CISO Stories Podcast (Audio)

Mar 10 2025 211 ep. 27 mins 108
CISO Stories Podcast (Audio) artwork

SC Media and Sophos are proud to present this month’s CISO Stories program, where CISOs share tales from the trenches and unpack leadership lessons learned along the way. Hosted by Jessica Hoffman.

  Technology  Business
RSS feed Share
Copy RSS


Subscribe on Podcast Addict


Breach by the Dozen: Incident Response Lessons from the Field - Mike Miller - CSP #210

Mar 10 2025 31 mins  
In this episode of the CISO Stories Podcast, we’re joined by Mike Miller, a seasoned penetration tester and audit and compliance SME, to explore the real-world impact of incident response controls. From technical to managerial and physical safeguards, Mike shares eye-opening stories from the field—including how he once penetrated a network with nothing more than a dozen doughnu

AI Governance: Navigating Risks, Frameworks, and the Future - Rock Lambros - CSP #209

Feb 10 2025 29 mins  
In this episode, we sit down with author and AI expert Rock Lambros to explore the evolving landscape of AI governance. We discuss the risks of AI chatbots, comparing OpenAI and DeepSeek, and examine current and emerging governance frameworks. As AI adoption accelerates, organizations must determine the right guardrails and critical questions to ask. This conversation provides insi

Privacy Under Siege: Navigating Data Theft and the BadBox Threat - Gavin Reid - CSP #208

Jan 13 2025 27 mins  
In this episode, we sit down with experienced CISO Gavin Reid to explore the escalating online threats to privacy, focusing on adversaries and companies illicitly scraping website data for profit. We dive into the implications of such unauthorized data collection and its impact on individual and organizational privacy. Reid also shares insights from his team’s involvement in dism

Cloud Security in Higher Education: Balancing Trust and Risk - Sheena Thomas - CSP #207

Dec 31 2024 29 mins  
In this episode of CISO Stories, Jess Hoffman and Sheena Thomas explore the challenges of cloud security in higher education. They discuss trust issues with cloud providers, the importance of understanding data sensitivity, and navigating regulatory compliance. Sheena highlights the vulnerabilities educational institutions face, the value of incident response playbooks, and the bal

Cybersecurity in the Cloud: Lessons for Businesses and Beyond - Melina Scotto - CSP #206

Dec 24 2024 34 mins  
Jessica Hoffman and Melina Scotto discuss the evolution of cybersecurity, focusing on cloud security, business responsibilities, and the importance of basic cyber hygiene. They highlight the role of communication, consulting, and integrating security into business operations, concluding with advice for future cybersecurity professionals. This segment is sponsored by Fortinet Cloud

Cloud Security for SMBs: Strategies, Risks, and Resources - Adam John - CSP #205

Dec 17 2024 32 mins  
Jess and Adam discuss cloud security challenges for SMBs, emphasizing strategic planning, compliance with regulations like CMMC, and vendor due diligence. They highlight common pitfalls like the illusion of security and inadequate staffing while offering cost-effective solutions like virtual CISOs. Practical tips help SMBs secure their data, navigate legal concerns, and maximize av

Cloud Security at Risk: Tackling Misconfigurations Head-On - Nadia Mazzarolo - CSP #204

Dec 10 2024 23 mins  
In this episode, we dive into the critical role of proper configurations in cloud environments and why misconfigurations remain the leading cause of security breaches. From overly permissive access controls to unencrypted data stores and default credentials left unchanged, we explore real-world examples that adversaries exploit. Learn how organizations can mitigate these risks thro

Cloud Security: Lessons Learned and Applied to Emerging Tech - Bertrum Carroll - CSP #203

Dec 03 2024 28 mins  
Bertrum Carroll dives into the evolution of cloud service adoption, comparing early concerns—like data storage, access, and usage—to current apprehensions about AI. We explore how leadership can empower teams with the right training to harness technology effectively. Learn why understanding the shared responsibilities between providers and customers is critical for cloud securi

Identity Challenges in Manufacturing - Tammy Klotz - CSP #202

Nov 26 2024 32 mins  
In this episode, we’re joined by Tammy Klotz, a 3x CISO in the manufacturing industry, to explore identity security challenges in manufacturing environments. Tammy discusses the differences in access management for frontline workers versus knowledge workers, touching on the unique devices and role-based training requirements. Tune in to learn how tailored security solutions are k

Identity Security: Navigating the New Normal with Dr. Sean Murphy - Sean Murphy - CSP #201

Nov 19 2024 34 mins  
In this episode of CSP, we sit down with Dr. Sean Murphy, the CISO of BECU, one of Seattle’s largest credit unions, to discuss the shifts in identity security brought on by the COVID-19 pandemic. Dr. Murphy highlights how Zero Trust architecture became crucial for verifying internal users, especially as remote work became the norm. He shares insights on the unique challenges of s