Defense in Depth cover image

Defense in Depth

Latest episodes

undefined
Sep 14, 2023 • 27min

How to Prime Your Data Lake

The podcast discusses the challenges and solutions of ingesting data into data lakes, the power and complexity of data lakes, extracting value from a data lake, using data lakes for security, the importance of data collection and linking, and the significance of prioritizing data quality in a data lake.
undefined
Sep 7, 2023 • 34min

Getting Ahead Of Your Threat Intelligence Program

The podcast discusses the challenges of executing a threat intelligence program successfully, including planning and setting expectations. They also highlight the importance of data and actionable intelligence, as well as the evolution of threat intelligence programs and the shift towards a strategic and predictive approach. The episode touches on the role of evidence in identifying threats and mentions the future potential of generative AI in security.
undefined
6 snips
Aug 31, 2023 • 41min

How Security Leaders Deal with Intense Stress

Security leaders discuss strategies for managing intense stress during incidents, particularly during the SolarWinds incident. They explore the toll it takes on their well-being, the challenges of managing stress within teams, and the importance of support from the community. Strategies for coping with stress, addressing security risks with shadow SaaS apps, building support networks, and challenges in incident management training are also discussed.
undefined
Aug 24, 2023 • 32min

How Do We Influence Secure Behavior?

Explore the methods to make employees more security conscious and aware. Discuss the importance of a security mindset practiced by senior leadership. Emphasize personalized cybersecurity education and the value of prioritizing collective security. Highlight the importance of trust and respect in cybersecurity.
undefined
Aug 17, 2023 • 29min

Security Concerns with ChatGPT

All links and images for this episode can be found on CISO Series. Users have tried to upload sensitive company information and PII, personally identifiable information, into ChatGPT. Those who are successful getting the data in, have now made that data free to all. Will people's misuse of these generative AI programs be our greatest downfall to security and privacy? Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap), CISO, LinkedIn. Joining us is our special guest Suha Can, CISO, Grammarly. Thanks to our podcast sponsor, Opal Opal is building the next generation of intelligent identity. Identity is one of the last great enterprise frontiers. It’s fragmented with legacy architecture. Opal's mission is to empower teams to understand and calibrate access end to end, and to build identity security for scale. Learn more by at www.opal.dev. In this episode: Will people's misuse of these generative AI programs be our greatest downfall to security and privacy? Is AI the problem? Or is poor human judgement the problem? Is it better to get started with any guardrails until setting up a full policy? What are we going to do now?
undefined
4 snips
Aug 10, 2023 • 32min

Create A Pipeline of Cyber Talent

David Spark, Producer of CISO Series, and Geoff Belknap, CISO, discuss creating a pipeline of cyber talent by training existing staff, promoting employees, and investing in building talent. They explore transitioning careers through training programs and fostering a blameless post-mortem culture. Amtrak's CISO, Jesse Whaley, joins the conversation. They also highlight the significance of diversity and recommend using LinkedIn for job search and skill improvement.
undefined
Aug 3, 2023 • 28min

Improving Adoption of Least Privileged Access

Finding the right balance in access management, strategies for implementing least privileged access, automating access calibration, challenges of managing access in a high-scale environment, and improving accessibility in identity and access management.
undefined
Jul 27, 2023 • 31min

Securing SaaS Applications

Guest Steve Zalewski and the hosts discuss the challenges of securing SaaS applications, the need for a specific strategy, gaining visibility in SaaS environments, and strategies for securing SaaS applications including DNS for app discovery and operationalizing security practices.
undefined
4 snips
Jul 20, 2023 • 30min

How Do We Get Better Control of Cloud Data?

All links and images for this episode can be found on CISO Series. When it comes to data, compliance, and reducing risk, where are we gaining control? Where are we losing control? And what are we doing about that? Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. We welcome our sponsored guest Amer Deeba, CEO and Co-founder, Normalyze. Thanks to our podcast sponsor, Normalyze Normalyze is a cloud data security platform that continuously discovers sensitive data and their access paths across your cloud environments. Normalyze provides the ability to analyze, prioritize and respond to data threats to prevent damaging data breaches. Discover, visualize, and secure your cloud data in minutes with Normalyze Freemium. In this episode: When it comes to data, compliance, and reducing risk, where are we gaining control? Where are we losing control? And what are we doing about that? Is "losing control" inevitable? Is SaaS really extremely difficult to work with at scale?
undefined
Jul 13, 2023 • 30min

Finding Your Security Community

All links and images for this episode can be found on CISO Series. If you're struggling to get your first job in security or you're trying to get back into the industry after being laid off, you need to lean on your security community. But like networking, you should find it before you need it. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Thanks to our podcast sponsor, Egress Egress helps organization stop email security risks is by addressing both inbound and outbound threats together,. We recognize that people get hacked, make mistakes, and break the rules. Egress's Intelligent Cloud Email Security suite uses patented self-learning technology to detect sophisticated inbound and outbound threats, and protect against data loss. Learn more at egress.com. In this episode: Are you struggling to get your first job in security or trying to get back into the industry after being laid off? What is the importance of building your security community network ? What should you look for in a community? What should you expect to put into it, and what should you expect to get back?

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode