CISO Series Podcast

David Spark, Mike Johnson, and Andy Ellis

  • 42 minutes 18 seconds
    As Long as We Keep Moving the Goalposts, We Have a Great Security Culture (LIVE in Dallas, TX)

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Rinki Sethi, vp and CISO, BILL. Joining us is our sponsored guest, Lamont Orange, CISO, Cyera.

    This episode was recorded in front of a live audience at Cyera’s first DataSec conference (November 2024) in Dallas. Thanks to Adam Holland, CISO, Wendy's, Farray Rahman of Vibrant Emotional Health and 988 Lifeline, and Biji John of USAA for our questions in the episode.

    In this episode:

    • Shifting from traditional recovery
    • Do you know where your data is?
    • The science of tradeoffs
    • How do you measure security culture?

    Thanks to our podcast sponsor, Cyera!

    Cyera’s data security platform discovers your data attack surface, protects sensitive data, governs data access, monitors critical data events, and quickly responds to data risks. Cyera’s agentless design allows us to deploy within minutes across any environment and provide a 95% precision rate through our AI-powered classification engine. Learn more at Cyera.io

    28 January 2025, 11:00 am
  • 37 minutes 51 seconds
    4th Party Data Breach? We Can Barely Catch the 1st Party Ones!

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is George Finney, CISO, The University of Texas System and author of Project Zero Trust.

    In this episode:

    • Aligning on privacy
    • Bringing Zero Trust to OT
    • Restores and resilience
    • Focus on what you can control

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over  350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you’ll streamline compliance— and never duplicate your efforts.

    21 January 2025, 11:00 am
  • 37 minutes 20 seconds
    I Support Open Source as Long as I Don't Have to Invest in It

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our guest, Brett Perry, CISO, Dot Foods.

    In this episode:

    • A new MDR policy
    • Staying on top of the technical debt cycle
    • Beating retention struggles
    • In the gully of SOAR

    Thanks to our podcast sponsor, Tines!

    Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.

    14 January 2025, 11:00 am
  • 38 minutes 52 seconds
    Ewww! How Long Has This Router Been in the Fridge?

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Yabing Wang, VP and CISO, Justworks.

    In this episode:

    • Building a path to action
    • Cracking the EOL conundrum
    • The burning platform question
    • Uncertainty is our only constant

    Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    7 January 2025, 11:00 am
  • 37 minutes 33 seconds
    Why Bother Helping Users When We Can Complain About Them?

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Daniel Daraban, senior director of product management, Bitdefender.

    In this episode:

    • Practice makes perfect
    • Shaming doesn’t help anyone
    • Cybersecurity is a flat circle
    • Building the bridge

    Thanks to our podcast sponsor, Bitdefender!

    Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services. Learn more at Bitdefender.com.

    17 December 2024, 11:00 am
  • 38 minutes 6 seconds
    Can’t Our Employees Just Go Back to Stealing Pens?

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Itzik Alvas, co-founder and CEO, Entro.

    In this episode:

    • What to expect when you’re offboarding
    • The threats are coming from inside the organization
    • The risk of stale identities
    • Working backward to risk

    Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    10 December 2024, 11:00 am
  • 34 minutes 34 seconds
    We Take Software Security Seriously, As Long As It Ships on Time

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Jeremy Epling, chief product officer, Vanta.

    In this episode:

    • What is the future of cybersecurity?
    • Designing the outcomes we want
    • The promise and peril of AI
    • Is open-source open to more threats?

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over  350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across 30 frameworks, you’ll streamline compliance— and never duplicate your efforts. Learn more at Vanta.com.

    3 December 2024, 11:00 am
  • 40 minutes 38 seconds
    Aww, Your Cybersecurity Concerns Are So Adorable (LIVE in La Jolla)

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Gary Hayslip, CISO, Softbank Investment Advisors. Joining us is Keith McCartney, VP, Security and IT, DNAnexus.

    In this episode:

    • Closing the Credibility Gap
    • Clarifying the Role of Security Engineering
    • Building Resilience at Scale
    • AI Frameworks and Cybersecurity

     Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    26 November 2024, 11:00 am
  • 39 minutes 47 seconds
    Once You Show Me Your Diploma, I’ll Explain Why We Don’t Gatekeep

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Jimmy Benoit, vp, cybersecurity, PBS.

    In this episode:

    • Starting early on security awareness
    • The limits of gamification
    • Technically qualified
    • Understanding your risk tolerance

    Thanks to our podcast sponsor, Bitdefender!

    Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services.

    19 November 2024, 11:00 am
  • 45 minutes 44 seconds
    Wait, We Can Prioritize Data Privacy Before an Incident? (LIVE at Stanford University)

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Amy-Steagall-Hess, CISO, Stanford University. Joining us is Michael Tran Duff, CISO, data privacy officer, Harvard University.

    In this episode:

    • Turning a mirror on zero trust
    • Is AI coming for our jobs?
    • Responding to skepticism about CISOs
    • A CISO at the crossroads 

    Thanks to our podcast sponsor, Vorlon Security and Wiz!

    Vorlon helps organizations take back control of their data by providing continuous visibility of sensitive data shared via API across third-party applications. Know what data goes where, when, and how between third-party apps with external threat intelligence. Reduce the complexity of investigating and responding to third-party security incidents with Vorlon.

    Wiz transforms cloud security for customers – including 40% of the Fortune 100 – by enabling a new operating model. Wiz CNAPP empowers security and development teams to build fast and securely by providing visibility into their cloud environments. With Wiz, organizations can prioritize risk and stay agile.

    12 November 2024, 11:00 am
  • 40 minutes 40 seconds
    Luckily, We Haven’t Had to Adapt to Any New Technologies Before AI

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is our sponsored guest Jadee Hanson, CISO, Vanta.

    In this episode:

    • Embracing BYOAI
    • The changing government contractor landscape
    • Creating better security outcomes
    • Automating supply chain security

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots.

    Vanta automates evidence collection needed for audits with over  350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across 30 frameworks, you’ll streamline compliance— and never duplicate your efforts.

    5 November 2024, 11:00 am
  • More Episodes? Get the App
© MoonFM 2025. All rights reserved.