Defense in Depth

All links and images can be found on CISO Series
Check out this post by Geoff Hancock, CISO at Unatel, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is Colin Anderson, SVP and CISO at Dayforce.
In this episode:
Pragmatism over dogma
Chief means executive, not technician
Competence is the floor
Both extremes fail
A huge thanks to our sponsor, ThreatLocker

An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.
Download banner: ThreatLocker_AI Cant Stop AI Attacks_1920x320.jpg

All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Brett Conlon, CISO, American Century Investments. Joining us is Carla Sweeney, SVP of InfoSec at Red Ventures.
In this episode:
Proof versus gatekeeping
Talent is built one way and judged another
What a multiple-choice exam can't teach
The hire that got blocked
A huge thanks to our sponsor, ThreatDown

ThreatDown delivers elite Managed Detection and Response purpose-built for resource-constrained teams with high-efficacy protection without complexity. Combining artificial intelligence and expert analyst judgment, ThreatDown intercepts sophisticated attacks with speed and accuracy, scaling security effortlessly. Recognized by MRG Effitas, AVLab, and G2, ditch fragmented tools for fast, 24/7 protection without overhead. Learn more at threatdown.com

All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by David Spark, the producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining them is Heather Hinton, CISO, Sitecore, and lecturer at Harvard Extension School.
In this episode:
Humans were never deterministic either
Making the report worth opening
Coverage still needs both
The record has to be more certain than the detection
A huge thanks to our sponsor, Horizon3.ai

Is your organization actually secure, or do you just hope it is? Horizon3's NodeZero® autonomously tests your defenses, finds real attack paths, and verifies that your fixes actually work. In an era of AI-powered attacks, don't assume you're secure. Prove it. Learn more at horizon3.ai/cisoseries

All links and images can be found on CISO Series
Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining them is their sponsored guest, Snehal Antani, CEO, Horizon3.ai.
In this episode:
Metrics that show risk actually declining
Knowing which altitude you're talking to
Recoverability over control checklists
Proof the program outlives any one person
A huge thanks to our sponsor, Horizon3.ai

Is your organization actually secure, or do you just hope it is? Horizon3's NodeZero® autonomously tests your defenses, finds real attack paths, and verifies that your fixes actually work. In an era of AI-powered attacks, don't assume you're secure. Prove it. Learn more at horizon3.ai/cisoseries

All links and images can be found on CISO Series
We've all internalized that humans are the weak link in cybersecurity. Why do we not account for that when we're building our cybersecurity programs?
Check out this post for the discussion that is the basis of our conversation on this week's episode, co-hosted by David Spark, the producer of CISO Series, and Geoff Belknap. Joining them is their sponsored guest, Kieran Human, lead cybersecurity engineer, ThreatLocker.
In this episode:
Humans and automation checking each other
Assume the click happens
Catch it in the moment
Take the manual step out entirely
A huge thanks to our sponsor, ThreatLocker

An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.