Shows / The Virtual CISO Podcast
The Virtual CISO Podcast
The Virtual CISO Podcast is a frank discussion that provides the very best information security advice and insights for Security, IT and Business leaders. If you’re looking for the latest strategies, tips, and trends from seasoned information security practitioners, want no-B.S. answers to your biggest security questions, need a perspective on how your peers are addressing the same issues, or just simply want to stay informed and proactive, then welcome to the show. Our moderator, John Verry…
Episodes
- The Virtual CISO Podcast
Ep 102: The Intersection of Privacy and Security
You cannot have privacy without security. While they once existed quite distinct from one another, they are now so delicately woven that they are nearly…
- The Virtual CISO Podcast
Ep 101: Most Asked CMMC Questions
CMMC (Cybersecurity Maturity Model Certification) can raise many red flags and concerns - As CMMC rulemaking approaches in 2023, we take a break from our…
- The Virtual CISO Podcast
Ep 100: The Two Audiences For Privacy & How They Drive Data Collection
This marks our 100th episode of The Virtual CISO and an insightful journey into having the opportunity to have frank discussions with thought leaders that…
- The Virtual CISO Podcast
Unpacking Critical Elements of Supply Chain Risk Management
Supply chain risk management can prove to be a slippery slope—why should you take pains to conduct a proper risk assessment, and how do they impact IT and…
- The Virtual CISO Podcast
Breaking Down the Latest in Software Security Standards & the Impact on SaaS Businesses
What are the merits of the Software Assurance Maturity Model (SAMM), and how does it differ from the Application Security Verification Standard (ASVS) model?…
- The Virtual CISO Podcast
What You Need to Know about APIs and API Security
Application development is moving from a web-centric world to an API-centric world. If you’re wondering what that looks like, what the security implications…
- The Virtual CISO Podcast
How to Measure the Value of Information Security
Most recognize the value preservation in cybersecurity. But forward thinking professionals also see the value creation in having a secure information posture…
- The Virtual CISO Podcast
Understanding NIST’s Secure Software Development Framework
What exactly is a Software Development Life Cycle, and how does NIST’s Secure Software Development Framework impact that cycle and your organization? Of note…
- The Virtual CISO Podcast
US Gov. Cybersecurity Roadmap: Where it came from and Where is it Going?
Today, information is worth more than riches. The new currency is data. With this being true, the state of cybersecurity within the upper branches of the…
- The Virtual CISO Podcast
Confronting the Wild West of Database Security
Don’t wait for an emergency; secure your database correctly right out of the gate. Think of everything outside of your database as the wild west. What can you…
- The Virtual CISO Podcast
Bridging the Gap Between Cybersecurity and the Business World
Ron Gula, President and Co-Founder of Gula Tech Adventures, has a very specific goal: To defend the country in cyberspace by investing in companies and…
- The Virtual CISO Podcast
Legal and Infosec strategies to deal with exploding Cyber Liability Insurance premiums
There’s no denying that cybersecurity risks in the workplace have increased exponentially in recent years. From the pandemic causing employees to work from…
- The Virtual CISO Podcast
Important Clarifications on CMMC v2 from CMMC Day May 9, 2022
To invest in CMMC or to not invest in CMMC, that is the question. CMMC (Cybersecurity Maturity Model Certification) is a lofty yet necessary investment for the…
- The Virtual CISO Podcast
The Past, Present and Future of Cybersecurity From the Viewpoint of a Venture Capitalist
Alberto Yépez joins the show to share his perspective as a venture capitalist working to help entrepreneurs build Cybersecurity businesses. He started his…
- The Virtual CISO Podcast
Understanding Attack Surface Management and How It Applies to Your Cyber Security Strategy
We’ve spent the last two and a half years with rapidly rising cloud adoption. It was a rocket ship before that, but the COVID-19 pandemic has only accelerated…
- The Virtual CISO Podcast
The Convergence of Physical & Cyber Security and the Impact to Cyber Security Professionals
As technology advances, there will always be new threats from malicious actors seeking to exploit these advancements — whether that be in the digital realm or…
- The Virtual CISO Podcast
What CMMC 2 Guidance Means for Managed Service Providers (MSPs)
As the implementation of CMMC by the DIB picks up pace, the frequently shifting requirements can be daunting — especially when the guidance is already so…
- The Virtual CISO Podcast
8 Ingredients for Baking Inclusivity into Your Culture
Inclusivity and diversity aren’t just about who you hire — it’s about the culture you create. Sure, you can get talent from all walks of life, but if you…
- The Virtual CISO Podcast
Becoming More Efficient w/ a Cloud-Native Approach
What if you could be proactive in your approach to cloud data security rather than a reactive one once the attack has been made? This is exactly the solution…
- The Virtual CISO Podcast
Use the CSA Cloud Controls to Maximize Your Security & Reduce Your Risk of Breach
Even before the pandemic, the majority of businesses were already moving to the cloud. Now, it seems you can’t do business without it. Which means cloud…
- The Virtual CISO Podcast
Ongoing Challenges in CMMC
CMMC has come a long way in recent years… But organizations still face plenty of challenges navigating the guidance. What are the biggest hurdles and how can…
- The Virtual CISO Podcast
Is Open Source the Future of Endpoint Security
Open source is a transparency issue. Being able to see what code is running on your computer — as well as what’s being monitored — gives you practically…
- The Virtual CISO Podcast
The AWS Approach to Provable Security
Traditionally, companies have relied on the promises of vendors when it comes to reaffirming their security stance. However, LimaCharlie has a far more radical…
- The Virtual CISO Podcast
What Does the New ISO 27002 Update Mean for You?
After years, ISO 27002 is finally here. What does that mean for your business? Luckily, the transition should be pretty seamless… But if you’re worried, have…
- The Virtual CISO Podcast
CMMC 2.0 & Continuous Compliance w/ Andrea Willis
If you look around at what’s happening in the world of cybersecurity, you’ll notice one thing: Security never stops… Which means neither should compliance…
- The Virtual CISO Podcast
8 Information Security Predictions for 2022
We’ve had another bumpy year in 2021. So, what’s coming down the pike in 2022? And what impact will the ongoing information security challenges of today have…
- The Virtual CISO Podcast
Government Security Guidance: How We Got Here
NIST, ISO, CMMC… If you’re beholden to government security guidance — and let’s face it, if you’re a company operating in the US, you very likely are — the…
- The Virtual CISO Podcast
How Hardware Hackers Exploit IoT Vulnerabilities w/ Joe Grand
You’ve probably heard the hype: IoT is the next frontier in the information revolution that promises to make all our lives easier… And that’s doubly true for…
- The Virtual CISO Podcast
Bridging the Gap Between Security & Development Teams w/ Harshil Parikh
There is an age-old conflict between security and development teams. Development teams are focused on time-to-market and packing features into the product…
- The Virtual CISO Podcast
Why Cloud Is More Secure Than Your Average On-Prem Solution w/ Mark Richman
What’s more secure? A cloud-based or on-prem document management system? It’s a question that gets asked a lot in our industry. So, I invited Mark Richman…
- The Virtual CISO Podcast
How Configuration Management Makes Security Simple w/ Brian Hajost
Configuration management is the best kept secret in security. Not only will it save time and money, it also helps you marry compliance and security — something…
- The Virtual CISO Podcast
CMMC 2.0 is Here! Find Out What It Really Means for DIB and Non-DIB USG
The US Department of Defense (DoD) has just announced CMMC 2.0, a new strategic direction for its cybersecurity program based on public comment and internal…
- The Virtual CISO Podcast
How Simply Cyber Helps People Pivot to a Cybersecurity Career w/ Gerald Auger
A lot of people want to break into cybersecurity. And why not? Where else can you have a blast, work with really smart people, earn a great living, have…
- The Virtual CISO Podcast
Can You Benefit from Attack Surface Management? w/ Steve Ginty
In a world where new vulnerabilities appear seemingly every minute, threat intelligence is more important than ever. And one of the most intriguing approaches…
- The Virtual CISO Podcast
Why Continuous Compliance Matters More than Ever w/ Mosi Platt
As public trust in technology erodes — for the first time — it’s clear that we need to reevaluate our approaches to security and compliance. The way we’ve been…
- The Virtual CISO Podcast
How HIPAA Compliant Email is Revolutionizing Healthcare w/ Hoala Greevy
When it comes to healthcare InfoSec, it’s the Wild West. Most healthcare organizations just don’t have the necessary IT budgets to make it a priority. But it…
- The Virtual CISO Podcast
Private Practices: How to Prioritize Privacy in Your Organization w/ Jason Powell
In the U.S., it’s easy to look at overseas privacy legislation like GDPR and conclude it’s a reaction to worrying data practices from today’s tech giants. In…
- The Virtual CISO Podcast
Why Information Security Is Key to Business Strategy w/ Chris Dorr
Chess legend Bobby Fischer once said that winning tactics flow from a superior position. Bobby Fischer would have made a great CISO. That’s because information…
- The Virtual CISO Podcast
Head in the Clouds: Multi-Cloud Security & Governance w/ John Grange
How well do you know what’s happening in your cloud? With so many people in an organization able to access it, managing and tracking every change can be a…
- The Virtual CISO Podcast
Can We Predict Security Threats w/ Machine Learning? w/ Johnna Verry
Every CISO’s dreams is moving from reactive security to purely proactive security posture. In an era of big data and technological advancements in machine…
- The Virtual CISO Podcast
What People Get Wrong About ISO 27001 Compliance
Just because ISO 27001 suggests a control, doesn’t mean you have to have it – in fact, you could be hurting yourself if you do by wasting money and have more…
- The Virtual CISO Podcast
Bridging the Gap Between Traditional Compliance & DevOPs w/ Raj Krishnamurthy
Traditional compliance approaches have served us well for years… But they just don’t cut it anymore. We need an approach to compliance that moves at the speed…
- The Virtual CISO Podcast
A Guide for Validating Your Security Process w/ John Verry
In this special episode, we’re sharing a guest appearance John made on The Perfect Storm. During that episode, he shared how Pivot Point Security helps…
- The Virtual CISO Podcast
Governing Cybersecurity: A Process for Becoming Provably Secure & Compliant w/ John Verry
Today’s special episode was inspired by a conversation we had with a then potential, now current client of ours at Pivot Point Security. In discussing our…
- The Virtual CISO Podcast
The Cybersecurity Executive Order: What You Need to Know w/ Scott Sarris
In the wake of the SolarWinds fiasco, a new executive order mandates practices to prevent future attacks… How well does it address the threats? And what does…
- The Virtual CISO Podcast
Your Passwords Are Failing You w/Josh Amishav-Zlatin
By the time you think of a ‘new’ password, attackers already have a way to crack it. Josh Amishav-Zlatin, Founder & Technical Director at BreachSense, is here…
- The Virtual CISO Podcast
Information Governance w/David Gould
Information governance is the solution to that irrational fear of deletion we all experience from time to time. Expert in the field and Chief Customer Officer…
- The Virtual CISO Podcast
DIBCAC & CMMC Audit Prep w/ George Perezdiaz & Caleb Leidy
Are you ready for your DIBCAC/CMMC audit? Let’s make sure. We’re speaking to two of our best Security Consultants from right here within our ranks at Pivot…
- The Virtual CISO Podcast
Trust Is a Vulnerability: 5 Steps on the Path to Zero Trust with John Kindervag
How do you quantify trust? Is it something that can be digitized? In the world of cybersecurity, trust is a vulnerability. What we need is Zero Trust. That’s…
- The Virtual CISO Podcast
You Are a Target: Assessing Cybersecurity Risk with Dr. Eric Cole
Whoever propagates the rumor that the goal of cybersecurity is to prevent all attacks deserves to be punched in the face. The goal of cybersecurity is timely…
- The Virtual CISO Podcast
CMMC Assessments Are Here: What You Need to Know with Stacy High-Brinkley
In the latest episode, Stacy High-Brinkley, VP of Compliance Solutions at Cask, shares what you need to know about the coming CMMC assessments. To hear this…
- The Virtual CISO Podcast
Everything You Need to Know About StateRAMP with Leah McGrath
The federal government has FedRAMP to manage security authorizations for cloud service offerings. But cyber attacks don’t stop at the federal level. State and…
- The Virtual CISO Podcast
How EDR & NDR Help You Make Better Security Decisions with Chris Neyhuis
Remember those halcyon days when you could just stick an antivirus on your desktop and not worry — before all these confusing initialisms like EDR and NDR……
- The Virtual CISO Podcast
How PreVeil Drive Makes Storing and Sharing Data More Secure with Sanjeev Verma
PreVeil Drive is a cloud service that lets users encrypt, store and share their files for CMMC Compliance and personal use. Unlike other cloud services such as…
- The Virtual CISO Podcast
Lessons Learned in Our Initial 27701 Certification Audits
ISO-27701 is an exciting new standard. But it comes with a learning curve for all of us — clients, consultants, and auditors. In this episode, we’ll discuss…
- The Virtual CISO Podcast
Using your ISO 9001 Management System to Simplify CMMC Certification
John Laffey, Program Manager at Perry Johnson Registrars, Inc. discusses the cornerstones of an information security management system from the perspective of…
- The Virtual CISO Podcast
How to Communicate Across Departmental Divides
Have you ever wished that there was some sort of Star-Trek universal translator device for communicating your department’s needs to the C-Suite? Well, the…
- The Virtual CISO Podcast
MSPs, MSSPs & Validation: What You Need to Know
Gone are the days when every company had their own internal IT department. We’re well into the era of Managed Service Providers. But how do you find the right…
- The Virtual CISO Podcast
Why CMMC Is the Most Significant Standard of all Time
With the proliferation of so many information security standards, are we nearing a breaking point? In the end, which standard will win? In this episode, John…
- The Virtual CISO Podcast
CMMC Level 1: An Overview
Let’s talk about the Cybersecurity Maturity Model Certification, or CMMC. What is it, why should you care about it, and how do you know if it’s going to impact…