Responsible Disclosure

Zafran Security

Welcome to Responsible Disclosure, the podcast that puts the business of cyber on the record. Hosted by Zafran's Nate Rollings (CISO) and Steve Cobb (Field CISO), each episode features founders, CEOs, CISOs, and investors talking through how they actually built what they built, separating what's real from what's noise, and revisiting the pressure-call decisions that never show up in the postmortem.

Episodes

  1. Oct 15

    Schellman's Avani Desai: Compliance Is a Byproduct of Security

    On this episode of Responsible Disclosure, we sit down with Schellman CEO Avani Desai to talk about 25 years in cybersecurity audit, from her start as a pen tester to leading one of the largest specialized assessment firms for cybersecurity, privacy, and sustainability, and why compliance should be a byproduct of real security. We get into Schellman research showing 74% of companies believe they can pass an AI assessment while about 27% have the controls in place, what the rise of fast, low cost SOC 2 reports means for the trust behind them, the red flags to listen for when choosing an auditor, and why continuous auditing is finally within reach after decades as a pipe dream. We also talk about how vulnerability management became a check the box control, why fear drives more behavior change than incentives, and how the US data economy produces trillion dollar companies. Plus: the story of how Avani got here, and the hyped term she says nobody can define. Chapters: 00:00 Intro 00:36 Origin Story: From India to the American Dream 02:48 From Pen Tester to the Big Four 04:28 What Schellman Does 05:32 AI Governance: 74% Think They'll Pass, 27% Can 06:57 Compliance Is a Byproduct of Security 07:56 Is SOC 2 Still a Valid Exam? 10:06 Red Flags When Hiring a SOC 2 Auditor 12:16 How Commoditization Hurts Good Firms 14:26 The Question Nobody Asks: Auditor Competency 14:46 Continuous Auditing Is Finally Real 17:52 Vulnerability Management Beyond Check the Box 19:27 Can Regulation Fix Security? 20:26 Why Fear Is the #1 Motivator 21:56 Why Trillion Dollar Companies Are American 22:50 Furious Five 24:46 Will a Human Still Sit in the CISO Seat? Watch the full episode on YouTube: youtu.be/59ISaaZNgeU Follow Us: ⚬ Responsible Disclosure on X: https://x.com/Zafran_io ⚬ Responsible Disclosure on LinkedIn: https://www.linkedin.com/company/zafran-security ⚬ Follow Nate on LinkedIn: https://www.linkedin.com/in/nathan-rollings-02b65b43/ ⚬ Follow Steve on LinkedIn: https://www.linkedin.com/in/wscobb/ ⚬ Follow Steve on X: https://x.com/Prot3ctD3f3nd ⚬ Follow Avani Desai: https://www.linkedin.com/in/avani-d-596366/ ⚬ Schellman: https://www.schellman.com/ Produced by Bigfable

    Schellman's Avani Desai: Compliance Is a Byproduct of Security

  2. Sep 30

    Cytactic's Nimrod Kozlovski: Defense in Depth Is No Longer Enough

    In this episode of Responsible Disclosure, Cytactic Founder and CEO Dr. Nimrod Kozlovski sits down to unpack two decades at the intersection of cyber law, venture capital, and crisis management, and what AI is changing for the security leaders who have to respond when a breach hits. Nimrod shares stories from inside the room, including a homeland security company whose source code was stolen, a crypto wallet takeover, and a hospital ransomware attack that left staff unsure they could trust patient records.

    Cytactic's Nimrod Kozlovski: Defense in Depth Is No Longer Enough

  3. Sep 16

    Sequoia's Doug Leone: The CISO Who Resists AI Will Become Irrelevant

    In this episode of Responsible Disclosure, legendary investor and Sequoia Capital Partner Doug Leone sits down to unpack over three decades of venture capital investing, building category-defining enterprise giants, and identifying world-class startup founders. From arriving in the U.S. at age 11 without speaking English to helping scale Sequoia Capital into a global powerhouse, Doug shares rare insider stories—including how he blocked a $2.5B buyout of ServiceNow to help it reach a peak $180B valuation, why Israeli cybersecurity startups (Wiz, Cyera, Island) revolutionized the enterprise market, and the exact psychological drive he looks for in outlier founders. He also breaks down where enterprise value will accrue in the AI stack, why he fears robotics more than AI software, and the one investment regret that still bugs him today.

    Sequoia's Doug Leone: The CISO Who Resists AI Will Become Irrelevant

  4. Trailer

    Trailer: Responsible Disclosure Podcast

    In cyber, the truth usually waits for the mics to come off. This week, we're launching Responsible Disclosure: a podcast putting the business of cyber on the record. Hosts Nate Rollings (Zafran CISO) and Steve Cobb (Field CISO) sit down with founders, CEOs, CISOs, and investors to talk through how they really built what they built, separating what's real from the noise.

    Trailer: Responsible Disclosure Podcast
  • 1 Trailer
    3 Episodes

Trailer

About

Welcome to Responsible Disclosure, the podcast that puts the business of cyber on the record. Hosted by Zafran's Nate Rollings (CISO) and Steve Cobb (Field CISO), each episode features founders, CEOs, CISOs, and investors talking through how they actually built what they built, separating what's real from what's noise, and revisiting the pressure-call decisions that never show up in the postmortem.

Information

  • Creator
    Zafran Security
  • Years Active
    2026
  • Episodes
    4
  • Rating
    Clean
  • Copyright
    © Zafran Security
  • Show Website
    Responsible Disclosure

You Might Also Like