Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

All links and images for this episode can be found on <a href= "https://cisoseries.com/should-cisos-be-more-empathetic-towards-salespeople/" target="_blank" rel="noopener">CISO Series</a>. Check out <a href= "https://www.linkedin.com/posts/resilientcyber_how-many-times-have-you-seen-posts-like-these-activity-7103042050584940544-jVFm/?utm_source=share&utm_medium=member_android"> this post</a> for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/">@dspark</a>), the producer of <a href= "https://cisoseries.com/">CISO Series</a>, and <a href= "https://www.linkedin.com/in/geoffbelknap/">Geoff Belknap</a> (<a href="http://twitter.com/geoffbelknap">@geoffbelknap</a>), CISO, <a href="http://linkedin.com/">LinkedIn</a>. Joining me is our guest, <a href="https://www.linkedin.com/in/eheath1/">Emily Heath</a>, general partner, <a href= "https://cyberstarts.com/">Cyberstarts</a>. In this episode: <ul> <li dir="ltr" aria-level="1"> How do CISOs feel about sales pitches? </li> <li dir="ltr" aria-level="1"> Do they have legitimate complaints? </li> <li dir="ltr" aria-level="1"> When do these legitimate complaints cross the line to sounding entitled? </li> <li dir="ltr" aria-level="1"> Do CISOs need to show a little more empathy to sales? </li> </ul> Thanks to our podcast sponsor, SquareX <a href="https://sqrx.io/ciso_did" target="_blank" rel= "noopener"><img src= "//assets.libsyn.com/show/156524/banner-ad-SquareX-Defense-in-Depth-600x100.png" alt="SquareX" width="600" height="100" /></a> SquareX helps organizations detect, mitigate and threat-hunt web attacks happening against their users in real-time, including but not limited to malicious sites, files, scripts, and networks. Find out more at <a href= "https://sqrx.io/ciso_did">sqrx.com</a>.

Defense in Depth

Should CISOs Be More Empathetic Towards Salespeople?

All links and images for this episode can be found on <a href= "https://cisoseries.com/managing-data-leaks-outside-your-perimeter/" target="_blank" rel="noopener">CISO Series</a>. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/">@dspark</a>), the producer of <a href= "https://cisoseries.com/">CISO Series</a>, and <a href= "https://www.linkedin.com/in/geoffbelknap/">Geoff Belknap</a> (<a href="http://twitter.com/geoffbelknap">@geoffbelknap</a>), CISO, <a href="http://linkedin.com/">LinkedIn</a>. Joining me is our sponsored guest, <a href= "https://www.linkedin.com/in/advocatemack/">Mackenzie Jackson</a>, developer advocate, <a href= "http://gitguardian.com/">GitGuardian</a>. In this episode: <ul> <li dir="ltr" aria-level="1"> How to manage data leaks outside your perimeter? </li> <li dir="ltr" aria-level="1"> When data leaks increasingly come from third-parties, what can you do to protect your organization? </li> <li dir="ltr" aria-level="1"> How do we even begin to address this problem? </li> <li dir="ltr" aria-level="1">  Is there a one size fits all fix? </li> </ul> Thanks to our podcast sponsor, GitGuardian <a href="http://gitguardian.com/" target="_blank" rel= "noopener"><img src= "//assets.libsyn.com/show/156524/GitGuardian-banner-ad-600x100-State_Of_Secrets_Sprawl_2024.png" alt="GitGuardian" width="600" height="100" /></a> GitGuardian is a Code Security Platform that caters to the needs of the DevOps generation. It provides a wide range of code security solutions, including Secrets Detection, Infra as Code Security, and Honeytoken, all in one place. A leader in the market of secrets detection and remediation, its solutions are already used by hundreds of thousands of developers in all industries. Try now <a href="http://gitguardian.com/">gitguardian.com</a>

Managing Data Leaks Outside Your Perimeter

All links and images for this episode can be found on <a href= "https://cisoseries.com/what-are-the-risks-of-being-a-ciso/" target="_blank" rel="noopener">CISO Series</a>. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/">@dspark</a>), the producer of <a href= "https://cisoseries.com/">CISO Series</a>, and <a href= "https://www.linkedin.com/in/geoffbelknap/">Geoff Belknap</a> (<a href="http://twitter.com/geoffbelknap">@geoffbelknap</a>), CISO, <a href="http://linkedin.com/">LinkedIn</a>. Joining me is our guest, <a href= "https://www.linkedin.com/in/phildavisjd/">Phil Davis</a>, attorney, healthcare cybersecurity and privacy, <a href= "https://www.hallrender.com/">Hall Render</a>. In this episode: <ul> <li dir="ltr" aria-level="1"> In today's current climate, is the role of the CISO still worth it? </li> <li dir="ltr" aria-level="1"> Does the position carry a lot of potential liability? </li> <li dir="ltr" aria-level="1"> Do the upsides still outweigh the risks? </li> <li dir="ltr" aria-level="1"> Do CISOs tend to have more responsibility than authority? </li> </ul> Thanks to our podcast sponsor, Sonrai Security <a href="https://sonrai.co/ciso" target="_blank" rel= "noopener"><img src= "//assets.libsyn.com/show/156524/banner-ad-Sonrai-Security-600x100.png" alt="Sonrai Security" width="600" height="100" /></a> A one-click solution that removes excessive permissions and unused services, quarantines unused identities, and restricts specific regions within the cloud. Later, maintain this level of security by automatically enforcing policies as new accounts, roles, permissions, and services are added to your environment. Start a free trial today! <a href= "http://sonrai.co/ciso">sonrai.co/ciso</a>

What Are the Risks of Being a CISO?

All links and images for this episode can be found on <a href= "https://cisoseries.com/onboarding-security-professionals/" target= "_blank" rel="noopener">CISO Series</a>. Check out <a href= "https://www.linkedin.com/posts/jerich-beason_democratizeleadershipstrategies-democratizecyberstrategies-activity-6891376203190685696-ISeU/"> this post</a> for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href= "http://twitter.com/">@dspark</a>), the producer of <a href= "https://cisoseries.com/">CISO Series</a>, and <a href= "https://www.linkedin.com/in/geoffbelknap/">Geoff Belknap</a> (<a href="http://twitter.com/geoffbelknap">@geoffbelknap</a>), CISO, <a href="http://linkedin.com/">LinkedIn</a>. Joining me is our guest, <a href= "https://www.linkedin.com/in/paulmconnelly/">Paul Connelly</a>, former CISO, <a href="https://hcahealthcare.com/">HCA Healthcare</a>Got feedback? In this episode: <ul> <li dir="ltr" aria-level="1"> How important is onboarding new cyber talent? </li> <li dir="ltr" aria-level="1"> Does it set the tone for their tenure with your organization? </li> <li dir="ltr" aria-level="1"> What should CISOs do to make sure onboarding is effective for both sides? </li> <li dir="ltr" aria-level="1"> What are the mistakes CISOs should avoid, and what are the best ways to excel? </li> </ul>  Thanks to our podcast sponsor, OffSec <a href="http://offsec.com/trial" target="_blank" rel= "noopener"><img src= "//assets.libsyn.com/show/156524/banner-ad-OffSec-free-trial-600x100_1.png" alt="OffSec" width="600" height="100" /></a> <a href="http://offsec.com/trial" target="_blank" rel= "noopener">OffSec</a> helps companies like Cisco, Google, and Salesforce upskill cybersecurity talent through comprehensive training and resources. With programs ranging from red team and blue team training and more, your team will be ready to face real-world threats. <a href="http://offsec.com/trial" target= "_blank" rel="noopener">Request a free trial</a> for your team to explore OffSec’s learning library and cyber range.

David Spark

Defense in Depth by David Spark

Episodes