run, what can access data, and what can elevate privileges. Used by organizations that want to reduce attack surface without relying on detection alone. Learn more at threatlocker.com/ciso.

Even With All These Security Vendors We Still Have Glaring Gaps

All links and images for this episode can be found on CISO Series.
 
Check out this post from Yaron Levi for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is Yaron Levi, CISO, Dolby.
 
In this episode:
 
 • A knowledge deficit
 • Talk is cheap
 • What's the difference?
 • Answer the preliminaries
 
HUGE thanks to our sponsor, Scrut Automation
 
 
 Scrut Automation empowers compliance and risk teams of all sizes to build enterprise-grade security programs effortlessly. With powerful automation, AI-driven efficiencies, and seamless integrations, Scrut eliminates compliance debt and enables proactive risk management—helping your business stay secure as it scales. Visit www.scrut.io to learn more or schedule a demo.

Hey Vendors, What Problem Is Your Product Solving?

Lyt når som helst, hvor som helst

Other podcasts you might like ...