301 episodes

Formerly named CISO/Security Vendor Relationship Podcast. Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

CISO Series Podcast David Spark, Mike Johnson, and Andy Ellis

    • Technology
    • 4.8 • 177 Ratings

Formerly named CISO/Security Vendor Relationship Podcast. Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

    We Could Lower Risk If We Shrunk Our Business

    We Could Lower Risk If We Shrunk Our Business

    All links and images for this episode can be found on CISO Series.
    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our sponsored guest, Matt Radolec, vp, incident response and cloud operations, Varonis.
    In this episode:
    Why is retaining cyber talent so hard?
    How can organizations keep an employee from going elsewhere?
    Why do organizations often not prioritize the factors to keep key employees?
    Thanks to our podcast sponsor, Varonis

    Ready to reduce your risk without taking any? Try Varonis’ free data risk assessment. It takes minutes to set up and in 24 hours you’ll have a clear, risk-based view of the data that matters most and a clear path to automated remediation. Get started for free today.

    • 38 min
    Our Benefits Include Medical, Dental, and Burnout

    Our Benefits Include Medical, Dental, and Burnout

    All links and images for this episode can be found on CISO Series.
    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest, Joshua Brown, vp and global CISO, H&R Block.
    In this episode:
    Why is retaining cyber talent so hard?
    How can organizations keep an employee from going elsewhere?
    Why do organizations often not prioritize the factors to keep key employees?
    Thanks to our podcast sponsor, CyberMaxx

    CyberMaxx offers MaxxMDR, our next-generation managed detection and response (MDR) solution that helps customers assess, monitor, and manage their cyber risks. MaxxMDR fuels defensive capabilities with insights from offensive security, DFIR, and threat hunting, on top of a technology-agnostic deployment model. We think like an adversary but defend like a guardian.

    • 43 min
    Your Biggest Threats Don’t Get a Ransom Payment, They Get a Paycheck

    Your Biggest Threats Don’t Get a Ransom Payment, They Get a Paycheck

    All links and images for this episode can be found on CISO Series.
    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining me is our guest, Alex Green, CISO, Delta Dental.
    In this episode:
    Is it true that employees cause as many significant cybersecurity incidents as outside threat actors?
    Does this come down to a lack of awareness or poorly designed security implementation?
    And what can we do to improve this situation?
    Thanks to our podcast sponsor, Silk Security

    Silk makes it easy for security teams to resolve more critical cyber risks in a fraction of the time. Instead of toiling over spreadsheets, and watching alert backlog graphs go up, Silk helps security teams contextualize, prioritize and collaborate with stakeholders in IT to regain control over their risk posture.

    • 36 min
    A Stressed CISO Is a Happy CISO

    A Stressed CISO Is a Happy CISO

    All links and images for this episode can be found on CISO Series.
    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), operating partner, YL Ventures. Joining us is our guest, Shawn Bowen, svp and CISO, World Kinect Corporation.
    In this episode:
    Is it true that CISOs feel their jobs are harder than ever with higher levels of stress?
    Yet why does research also show that CISO job satisfaction increasing?
    How do we make sense of this contradiction?
    Thanks to our podcast sponsor, Silk Security

    Silk makes it easy for security teams to resolve more critical cyber risks in a fraction of the time. Instead of toiling over spreadsheets, and watching alert backlog graphs go up, Silk helps security teams contextualize, prioritize and collaborate with stakeholders in IT to regain control over their risk posture.

    • 38 min
    BREAKING: “Department of No” Upgraded to “Department of Slow”

    BREAKING: “Department of No” Upgraded to “Department of Slow”

    All links and images for this episode can be found on CISO Series.
    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our sponsored guest, Nadav Lotan, product management team leader, Cisco.
    In this episode:
    How can security teams do their jobs without seeming like an impediment to developers?
    Why can this relationship seem oppositional?
    How can both sides work together to better secure software without seeming like a road block?
    Thanks to our podcast sponsor, Panoptica, Cisco’s Cloud Application Security Platform

    Panoptica, Cisco’s Cloud Application Security solution, provides end-to-end lifecycle protection for cloud native application environments. It empowers organizations to safeguard their APIs, serverless functions, containers, and Kubernetes environments. Panoptica ensures comprehensive cloud security, compliance, and monitoring at scale, offering deep visibility, contextual risk assessments, and actionable remediation insights for all your cloud assets.

    • 36 min
    A Threat Actor Just “Liked” My Dashboard Screenshot

    A Threat Actor Just “Liked” My Dashboard Screenshot

    All links and images for this episode can be found on CISO Series.
    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining me is our guest, Jamil Farshchi, evp and CISO, Equifax.
    In this episode:
    Data leaks are hard enough to deal with when caused by threat actors, but how bad is a self-inflicted data leak?
    Why do these types of incidents happen?
    How should an organization assess the risk it introduced?
    Thanks to our podcast sponsor, Varonis

    Ready to reduce your risk without taking any? Try Varonis’ free data risk assessment. It takes minutes to set up and in 24 hours you’ll have a clear, risk-based view of the data that matters most and a clear path to automated remediation. Get started for free today.

    • 35 min

Customer Reviews

4.8 out of 5
177 Ratings

177 Ratings

ArlieLP ,

Top notch!

I can't recommend this podcast enough! The discussions, tips, and debates are incredibly insightful. It's an invaluable resource for learning how to enhance security collaboratively, benefiting not only our organizations but the entire community. Thanks for putting out such a superb show, David, Mike, and Andy - keep up the great work!

MikeVotaw ,

Thanks for fantastic content

This is the meatiest podcast I’ve ever listened to. Learning so much! I’m on the sales side but looking to take on a CISO role soon. What an amazing tool to be successful!!

hehehdhehehey ,

One of my favorite podcasts

Entertaining, easy to listen to and probably the most educational podcast for cybersecurity sales reps. Also a great listen for security professionals. I am a big fan!

Top Podcasts In Technology

Lex Fridman Podcast
Lex Fridman
All-In with Chamath, Jason, Sacks & Friedberg
All-In Podcast, LLC
Acquired
Ben Gilbert and David Rosenthal
TED Radio Hour
NPR
Dwarkesh Podcast
Dwarkesh Patel
Hard Fork
The New York Times

You Might Also Like

Defense in Depth
David Spark
Cyber Security Headlines
CISO Series
Cybersecurity Today
ITWC
CyberWire Daily
N2K Networks
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
Johannes B. Ullrich
Hacking Humans
N2K Networks