app_store_button

google_play_button

DK - Details page - Device banner - 894x1036

Lyt når som helst, hvor som helst 

CISO Series

Defense in Depth, hosted by David Spark, Steve Zalewski, Geoff Belknap, and Edward Contreras, promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead our discussion.

Defense in Depth

All links and images can be found on CISO Series
 
Check out this post by Tomás Maldonado, CISO, NFL, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Will Gregorian, vp of information technology & security, Galileo Medical.
 
In this episode:
 
 • From who to what
 • The manipulation problem
 • Cryptographic accountability
 • The audit gap
 
A huge thanks to our sponsor, ActiveState
 
 
 
ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at ActiveState.com.

Identity and Access Management (IAM) in an Agentic AI World

All links and images can be found on CISO Series
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining is their sponsored guest, Rajan Kapoor, vp, security, Material Security.
 
 In this episode:
 
 • Pre-existing conditions
 • Architecture over rollout
 • Access isn't legitimacy
 • Data has a half-life
 
 A huge thanks to our sponsor, Material Security
 
 
 
 Legacy email security only watches the door. Material protects your entire cloud workspace—email, files, and accounts—as one ecosystem. It's more coverage for less than the cost of a legacy SEG. One price, no surprises: just security that covers the whole surface area. Learn more at material.security.

Protecting AI Agents in O365 and Google Workspace

All links and images can be found on CISO Series
 
 We're evolving fast to secure AI. But are we evolving fast enough to secure WITH AI?
 
 Check out this post by Rinki Sethi, CSO, Upwind Security, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Howard Holton, former CEO, GigaOm. Joining is Adam Glick, CSO, PSG Equity.
 
 In this episode:
 • 
Human-in-the-loop math • 
Should machines decide at all • 
From assistant to autonomous • 
Redefining the security role 
 A huge thanks to our sponsor, Palo Alto Networks
 
 
 
 Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Visit paloaltonetworks.com/cortex/cloud.

Humans Are Bottleneck in a Machine-Speed World

All links and images can be found on CISO Series
 
 There are thousands of cybersecurity vendors across categories. If there's a gap in the market, it's likely not for technical reasons. So, how do you actually find vendors that are a good fit rather than one that just meets technical requirements?
 
 Check out this post by Joe Head of REFLEX Solutions for the discussion that is the basis of our conversation on this week's episode, co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Ajit Girn, CIO, Employment Development Department (EDD).
 
 In this episode:
 
 • Built for vendors, not users
 • Signal versus noise
 • Priced out
 • The elegance gap
 
 A huge thanks to our sponsor, ThreatLocker
 

 
 ThreatLocker takes a deny-by-default approach to endpoint security — controlling what applications can run, what can access data, and what can elevate privileges. Used by organizations that want to reduce attack surface without relying on detection alone. Learn more at threatlocker.com/ciso.

Even With All These Security Vendors We Still Have Glaring Gaps

All links and images can be found on CISO Series
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and George Finney, CISO, University of Texas System. Joining is Sean Walls, CISO, Bob's Discount Furniture.
 
 In this episode:
 
 • Asymmetric accounting
 • Sometimes it really is that easy
 • The spirit of the saying
 • The cheapest way in
 
 A huge thanks to our sponsor, Native Security
 

 
 Native is the Cloud Security Control Plane. It helps enterprises enforce secure-by-design architecture across multi-cloud environments by translating security intent into the cloud provider's built-in controls, previewing impact before rollout, and keeping enforcement aligned as the environment changes.

Is the "Attackers Only Need to Be Right Once" a Misnomer?

What It Takes To Be Successful in Cyber Media
 
 All links and images can be found on CISO Series
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Dave Bittner, producer and host, The CyberWire. Joining is Graham Cluley, host of Smashing Security podcast and Leo Laporte, founder of TWiT (This Week in Tech) and host of Security Now podcast.
 
 In this episode:
 
 • Format follows function
 • The decision gap
 • Practitioner fingerprints
 • Beyond the news cycle
 
 A huge thanks to our sponsor, Palo Alto Networks
 

 
 Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Learn more at paloaltonetworks.com/cortex/cloud/demo.

What It Takes To Be Successful in Cyber Media

All links and images can be found on CISO Series
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Howard Holton, CEO, GigaOm. Joining is Tyler King, senior director - threat operations and response, Sinclair.
 
 In this episode:
 
 • Career insurance
 • In the trenches together
 • Who are you actually selling to?
 • Common sense, uncommon in sales
 
 A huge thanks to our sponsor, Material Security
 
 
 
 Legacy email security only watches the door. Material protects your entire cloud workspace—email, files, and accounts—as one ecosystem. It's more coverage for less than the cost of a legacy SEG. One price, no surprises: just security that covers the whole surface area. Learn more at material.security.

CISOs Buy For Selfish and Politically Risk-Averse Reasons (Not Because Your Product is the Best)

All links and images can be found on CISO Series
 
 We think of cybersecurity as a discipline. But when do ideas like best practices and NIST frameworks change into a system of belief?
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Davi Ottenheimer, principal, Flying Penguin. Joining is Joshua Copeland, director of security, Crescendo.
 
 In this episode:
 
 • Tools, not religion
 • The case for structured discipline
 • The management problem underneath
 • Fix the damn holes
 
 A huge thanks to our sponsor, ThreatLocker
 
 
 
 ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.

Has Cybersecurity Become a Cult?

All links and images can be found on CISO Series
 
 We know human-paced security controls can't be applied to autonomous AI agents. So what needs to change with CNAPP and cloud security?
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Dan Benjamin, vp product - data, identity, and AI security, Palo Alto Networks.
 
 In this episode:
 
 • The detection ceiling
 • A category gap, not a feature gap
 • Resilience by design
 • An insider threat with no face
 
 A huge thanks to our sponsor, Palo Alto Networks
 
 
 
 Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Visit Palo Alto Networks and search cortex cloud.

What Does the Next Generation of Cloud Security Look Like?

All links and images can be found on CISO Series.
 
 Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our guest, Paul Guerra.
 
 In this episode:
 
 • Read the contract
 • How vendors win before the evaluation ends
 • The fallout
 • The real cost
 
 A huge thanks to our sponsor, Native Security
 
 
 
 Native makes secure-by-design inherent to how the cloud operates. It's the control plane for built-in cloud security, unifying and governing native controls, so security intent is defined once and applied consistently across providers. Learn more at native.security.

Identity and Access Management (IAM) in an Agentic AI World

Lyt når som helst, hvor som helst

Other podcasts you might like ...