Shows / The Virtual CISO Podcast
The Virtual CISO Podcast
The Virtual CISO Podcast is a frank discussion that provides the very best information security advice and insights for Security, IT and Business leaders. If you’re looking for the latest strategies, tips, and trends from seasoned information security practitioners, want no-B.S. answers to your biggest security questions, need a perspective on how your peers are addressing the same issues, or just simply want to stay informed and proactive, then welcome to the show. Our moderator, John Verry…
Episodes
- The Virtual CISO Podcast
Solutions to Security, Compliance, and Technology Challenges in Aerospace
Manufacturing tends to resist new technology. Not aerospace, though. It's on the cutting edge. In this episode of The Virtual CISO Podcast, John Virgolino…
- The Virtual CISO Podcast
CMMC Level 3: What Government Staffing Agencies Need to Know
In this episode of The Virtual CISO Podcast, host John Verry, CISO and Managing Partner at Pivot Point Security go over everything government staffing agencies…
- The Virtual CISO Podcast
The ISVS: What You Need to Know
These days, everything is connected to the internet. Whether it’s your car, your light bulbs, your microwave, your pacemaker, or your cochlear implant, it’s…
- The Virtual CISO Podcast
FedRAMP: What You Need to Know
Are you looking to get your product authorized for use by federal agencies? Then you probably need to understand FedRAMP, how it works, and, most importantly…
- The Virtual CISO Podcast
How Data Privacy Standards Affect Your Business
Privacy is changing. Across the globe, new standards are recognizing it as a fundamental human right. But between GDPR, CCPA, and all the other standards…
- The Virtual CISO Podcast
Should You Invest in a GRC Tool for Security & Compliance?
Getting your ducks in a row for a GRC audit can be a huge undertaking. Especially when you get compliant for the audit, then don’t look at it again until the…
- The Virtual CISO Podcast
CMMC Compliance: The Nuances You Should Know
The DFARS interim rule that went into effect on November 30th has a lot of nuances to it — and many out there have questions about how it applies to them. In…
- The Virtual CISO Podcast
GCC High Demystified: What CMMC Compliance Means for DIB Firms
Should I migrate to GCC High? Do I have to? Are there alternatives? If you’re a DIB member and you are using Office 365 — as so many do — reaching CMMC Level 3…
- The Virtual CISO Podcast
What DIB Firms Need to Know About the CMMC Interim Rule
If you’ve taken the time to look through the DFARS Interim Rule… All 80+ (potentially) confusing pages of it... You might have some questions about how it…
- The Virtual CISO Podcast
The Secrets to Keeping Your SaaS Secure
SaaS is a great business to be in. But whether you’re a startup or a mature company… Your product is only as good as your security. Today’s guest, Ryan…
- The Virtual CISO Podcast
32. How IoT Is Shaping the Future of Cybersecurity
The internet of things is taking off. IoT is bringing new innovations across the board… But it’s also bringing a new set of vulnerabilities. If you’re looking…
- The Virtual CISO Podcast
31. A Brief History of NIST Guidance
ISO 27001, CMMC, NIST 800-53… Keeping track of the myriad security guidelines can be tricky. Especially when you don’t know the “why” behind them. To help…
- The Virtual CISO Podcast
30. How to Beat the 6 Most Challenging CMMC L3 Requirements
Preparing to achieve CMMC compliance may seem daunting. Especially in 6 challenging components. But we’re going to make them easy. In the latest The Virtual…
- The Virtual CISO Podcast
29. How COVID-19 Is Shaping Security’s Future w/Reg Harnish
Though 2020 has felt decades-long already… We still haven’t had to deal with the long-term effects of the pandemic. But we will. The question is: Can your…
- The Virtual CISO Podcast
28. Why 800-171 Compliance Isn’t Going Away Any Time Soon w/John Ellis
CMMC is coming... But that doesn’t mean 800-171 compliance is out the window. In this episode, I catch up with John Ellis, Director of the Software Division at…
- The Virtual CISO Podcast
27. How DevOps Took Over (& Why You Should Care) w/Jon Bass
Not too long ago, DevOps seemed like a fringe buzzword… Now, it’s front-and-center. So, what is DevOps and why should you care? To answer, I invited Jon Bass…
- The Virtual CISO Podcast
26: How to Optimize Your ISMS w/Rich Stever
When ISO 27001 is optimized for speed, it’s an amazingly effective and efficient way to manage security and compliance. Today’s guest is one of our most…
- The Virtual CISO Podcast
25: CMMC Compliance & Continuous Monitoring Made Simple w/Chris Lank
If your organization is in the DIB, CMMC compliance is a big deal. It’s probably the biggest thing to happen to information security in history. And you need…
- The Virtual CISO Podcast
24: Everything You Need to Know About ISO 27001 Audits w/ Ryan Mackie
Prepping for an ISO 27001 audit can be a nerve-wracking process. But it doesn’t have to be. You just need to know what you’re getting into. And Ryan Mackie, as…
- The Virtual CISO Podcast
23. Why Security Is So Important for a Growing SaaS w/ Jesse Nash
If you have a growing SaaS company, security may be far down your list of priorities. I’ll be blunt… it shouldn’t. Security maturity can be make-or-break for…
- The Virtual CISO Podcast
22. CMMC Training & Assessments: Rollout, Certification & Competition w/ Ben Tchoubineh
If you are scrambling to figure out CMMC, you aren’t alone. It’s perhaps the most sweeping information security change for DoD contractors in history… And that…
- The Virtual CISO Podcast
21. CMMC Compliance Doesn’t Have to Be Hard (or Pricey) w/ Sanjeev Verma
If your company works with the DoD. You might be worried about CMMC compliance. But it doesn’t have to be hard or expensive. In this episode, I caught up with…
- The Virtual CISO Podcast
20. Faster, Better & Cheaper Vendor Due Diligence Reviews w/ Kevin Hermosura
Covid 19 has created lots and lots of challenges and opened our eyes to ones that lay dormant. One of the most stark realizations is how much we rely on our…
- The Virtual CISO Podcast
19. Why Application Security is a Team Sport and How Your Team Can Win w/ Joe Manico
If you’re a business leader, especially at a SaaS firm or if you’re a developer at a SaaS firm, this episode with Jim Manico will provide a ton of value…
- The Virtual CISO Podcast
18. IT & Security: How to Do More with Less w/ Jose Ciriaco
Information security is a well easily fallen into. There is so much on the market. So many things to consider. It’s hard to determine what you actually need…
- The Virtual CISO Podcast
17. CMMC Certification Audits—Can You Leverage ISO 27001? w/ Thomas Price
If you want a glimpse into what one of your future CMMC audits will be like, this is the show for you. On this episode of The Virtual CISO Podcast, we welcome…
- The Virtual CISO Podcast
16. Why Buyers of Security Services Need to Leverage CREST w/ Ian Glover
Who do you trust with your network? Would you give a random person access to the infrastructure that runs your business? Anyone with a computer and an Internet…
- The Virtual CISO Podcast
15. The OWASP Top Ten is Great, but is it Enough? w/ Andrew van der Stock
We all have things we consider “the best”. Things we look to. Rely on. What happens when one of those old reliable, gold standard things that have been our…
- The Virtual CISO Podcast
14. How Computer Forensics Protects Your Data During Litigation w/ Brian Dykstra
The word forensics usually makes us think of homicide, but it applies to computers, too. Computer forensics simply just means telling the story of what…
- The Virtual CISO Podcast
13. Why ISO 27701 is the Answer to Privacy Compliance w/ Debbie Zaller
As the first data privacy certification available, ISO 27701 can greatly reduce the complexity of managing privacy, risk and proving compliance with…
- The Virtual CISO Podcast
12. Disaster Recovery, Business Continuity, and Data Resilience w/ Cosmo Gazzani
Getting a flat tire is a disaster. Knowing where you keep the spare is disaster recovery. Changing a tire in under 7 minutes to get right back on the road is…
- The Virtual CISO Podcast
11. OWASP ASVS: The Go-To Standard for Application Security w/ Daniel Cuthbert
Your application is probably vulnerable. “But how?! We hired a company to pen test our application. They did a thorough test against the OWASP top 10!” On this…
- The Virtual CISO Podcast
10. Exostar and Their Role in Your CMMC Certification w/ Stuart Itkin
Is your organization ready for CMMC? As CMMCs roll out over the next 6 years, it’s going to become a reality for more and more DoD subcontractors. As many as…
- The Virtual CISO Podcast
9. When an SMB Should Implement a SIEM w/ Danielle Russell
As an SMB, you’re probably thinking you’re too insignificant for a targeted cyberattack. That’s not even a little bit true. In this episode, I interview…
- The Virtual CISO Podcast
8. Resilience Guidance and the SCA w/ Tom Garrubba
You’re a CISO at an SMB, and you see that the AUP is called the SCA now. So now what? Actually, there are 3 applications for this great tool alluded to by the…
- The Virtual CISO Podcast
7: Dead CISO's Don't Get Bonuses w/ Dr. Joel Kahn
If you thought this podcast was supposed to be about information security, you might be confused about why we’re featuring heart disease. Bottom line: Dead…
- The Virtual CISO Podcast
6. The Virtual CIO: What it Is and What it Isn’t w/ Darek Hahn
In this world of remote work that we’ve found ourselves in, there are likely a lot of companies that are looking around and wondering if they’ve got the right…
- The Virtual CISO Podcast
5. Staying Secure in a COVID-19 World w/ John Verry
Can we all agree that this is a strange, confusing, and stressful time to be living through? That none of us really know what’s going to happen, or what the…
- The Virtual CISO Podcast
4. True Confessions of a Real Virtual CISO w/ Andrew Farkas
Trust, but verify. These famous words of Ronald Reagan, who, incidentally, would make a fantastic CISO, are also the simplest explanation of what it’s like to…
- The Virtual CISO Podcast
3. ISO 27001 vs. SOC 2 – Which Attestation is Right For You? w/ Dan Schroeder
Considering an ISO 27001 certification? Wondering about SOC 2 attestation? Trying to figure out the differences between the two? We got you covered. We invited…
- The Virtual CISO Podcast
2. How to Attract and Retain Cyber Talent w/ Deidre Diamond
The cyber talent search feels like a global, dangerous game of Marco Polo. We’re all looking for each other, but nobody can find anyone. (And even if we do…
- The Virtual CISO Podcast
1. CMMC: What You Need to Know About DoD Cybersecurity Regulation w/ Katie Arrington
Katie Arrington is THE expert in the national cyber security battle. As CISO for Acquisition and Sustainment at the United States Department of Defense, she’s…
- The Virtual CISO Podcast
Welcome to The Virtual CISO Podcast
Information security is a serious topic. However, the host of The Virtual CISO Podcast and managing partner at Pivot Point Security, John Verry, doesn’t think…