264 episodes

Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

Defense in Depth David Spark

    • Technology

Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

    Recruiting From the Help Desk

    Recruiting From the Help Desk

    All links and images for this episode can be found on CISO Series.
    Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining me is our guest, Sasha Pereira, vp of infrastructure and CISO, WASH.
    In this episode:
    Is working the help desk a great place to get entry level cyber security skills?
    So why is it so often overlooked or even looked down upon? 
    What kind of experience do you need?
    What is the ideal path to break into the cybersecurity industry?
    Thanks to our podcast sponsor, Push Security!

    Prevent, detect and respond to identity attacks using Push Security’s browser agent. Enable Push’s out-of-the-box controls or integrate Push with your SIEM, XDR and SOAR.
    Block phishing attacks, detect session hijacking and stop SSO passwords being exposed. Find out what else the Push browser agent can do at pushsecurity.com.

    • 29 min
    How Do We Build a Security Program to Thwart Deepfakes?

    How Do We Build a Security Program to Thwart Deepfakes?

    All links and images for this episode can be found on CISO Series.
    Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining us is our guest, Russ Ayers, svp of cyber & deputy CISO, Equifax.
    In this episode:
    Are we  seeing AI and LLM rapidly push into what was science fiction into production?
    What happens as our ability to generate realistic sound, video, and images opens the obvious door for indistinguishable fakes from the real thing? 
    How do we keep up as security professionals?
    What are the security implications for this tech hitting the consumer market?
    Thanks to our podcast sponsor, Sonrai Security

    A one-click solution that removes excessive permissions and unused services, quarantines unused identities, and restricts specific regions within the cloud. Later, maintain this level of security by automatically enforcing policies as new accounts, roles, permissions, and services are added to your environment.

    Start a free trial today! sonrai.co/ciso

    • 29 min
    Where Are Secure Web Gateways Falling Short?

    Where Are Secure Web Gateways Falling Short?

    All links and images for this episode can be found on CISO Series.
    Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Vivek Ramachandran, founder, SquareX.
    In this episode:
    Are secure web gateways still an effective tool in the enterprise?
    As the browser has changed a lot in the last decade, are Secure Web Gateways - SWGs still keeping up? 
    Why is this a problem?
    Does anyone have a better solution?
    Thanks to our podcast sponsor, SquareX

    SquareX helps organizations detect, mitigate and threat-hunt web attacks happening against their users in real-time, including but not limited to malicious sites, files, scripts, and networks.

    Find out more at sqrx.com.

    • 28 min
    Understanding the Zero-Trust Landscape

    Understanding the Zero-Trust Landscape

    All links and images for this episode can be found on CISO Series.
    Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining me is our guest Richard Stiennon, chief research analyst, IT-Harvest.
    In this episode:
    In this episode:
    Why do so many vendors claim to offer zero-trust solutions?
    Is that framework even applicable to some product categories? 
    Do your eyes roll when you hear "zero trust solution"?
    What do most people think it is, and what’s the reality?
    Thanks to our podcast sponsor, SquareX

    SquareX helps organizations detect, mitigate and threat-hunt web attacks happening against their users in real-time, including but not limited to malicious sites, files, scripts, and networks.

    Find out more at sqrx.com.

    • 30 min
    Scaling Least Privilege for the Cloud

    Scaling Least Privilege for the Cloud

    All links and images for this episode can be found on CISO Series.
    Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining us is our sponsored guest, Sandy Bird, co-founder and CTO, Sonrai Security.
    In this episode:
    Why does scaling least privilege in the cloud remain challenging?
    Is throwing more people at the problem feasible? 
    How are you managing it?
    What aspects haven’t been considered?
    Thanks to our podcast sponsor, Sonrai Security

    A one-click solution that removes excessive permissions and unused services, quarantines unused identities, and restricts specific regions within the cloud. Later, maintain this level of security by automatically enforcing policies as new accounts, roles, permissions, and services are added to your environment.

    Start a free trial today! sonrai.co/ciso

    • 35 min
    Should CISOs Be More Empathetic Towards Salespeople?

    Should CISOs Be More Empathetic Towards Salespeople?

    All links and images for this episode can be found on CISO Series.
    Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining me is our guest, Emily Heath, general partner, Cyberstarts.
    In this episode:
    How do CISOs feel about sales pitches?
    Do they have legitimate complaints?
    When do these legitimate complaints cross the line to sounding entitled?
    Do CISOs need to show a little more empathy to sales?
    Thanks to our podcast sponsor, SquareX

    SquareX helps organizations detect, mitigate and threat-hunt web attacks happening against their users in real-time, including but not limited to malicious sites, files, scripts, and networks.

    Find out more at sqrx.com.

    • 34 min

Top Podcasts In Technology

TED Tech
TED Tech
Darknet Diaries
Jack Rhysider
Modem Mischief
Keith Korneluk
"World of DaaS"
Word of DaaS with Auren Hoffman
The Tech Talks Daily Podcast
Neil C. Hughes
Apple Events (video)
Apple

You Might Also Like

CISO Series Podcast
David Spark, Mike Johnson, and Andy Ellis
Cyber Security Headlines
CISO Series
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
Johannes B. Ullrich
Cybersecurity Today
ITWC
CyberWire Daily
N2K Networks
Hacking Humans
N2K Networks