Podcast Episodes

Critical Infrastructure: The Risk Hiding in Plain Sight - Jason Manar - CSP #225

In this episode, former FBI cyber leader Jason Manar joins us to unpack the state of critical infrastructure security and why small and medium-sized …

13 hours ago

IAM for MSSPs: The Hidden Risk of Blind Trust - Dustin Sachs - CSP #224

Identity is at the center of nearly every modern breach, but when IAM responsibilities are shared with MSSPs, where does trust end and accountability…

4 weeks ago

Cloud Security: The AI Effect & How to Proceed - Richard Marcus - CSP #223

In this episode of CISO Stories, Jessica Hoffman speaks with Richard Marcus, CISO at Optro, about how organizations are securing cloud environments a…

1 month, 3 weeks ago

From Alerts to Action: Making Public–Private Threat Intel Actually Useful - Ian Washburn - CSP #222

Threat intelligence too often arrives as a steady stream of alerts that don't translate into clear, timely decisions. This episode explores how publi…

2 months, 4 weeks ago

Beyond Vendor Risk: Real-Time GRC, AI, and Protecting App User Data - Jadee Hanson - CSP #221

CISO Jadee Hanson shares how Vanta "drinks its own champagne," running on NIST CSF with quarterly baseline reviews and using Vanta's GRC platform to …

3 months, 4 weeks ago

Keys Without People — John Heasman on Cleaning Up Non-Human Access - John Heasman - CSP #220

Title: Keys Without People" — John Heasman on Cleaning Up Non-Human Access

Summary: John breaks today's non-human identity mess into three buckets: c…

4 months, 3 weeks ago

Agents at the Door: Vetting Non-Human Identities in External IAM - Rakesh Soni - CSP #219

This episode was about agentic IAM—what it is and the risks that come with letting non-human agents act for customers. We defined external IAM, then …

6 months ago

ATT&CK → ATLAS: A CISO's Blueprint for AI Governance - Sandy Dunn - CSP #218

CISO Sandy Dunn breaks down her blueprint for AI-ready defense—pairing MITRE ATT&CK v18 with MITRE ATLAS to move from policy to behavior-based detect…

6 months, 4 weeks ago

Security Awareness Through Trust and Influence - Jennifer Selby Long - CSP #217

Jennifer Selby Long reframes security awareness as more than training—it's about earning trust and influence with executives and security teams. She …

7 months, 3 weeks ago

OT on the Frontlines: Threat Intelligence You Can't Ignore - Dawn Cappelli - CSP #216

Dawn Capelli, Head of OT-CERT at Dragos, unpacks the evolving risks to Operational Technology. From nation-state attacks on Ukraine's infrastructure …

9 months ago