CISO Series Podcast

David Spark, Mike Johnson, and Andy Ellis

  • 34 minutes 16 seconds
    Our CISO Might Be Virtual, But the Lack of Respect Is Genuine

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Mike Wilkes, former CISO, Major League Soccer.

    In this episode:

    • Are we misusing vCISOs?
    • Cybersecurity is out to sea
    • Planning for your exit
    • Building up your quantum reflexes

    Thanks to our podcast sponsor, Tines

    Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at https://tines.com/cisoseries

    11 March 2025, 10:00 am
  • 39 minutes 9 seconds
    All Cybersecurity Problems Are Easy to Fix… With Unlimited Time and Budget
    All links and images for this episode can be found on CISO Series.   This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Adam Holland, former CISO, the Wendy’s Company, now CISO of Ascension Healthcare.   In this episode:
    • The long road to influence
    • The effort to build a bridge
    • Living within limits
    • Motivation for security awareness
     Thanks to our podcast sponsor, Vanta! Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over  350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you’ll streamline compliance— and never duplicate your efforts.
    4 March 2025, 11:00 am
  • 37 minutes 11 seconds
    Every Failed Startup Starts as a Dream for a Single Pane of Glass

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Shaun Marion, vp, CSO, Xcel Energy.

    In this episode:

    • Setting policy
    • The hard thing about soft skills
    • Never let a good crisis go to waste
    • Avoiding the tarpit

     Thanks to our podcast sponsor, Noma Security!

    Secure your entire Data & AI Lifecycle—from development to production and classic data engineering to GenAI. Noma’s full-lifecycle platform delivers seamless protection against risks like misconfigured data pipelines, malicious models, and adversarial AI attacks, empowering AppSec teams with complete visibility, security, and compliance—without disrupting data and AI teams’ workflows.

    25 February 2025, 11:00 am
  • 36 minutes 47 seconds
    Fix it? Let’s Just Get Rid of It.

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is our sponsored guest, Danny Jenkins, CEO, ThreatLocker.

    In this episode:

    • A zero-day upgrade
    • Don’t let a pentest go bad
    • Improving user training
    • Cybersecurity is made for people

    Thanks to our podcast sponsor, ThreatLocker!

    ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

    18 February 2025, 11:00 am
  • 37 minutes 33 seconds
    Zero Trust Purple Team DevSecOps Mesh: A CASB Journey Through the Identity Fabric

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our sponsored guest, Matt Muller, field CISO, Tines.

    In this episode:

    • Seeking the early AI adopters
    • Taking the SOC back to basics
    • Changing our automation expectations
    • Communicate risk

    Thanks to our podcast sponsor, Tines!

    Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.

    11 February 2025, 11:00 am
  • 37 minutes 9 seconds
    Our Developers’ New Motto is “LLM Take the Wheel”

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Deneen DeFiore, Vice President & Chief Information Security Officer, United Airlines.

    In this episode:

    • Minding the gap
    • Copilot overreliance
    • Opening up the field
    • Navigating the SMB cyber insurance conundrum

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots 

    Vanta automates evidence collection needed for audits with over  350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you’ll streamline compliance— and never duplicate your efforts.

    4 February 2025, 11:00 am
  • 42 minutes 18 seconds
    As Long as We Keep Moving the Goalposts, We Have a Great Security Culture (LIVE in Dallas, TX)

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Rinki Sethi, vp and CISO, BILL. Joining us is our sponsored guest, Lamont Orange, CISO, Cyera.

    This episode was recorded in front of a live audience at Cyera’s first DataSec conference (November 2024) in Dallas. Thanks to Adam Holland, CISO, Wendy's, Farray Rahman of Vibrant Emotional Health and 988 Lifeline, and Biji John of USAA for our questions in the episode.

    In this episode:

    • Shifting from traditional recovery
    • Do you know where your data is?
    • The science of tradeoffs
    • How do you measure security culture?

    Thanks to our podcast sponsor, Cyera!

    Cyera’s data security platform discovers your data attack surface, protects sensitive data, governs data access, monitors critical data events, and quickly responds to data risks. Cyera’s agentless design allows us to deploy within minutes across any environment and provide a 95% precision rate through our AI-powered classification engine. Learn more at Cyera.io

    28 January 2025, 11:00 am
  • 37 minutes 51 seconds
    4th Party Data Breach? We Can Barely Catch the 1st Party Ones!

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is George Finney, CISO, The University of Texas System and author of Project Zero Trust.

    In this episode:

    • Aligning on privacy
    • Bringing Zero Trust to OT
    • Restores and resilience
    • Focus on what you can control

    Thanks to our podcast sponsor, Vanta!

    Say goodbye to spreadsheets and screenshots. Vanta automates evidence collection needed for audits with over  350 integrations—giving you continuous visibility into your compliance status. And with cross-mapped controls across over 35 frameworks, you’ll streamline compliance— and never duplicate your efforts.

    21 January 2025, 11:00 am
  • 37 minutes 20 seconds
    I Support Open Source as Long as I Don't Have to Invest in It

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Steve Zalewski. Joining us is our guest, Brett Perry, CISO, Dot Foods.

    In this episode:

    • A new MDR policy
    • Staying on top of the technical debt cycle
    • Beating retention struggles
    • In the gully of SOAR

    Thanks to our podcast sponsor, Tines!

    Build, run, and monitor your most important workflows with Tines. Tines' smart, secure workflow platform empowers your whole team regardless of their coding abilities, environment complexities, or tech stack. From low code, no code to natural language, anyone can get up and running in minutes – not days or weeks. Learn more at Tines.com.

    14 January 2025, 11:00 am
  • 38 minutes 52 seconds
    Ewww! How Long Has This Router Been in the Fridge?

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Andy Ellis (@csoandy), partner, YL Ventures. Joining us is Yabing Wang, VP and CISO, Justworks.

    In this episode:

    • Building a path to action
    • Cracking the EOL conundrum
    • The burning platform question
    • Uncertainty is our only constant

    Thanks to our podcast sponsor, Entro!

    Reclaim control of your non-human identities with Entro Security! Our platform securely manages non-human identities and secrets throughout their lifecycle. Detect and prevent unusual activity before it becomes a threat. Trust Entro to safeguard your non-human identities in today’s complex digital ecosystem.

    7 January 2025, 11:00 am
  • 37 minutes 33 seconds
    Why Bother Helping Users When We Can Complain About Them?

    All links and images for this episode can be found on CISO Series.

    This week’s episode is hosted by me, David Spark (@dspark), producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest Daniel Daraban, senior director of product management, Bitdefender.

    In this episode:

    • Practice makes perfect
    • Shaming doesn’t help anyone
    • Cybersecurity is a flat circle
    • Building the bridge

    Thanks to our podcast sponsor, Bitdefender!

    Enterprise-grade cybersecurity without complexity. Backed by extensive research from hundreds of experts in Bitdefender Labs and consistently top-rated in independent tests, Bitdefender GravityZone platform provides multi-layered prevention, protection, detection, and response capabilities, including managed security services. Learn more at Bitdefender.com.

    17 December 2024, 11:00 am
  • More Episodes? Get the App