Episodios

  • The CISO Who Rebuilt Giants with Rinki Sethi
    Oct 7 2024

    In this episode of The Candid CISO, Rinki Sethi, a trailblazing cybersecurity leader, shares her incredible journey from an unexpected start in the industry to her rise as a prominent figure in security leadership with host John Donovan. Rinki opens up about the challenges she faced, the importance of mentorship, and how vulnerability and communication have been crucial to her success. She provides insightful guidance on building strong security teams, navigating crisis management, and fostering a supportive cybersecurity community. Tune in for practical advice and inspiration for advancing your own cybersecurity career.

    Key topics

    1. Discovering your specific passion within the broad field of cybersecurity is crucial for a fulfilling career, as Rinki Sethi’s own journey from compliance to developer training demonstrates.
    2. Mentorship can be found in unexpected places, from peers to senior leaders, and actively seeking guidance from those around you can significantly shape your career path.
    3. Securing executive buy-in is essential for building a strong security culture, and aligning security goals with business objectives helps demonstrate the value of security initiatives.
    4. To effectively advocate for security investments, it is crucial to present security as a business enabler, highlighting its ability to improve efficiency, reduce friction, and even create a competitive advantage.
    5. Sharing real-world examples of how security programs have reduced business friction, such as streamlining compliance processes or shortening sales cycles, can help garner support for future security initiatives.
    6. Transparency and clear communication are vital when implementing security programs, especially those that may be perceived as intrusive, to ensure understanding and minimize resistance.
    7. Prioritizing mental health in the demanding field of cybersecurity is crucial, and creating a supportive environment where team members feel comfortable seeking help and addressing mental well-being is essential.
    8. Crisis management exercises, including surprise breach simulations, can be invaluable for preparing executive teams and other stakeholders to effectively navigate real-world security incidents.
    9. Networking outside of your immediate professional circle can lead to unexpected mentorship opportunities, board positions, and valuable connections that can benefit your career in the long run.
    10. Giving back to the cybersecurity community by mentoring others, sharing your experiences, and encouraging newcomers is crucial for fostering a strong and inclusive industry.

    IdRamp is a sponsor of the Candid CISO podcast. Visit their website at: https://www.idramp.com/candidciso

    TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso

    For show notes, transcripts, links, and more episodes visit https://www.candidciso.com

    The Candid CISO podcast is produced by Nonconformist Innovation Media.

    Más Menos
    54 m
  • Navigating Leadership in the Security World with Joel Fulton
    Sep 30 2024

    In this episode, John Donovan sits down with cybersecurity expert and entrepreneur Dr. Joel Fulton for an insightful conversation covering leadership, resilience, and career growth. Joel shares his journey from an unconventional upbringing to becoming a successful CISO and startup founder. He discusses the challenges of transitioning from individual contributor to leader, the evolving nature of the CISO role, and the importance of self-awareness in leadership. Listeners can expect actionable advice on building balanced teams, effective communication, and leveraging professional communities for growth and support.

    Takeaways

    • Pursue Passion Projects Cautiously: Dream projects like writing require patience, planning, and multiple efforts to gain traction.

    • Learn from Personal Struggles: Overcoming tough life experiences can build resilience and redefine success in your career.

    • Work with People You Respect: Prioritize working with individuals who align with your values to avoid toxic environments.

    • Self-awareness in Leadership: Understand your strengths and weaknesses to better lead and collaborate with others.

    • Avoid Comparison in Leadership: The CISO role is evolving—don’t compare yourself to others; create your own leadership path.

    • Build Balanced Teams: Combine technical skills, risk tolerance, and leadership within your team for maximum effectiveness.

    • Communicate Clearly as a Leader: Ensure your brainstorming sessions are not misinterpreted as directives; leave space for team input.

    • Delegate to Empower Growth: As a manager, trust and empower your team by avoiding micromanagement.

    • Startups Require Flexibility: Starting a business involves unexpected challenges; embrace uncertainty and adapt quickly.

    • Leverage Peer Communities: Build and engage in professional communities to access advice, mentorship, and problem-solving support.

    IdRamp is a sponsor of the Candid CISO podcast. Visit their website at: https://www.idramp.com/candidciso

    TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso

    For show notes, transcripts, links, and more episodes visit https://www.candidciso.com

    The Candid CISO podcast is produced by Nonconformist Innovation Media.

    Más Menos
    58 m
  • Rethinking Cybersecurity: The Power of AI and Preparation with Tyler Pinckard
    Aug 29 2024

    In this episode of the Candid CISO podcast, Tyler Pinckard, Head of Security and Data Protection Officer at Support Logic, shares his provocative insights on the evolving landscape of cybersecurity. Tyler challenges the traditional view of security as merely a cost center, arguing that when leveraged correctly, compliance and AI can become powerful competitive advantages. He delves into the critical role of preparation and rehearsals, emphasizing that many security failures stem from a lack of planning rather than the complexity of threats. Tyler also advocates for embracing AI and automation to stay ahead in the fast-paced tech environment, urging CISOs to disrupt rather than be disrupted. This episode is a must-listen for security leaders looking to sharpen their strategic edge and rethink their approach to modern cybersecurity challenges.

    Takeaways

    • Security as a Strategic Advantage: Compliance and AI can turn security into a competitive edge.
    • Preparation is Key: Many security failures result from poor planning, not just complex threats.
    • Embrace Disruption: CISOs should leverage AI and automation to disrupt, rather than be disrupted.
    • The Power of Rehearsals: Regular rehearsals and preparation prevent failures during critical security incidents.
    • Compliance as a Crowbar: Compliance like SOC 2 and ISO is essential for customer trust and retention.
    • AI's Role in Cybersecurity: AI can enhance efficiency, particularly in tasks like static analysis and case summarization.
    • Practical Use of AI: AI should assist with tasks while maintaining human oversight for critical decisions.
    • Startups and Security: Aligning security with business goals is crucial for success in fast-paced startups.
    • Leadership in Cybersecurity: Effective leaders delegate and empower teams rather than micromanaging technical tasks.
    • Diversity Drives Success: Diverse teams offer varied perspectives, reducing risks and improving security outcomes.
    • Pragmatic Use of Tools: Use tools like GitHub Co-Pilot to maximize team efficiency and effectiveness.
    • Security for the Modern CISO: CISOs must continuously adapt, applying both traditional strategies and modern tech solutions.

    IdRamp is a sponsor of the Candid CISO podcast. Visit their website at: https://www.idramp.com/candidciso

    TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso

    For show notes, transcripts, links, and more episodes visit https://www.candidciso.com

    The Candid CISO podcast is produced by Nonconformist Innovation Media.

    Más Menos
    55 m
  • From Hacker to CISO: Carlos De Leon's Journey and Career Advice
    Aug 16 2024
    In this episode of the Candid CISO podcast, Co-Host John Donovan interviews Carlos de Leon, CISO at the Washington State Department of Revenue. They discuss various topics related to cybersecurity leadership and strategy, including the challenges and rewards of the CISO role, the importance of compliance, and the need for strong communication and people skills. They also touch on incident response and threat management, highlighting the lessons learned from the CrowdStrike incident and a cloning incident at Carlos' agency. The conversation concludes with a discussion on the impact of technology and organizational factors on the CISO role, as well as Carlos' personal career journey. Also in this conversation, Carlos shares insights and advice on thinking creatively, his early hacker days, and career development in cybersecurity. He emphasizes the importance of an adversarial mindset and thinking outside the box to solve problems. Carlos provides advice for those looking to enter the cybersecurity field and become a CISO. The conversation concludes with a discussion on Hacker Summer Camp and the importance of networking and community in the cybersecurity industry. Segments 00:00 - Introduction and Background 03:03 - CISO Role: Challenges and Rewards 07:02 - Compliance in the CISO Role 09:57 - Lessons from Incident Response and Threat Management 13:24 - Balancing Technology and Organizational Factors as a CISO 20:30 - Insights from a Personal Career Journey 29:19 - Thinking Creatively and Developing an Adversarial Mindset 31:34 - Career Development in Cybersecurity 35:27 - The Importance of Networking and Community in Cybersecurity 45:36 - Hacker Summer Camp: Networking and Learning Opportunities Insights - Prioritize ethical reporting over legal loopholes when managing security breaches. - Leverage security incidents to drive and strengthen your cybersecurity initiatives. - Implement layered security architectures to ensure robust protection against failures. - Balance technology and organizational factors when shaping cybersecurity policies. - Be transparent during incident recovery to quickly rebuild user trust. - Adopt cloud solutions while mitigating risks with mature security practices. - Encourage an adversarial mindset within your cybersecurity team for better defenses. - Foster community and transparency to enhance cybersecurity collaboration. - Plan ahead for incidents by coordinating multi-agency responses effectively. - Invest in apprenticeship models to develop well-rounded cybersecurity professionals. - Embrace cutting-edge technology to stay ahead, despite inherent risks. IdRamp is a sponsor of the Candid CISO podcast. Visit their website at: https://www.idramp.com/candidciso TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso Candid CISO is produced by Nonconformist Innovation Media For show notes, links, and more episodes visit https://www.candidciso.com
    Más Menos
    55 m
  • Cybersecurity Leadership: Humanity, Diversity, and Impact
    Jun 30 2024
    Steve Tout has a conversation with Aysha Khan, the CISO and CIO at Treasure Data in Mountain View, California. Aysha has 20 years of experience in Information Technology and Security at Fortune 500 companies. She is passionate about aligning strategy with agile execution to drive business results and customer satisfaction. Aysha has successfully built and led technology, security, compliance, risk, and operations functions from scratch. She has also turned around disjointed organizations into cohesive and collaborative environments. Get ready to hear about her unexpected journey into cybersecurity and how she's transforming the field with empathy and bold leadership. Aysha shares the surprising twists that led her to become a Chief Security Officer and how she views cybersecurity not just as a technical challenge but as a vital business risk. During the conversation we discuss her unique leadership style, where humanity and empathy take center stage, and hear real-life stories of how this approach has shaped her decisions and projects. Aysha will reveal personal turning points that helped her break barriers and offer strategies for aspiring leaders to make a meaningful impact. She'll also talk about her fearless approach to facing tough challenges, sharing how she tackles fear head-on and turns obstacles into opportunities. Plus, she'll discuss the importance of giving back and her vision for a future where diversity and high performance go hand in hand.

    TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso

    IdRamp is a sponsor of the Candid CISO podcast. Visit their website at: https://www.idramp.com/candidciso

    Candid CISO is produced by Nonconformist Innovation Media

    For show notes, links, and more episodes visit https://www.candidciso.com

    Más Menos
    52 m
  • Leadership, AI, and Continuing Education with Chirag Shah
    Apr 30 2024
    In this episode, Steve has a conversation with Chirag Shah. Chirag is the the Global Security Officer and Data Privacy Officer at Model N, a publicly traded software company in San Mateo, California. Chirag is a security and technology leader with over 24 years experience building leading-edge information security, security compliance, IT & network initiatives from the ground up. He is an inclusive leader with a passion for information security management, cooking, and continuous learning. Steve and Chirag discuss his career journey and the evolving role of the CISO. He emphasizes the importance of integrating the security program with the business and providing value beyond technical aspects. Chirag also highlights the role of the CISO in the boardroom, particularly in mergers and acquisitions, and the need for transparency and accountability. He discusses the expanding responsibilities of CISOs, including AI, DEI, and privacy regulations. Chirag also touches on the role of a chief identity officer and the importance of ethics in cybersecurity.

    TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso

    IdRamp is a sponsor of the Candid CISO podcast. Visit their website at: https://www.idramp.com/candidciso

    Candid CISO is produced by Nonconformist Innovation Media

    For show notes, links, and more episodes visit https://www.candidciso.com

    Más Menos
    53 m
  • Candid CISO: Trailer
    Feb 2 2024

    Welcome to the Candid CISO podcast, illuminating your path to impact. Get straightforward insights from seasoned CISOs and leaders who are not just talking about change, but driving it.

    The Candid CISO podcast is supported by our sponsors:

    IdRamp: IdRamp offers an integrated, comprehensive identity orchestration solution that automates operations, integrations, compliance, security, and digital transformation. 

    TrustLogix: The TrustLogix Cloud Data Security Platform provides data owners and security owners with a single point of visibility and control of sensitive data access across all clouds and data platforms. 

    The Candid CISO podcast is produced by Nonconformist Innovation Meda, LLC.

    Más Menos
    1 m
  • Data Security and Privacy with Ganesh Kirti
    Feb 2 2024

    In this episode, Ganesh Kirti, the founder and CEO of TrustLogix, discusses the challenges of securing data in the cloud and the need for comprehensive data security solutions. He explains how the modernization of data platforms and the increasing amount of data being stored and accessed in the cloud has made data security a complex problem. Ganesh also highlights the importance of security observability and granular access controls in protecting sensitive data. Ganesh emphasizes the need for collaboration between CISOs and CDOs and adopting interoperable and cloud-native solutions. Additionally, Ganesh discusses the partnership between TrustLogix and Snowflake and the role of AI in data security. He concludes by offering advice on protecting personal and enterprise data in an increasingly breached world.

    TrustLogix is a sponsor of the Candid CISO podcast. Visit their website at: https://www.trustlogix.io/candidciso

    Visit https://www.candidciso.com for show notes and more episodes. 

    Candid CISO is produced by Nonconformist Innovation Media.

    Más Menos
    46 m