Shows / Defense in Depth
Defense in Depth
Defense in Depth, hosted by David Spark, Steve Zalewski, Geoff Belknap, and Edward Contreras, promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead our discussion.
Episodes
Defense in DepthCan You Build a Security Program on Open Source?
All links and images for this episode can be found on CISO Series. What would it take to build your entire security program on open source software, tools, and…
Defense in DepthThird Party Risk vs. Third Party Trust
All links and images for this episode can be found on CISO Series. Businesses grow based on trust, but they have to operate in a world of risk. Even…
Defense in DepthHow Can We Improve the Cyber Sales Cycle?
All links and images for this episode can be found on CISO Series The cybersecurity sales process is so terribly inefficient. And everyone, the targets and…
Defense in DepthWhat Leads a Security Program: Risk or Maturity?
All links and images for this episode can be found on CISO Series. When you think about building a plan (and budget!) for your security program, do you lead…
Defense in DepthLimitations of Security Frameworks
All links and images for this episode can be found on CISO Series Why do strongly supported security frameworks have such severe limitations when building a…
Defense in DepthWhy Is There a Cybersecurity Skills Gap?
All links and images for this episode can be found on CISO Series. Why is there a cybersecurity skills gap? Practically everyone is looking to hire, and there…
Defense in DepthWhat Can the Cyber Haves Do for the Cyber Have Nots?
All links and images for this episode can be found on CISO Series. Given that your company's security is dependent on the security of your partners and others…
Defense in DepthSecuring Unmanaged Assets
All links and images for this episode can be found on CISO Series. "When the asset discovery market launched, every single company that offered a solution used…
Defense in DepthAmbulance Chasing Security Vendors
All links and images for this episode can be found on CISO Series A good high profile security threat seems like a good time to alert potential customers about…
Defense in DepthDo CISOs Have More Stress than Other C-Suite Jobs
All links and images for this episode can be found on CISO Series Why do CISOs seem more stressed out than other C-level executives? Check out this post for…
Defense in DepthHow Should We Discuss Cyber With the C-Suite?
All links and images for this episode can be found on CISO Series How detailed do we get in our conversation with business leaders? Do we dumb it down? Or is…
Defense in DepthCan You Be a vCISO If You've Never Been a CISO?
All links and images for this episode can be found on CISO Series Why are there so many vCISOs who have never been a CISO? Isn't it difficult to advise on a…
Defense in DepthHow Should We Gauge a Company's Cyber Health?
All links and images for this episode can be found on CISO Series As an outside observer, how can you tell if a company is staying cyber healthy? While there…
Defense in DepthReducing the Attack Surface
All links and images for this episode can be found on CISO Series The cyber attack surface just keeps growing to the point that it seems endless. Protecting it…
Defense in DepthDo We Need a Marketing Manager for the Security Team?
All links and images for this episode can be found on CISO Series Those reports on security procedures for the business are falling short. No one is reading…
Defense in DepthCybersecurity Budgets
All links and images for this episode can be found on CISO Series Cybersecurity budgets are increasing, by a lot. What's fueling the increase and where are…
Defense in DepthHow Can We Make Sense of Cybersecurity Titles?
All links and images for this episode can be found on CISO Series What's the difference between a head of security, a vp of security, and a CISO? Do job…
Defense in DepthWalk a Mile in a Security Recruiter's Shoes
All links and images for this episode can be found on CISO Series Instead of complaining about the security hiring process, walk a mile in a recruiter's shoes…
Defense in DepthMoving Security from a Prevention to a Resilience Strategy
All links and images for this episode can be found on CISO Series Are security programs drifting from a prevention to a resilience strategy? If so, are you…
Defense in DepthHow to Engage with Non-Technical Business Leaders
All links and images for this episode can be found on CISO Series How do you talk to non-technical business leaders about cybersecurity? It's a concern, it's a…
Defense in DepthCybersecurity Burnout
All links and images for this episode can be found on CISO Series Why are cybersecurity professionals burning out? What's the dynamic of the job, the pressures…
Defense in DepthHow to Build a Greenfield Security Program
All links and images for this episode can be found on CISO Series You're starting a security program from scratch and you're trying to figure out where to…
Defense in DepthManaging the Onslaught of Files
All links and images for this episode can be found on CISO Series Files are still the core of how people do business. How are you dealing with the onslaught of…
Defense in DepthCan You Have Culture Fit and Diversity, or Are They Mutually Exclusive?
All links and images for this episode can be found on CISO Series Hiring managers speak about looking for culture fit and diversity, but never at the same…
Defense in DepthHow to Follow Up With a CISO
All links and images for this episode can be found on CISO Series Cyber sales is hard. But don't let the difficulty of doing it get in way of your good…
Defense in DepthRoles to Prepare You to Be a CISO
All links and images for this episode can be found on CISO Series One day you want to be a CISO. What area of security you begin your studies? Or maybe you…
Defense in DepthMinimizing Damage from a Breach
All links and images for this episode can be found on CISO Series What can we do to reduce the damage of a breach and the duration of detection and…
Defense in DepthWe're All Still Learning Cyber
All links and images for this episode can be found on CISO Series Learning cyber is not a question for those who are just starting out. It's for everybody…
Defense in DepthPractical Cybersecurity for IT Professionals
All links and images for this episode can be found on CISO Series You're a CISO, vCISO, or MSSP rolling into a company that has yet to launch a cybersecurity…
Defense in DepthData Protection for Whatever Comes Next
All links and images for this episode can be found on CISO Series Cybersecurity boils down to securing your data or data protection. But that simple concept…
Defense in DepthWhat Is Attack Surface Profiling?
All links and images for this episode can be found on CISO Series Is attack surface profiling the same as a pen test? If it isn't what unique insight can…
Defense in DepthHow Can You Tell If Your Security Program Is Improving?
All links and images for this episode can be found on CISO Series What's your best indicator that your security program is actually improving? And besides you…
Defense in DepthHow Can We Improve Recruiting of CISOs and Security Leaders?
All links and images for this episode can be found on CISO Series Interviewing for leadership positions in cybersecurity is difficult for everyone involved…
Defense in DepthHow Is Our Data Being Weaponized Against Us?
All links and images for this episode can be found on CISO Series How are nefarious actors using our own data (and metadata) against us? And given that, in…
- Defense in Depth
Can Security Be a Profit Center?
All links and images for this episode can be found on CISO Series Is it possible to position your security team as a profit center instead of the traditional…
- Defense in Depth
Getting Ahead of the Ongoing Malware Fight
All links and images for this episode can be found on CISO Series For years we've been referring to malware protection as a cat and mouse game. The crooks come…
Defense in DepthBuilding a Security Awareness Training Program
All links and images for this episode can be found on CISO Series We all know and have experienced bad security awareness training. People can learn, and…
- Defense in Depth
Onboarding Cyber Professionals with No Experience
All links and images for this episode can be found on CISO Series You want to bring on entry level personal, But green employees, who are not well versed in…
- Defense in Depth
Where's the Trust in Zero Trust?
All links and images for this episode can be found on CISO Series Zero trust is a hollow buzzword. In any form of security, there exist critical points where…
- Defense in Depth
Who Investigates Cyber Solutions?
All links and images for this episode can be found on CISO Series Cyber professionals, who is responsible on your team for investigating new solutions? Check…
- Defense in Depth
Does the Cybersecurity Industry Suck?
All links and images for this episode can be found on CISO Series In the cyber industry we pat each other on the back and give each other awards, all while the…
- Defense in Depth
Are We Taking Zero Trust Too Far?
All links and images for this episode can be found on CISO Series For some, the definition of zero trust has expanded from how we grant access to networks…
- Defense in Depth
Is Shift Left Working?
All links and images for this episode can be found on CISO Series Developers and security professionals have been heavily sold on the concept of "shift left"…
- Defense in Depth
Technical vs. Compliance Professionals
All links and images for this episode can be found on CISO Series Do we have a Monitgue/Capulet rivalry between technical and compliance professionals? Why is…
- Defense in Depth
Why Do So Many Cybersecurity Products Suck?
All links and images for this episode can be found on CISO Series Why do we end up with so many bad security products? Who is to blame and how can we fight…
- Defense in Depth
Training for a Cyber Disaster
All links and images for this episode can be found on CISO Series What are you doing to prepare for the next cyber disaster? You must train for it, because…
- Defense in Depth
Virtual Patching
All links and images for this episode can be found on CISO Series What if you didn't spend all your time patching vulnerabilities but instead created a…
- Defense in Depth
Start a Cybersecurity Department from Scratch
All links and images for this episode can be found on CISO Series A 500+ person company doesn't have a security department. They need one and they need to…
- Defense in Depth
How to Think Like a Cybercrook
All links and images for this episode can be found on CISO Series "If you want to catch a cybercrook, you need to think like one." But how do you actually go…
- Defense in Depth
Building a Data-First Security Program
All links and images for this episode can be found on CISO Series Could you build a data-first security program? What would you do if you focused your security…
- Defense in Depth
Offensive Security
All links and images for this episode can be found on CISO Series Offensive security or "hacking back" has always been seen as either unethical or illegal. But…
- Defense in Depth
When Vendors Pounce on New CISOs
All links and images for this episode can be found on CISO Series A security professional announces a new position as CISO. As a vendor you see this as good…
- Defense in Depth
Building a Cybersecurity Culture
All links and images for this episode can be found on CISO Series How do you begin building a cyber security culture for the whole company? And more…
- Defense in Depth
How to Pitch to a Security Analyst
All links and images for this episode can be found on CISO Series You're a security vendor and you've got a short briefing with a security analyst from a…
- Defense in Depth
Is Your Data Safer in the Cloud?
All links and images for this episode can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's…
- Defense in Depth
What Should We Stop Doing in Cybersecurity?
All links and images for this episode can be found on CISO Series Security professionals are drowning in activities. Not all of them can be valuable. What…
- Defense in Depth
DDoS Solutions
How seamless are Distributed Denial of Service or DDoS solutions today? If you get a denial of service attack, how quickly can these solutions snap into action…
- Defense in Depth
Making Cybersecurity Faster and More Responsive
All links and images for this episode can be found on CISO Series Knowing is only one-third the battle. Another third is responding. And the last third is…
- Defense in Depth
Promises of Automation
All links and images for this episode can be found on CISO Series Automation was supposed to make cybersecurity professionals' lives simpler. And it was…
- Defense in Depth
When Social Engineering Bypasses Our Cyber Tools
All links and images for this episode can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's…