Shows / The Virtual CISO Podcast

The Virtual CISO Podcast
The Virtual CISO Podcast is a frank discussion that provides the very best information security advice and insights for Security, IT and Business leaders. If you’re looking for the latest strategies, tips, and trends from seasoned information security practitioners, want no-B.S. answers to your biggest security questions, need a perspective on how your peers are addressing the same issues, or just simply want to stay informed and proactive, then welcome to the show. Our moderator, John Verry…
Episodes











The Virtual CISO PodcastEP 151: Trust, But Verify: How HITRUST is Reshaping Assurance
In this episode of the Virtual CISO Podcast, host John Verry and guest Chris Schaeffer discuss the HITRUST framework, its evolution, and its significance in…
The Virtual CISO PodcastEp 150: Is OSCAL the Future of Security Documentation (& FedRAMP)?
In this episode of the Virtual CISO Podcast, John Verry speaks with Kenny Scott, founder and CEO of Paramify, about the challenges of cyber risk management and…

The Virtual CISO PodcastEpisode 148: Cloud Detection & Response
In this episode, John Verry interviews Eric Gumanofsky, Vice President for Product Innovation at Tenable Security, about the concept of Cloud Detection and…
The Virtual CISO PodcastEpisode 147: Why vCISO Engagements Fail
In this episode, John Verry and Matt Webster discuss the evolving landscape of virtual CISO services, exploring the common pitfalls and failures associated…
The Virtual CISO PodcastEpisode 146: Dark Web Monitoring
In this conversation, John Verry interviews Steph Shample, Cybercrime Analyst for DarkOwl, about the dark web and its implications for cybersecurity…
The Virtual CISO PodcastEpisode 145: CMMC: The Final Rule
In this episode of the Virtual See-So Podcast, host John Verry speaks with Sanjeev Verma, chairman and co-founder of Prevail, about the intricacies of CMMC…
The Virtual CISO PodcastEpisode 144: TxRAMP or StateRAMP or AZRAMP or FedRAMP? What’s right for your company?
In this episode of The Virtual CISO Podcast, your host John Verry is joined by Mike Craig to break down the differences between FedRAMP, TxRAMP, AZRAMP, and…
The Virtual CISO PodcastEpisode 143: Is Decentralized Proof of Security Leveraging Blockchain the future of Cybersecurity?
In this episode of The Virtual CISO Podcast, your host, John Verry, sits down with David Carvalho, a cryptography and cybersecurity expert with over 25 years…

The Virtual CISO PodcastEpisode 141: Stopping Business Email Compromise with a Novel Malicious File Reconstruction Approach
In this episode of The Virtual CISO Podcast, your host, John Verry, engages in a conversation with Aviv Grafi, CTO and founder of Votiro, as they discuss…
The Virtual CISO PodcastEpisode 140: DIB/CMMC Cybersecurity – Interesting Observations from a Significant Study
Join us for an engaging episode of the Virtual CISO Podcast with host John Verry. This episode features Chris Petersen, co-founder of LogRhythm and current CEO…
The Virtual CISO PodcastEpisode 139: How adding Crisis Management to your Incident Response Plan can save your bacon?
Join us for an engaging episode of the Virtual CISO Podcast with host John Verry. This episode features Kevin Dinino, President of KCD PR, who delves into the…



The Virtual CISO PodcastEpisode 135: Can Distributed Ledger Technology Simplify Privacy Compliance? W/ Zenobia Godschalk
In this episode of The Virtual CISO Podcast, your host, John Verry, engages in a conversation with guest Zenobia Godschalk, Senior Vice President of Hedera…

The Virtual CISO PodcastKubernetes Security – Simplified Shauli Rozen, CEO of ARMO
In this episode of The Virtual CISO Podcast, your host, John Verry, engages in a conversation with guest Shauli Rozen, CEO and Co-Founder of ARMO, exploring…




The Virtual CISO PodcastEpisode 128: Understanding the ISO 27001:2022 Update with Andrew Frost and Leigh Ronczka
In this episode of The Virtual CISO Podcast, your host, John Verry, sits down with Andrew Frost and Leigh Ronczka of CBIZ Pivot Point Security to discuss the…


The Virtual CISO PodcastEp: 125 - Understanding the New FTC Safeguards Rule: Key Changes and Requirements Explained
Tune into an insightful conversation with Jeremy Price, co-leader of a national cybersecurity practice. In this engaging discussion, Jermey explains the…
The Virtual CISO PodcastAn Introduction to AI and its Place in the Work Place with CEO of Private AI Patricia Thaine
Join us for an insightful conversation with Patricia Thaine, Founder and CEO of Private AI, as we delve into the world of artificial intelligence, language…

The Virtual CISO PodcastEp 122: Navigating New Horizons: CMMC, NIST 800-171 Updates, and Compliance Insights
In this episode of the "Virtual CISO Podcast," your host John Verry speaks with guest Warren Hylton, a FedRisk consultant at CBIZ Pivot Point Security, to…
The Virtual CISO PodcastEp 121: Strategies for Reducing the Cost of Your Cyber Liability Insurance Policy
Like many other businesses, law firms are at significant risk of cyber-attack and increasingly are turning to cyber liability insurance (CLI) to transfer some…
The Virtual CISO PodcastEp 120: A FedRAMP ATO – The Good, The Bad, and the Ugly
To do wide-scale business within the US federal government, cloud service providers (CSPs) need a FedRAMP ATO. The prospect can be daunting as few CSPs have…
The Virtual CISO PodcastEp 119: What is a Microservice Architecture and how do I secure it?
Whatever kind of software application a team is building, the identification and remediation of cybersecurity issues needs to be part of every stage of the…
The Virtual CISO PodcastEp 118: The Simplest Way to Transition from ISO 27001:2013 to ISO 27001:2022
If you are ISO 27001 certified, or considering it, you are likely wondering how the transition from ISO 27001:2013 to ISO 27001:2022 affects you. With the…
The Virtual CISO PodcastEp 117: Eight Key Takeaways from the RSA 2023 Conference
In this week's episode of the Virtual CISO podcast, your host John Verry, Pivot Point Security CISO and Managing Partner, shares his valuable insights from the…
The Virtual CISO PodcastEp 116: What is an SBOM & Why Are My Customers Suddenly Asking for One?
With the release of President Biden’s Executive Order 14028 on “Improving the Nation’s Cybersecurity” from May 2021 the US public and private sectors have been…
The Virtual CISO PodcastEp 115: If Your Asset Management Sucks, Your Security Sucks
Asset management is a crucial aspect of information security. It refers to the processes and procedures involved in identifying, organizing, tracking, and…
The Virtual CISO PodcastEp 114: 4 Tactical Steps To Implementing DevSecOps In 2023
DevSecOps is the practice of integrating security testing at every stage of the software development process. With DevSecOps, training and educating all teams…
The Virtual CISO PodcastEp 113: Should we be in Microsoft 365 GCC, GCC High, or Commercial?
Microsoft 365 was launched in 2011 in hopes of revolutionizing cloud-powered productivity platforms. Since then, Microsoft 365 has grown to the point where it…
The Virtual CISO PodcastEp 112: When should you move to ISO 27001:2022?
ISO 27001:2022 is the first update to the global "gold standard" for provable cybersecurity in ten years. Notable changes from the 2013 version will likely…
The Virtual CISO PodcastEp 111: How to use the Software Assurance Maturity Model (SAMM) to Build Highly Secure Applications
The “buzz” in building more secure applications is “shift security left,” which means integrating security into and throughout the Software Development…
The Virtual CISO PodcastEp 110: Understanding TISAX (Trusted Information Security Assessment Exchange)
Trusted Information Security Assessment Exchange (TISAX) is a vendor due diligence standard used in the automotive industry to verify that third-party…
The Virtual CISO PodcastEp 109: Understanding How Cybercriminals Operate Can Protect Your Business
In today’s cyber landscape, business leaders and security professionals need every edge they can gain to better protect their organizations and plan their…
The Virtual CISO PodcastEp 108: Understanding the Legalities Around CUI
Orgs in the DIB need to protect CUI in alignment with the NIST 800-171 cybersecurity standard—and soon the Cybersecurity Maturity Model Certification (CMMC)…
The Virtual CISO PodcastEp 107: An AWS Security Guru’s Recommendation for Securing your AWS Infrastructure
Over 90% of security breaches in the public cloud stem from user error, and not the cloud service provider. Today, your host John Verry sat down with one of…
The Virtual CISO PodcastEp 106: Strategies to Manage Cybersecurity through an Economic Downturn
Managing Cybersecurity through an Economic downturn is no easy task. With increasing concerns on how to stay secure and compliant in a down economy, John Verry…
The Virtual CISO PodcastEp 105: Solving the Problems of Cloud Native Apps.
Building Cloud Native Applications can bring about many operational and security problems. Today, we sat down with an expert in this field to talk about…
The Virtual CISO PodcastEp 104: Is Digital Business Risk Mgt. The Future of ASM
Digital Business Risk Management helps companies track and disrupt the most advanced bad actors. Team Crymu specializes in Digital Business Risk Management &…
The Virtual CISO PodcastEp 103: The Complexity of Deploying a Secure Application in the Cloud
Governance, Risk, and Compliance (GRC) platforms can be tricky to construct. Today, we sat down with an expert in this field to talk about building and…