Adopting Zero Trust: Philosophy of Prevention with iHeartMedia’s Janet Heins

Jul 27, 2023

Global CISO Janet Heins discusses cybersecurity prevention in a global organization like iHeartMedia. Topics include Zero Trust philosophy, prevention measures, challenges in the radio industry, navigating tools in media, OT/IT security intersection, and cultural perspectives in cybersecurity.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 2min

Transition from IT to Cybersecurity and Developing a Business Perspective

01:59 • 3min

Security Challenges in the Radio Industry

04:43 • 6min

Navigating Tools and Consolidation Challenges in a Media Conglomerate

11:01 • 2min

Navigating the Intersection of OT and IT Security

12:45 • 29min

Exploring the Cultural Perspective and Role Diversity in Cybersecurity

41:16 • 3min

Season two, episode 13: Cybersecurity prevention on a global scale with Janey Heins, Global CISO for iHeartMedia.

At the heart of Zero Trust is the idea of prevention. If you don’t trust anything or any person, you are playing in the same pool as risk avoidance. While total risk avoidance isn’t feasible, Zero Trust gets us closer to reality. Now, map this up to an organization with a global footprint, with significant infrastructure sprawl, and you’ve got one very complex scenario on your hands.

This brings us to this week’s guest, Janet Heins, iHeartMedia's Global CISO, who will help us navigate the philosophy of cybersecurity prevention on a global scale.

Putting The Conversation Into Context

With more than a decade behind her as a CISO, Heins’ experience stems from working with some massive brands. As a leader, she’s particularly passionate about translating business needs into technology processes or solutions, while at the same time bridging the language barriers that often stem between IT, cybersecurity, and the other adjacent areas.

iHeartMedia has over 11,000 employees and a vast physical and digital footprint. With 860 radio stations across the US and 20,000 events annually, the company is part of the emergency broadcast system and has to be ready to respond to threats quickly.

At a global level, Heins makes it clear that strong detection and response capabilities, as well as prevention measures, are critical elements of prevention. And while prevention can take many forms, in the context of today’s episode, we dig into security tools, hiring security professionals, and the basics, such as providing security awareness training to employees.

One challenge of securing a large organization like iHeartMedia is consolidating the tech stack. iHeartMedia has a blended architecture of OT and IT, with legacy hardware and systems that need to be secured. Heins stresses the importance of communication and collaboration between the IT and OT teams, as well as being open to new tools and automation.