Podcast Episodes
Back to Search
Ep 122: Navigating New Horizons: CMMC, NIST 800-171 Updates, and Compliance Insights
In this episode of the "Virtual CISO Podcast," your host John Verry speaks with guest Warren Hylton, a FedRisk consultant at CBIZ Pivot Point Securit…
3 years, 1 month ago
Ep 121: Strategies for Reducing the Cost of Your Cyber Liability Insurance Policy
Episode 121
Like many other businesses, law firms are at significant risk of cyber-attack and increasingly are turning to cyber liability insurance (CLI) to tran…
3 years, 3 months ago
Ep 120: A FedRAMP ATO – The Good, The Bad, and the Ugly
Episode 120
To do wide-scale business within the US federal government, cloud service providers (CSPs) need a FedRAMP ATO. The prospect can be daunting as few CS…
3 years, 4 months ago
Ep 119: What is a Microservice Architecture and how do I secure it?
Episode 119
Whatever kind of software application a team is building, the identification and remediation of cybersecurity issues needs to be part of every stage …
3 years, 5 months ago
Ep 118: The Simplest Way to Transition from ISO 27001:2013 to ISO 27001:2022
Episode 118
If you are ISO 27001 certified, or considering it, you are likely wondering how the transition from ISO 27001:2013 to ISO 27001:2022 affects you. Wit…
3 years, 5 months ago
Ep 117: Eight Key Takeaways from the RSA 2023 Conference
Episode 117
In this week's episode of the Virtual CISO podcast, your host John Verry, Pivot Point Security CISO and Managing Partner, shares his valuable insight…
3 years, 5 months ago
Ep 116: What is an SBOM & Why Are My Customers Suddenly Asking for One?
Episode 116
With the release of President Biden’s Executive Order 14028 on “Improving the Nation’s Cybersecurity” from May 2021 the US public and private sectors…
3 years, 6 months ago
Ep 115: If Your Asset Management Sucks, Your Security Sucks
Episode 115
Asset management is a crucial aspect of information security. It refers to the processes and procedures involved in identifying, organizing, tracking…
3 years, 6 months ago
Ep 114: 4 Tactical Steps To Implementing DevSecOps In 2023
Episode 114
DevSecOps is the practice of integrating security testing at every stage of the software development process. With DevSecOps, training and educating …
3 years, 7 months ago
Ep 113: Should we be in Microsoft 365 GCC, GCC High, or Commercial?
Episode 113
Microsoft 365 was launched in 2011 in hopes of revolutionizing cloud-powered productivity platforms. Since then, Microsoft 365 has grown to the point…
3 years, 7 months ago