Breaches & Brews

Rivial Data Security
  • 5.0 (2)
  • Business
  • Updated Bimonthly

The Rivial Data Security team discusses all things cybersecurity while enjoying their favorite brews. We keep it fun and laidback with special guests, personal stories, and some great advice for anyone managing a cybersecurity program.

  1. Aug 5

    The State of Credit Union Cybersecurity: What The NCU-ISAO Is Hearing

    Rivial Data Security sits down with Brian Hinze, MBA, President & CEO and Founder of the National Credit Union ISAO (NCU-ISAO), for a candid conversation on what he's hearing from credit union leaders and security practitioners across the country. Whether you're a CISO managing day-to-day risk or a CEO making strategic investment decisions, Brian breaks down what's changed in 2026 — from NCUA exam expectations to AI-driven threats — and where credit unions should be focusing their energy now. Key Takeaways: - What Brian is hearing from the community right now about cybersecurity - What are the NCUA supervisory priorities for 2026 - Where AI is creating both opportunity and exposure for credit unions and their members - What credit unions should prioritize now to build cyber resilience into 2027 and beyond On-Demand Webinar

  2. Jun 29

    The vCISO Buyer's Guide for Credit Unions, Banks and Other Highly Regulated Organizations

    The word vCISO gets slapped on almost everything, which makes it hard to tell a strategic security leader from someone who will just run tools. In this episode, Randy Lindberg (CEO of Rivial Security) and John Moeller (co-founder of CyberAssurance) walk through how to choose the right virtual CISO for a credit union, community bank, or other regulated institution. They cover the signals that say you need a vCISO instead of an MSSP, what should and should not be in scope, why read-only access and independence matter, how much industry and exam experience counts, the red flags in a sales pitch, how to budget based on risk in dollars, and how to know within 90 days whether it is working. A clear, practical session for lean security teams under exam pressure. Start with a free cyber risk assessment of five critical systems, no sales call required: https://rivialsecurity.com/free-cyber-risk-assessment

  3. May 28

    Building AI Governance from Scratch: NIST AI RMF, Shadow AI, and Board Reporting

    78% of organizations now use AI in at least one business function, but most haven't gone beyond putting a basic AI policy in place. In this workshop, Rivial Data Security founder Randy Lindberg and senior consultant Molly Ford walk through a practical approach to AI governance using the NIST AI Risk Management Framework. Topics include why AI risk belongs inside your existing cyber risk program instead of a separate silo, the eight elements you need to properly measure AI risk, how to catalog AI systems when tools like Copilot and Gemini are already embedded in your environment, how to combat shadow AI through smarter procurement and change management, reporting AI risk to the board using quantitative framing instead of heat maps, and the key differences between the NIST AI RMF and the Financial Services AI RMF. Whether you're just getting started or looking to mature your program, this session gives you a realistic first step.

  4. May 13

    Two NCUA Cybersecurity Examiners Tell Us What They're Looking For in 2026

    We sat down with two NCUA Regional Information Security Officers to ask them point blank: what are you finding in exams, what do you want credit unions to fix, and what does "good" actually look like? Charles has been with the NCUA for 27 years. Murray left the agency, worked at a credit union, and came back. Between them, they've examined institutions from $50 million to $13 billion in assets. They don't hold back. In this episode, they walk through the most common deficiencies from 2025 exams (access controls, MFA gaps, vendor incident response), explain why expressing cyber risk in dollar terms is the single most important thing you can do for your board, and share what they're actually looking for on AI governance right now - even though the NCUA itself is still catching up. If you're prepping for an exam, presenting to your board, or trying to figure out what to do about AI, this is the episode. Resources we mentioned:  📘 How to Measure Anything in Cybersecurity Risk - Douglas Hubbard & Richard Seiersen  📊 Free Cyber Risk Assessment - rivialsecurity.com/cyber-risk-assessment  📄 AI Risk Management Whitepaper - rivialsecurity.com/resources  📋 AI Governance Assessment (NIST AI RMF) - rivialsecurity.com/resources  👥 Private Community for CU & Bank Leaders - rivialsecurity.com/community 🔗 rivialsecurity.com  📅 Book time with our team: rivialsecurity.com/contact-us #NCUA #CreditUnion #CyberRisk #CreditUnionPodcast #AIGovernance #RiskManagement #BoardReporting

  5. Apr 9

    Navigating AI and Security: Strategies for Credit Unions in a Shifting Threat Landscape

    In this insightful panel discussion, host Taylor Wells is joined by cybersecurity and IT leaders Will Reed and Kevin, representing billion-dollar credit unions from across the country. Together, they explore the pressing challenges and opportunities facing the financial sector, from the realities of AI adoption and evolving threat landscapes to the practicalities of building security teams, communicating cyber risk to boards, and staying audit-ready year-round. The conversation offers candid perspectives on managing digital transformation, preparing for NCUA exams, balancing member experience with security, and fostering a risk-aware culture—making this episode a must-listen for credit union professionals seeking actionable insights in an era of rapid technological change.

  6. Mar 6

    Mastering Third-Party Risk: Deep Dive into Vendor Cybersecurity Management

    In this insightful episode, Lucas Hathaway, CRO @ Rivial Security takes listeners through the essential steps of maturing a third-party risk management program, with a special focus on cybersecurity reviews and vendor due diligence. Discover why regulators like the NCUA and FDIC are zeroing in on third-party risks and learn proven strategies for onboarding, classifying, and assessing vendors. Lucas Hathaway, CRO @ Rivial Security shares valuable stories from the field (including lessons learned from recent breaches), explains how to utilize questionnaires and SOC reports effectively, and offers practical tips for ongoing monitoring, incident response, and complementary user entity control (CUEC) testing. With actionable frameworks, relatable anecdotes, and free resources, this episode is a must-listen for financial institutions, security leaders, and anyone navigating the complexities of third-party vendor management.

  7. Feb 17

    Cyber Risk, NCUA Compliance, and Board Engagement: Insights from CU Intersect 2026

    Join Jonathan Taylor, Shirley Sandwith, and guest Keaton Tanzer, Sales Manager at Rivial Security, as they broadcast from the CU Intersect 2026 conference in vibrant New Orleans.  In this episode, we dive deep into the evolving world of data security and compliance for credit unions, from navigating regulatory scrutiny and examiner trends to adopting flexible frameworks for organizations of all sizes.   Keaton shares practical strategies on cyber risk assessment, the importance of customizing compliance processes, and how to effectively communicate security initiatives to board members.  Plus, discover how smaller credit unions can stay ahead without being overwhelmed and why fostering real conversations at the board level is critical for successful governance.   Packed with actionable insights, this discussion is a must-listen for anyone in the credit union or financial institution space looking to innovate securely and keep their organization audit-ready.   Featured Topics: - Recent regulatory shifts and examiner expectations   - Cyber risk assessment tailored for every credit union   - Best practices for board reporting and quantitative analysis   - How to prepare for audits and leverage industry partnerships   - Resources and support for credit unions of all sizes Tune in for expert advice, industry stories, and a fresh perspective on cyber risk and compliance!

  8. Feb 5

    Reporting Cybersecurity to the Board: Metrics, Communication, and Culture Change

    In this episode, hosts Taylor Wells and Lucas Hathaway, CRO @ Rivial Security are joined by Randy, founder and CEO of Rivial Security, to dive into the complexities of reporting cybersecurity to boards of directors—especially in banks and credit unions. The team discusses the importance of tailoring reports to non-technical board members, balancing regulatory and audit requirements with actionable insights, and fostering board engagement through meaningful metrics (including the shift toward quantitative, dollar-based cyber risk reporting). Listeners will hear practical advice on the length and frequency of board reports, how to train and guide boards to ask the right questions, and strategies for transitioning organizations from vague, high-medium-low risk reports to data-driven conversations about business impact and ROI. The episode answers real audience questions and shares insights from hundreds of board meetings, revealing common pitfalls and proven techniques for building trust, securing resources, and moving cybersecurity conversations beyond technical jargon into true resilience planning. Perfect for CISOs, risk leaders, and anyone responsible for cybersecurity board reporting, this episode delivers actionable takeaways, relatable stories, and expert guidance to help you elevate your next board presentation.

See All (32)

5
out of 5
2 Ratings

About

The Rivial Data Security team discusses all things cybersecurity while enjoying their favorite brews. We keep it fun and laidback with special guests, personal stories, and some great advice for anyone managing a cybersecurity program.

Information

  • Creator
    Rivial Data Security
  • Years Active
    2021 - 2026
  • Episodes
    32
  • Rating
    Clean
  • Copyright
    © 2026 Rivial Data Security
  • Show Website
    Breaches & Brews