The Virtual CISO podcast

#Tech #Pivot Point Security

26:28

Squid Game is back—and this time, the knives are out. In the thrilling Season 3 premiere, Player 456 is spiraling and a brutal round of hide-and-seek forces players to kill or be killed. Hosts Phil Yu and Kiera Please break down Gi-hun’s descent into vengeance, Guard 011’s daring betrayal of the Game, and the shocking moment players are forced to choose between murdering their friends… or dying. Then, Carlos Juico and Gavin Ruta from the Jumpers Jump podcast join us to unpack their wild theories for the season. Plus, Phil and Kiera face off in a high-stakes round of “Hot Sweet Potato.” SPOILER ALERT! Make sure you watch Squid Game Season 3 Episode 1 before listening on. Play one last time. IG - @SquidGameNetflix X (f.k.a. Twitter) - @SquidGame Check out more from Phil Yu @angryasianman , Kiera Please @kieraplease and the Jumpers Jump podcast Listen to more from Netflix Podcasts . Squid Game: The Official Podcast is produced by Netflix and The Mash-Up Americans.…

The Virtual CISO Podcast

Поширити

Головна серій•Feed

The Virtual CISO Podcast is a frank discussion that provides the very best information security advice and insights for Security, IT and Business leaders. If you’re looking for the latest strategies, tips, and trends from seasoned information security practitioners, want no-B.S. answers to your biggest security questions, need a perspective on how your peers are addressing the same issues, or just simply want to stay informed and proactive, then welcome to the show. Our moderator, John Verry, chats with industry thought leaders to ensure you have what you need to be confident in your security and compliance. John will keep you informed, and perhaps even mildly entertained, through topics like ISO 27001, breach avoidance, incident response, dealing with pesky security questionnaires, data privacy, and managing vendor risk. Think of it as security… with a smile.

152 епізодів

The Virtual CISO Podcast

19 subscribers

updated 7 днів тому

Поширити

Головна серій•Feed

152 епізодів

#Tech #Pivot Point Security

Усі епізоди

1
EP 151: Trust, But Verify: How HITRUST is Reshaping Assurance 45:29

7 днів тому45:29

45:29

In this episode of the Virtual CISO Podcast, host John Verry and guest Chris Schaeffer discuss the HITRUST framework, its evolution, and its significance in the cybersecurity landscape. They delve into the Common Security Framework (CSF), the different assessment models (E1, I1, R2), and how HITRUST compares to other frameworks like SOC 2 and ISO 27001. The conversation also touches on the future of HITRUST, including potential reciprocity with other standards and the impact of emerging technologies like AI.…

1
Ep 150: Is OSCAL the Future of Security Documentation (& FedRAMP)? 46:47

10 weeks тому46:47

46:47

In this episode of the Virtual CISO Podcast, John Verry speaks with Kenny Scott, founder and CEO of Paramify, about the challenges of cyber risk management and the potential of OSCAL (Open Security Controls Assessment Language) in simplifying compliance and documentation processes. They discuss the importance of structured digital communication in security, the complexities of FedRAMP, and how OSCAL can streamline the documentation process, ultimately reducing costs and improving efficiency in security programs. In this conversation, Kenny and John discuss the challenges and strategies for adopting OSCAL (Open Security Controls Assessment Language) in organizations. They explore the importance of understanding data flows for compliance, the role of AI in streamlining compliance processes, and the potential for OSCAL to transform how organizations manage security and compliance documentation. They also touch on the future of OSCAL and its relevance in various compliance frameworks beyond FedRAMP.…

1
Ep 149: Unlocking the Future: Passkeys and Passwordless Authentication with Anna Pobletts 40:58

18 weeks тому40:58

40:58

1
Episode 148: Cloud Detection & Response 37:24

21 weeks тому37:24

37:24

In this episode, John Verry interviews Eric Gumanofsky, Vice President for Product Innovation at Tenable Security, about the concept of Cloud Detection and Response (CDR). They discuss the similarities and differences between CDR and Endpoint Detection and Response (EDR), as well as the integration of CDR into a comprehensive Cloud Native Application Protection (CNAP) solution. They also explore the challenges and benefits of automating response in the cloud and the importance of risk-based decision-making. The conversation highlights the evolving nature of the cloud security space and the need for organizations to stay informed and make informed decisions.…

1
Episode 147: Why vCISO Engagements Fail 59:02

23 weeks тому59:02

59:02

In this episode, John Verry and Matt Webster discuss the evolving landscape of virtual CISO services, exploring the common pitfalls and failures associated with these projects. They emphasize the importance of clear expectations, the distinction between a virtual CISO and a virtual security team, and the necessity of executive buy-in for successful cybersecurity initiatives. The conversation also highlights the need for specialized expertise in various cybersecurity domains and the challenges of maintaining focus amidst tactical distractions. They explore the tactical challenges organizations face, the importance of redundancy in virtual CISO services, and how breaches can impact these engagements. The discussion emphasizes the need for cultural fit and industry-specific knowledge when hiring a virtual CISO, ensuring organizations can navigate the ever-evolving cybersecurity landscape effectively.…

1
Episode 146: Dark Web Monitoring 47:11

26 weeks тому47:11

47:11

In this conversation, John Verry interviews Steph Shample, Cybercrime Analyst for DarkOwl, about the dark web and its implications for cybersecurity professionals. They discuss: The basics of the dark web, its purpose, and the types of activities that take place there. They also explore the value of darknet data for threat intelligence and how it can be used to understand and combat cyber threats. Cybersecurity professionals can benefit from understanding the dark web to gain insights into the tactics, techniques, and procedures used by threat actors. Additionally, they touch on the evolving nature of cyber attacks and the importance of sharing information within industry-specific groups and the role of tools like Dark Owl in proactively monitoring the dark web.…

1
Episode 145: CMMC: The Final Rule 56:38

31 weeks тому56:38

56:38

In this episode of the Virtual See-So Podcast, host John Verry speaks with Sanjeev Verma, chairman and co-founder of Prevail, about the intricacies of CMMC compliance and the importance of cybersecurity. They discuss: The delays in CMMC implementation, key elements of the new regulation, and the importance of being prepared for compliance. The complexities of compliance with CMMC regulations, the importance of documentation, and the implications of using cloud services and VDI. They emphasize that compliance is an ongoing process requiring annual affirmation and that organizations must be proactive in their cybersecurity measures. T They highlight the necessity of flow down requirements and the role of encryption in protecting sensitive data.…

1
Episode 144: TxRAMP or StateRAMP or AZRAMP or FedRAMP? What’s right for your company? 53:20

38 weeks тому53:20

53:20

In this episode of The Virtual CISO Podcast, your host John Verry is joined by Mike Craig to break down the differences between FedRAMP, TxRAMP, AZRAMP, and StateRAMP. Together, they discuss:How the Naoris Protocol establishes decentralized trust for compute endpoints. Key distinctions between the RAMP frameworks and how they impact an organization's path to Authorization to Operate (ATO). How Organizationally Defined Parameters (ODPs) shape the implementation of controls across different RAMPs. The impact of Federal Acquisition Regulations (FAR) on FedRAMP technical architecture and cost recovery. Why nearly 60% of FedRAMP projects fail, and how strategic planning can help companies avoid costly mistakes. And more! If you're considering federal cybersecurity compliance or just want to stay ahead in cloud security, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe for more insightful episodes. For updates on cybersecurity, digital technology, and more, follow us on LinkedIn: https://www.linkedin.com/company/pivot-point-security/…

1
Episode 143: Is Decentralized Proof of Security Leveraging Blockchain the future of Cybersecurity? 49:46

41 weeks тому49:46

49:46

In this episode of The Virtual CISO Podcast, your host, John Verry, sits down with David Carvalho, a cryptography and cybersecurity expert with over 25 years of experience, to explore the next frontier in cybersecurity: decentralized security models and post-quantum cryptography. How the Naoris Protocol establishes decentralized trust for compute endpoints. The importance of a decentralized security baseline for digital trust. Real-world applications in cyber insurance and regulatory compliance. The growing threat of quantum computing and the need for post-quantum security. And more! If you're considering federal cybersecurity compliance or just want to stay ahead in cloud security, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe for more insightful episodes. For updates on cybersecurity, digital technology, and more, follow us on LinkedIn: Pivot Point Security.…

1
Episode 142: CNAPP - Secure Cloud Apps in a Snap 43:06

46 weeks тому43:06

43:06

1
Episode 141: Stopping Business Email Compromise with a Novel Malicious File Reconstruction Approach 38:22

52 weeks тому38:22

38:22

In this episode of The Virtual CISO Podcast, your host, John Verry, engages in a conversation with Aviv Grafi, CTO and founder of Votiro, as they discuss innovative solutions to combat business email compromise. Join us as we discuss: The mechanisms of business email compromise How malicious files are used in cyberattacks The limitations of traditional security methods The benefits of malicious file reconstruction technology And more! If you want to learn more about cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe to the Virtual CISO Podcast. For updates on cybersecurity, digital technology, and more, follow us on LinkedIn:https://www.linkedin.com/company/pivot-point-security/…

1
Episode 140: DIB/CMMC Cybersecurity – Interesting Observations from a Significant Study 47:44

1 year тому47:44

47:44

Join us for an engaging episode of the Virtual CISO Podcast with host John Verry. This episode features Chris Petersen, co-founder of LogRhythm and current CEO of Radical. Chris brings over two decades of experience in cybersecurity, offering deep insights into the industry's challenges and advancements. In this episode, we'll explore: - The surprising results from Radical’s DIB Cybersecurity Survey, including the incongruity between high self-assessed security skills and other survey responses. - The critical issue of poor scoping in System Security Plans (SSPs) and its impact on the effectiveness of security monitoring within the Defense Industrial Base (DIB). - The paradox of organizations delaying CMMC certification despite acknowledging the lengthy process and the looming enforcement deadline. If you want to learn more about cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe to the Virtual CISO Podcast. For updates on the state of cybersecurity, digital technology, and more, follow us on LinkedIn, https://www.linkedin.com/company/pivot-point-security/…

1
Episode 139: How adding Crisis Management to your Incident Response Plan can save your bacon? 38:53

1 year тому38:53

38:53

Join us for an engaging episode of the Virtual CISO Podcast with host John Verry. This episode features Kevin Dinino, President of KCD PR, who delves into the critical aspects of crisis management and communications. Kevin brings over 20 years of experience in guiding companies through the complexities of strategic communications, particularly in the cybersecurity, financial, and technology sectors. In this episode, we'll explore: The nuances of differentiating between an incident and a crisis, and how to handle the transition from one to the other. The essential components of a comprehensive crisis management plan and the importance of integrating cyber incident response with overall crisis communication strategies. Real-world examples of effective crisis communication, including the famous Tylenol recall and modern-day cyber incidents. The evolving landscape of cyber liability insurance and the role of PR firms in mitigating the reputational impact of security breaches. Insights into the latest federal disclosure requirements and their implications for incident and crisis management. If you want to learn more about cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe to the Virtual CISO Podcast. For updates on the state of cybersecurity, digital technology, and more, follow us on LinkedIn, / pivot-point-security .…

1
Episode 138: Is Consuming SaaS an Information Security Faustian Bargain? w/ William Eshagh 44:30

1 year тому44:30

44:30

1
Episode 137: Strategies and Insights w/ Sagi Brody 30:57

1 year тому30:57

30:57

The Virtual CISO Podcast

1
Episode 136: AI Risk Management – Is ISO 42001 the Solution? w/ Ariel Allensworth 52:45

1 year тому52:45

52:45

The Virtual CISO Podcast

1
Episode 135: Can Distributed Ledger Technology Simplify Privacy Compliance? W/ Zenobia Godschalk 43:06

1 year тому43:06

43:06

In this episode of The Virtual CISO Podcast, your host, John Verry, engages in a conversation with guest Zenobia Godschalk, Senior Vice President of Hedera Hashgraph, as they discuss distributed ledger technology and its effects on privacy compliance. Join us as we discuss the following: The erosion of Privacy Online Distributed Ledger Technology (DLT) and how it enables Web 3 How DLT can be used to improve security and compliance with Privacy regulations If you want to learn more about cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe to the Virtual CISO Podcast. For updates on the state of cybersecurity, digital technology, and more, follow us on LinkedIn: https://www.linkedin.com/company/pivot-point-security/…

The Virtual CISO Podcast

1
Episode 134: Understanding TISAX w/ Alexander Häusler 49:47

1 year тому49:47

49:47

The Virtual CISO Podcast

1
Kubernetes Security – Simplified Shauli Rozen, CEO of ARMO 48:12

1 year тому48:12

48:12

In this episode of The Virtual CISO Podcast, your host, John Verry, engages in a conversation with guest Shauli Rozen, CEO and Co-Founder of ARMO, exploring the intricacies of Kubernetes, the orchestration tool that's reshaping how we deploy, scale, and manage containerized applications. Join us as we discuss: What a container is Implications of containers on security How you can leverage Kubescape to improve application security And more! If you want to learn more about cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe to the Virtual CISO Podcast. For updates on the state of cybersecurity, digital technology, and more, follow us on LinkedIn, https://www.linkedin.com/company/pivot-point-security/…

The Virtual CISO Podcast

1
Episode 132: Optimize Your SOC 2 - Lessons Learned from the 2023 Benchmark Study w/ Scott Woznicki 43:31

1 year тому43:31

43:31

The Virtual CISO Podcast

1
Episode 131: The New CMCC Proposed Rule w/ Jeff Carden & Warren Hylton 51:44

1 year тому51:44

51:44

The Virtual CISO Podcast

1
Episode 130: Revolutionizing Security Training with Kevin Paige CISO and VP of Product Strategy at Uptycs 46:56

1 year тому46:56

46:56

The Virtual CISO Podcast

1
Episode 129: Empowering Diversity in the Cybersecurity Industry with Larry Whiteside Jr. 40:08

2 years тому40:08

40:08

The Virtual CISO Podcast

1
Episode 128: Understanding the ISO 27001:2022 Update with Andrew Frost and Leigh Ronczka 36:40

2 years тому36:40

36:40

In this episode of The Virtual CISO Podcast, your host, John Verry, sits down with Andrew Frost and Leigh Ronczka of CBIZ Pivot Point Security to discuss the updates needed to successfully transition from ISO27001:2013 to ISO 27001:2022. Join us as we discuss: How simplistic it is for a company to transition to ISO 27001:2022 The level of effort required to implement the changes What auditors are looking for when organizations make an update And more! If you want to learn more about the realm of cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms and subscribe to the Virtual CISO Podcast. For updates on the state of cybersecurity, digital technology, and more, follow us on LinkedIn, https://www.linkedin.com/company/pivot-point-security/…

The Virtual CISO Podcast

1
Ep 127: The Future of Security: Unraveling the World of Social Engineering 57:11

2 years тому57:11

57:11

The Virtual CISO Podcast

1
Ep 126: Unlocking AI's Potential: Risks, Optimism & Challenges in the Current Wave of AI Technology 57:30

2 years тому57:30

57:30

The Virtual CISO Podcast

1
Ep: 125 - Understanding the New FTC Safeguards Rule: Key Changes and Requirements Explained 36:52

2 years тому36:52

36:52

Tune into an insightful conversation with Jeremy Price, co-leader of a national cybersecurity practice. In this engaging discussion, Jermey explains the updated FTC safeguard rules that went into effect in June and what they’re intended to do. In this episode, your host, John Verry, and Jeremy Price discuss: - The Gramm Leach Bliley Act updates and how that affects financial institutions, and companies that offer things like consumer financial products and services - The extended and new definition of financial institutions - How to determine whether or not your company falls under the new definition of financial institutions and what that means for your business - And more!…

The Virtual CISO Podcast

1
An Introduction to AI and its Place in the Work Place with CEO of Private AI Patricia Thaine 45:22

2 years тому45:22

45:22

Join us for an insightful conversation with Patricia Thaine, Founder and CEO of Private AI, as we delve into the world of artificial intelligence, language models, and data privacy. In this engaging discussion, Patricia sheds light on the transformative potential of AI, particularly language models like GPT-3.5, in various industries. In this episode, your host, John Verry, and Patricia Thaine discuss: how specialized AI models are revolutionizing tasks such as sentiment analysis and personal information identification, all while ensuring data remains private and secure. responsible AI practices and preparing the next generation to harness AI's power responsibly. the potential of AI and the ethical considerations that accompany it. And more! If you want to learn more about the realm of cybersecurity, follow The Virtual CISO Podcast on your favorite streaming platforms! For weekly updates on the state of cybersecurity, digital technology, and more, follow us on LinkedIn, @pivot-point-security.…

The Virtual CISO Podcast

1
Ep 123: Navigating IT-OT Dynamics: Cybersecurity, Integration, and Collaboration 45:44

2 years тому45:44

45:44

The Virtual CISO Podcast

1
Ep 122: Navigating New Horizons: CMMC, NIST 800-171 Updates, and Compliance Insights 40:34

2 years тому40:34