Castuner

Defense in Depth

CISO Series

Defense in Depth, hosted by David Spark, Steve Zalewski, Geoff Belknap, and Edward Contreras, promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead our discussion.

Web del podcast

Escolta'l a la teva aplicació

Episodis

385 episodis

  1. CISOs Have to Be Technical. Why Is This Even an Argument? 34:00
  2. Is Our Dated Hiring Process Creating Vulnerabilities? 37:36
  3. How the SDLC Evolves Once You Deploy LLM-Based Code Scanners 31:08
  4. How Do You Demonstrate Resilience? 30:26
  5. How Should Security Be Architected for Human Error? 25:18
  6. Can SMBs Get the Same Security as Everyone Else? 33:26
  7. Why Do We Keep Complaining About the Same Issues in Cybersecurity? 33:41
  8. Securing AI-Generated Open Source Code 35:00
  9. BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection 21:17
  10. How AppSec Needs to Change For the Speed of AI 26:20
  11. Building Resilience for Microsoft 365 27:43
  12. Recommendations to Reboot the Security Vendor Pitch 28:15
  13. Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity 29:47
  14. Will AI Replace Detection Roles in Cybersecurity? 35:13
  15. What Makes a Good AI Security Deployment? 31:19
  16. The Office Politics of Remediation 28:48
  17. Why is Preventative Security So Difficult? 30:16
  18. Identity and Access Management (IAM) in an Agentic AI World 30:20
  19. Protecting AI Agents in O365 and Google Workspace 33:53
  20. Humans Are Bottleneck in a Machine-Speed World 35:36
  21. Even With All These Security Vendors We Still Have Glaring Gaps 33:56
  22. Is the "Attackers Only Need to Be Right Once" a Misnomer? 27:40
  23. What It Takes To Be Successful in Cyber Media 55:27
  24. CISOs Buy For Selfish and Politically Risk-Averse Reasons (Not Because Your Product is the Best) 31:21
  25. Has Cybersecurity Become a Cult? 33:57
  26. What Does the Next Generation of Cloud Security Look Like? 33:22
  27. The Dangers of Picking the Wrong Vendor 26:46
  28. Why Cyber Startups Need CISO Advisors 26:40
  29. Breaking the Reactive Cycle of Cybersecurity 31:52
  30. How Do You Know If Your Backups Will Survive a Ransomware Attack? 38:25
  31. What Makes a Successful Security Vendor Demo? 26:53
  32. Should You Use Native or 3rd Party Cloud Management Tools? 28:21
  33. How Should We Measure the Performance of a CISO? 29:05
  34. How to Be Less Busy and More Effective in Cyber 26:28
  35. How to Engage With a CISO When They Express Interest 31:33
  36. Who is Responsible for the Conflict Between Security and Developers? 33:20
  37. Are Your Security Tools Creating More Work for Your Team? 35:45
  38. Why Overpromising is a Dangerous Sales Tactic 28:31
  39. Should You Phish Your Employees or Not? 27:25
  40. How Much Autonomy Should You Give AI Agents in Your SOC? 31:19
  41. Cybersecurity's Broken Hiring Process 32:45
  42. Simple Security Solutions That Deliver a Big Impact 33:28
  43. When Cybersecurity Marketing Fails to Reach the Buyer 30:42
  44. How Best to Prepare Your Data for Your Tools 27:21
  45. Don't Try to Win with Technical Expertise. Win by Partnering. 28:45
  46. What Makes a Successful CISO? 25:28
  47. How Should CISOs Talk to the Business 29:38
  48. How Much Cyber Risk Should a CISO Own? 32:45
  49. How To Tell When a Vendor is Selling AI Snake Oil 33:51
  50. In the Age of Identity, is Network Security Dead? 34:21