Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

All links and images for this episode can be found on <a href= "https://cisoseries.com/how-should-we-gauge-a-companys-cyber-health"> CISO Series</a> As an outside observer, how can you tell if a company is staying cyber healthy? While there is no financial statement equivalency to let you know the strength of a company's security profile, there are signals that'll give you a pretty good idea. Check out <a href= "https://www.linkedin.com/posts/jamilfarshchi_cybersecurity-investing-cfa-activity-6873621577016115200-X2Nh/">this post</a> for the discussions that are the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href="http://twitter.com/">@dspark</a>), the producer of <a href="https://cisoseries.com/">CISO Series</a>, and <a href="https://www.linkedin.com/in/geoffbelknap/">Geoff Belknap</a> (<a href= "http://twitter.com/geoffbelknap">@geoffbelknap</a>), CISO, <a href="http://linkedin.com/">LinkedIn</a>. We welcome our guest <a href="https://www.linkedin.com/in/matthew-honea/">Matt Honea</a>, CISO, <a href= "https://www.smartnews.com/en/">SmartNews</a>. Thanks to our podcast sponsor, Automox <a href= "https://www.automox.com/signup?utm_campaign=2022q4campaign&utm_medium=partner&utm_source=cisoseriespodcast&utm_content=trial"> <img src= "https://assets.libsyn.com/secure/show/156524/banner-ad-Automox-CSH-600100px-4-Thursday-Friday-and-WIR.png" alt="Automox" width="600" height="100" /></a> Are you ready to ditch manual patching? With Automox, you can automatically patch your third-party applications, Windows, macOs, and Linux devices with one easy-to-use, cloud-native platform. <a href= "https://www.automox.com/signup?utm_campaign=2022q4campaign&utm_medium=partner&utm_source=cisoseriespodcast&utm_content=trial"> Try for yourself</a> with our free 15-day trial and have all your endpoints safe and secure in just 15 minutes. In this episode: <ul> <li>As an outside observer, how can you tell if a company is staying cyber healthy?</li> <li>What are the signals to let you know the strength of a company's security profile?</li> <li>How do we go about trying to determine a company's cyber health?</li> <li>Why is it important to know about another company's cyber health?</li> </ul>

Defense in Depth

How Should We Gauge a Company's Cyber Health?

All links and images for this episode can be found on <a href= "https://cisoseries.com/reducing-the-attack-surface">CISO Series</a> The cyber attack surface just keeps growing to the point that it seems endless. Protecting it all is impossible. Is there anything that can be done to reduce that attack surface and limit your exposure? Check out <a href= "https://www.linkedin.com/posts/szalewski_defenseindepth-cisoseries-exposuremanagement-activity-6943977560053608448-54n4/?utm_source=linkedin_share&utm_medium=member_desktop_web"> this post</a> for the discussion that are the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/">@dspark</a>), the producer of <a href= "https://cisoseries.com/">CISO Series</a>, and <a href= "https://www.linkedin.com/in/szalewski/">Steve Zalewski</a>. Our sponsored guest is <a href= "https://www.linkedin.com/in/jonathantrull/">Jonathan Trull</a> (<a href="http://twitter.com/jonathantrull">@jonathantrull</a>), CISO, <a href="http://qualys.com/">Qualys</a>. Thanks to our podcast sponsor, Qualys <a href="http://qualys.com/"><img src= "https://assets.libsyn.com/secure/show/156524/banner-ad-qualys-logo-600-100.jpeg" alt="Qualys" width="600" height="100" /></a> <a href="http://qualys.com/">Qualys</a> is a pioneer and leading provider of cloud-based security and compliance solutions. In this episode: <ul> <li>Is there anything that can be done to reduce that attack surface and limit your exposure?</li> <li>Is attack surface reduction a new security development philosophy or is it just a rebranding of vulnerability management?</li> <li>And what value does it have in comparison to other popular theories such as zero trust and defense in depth?</li> <li>Is everything just another form of exposure management?</li> </ul>

Reducing the Attack Surface

All links and images for this episode can be found on <a href= "https://cisoseries.com/do-we-need-a-marketing-manager-for-the-security-team"> CISO Series</a> Those reports on security procedures for the business are falling short. No one is reading them. What good are security controls if your staff doesn't know about them or adhere to them? Is it time to hire a marketing manager for the security team? Check out <a href= "https://www.linkedin.com/posts/gabrielfriedlander_food-for-thought-maybe-its-time-to-hire-activity-6839562194833743872-YE_j/"> this post</a> for the discussion that are the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/">@dspark</a>), the producer of <a href= "https://cisoseries.com/">CISO Series</a>, and <a href= "https://www.linkedin.com/in/szalewski/">Steve Zalewski</a>. Our guest is <a href="https://www.linkedin.com/in/ldeaner/">Laura Deaner</a> (<a href="http://twitter.com/b3dwin/">@b3dwin</a>), CISO, <a href="https://www.northwesternmutual.com/">Northwestern Mutual</a>. Thanks to our podcast sponsor, IANS Research <a href= "https://www.iansresearch.com/resources/infosec-content-downloads/research-reports/2022-ciso-compensation-benchmark-report-cs"> <img src= "https://assets.libsyn.com/secure/show/156524/banner-ad-IANS-Defense_in_Depth_1.png" alt="IANS Research" width="600" height="100" /></a> CISOs, how does your compensation compare with your peers? Download IANS + Artico Search's 2022 CISO Compensation Benchmark Report. <a href= "https://www.iansresearch.com/resources/infosec-content-downloads/research-reports/2022-ciso-compensation-benchmark-report-cs"> Find objective insights</a> and comprehensive compensation data from over 500 CISOs across the U.S. and Canada. In this episode: <ul> <li>What good are security controls if your staff doesn't know about them or adhere to them? </li> <li>Is it time to hire a marketing manager for the security team? </li> <li>Why does it make sense to think of who the stakeholder is and what’s happening in their world? </li> <li>How to best build policies that don’t get ignored?</li> </ul>

Do We Need a Marketing Manager for the Security Team?

All links and images for this episode can be found on <a href= "https://cisoseries.com/cybersecurity-budgets">CISO Series</a> Cybersecurity budgets are increasing, by a lot. What's fueling the increase and where are those budgets being spent? Check out <a href= "https://www.linkedin.com/feed/update/urn:li:activity:6973701503299526656/">this post</a> for the discussions that are the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href="http://twitter.com/">@dspark</a>), the producer of <a href="https://cisoseries.com/">CISO Series</a>, and <a href="https://www.linkedin.com/in/geoffbelknap/">Geoff Belknap</a> (<a href= "http://twitter.com/geoffbelknap">@geoffbelknap</a>), CISO, <a href="http://linkedin.com/">LinkedIn</a>. We welcome our sponsored guest sponsored guest <a href= "https://www.linkedin.com/in/nick-kakolowski-2775977a/">Nick Kakolowski</a>, senior director of research at <a href= "https://www.iansresearch.com/">IANS Research</a>. Thanks to our podcast sponsor, IANS Research <a href= "https://www.iansresearch.com/resources/infosec-content-downloads/research-reports/2022-ciso-compensation-benchmark-report-cs"> <img src= "https://assets.libsyn.com/secure/show/156524/banner-ad-IANS-Defense_in_Depth_1.png" alt="IANS Research" width="600" height="100" /></a> CISOs, how does your compensation compare with your peers? Download IANS + Artico Search's 2022 CISO Compensation Benchmark Report. <a href= "https://www.iansresearch.com/resources/infosec-content-downloads/research-reports/2022-ciso-compensation-benchmark-report-cs"> Find objective insights</a> and comprehensive compensation data from over 500 CISOs across the U.S. and Canada. In this episode: <ul> <li>What's fueling the increase in cybersecurity budgets and where are those budgets being spent? </li> <li>Do we understand where the money is being spent? Is it on new hires? More tooling? </li> <li>Does training new hires provide a good ROI for an increased budget? </li> <li>Should we equate the success of a security program with the size of the budget? Or not? </li> </ul>

David Spark

Defense in Depth by David Spark

Episodes