エピソード

  • Challenges in the M&A Process
    2024/11/25
    In this conversation, Driton Saliovski discusses the intersection of M&A and cybersecurity with John and Jaye. They explore how companies are now considering cybersecurity during the M&A process, including due diligence, costing, integration, and reputation. They also discuss the potential value that cybersecurity can bring to an acquiring company, as well as the impact of past breaches on the value of a company. The conversation touches on the trend of using AI in M&A and the challenges faced in the M&A process, such as stakeholder management and convincing stakeholders of the importance of cybersecurity. They also discuss the advantages of being an insurance broker in terms of access to real-time incident data and the focus on recovery in addition to protection. The conversation explores the importance of cyber resiliency in the context of mergers and acquisitions (M&A). It highlights the shift from focusing on physical events to cyber events as the more prevalent and likely threat. The discussion touches on the need for companies to have a cyber resiliency program and response plan, especially in the M&A process. The conversation also delves into the role of certifications and maturity models in assessing cyber resiliency, with the conclusion that they are not always reliable indicators. The episode ends with a lighthearted discussion about pizza toppings. Takeaways • Companies are now considering cybersecurity during the M&A process, including due diligence, costing, integration, and reputation. • Cybersecurity can bring potential value to an acquiring company, especially if the target company has better tools, technologies, or consolidation in place. • Past breaches can affect the value of a company, and companies that have been breached may be more willing to sell. • There is a trend of using AI in M&A, with larger companies acquiring smaller AI companies to harness their technology and intellectual property. • Challenges in the M&A process include stakeholder management and convincing stakeholders of the importance of cybersecurity. • Being an insurance broker provides access to real-time incident data, which can inform cybersecurity decisions and help clients mitigate risks. • The focus in cybersecurity is shifting from solely protection to also include recovery, as companies recognize the possibility of being compromised. Cyber resiliency is becoming increasingly important in the M&A process, as cyber events are more prevalent and likely than physical events. • Companies need to have a cyber resiliency program and response plan in place to mitigate the risks associated with cyber threats. • Certifications and maturity models may not always be reliable indicators of cyber resiliency, as the scope and applicability of these certifications can vary. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    45 分
  • Navigating the Zero Trust Landscape
    2024/11/07
    In this episode, Dr. Chase Cunningham discusses with John and Jaye the evolving landscape of Zero Trust cybersecurity. They explore the global adoption of Zero Trust principles, the importance of maturity models, and the need for accountability at all levels of an organization. The conversation highlights the challenges of user awareness, the future of Zero Trust, and the resources available for education. They also touch on the cultural shift needed within organizations to prioritize cybersecurity as a shared responsibility. Takeaways • Zero Trust is increasingly recognized as a strategic initiative globally. • Progress in cybersecurity should be measured incrementally. • Maturity models are essential for assessing Zero Trust implementation. • Leadership engagement is crucial for effective cybersecurity strategies. • User awareness programs often fail if they complicate workflows. • Cybersecurity should be seen as a fundamental human right. • Organizations must take personal accountability for their cybersecurity choices. • The future of Zero Trust will involve continuous evolution and adaptation. • Sharing experiences and lessons learned in cybersecurity is vital. • Education and resources for Zero Trust need to be more accessible. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    34 分
  • The Human Element in Cybersecurity with Nick Mullen
    2024/08/29
    In this conversation, Nick Mullen, the founder and CEO of Sanguine Security Solutions, discusses his journey into the cybersecurity field and the importance of the human element in security. He shares an analogy of protecting a pot of gold to explain the concept of zero trust. The conversation also highlights the need for a comprehensive strategy that makes secure choices easy choices and addresses the human attack surface. It emphasizes the importance of relevant and targeted training to combat social engineering attacks. The discussion concludes with the suggestion of implementing technologies like push authentication to enhance security. The conversation covers topics such as the lack of a framework for mapping the human attack surface, the role of governance in cybersecurity, and the challenges of communicating the value of security. Takeaways • The human element plays a significant role in cybersecurity, with a large percentage of breaches involving social engineering. • Zero trust is a strategy that requires a comprehensive approach, making secure choices the easy choices and addressing the human attack surface. • Training should be relevant and targeted to individual roles and responsibilities, rather than a one-size-fits-all approach. • Implementing technologies like push authentication can enhance security and protect against social engineering attacks. There is a lack of a framework for mapping the human attack surface and implementing tools and technologies to protect against it. • Governance plays a crucial role in ensuring that organizations are doing what they are supposed to be doing and doing it well. • Good governance should support an organization's enterprise goals and strategies, whether they are focused on growth and innovation or cost leadership and stability. • The role of security professionals is often misunderstood, and there is a need to communicate the positive impact of security measures to the wider audience. • Personal preferences for pineapple on pizza vary, but it can be seen as a divisive topic. • Ranch dressing is a popular staple in Midwest cuisine. • Ireland is a highly recommended travel destination known for its beautiful landscapes and friendly people. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    47 分
  • Live at Black Hat with Jaye Tillson & John Spiegel
    2024/08/13
    Jaye Tillson and John Spiegel, sat down for a live conversation at Black Hat 2024. In this special episode, they dive into the highlights of the conference, exploring key trends, emerging technologies, and their potential impact on the industry. From the rise of 'coffee shop networking' and 'Universal ZTNA' to the implications of AI and the ongoing importance of cyber awareness training, Jaye and John cover it all. But that's not all! This episode has a surprise ending, so be sure to tune in. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn At the SSE Forum, we believe you won’t solve all your problems in a single SSE project. SSE is a process. It will take time. It will involve technology, people, culture, and those pesky tech silos. They all need to be addressed. The good thing to know is you are not alone on your journey. Many are making the move to this new network and security model. And with this in mind, Jaye and John formed the SSE Forum. It’s a place where the best minds in the industry come together to help push this technology forward. The forum is driven 100% by the enterprise security and network practitioner and maintains a vendor-neutral perspective. Our goal is to be the rising tide for all boats! What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    28 分
  • Live at Black Hat with Art Ocain
    2024/08/09
    We hosted a live conversation with cybersecurity expert Art Ocain at BlackHat 2024. The discussion encompassed a variety of critical topics, including #ransomware prevention and response, and the importance of #cyberawareness training. Jaye, John, and Art then discuss preparation for industry events like BlackHat and Defcon, and key takeaways from this year's conference. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    36 分
  • Live at Black Hat with Gina Yacone
    2024/08/08
    We hosted a live conversation with cybersecurity expert Gina Yacone at Black Hat 2024. The discussion covered a range of critical topics, including the transformative impact of Zero Trust and AI, the challenges of burnout in the industry, and the importance of fostering cyber awareness. Gina, John, and Jaye also explored how events like Black Hat contribute to the cybersecurity community and offered insights on maximizing their benefits. There may have also been a discussion on 'Does pineapple belong on pizza'. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    48 分
  • The Role of CISOs in Policymaking with Joe Sullivan
    2024/08/01
    Joe Sullivan, former CISO of Uber and Facebook, shares his journey in the IT and security industry and discusses the evolving relationship between the public and private sectors in cybersecurity. He highlights the need for collaboration and communication between government agencies and tech companies to improve cybersecurity practices. Joe also emphasizes the importance of CISOs having a voice in policymaking and investing in tools that facilitate incident response and coordination across departments. He encourages the security community to continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. The conversation covers topics such as cybersecurity standards, the need for a clear and objective minimum bar, the role of the security leader, the importance of cross-functional collaboration, the evolving role of CISOs, and the challenges they face. It also touches on the need for better communication, incident response preparedness, and educating the wider team about cybersecurity. The conversation concludes with a discussion about the importance of protecting digital risks and the role of CISOs in addressing them. Takeaways • Collaboration and communication between government agencies and tech companies are crucial for improving cybersecurity practices. • CISOs need to have a voice in policymaking and provide feedback on regulations to ensure their perspectives are considered. • Investing in tools that facilitate incident response and coordination across departments is essential for effective cybersecurity management. • The security community should continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. There is a need for a clear and objective minimum bar for cybersecurity standards. • The role of the security leader is evolving to include responsibilities beyond cybersecurity. • Cross-functional collaboration is crucial for effective cybersecurity. • CISOs need to educate the wider team about cybersecurity and the importance of their involvement. • Incident response preparedness is essential, as it is likely that organizations will face a cybersecurity incident at some point. • CISOs should take a proactive approach to address digital risks and protect the organization. • The cybersecurity community needs to come together and support each other in the fight against cyber threats. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    55 分
  • Soft Skils With Evgeniy Kharam
    2024/07/31
    In this conversation, Evgeniy Kharam discusses his upcoming book on soft skills in technical sales. He emphasizes the importance of soft skills for sales engineers and how they have become more instrumental in the sales process. Evgeniy also highlights the need for adaptability and creativity in presentations, as well as the impact of soft skills in building connections with customers. The conversation then shifts to the recent CrowdStrike update that caused widespread disruption, leading to a discussion on the risks of relying on a single vendor and the importance of having a backup plan. The conversation concludes with a mention of Evgeniy's upcoming bike and hike event, which aims to bring together professionals to discuss innovation and security in the bike industry. Takeaways • Soft skills are crucial for sales engineers and have become more instrumental in the sales process. • Adaptability and creativity in presentations can significantly impact building connections with customers. • Relying on a single vendor can pose risks, as demonstrated by the recent CrowdStrike update that caused widespread disruption. • Having a backup plan is essential to mitigate the impact of vendor outages or failures. • Evgeniy's upcoming bike and hike event aims to bring professionals together to discuss innovation and security in the bike industry. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/
    続きを読む 一部表示
    43 分