x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

CISO Perspectives (public)

This season on CISO Perspectives, host Kim Jones explores some of the challenges of leading through uncertainty. We explore the complexity of the changing nature of regulation and working with the federal government, the evolution of privacy and fraud, and how emerging technologies like AI and quantum computing are changing cyber. When you don’t know what questions to ask, you’re afraid to ask, or don’t know who to ask, CISO Perspectives provides the foundation for learning in this brave new

technology

All Episodes

35:50

Data loss protection: around the Hash Table.

CISO Perspectives (public) ·

2021/10/11

Four members of the CyberWire’s hash table of experts: Tom Quinn - CISO - T. Rowe Price Associates Nikk Gilbert - CISO - Cherokee Nation Businesses Dawn Cappelli - VP of Global Security and CISO for Rockwell Automation Gary McAlum - CSO- USAA discuss the things they worry about when it comes to data loss protection. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

16:01

Data loss protection: a first principle idea.

CISO Perspectives (public) ·

2021/10/04

Rick discusses data loss protection as a first principle strategy using NIST and Forrester as a guide. The new thing to consider is running a deception network. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

29:59

Incident response: around the Hash Table.

CISO Perspectives (public) ·

2021/09/27

Four members of the CyberWire’s hash table of experts: Jerry Archer - Sallie Mae CSO Ted Wagner - SAP National Security Services CISO Steve Winterfeld - Akamai Advisory CISO Rick Doten - Centene CISO discuss the things they worry about when it comes to incident response. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

23:33

Incident response: a first principle idea.

CISO Perspectives (public) ·

2021/09/20

Rick discusses incident response as a best practice for the network defender community, talks briefly about Zoom and how well their communications plan worked earlier this year when the network defender community called their web conferencing app out on several security issues, and how poorly OPM handled their incident response when the Chinese stole the PII of every person that worked in the U.S. government. Finally, he talks about the birth of incident response and the most influential

en

28:36

Security operations centers: around the Hash Table.

CISO Perspectives (public) ·

2021/09/13

Four members of the CyberWire’s Hash Table of experts: Don Welch: Interim CIO of Penn State University Helen Patton: CISO for Ohio State University Bob Turner: CISO for the University of Wisconsin at Madison Kevin Ford: CISO for the State of North Dakota discuss SOC Operations in terms of intrusion kills chains, defensive adversary campaigns, insider threats, cyber threat intelligence, zero trust, SOC automation, and SOC analyst skill sets. Learn more about your ad choices. Visit

en

30:48

A CSO's 9/11 Story: CSO Perspectives Bonus.

CISO Perspectives (public) ·

2021/09/11

For the 20th anniversary of 9/11, Rick Howard, the Cyberwire’s CSO, Chief Analyst, and Senior Fellow, recounts his experience from inside the Pentagon running the communications systems for the Army Operations Center. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

17:45

Security operations centers: a first principle idea.

CISO Perspectives (public) ·

2021/09/06

The idea of operations centers has been around as far back as 5,000 B.C. This show covers the history of how we got from general purpose operations centers to the security operations centers today, the limitations of those centers, and what we need to do as a community make them more useful in our infosec program. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

27:19

Cybersecurity first principles: end of season summary.

CISO Perspectives (public) ·

2021/07/12

This is the eighth and final essay in this series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners - be they from the commercial sector, government enterprise, or academic institutions - using the concept of first principles. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

30:05

Cybersecurity first principles: Intelligence operations.

CISO Perspectives (public) ·

2021/07/05

This is the seventh show in a planned series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners - be they from the commercial sector, government enterprise, or academic institutions - using the concept of first principles. First principles Zero trust Intrusion kill chains Resilience DevSecOps Risk assessment We are building a strategy wall, brick by brick, for a cyber security infosec program based on first principles. The foundation of

en

19:19

Cybersecurity first principles: Risk assessment.

CISO Perspectives (public) ·

2021/06/28

This is the sixth episode in a planned series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners-- be they from the commercial sector, government enterprise, or academic institutions-- using the concept of first principles. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

25:36

Cybersecurity First Principles: DevSecOps.

CISO Perspectives (public) ·

2021/06/21

This is the fifth essay in a planned series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners-- be they from the commercial sector, government enterprise, or academic institutions-- using the concept of first principles. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

18:52

Cybersecurity First Principles: Resilience.

CISO Perspectives (public) ·

2021/06/14

This is the fourth show in a planned series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners - be they from the commercial sector, government enterprise, or academic institutions - using the concept of first principles. The first show explained what first principles are in general and what the very first principle should be for any infosec program. The second show discussed zero trust. The third show covered intrusion kill chains. This

en

29:01

Cybersecurity First Principles: Intrusion kill chains.

CISO Perspectives (public) ·

2021/06/07

This is part three in a series that Rick Howard, CyberWire’s Chief Analyst, is doing about building an infosec program from the ground up using a set of first principles. This episode, he talks about why intrusion kill chains are the perfect companion strategy to the passive zero trust strategy he talked about last week. The key takeaway here is that we should be trying to defeat the humans behind the campaigns collectively, not simply the tools they use independently with no context about what they

en

31:28

Cybersecurity First Principles: Zero trust.

CISO Perspectives (public) ·

2021/05/31

This is part two in a series that Rick Howard, The CyberWire’s Chief Analyst, is doing about building an infosec program from the ground up using a set of first principles. This episode, he talks about why zero trust is a cornerstone building block to our first principle cybersecurity infosec program. And here is the key takeaway - building it is not as hard to do as you think. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

24:07

Cybersecurity First Principles.

CISO Perspectives (public) ·

2021/05/24

This week's CSO Perspectives is the first in a series of shows about cybersecurity strategy. Rick Howard discusses the concept of first principles as an organizing principle and how the technique can be applied to cybersecurity to build a foundational wall of infosec practices that are so fundamental as to be self-evident; so elementary that no expert in the field can argue against them; so crucial to our understanding that without them, the infrastructure that holds our accepted best practice

en

21:29

Dark web and TOR: What kind of intelligence can you...

CISO Perspectives (public) ·

2021/05/17

Rick Howard discusses counterintelligence operations by commercial vendors on the Dark Web and the kinds of intelligence that can be found. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

25:12

Metrics and risk: All models are wrong, some are useful.

CISO Perspectives (public) ·

2021/05/10

Conveying risk to the company leadership, the metrics collection required to do it, how heat maps are generally bad science, and the requirement for precise modeling of the risk environment. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

29:02

Four cybersecurity novels to distract you from the...

CISO Perspectives (public) ·

2021/05/03

Rick Howard, the CyberWire’s Chief Analyst, CSO, and Senior Fellow discusses his favorite cyber novels to distract us from our current emergency situation: "Threat Vector” by Tom Clancy and Mark Greaney, “Neuromancer,” by William Gibson, “Breakpoint,” by Richard A. Clarke, and his favorite hacker novel of all time, “Cryptonomicon,” by Neal Stephenson. Learn more about your ad choices. Visit megaphone.fm/adchoices

en

21:58

Alexa, are you actually self-aware? (And, does it...

CISO Perspectives (public) ·

2021/04/26

Rick Howard, the CyberWire’s Chief Analyst, discusses the Artificial Intelligence hype. Listen as Rick talks about the emergence of machine learning as a key tool to the detection of cyber adversaries (and the need for big data to pursue that strategy). He also discusses the transition of SIEMS from on-prem devices to cloud-delivered services in order to facilitate the implied big data collection requirement. And, you'll hear about the emergence of XDR that may well fulfill the promise on-prem SIEMs

en

19:37

Your security stack is moving: SASE is coming.

CISO Perspectives (public) ·

2021/04/19

Rick Howard, the CyberWire’s Chief Analyst, discusses the next big thing in cybersecurity service delivery. It is called SASE, coined by Gartner last fall, and stands for Secure Access Service Edge (Cloud delivered). It flips on its head how we all consume security services today and it is the perfect solution for small to medium size businesses. In five years, it will be the primary way that all size businesses consume security products. Learn more about your ad choices. Visit

en

141 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs