https://securitystudio.com
This podcast is a space where vCISOs can continue to explore, discuss, and evolve their understanding of the cybersecurity landscape. Join us as we delve into the experiences, perspectives, and challenges that vCISOs face. From sharing success stories to dissecting tough lessons learned, we cover it all.

The goal of the podcast is to build a community where vCISOs can come together to learn from one another. Through engaging discussions and thought-provoking questions from the vCISO community, we keep the conversation dynamic and relevant. This isn't just a podcast - it's a dynamic platform where your voice matters. So, whether you're a seasoned vCISO or just starting, join us on the "CvCISO Podcast" as we continue the journey of learning and growth together.

Hosts:
Jordon Darling (Vice President, Top Dog PC Services)
https://www.linkedin.com/in/jordon-darling/
Evan Francen (Founder and CEO, SecurityStudio)
https://www.linkedin.com/in/evanfrancen/
Meg Perron (CvCISO Training Academy Director, SecurityStudio)
https://www.linkedin.com/in/meg-perron-mba/

To find out more information about SecurityStudio's CvCISO Training Program visit: www.cvciso.com

Follow SecurityStudio on LinkedIn: https://www.linkedin.com/company/11486715

Email cvcisopodcast@securitystudio.com with questions or topics you'd like our hosts to tackle!  ]]>enTechnologySecurityStudiohttps://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/9064cce198c307ed4a88eb07c24bbc7e.jpghttps://securitystudio.comMon, 23 Feb 2026 05:23:47 +0000SecurityStudioSecurityStudiocvcisopodcast@securitystudio.comWelcome to "The CvCISO Podcast" - an extension of SecurityStudio's vCISO training program. Designed to keep the conversation alive beyond the confines of traditional training, this podcast is your ongoing resource for all things related to Virtual...
This podcast is a space where vCISOs can continue to explore, discuss, and evolve their understanding of the cybersecurity landscape. Join us as we delve into the experiences, perspectives, and challenges that vCISOs face. From sharing success stories to dissecting tough lessons learned, we cover it all.

The goal of the podcast is to build a community where vCISOs can come together to learn from one another. Through engaging discussions and thought-provoking questions from the vCISO community, we keep the conversation dynamic and relevant. This isn't just a podcast - it's a dynamic platform where your voice matters. So, whether you're a seasoned vCISO or just starting, join us on the "CvCISO Podcast" as we continue the journey of learning and growth together.

Hosts:
Jordon Darling (Vice President, Top Dog PC Services)
https://www.linkedin.com/in/jordon-darling/
Evan Francen (Founder and CEO, SecurityStudio)
https://www.linkedin.com/in/evanfrancen/
Meg Perron (CvCISO Training Academy Director, SecurityStudio)
https://www.linkedin.com/in/meg-perron-mba/

To find out more information about SecurityStudio's CvCISO Training Program visit: www.cvciso.com

Follow SecurityStudio on LinkedIn: https://www.linkedin.com/company/11486715

Email cvcisopodcast@securitystudio.com with questions or topics you'd like our hosts to tackle!  ]]>trueepisodichttps://www.spreaker.com/episode/riverside-cvciso-podcast-ep-84-feb-23-2026-001-cvciso-podcast--70220456In this episode, Evan Francen and guests discuss the realities of the job market, effective hiring strategies, and how to align skills with business needs. They emphasize the importance of soft skills, emotional intelligence, and realistic job descriptions to attract and retain top talent.  
   keywords
  job market, hiring, skills, emotional intelligence, leadership, recruitment, tech industry, job descriptions, talent acquisition      key  topics   The current state of the job market in 2024 Effective hiring strategies focusing on soft skills and EQ The importance of realistic job descriptions and expectations

04:48 Challenges in Job Recruitment 09:26 Leadership and Market Dynamics 18:27 The Language of Business in IT 19:36 The Importance of Emotional Intelligence in Hiring 24:21 Purpose-Driven Hiring: Attracting the Right Talent 28:32 The Impact of Social Fit on Employee Retention 31:31 Navigating the Job Market: Personal Experiences and Insights 36:48 Navigating the Walls of AI and Career Development 37:43 Embracing AI as a Tool for Growth 39:01 The Value of Skills Over Degrees 39:52 The Importance of Problem-Solving Skills 43:30 Building a Portfolio: Showcasing Your Work 45:50 Learning Through Experience and Humor 47:14 Analyzing the Job Market: Insights and Trends]]>https://api.spreaker.com/episode/70220456Mon, 23 Feb 2026 05:20:55 +0000SecurityStudio summary   In this episode, Evan Francen and guests discuss the realities of the job market, effective hiring strategies, and how to align skills with business needs. They emphasize the importance of soft skills, emotional intelligence, and realistic...In this episode, Evan Francen and guests discuss the realities of the job market, effective hiring strategies, and how to align skills with business needs. They emphasize the importance of soft skills, emotional intelligence, and realistic job descriptions to attract and retain top talent.  
   keywords
  job market, hiring, skills, emotional intelligence, leadership, recruitment, tech industry, job descriptions, talent acquisition      key  topics   The current state of the job market in 2024 Effective hiring strategies focusing on soft skills and EQ The importance of realistic job descriptions and expectations

04:48 Challenges in Job Recruitment 09:26 Leadership and Market Dynamics 18:27 The Language of Business in IT 19:36 The Importance of Emotional Intelligence in Hiring 24:21 Purpose-Driven Hiring: Attracting the Right Talent 28:32 The Impact of Social Fit on Employee Retention 31:31 Navigating the Job Market: Personal Experiences and Insights 36:48 Navigating the Walls of AI and Career Development 37:43 Embracing AI as a Tool for Growth 39:01 The Value of Skills Over Degrees 39:52 The Importance of Problem-Solving Skills 43:30 Building a Portfolio: Showcasing Your Work 45:50 Learning Through Experience and Humor 47:14 Analyzing the Job Market: Insights and Trends]]>3459acquisition,descriptions,emotional,hiring,industry,intelligence,job,leadership,market,recruitment,skills,talent,techfalse184fullhttps://www.spreaker.com/episode/cvciso-podcast-ep-83-jordon-s-new-consultancy-role-and-leveraging-the-power-of-the-cvciso-community--70094162https://api.spreaker.com/episode/70094162Tue, 17 Feb 2026 07:40:24 +0000SecurityStudioSummary   In this episode, the hosts discuss various aspects of compliance and risk management in the context of information security. They explore the transition of a community member to a new role, the importance of understanding compliance as it...3155assessment,assessments,awareness,business,cmmc,compliance,cybersecurity,gap,information,long-term,management,objectives,risk,security,situational,strategyfalse183fullhttps://www.spreaker.com/episode/cvciso-podcast-ep-82-introducing-cssra-certified-securitystudio-risk-assessor--69732980  In this episode, the hosts discuss various topics related to information security, including the recent controversy surrounding the CISA chief, the importance of leadership in security, and the launch of a new training course aimed at improving risk assessment skills. They emphasize the need for accountability in government and the significance of effective risk management in the security industry. The conversation also highlights the mission behind their new course and the importance of creating a supportive learning environment for aspiring security professionals.    
Takeaways  
 The transition to a new job can be a significant growth opportunity. Leadership in security requires accountability and transparency. Understanding the context of decisions is crucial in security management. Information security fundamentally revolves around risk management. Creating a safe learning environment fosters better education. The new Certified Security Studio Risk Assessor course aims to standardize risk assessments. Effective risk assessments are foundational to a successful security program. Good leaders prioritize the mission over personal ego. Wisdom in leadership can be gained through experience and mentorship. The security industry needs to focus on fixing its broken aspects.

Chapters
  00:00 Introduction and Program Updates 02:42 Transitioning Careers and Personal Growth 04:57 CISA Chief's Controversial Actions 09:53 Leadership Accountability and Transparency 14:37 Implications of Data Exposure and Security Risks 19:18 The Role of Ego in Leadership 21:53 Leadership and Accountability 25:40 Introduction to the New Course 27:52 The Mission Behind the Course 31:32 Addressing Industry Gaps 35:57 The Importance of Objective Assessments 41:20 Creating a Safe Learning Environment]]>https://api.spreaker.com/episode/69732980Mon, 02 Feb 2026 05:26:52 +0000SecurityStudioSummary   In this episode, the hosts discuss various topics related to information security, including the recent controversy surrounding the CISA chief, the importance of leadership in security, and the launch of a new training course aimed at...  In this episode, the hosts discuss various topics related to information security, including the recent controversy surrounding the CISA chief, the importance of leadership in security, and the launch of a new training course aimed at improving risk assessment skills. They emphasize the need for accountability in government and the significance of effective risk management in the security industry. The conversation also highlights the mission behind their new course and the importance of creating a supportive learning environment for aspiring security professionals.    
Takeaways  
 The transition to a new job can be a significant growth opportunity. Leadership in security requires accountability and transparency. Understanding the context of decisions is crucial in security management. Information security fundamentally revolves around risk management. Creating a safe learning environment fosters better education. The new Certified Security Studio Risk Assessor course aims to standardize risk assessments. Effective risk assessments are foundational to a successful security program. Good leaders prioritize the mission over personal ego. Wisdom in leadership can be gained through experience and mentorship. The security industry needs to focus on fixing its broken aspects.

Chapters
  00:00 Introduction and Program Updates 02:42 Transitioning Careers and Personal Growth 04:57 CISA Chief's Controversial Actions 09:53 Leadership Accountability and Transparency 14:37 Implications of Data Exposure and Security Risks 19:18 The Role of Ego in Leadership 21:53 Leadership and Accountability 25:40 Introduction to the New Course 27:52 The Mission Behind the Course 31:32 Addressing Industry Gaps 35:57 The Importance of Objective Assessments 41:20 Creating a Safe Learning Environment]]>2982assessments,career,cisa,courses,cybersecurity,development,information,leadership,management,professional,risk,security,studio,training,transitionfalse182fullhttps://www.spreaker.com/episode/cvciso-podcast-ep-81-information-security-is-about-people--69587455https://api.spreaker.com/episode/69587455Mon, 26 Jan 2026 07:04:05 +0000SecurityStudio3175falsefullhttps://www.spreaker.com/episode/cvciso-podcast-ep-80-a-day-in-the-life-of-special-guest-walter-anderson-founder-ceo-of-portsecure-cybersecurity--69515069
  In this episode of the CBC So podcast, host Andy welcomes a diverse panel including Evan Francen, Dave Tuckman, and Walter Anderson, who share their insights on cybersecurity and personal experiences. The conversation begins with a light-hearted introduction, where the hosts joke about their roles and backgrounds. Walter Anderson, the founder and CEO of PortSecure Cybersecurity, shares his journey from a curious child dismantling toys to a seasoned professional in the cybersecurity field. He recounts his early experiences with computers, his university hacking escapades, and how these shaped his career path. The discussion then shifts to the importance of mentorship and community in cybersecurity, emphasizing the need for sharing knowledge and supporting the next generation of professionals in the field.   As the conversation progresses, Walter shares anecdotes from his travels, including his time in New Zealand and his unique experiences with locals. The hosts delve into the significance of building relationships in business, particularly in cybersecurity, where trust is paramount. Walter discusses his transition into the VCISO role and the challenges he faced, highlighting the importance of continuous learning and adaptation in a rapidly evolving industry. The episode wraps up with reflections on the value of personal stories and the impact they can have on others, encouraging listeners to embrace their unique journeys and contribute positively to their communities.  
  Keywords  

cybersecurity, VCISO, mentorship, PortSecure, community, personal stories, risk management, technology, podcast     Takeaways   Curiosity drives innovation and learning. Building relationships is key in cybersecurity. Sharing knowledge can empower the next generation. Trust is essential in cybersecurity roles. Personal experiences shape professional journeys.]]>https://api.spreaker.com/episode/69515069Tue, 20 Jan 2026 06:37:34 +0000SecurityStudioSummary   In this episode of the CBC So podcast, host Andy welcomes a diverse panel including Evan Francen, Dave Tuckman, and Walter Anderson, who share their insights on cybersecurity and personal experiences. The conversation begins with a...
  In this episode of the CBC So podcast, host Andy welcomes a diverse panel including Evan Francen, Dave Tuckman, and Walter Anderson, who share their insights on cybersecurity and personal experiences. The conversation begins with a light-hearted introduction, where the hosts joke about their roles and backgrounds. Walter Anderson, the founder and CEO of PortSecure Cybersecurity, shares his journey from a curious child dismantling toys to a seasoned professional in the cybersecurity field. He recounts his early experiences with computers, his university hacking escapades, and how these shaped his career path. The discussion then shifts to the importance of mentorship and community in cybersecurity, emphasizing the need for sharing knowledge and supporting the next generation of professionals in the field.   As the conversation progresses, Walter shares anecdotes from his travels, including his time in New Zealand and his unique experiences with locals. The hosts delve into the significance of building relationships in business, particularly in cybersecurity, where trust is paramount. Walter discusses his transition into the VCISO role and the challenges he faced, highlighting the importance of continuous learning and adaptation in a rapidly evolving industry. The episode wraps up with reflections on the value of personal stories and the impact they can have on others, encouraging listeners to embrace their unique journeys and contribute positively to their communities.  
  Keywords  

cybersecurity, VCISO, mentorship, PortSecure, community, personal stories, risk management, technology, podcast     Takeaways   Curiosity drives innovation and learning. Building relationships is key in cybersecurity. Sharing knowledge can empower the next generation. Trust is essential in cybersecurity roles. Personal experiences shape professional journeys.]]>3222community,cybersecurity,management,mentorship,personal,podcast,portsecure,risk,stories,technology,vcisofalse180fullhttps://www.spreaker.com/episode/cvciso-podcast-ep-79-featuring-oscar-minks-frsecure-president-a-look-at-the-changing-landscape-for-vcisos-coming-into-2026--69398083  In this episode of the CBC So podcast, the hosts engage in a lively discussion with guests about personal growth, professional challenges, and the evolving landscape of information security. They reflect on the importance of continuous improvement, accountability, and the role of AI in the VCISO space. The conversation emphasizes the need for a supportive work environment, the value of mentorship, and the significance of self-reflection in achieving personal and professional goals. As they look ahead to 2026, the hosts encourage listeners to embrace change and strive for excellence in all aspects of life.  
  Takeaways  
Life isn't polished, and neither should our conversations be. Asking difficult questions can lead to personal growth. Continuous improvement is essential in both personal and professional realms. The VCISO landscape is evolving with increased competition. Understanding value in professional relationships is crucial. Accountability and purpose drive success in any field. AI will significantly impact the future of VCISO roles. Creating a supportive work environment enhances employee well-being. Feedback and self-reflection are vital for growth. Work-life balance is unique to each individual.     Sound bites   "Life isn't polished." "We promote well-being." "Let's make 2026 awesome."     Chapters   00:00 Introduction to the Podcast and Guests 02:48 Reflections on Personal Growth and Resolutions 05:26 The Importance of Accountability in Professional Growth 08:07 Navigating the Evolving Landscape of VC So Services 10:21 Assessing Value in Professional Relationships 13:06 The Role of Purpose in Professional Success 15:30 Understanding Security in a Complex World 18:01 The Future of Information Security Leadership 23:01 Making Informed Risk Decisions 23:58 The Importance of Step-by-Step Discipline 25:49 Feedback Loops and Self-Reflection 27:09 The Value of Community and Accountability 28:59 Creating a Safe Learning Environment 30:28 Balancing Business and Personal Well-Being 33:35 The Unique Nature of Work-Life Balance 35:05 Encouraging Open Communication and Learning 42:47 The Continuous Journey of Learning 46:49 Navigating Information in the Digital Age]]>https://api.spreaker.com/episode/69398083Mon, 12 Jan 2026 07:25:18 +0000SecurityStudioSummary   In this episode of the CBC So podcast, the hosts engage in a lively discussion with guests about personal growth, professional challenges, and the evolving landscape of information security. They reflect on the importance of continuous...  In this episode of the CBC So podcast, the hosts engage in a lively discussion with guests about personal growth, professional challenges, and the evolving landscape of information security. They reflect on the importance of continuous improvement, accountability, and the role of AI in the VCISO space. The conversation emphasizes the need for a supportive work environment, the value of mentorship, and the significance of self-reflection in achieving personal and professional goals. As they look ahead to 2026, the hosts encourage listeners to embrace change and strive for excellence in all aspects of life.  
  Takeaways  
Life isn't polished, and neither should our conversations be. Asking difficult questions can lead to personal growth. Continuous improvement is essential in both personal and professional realms. The VCISO landscape is evolving with increased competition. Understanding value in professional relationships is crucial. Accountability and purpose drive success in any field. AI will significantly impact the future of VCISO roles. Creating a supportive work environment enhances employee well-being. Feedback and self-reflection are vital for growth. Work-life balance is unique to each individual.     Sound bites   "Life isn't polished." "We promote well-being." "Let's make 2026 awesome."     Chapters   00:00 Introduction to the Podcast and Guests 02:48 Reflections on Personal Growth and Resolutions 05:26 The Importance of Accountability in Professional Growth 08:07 Navigating the Evolving Landscape of VC So Services 10:21 Assessing Value in Professional Relationships 13:06 The Role of Purpose in Professional Success 15:30 Understanding Security in a Complex World 18:01 The Future of Information Security Leadership 23:01 Making Informed Risk Decisions 23:58 The Importance of Step-by-Step Discipline 25:49 Feedback Loops and Self-Reflection 27:09 The Value of Community and Accountability 28:59 Creating a Safe Learning Environment 30:28 Balancing Business and Personal Well-Being 33:35 The Unique Nature of Work-Life Balance 35:05 Encouraging Open Communication and Learning 42:47 The Continuous Journey of Learning 46:49 Navigating Information in the Digital Age]]>3043accountability,ai,balance,challenges,continuous,environment,feedback,growth,improvement,keywords podcast,mentorship,personal,professional,resolutions,vciso,work,work-lifefalse179fullhttps://www.spreaker.com/episode/cvciso-podcast-ep-78-vciso-msp-partnerships-2025-insights-with-lyle-melnychuk--69303951  In this episode, the hosts discuss various aspects of cybersecurity, focusing on the evolution of Secure Shield, the role of Managed Service Providers (MSPs), and the importance of risk management. They explore the challenges of insider threats, differences in cybersecurity standards between Canada and the US, and significant cybersecurity incidents from 2025. The conversation also touches on the impact of AI on cybersecurity and predictions for the future, emphasizing the need for education and awareness in the field.  
  Takeaways
  The CBCSO program offers valuable education opportunities for professionals. Secure Shield has evolved from an MSP to a cybersecurity consultancy. Understanding risk management is crucial for client relationships. MSPs must be held accountable for their services and client security. Insider threats pose significant risks to organizations. There are notable differences in cybersecurity standards between Canada and the US. Cybersecurity incidents in 2025 highlight the need for vigilance. AI is changing the landscape of cybersecurity threats. Organizations must prepare for potential insider threats and their implications. The future of cybersecurity will require enhanced detection and risk management strategies.]]>https://api.spreaker.com/episode/69303951Mon, 05 Jan 2026 08:43:28 +0000SecurityStudioSummary   In this episode, the hosts discuss various aspects of cybersecurity, focusing on the evolution of Secure Shield, the role of Managed Service Providers (MSPs), and the importance of risk management. They explore the challenges of insider...  In this episode, the hosts discuss various aspects of cybersecurity, focusing on the evolution of Secure Shield, the role of Managed Service Providers (MSPs), and the importance of risk management. They explore the challenges of insider threats, differences in cybersecurity standards between Canada and the US, and significant cybersecurity incidents from 2025. The conversation also touches on the impact of AI on cybersecurity and predictions for the future, emphasizing the need for education and awareness in the field.  
  Takeaways
  The CBCSO program offers valuable education opportunities for professionals. Secure Shield has evolved from an MSP to a cybersecurity consultancy. Understanding risk management is crucial for client relationships. MSPs must be held accountable for their services and client security. Insider threats pose significant risks to organizations. There are notable differences in cybersecurity standards between Canada and the US. Cybersecurity incidents in 2025 highlight the need for vigilance. AI is changing the landscape of cybersecurity threats. Organizations must prepare for potential insider threats and their implications. The future of cybersecurity will require enhanced detection and risk management strategies.]]>3463ai,breaches,cmmc,compliance,cybersecurity,data,insider,management,msp,risk,secure,shield,threats,trendsfalse178fullhttps://www.spreaker.com/episode/cvciso-podcast-ep-77-featuring-brian-gibbs-and-academy-s-launching-of-the-cvciso-level-3-courses--69162964  Every organization needs information security leadership. Level 3 courses are designed for complex environments. Communication is key for effective risk management. Understanding budgeting is crucial for cybersecurity professionals. Complexity in environments can lead to security vulnerabilities. The role of a VCISO is to provide leadership and guidance. Building a justified budget is essential for cybersecurity success. Experience in the field is necessary for effective consulting. Networking and community support are vital for growth. Continuous learning and adaptation are necessary in cybersecurity.
    Summary  
 In this episode of CBC So Podcast, host Andy and guests discuss the importance of cybersecurity leadership, particularly through the lens of the VCISO role. They delve into the newly introduced Level 3 courses designed to equip professionals with the skills needed to navigate complex environments, communicate effectively, and manage budgets in information security. The conversation emphasizes the need for continuous learning, community support, and the significance of providing value to organizations through effective cybersecurity practices.

Chapters   00:00 Introduction to the Podcast and Guests 02:17 Overview of Level 3 Courses 09:37 Understanding the Role of a VCISO 16:59 Managing Complexity in Information Security 32:34 Effective Communication in Cybersecurity 35:40 Budgeting for Information Security 45:13 Conclusion and Future Opportunities]]>https://api.spreaker.com/episode/69162964Mon, 22 Dec 2025 04:20:01 +0000SecurityStudioTakeaways   Every organization needs information security leadership. Level 3 courses are designed for complex environments. Communication is key for effective risk management. Understanding budgeting is crucial for cybersecurity professionals....  Every organization needs information security leadership. Level 3 courses are designed for complex environments. Communication is key for effective risk management. Understanding budgeting is crucial for cybersecurity professionals. Complexity in environments can lead to security vulnerabilities. The role of a VCISO is to provide leadership and guidance. Building a justified budget is essential for cybersecurity success. Experience in the field is necessary for effective consulting. Networking and community support are vital for growth. Continuous learning and adaptation are necessary in cybersecurity.
    Summary  
 In this episode of CBC So Podcast, host Andy and guests discuss the importance of cybersecurity leadership, particularly through the lens of the VCISO role. They delve into the newly introduced Level 3 courses designed to equip professionals with the skills needed to navigate complex environments, communicate effectively, and manage budgets in information security. The conversation emphasizes the need for continuous learning, community support, and the significance of providing value to organizations through effective cybersecurity practices.

Chapters   00:00 Introduction to the Podcast and Guests 02:17 Overview of Level 3 Courses 09:37 Understanding the Role of a VCISO 16:59 Managing Complexity in Information Security 32:34 Effective Communication in Cybersecurity 35:40 Budgeting for Information Security 45:13 Conclusion and Future Opportunities]]>3141budgeting,communication,complexity,courses,cybersecurity,information,leadership,management,risk,security,training,vcisofalse177fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-76-how-to-avoid-scams-fraud-and-criminals-this-christmas--69051441  This podcast episode discusses essential cybersecurity tips for the holiday season, emphasizing the importance of situational awareness, identifying scams, and protecting personal information. The hosts share insights on how to navigate online shopping safely, the risks associated with social media sharing, and the significance of educating family members about cybersecurity. They also highlight the need for trust and verification in all communications, especially during the holiday season when scams are prevalent.  
  Takeaways  
 Situational awareness is crucial during the holiday season. Don't rush your online purchases; take your time. Be cautious of fake shipping notices and charities. Generosity should be exercised through trusted channels only. Avoid sharing too much personal information on social media. Protect your home by being mindful of what you share online. Be vigilant with ATMs and card readers to avoid skimmers. Use the five-second test to evaluate online shopping sites. Educate family members, especially older relatives, about cybersecurity. Trust should be built slowly and verified always.]]>https://api.spreaker.com/episode/69051441Mon, 15 Dec 2025 07:17:26 +0000SecurityStudioSummary   This podcast episode discusses essential cybersecurity tips for the holiday season, emphasizing the importance of situational awareness, identifying scams, and protecting personal information. The hosts share insights on how to navigate...  This podcast episode discusses essential cybersecurity tips for the holiday season, emphasizing the importance of situational awareness, identifying scams, and protecting personal information. The hosts share insights on how to navigate online shopping safely, the risks associated with social media sharing, and the significance of educating family members about cybersecurity. They also highlight the need for trust and verification in all communications, especially during the holiday season when scams are prevalent.  
  Takeaways  
 Situational awareness is crucial during the holiday season. Don't rush your online purchases; take your time. Be cautious of fake shipping notices and charities. Generosity should be exercised through trusted channels only. Avoid sharing too much personal information on social media. Protect your home by being mindful of what you share online. Be vigilant with ATMs and card readers to avoid skimmers. Use the five-second test to evaluate online shopping sites. Educate family members, especially older relatives, about cybersecurity. Trust should be built slowly and verified always.]]>3499atm,awareness,education,holiday,home,keywords cybersecurity,media,online,safety,scams,security,shopping,situational,social,trust,verificationfalse176fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-75-special-richard-stroble-and-respecting-the-importance-of-our-health--68925941In this episode, the hosts and guests discuss the importance of health—mental, physical, and spiritual—in the context of their professional lives in security. They share personal experiences with health challenges, strategies for maintaining well-being, and the significance of accountability in both personal and professional realms. The conversation emphasizes the need for community support and the impact of food choices on overall health, while also touching on the role of spirituality and gratitude in fostering a positive mindset.  
  Takeaways  
Health is crucial for effective work performance. Mental health stigma needs to be addressed openly. Sharing personal health experiences can inspire others. Consistency in health habits is key to success. Spiritual health provides purpose and strength. Food choices significantly impact physical health. Community support enhances personal well-being. Accountability is essential in leadership roles. Gratitude can combat anxiety and improve mental health. Love and compassion are foundational to personal growth.]]>https://api.spreaker.com/episode/68925941Sun, 07 Dec 2025 06:17:17 +0000SecurityStudioSummary   In this episode, the hosts and guests discuss the importance of health—mental, physical, and spiritual—in the context of their professional lives in security. They share personal experiences with health challenges, strategies for maintaining...In this episode, the hosts and guests discuss the importance of health—mental, physical, and spiritual—in the context of their professional lives in security. They share personal experiences with health challenges, strategies for maintaining well-being, and the significance of accountability in both personal and professional realms. The conversation emphasizes the need for community support and the impact of food choices on overall health, while also touching on the role of spirituality and gratitude in fostering a positive mindset.  
  Takeaways  
Health is crucial for effective work performance. Mental health stigma needs to be addressed openly. Sharing personal health experiences can inspire others. Consistency in health habits is key to success. Spiritual health provides purpose and strength. Food choices significantly impact physical health. Community support enhances personal well-being. Accountability is essential in leadership roles. Gratitude can combat anxiety and improve mental health. Love and compassion are foundational to personal growth.]]>3337accountability,choices,community,experiences,food,health,keywords health,leadership,mental,personal,physical,security,spiritual,supportfalse175fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-74-special-guest-dan-ovick-and-holiday-awareness-resources--68751208Summary
In this episode of CBC So Podcast, the hosts discuss various aspects of cybersecurity, particularly focusing on the upcoming holiday season and the associated risks. They introduce their guests, including Dan Ovick, who shares his journey in cybersecurity and the importance of community networking. The conversation shifts to holiday cybersecurity awareness, discussing the increase in scams and cyber threats during this time. The hosts emphasize the need for best practices in online safety, incident response planning, and the importance of educating youth about social media and cybersecurity. They conclude with final thoughts and advice for listeners to stay safe during the holiday season.

 Takeaways

• The CBCSO program offers valuable opportunities for skill development.
• Networking within the cybersecurity community is crucial for growth.
• Holiday shopping increases the risk of cyber threats and scams.
• Retailers must ensure their systems are secure during peak shopping times.
• Consumers should verify any suspicious messages by logging into official websites.
• Incident response planning is essential for personal and family safety.
• Social media can pose risks for youth; education is key.
• Families should discuss cybersecurity awareness regularly.
• Scammers often exploit the holiday season for financial gain.
• Using public Wi-Fi for transactions is highly discouraged.

]]>https://api.spreaker.com/episode/68751208Wed, 26 Nov 2025 05:49:16 +0000SecurityStudioSummary In this episode of CBC So Podcast, the hosts discuss various aspects of cybersecurity, particularly focusing on the upcoming holiday season and the associated risks. They introduce their guests, including Dan Ovick, who shares his journey in...Summary
In this episode of CBC So Podcast, the hosts discuss various aspects of cybersecurity, particularly focusing on the upcoming holiday season and the associated risks. They introduce their guests, including Dan Ovick, who shares his journey in cybersecurity and the importance of community networking. The conversation shifts to holiday cybersecurity awareness, discussing the increase in scams and cyber threats during this time. The hosts emphasize the need for best practices in online safety, incident response planning, and the importance of educating youth about social media and cybersecurity. They conclude with final thoughts and advice for listeners to stay safe during the holiday season.

 Takeaways

• The CBCSO program offers valuable opportunities for skill development.
• Networking within the cybersecurity community is crucial for growth.
• Holiday shopping increases the risk of cyber threats and scams.
• Retailers must ensure their systems are secure during peak shopping times.
• Consumers should verify any suspicious messages by logging into official websites.
• Incident response planning is essential for personal and family safety.
• Social media can pose risks for youth; education is key.
• Families should discuss cybersecurity awareness regularly.
• Scammers often exploit the holiday season for financial gain.
• Using public Wi-Fi for transactions is highly discouraged.

]]>3166awareness,community,holiday,incident,information,keywordscybersecurity,media,networking,online,response,retail,safety,scams,security,social,youthfalse174fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-73-glen-legus-cvciso-foundations-course-instructor--68598701https://api.spreaker.com/episode/68598701Mon, 17 Nov 2025 08:11:43 +0000SecurityStudioSummary   In this episode of the CBC So podcast, host Andy and guests discuss various aspects of information security, including the importance of context in decision-making, market trends, and the value of leadership in security practices. They share...3918business,community,confidence,cvciso,engagement,information,leadership,market,personal,practice,security,so,stories,strategy,teaching,trends,vcfalse173fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-72-the-road-to-hell-is-paved-with-convenience--68491353Summary In this episode of the CVC So Podcast, host Andy welcomes a diverse group of cybersecurity professionals, including Joe Moldenhauer, who shares her inspiring journey from the casino industry to becoming a cybersecurity analyst. The conversation emphasizes the importance of community, support, and purpose in the cybersecurity field, as well as the value of learning from experiences and the need for diverse perspectives. The guests discuss overcoming challenges, the significance of self-discipline, and the role of purpose in career development, ultimately encouraging listeners to pursue their passions and make a positive impact in the industry. takeaways

• Fridays are a highlight for me.
• You can do it better than me.
• You have to find what your purpose is.
• You can't let the world tell you what your purpose is.
• You have to go through the scars.
• You need more women in this industry.
• You can learn things you never thought you could learn.
• You have to have self-discipline.
• You need to focus on the mission.
• You can do it too!

]]>https://api.spreaker.com/episode/68491353Mon, 10 Nov 2025 04:16:48 +0000SecurityStudioSummary In this episode of the CVC So Podcast, host Andy welcomes a diverse group of cybersecurity professionals, including Joe Moldenhauer, who shares her inspiring journey from the casino industry to becoming a cybersecurity analyst. The...Summary In this episode of the CVC So Podcast, host Andy welcomes a diverse group of cybersecurity professionals, including Joe Moldenhauer, who shares her inspiring journey from the casino industry to becoming a cybersecurity analyst. The conversation emphasizes the importance of community, support, and purpose in the cybersecurity field, as well as the value of learning from experiences and the need for diverse perspectives. The guests discuss overcoming challenges, the significance of self-discipline, and the role of purpose in career development, ultimately encouraging listeners to pursue their passions and make a positive impact in the industry. takeaways

• Fridays are a highlight for me.
• You can do it better than me.
• You have to find what your purpose is.
• You can't let the world tell you what your purpose is.
• You have to go through the scars.
• You need more women in this industry.
• You can learn things you never thought you could learn.
• You have to have self-discipline.
• You need to focus on the mission.
• You can do it too!

]]>5263career,community,cvciso,cybersecurity,development,diversity,inspiration,podcast,purpose,self-discipline,support,wisdomfalse172fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-71-happy-halloween-with-jo-moldenhauer--68378774Summary In this episode of the CVC So Podcast, host Andy welcomes a diverse group of cybersecurity professionals, including Joe Moldenhauer, who shares her inspiring journey from the casino industry to becoming a cybersecurity analyst. The conversation emphasizes the importance of community, support, and purpose in the cybersecurity field, as well as the value of learning from experiences and the need for diverse perspectives. The guests discuss overcoming challenges, the significance of self-discipline, and the role of purpose in career development, ultimately encouraging listeners to pursue their passions and make a positive impact in the industry. takeaways

• Fridays are a highlight for me.
• You can do it better than me.
• You have to find what your purpose is.
• You can't let the world tell you what your purpose is.
• You have to go through the scars.
• You need more women in this industry.
• You can learn things you never thought you could learn.
• You have to have self-discipline.
• You need to focus on the mission.
• You can do it too!

]]>https://api.spreaker.com/episode/68378774Sat, 01 Nov 2025 14:32:36 +0000SecurityStudioSummary In this episode of the CVC So Podcast, host Andy welcomes a diverse group of cybersecurity professionals, including Joe Moldenhauer, who shares her inspiring journey from the casino industry to becoming a cybersecurity analyst. The...Summary In this episode of the CVC So Podcast, host Andy welcomes a diverse group of cybersecurity professionals, including Joe Moldenhauer, who shares her inspiring journey from the casino industry to becoming a cybersecurity analyst. The conversation emphasizes the importance of community, support, and purpose in the cybersecurity field, as well as the value of learning from experiences and the need for diverse perspectives. The guests discuss overcoming challenges, the significance of self-discipline, and the role of purpose in career development, ultimately encouraging listeners to pursue their passions and make a positive impact in the industry. takeaways

• Fridays are a highlight for me.
• You can do it better than me.
• You have to find what your purpose is.
• You can't let the world tell you what your purpose is.
• You have to go through the scars.
• You need more women in this industry.
• You can learn things you never thought you could learn.
• You have to have self-discipline.
• You need to focus on the mission.
• You can do it too!

]]>3850career,community,cvciso,cybersecurity,development,diversity,inspiration,podcast,purpose,self-discipline,support,wisdomfalse171fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-69-james-keltgen-and-live-testing-of-your-ir-plan--68160774Incident response plans are essential for effective cybersecurity management. Situational awareness is crucial for identifying potential threats. Communication during an incident is key to effective management. Training new employees quickly can reduce vulnerabilities. Creating a positive culture around cybersecurity encourages reporting of incidents. Personal incident response plans can help individuals prepare for potential threats. Lessons learned from incidents can improve future responses. Defining roles in incident response can streamline communication and actions. Understanding the adversary's tactics can enhance preparedness. Not every incident needs to be a disaster; proactive planning can lead to positive outcomes.    
Summary
  In this episode, the hosts discuss the importance of incident response in cybersecurity, sharing insights from a recent incident experienced by one of the guests. They emphasize the need for situational awareness, effective communication, and a positive culture around cybersecurity. The conversation highlights the lessons learned from the incident, the role of training and awareness, and the significance of personal incident response plans. The episode concludes with reflections on the importance of proactive planning and the need to celebrate successes in cybersecurity.]]>https://api.spreaker.com/episode/68160774Thu, 16 Oct 2025 06:38:10 +0000SecurityStudioTakeaways   Incident response plans are essential for effective cybersecurity management. Situational awareness is crucial for identifying potential threats. Communication during an incident is key to effective management. Training new employees...Incident response plans are essential for effective cybersecurity management. Situational awareness is crucial for identifying potential threats. Communication during an incident is key to effective management. Training new employees quickly can reduce vulnerabilities. Creating a positive culture around cybersecurity encourages reporting of incidents. Personal incident response plans can help individuals prepare for potential threats. Lessons learned from incidents can improve future responses. Defining roles in incident response can streamline communication and actions. Understanding the adversary's tactics can enhance preparedness. Not every incident needs to be a disaster; proactive planning can lead to positive outcomes.    
Summary
  In this episode, the hosts discuss the importance of incident response in cybersecurity, sharing insights from a recent incident experienced by one of the guests. They emphasize the need for situational awareness, effective communication, and a positive culture around cybersecurity. The conversation highlights the lessons learned from the incident, the role of training and awareness, and the significance of personal incident response plans. The episode concludes with reflections on the importance of proactive planning and the need to celebrate successes in cybersecurity.]]>3257awareness,ciso,communication,culture,cybersecurity,incident,learned,lessons,management,personal,response,risk,situational,trainingfalse169fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-68-the-password-that-shut-down-a-158-year-old-business--68014237https://api.spreaker.com/episode/68014237Sat, 04 Oct 2025 17:50:19 +0000SecurityStudioIn this episode, the hosts discuss the cyber attack on Knights of Old, a 158-year-old logistics company that was shut down due to a ransomware attack. They explore the preventable nature of the incident, the lessons learned, and the role of Virtual...3016akira,attack,business,continuity,cyber,cybersecurity,group,incident,knights,learned,lessons,of,old,password,ransomware,response,security,vcsofalse168fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-67-mental-health-stress-resources-for-vcisos--67917970In this episode, the hosts discuss the anxiety that VCSOs face in their roles, exploring coping mechanisms, the importance of transparency, and how to handle mistakes. They delve into the phenomenon of the Sunday blues, share personal experiences, and emphasize the value of community support and learning from scenarios. The conversation highlights the need for self-awareness and the significance of building confidence through experience in managing anxiety effectively.  

  Takeaways

  Anxiety is a common experience for VCSOs.
Coping mechanisms can include open communication and self-care.
The Sunday blues can affect many professionals, not just VCSOs.
Transparency in communication can reduce anxiety in the workplace.
Handling mistakes openly can build trust and credibility.
Scenario-based learning helps prepare for anxiety-inducing situations.
Incident response can be a significant source of anxiety.
Experience can help reduce anxiety in high-pressure situations.
Self-awareness is crucial for managing stress and anxiety.
Community support is vital for VCSOs facing challenges.  ]]>https://api.spreaker.com/episode/67917970Sat, 27 Sep 2025 05:24:59 +0000SecurityStudioSummary   In this episode, the hosts discuss the anxiety that VCSOs face in their roles, exploring coping mechanisms, the importance of transparency, and how to handle mistakes. They delve into the phenomenon of the Sunday blues, share personal...In this episode, the hosts discuss the anxiety that VCSOs face in their roles, exploring coping mechanisms, the importance of transparency, and how to handle mistakes. They delve into the phenomenon of the Sunday blues, share personal experiences, and emphasize the value of community support and learning from scenarios. The conversation highlights the need for self-awareness and the significance of building confidence through experience in managing anxiety effectively.  

  Takeaways

  Anxiety is a common experience for VCSOs.
Coping mechanisms can include open communication and self-care.
The Sunday blues can affect many professionals, not just VCSOs.
Transparency in communication can reduce anxiety in the workplace.
Handling mistakes openly can build trust and credibility.
Scenario-based learning helps prepare for anxiety-inducing situations.
Incident response can be a significant source of anxiety.
Experience can help reduce anxiety in high-pressure situations.
Self-awareness is crucial for managing stress and anxiety.
Community support is vital for VCSOs facing challenges.  ]]>2821accountability,anxiety,blues,coping,cvciso,development,health,incident,management,mechanisms,mental,professional,response,stress,sunday,transparency,vcsofalse167fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-66-who-a-vciso-should-have-on-quick-dial-in-support-of-their-clients--67846144https://api.spreaker.com/episode/67846144Mon, 22 Sep 2025 03:26:50 +0000SecurityStudioSummary   In this episode, the hosts discuss the essential support structures for Virtual Chief Information Security Officers (VCSOs), emphasizing the importance of personal and professional relationships. They explore the need for a strong support...2871community,cybersecurity,engagement,growth,health,incident,management,mental,personal,professional,relationships,resource,response,rolodex,support,systems,vcsofalse166fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-65-nick-mullen-and-the-importance-of-developing-relationships--67789385
In this episode, the hosts engage in a lively discussion with guest Jumpin Slick Nick about the importance of building relationships in the cybersecurity field. They explore the challenges of networking, overcoming imposter syndrome, and the role of vulnerability in professional growth. The conversation emphasizes the significance of effective communication, kindness, and genuine interest in fostering connections. The hosts share personal experiences and insights, highlighting that building trust and credibility is essential for success in any professional environment.  
 Takeaways

Building relationships is crucial for success in cybersecurity.
Trust, credibility, and likability are key components of relationships.
Imposter syndrome can hinder professional growth and networking.
Vulnerability can lead to better communication and understanding.
Being kind and genuine can significantly impact relationship building.
It's important to be your own advocate in your career.
 Effective communication involves meeting people where they are.
 Networking should feel natural, not forced. Self-reflection is essential for personal and professional development.
You can impact others positively without realizing it.]]>https://api.spreaker.com/episode/67789385Wed, 17 Sep 2025 06:47:58 +0000SecurityStudioSummary   In this episode, the hosts engage in a lively discussion with guest Jumpin Slick Nick about the importance of building relationships in the cybersecurity field. They explore the challenges of networking, overcoming imposter syndrome, and...
In this episode, the hosts engage in a lively discussion with guest Jumpin Slick Nick about the importance of building relationships in the cybersecurity field. They explore the challenges of networking, overcoming imposter syndrome, and the role of vulnerability in professional growth. The conversation emphasizes the significance of effective communication, kindness, and genuine interest in fostering connections. The hosts share personal experiences and insights, highlighting that building trust and credibility is essential for success in any professional environment.  
 Takeaways

Building relationships is crucial for success in cybersecurity.
Trust, credibility, and likability are key components of relationships.
Imposter syndrome can hinder professional growth and networking.
Vulnerability can lead to better communication and understanding.
Being kind and genuine can significantly impact relationship building.
It's important to be your own advocate in your career.
 Effective communication involves meeting people where they are.
 Networking should feel natural, not forced. Self-reflection is essential for personal and professional development.
You can impact others positively without realizing it.]]>1997communication,credibility,cybersecurity,growth,imposter,kindness,networking,professional,relationships,syndrome,trust,vulnerabilityfalse165fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-64-joe-erle-and-the-state-of-cyber-insurance--67671826https://api.spreaker.com/episode/67671826Mon, 08 Sep 2025 06:50:33 +0000SecurityStudioTakeaways   Cyber insurance is essential for businesses to manage risk. Understanding the nuances of cyber insurance policies is crucial. The cyber insurance industry has evolved significantly post-COVID. Claims can be denied due to misrepresentation...3192applications,breach,brokers,claims,coach,cyber,cybersecurity,denial,incident,insurance,management,policies,response,risk,self-insurancefalse164fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-63-the-salt-typhoon-attack--67670820  In this episode, the hosts discuss the Salt Typhoon hacking group, their recent attacks on US companies, and the broader implications of cybersecurity threats. They explore the reasons behind the naming of hacker groups, the importance of risk management, and the need for situational awareness in organizations. The conversation delves into the role of the Chinese government in cyber attacks, the techniques used by hackers, and notable breaches that have occurred. The episode emphasizes the need for better cybersecurity practices and the potential consequences of neglecting fundamental security measures. In this conversation, the speakers delve into the complexities of cybersecurity, focusing on the challenges of incident response, the long-term strategies employed by adversaries like China, and the implications for national security. They discuss the economic costs of remediation, the accountability of CISOs, and the importance of collaboration in the industry. The conversation emphasizes the need for mission-driven security practices and effective regulatory responses to cyber threats, while also outlining essential defensive strategies for organizations.    
Takeaways
  The Salt Typhoon group has been active for years, targeting major US companies. Risk management is more important than risk elimination in cybersecurity. Many organizations fail to address their most significant risks despite having large security budgets. Situational awareness is crucial for effective cybersecurity. Chinese government involvement in cyber attacks is a significant concern. Basic cybersecurity practices like patch management are often overlooked. Salt Typhoon has targeted critical infrastructure and telecommunications. The impact of cyber attacks extends beyond immediate breaches. Organizations often treat breaches as a cost of doing business. Understanding the threat landscape is essential for effective defense strategies. Incident response has been haphazard and often driven by self-preservation. China's cyber strategy is long-term, contrasting with the short-term focus of many organizations. National security is at risk due to significant data breaches. Economic costs of cybersecurity failures can be substantial and long-lasting. CISOs often lack the necessary training and accountability for their roles. Collaboration among cybersecurity professionals is essential for effective defense. Mission-driven approaches can lead to better security outcomes and financial success. Compliance certifications often create a false sense of security. Effective patch management and network segmentation are critical defensive strategies. Egress filtering can prevent many attacks by blocking command and control communications.]]>https://api.spreaker.com/episode/67670820Mon, 08 Sep 2025 05:45:41 +0000SecurityStudioSummary   In this episode, the hosts discuss the Salt Typhoon hacking group, their recent attacks on US companies, and the broader implications of cybersecurity threats. They explore the reasons behind the naming of hacker groups, the importance of...  In this episode, the hosts discuss the Salt Typhoon hacking group, their recent attacks on US companies, and the broader implications of cybersecurity threats. They explore the reasons behind the naming of hacker groups, the importance of risk management, and the need for situational awareness in organizations. The conversation delves into the role of the Chinese government in cyber attacks, the techniques used by hackers, and notable breaches that have occurred. The episode emphasizes the need for better cybersecurity practices and the potential consequences of neglecting fundamental security measures. In this conversation, the speakers delve into the complexities of cybersecurity, focusing on the challenges of incident response, the long-term strategies employed by adversaries like China, and the implications for national security. They discuss the economic costs of remediation, the accountability of CISOs, and the importance of collaboration in the industry. The conversation emphasizes the need for mission-driven security practices and effective regulatory responses to cyber threats, while also outlining essential defensive strategies for organizations.    
Takeaways
  The Salt Typhoon group has been active for years, targeting major US companies. Risk management is more important than risk elimination in cybersecurity. Many organizations fail to address their most significant risks despite having large security budgets. Situational awareness is crucial for effective cybersecurity. Chinese government involvement in cyber attacks is a significant concern. Basic cybersecurity practices like patch management are often overlooked. Salt Typhoon has targeted critical infrastructure and telecommunications. The impact of cyber attacks extends beyond immediate breaches. Organizations often treat breaches as a cost of doing business. Understanding the threat landscape is essential for effective defense strategies. Incident response has been haphazard and often driven by self-preservation. China's cyber strategy is long-term, contrasting with the short-term focus of many organizations. National security is at risk due to significant data breaches. Economic costs of cybersecurity failures can be substantial and long-lasting. CISOs often lack the necessary training and accountability for their roles. Collaboration among cybersecurity professionals is essential for effective defense. Mission-driven approaches can lead to better security outcomes and financial success. Compliance certifications often create a false sense of security. Effective patch management and network segmentation are critical defensive strategies. Egress filtering can prevent many attacks by blocking command and control communications.]]>2953attack,awareness,breaches,chinese,cyber,cybersecurity,data,government,hacking,incident,management,national,response,risk,salt,situational,techniques,telecommunications,threats,typhoonfalse163fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-62-the-ai-myth-or-fact-game--67563313
In this episode of the CBC So Podcast, the hosts engage in a dynamic conversation covering various topics related to cybersecurity, AI ethics, and community engagement. They discuss recent cybersecurity news, the implications of AI on personal likeness, and the importance of accountability in the face of breaches. The conversation emphasizes the need for stronger data protection regulations and community involvement in raising awareness about cybersecurity issues. In this engaging podcast episode, the hosts delve into the complexities of information security, emphasizing the importance of life skills over technical expertise. They discuss the need for accountability in the cybersecurity industry and explore creative ways to engage listeners, such as incorporating Easter eggs into the podcast. The conversation shifts to a fun game of 'Myth or Fact' focused on AI, where they tackle misconceptions about AI training and the legal implications of AI-generated content. The episode wraps up with a humorous take on the potential liabilities companies face regarding AI outputs.]]>https://api.spreaker.com/episode/67563313Sat, 30 Aug 2025 18:03:31 +0000SecurityStudioThe podcast features a lively discussion among hosts and guests. Cybersecurity news is a critical topic in today's digital landscape. AI raises ethical questions regarding likeness and consent. Recent breaches highlight the need for accountability in...
In this episode of the CBC So Podcast, the hosts engage in a dynamic conversation covering various topics related to cybersecurity, AI ethics, and community engagement. They discuss recent cybersecurity news, the implications of AI on personal likeness, and the importance of accountability in the face of breaches. The conversation emphasizes the need for stronger data protection regulations and community involvement in raising awareness about cybersecurity issues. In this engaging podcast episode, the hosts delve into the complexities of information security, emphasizing the importance of life skills over technical expertise. They discuss the need for accountability in the cybersecurity industry and explore creative ways to engage listeners, such as incorporating Easter eggs into the podcast. The conversation shifts to a fun game of 'Myth or Fact' focused on AI, where they tackle misconceptions about AI training and the legal implications of AI-generated content. The episode wraps up with a humorous take on the potential liabilities companies face regarding AI outputs.]]>2770accountability,ai,awareness,breaches,community,concerns,cybersecurity,data,engagement,ethical,implications,information,legal,life,news,podcast,protection,security,skills,technologyfalse162fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-61-st-paul-ransomware-cyber-attack--67563061

The St. Paul cybersecurity attack was a deliberate and coordinated digital attack. Effective communication is crucial during a cybersecurity incident. Transparency in sharing information can help build trust with the public. Incident response plans are essential for managing cyber threats effectively. Cyber insurance does not replace the need for a solid incident response plan. Public organizations must prioritize the safety and security of their citizens. The lack of transparency can lead to speculation and mistrust. Risk management is more important than risk elimination in cybersecurity. Preparedness can save time, money, and resources during a cyber incident. Accountability is key in ensuring that public servants fulfill their responsibilities. You have a window of opportunity to control the narrative in an incident response. Timelines and investigations are crucial for understanding incidents. Engaging external teams can be necessary for complex cyber threats. Public communication is essential during a crisis to maintain trust. Data security concerns should prioritize protecting people over data. The effectiveness of incident response can be critically evaluated. Leadership decisions impact the effectiveness of incident response. Public perception can be manipulated through strategic communication. Cybersecurity incidents are often more common than perceived. Transparency in communication is vital for community trust.]]>https://api.spreaker.com/episode/67563061Sat, 30 Aug 2025 17:07:12 +0000SecurityStudioIn this episode, the hosts discuss the recent cybersecurity attack on St. Paul, Minnesota, exploring the nature of the attack, the implications for city services, and the importance of effective communication and incident response planning. They...

The St. Paul cybersecurity attack was a deliberate and coordinated digital attack. Effective communication is crucial during a cybersecurity incident. Transparency in sharing information can help build trust with the public. Incident response plans are essential for managing cyber threats effectively. Cyber insurance does not replace the need for a solid incident response plan. Public organizations must prioritize the safety and security of their citizens. The lack of transparency can lead to speculation and mistrust. Risk management is more important than risk elimination in cybersecurity. Preparedness can save time, money, and resources during a cyber incident. Accountability is key in ensuring that public servants fulfill their responsibilities. You have a window of opportunity to control the narrative in an incident response. Timelines and investigations are crucial for understanding incidents. Engaging external teams can be necessary for complex cyber threats. Public communication is essential during a crisis to maintain trust. Data security concerns should prioritize protecting people over data. The effectiveness of incident response can be critically evaluated. Leadership decisions impact the effectiveness of incident response. Public perception can be manipulated through strategic communication. Cybersecurity incidents are often more common than perceived. Transparency in communication is vital for community trust.]]>3462accountability,attack,communication,cyber,cybersecurity,data,incident,investigation,malware,narrative,paul,protection,public,ransomware,recovery,response,safety,security,st.,transparencyfalse161fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-60-top-10-mistakes-vciso-s-make--67464291Summary   In this episode, the hosts discuss the top 10 mistakes made by Virtual Chief Security Officers (VCSOs) and how to avoid them. They emphasize the importance of understanding the role of a VCSO, effective communication with business leaders, and the need for a strategic approach to security rather than relying solely on tools. The conversation also covers the significance of building relationships, personal development, and measuring relevant metrics to drive meaningful change in security programs.    
 Takeaways
  Acting like a CISO when you're a VCSO can lead to misunderstandings.
Effective communication with business leaders is essential for VCSOs.
Focusing on tools instead of strategy can undermine security efforts.
Simplicity in security programs is key to effectiveness.
 Building trust and relationships within the organization is crucial.
Continuous personal development is necessary for VCSOs.
Measuring relevant metrics is more important than measuring everything.
 A proactive approach reduces the need for reactive measures.
 Over-engineering security programs can lead to inefficiencies.

]]>https://api.spreaker.com/episode/67464291Thu, 21 Aug 2025 05:50:42 +0000SecurityStudioSummary   In this episode, the hosts discuss the top 10 mistakes made by Virtual Chief Security Officers (VCSOs) and how to avoid them. They emphasize the importance of understanding the role of a VCSO, effective communication with business leaders,...Summary   In this episode, the hosts discuss the top 10 mistakes made by Virtual Chief Security Officers (VCSOs) and how to avoid them. They emphasize the importance of understanding the role of a VCSO, effective communication with business leaders, and the need for a strategic approach to security rather than relying solely on tools. The conversation also covers the significance of building relationships, personal development, and measuring relevant metrics to drive meaningful change in security programs.    
 Takeaways
  Acting like a CISO when you're a VCSO can lead to misunderstandings.
Effective communication with business leaders is essential for VCSOs.
Focusing on tools instead of strategy can undermine security efforts.
Simplicity in security programs is key to effectiveness.
 Building trust and relationships within the organization is crucial.
Continuous personal development is necessary for VCSOs.
Measuring relevant metrics is more important than measuring everything.
 A proactive approach reduces the need for reactive measures.
 Over-engineering security programs can lead to inefficiencies.

]]>3000communication,culture,cvciso,cybersecurity,development,mistakes,organizational,personal,programs,security,strategyfalse160fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-59-cvciso-red-flags--67451300In this episode of the CvcISO So Podcast, hosts Evan Francen, Dave, and Jordon explore the humorous side of cybersecurity by identifying various red flags in VC engagements. The conversation is filled with laughter as they share funny anecdotes and insights about what to look out for in cybersecurity practices, emphasizing the importance of awareness and vigilance in the field. The hosts also touch on legal and ethical concerns, making the discussion both entertaining and informative. In this engaging conversation, the speakers explore the intersection of humor and seriousness in cybersecurity, discussing various red flags that can indicate poor practices in both personal relationships and professional environments. They emphasize the importance of communication, planning, and integrity in navigating these challenges, while also sharing lighthearted anecdotes and insights into the cybersecurity landscape.

Takeaways
Red flags in cybersecurity can often be humorous yet insightful.
Understanding the implications of cybersecurity practices is crucial.
The importance of prioritizing cybersecurity in budget discussions.
Humor can be an effective tool in discussing serious topics.
Misconceptions about cybersecurity can lead to significant risks.
Legal and ethical considerations are vital in cybersecurity engagements.
Awareness of red flags can help prevent potential issues.
Engaging discussions can lead to better understanding of cybersecurity.
The role of humor in making cybersecurity relatable.
Cybersecurity practices should be taken seriously, even when discussed lightheartedly. If their love language is sending you a 47 page NIST compliant PDF.
You may be in the presence of a red flag if the security team has more turnover than the help desk.
If their idea of incident response is emailing the entire C-suite, whoops, we're hacked with the shrug emoji.
If their business continuity plan is to post, we're looking into it on Twitter, that might be a red flag.
If the last time your anti-virus was updated, Blockbuster was still open, that's a concern.
If their quarterly risk assessment is a whiteboard with hackers equals bad in red marker, that's a red flag.
If your sock gets alerts but calls them suggestions, that's a problem.
If your Amazon S3 bucket is more open than a 24 hour diner, that's a security issue.
If your CISO's penetration test is asking the intern to guess the CEO's password, that's a major red flag.
Apathy in leadership can lead to significant risks in cybersecurity.



]]>https://api.spreaker.com/episode/67451300Wed, 20 Aug 2025 08:00:45 +0000SecurityStudioSummary In this episode of the CvcISO So Podcast, hosts Evan Francen, Dave, and Jordon explore the humorous side of cybersecurity by identifying various red flags in VC engagements. The conversation is filled with laughter as they share funny...In this episode of the CvcISO So Podcast, hosts Evan Francen, Dave, and Jordon explore the humorous side of cybersecurity by identifying various red flags in VC engagements. The conversation is filled with laughter as they share funny anecdotes and insights about what to look out for in cybersecurity practices, emphasizing the importance of awareness and vigilance in the field. The hosts also touch on legal and ethical concerns, making the discussion both entertaining and informative. In this engaging conversation, the speakers explore the intersection of humor and seriousness in cybersecurity, discussing various red flags that can indicate poor practices in both personal relationships and professional environments. They emphasize the importance of communication, planning, and integrity in navigating these challenges, while also sharing lighthearted anecdotes and insights into the cybersecurity landscape.

Takeaways
Red flags in cybersecurity can often be humorous yet insightful.
Understanding the implications of cybersecurity practices is crucial.
The importance of prioritizing cybersecurity in budget discussions.
Humor can be an effective tool in discussing serious topics.
Misconceptions about cybersecurity can lead to significant risks.
Legal and ethical considerations are vital in cybersecurity engagements.
Awareness of red flags can help prevent potential issues.
Engaging discussions can lead to better understanding of cybersecurity.
The role of humor in making cybersecurity relatable.
Cybersecurity practices should be taken seriously, even when discussed lightheartedly. If their love language is sending you a 47 page NIST compliant PDF.
You may be in the presence of a red flag if the security team has more turnover than the help desk.
If their idea of incident response is emailing the entire C-suite, whoops, we're hacked with the shrug emoji.
If their business continuity plan is to post, we're looking into it on Twitter, that might be a red flag.
If the last time your anti-virus was updated, Blockbuster was still open, that's a concern.
If their quarterly risk assessment is a whiteboard with hackers equals bad in red marker, that's a red flag.
If your sock gets alerts but calls them suggestions, that's a problem.
If your Amazon S3 bucket is more open than a 24 hour diner, that's a security issue.
If your CISO's penetration test is asking the intern to guess the CEO's password, that's a major red flag.
Apathy in leadership can lead to significant risks in cybersecurity.



]]>2968assessment,communication,compliance,concerns,cybersecurity,engagement,ethical,flags,humor,integrity,issues,keywords cybersecurity,legal,misconceptions,planning,red,relationships,risk,trust,vcfalse159fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-58-hourly-work-or-objective-based-differences--67340636Keywords CVCISO, pricing models, objective-based pricing, hourly pricing, client relationships, communication, mentorship, community support, value delivery, business growth   takeaways

• Objective-based pricing aligns with client needs and expectations.
• Hourly pricing can create a liability for service providers.
• Building trust with clients is essential for long-term relationships.
• Communication is key to managing client expectations and scope creep.
• Value should be prioritized over hours worked in service agreements.
• Community support can enhance professional growth and learning.
• Mentorship can provide guidance in unfamiliar projects.
• Transparency with clients fosters trust and understanding.
• Understanding client needs helps in setting appropriate pricing models.
• Continuous learning and adaptation are crucial for business success.

  Summary In this episode, the hosts discuss the intricacies of pricing models for CVCISO services, emphasizing the importance of objective-based pricing over hourly rates. They explore the value of building trust with clients, effective communication, and the role of community and mentorship in professional growth. The conversation highlights the need for transparency and understanding client expectations to foster long-term relationships and successful business practices.      ]]>https://api.spreaker.com/episode/67340636Tue, 12 Aug 2025 07:18:59 +0000SecurityStudioKeywords CVCISO, pricing models, objective-based pricing, hourly pricing, client relationships, communication, mentorship, community support, value delivery, business growth   takeaways - Objective-based pricing aligns with client needs and...Keywords CVCISO, pricing models, objective-based pricing, hourly pricing, client relationships, communication, mentorship, community support, value delivery, business growth   takeaways

• Objective-based pricing aligns with client needs and expectations.
• Hourly pricing can create a liability for service providers.
• Building trust with clients is essential for long-term relationships.
• Communication is key to managing client expectations and scope creep.
• Value should be prioritized over hours worked in service agreements.
• Community support can enhance professional growth and learning.
• Mentorship can provide guidance in unfamiliar projects.
• Transparency with clients fosters trust and understanding.
• Understanding client needs helps in setting appropriate pricing models.
• Continuous learning and adaptation are crucial for business success.

  Summary In this episode, the hosts discuss the intricacies of pricing models for CVCISO services, emphasizing the importance of objective-based pricing over hourly rates. They explore the value of building trust with clients, effective communication, and the role of community and mentorship in professional growth. The conversation highlights the need for transparency and understanding client expectations to foster long-term relationships and successful business practices.      ]]>3237false158fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-57-incident-response--67266102
In this episode, the hosts explore key elements of effective cybersecurity incident response. They emphasize the importance of distinguishing between events and incidents, properly classifying incidents by severity, and understanding the strategic role of a vCISO (Virtual Chief Information Security Officer). The conversation highlights the value of proactive planning, clear communication, and meticulous documentation throughout the incident lifecycle. Common challenges—such as lack of authority, inadequate tooling, and communication breakdowns—are also discussed as critical areas for improvement in incident management.

Takeaways
- Incident response is vital for organizations to effectively manage and mitigate security breaches.
- Distinguishing between security events and true incidents is critical for proper incident handling.
- Categorizing incidents by severity—high, medium, and low—enables focused and prioritized response efforts.
- Developing an incident response plan early improves risk management and overall preparedness. - vCISOs play a pivotal role in building trust and managing client relationships throughout incident resolution.
- Business impact analysis helps quantify the effects of incidents and informs strategic decisions.
- Proactive planning reduces confusion and enhances coordination during high-pressure situations. - Clear, timely communication is essential to manage internal teams and external stakeholders during incidents.
 - Thorough documentation throughout the incident lifecycle supports future analysis and continuous improvement.
 - Common challenges include limited authority, inadequate tools, and ineffective communication channels.]]>https://api.spreaker.com/episode/67266102Wed, 06 Aug 2025 05:29:23 +0000SecurityStudioSummary In this episode, the hosts explore key elements of effective cybersecurity incident response. They emphasize the importance of distinguishing between events and incidents, properly classifying incidents by severity, and understanding the...
In this episode, the hosts explore key elements of effective cybersecurity incident response. They emphasize the importance of distinguishing between events and incidents, properly classifying incidents by severity, and understanding the strategic role of a vCISO (Virtual Chief Information Security Officer). The conversation highlights the value of proactive planning, clear communication, and meticulous documentation throughout the incident lifecycle. Common challenges—such as lack of authority, inadequate tooling, and communication breakdowns—are also discussed as critical areas for improvement in incident management.

Takeaways
- Incident response is vital for organizations to effectively manage and mitigate security breaches.
- Distinguishing between security events and true incidents is critical for proper incident handling.
- Categorizing incidents by severity—high, medium, and low—enables focused and prioritized response efforts.
- Developing an incident response plan early improves risk management and overall preparedness. - vCISOs play a pivotal role in building trust and managing client relationships throughout incident resolution.
- Business impact analysis helps quantify the effects of incidents and informs strategic decisions.
- Proactive planning reduces confusion and enhances coordination during high-pressure situations. - Clear, timely communication is essential to manage internal teams and external stakeholders during incidents.
 - Thorough documentation throughout the incident lifecycle supports future analysis and continuous improvement.
 - Common challenges include limited authority, inadequate tools, and ineffective communication channels.]]>3230analysis,business,chaos,classification,communication,cybersecurity,documentation,impact,incident,keywords incident,management,planning,proactive,response,security,strategy,vcisofalse257fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-56-ai-and-its-societal-impact--66550983 
In this episode, the hosts discuss the pervasive influence of AI in our lives, particularly its implications for education, creativity, and ethical considerations. They explore the rapid deployment of AI technologies without adequate understanding or guidelines, the accountability of AI developers, and the potential for manipulation of information through AI. The conversation emphasizes the need for responsible use and education surrounding AI, as well as the long-term consequences of dependency on these technologies. In this conversation, the speakers delve into the multifaceted implications of AI on society, the environment, and individual decision-making. They discuss the significant resources required to support AI technologies, the potential for AI to shape perceptions of reality, and the dangers of over-reliance on AI for personal and professional decisions. The conversation also touches on the importance of critical thinking in an AI-driven world and the societal control that may arise from increased dependence on technology. In this conversation, the participants explore the implications of AI and robotics on society, the future of work, and the personal responsibilities that come with the adoption of these technologies. They discuss the potential dangers of AI, the importance of understanding its impact on human interaction, and the need for responsible usage to prevent negative consequences. The conversation highlights the urgency of addressing these issues as technology continues to evolve rapidly.
 
Takeaways

• AI is becoming increasingly prevalent in our daily lives.
• The impact of AI on education raises concerns about creativity and critical thinking.
• There is a lack of unified guidelines on the ethical use of AI.
• Accountability for AI developers is crucial but currently lacking.
• AI can manipulate information and influence public perception.
• The rush to adopt AI technologies often overlooks responsible use.
• Dependency on AI can lead to a loss of essential skills.
• Profit motives drive the rapid deployment of AI without proper oversight.
• Education systems need to adapt to incorporate AI responsibly.
• The long-term consequences of AI use are still largely unknown. The environmental impact of AI is significant, requiring vast resources.
• AI has the potential to shape our perception of reality.
• Over-reliance on AI can lead to a loss of personal agency.
• Understanding the tools we use is crucial for responsible AI adoption.
• The makers of AI tools must be held accountable for their impact.
• Critical thinking is essential in navigating an AI-driven world.
• Education systems need to emphasize critical thinking skills.
• Societal control may increase with the rise of AI technologies.
• AI can exacerbate existing societal issues and divisions.
• The future of work will be heavily influenced by AI advancements. AI and robotics are rapidly advancing and could replace traditional roles.
• The data used by AI systems is vast and often unregulated.
• AI amplifies existing biases found on the internet.
• The adoption of technology should be approached with caution and responsibility.
• Human interaction is essential for mental well-being and purpose.
• The future of work may see significant job displacement due to AI.
• Personal responsibility in teaching appropriate AI usage is crucial.
• AI can create a false sense of companionship, leading to social isolation.
• Understanding the societal impact of AI is necessary for ethical development.
• The conversation around AI should include diverse perspectives to avoid pitfalls.

]]>https://api.spreaker.com/episode/66550983Fri, 13 Jun 2025 17:08:08 +0000SecurityStudioSummary   In this episode, the hosts discuss the pervasive influence of AI in our lives, particularly its implications for education, creativity, and ethical considerations. They explore the rapid deployment of AI technologies without adequate... 
In this episode, the hosts discuss the pervasive influence of AI in our lives, particularly its implications for education, creativity, and ethical considerations. They explore the rapid deployment of AI technologies without adequate understanding or guidelines, the accountability of AI developers, and the potential for manipulation of information through AI. The conversation emphasizes the need for responsible use and education surrounding AI, as well as the long-term consequences of dependency on these technologies. In this conversation, the speakers delve into the multifaceted implications of AI on society, the environment, and individual decision-making. They discuss the significant resources required to support AI technologies, the potential for AI to shape perceptions of reality, and the dangers of over-reliance on AI for personal and professional decisions. The conversation also touches on the importance of critical thinking in an AI-driven world and the societal control that may arise from increased dependence on technology. In this conversation, the participants explore the implications of AI and robotics on society, the future of work, and the personal responsibilities that come with the adoption of these technologies. They discuss the potential dangers of AI, the importance of understanding its impact on human interaction, and the need for responsible usage to prevent negative consequences. The conversation highlights the urgency of addressing these issues as technology continues to evolve rapidly.
 
Takeaways

• AI is becoming increasingly prevalent in our daily lives.
• The impact of AI on education raises concerns about creativity and critical thinking.
• There is a lack of unified guidelines on the ethical use of AI.
• Accountability for AI developers is crucial but currently lacking.
• AI can manipulate information and influence public perception.
• The rush to adopt AI technologies often overlooks responsible use.
• Dependency on AI can lead to a loss of essential skills.
• Profit motives drive the rapid deployment of AI without proper oversight.
• Education systems need to adapt to incorporate AI responsibly.
• The long-term consequences of AI use are still largely unknown. The environmental impact of AI is significant, requiring vast resources.
• AI has the potential to shape our perception of reality.
• Over-reliance on AI can lead to a loss of personal agency.
• Understanding the tools we use is crucial for responsible AI adoption.
• The makers of AI tools must be held accountable for their impact.
• Critical thinking is essential in navigating an AI-driven world.
• Education systems need to emphasize critical thinking skills.
• Societal control may increase with the rise of AI technologies.
• AI can exacerbate existing societal issues and divisions.
• The future of work will be heavily influenced by AI advancements. AI and robotics are rapidly advancing and could replace traditional roles.
• The data used by AI systems is vast and often unregulated.
• AI amplifies existing biases found on the internet.
• The adoption of technology should be approached with caution and responsibility.
• Human interaction is essential for mental well-being and purpose.
• The future of work may see significant job displacement due to AI.
• Personal responsibility in teaching appropriate AI usage is crucial.
• AI can create a false sense of companionship, leading to social isolation.
• Understanding the societal impact of AI is necessary for ethical development.
• The conversation around AI should include diverse perspectives to avoid pitfalls.

]]>3404accountability,ai,creativity,critical-thinking,decision-making,education,environmental-impact,ethics,future-of-ai,future-of-work,human-dependency,manipulation,media-influence,over-reliance,personal-responsibility,robotics,social-impact,societal-control,societal-impact,technologyfalse256fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-55-how-to-engage-c-suite--66471988 
In this episode, the hosts discuss effective communication strategies for engaging with C-suite executives. They emphasize the importance of concise messaging, understanding executive priorities, and building relationships based on empathy and common interests. The conversation highlights the need for adaptability in communication styles and the significance of listening to executives to provide valuable insights. The hosts share personal experiences and best practices for navigating the complexities of executive interactions. In this conversation, the speakers discuss effective communication strategies for engaging with executives, particularly in the context of information security and risk management. They emphasize the importance of understanding executive mindsets, using clear and concise language, and building confidence in board meetings. The discussion also highlights the value of learning from experiences, setting realistic expectations, and nurturing relationships to enhance communication effectiveness.

Takeaways

• Communicate with C-suite using concise, high-level concepts.
• Understand the personality and behavior of the executive you're addressing.
• Build relationships based on common interests and empathy.
• Pay attention to cues and context during conversations.
• Executives are human too; they have personal lives and challenges.
• Focus on delivering value and insights relevant to their priorities.
• Use facts over emotions when discussing risks.
• Be prepared to adapt your communication style to different executives.
• Listening is key to understanding how to communicate effectively.
• Don't fear rejection; learn from every interaction. Executives prioritize how decisions impact money.
• Use visuals to communicate effectively in meetings.
• Confidence is key when presenting to executives.
• Preparation helps alleviate nervousness in meetings.
• Learning from failures is crucial for growth.
• Set low expectations to avoid disappointment.
• Building relationships is essential for effective communication.
• Speak in terms of risk to resonate with executives.
• Anticipate questions to enhance preparedness.
• Every experience is a growth opportunity.

]]>https://api.spreaker.com/episode/66471988Mon, 09 Jun 2025 13:56:19 +0000SecurityStudioSummary   In this episode, the hosts discuss effective communication strategies for engaging with C-suite executives. They emphasize the importance of concise messaging, understanding executive priorities, and building relationships based on empathy... 
In this episode, the hosts discuss effective communication strategies for engaging with C-suite executives. They emphasize the importance of concise messaging, understanding executive priorities, and building relationships based on empathy and common interests. The conversation highlights the need for adaptability in communication styles and the significance of listening to executives to provide valuable insights. The hosts share personal experiences and best practices for navigating the complexities of executive interactions. In this conversation, the speakers discuss effective communication strategies for engaging with executives, particularly in the context of information security and risk management. They emphasize the importance of understanding executive mindsets, using clear and concise language, and building confidence in board meetings. The discussion also highlights the value of learning from experiences, setting realistic expectations, and nurturing relationships to enhance communication effectiveness.

Takeaways

• Communicate with C-suite using concise, high-level concepts.
• Understand the personality and behavior of the executive you're addressing.
• Build relationships based on common interests and empathy.
• Pay attention to cues and context during conversations.
• Executives are human too; they have personal lives and challenges.
• Focus on delivering value and insights relevant to their priorities.
• Use facts over emotions when discussing risks.
• Be prepared to adapt your communication style to different executives.
• Listening is key to understanding how to communicate effectively.
• Don't fear rejection; learn from every interaction. Executives prioritize how decisions impact money.
• Use visuals to communicate effectively in meetings.
• Confidence is key when presenting to executives.
• Preparation helps alleviate nervousness in meetings.
• Learning from failures is crucial for growth.
• Set low expectations to avoid disappointment.
• Building relationships is essential for effective communication.
• Speak in terms of risk to resonate with executives.
• Anticipate questions to enhance preparedness.
• Every experience is a growth opportunity.

]]>2184best-practices,board-meetings,business-communication,business-relationships,communication,confidence,credibility,c-suite,effective-communication,executive-communication,executive-priorities,executives,expectations,information-security,leadership,relationships,risk-management,trust,visualsfalse255fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-54-how-to-find-your-why--66341940 
In this episode, the hosts explore the concept of 'why' and its significance in personal and professional life. They discuss the importance of discovering one's core values and how these values shape actions and decisions. Through personal reflections and exercises, the conversation delves into the impact of admiration on self-discovery and the role of relationships in understanding values. The hosts emphasize the need to communicate one's 'why' to foster connections and the importance of leaving a positive impact on others. In this conversation, the participants explore the significance of genuine connections, the discovery of core values, and the importance of asking 'why' in both personal and professional contexts. They discuss how core values should be actionable and integral to business practices, emphasizing that these values should guide hiring and operational decisions. The discussion also touches on the role of love as a core value and the necessity of prioritizing mission over profit. Ultimately, the conversation highlights how a strong sense of purpose can enhance both personal fulfillment and organizational success.

Takeaways

• Understanding your 'why' is crucial for personal and professional growth.
• Core values are foundational and should align with personal beliefs.
• Admiring qualities in others can help identify your own values.
• Engaging in discussions about differing opinions can strengthen your understanding of your 'why'.
• The process of discovering your values can be enlightening and transformative.
• It's important to communicate your 'why' to foster connections with others.
• Recognizing the strengths in others can enhance relationships.
• Minimizing weaknesses and maximizing strengths is key to healthy interactions.
• Finding beauty in everyone can lead to a more fulfilling life.
• Core values should guide actions and decisions in both personal and business contexts. Genuine connections can brighten up any environment.
• Core values are essential for inspirational leadership.
• Asking 'why' helps uncover deeper motivations.
• Core values must be actionable, not just slogans.
• Hiring and firing should align with core values.
• Transparency is crucial in communication.
• Love can be a powerful core value in business.
• Focusing on the mission leads to financial success.
• Purpose impacts all aspects of life.
• Core values should guide organizational culture.

]]>https://api.spreaker.com/episode/66341940Fri, 30 May 2025 17:11:39 +0000SecurityStudioSummary   In this episode, the hosts explore the concept of 'why' and its significance in personal and professional life. They discuss the importance of discovering one's core values and how these values shape actions and decisions. Through personal... 
In this episode, the hosts explore the concept of 'why' and its significance in personal and professional life. They discuss the importance of discovering one's core values and how these values shape actions and decisions. Through personal reflections and exercises, the conversation delves into the impact of admiration on self-discovery and the role of relationships in understanding values. The hosts emphasize the need to communicate one's 'why' to foster connections and the importance of leaving a positive impact on others. In this conversation, the participants explore the significance of genuine connections, the discovery of core values, and the importance of asking 'why' in both personal and professional contexts. They discuss how core values should be actionable and integral to business practices, emphasizing that these values should guide hiring and operational decisions. The discussion also touches on the role of love as a core value and the necessity of prioritizing mission over profit. Ultimately, the conversation highlights how a strong sense of purpose can enhance both personal fulfillment and organizational success.

Takeaways

• Understanding your 'why' is crucial for personal and professional growth.
• Core values are foundational and should align with personal beliefs.
• Admiring qualities in others can help identify your own values.
• Engaging in discussions about differing opinions can strengthen your understanding of your 'why'.
• The process of discovering your values can be enlightening and transformative.
• It's important to communicate your 'why' to foster connections with others.
• Recognizing the strengths in others can enhance relationships.
• Minimizing weaknesses and maximizing strengths is key to healthy interactions.
• Finding beauty in everyone can lead to a more fulfilling life.
• Core values should guide actions and decisions in both personal and business contexts. Genuine connections can brighten up any environment.
• Core values are essential for inspirational leadership.
• Asking 'why' helps uncover deeper motivations.
• Core values must be actionable, not just slogans.
• Hiring and firing should align with core values.
• Transparency is crucial in communication.
• Love can be a powerful core value in business.
• Focusing on the mission leads to financial success.
• Purpose impacts all aspects of life.
• Core values should guide organizational culture.

]]>3022admiration,asking-why,business-integrity,business-values,communication,core-values,genuine-connections,leadership,life-lessons,love-in-business,mission-before-money,organizational-culture,personal-development,personal-growth,podcast,relationships,self-discovery,transparency,whyfalse254fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-53-mental-health-awareness-month--66234946 
In this episode, the hosts discuss Mental Health Awareness Month, sharing personal stories and insights about mental health challenges. They emphasize the importance of being open about mental health, the stigma surrounding it, and the role of therapy. The conversation also touches on misconceptions about mental health, the impact of diet and exercise, and the effects of COVID-19 on mental well-being. The hosts encourage listeners to share their stories and seek help when needed, reinforcing that mental health is a crucial aspect of overall well-being. In this conversation, the speakers delve into the complexities of mental health, discussing the importance of confronting fears, the misconceptions surrounding mental health issues, and the journey of healing and personal growth. They emphasize the significance of authenticity, the struggles faced in life, and the motivations behind being allies in the mental health movement. The dialogue highlights the interconnectedness of individuals and the necessity of supporting one another in navigating emotional challenges.
 
Takeaways

• Mental health awareness is crucial for personal and societal well-being.
• Sharing personal stories can help others feel less alone.
• Stigma around mental health prevents open conversations.
• Therapy is a valuable resource for mental health support.
• Diet and exercise play a significant role in mental health.
• Guilt can be destructive, while conviction can lead to growth.
• Mental health issues are often invisible to others.
• Workplace culture can impact mental health discussions.
• COVID-19 has exacerbated mental health challenges for many.
• It's important to seek help and not suffer in silence. Most fears about sharing mental health issues are unfounded.
• Exploring one's true self is more important than societal expectations.
• Mental health issues vary in curability and require honesty to address.
• Healing from mental health issues is possible with deep work.
• The journey of mental health is often a marathon, not a sprint.
• Struggles and challenges are essential for personal growth.
• Authenticity is crucial in a world that pressures us to conform.
• Being an ally in mental health is motivated by love and support.
• Wisdom is gained through experiences of pain and struggle.
• Self-care and mental health awareness are vital for overall well-being.

]]>https://api.spreaker.com/episode/66234946Fri, 23 May 2025 20:58:32 +0000SecurityStudioSummary   In this episode, the hosts discuss Mental Health Awareness Month, sharing personal stories and insights about mental health challenges. They emphasize the importance of being open about mental health, the stigma surrounding it, and the role... 
In this episode, the hosts discuss Mental Health Awareness Month, sharing personal stories and insights about mental health challenges. They emphasize the importance of being open about mental health, the stigma surrounding it, and the role of therapy. The conversation also touches on misconceptions about mental health, the impact of diet and exercise, and the effects of COVID-19 on mental well-being. The hosts encourage listeners to share their stories and seek help when needed, reinforcing that mental health is a crucial aspect of overall well-being. In this conversation, the speakers delve into the complexities of mental health, discussing the importance of confronting fears, the misconceptions surrounding mental health issues, and the journey of healing and personal growth. They emphasize the significance of authenticity, the struggles faced in life, and the motivations behind being allies in the mental health movement. The dialogue highlights the interconnectedness of individuals and the necessity of supporting one another in navigating emotional challenges.
 
Takeaways

• Mental health awareness is crucial for personal and societal well-being.
• Sharing personal stories can help others feel less alone.
• Stigma around mental health prevents open conversations.
• Therapy is a valuable resource for mental health support.
• Diet and exercise play a significant role in mental health.
• Guilt can be destructive, while conviction can lead to growth.
• Mental health issues are often invisible to others.
• Workplace culture can impact mental health discussions.
• COVID-19 has exacerbated mental health challenges for many.
• It's important to seek help and not suffer in silence. Most fears about sharing mental health issues are unfounded.
• Exploring one's true self is more important than societal expectations.
• Mental health issues vary in curability and require honesty to address.
• Healing from mental health issues is possible with deep work.
• The journey of mental health is often a marathon, not a sprint.
• Struggles and challenges are essential for personal growth.
• Authenticity is crucial in a world that pressures us to conform.
• Being an ally in mental health is motivated by love and support.
• Wisdom is gained through experiences of pain and struggle.
• Self-care and mental health awareness are vital for overall well-being.

]]>3977authenticity,conviction,covid-19,diet,emotional-challenges,exercise,guilt,healing,mental-health,mental-health-awareness,mental-health-journey,misconceptions,personal-growth,personal-stories,self-care,stigma,struggle,therapy,workplacefalse253fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-52-essential-questions-vcisos-need-to-ask--65858506Summary

In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into deeper discussions about the importance of relationships in business, essential questions to ask when engaging with clients, understanding business motivations, and the significance of trust and credibility in professional interactions. In this conversation, the speakers delve into the importance of building authentic relationships in business, particularly in the context of venture capital. They discuss how being transparent and genuine can foster better connections with clients. The dialogue emphasizes the significance of understanding the dynamics of a business, defining success in client engagements, and the necessity of knowing the 'why' behind business operations. The speakers also highlight the need for adaptability in response to changing business needs and the importance of clarity in communication. 

Takeaways

• Building relationships is crucial in business.
• Managing expectations can lead to better outcomes.
• Understanding a client's business is key to providing value.
• Trust and credibility are foundational in client relationships.
• Engagement should be genuine and focused on the client's needs.
• Asking the right questions can uncover important insights.
• Recognizing the motivations behind a business helps tailor solutions.
• Communication is essential for successful partnerships.
• A good relationship can lead to future opportunities.
• Understanding the client's mission can enhance collaboration. Be yourself and be transparent in relationships.
• People can sense when someone is being disingenuous.
• The best relationships require minimal effort to maintain.
• It's essential to care about the business and its mission.
• Understanding the 'why' behind a business is crucial for success.
• Clarity in communication helps avoid misunderstandings.
• Relationships in business should be more than just transactional.
• Adaptability is key in navigating client needs.
• Defining success at the outset of engagements is important.
• Regular check-ins can help maintain alignment with client goals.

]]>https://api.spreaker.com/episode/65858506Fri, 02 May 2025 17:18:00 +0000SecurityStudioSummary In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into deeper discussions about the importance of relationships in business, essential questions to ask when engaging with clients,...Summary

In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into deeper discussions about the importance of relationships in business, essential questions to ask when engaging with clients, understanding business motivations, and the significance of trust and credibility in professional interactions. In this conversation, the speakers delve into the importance of building authentic relationships in business, particularly in the context of venture capital. They discuss how being transparent and genuine can foster better connections with clients. The dialogue emphasizes the significance of understanding the dynamics of a business, defining success in client engagements, and the necessity of knowing the 'why' behind business operations. The speakers also highlight the need for adaptability in response to changing business needs and the importance of clarity in communication. 

Takeaways

• Building relationships is crucial in business.
• Managing expectations can lead to better outcomes.
• Understanding a client's business is key to providing value.
• Trust and credibility are foundational in client relationships.
• Engagement should be genuine and focused on the client's needs.
• Asking the right questions can uncover important insights.
• Recognizing the motivations behind a business helps tailor solutions.
• Communication is essential for successful partnerships.
• A good relationship can lead to future opportunities.
• Understanding the client's mission can enhance collaboration. Be yourself and be transparent in relationships.
• People can sense when someone is being disingenuous.
• The best relationships require minimal effort to maintain.
• It's essential to care about the business and its mission.
• Understanding the 'why' behind a business is crucial for success.
• Clarity in communication helps avoid misunderstandings.
• Relationships in business should be more than just transactional.
• Adaptability is key in navigating client needs.
• Defining success at the outset of engagements is important.
• Regular check-ins can help maintain alignment with client goals.

]]>2712authenticity,business-dynamics,business-relationships,client-engagement,communication,credibility,cvciso-podcast,engagement,essential-questions,expectations,motivation,relationships,risk-management,sales,success-definition,transparency,trust,understanding-why,vcisofalse252fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-51-salary-expectations-for-vcisos--65727408Summary

In this episode, the hosts discuss the complexities surrounding the compensation and role of a Virtual Chief Information Security Officer (VCISO). They explore various factors influencing salary, the distinction between VCISO and CISO roles, and the importance of technical knowledge and mentorship in developing effective security leaders. The conversation also highlights the challenges faced in client engagements and the need for clear communication regarding roles and responsibilities. In this conversation, the participants delve into the complexities of client assessments, the importance of communication in building relationships, and the challenges faced in cybersecurity development. They discuss the significance of mentorship and experience in the field, the implementation of risk assessments for nonprofits, and the evolving landscape of pricing strategies for cybersecurity services. The dialogue emphasizes the need for transparency, understanding client perspectives, and the value of delivering quality service. 

Takeaways

• The proper compensation for a VCISO varies significantly based on location and experience.
• Understanding the cost of living is crucial when determining salary ranges.
• A true VCISO should have experience leading teams, not just performing assessments.
• Salary expectations for seasoned VCISOs are higher than entry-level positions.
• Mentorship is essential for developing new VCISOs into effective leaders.
• Technical knowledge is vital for a VCISO to understand the tools and processes involved in cybersecurity.
• Client engagement can be challenging, especially when clients resist recommendations.
• The role of a VCISO can differ greatly depending on the client's needs and expectations.
• Effective communication with clients is key to successful engagements.
• The importance of ongoing relationships with clients cannot be overstated. Navigating assessments can be challenging due to differing client perspectives.
• Communication is key in building trust with clients during assessments.
• Security measures can often be seen as obstacles by developers.
• Experience in cybersecurity is gained through active participation and mentorship.
• Complementary risk assessments can provide valuable learning opportunities for new professionals.
• Pricing strategies should reflect the value delivered to clients, not just hourly rates.
• Understanding the client's needs is crucial for effective assessments.
• The landscape of cybersecurity is constantly evolving, affecting pricing and service delivery.
• Mentorship programs can help bridge the gap between theory and practical experience.
• The perception of perfection in security can hinder progress and improvement.

]]>https://api.spreaker.com/episode/65727408Fri, 25 Apr 2025 17:36:41 +0000SecurityStudioSummary In this episode, the hosts discuss the complexities surrounding the compensation and role of a Virtual Chief Information Security Officer (VCISO). They explore various factors influencing salary, the distinction between VCISO and CISO roles,...Summary

In this episode, the hosts discuss the complexities surrounding the compensation and role of a Virtual Chief Information Security Officer (VCISO). They explore various factors influencing salary, the distinction between VCISO and CISO roles, and the importance of technical knowledge and mentorship in developing effective security leaders. The conversation also highlights the challenges faced in client engagements and the need for clear communication regarding roles and responsibilities. In this conversation, the participants delve into the complexities of client assessments, the importance of communication in building relationships, and the challenges faced in cybersecurity development. They discuss the significance of mentorship and experience in the field, the implementation of risk assessments for nonprofits, and the evolving landscape of pricing strategies for cybersecurity services. The dialogue emphasizes the need for transparency, understanding client perspectives, and the value of delivering quality service. 

Takeaways

• The proper compensation for a VCISO varies significantly based on location and experience.
• Understanding the cost of living is crucial when determining salary ranges.
• A true VCISO should have experience leading teams, not just performing assessments.
• Salary expectations for seasoned VCISOs are higher than entry-level positions.
• Mentorship is essential for developing new VCISOs into effective leaders.
• Technical knowledge is vital for a VCISO to understand the tools and processes involved in cybersecurity.
• Client engagement can be challenging, especially when clients resist recommendations.
• The role of a VCISO can differ greatly depending on the client's needs and expectations.
• Effective communication with clients is key to successful engagements.
• The importance of ongoing relationships with clients cannot be overstated. Navigating assessments can be challenging due to differing client perspectives.
• Communication is key in building trust with clients during assessments.
• Security measures can often be seen as obstacles by developers.
• Experience in cybersecurity is gained through active participation and mentorship.
• Complementary risk assessments can provide valuable learning opportunities for new professionals.
• Pricing strategies should reflect the value delivered to clients, not just hourly rates.
• Understanding the client's needs is crucial for effective assessments.
• The landscape of cybersecurity is constantly evolving, affecting pricing and service delivery.
• Mentorship programs can help bridge the gap between theory and practical experience.
• The perception of perfection in security can hinder progress and improvement.

]]>2640assessment,assessments,client-engagement,client-relationships,communication,compensation,cybersecurity,development-security,internal-salaries,mentorship,ongoing-engagement,pricing-strategies,risk-assessments,salary,security-roles,technical-knowledge,value-in-pricing,vcisofalse251fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-50-how-to-stay-educated-as-a-vciso--65625383Summary

In this special 50th episode of the CvCISO Podcast, the hosts celebrate their milestone while discussing the importance of continuing education for venture capitalists (VCs). They explore various strategies for staying educated, including maximizing conference experiences, understanding CPE requirements, and aligning learning with career goals. The conversation emphasizes the significance of being proactive in professional development and the various avenues available for earning CPEs, including independent learning and community involvement. In this conversation, the speakers discuss the importance of maximizing the value of Continuing Professional Education (CPE) credits, emphasizing the need for passion and engagement in learning. They explore different learning styles and effective training methods, as well as strategies for choosing the right conferences and getting the most out of them. Networking is highlighted as a crucial component of professional development, with practical tips provided for building connections at events. 

Takeaways

• This is a special episode celebrating 50 episodes of the podcast.
• Continuing education is crucial for VCs to stay relevant.
• Conferences can provide valuable CPE credits and networking opportunities.
• CPEs are available through various avenues, not just formal courses.
• Being strategic about CPEs can enhance professional growth.
• Understanding external factors is important for VCs.
• Independent learning can also count towards CPEs.
• Engaging with the community can provide additional learning opportunities.
• Documentation is key for proving CPE credits.
• The conversation around education is vital for helping others in the industry. Maximizing CPE value requires active engagement and passion.
• Learning is more effective when it is applied in real-world scenarios.
• Different individuals have unique learning styles that should be considered.
• Choosing the right conferences can significantly impact professional growth.
• Networking is essential for career advancement and knowledge sharing.
• Preparation before attending conferences enhances the learning experience.
• Finding 'golden nuggets' of information is key to effective learning.
• Building connections with speakers and attendees can lead to valuable opportunities.
• A strategic approach to conferences can yield better results.
• Continuous learning and networking are vital for success in the cybersecurity field.

]]>https://api.spreaker.com/episode/65625383Fri, 18 Apr 2025 15:31:50 +0000SecurityStudioSummary In this special 50th episode of the CvCISO Podcast, the hosts celebrate their milestone while discussing the importance of continuing education for venture capitalists (VCs). They explore various strategies for staying educated, including...Summary

In this special 50th episode of the CvCISO Podcast, the hosts celebrate their milestone while discussing the importance of continuing education for venture capitalists (VCs). They explore various strategies for staying educated, including maximizing conference experiences, understanding CPE requirements, and aligning learning with career goals. The conversation emphasizes the significance of being proactive in professional development and the various avenues available for earning CPEs, including independent learning and community involvement. In this conversation, the speakers discuss the importance of maximizing the value of Continuing Professional Education (CPE) credits, emphasizing the need for passion and engagement in learning. They explore different learning styles and effective training methods, as well as strategies for choosing the right conferences and getting the most out of them. Networking is highlighted as a crucial component of professional development, with practical tips provided for building connections at events. 

Takeaways

• This is a special episode celebrating 50 episodes of the podcast.
• Continuing education is crucial for VCs to stay relevant.
• Conferences can provide valuable CPE credits and networking opportunities.
• CPEs are available through various avenues, not just formal courses.
• Being strategic about CPEs can enhance professional growth.
• Understanding external factors is important for VCs.
• Independent learning can also count towards CPEs.
• Engaging with the community can provide additional learning opportunities.
• Documentation is key for proving CPE credits.
• The conversation around education is vital for helping others in the industry. Maximizing CPE value requires active engagement and passion.
• Learning is more effective when it is applied in real-world scenarios.
• Different individuals have unique learning styles that should be considered.
• Choosing the right conferences can significantly impact professional growth.
• Networking is essential for career advancement and knowledge sharing.
• Preparation before attending conferences enhances the learning experience.
• Finding 'golden nuggets' of information is key to effective learning.
• Building connections with speakers and attendees can lead to valuable opportunities.
• A strategic approach to conferences can yield better results.
• Continuous learning and networking are vital for success in the cybersecurity field.

]]>3254certification,conferences,continuing-education,cpes,cvciso-podcast,cybersecurity,industry-knowledge,learning,learning-strategies,networking,professional-development,skills,trainingfalse250fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-49-embellishing-credentials-a-dangerous-game--65542105Summary

In this episode, the hosts discuss the controversy surrounding Mark Lanterman, a forensic expert accused of embellishing his credentials. They explore the implications of credibility and integrity in the cybersecurity field, particularly for expert witnesses. The conversation delves into the ethical responsibilities of professionals and the potential legal ramifications of misrepresentation. The hosts reflect on the importance of validating claims and the consequences of failing to do so, both personally and professionally. In this conversation, the speakers delve into the implications of dishonesty, particularly in professional settings. They discuss the consequences of lies, the importance of maintaining integrity and reputation, and the value of truth in personal and professional growth. The dialogue emphasizes the need for self-awareness and the significance of competing with oneself rather than others. Ultimately, the speakers encourage listeners to embrace honesty and learn from their mistakes, highlighting that it's never too late to start anew.

Takeaways

• Mark Lanterman is accused of embellishing his credentials.
• Credibility is crucial in the cybersecurity profession.
• Embellishing credentials can lead to legal consequences.
• Expert witnesses must have validated backgrounds.
• The importance of integrity in professional settings cannot be overstated.
• Legal implications arise from misrepresentation in court.
• The hosts emphasize the need to call out dishonesty.
• There is a lack of accountability in verifying expert witnesses.
• The conversation highlights the ethical responsibilities of professionals.
• Consequences of lying can be more damaging than the truth. Shitty choices have consequences.
• Don't fall for the urge to claim more than you are.
• The truth always comes out, eventually.
• Reputation is everything; it can be destroyed easily.
• You can always start now to rebuild your integrity.
• Competing with yourself is the only true competition.
• Lies of commission and omission both destroy credibility.
• Don't take shortcuts; they will sting you in the end.
• Winners focus on winning; losers focus on others.
• You can turn negative experiences into positive lessons.

]]>https://api.spreaker.com/episode/65542105Fri, 11 Apr 2025 18:58:24 +0000SecurityStudioSummary In this episode, the hosts discuss the controversy surrounding Mark Lanterman, a forensic expert accused of embellishing his credentials. They explore the implications of credibility and integrity in the cybersecurity field, particularly for...Summary

In this episode, the hosts discuss the controversy surrounding Mark Lanterman, a forensic expert accused of embellishing his credentials. They explore the implications of credibility and integrity in the cybersecurity field, particularly for expert witnesses. The conversation delves into the ethical responsibilities of professionals and the potential legal ramifications of misrepresentation. The hosts reflect on the importance of validating claims and the consequences of failing to do so, both personally and professionally. In this conversation, the speakers delve into the implications of dishonesty, particularly in professional settings. They discuss the consequences of lies, the importance of maintaining integrity and reputation, and the value of truth in personal and professional growth. The dialogue emphasizes the need for self-awareness and the significance of competing with oneself rather than others. Ultimately, the speakers encourage listeners to embrace honesty and learn from their mistakes, highlighting that it's never too late to start anew.

Takeaways

• Mark Lanterman is accused of embellishing his credentials.
• Credibility is crucial in the cybersecurity profession.
• Embellishing credentials can lead to legal consequences.
• Expert witnesses must have validated backgrounds.
• The importance of integrity in professional settings cannot be overstated.
• Legal implications arise from misrepresentation in court.
• The hosts emphasize the need to call out dishonesty.
• There is a lack of accountability in verifying expert witnesses.
• The conversation highlights the ethical responsibilities of professionals.
• Consequences of lying can be more damaging than the truth. Shitty choices have consequences.
• Don't fall for the urge to claim more than you are.
• The truth always comes out, eventually.
• Reputation is everything; it can be destroyed easily.
• You can always start now to rebuild your integrity.
• Competing with yourself is the only true competition.
• Lies of commission and omission both destroy credibility.
• Don't take shortcuts; they will sting you in the end.
• Winners focus on winning; losers focus on others.
• You can turn negative experiences into positive lessons.

]]>2609consequences,credibility,cybersecurity,embellishing-credentials,ethical-standards,expert-witness,forensic-expert,honesty,integrity,legal-implications,lies,mark-lanterman,personal-growth,professional-integrity,public-opinion,reputation,self-improvement,truthfalse249fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-48-infragard-critical-infrastructure--65441834Summary

In this episode, Meg and Dave discuss the importance of viewing information security not just as an IT issue, but as an organizational and societal concern. They explore how different departments within an organization contribute to security and the need for a holistic approach. The conversation also delves into the societal dependency on technology and the implications of critical infrastructure failures. They emphasize the importance of collaboration between sectors to enhance security and resilience in communities. In this conversation, Dave and Meg explore the complexities of cybersecurity consulting, focusing on the importance of regulatory standards, risk management frameworks, and the need for awareness in the industry. They discuss the challenges posed by ignorance and apathy, the interconnectedness of security sectors, and the significance of translating technical risks into business context. The conversation emphasizes the broader impact of security on communities and the necessity for organizations to be aware of available resources. 

Takeaways

• Information security is fundamentally an organizational issue, not just an IT issue.
• Understanding the critical elements of each department is essential for effective risk assessment.
• Business impact analysis helps prioritize what is most critical for different departments.
• The societal perspective on security is crucial for understanding broader risks.
• Dependency on technology has increased, making security more complex.
• Critical infrastructure is vital for daily life and community resilience.
• Collaboration between sectors is necessary for effective security measures.
• InfraGard serves as a bridge between the FBI and critical infrastructure sectors.
• Awareness of security risks varies by industry and needs continuous improvement.
• The conversation highlights the importance of proactive measures in security planning. Awareness of cybersecurity resources is crucial for organizations.
• Ignorance and apathy are significant barriers in cybersecurity.
• Regulatory standards like NIST and ISO provide frameworks for risk management.
• Cybersecurity impacts not just organizations but entire communities.
• Translating technical risks into business context is essential for effective communication.
• The interconnectedness of security sectors highlights the importance of a holistic approach.
• Consultants must ensure clients are aware of available resources and standards.
• The CVCISO program uniquely prepares individuals to communicate risks effectively.
• Public information is often overlooked in cybersecurity discussions.
• Engaging with local cybersecurity resources can enhance organizational security.

]]>https://api.spreaker.com/episode/65441834Tue, 08 Apr 2025 13:41:25 +0000SecurityStudioSummary In this episode, Meg and Dave discuss the importance of viewing information security not just as an IT issue, but as an organizational and societal concern. They explore how different departments within an organization contribute to security...Summary

In this episode, Meg and Dave discuss the importance of viewing information security not just as an IT issue, but as an organizational and societal concern. They explore how different departments within an organization contribute to security and the need for a holistic approach. The conversation also delves into the societal dependency on technology and the implications of critical infrastructure failures. They emphasize the importance of collaboration between sectors to enhance security and resilience in communities. In this conversation, Dave and Meg explore the complexities of cybersecurity consulting, focusing on the importance of regulatory standards, risk management frameworks, and the need for awareness in the industry. They discuss the challenges posed by ignorance and apathy, the interconnectedness of security sectors, and the significance of translating technical risks into business context. The conversation emphasizes the broader impact of security on communities and the necessity for organizations to be aware of available resources. 

Takeaways

• Information security is fundamentally an organizational issue, not just an IT issue.
• Understanding the critical elements of each department is essential for effective risk assessment.
• Business impact analysis helps prioritize what is most critical for different departments.
• The societal perspective on security is crucial for understanding broader risks.
• Dependency on technology has increased, making security more complex.
• Critical infrastructure is vital for daily life and community resilience.
• Collaboration between sectors is necessary for effective security measures.
• InfraGard serves as a bridge between the FBI and critical infrastructure sectors.
• Awareness of security risks varies by industry and needs continuous improvement.
• The conversation highlights the importance of proactive measures in security planning. Awareness of cybersecurity resources is crucial for organizations.
• Ignorance and apathy are significant barriers in cybersecurity.
• Regulatory standards like NIST and ISO provide frameworks for risk management.
• Cybersecurity impacts not just organizations but entire communities.
• Translating technical risks into business context is essential for effective communication.
• The interconnectedness of security sectors highlights the importance of a holistic approach.
• Consultants must ensure clients are aware of available resources and standards.
• The CVCISO program uniquely prepares individuals to communicate risks effectively.
• Public information is often overlooked in cybersecurity discussions.
• Engaging with local cybersecurity resources can enhance organizational security.

]]>3223awareness,business-continuity,cis,collaboration,community-impact,community-resilience,consulting,critical-infrastructure,cybersecurity,disaster-recovery,information-security,iso,nist,organizational-issue,regulatory-standards,risk-assessment,risk-management,societal-perspective,technology-dependencyfalse248fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-47-fear-of-failure--65195198Summary
In this episode, the hosts discuss the concept of failure, exploring its inevitability and the importance of embracing it as a part of growth. They share personal anecdotes and insights from a book titled 'Chasing Failure,' emphasizing that failure can lead to unexpected opportunities and learning experiences. The conversation also touches on the fear of failure, the need for a supportive culture that accepts failure, and the distinction between rational and irrational fears surrounding failure. In this conversation, the speakers delve into the complex nature of failure and success, exploring how failures can be reframed as learning opportunities. They discuss the importance of perspective in defining success, emphasizing that true success lies in finding one's 'sweet spot' where passion, skill, opportunity, and purpose intersect. The dialogue also touches on overcoming the fear of failure and the significance of calculated risks in personal and professional growth.
 
Takeaways

• Failure is a part of life and growth.
• Chasing failure can lead to unexpected opportunities.
• Creating a culture where failure is accepted is crucial.
• Learning from failure is more important than the failure itself.
• Fear of failure can be irrational and paralyzing.
• It's important to separate personal identity from failure.
• Failure can redirect you to your true path.
• Comfort can be a barrier to growth.
• Every failure provides a lesson if you choose to learn from it.
• Success is often a culmination of many failures. Failure exists on a spectrum, from minor setbacks to major catastrophes.
• Reframing failure as a learning opportunity can lead to personal growth.
• Success should be defined beyond material gains and societal expectations.
• Finding your 'sweet spot' involves aligning passion, skills, opportunities, and purpose.
• Fear of failure can be mitigated by gradually exposing oneself to challenges.
• Calculated risks are essential for growth and should not be avoided due to fear.
• Success is often about being present and content with where you are now.
• Failures can inspire others and contribute to their success.
• Regret from not trying can be a greater failure than the act of failing itself.
• Faith and purpose can provide strength in facing fears and failures.

]]>https://api.spreaker.com/episode/65195198Fri, 28 Mar 2025 18:28:21 +0000SecurityStudioSummary In this episode, the hosts discuss the concept of failure, exploring its inevitability and the importance of embracing it as a part of growth. They share personal anecdotes and insights from a book titled 'Chasing Failure,' emphasizing that...Summary
In this episode, the hosts discuss the concept of failure, exploring its inevitability and the importance of embracing it as a part of growth. They share personal anecdotes and insights from a book titled 'Chasing Failure,' emphasizing that failure can lead to unexpected opportunities and learning experiences. The conversation also touches on the fear of failure, the need for a supportive culture that accepts failure, and the distinction between rational and irrational fears surrounding failure. In this conversation, the speakers delve into the complex nature of failure and success, exploring how failures can be reframed as learning opportunities. They discuss the importance of perspective in defining success, emphasizing that true success lies in finding one's 'sweet spot' where passion, skill, opportunity, and purpose intersect. The dialogue also touches on overcoming the fear of failure and the significance of calculated risks in personal and professional growth.
 
Takeaways

• Failure is a part of life and growth.
• Chasing failure can lead to unexpected opportunities.
• Creating a culture where failure is accepted is crucial.
• Learning from failure is more important than the failure itself.
• Fear of failure can be irrational and paralyzing.
• It's important to separate personal identity from failure.
• Failure can redirect you to your true path.
• Comfort can be a barrier to growth.
• Every failure provides a lesson if you choose to learn from it.
• Success is often a culmination of many failures. Failure exists on a spectrum, from minor setbacks to major catastrophes.
• Reframing failure as a learning opportunity can lead to personal growth.
• Success should be defined beyond material gains and societal expectations.
• Finding your 'sweet spot' involves aligning passion, skills, opportunities, and purpose.
• Fear of failure can be mitigated by gradually exposing oneself to challenges.
• Calculated risks are essential for growth and should not be avoided due to fear.
• Success is often about being present and content with where you are now.
• Failures can inspire others and contribute to their success.
• Regret from not trying can be a greater failure than the act of failing itself.
• Faith and purpose can provide strength in facing fears and failures.

]]>2469acceptance,calculated-risks,culture,failure,fear,growth,inspiration,learning,life-lessons,mindset,overcoming-fear,personal-development,personal-growth,resilience,self-awareness,success,sweet-spotfalse247fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-46-meet-dave--65016408 
In this episode of the CvCISO Podcast, host Evan Francen and co-hosts Jordan and Meg welcome Dave Tuckman, the new Executive Director at the Academy. They discuss Dave's background in IT and cybersecurity, his transition to FRSecure, and the importance of awareness training in the industry. The conversation also touches on work-life balance, the therapeutic role of music, and the vision for the Academy to uplift others through education and community building in cybersecurity. In this engaging conversation, the speakers delve into the importance of mentorship and building relationships for personal and professional success. They explore aspirations for future programs and the value of community support. The discussion takes a lighthearted turn as they share personal insights and humorous anecdotes, creating a dynamic and relatable atmosphere. In this episode, the conversation flows through various themes including online behavior, the nuances of incognito browsing, the importance of digital privacy, and personal anecdotes related to government processes and travel challenges. The group shares humorous exchanges while reflecting on their experiences with online security and the complexities of passport regulations. The episode concludes with lighthearted banter about future plans and collaborations, showcasing the camaraderie among the participants.
 
Takeaways

• Dave Tuckman is excited to join the CvCISO Podcast and share his journey.
• He has a rich background in IT and cybersecurity, having owned a company for 25 years.
• Awareness training is crucial in cybersecurity to prevent phishing and other attacks.
• Transitioning to FRSecure has allowed Dave to align his career with his values.
• Balancing work and personal life is important, and helping others recharges Dave.
• Music serves as a therapeutic outlet for stress relief and creativity.
• The CVCISO program provides practical knowledge that differs from traditional education.
• Building a community in cybersecurity education is essential for ongoing support.
• The Academy aims to uplift others through education and professional development.
• Dave envisions expanding the Academy's offerings to serve a broader audience.
• Finding ways to help others achieve their goals is crucial.
• Mentorship can be likened to having a sponsor in AA.
• Building relationship equity is essential for success.
• Being available for someone can be invaluable.
• The community can provide a wealth of knowledge and support.
• Aspirations for future programs include accreditation and continuing education credits.
• The importance of collaboration in professional development is emphasized.
• Lighthearted conversations can foster deeper connections.
• Personal insights can lead to humorous and relatable discussions.
• Uplifting others is a necessary counter to negativity in the world.
• Online behavior can be humorous yet judgmental.
• Incognito browsing raises questions about digital footprints.
• Website security is crucial in today's digital age.
• Personal experiences often highlight government inefficiencies.
• Passport regulations can complicate travel plans.
• Humor can ease discussions about serious topics.
• Collaboration is key to achieving shared goals.
• Traveling internationally requires careful planning.
• Understanding online security headers is essential.
• Lighthearted conversations foster strong relationships.

]]>https://api.spreaker.com/episode/65016408Fri, 21 Mar 2025 16:05:01 +0000SecurityStudioSummary   In this episode of the CvCISO Podcast, host Evan Francen and co-hosts Jordan and Meg welcome Dave Tuckman, the new Executive Director at the Academy. They discuss Dave's background in IT and cybersecurity, his transition to FRSecure, and the... 
In this episode of the CvCISO Podcast, host Evan Francen and co-hosts Jordan and Meg welcome Dave Tuckman, the new Executive Director at the Academy. They discuss Dave's background in IT and cybersecurity, his transition to FRSecure, and the importance of awareness training in the industry. The conversation also touches on work-life balance, the therapeutic role of music, and the vision for the Academy to uplift others through education and community building in cybersecurity. In this engaging conversation, the speakers delve into the importance of mentorship and building relationships for personal and professional success. They explore aspirations for future programs and the value of community support. The discussion takes a lighthearted turn as they share personal insights and humorous anecdotes, creating a dynamic and relatable atmosphere. In this episode, the conversation flows through various themes including online behavior, the nuances of incognito browsing, the importance of digital privacy, and personal anecdotes related to government processes and travel challenges. The group shares humorous exchanges while reflecting on their experiences with online security and the complexities of passport regulations. The episode concludes with lighthearted banter about future plans and collaborations, showcasing the camaraderie among the participants.
 
Takeaways

• Dave Tuckman is excited to join the CvCISO Podcast and share his journey.
• He has a rich background in IT and cybersecurity, having owned a company for 25 years.
• Awareness training is crucial in cybersecurity to prevent phishing and other attacks.
• Transitioning to FRSecure has allowed Dave to align his career with his values.
• Balancing work and personal life is important, and helping others recharges Dave.
• Music serves as a therapeutic outlet for stress relief and creativity.
• The CVCISO program provides practical knowledge that differs from traditional education.
• Building a community in cybersecurity education is essential for ongoing support.
• The Academy aims to uplift others through education and professional development.
• Dave envisions expanding the Academy's offerings to serve a broader audience.
• Finding ways to help others achieve their goals is crucial.
• Mentorship can be likened to having a sponsor in AA.
• Building relationship equity is essential for success.
• Being available for someone can be invaluable.
• The community can provide a wealth of knowledge and support.
• Aspirations for future programs include accreditation and continuing education credits.
• The importance of collaboration in professional development is emphasized.
• Lighthearted conversations can foster deeper connections.
• Personal insights can lead to humorous and relatable discussions.
• Uplifting others is a necessary counter to negativity in the world.
• Online behavior can be humorous yet judgmental.
• Incognito browsing raises questions about digital footprints.
• Website security is crucial in today's digital age.
• Personal experiences often highlight government inefficiencies.
• Passport regulations can complicate travel plans.
• Humor can ease discussions about serious topics.
• Collaboration is key to achieving shared goals.
• Traveling internationally requires careful planning.
• Understanding online security headers is essential.
• Lighthearted conversations foster strong relationships.

]]>3075aspirations,awareness-training,collaboration,community,cvciso-program,cybersecurity,education,frsecure,future-collaborations,humor,insights,mentorship,music,online-behavior,personal-experiences,personal-growth,professional-development,relationships,website-security,work-life-balancefalse246fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-45-building-a-security-first-culture--64885316 
In this episode, the hosts discuss the importance of integrating security into business culture while maintaining a fun and engaging environment. They explore the concept of a 'security first' mentality, emphasizing that security should not overshadow business objectives but rather be a part of them. The conversation highlights the significance of situational awareness, employee empowerment, and the role of leadership in fostering a security-conscious culture. The hosts also challenge the notion that people are the weakest link in security, advocating for better system designs and training to enhance overall security awareness. In this conversation, the speakers delve into the complexities of establishing a robust security culture within organizations. They discuss the critical role of executive management in fostering this culture, the importance of effective communication about security risks, and the need for a clear definition of information security. The conversation also highlights the challenges faced by security professionals in navigating organizational dynamics and the necessity of incremental progress in security awareness. Ultimately, the speakers emphasize the importance of consulting and collaboration in making informed security risk decisions.

Takeaways 

• Have fun in security; it shouldn't be all serious.
• Security first is about integrating security into business.
• Situational awareness is a crucial life skill.
• Training is essential for building a security culture.
• Leadership must be involved in promoting security.
• Security should be part of everyday business operations.
• Recognize that people can be your strongest asset.
• Measure security training effectiveness in business terms.
• Celebrate security wins to encourage participation.
• Avoid labeling people as the weakest link in security. Security culture is essential for organizational safety.
• Executive management plays a crucial role in security culture.
• Effective communication is key to conveying security importance.
• Most leaders genuinely want to do the right thing regarding security.
• The definition of information security is often misunderstood.
• The CEO sets the tone for the organization's security culture.
• Communication breakdowns can lead to security vulnerabilities.
• Incremental progress in security culture is achievable.
• Understanding the psychology of security can improve awareness.
• Awareness of security threats is increasing in society.

]]>https://api.spreaker.com/episode/64885316Fri, 14 Mar 2025 16:38:49 +0000SecurityStudioSummary   In this episode, the hosts discuss the importance of integrating security into business culture while maintaining a fun and engaging environment. They explore the concept of a 'security first' mentality, emphasizing that security should not... 
In this episode, the hosts discuss the importance of integrating security into business culture while maintaining a fun and engaging environment. They explore the concept of a 'security first' mentality, emphasizing that security should not overshadow business objectives but rather be a part of them. The conversation highlights the significance of situational awareness, employee empowerment, and the role of leadership in fostering a security-conscious culture. The hosts also challenge the notion that people are the weakest link in security, advocating for better system designs and training to enhance overall security awareness. In this conversation, the speakers delve into the complexities of establishing a robust security culture within organizations. They discuss the critical role of executive management in fostering this culture, the importance of effective communication about security risks, and the need for a clear definition of information security. The conversation also highlights the challenges faced by security professionals in navigating organizational dynamics and the necessity of incremental progress in security awareness. Ultimately, the speakers emphasize the importance of consulting and collaboration in making informed security risk decisions.

Takeaways 

• Have fun in security; it shouldn't be all serious.
• Security first is about integrating security into business.
• Situational awareness is a crucial life skill.
• Training is essential for building a security culture.
• Leadership must be involved in promoting security.
• Security should be part of everyday business operations.
• Recognize that people can be your strongest asset.
• Measure security training effectiveness in business terms.
• Celebrate security wins to encourage participation.
• Avoid labeling people as the weakest link in security. Security culture is essential for organizational safety.
• Executive management plays a crucial role in security culture.
• Effective communication is key to conveying security importance.
• Most leaders genuinely want to do the right thing regarding security.
• The definition of information security is often misunderstood.
• The CEO sets the tone for the organization's security culture.
• Communication breakdowns can lead to security vulnerabilities.
• Incremental progress in security culture is achievable.
• Understanding the psychology of security can improve awareness.
• Awareness of security threats is increasing in society.

]]>2979business-priorities,communication,consulting,empowerment,executive-management,fun-in-security,incident-response,information-security,leadership,organizational-culture,risk-management,security-awareness,security-culture,security-training,situational-awareness,training-effectiveness,weakest-linkfalse245fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-44-essential-tips-for-vcisos--64733617In this episode, the hosts discuss essential tips for Virtual Chief Security Officers (VCSOs), emphasizing the importance of understanding the business context before addressing security concerns. They highlight the need for preparation, relationship building, and simplifying complex security concepts to effectively communicate with business leaders. The conversation also covers the significance of asset inventory, prioritizing impactful security initiatives, and using analogies to convey security risks in a relatable manner. In this conversation, Evan Francen discusses the importance of building impactful relationships within a business to achieve significant wins. He emphasizes leveraging credibility when making recommendations, the power of message delivery, and the necessity of simplifying security processes. The dialogue also covers quantifying the value of security to the business, embracing opportunities in executive dialogues, and understanding business objectives. Creative approaches to balancing security controls with business needs are explored, along with strategies for getting buy-in from leadership and developing a security roadmap with milestones.
 
Takeaways

• Understand the business first, security second.
• Preparation builds trust and credibility with clients.
• Simplifying complexity enhances communication effectiveness.
• Asset inventory is crucial for effective security management.
• Prioritize impactful security initiatives for better results.
• Communicate security risks in business terms.
• Use analogies to make complex security concepts relatable.
• Security is fundamentally about risk management.
• Avoid pushing security measures that hinder business objectives.
• Focus on helping the business make money through security strategies. Focus on impactful wins for the business.
• Leverage credibility when making recommendations.
• The deliverer of the message can change perceptions.
• Simplifying processes can lead to greater acceptance.
• Use facts to build trust and credibility.
• Security can drive both revenue and profit.
• Engage with executives to create opportunities.
• Understand business objectives to align security efforts.
• Creative solutions can enhance customer onboarding.
• Develop a roadmap with milestones for predictability.

]]>https://api.spreaker.com/episode/64733617Thu, 06 Mar 2025 17:10:27 +0000SecurityStudioSummary In this episode, the hosts discuss essential tips for Virtual Chief Security Officers (VCSOs), emphasizing the importance of understanding the business context before addressing security concerns. They highlight the need for preparation,...In this episode, the hosts discuss essential tips for Virtual Chief Security Officers (VCSOs), emphasizing the importance of understanding the business context before addressing security concerns. They highlight the need for preparation, relationship building, and simplifying complex security concepts to effectively communicate with business leaders. The conversation also covers the significance of asset inventory, prioritizing impactful security initiatives, and using analogies to convey security risks in a relatable manner. In this conversation, Evan Francen discusses the importance of building impactful relationships within a business to achieve significant wins. He emphasizes leveraging credibility when making recommendations, the power of message delivery, and the necessity of simplifying security processes. The dialogue also covers quantifying the value of security to the business, embracing opportunities in executive dialogues, and understanding business objectives. Creative approaches to balancing security controls with business needs are explored, along with strategies for getting buy-in from leadership and developing a security roadmap with milestones.
 
Takeaways

• Understand the business first, security second.
• Preparation builds trust and credibility with clients.
• Simplifying complexity enhances communication effectiveness.
• Asset inventory is crucial for effective security management.
• Prioritize impactful security initiatives for better results.
• Communicate security risks in business terms.
• Use analogies to make complex security concepts relatable.
• Security is fundamentally about risk management.
• Avoid pushing security measures that hinder business objectives.
• Focus on helping the business make money through security strategies. Focus on impactful wins for the business.
• Leverage credibility when making recommendations.
• The deliverer of the message can change perceptions.
• Simplifying processes can lead to greater acceptance.
• Use facts to build trust and credibility.
• Security can drive both revenue and profit.
• Engage with executives to create opportunities.
• Understand business objectives to align security efforts.
• Creative solutions can enhance customer onboarding.
• Develop a roadmap with milestones for predictability.

]]>3828asset-inventory,business,business-objectives,business-relationships,communication,credibility,cybersecurity,executive-dialogue,leadership,leadership-buy-in,quantifying-value,revenue-generation,risk-management,security-controls,security-practices,security-recommendations,security-tips,simplification,simplifying-processes,vcisofalse244fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-43-doge-and-information-security--64606551 
In this episode, Evan and Jordon dive into the controversial topic of Doge, discussing its implications on government efficiency and information security. They explore the emotional responses surrounding political decisions, the role of trust in government, and the privacy concerns that arise from data access. The conversation emphasizes the importance of questioning narratives and understanding the complexities of the system, particularly in relation to social security and data security. In this conversation, Evan Francen and Jordon discuss the inefficiencies and challenges within government systems, particularly focusing on identity recovery and cybersecurity. They explore the emotional manipulation prevalent in politics, the power of language, and the consequences of dehumanization. The discussion also touches on the role of CISA in cybersecurity, the need for accountability in government spending, and the influence of big tech. They emphasize the importance of open dialogue and authenticity in relationships, advocating for transparency and efficiency in government operations.
 
Takeaways

• Doge is a controversial topic that raises questions about government efficiency.
• Emotional responses can cloud judgment in political discussions.
• It's important to consider multiple perspectives on issues like Doge.
• Trust in government is a significant factor in public opinion.
• Privacy concerns are heightened with increased data access.
• The design of systems like social security is flawed and outdated.
• Questioning everything is crucial for informed decision-making.
• Complexity in systems can lead to security vulnerabilities.
• Transparency in government actions is essential for public trust.
• Understanding the root causes of issues can lead to better solutions.
• Reclaiming identity is a complex and painful process.
• Government systems are often inefficient and poorly designed.
• Trust in leadership is crucial but often misplaced.
• Emotional manipulation is a powerful tool in politics.
• Language can be weaponized to dehumanize individuals.
• CISA's effectiveness and accountability are in question.
• Big tech's influence complicates cybersecurity efforts.
• Transparency in government spending is essential for accountability.
• Societal manipulation is a pervasive issue.
• Authenticity in relationships fosters deeper connections.

]]>https://api.spreaker.com/episode/64606551Thu, 27 Feb 2025 16:09:50 +0000SecurityStudioSummary   In this episode, Evan and Jordon dive into the controversial topic of Doge, discussing its implications on government efficiency and information security. They explore the emotional responses surrounding political decisions, the role of... 
In this episode, Evan and Jordon dive into the controversial topic of Doge, discussing its implications on government efficiency and information security. They explore the emotional responses surrounding political decisions, the role of trust in government, and the privacy concerns that arise from data access. The conversation emphasizes the importance of questioning narratives and understanding the complexities of the system, particularly in relation to social security and data security. In this conversation, Evan Francen and Jordon discuss the inefficiencies and challenges within government systems, particularly focusing on identity recovery and cybersecurity. They explore the emotional manipulation prevalent in politics, the power of language, and the consequences of dehumanization. The discussion also touches on the role of CISA in cybersecurity, the need for accountability in government spending, and the influence of big tech. They emphasize the importance of open dialogue and authenticity in relationships, advocating for transparency and efficiency in government operations.
 
Takeaways

• Doge is a controversial topic that raises questions about government efficiency.
• Emotional responses can cloud judgment in political discussions.
• It's important to consider multiple perspectives on issues like Doge.
• Trust in government is a significant factor in public opinion.
• Privacy concerns are heightened with increased data access.
• The design of systems like social security is flawed and outdated.
• Questioning everything is crucial for informed decision-making.
• Complexity in systems can lead to security vulnerabilities.
• Transparency in government actions is essential for public trust.
• Understanding the root causes of issues can lead to better solutions.
• Reclaiming identity is a complex and painful process.
• Government systems are often inefficient and poorly designed.
• Trust in leadership is crucial but often misplaced.
• Emotional manipulation is a powerful tool in politics.
• Language can be weaponized to dehumanize individuals.
• CISA's effectiveness and accountability are in question.
• Big tech's influence complicates cybersecurity efforts.
• Transparency in government spending is essential for accountability.
• Societal manipulation is a pervasive issue.
• Authenticity in relationships fosters deeper connections.

]]>3098accountability,big-tech-influence,cybersecurity,data-security,dehumanization,doge,emotional-manipulation,emotional-responses,government-efficiency,government-inefficiency,government-spending,government-transparency,identity-recovery,information-security,language-power,political-controversy,privacy-concerns,social-security,trust-in-government,trust-in-leadershipfalse243fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-42-breaking-into-cybersecurity-a-guide-for-newcomers--64438939Summary

In this episode, the hosts discuss the various pathways into the cybersecurity field, addressing the challenges faced by newcomers and those looking to transition into the industry. They share personal stories of their journeys, the importance of having a clear purpose, and the role of education and certifications in building a successful career in cybersecurity. The conversation emphasizes the need for practical experience and the realities of job expectations in the current market. In this conversation, the speakers discuss the importance of practical experience over formal education in the cybersecurity field. They emphasize the need for candidates to possess intangibles such as integrity and a willingness to learn, alongside technical knowledge and experience. The discussion also touches on the unrealistic salary expectations of job seekers, the dynamics of the job market, and the significance of having a clear purpose in pursuing a career in cybersecurity. Building a portfolio and setting realistic expectations are highlighted as key strategies for success in the industry.

Takeaways

• There is no single path to entering cybersecurity.
• Having a strong purpose can help you persevere in your career.
• Certifications can provide confidence and connections in the industry.
• Practical experience is often more valuable than theoretical knowledge.
• The job market in cybersecurity can be challenging and competitive.
• Networking is crucial for finding job opportunities.
• Many hiring managers prioritize specific skills over degrees.
• Entry-level positions are essential for gaining experience.
• Understanding the realities of job expectations is important for newcomers.
• Continuous learning and adaptation are key to success in cybersecurity. A degree shows commitment but doesn't guarantee skill.
• Practical experience is crucial for success in cybersecurity.
• Intangibles like integrity are essential for hiring.
• Setting realistic salary expectations is important.
• Job descriptions often lack clarity on actual needs.
• Building a portfolio can set you apart in job applications.
• Purpose in your career can help combat burnout.
• Networking can play a significant role in job placement.
• Understanding your strengths can guide your career path.
• Continuous learning and adaptation are key in cybersecurity.

]]>https://api.spreaker.com/episode/64438939Tue, 18 Feb 2025 19:42:19 +0000SecurityStudioSummary In this episode, the hosts discuss the various pathways into the cybersecurity field, addressing the challenges faced by newcomers and those looking to transition into the industry. They share personal stories of their journeys, the...Summary

In this episode, the hosts discuss the various pathways into the cybersecurity field, addressing the challenges faced by newcomers and those looking to transition into the industry. They share personal stories of their journeys, the importance of having a clear purpose, and the role of education and certifications in building a successful career in cybersecurity. The conversation emphasizes the need for practical experience and the realities of job expectations in the current market. In this conversation, the speakers discuss the importance of practical experience over formal education in the cybersecurity field. They emphasize the need for candidates to possess intangibles such as integrity and a willingness to learn, alongside technical knowledge and experience. The discussion also touches on the unrealistic salary expectations of job seekers, the dynamics of the job market, and the significance of having a clear purpose in pursuing a career in cybersecurity. Building a portfolio and setting realistic expectations are highlighted as key strategies for success in the industry.

Takeaways

• There is no single path to entering cybersecurity.
• Having a strong purpose can help you persevere in your career.
• Certifications can provide confidence and connections in the industry.
• Practical experience is often more valuable than theoretical knowledge.
• The job market in cybersecurity can be challenging and competitive.
• Networking is crucial for finding job opportunities.
• Many hiring managers prioritize specific skills over degrees.
• Entry-level positions are essential for gaining experience.
• Understanding the realities of job expectations is important for newcomers.
• Continuous learning and adaptation are key to success in cybersecurity. A degree shows commitment but doesn't guarantee skill.
• Practical experience is crucial for success in cybersecurity.
• Intangibles like integrity are essential for hiring.
• Setting realistic salary expectations is important.
• Job descriptions often lack clarity on actual needs.
• Building a portfolio can set you apart in job applications.
• Purpose in your career can help combat burnout.
• Networking can play a significant role in job placement.
• Understanding your strengths can guide your career path.
• Continuous learning and adaptation are key in cybersecurity.

]]>3474career-advice,certifications,cybersecurity,education,entry-level,expectations,hiring,industry-insights,job-market,jobs,personal-stories,portfolio,practical-experience,purpose,skillsfalse242fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-41-mentorship--64253276Summary 

In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur within communities. The conversation emphasizes the importance of experience, the role of mentors in shaping careers, and the reciprocal nature of mentorship relationships. The hosts also touch on the idea that everyone has the potential to be a mentor, regardless of their formal title or position. In this conversation, Evan Francen and Meg discuss the multifaceted nature of mentorship, emphasizing the importance of perspectives, authentic relationships, and the fluidity of mentor-mentee dynamics. They explore how mentorship can be both formal and informal, the value of observational learning, and the necessity of sharing wisdom. The discussion highlights that mentorship is a lifelong journey, where both mentors and mentees can learn from each other, and encourages listeners to reflect on their own mentorship experiences.

Takeaways

• Mentorship is not just about teaching; it's about sharing experiences.
• A good mentor-mentee relationship is two-way, where both parties learn from each other.
• Wisdom is gained through experience, not just education.
• Informal mentorship can happen naturally within communities.
• Everyone has the potential to be a mentor, regardless of their experience level.
• Mentorship can take place through various mediums, including books and personal interactions.
• Creating opportunities for mentorship is essential for growth.
• Mentors should aim to help their mentees become better than themselves.
• The best mentors are those who genuinely care about the growth of others.
• Mentorship is about support, guidance, and sharing wisdom. Perspectives are crucial for making informed decisions.
• Authenticity in relationships enhances mentorship effectiveness.
• Mentorship can take many forms, both formal and informal.
• Observational learning can be a powerful form of mentorship.
• Sharing wisdom is a key responsibility of mentors.
• Mentorship is a two-way street; both parties benefit.
• Seek mentors in unexpected places, including social media.
• Everyone has the potential to be a mentor or mentee.
• Reflect on past mentorship experiences to recognize their value.
• Good leaders empower others rather than seeking to be needed.

]]>https://api.spreaker.com/episode/64253276Fri, 07 Feb 2025 16:56:06 +0000SecurityStudioSummary  In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur...Summary 

In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur within communities. The conversation emphasizes the importance of experience, the role of mentors in shaping careers, and the reciprocal nature of mentorship relationships. The hosts also touch on the idea that everyone has the potential to be a mentor, regardless of their formal title or position. In this conversation, Evan Francen and Meg discuss the multifaceted nature of mentorship, emphasizing the importance of perspectives, authentic relationships, and the fluidity of mentor-mentee dynamics. They explore how mentorship can be both formal and informal, the value of observational learning, and the necessity of sharing wisdom. The discussion highlights that mentorship is a lifelong journey, where both mentors and mentees can learn from each other, and encourages listeners to reflect on their own mentorship experiences.

Takeaways

• Mentorship is not just about teaching; it's about sharing experiences.
• A good mentor-mentee relationship is two-way, where both parties learn from each other.
• Wisdom is gained through experience, not just education.
• Informal mentorship can happen naturally within communities.
• Everyone has the potential to be a mentor, regardless of their experience level.
• Mentorship can take place through various mediums, including books and personal interactions.
• Creating opportunities for mentorship is essential for growth.
• Mentors should aim to help their mentees become better than themselves.
• The best mentors are those who genuinely care about the growth of others.
• Mentorship is about support, guidance, and sharing wisdom. Perspectives are crucial for making informed decisions.
• Authenticity in relationships enhances mentorship effectiveness.
• Mentorship can take many forms, both formal and informal.
• Observational learning can be a powerful form of mentorship.
• Sharing wisdom is a key responsibility of mentors.
• Mentorship is a two-way street; both parties benefit.
• Seek mentors in unexpected places, including social media.
• Everyone has the potential to be a mentor or mentee.
• Reflect on past mentorship experiences to recognize their value.
• Good leaders empower others rather than seeking to be needed.

]]>3040authentic-connections,career-development,cissp,community-support,experience,guidance,informal-mentorship,information-security,leadership,learning,mentorship,personal-growth,perspectives,professional-development,relationships,wisdom,wisdom-sharingfalse241fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-40-ai-in-the-workplace--64190198Summary

In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur within communities. The conversation emphasizes the importance of experience, the role of mentors in shaping careers, and the reciprocal nature of mentorship relationships. The hosts also touch on the idea that everyone has the potential to be a mentor, regardless of their formal title or position. In this conversation, Evan Francen and Meg discuss the multifaceted nature of mentorship, emphasizing the importance of perspectives, authentic relationships, and the fluidity of mentor-mentee dynamics. They explore how mentorship can be both formal and informal, the value of observational learning, and the necessity of sharing wisdom. The discussion highlights that mentorship is a lifelong journey, where both mentors and mentees can learn from each other, and encourages listeners to reflect on their own mentorship experiences.

Takeaways

• Mentorship is not just about teaching; it's about sharing experiences.
• A good mentor-mentee relationship is two-way, where both parties learn from each other.
• Wisdom is gained through experience, not just education.
• Informal mentorship can happen naturally within communities.
• Everyone has the potential to be a mentor, regardless of their experience level.
• Mentorship can take place through various mediums, including books and personal interactions.
• Creating opportunities for mentorship is essential for growth.
• Mentors should aim to help their mentees become better than themselves.
• The best mentors are those who genuinely care about the growth of others.
• Mentorship is about support, guidance, and sharing wisdom. Perspectives are crucial for making informed decisions.
• Authenticity in relationships enhances mentorship effectiveness.
• Mentorship can take many forms, both formal and informal.
• Observational learning can be a powerful form of mentorship.
• Sharing wisdom is a key responsibility of mentors.
• Mentorship is a two-way street; both parties benefit.
• Seek mentors in unexpected places, including social media.
• Everyone has the potential to be a mentor or mentee.
• Reflect on past mentorship experiences to recognize their value.
• Good leaders empower others rather than seeking to be needed.

]]>https://api.spreaker.com/episode/64190198Tue, 04 Feb 2025 16:56:57 +0000SecurityStudioSummary In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur...Summary

In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur within communities. The conversation emphasizes the importance of experience, the role of mentors in shaping careers, and the reciprocal nature of mentorship relationships. The hosts also touch on the idea that everyone has the potential to be a mentor, regardless of their formal title or position. In this conversation, Evan Francen and Meg discuss the multifaceted nature of mentorship, emphasizing the importance of perspectives, authentic relationships, and the fluidity of mentor-mentee dynamics. They explore how mentorship can be both formal and informal, the value of observational learning, and the necessity of sharing wisdom. The discussion highlights that mentorship is a lifelong journey, where both mentors and mentees can learn from each other, and encourages listeners to reflect on their own mentorship experiences.

Takeaways

• Mentorship is not just about teaching; it's about sharing experiences.
• A good mentor-mentee relationship is two-way, where both parties learn from each other.
• Wisdom is gained through experience, not just education.
• Informal mentorship can happen naturally within communities.
• Everyone has the potential to be a mentor, regardless of their experience level.
• Mentorship can take place through various mediums, including books and personal interactions.
• Creating opportunities for mentorship is essential for growth.
• Mentors should aim to help their mentees become better than themselves.
• The best mentors are those who genuinely care about the growth of others.
• Mentorship is about support, guidance, and sharing wisdom. Perspectives are crucial for making informed decisions.
• Authenticity in relationships enhances mentorship effectiveness.
• Mentorship can take many forms, both formal and informal.
• Observational learning can be a powerful form of mentorship.
• Sharing wisdom is a key responsibility of mentors.
• Mentorship is a two-way street; both parties benefit.
• Seek mentors in unexpected places, including social media.
• Everyone has the potential to be a mentor or mentee.
• Reflect on past mentorship experiences to recognize their value.
• Good leaders empower others rather than seeking to be needed.

]]>3380authentic-connections,career-development,cissp,community-support,experience,guidance,informal-mentorship,information-security,leadership,learning,mentorship,personal-growth,perspectives,professional-development,relationships,wisdom,wisdom-sharingfalse240fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-39-vciso-role-in-bci-and-drp--63879717Summary

In this episode, the hosts and guests delve into the concept of Zero Trust Architecture, discussing its legitimacy, implementation challenges, and the importance of understanding its principles. They explore how Zero Trust can enhance security while also serving as a business strategy that can potentially reduce costs and increase revenue through better risk management and compliance. The conversation highlights the complexities of adopting Zero Trust in large organizations and emphasizes the need for clear definitions and practical steps to implement it effectively. In this conversation, the speakers delve into the critical aspects of security policies, breach notifications, and the implementation of Zero Trust frameworks. They discuss the importance of understanding the business value of security measures, enhancing user experience while maintaining security, and the necessity of situational awareness in cybersecurity. The conversation emphasizes the need for effective communication with stakeholders to ensure that security measures are understood and valued, ultimately leading to better risk management and organizational success. 

Takeaways

• Zero Trust is a legitimate security principle, not just a buzzword.
• Implementation of Zero Trust is complex and requires careful planning.
• Default deny is a core principle of Zero Trust.
• Understanding egress and ingress is crucial for effective security.
• Zero Trust can help reduce cyber insurance costs.
• Asset management is essential for Zero Trust implementation.
• Complex environments pose significant challenges to adopting Zero Trust.
• Risk management is at the heart of Zero Trust strategies.
• Business processes should be aligned with security measures.
• Zero Trust can enhance business credibility and partnerships. Breach notifications should be included in contracts to ensure transparency.
• Zero Trust can lead to increased efficiency and potential cost savings for businesses.
• Understanding the business processes is crucial for effective security implementation.
• User experience must be considered when implementing security measures.
• Situational awareness is key to making informed security decisions.
• Risk management is an ongoing process, not a one-time fix.
• Effective communication about security measures can build trust with stakeholders.
• Security professionals should be prepared to demonstrate the business value of their initiatives.
• Zero Trust should be implemented in phases, focusing on critical components first.
• Frameworks should guide security practices, not dictate them.

]]>https://api.spreaker.com/episode/63879717Fri, 24 Jan 2025 17:50:34 +0000SecurityStudioSummary In this episode, the hosts and guests delve into the concept of Zero Trust Architecture, discussing its legitimacy, implementation challenges, and the importance of understanding its principles. They explore how Zero Trust can enhance...Summary

In this episode, the hosts and guests delve into the concept of Zero Trust Architecture, discussing its legitimacy, implementation challenges, and the importance of understanding its principles. They explore how Zero Trust can enhance security while also serving as a business strategy that can potentially reduce costs and increase revenue through better risk management and compliance. The conversation highlights the complexities of adopting Zero Trust in large organizations and emphasizes the need for clear definitions and practical steps to implement it effectively. In this conversation, the speakers delve into the critical aspects of security policies, breach notifications, and the implementation of Zero Trust frameworks. They discuss the importance of understanding the business value of security measures, enhancing user experience while maintaining security, and the necessity of situational awareness in cybersecurity. The conversation emphasizes the need for effective communication with stakeholders to ensure that security measures are understood and valued, ultimately leading to better risk management and organizational success. 

Takeaways

• Zero Trust is a legitimate security principle, not just a buzzword.
• Implementation of Zero Trust is complex and requires careful planning.
• Default deny is a core principle of Zero Trust.
• Understanding egress and ingress is crucial for effective security.
• Zero Trust can help reduce cyber insurance costs.
• Asset management is essential for Zero Trust implementation.
• Complex environments pose significant challenges to adopting Zero Trust.
• Risk management is at the heart of Zero Trust strategies.
• Business processes should be aligned with security measures.
• Zero Trust can enhance business credibility and partnerships. Breach notifications should be included in contracts to ensure transparency.
• Zero Trust can lead to increased efficiency and potential cost savings for businesses.
• Understanding the business processes is crucial for effective security implementation.
• User experience must be considered when implementing security measures.
• Situational awareness is key to making informed security decisions.
• Risk management is an ongoing process, not a one-time fix.
• Effective communication about security measures can build trust with stakeholders.
• Security professionals should be prepared to demonstrate the business value of their initiatives.
• Zero Trust should be implemented in phases, focusing on critical components first.
• Frameworks should guide security practices, not dictate them.

]]>3352architecture,breach-notifications,business-strategy,business-value,communication,cybersecurity,egress,implementation-challenges,ingress,it-security,risk-management,security-policies,security-principles,situational-awareness,user-experience,zero-trustfalse239fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-38-zero-trust-is-it-real--63728633
Takeaways

• Zero Trust is a legitimate security principle, not just a buzzword.
• Implementation of Zero Trust is complex and requires careful planning.
• Default deny is a core principle of Zero Trust.
• Understanding egress and ingress is crucial for effective security.
• Zero Trust can help reduce cyber insurance costs.
• Asset management is essential for Zero Trust implementation.
• Complex environments pose significant challenges to adopting Zero Trust.
• Risk management is at the heart of Zero Trust strategies.
• Business processes should be aligned with security measures.
• Zero Trust can enhance business credibility and partnerships. Breach notifications should be included in contracts to ensure transparency.
• Zero Trust can lead to increased efficiency and potential cost savings for businesses.
• Understanding the business processes is crucial for effective security implementation.
• User experience must be considered when implementing security measures.
• Situational awareness is key to making informed security decisions.
• Risk management is an ongoing process, not a one-time fix.
• Effective communication about security measures can build trust with stakeholders.
• Security professionals should be prepared to demonstrate the business value of their initiatives.
• Zero Trust should be implemented in phases, focusing on critical components first.
• Frameworks should guide security practices, not dictate them.

]]>https://api.spreaker.com/episode/63728633Fri, 17 Jan 2025 17:30:20 +0000SecurityStudioIn this episode, the hosts and guests delve into the concept of Zero Trust Architecture, discussing its legitimacy, implementation challenges, and the importance of understanding its principles. They explore how Zero Trust can enhance security while...
Takeaways

• Zero Trust is a legitimate security principle, not just a buzzword.
• Implementation of Zero Trust is complex and requires careful planning.
• Default deny is a core principle of Zero Trust.
• Understanding egress and ingress is crucial for effective security.
• Zero Trust can help reduce cyber insurance costs.
• Asset management is essential for Zero Trust implementation.
• Complex environments pose significant challenges to adopting Zero Trust.
• Risk management is at the heart of Zero Trust strategies.
• Business processes should be aligned with security measures.
• Zero Trust can enhance business credibility and partnerships. Breach notifications should be included in contracts to ensure transparency.
• Zero Trust can lead to increased efficiency and potential cost savings for businesses.
• Understanding the business processes is crucial for effective security implementation.
• User experience must be considered when implementing security measures.
• Situational awareness is key to making informed security decisions.
• Risk management is an ongoing process, not a one-time fix.
• Effective communication about security measures can build trust with stakeholders.
• Security professionals should be prepared to demonstrate the business value of their initiatives.
• Zero Trust should be implemented in phases, focusing on critical components first.
• Frameworks should guide security practices, not dictate them.

]]>3445architecture,breach-notifications,business-strategy,business-value,communication,cybersecurity,egress,implementation-challenges,ingress,it-security,risk-management,security-policies,security-principles,situational-awareness,user-experience,zero-trustfalse238fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-37-mn-local-chapter-2024-year-in-review--63640303
Takeaways

• The Minnesota Local Chapter has been meeting for seven months.
• Mental health check-ins are a key part of the meetings.
• Building a supportive community is essential for personal and professional growth.
• Members share resources and experiences to help each other.
• Authenticity and transparency are crucial for a thriving community.
• Regular attendance has led to a consistent group of participants.
• The chapter aims to expand and replicate its model in other regions.
• Food and shared meals enhance the community experience.
• Members feel comfortable discussing personal and professional challenges.
• The group values both fun and professional development in their meetings. Authenticity in professional relationships fosters better collaboration.
• Diverse perspectives enhance understanding and decision-making.
• Community involvement is crucial for personal and professional growth.
• Starting a local chapter can be done with just a few people.
• Continuing education is essential in the cybersecurity field.
• Networking within the community leads to shared resources and ideas.
• Humor can be a great icebreaker in professional settings.
• Encouraging others to start their own groups can expand the community.
• The local chapter serves as a platform for ongoing learning and support.
• Building relationships is key to success in any industry.

]]>https://api.spreaker.com/episode/63640303Fri, 10 Jan 2025 17:52:14 +0000SecurityStudioIn this episode of the CvCISO Podcast, the hosts and guests discuss the Minnesota Local Chapter's progress, focusing on community building, mental health check-ins, and the importance of support structures in the information security field. They share...
Takeaways

• The Minnesota Local Chapter has been meeting for seven months.
• Mental health check-ins are a key part of the meetings.
• Building a supportive community is essential for personal and professional growth.
• Members share resources and experiences to help each other.
• Authenticity and transparency are crucial for a thriving community.
• Regular attendance has led to a consistent group of participants.
• The chapter aims to expand and replicate its model in other regions.
• Food and shared meals enhance the community experience.
• Members feel comfortable discussing personal and professional challenges.
• The group values both fun and professional development in their meetings. Authenticity in professional relationships fosters better collaboration.
• Diverse perspectives enhance understanding and decision-making.
• Community involvement is crucial for personal and professional growth.
• Starting a local chapter can be done with just a few people.
• Continuing education is essential in the cybersecurity field.
• Networking within the community leads to shared resources and ideas.
• Humor can be a great icebreaker in professional settings.
• Encouraging others to start their own groups can expand the community.
• The local chapter serves as a platform for ongoing learning and support.
• Building relationships is key to success in any industry.

]]>3110authenticity,collaboration,community-building,community-involvement,continuing-education,cvciso-podcast,cybersecurity,information-security,leadership,local-chapter,mental-health,minnesota-local-chapter,networking,personal-growth,perspectives,professional-growth,support-structuresfalse237fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-36-a-year-in-review--63487676 
In this episode, the hosts discuss updates on the CvCISO Academy, reflecting on the past year and looking forward to 2025. They emphasize the importance of community engagement, new leadership roles, and the need for standardization in cybersecurity practices. The conversation also touches on personal growth and the value of continuous learning, with lighthearted moments shared among the hosts. In this conversation, the speakers discuss the importance of uplifting relationships, continuous learning, and situational awareness in both personal and professional contexts. They explore how these themes relate to cybersecurity, highlighting key events and trends from 2024, the impact of major data breaches, and the accountability of organizations in protecting sensitive information. The discussion also touches on the role of technology and AI in cybersecurity, emerging trends for 2025, and the value of cyber insurance. Ultimately, the conversation emphasizes the importance of love and support in fostering growth and resilience.

Takeaways 

• The Academy is evolving with new leadership and growth opportunities.
• Community engagement is crucial for the success of the CvCISO program.
• Standardization in cybersecurity practices is necessary for better service delivery.
• Continuous learning is essential in the cybersecurity field.
• The hosts emphasize the importance of personal growth and self-awareness.
• Plans for 2025 include more community support and resources.
• Monthly chats will be introduced to foster community connections.
• Silly moments can help lighten the mood during stressful times.
• The commitment to the Academy and its programs remains strong. There are people who uplift you.
• Continuous learning opens up new opportunities.
• Situational awareness is crucial in everyday life. It helps identify threats.
• Key cybersecurity events shape the industry's landscape.
• Data breaches can have severe consequences for individuals.
• Accountability for breaches often lies with the board of directors.
• Technology plays a significant role in cybersecurity effectiveness.
• AI is both a tool for improvement and a potential threat.
• Cyber insurance can provide financial benefits if managed correctly.

]]>https://api.spreaker.com/episode/63487676Fri, 27 Dec 2024 15:31:49 +0000SecurityStudioSummary   In this episode, the hosts discuss updates on the CvCISO Academy, reflecting on the past year and looking forward to 2025. They emphasize the importance of community engagement, new leadership roles, and the need for standardization in... 
In this episode, the hosts discuss updates on the CvCISO Academy, reflecting on the past year and looking forward to 2025. They emphasize the importance of community engagement, new leadership roles, and the need for standardization in cybersecurity practices. The conversation also touches on personal growth and the value of continuous learning, with lighthearted moments shared among the hosts. In this conversation, the speakers discuss the importance of uplifting relationships, continuous learning, and situational awareness in both personal and professional contexts. They explore how these themes relate to cybersecurity, highlighting key events and trends from 2024, the impact of major data breaches, and the accountability of organizations in protecting sensitive information. The discussion also touches on the role of technology and AI in cybersecurity, emerging trends for 2025, and the value of cyber insurance. Ultimately, the conversation emphasizes the importance of love and support in fostering growth and resilience.

Takeaways 

• The Academy is evolving with new leadership and growth opportunities.
• Community engagement is crucial for the success of the CvCISO program.
• Standardization in cybersecurity practices is necessary for better service delivery.
• Continuous learning is essential in the cybersecurity field.
• The hosts emphasize the importance of personal growth and self-awareness.
• Plans for 2025 include more community support and resources.
• Monthly chats will be introduced to foster community connections.
• Silly moments can help lighten the mood during stressful times.
• The commitment to the Academy and its programs remains strong. There are people who uplift you.
• Continuous learning opens up new opportunities.
• Situational awareness is crucial in everyday life. It helps identify threats.
• Key cybersecurity events shape the industry's landscape.
• Data breaches can have severe consequences for individuals.
• Accountability for breaches often lies with the board of directors.
• Technology plays a significant role in cybersecurity effectiveness.
• AI is both a tool for improvement and a potential threat.
• Cyber insurance can provide financial benefits if managed correctly.

]]>3509academy,accountability,ai,community,continuous-learning,cvciso,cyber-insurance,cybersecurity,data-breaches,growth,leadership,personal-growth,situational-awareness,standardization,technology,uplifting-relationshipsfalse136fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-35-vciso-habits-and-routines--63419263 
In this episode of the CvCISO Podcast, hosts Evan, Meg, and Jordon discuss the essential routines and habits for vCISOs, emphasizing the importance of building strong relationships, understanding pricing, and the value of intangibles in cybersecurity. They explore the pathways to entering the cybersecurity field, including education and gaining practical experience, while also addressing the confusion surrounding the industry and the need for clear communication. In this conversation, Evan Francen discusses the importance of effective communication and relationship-building in the role of a Virtual Chief Security Officer (vCISO). He emphasizes the need for thorough preparation, the value of face-to-face interactions, and the significance of understanding cultural differences in establishing trust. The discussion also highlights the importance of collaboration over competition in the security industry, the necessity of providing genuine value to clients, and the role of authenticity in business relationships.
 
Takeaways

• Be yourself to build trust and credibility.
• Leverage your network for support and resources.
• Intangibles are crucial in cybersecurity roles.
• Education is available through various channels.
• Experience is essential and cannot be rushed.
• Practical skills can be gained through volunteer work.
• Understand the value you bring to clients.
• The cybersecurity landscape can be confusing.
• Strong relationships dictate effective communication.
• Initiative is key to standing out in job applications.
• Preparation is key to effective client interactions.
• Face-to-face meetings can significantly enhance relationships.
• Cultural understanding is crucial in building trust.
• Collaboration within the industry can lead to better outcomes.
• Authenticity fosters stronger business relationships.
• Providing value is essential for long-term client retention.
• Understanding the people behind businesses is vital.
• Regular education on both security and business is important.
• Establishing mutual accountability enhances client trust.
• Being genuine in business leads to better client relationships.

]]>https://api.spreaker.com/episode/63419263Fri, 20 Dec 2024 17:16:52 +0000SecurityStudioSummary   In this episode of the CvCISO Podcast, hosts Evan, Meg, and Jordon discuss the essential routines and habits for vCISOs, emphasizing the importance of building strong relationships, understanding pricing, and the value of intangibles in... 
In this episode of the CvCISO Podcast, hosts Evan, Meg, and Jordon discuss the essential routines and habits for vCISOs, emphasizing the importance of building strong relationships, understanding pricing, and the value of intangibles in cybersecurity. They explore the pathways to entering the cybersecurity field, including education and gaining practical experience, while also addressing the confusion surrounding the industry and the need for clear communication. In this conversation, Evan Francen discusses the importance of effective communication and relationship-building in the role of a Virtual Chief Security Officer (vCISO). He emphasizes the need for thorough preparation, the value of face-to-face interactions, and the significance of understanding cultural differences in establishing trust. The discussion also highlights the importance of collaboration over competition in the security industry, the necessity of providing genuine value to clients, and the role of authenticity in business relationships.
 
Takeaways

• Be yourself to build trust and credibility.
• Leverage your network for support and resources.
• Intangibles are crucial in cybersecurity roles.
• Education is available through various channels.
• Experience is essential and cannot be rushed.
• Practical skills can be gained through volunteer work.
• Understand the value you bring to clients.
• The cybersecurity landscape can be confusing.
• Strong relationships dictate effective communication.
• Initiative is key to standing out in job applications.
• Preparation is key to effective client interactions.
• Face-to-face meetings can significantly enhance relationships.
• Cultural understanding is crucial in building trust.
• Collaboration within the industry can lead to better outcomes.
• Authenticity fosters stronger business relationships.
• Providing value is essential for long-term client retention.
• Understanding the people behind businesses is vital.
• Regular education on both security and business is important.
• Establishing mutual accountability enhances client trust.
• Being genuine in business leads to better client relationships.

]]>3031authenticity,business-value,career-pathways,client-relationships,collaboration,communication,cultural-differences,customer-service,cybersecurity,education,experience,face-to-face-interactions,information-security,intangibles,pricing,trust,value-perception,vcisofalse135fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-34-routines-and-habits--63192239 
In this episode, the speakers explore various themes surrounding self-care, routines, and habits. They discuss the importance of embracing natural beauty, the significance of hydration and morning rituals, and the symbolism behind daily habits like showering. The conversation also delves into the social aspects of habits, particularly focusing on smoking and drinking, and how these habits can foster connections or lead to negative consequences. In this conversation, the speakers explore various personal habits and their impacts on mental health, relationships, and overall well-being. The conversation also touches on the significance of gratitude and contentment in daily life, emphasizing that true joy comes from appreciating what one has rather than seeking more material possessions.
 
Takeaways

• The hosts enjoy Fridays and dislike Mondays, reflecting a common sentiment.
• Exploring habits can reveal different facets of personality.
• Routines don't have to be work-related; they can encompass all aspects of life.
• The discussion on habits can lead to deeper insights about personal growth.
• The hosts share personal anecdotes related to their routines.
• Morning routines can set a positive tone for the day.
• Hydration is essential for overall health.
• Symbolic actions can provide mental clarity.
• Daily habits can help wash away past negativity.
• Social habits can lead to meaningful conversations.
• Bad habits often come with social stigma.
• Finding balance in habits is crucial for well-being.
• Every day offers a new opportunity for growth.
• Being transparent about habits can foster connection. Stress relief can come from various habits, but it's essential to evaluate their impact.
• Alcoholism can manifest in different ways, and personal choices play a significant role.
• Sugar addiction is a common struggle that many face.
• Financial planning can enhance intimacy in relationships by reducing stress.
• Preparing for help, like cleaning services, can create a smoother experience.
• Gratitude practices can shift perspective and enhance daily joy.
• Contentment is more valuable than material wealth.
• Distractions can lead to ungratefulness; intentional gratitude is necessary.
• Finding joy in simple things can lead to a more fulfilling life.
• It's important to recognize the gifts in our lives and appreciate them.

]]>https://api.spreaker.com/episode/63192239Fri, 06 Dec 2024 18:31:37 +0000SecurityStudioSummary   In this episode, the speakers explore various themes surrounding self-care, routines, and habits. They discuss the importance of embracing natural beauty, the significance of hydration and morning rituals, and the symbolism behind daily... 
In this episode, the speakers explore various themes surrounding self-care, routines, and habits. They discuss the importance of embracing natural beauty, the significance of hydration and morning rituals, and the symbolism behind daily habits like showering. The conversation also delves into the social aspects of habits, particularly focusing on smoking and drinking, and how these habits can foster connections or lead to negative consequences. In this conversation, the speakers explore various personal habits and their impacts on mental health, relationships, and overall well-being. The conversation also touches on the significance of gratitude and contentment in daily life, emphasizing that true joy comes from appreciating what one has rather than seeking more material possessions.
 
Takeaways

• The hosts enjoy Fridays and dislike Mondays, reflecting a common sentiment.
• Exploring habits can reveal different facets of personality.
• Routines don't have to be work-related; they can encompass all aspects of life.
• The discussion on habits can lead to deeper insights about personal growth.
• The hosts share personal anecdotes related to their routines.
• Morning routines can set a positive tone for the day.
• Hydration is essential for overall health.
• Symbolic actions can provide mental clarity.
• Daily habits can help wash away past negativity.
• Social habits can lead to meaningful conversations.
• Bad habits often come with social stigma.
• Finding balance in habits is crucial for well-being.
• Every day offers a new opportunity for growth.
• Being transparent about habits can foster connection. Stress relief can come from various habits, but it's essential to evaluate their impact.
• Alcoholism can manifest in different ways, and personal choices play a significant role.
• Sugar addiction is a common struggle that many face.
• Financial planning can enhance intimacy in relationships by reducing stress.
• Preparing for help, like cleaning services, can create a smoother experience.
• Gratitude practices can shift perspective and enhance daily joy.
• Contentment is more valuable than material wealth.
• Distractions can lead to ungratefulness; intentional gratitude is necessary.
• Finding joy in simple things can lead to a more fulfilling life.
• It's important to recognize the gifts in our lives and appreciate them.

]]>3146contentment,daily-life,financial,gratitude,habits,humor,mental-health,morning-rituals,multifaceted,personal-growth,planning,relationships,routines,self-care,stress-relief,symbolismfalse134fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-33-navigating-the-assessment-landscape-pt-3--63109903In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into a serious discussion about access control policies, the role of IT in managing access, and the importance of user account reviews. They explore the risks associated with shared accounts and the significance of system and service accounts in cybersecurity. The episode concludes with a focus on authentication and password management, emphasizing the need for robust security practices. In this conversation, the participants discuss various aspects of organizational security, focusing on password policies, password management systems, encryption, mobile device security, remote work policies, and monitoring of remote connections. They reflect on the challenges and solutions related to these topics, emphasizing the importance of training, access control, and the need for clear policies to protect sensitive information.
 
Takeaways

• Access control policies are crucial for organizational security.
• IT plays a vital role in managing access requests and approvals.
• Regular reviews of user accounts are necessary to maintain security.
• Shared accounts pose significant security risks that need addressing.
• System and service accounts require careful inventory and review.
• Authentication processes must be secure to prevent impersonation.
• Training and awareness on password management are essential for employees.
• Policies should be clear and usable to enhance compliance.
• Transparency in assessments leads to better security outcomes. Changing password policies can be frustrating but necessary for security.
• Implementing a password management system can ease the burden on employees.
• Regular password changes can protect against potential breaches.
• Encryption is essential for protecting sensitive data in transit and at rest.
• Mobile devices should have enforced security measures like PINs.
• Remote work requires clear policies to protect organizational data.
• Monitoring remote connections is crucial for maintaining security.
• Regular assessments can help identify gaps in security practices.
• Collaboration between HR and IT is vital for effective training.
• Creating a culture of security awareness is important for all employees.

]]>https://api.spreaker.com/episode/63109903Mon, 02 Dec 2024 18:18:20 +0000SecurityStudioSummary In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into a serious discussion about access control policies, the role of IT in managing access, and the importance of user account reviews....In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into a serious discussion about access control policies, the role of IT in managing access, and the importance of user account reviews. They explore the risks associated with shared accounts and the significance of system and service accounts in cybersecurity. The episode concludes with a focus on authentication and password management, emphasizing the need for robust security practices. In this conversation, the participants discuss various aspects of organizational security, focusing on password policies, password management systems, encryption, mobile device security, remote work policies, and monitoring of remote connections. They reflect on the challenges and solutions related to these topics, emphasizing the importance of training, access control, and the need for clear policies to protect sensitive information.
 
Takeaways

• Access control policies are crucial for organizational security.
• IT plays a vital role in managing access requests and approvals.
• Regular reviews of user accounts are necessary to maintain security.
• Shared accounts pose significant security risks that need addressing.
• System and service accounts require careful inventory and review.
• Authentication processes must be secure to prevent impersonation.
• Training and awareness on password management are essential for employees.
• Policies should be clear and usable to enhance compliance.
• Transparency in assessments leads to better security outcomes. Changing password policies can be frustrating but necessary for security.
• Implementing a password management system can ease the burden on employees.
• Regular password changes can protect against potential breaches.
• Encryption is essential for protecting sensitive data in transit and at rest.
• Mobile devices should have enforced security measures like PINs.
• Remote work requires clear policies to protect organizational data.
• Monitoring remote connections is crucial for maintaining security.
• Regular assessments can help identify gaps in security practices.
• Collaboration between HR and IT is vital for effective training.
• Creating a culture of security awareness is important for all employees.

]]>3410accesscontrol,authentication,cybersecurity,employee-training,encryption,information-security,itmanagement,mobile-device-management,organizational-policies,password-management,passwordsecurity,remote-work,riskmanagement,securitypolicies,useraccountsfalse133fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-32-navigating-the-assessment-landscape-pt-2--62972933In this episode of the CvCISO Podcast, the hosts continue their assessment discussion, focusing on the roles of CEO, CFO, and VC. They explore the importance of separation of duties, risk management, and the impact of experience on wisdom. The conversation transitions into the assessment process, covering topics such as screening and background checks, security policies, employee monitoring, and training for privileged users. The hosts emphasize the need for awareness training and the significance of having a structured approach to security in small businesses. In this conversation, the speakers delve into various aspects of information security, focusing on the definitions and roles of privileged users, the importance of post-employment processes, and the management of assets and inventories. They discuss the need for formal information classification guidelines and the handling of removable media. The conversation also touches on the disposal of media, the inventory of cloud services, and the relationship between compliance and risk management, emphasizing the importance of foundational security practices over compliance minutiae.
 
Takeaways

• Separation of duties is crucial in risk management.
• Experience with pain can lead to wisdom.
• High turnover necessitates thorough background checks.
• Employee training should include security awareness.
• Privileged users require specialized training.
• Monitoring employees can help detect cybersecurity events.
• Transparency is key during technical difficulties.
• Assessments can reveal gaps in security practices.
• Risk acceptance is a legitimate strategy.
• Regular reviews of security policies are essential.
• All admins are considered privileged users.
• It's essential to define what constitutes a privileged user in an organization.
• A solid onboarding and offboarding process is crucial for security.
• Asset management includes both physical devices and software.
• Information classification should be formalized to enhance security.
• Removable media poses unique risks that need to be managed.
• Media disposal processes should be clearly defined and followed.
• Organizations often lack a complete inventory of cloud services.
• Compliance requirements can influence how assessments are conducted.
• It's important to focus on foundational security practices rather than compliance minutiae.

]]>https://api.spreaker.com/episode/62972933Sat, 23 Nov 2024 01:19:18 +0000SecurityStudioSummary In this episode of the CvCISO Podcast, the hosts continue their assessment discussion, focusing on the roles of CEO, CFO, and VC. They explore the importance of separation of duties, risk management, and the impact of experience on wisdom....In this episode of the CvCISO Podcast, the hosts continue their assessment discussion, focusing on the roles of CEO, CFO, and VC. They explore the importance of separation of duties, risk management, and the impact of experience on wisdom. The conversation transitions into the assessment process, covering topics such as screening and background checks, security policies, employee monitoring, and training for privileged users. The hosts emphasize the need for awareness training and the significance of having a structured approach to security in small businesses. In this conversation, the speakers delve into various aspects of information security, focusing on the definitions and roles of privileged users, the importance of post-employment processes, and the management of assets and inventories. They discuss the need for formal information classification guidelines and the handling of removable media. The conversation also touches on the disposal of media, the inventory of cloud services, and the relationship between compliance and risk management, emphasizing the importance of foundational security practices over compliance minutiae.
 
Takeaways

• Separation of duties is crucial in risk management.
• Experience with pain can lead to wisdom.
• High turnover necessitates thorough background checks.
• Employee training should include security awareness.
• Privileged users require specialized training.
• Monitoring employees can help detect cybersecurity events.
• Transparency is key during technical difficulties.
• Assessments can reveal gaps in security practices.
• Risk acceptance is a legitimate strategy.
• Regular reviews of security policies are essential.
• All admins are considered privileged users.
• It's essential to define what constitutes a privileged user in an organization.
• A solid onboarding and offboarding process is crucial for security.
• Asset management includes both physical devices and software.
• Information classification should be formalized to enhance security.
• Removable media poses unique risks that need to be managed.
• Media disposal processes should be clearly defined and followed.
• Organizations often lack a complete inventory of cloud services.
• Compliance requirements can influence how assessments are conducted.
• It's important to focus on foundational security practices rather than compliance minutiae.

]]>3250assessment,asset,awareness,backgroundchecks,cybersecurity,employeetraining,information,policies,post-employment,privileged,processes,riskmanagement,security,seperationofduties,usersfalse132fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-31-navigating-the-assessment-landscape-pt-1--62787993In this episode, the hosts engage in a mock assessment to explore the intricacies of conducting information security assessments. They discuss the importance of understanding risk management, setting expectations, and building rapport with clients. The conversation highlights the human factors involved in assessments, the significance of administrative controls, and the need for clear communication about policies and insurance. Through their dialogue, they aim to demystify the assessment process and provide insights into effective risk management strategies. In this conversation, the speakers discuss effective strategies for conducting assessments in information security, emphasizing the importance of not wasting executives' time and the need for clear communication. They share personal experiences and challenges faced during assessments, highlighting the significance of accountability and the necessity of a robust information security framework. The discussion also touches on the importance of learning from experiences and the value of maintaining a balance between technical expertise and people skills.

Takeaways 

• Assessments are a learning experience, not a performance.
• Different perspectives bring value to security assessments.
• It's important to set clear expectations for assessments.
• Risk management is a business issue, not just an IT issue.
• Building rapport is crucial for effective assessments.
• Honesty in responses leads to better outcomes.
• Administrative controls are often overlooked but essential.
• Handling discomfort during assessments is part of the process.
• Policies should be active and reviewed regularly.
• Cyber insurance is a critical component of risk management.
• Gather as much quality information as possible during assessments.
• Don't strive for perfection; it's normal to misunderstand questions.
• Follow-up questions are essential after the initial assessment.
• Expect that things will get lost in translation during assessments.
• It's important to set clear expectations with executives upfront.
• Learning from mistakes is a crucial part of the assessment process.
• Accountability in information security should be clearly defined.
• Building a task list post-assessment can help manage follow-ups.
• Communication skills are as important as technical knowledge in assessments.
• Emulating successful strategies while maintaining your own style is beneficial.

]]>https://api.spreaker.com/episode/62787993Mon, 18 Nov 2024 14:33:44 +0000SecurityStudioSummary In this episode, the hosts engage in a mock assessment to explore the intricacies of conducting information security assessments. They discuss the importance of understanding risk management, setting expectations, and building rapport with...In this episode, the hosts engage in a mock assessment to explore the intricacies of conducting information security assessments. They discuss the importance of understanding risk management, setting expectations, and building rapport with clients. The conversation highlights the human factors involved in assessments, the significance of administrative controls, and the need for clear communication about policies and insurance. Through their dialogue, they aim to demystify the assessment process and provide insights into effective risk management strategies. In this conversation, the speakers discuss effective strategies for conducting assessments in information security, emphasizing the importance of not wasting executives' time and the need for clear communication. They share personal experiences and challenges faced during assessments, highlighting the significance of accountability and the necessity of a robust information security framework. The discussion also touches on the importance of learning from experiences and the value of maintaining a balance between technical expertise and people skills.

Takeaways 

• Assessments are a learning experience, not a performance.
• Different perspectives bring value to security assessments.
• It's important to set clear expectations for assessments.
• Risk management is a business issue, not just an IT issue.
• Building rapport is crucial for effective assessments.
• Honesty in responses leads to better outcomes.
• Administrative controls are often overlooked but essential.
• Handling discomfort during assessments is part of the process.
• Policies should be active and reviewed regularly.
• Cyber insurance is a critical component of risk management.
• Gather as much quality information as possible during assessments.
• Don't strive for perfection; it's normal to misunderstand questions.
• Follow-up questions are essential after the initial assessment.
• Expect that things will get lost in translation during assessments.
• It's important to set clear expectations with executives upfront.
• Learning from mistakes is a crucial part of the assessment process.
• Accountability in information security should be clearly defined.
• Building a task list post-assessment can help manage follow-ups.
• Communication skills are as important as technical knowledge in assessments.
• Emulating successful strategies while maintaining your own style is beneficial.

]]>3136administrativecontrols,assessment,assessmentchallenges,business,communication,cybersecurity,executiveengagement,growth,informationsecurity,insurance,policies,riskmanagement,strategy,trustfalse131fullhttps://www.spreaker.com/episode/cvciso-podcast-episode-30-tips-and-tricks-for-your-first-assessment--62708787 
In this episode, the hosts share insights on overcoming intimidation, the value of community support, and practical tips for new assessors to build confidence and improve their skills. The conversation emphasizes the significance of being oneself and learning from experiences, even when they feel uncomfortable. In this engaging conversation, the speakers explore the importance of authenticity in assessments, the value of learning through experience, and the significance of mentorship in career progression. They share personal anecdotes that highlight the lessons learned from real-life scenarios, emphasizing the need for collaboration and continuous improvement in training programs. The discussion also touches on the future direction of their initiatives, including a risk assessment series, while maintaining a lighthearted tone with humor and insights.

Takeaways 

• Authenticity is crucial in assessments; just be yourself.
• It's normal to feel like an imposter, even with years of experience.
• Community support is vital for personal and professional growth.
• Expectations should be set at the beginning of assessments.
• Assessments should be conversational, not mechanical.
• Learning from mistakes is part of the growth process.
• Comfort zones can hinder growth; embrace discomfort.
• Practice assessments can help build confidence.
• Asking questions is a strength, not a weakness.
• Authenticity is key in assessments.
• Value is determined by the customer's perception.
• Learning through experience is invaluable.
• Mentorship is crucial for career progression.
• Mock interviews can help bridge skill gaps.
• Training should focus on practical application.
• Collaboration enhances learning outcomes.
• Continuous improvement is essential in programs.
• Humor can facilitate deeper discussions.
• Real-life scenarios provide the best learning opportunities.

]]>https://api.spreaker.com/episode/62708787Tue, 12 Nov 2024 18:57:15 +0000SecurityStudioSummary   In this episode, the hosts share insights on overcoming intimidation, the value of community support, and practical tips for new assessors to build confidence and improve their skills. The conversation emphasizes the significance of being... 
In this episode, the hosts share insights on overcoming intimidation, the value of community support, and practical tips for new assessors to build confidence and improve their skills. The conversation emphasizes the significance of being oneself and learning from experiences, even when they feel uncomfortable. In this engaging conversation, the speakers explore the importance of authenticity in assessments, the value of learning through experience, and the significance of mentorship in career progression. They share personal anecdotes that highlight the lessons learned from real-life scenarios, emphasizing the need for collaboration and continuous improvement in training programs. The discussion also touches on the future direction of their initiatives, including a risk assessment series, while maintaining a lighthearted tone with humor and insights.

Takeaways 

• Authenticity is crucial in assessments; just be yourself.
• It's normal to feel like an imposter, even with years of experience.
• Community support is vital for personal and professional growth.
• Expectations should be set at the beginning of assessments.
• Assessments should be conversational, not mechanical.
• Learning from mistakes is part of the growth process.
• Comfort zones can hinder growth; embrace discomfort.
• Practice assessments can help build confidence.
• Asking questions is a strength, not a weakness.
• Authenticity is key in assessments.
• Value is determined by the customer's perception.
• Learning through experience is invaluable.
• Mentorship is crucial for career progression.
• Mock interviews can help bridge skill gaps.
• Training should focus on practical application.
• Collaboration enhances learning outcomes.
• Continuous improvement is essential in programs.
• Humor can facilitate deeper discussions.
• Real-life scenarios provide the best learning opportunities.

]]>2425assessments,authenticity,careerprogression,collaboration,communitysupport,confidence,cybersecurity,experientiallearning,mentorship,personalgrowth,professionaldevelopment,riskmanagement,valuefalse1fullhttps://www.spreaker.com/episode/episode-29-keeping-it-real-the-scary-side-of-vciso-work--62542726In this episode, the hosts discuss the scary aspects of being a Virtual Chief Information Security Officer (vCISO), including the challenges of limited control and high accountability, navigating client expectations, and the constantly shifting threat landscape. They emphasize the importance of understanding roles and responsibilities, combating fear with knowledge, and the value of community support in the cybersecurity field. In this conversation, the speakers delve into the complexities of professional roles in cybersecurity, emphasizing the importance of authenticity, the pressure to justify one's value, and the realities of on-call responsibilities. They discuss the inevitability of breaches and the necessity of preparation, as well as the legal and regulatory challenges that professionals face in the industry. The dialogue highlights the need for self-reflection, accountability, and the importance of having a solid plan in place to navigate these challenges effectively.

Takeaways 

• Being a vCISO involves limited control but high accountability.
• Clients often expect VCSOs to make decisions, which can be frustrating
• Clear communication about roles and responsibilities is crucial.
• The threat landscape is constantly changing, but fundamentals remain the same.
• Education and preparation can alleviate fears about breaches.
• Documentation is important for accountability and clarity.
• Community support is vital for staying informed and reducing anxiety.
• Understanding context helps combat fear in cybersecurity.
• It's okay not to know everything; collaboration is key.
• Staying focused on fundamentals helps navigate distractions.  Admit when you don't know something; it's an opportunity for education.
• The biggest need in cybersecurity is not technical skills, but people skills.
• Constantly question your value and how you provide it.
• It's essential to communicate your contributions to clients regularly.
• Being on call should be expected if it's part of your role.
• Breaches are inevitable; preparation is key.
• Understanding the threat landscape reduces fear of breaches.
• Legal accountability in cybersecurity is often lacking.
• Document your decisions to protect against negligence claims.
• Self-reflection is crucial in understanding your response to pressure.

]]>https://api.spreaker.com/episode/62542726Thu, 31 Oct 2024 15:00:02 +0000SecurityStudioSummary In this episode, the hosts discuss the scary aspects of being a Virtual Chief Information Security Officer (vCISO), including the challenges of limited control and high accountability, navigating client expectations, and the constantly...In this episode, the hosts discuss the scary aspects of being a Virtual Chief Information Security Officer (vCISO), including the challenges of limited control and high accountability, navigating client expectations, and the constantly shifting threat landscape. They emphasize the importance of understanding roles and responsibilities, combating fear with knowledge, and the value of community support in the cybersecurity field. In this conversation, the speakers delve into the complexities of professional roles in cybersecurity, emphasizing the importance of authenticity, the pressure to justify one's value, and the realities of on-call responsibilities. They discuss the inevitability of breaches and the necessity of preparation, as well as the legal and regulatory challenges that professionals face in the industry. The dialogue highlights the need for self-reflection, accountability, and the importance of having a solid plan in place to navigate these challenges effectively.

Takeaways 

• Being a vCISO involves limited control but high accountability.
• Clients often expect VCSOs to make decisions, which can be frustrating
• Clear communication about roles and responsibilities is crucial.
• The threat landscape is constantly changing, but fundamentals remain the same.
• Education and preparation can alleviate fears about breaches.
• Documentation is important for accountability and clarity.
• Community support is vital for staying informed and reducing anxiety.
• Understanding context helps combat fear in cybersecurity.
• It's okay not to know everything; collaboration is key.
• Staying focused on fundamentals helps navigate distractions.  Admit when you don't know something; it's an opportunity for education.
• The biggest need in cybersecurity is not technical skills, but people skills.
• Constantly question your value and how you provide it.
• It's essential to communicate your contributions to clients regularly.
• Being on call should be expected if it's part of your role.
• Breaches are inevitable; preparation is key.
• Understanding the threat landscape reduces fear of breaches.
• Legal accountability in cybersecurity is often lacking.
• Document your decisions to protect against negligence claims.
• Self-reflection is crucial in understanding your response to pressure.

]]>2425accountability,authenticity,breach,clientexpectations,community,cybersecurity,justification,legal,on-call,preparedness,responsibilities,riskmanagement,roles,support,threatlandscape,value,vcisofalse129fullhttps://www.spreaker.com/episode/episode-28-truth-or-myth--62501758In this episode, the hosts engage in a lively discussion about various statements related to cybersecurity, exploring whether they are truths or myths. They delve into the costs associated with cybersecurity, the role of VCISOs, the importance of communication in cybersecurity, and the relevance of the CVCISO course. The conversation emphasizes the need for a proper understanding of cybersecurity's value and the fun aspects of being a VCISO. In this conversation, the speakers discuss the importance of finding joy in work, the misconceptions surrounding cybersecurity responsibilities, the vulnerability of small businesses to cyber threats, and the critical role of leadership in organizational success. They emphasize the need for authenticity, mental health awareness, and the significance of creating a positive work environment.

Takeaways 

• Cybersecurity costs can be perspective-based and context-dependent.
• Understanding your cybersecurity budget is crucial for effective risk management.
• The role of a VCISO is to consult and influence decision-making in organizations.
• Communication with the CEO is essential for a VCISO's effectiveness.
• The CVCISO course is open to anyone interested in information security leadership.
• Creating a culture around information security can help justify budgets.
• Fun and excitement in cybersecurity can lead to better engagement and results.
• Risk management is a critical aspect of cybersecurity that should not be overlooked.
• The importance of having a seat at the table for cybersecurity discussions.
• Building trust and credibility is essential for a VCISO's success. Finding fun in work can enhance customer loyalty.
• Burnout is a significant issue in the cybersecurity field.
• You cannot outsource ultimate responsibility for cybersecurity.
• Small businesses are often targeted by cyber attackers.
• Leadership is crucial for organizational success.
• Authenticity in the workplace can reduce burnout.
• Mental health challenges are prevalent in high-stress jobs.
• Creating a fun work environment can improve morale.
• Understanding your vulnerabilities is key to cybersecurity.
• Investing in leadership development is essential for growth.

]]>https://api.spreaker.com/episode/62501758Fri, 25 Oct 2024 13:29:47 +0000SecurityStudioSummary In this episode, the hosts engage in a lively discussion about various statements related to cybersecurity, exploring whether they are truths or myths. They delve into the costs associated with cybersecurity, the role of VCISOs, the...In this episode, the hosts engage in a lively discussion about various statements related to cybersecurity, exploring whether they are truths or myths. They delve into the costs associated with cybersecurity, the role of VCISOs, the importance of communication in cybersecurity, and the relevance of the CVCISO course. The conversation emphasizes the need for a proper understanding of cybersecurity's value and the fun aspects of being a VCISO. In this conversation, the speakers discuss the importance of finding joy in work, the misconceptions surrounding cybersecurity responsibilities, the vulnerability of small businesses to cyber threats, and the critical role of leadership in organizational success. They emphasize the need for authenticity, mental health awareness, and the significance of creating a positive work environment.

Takeaways 

• Cybersecurity costs can be perspective-based and context-dependent.
• Understanding your cybersecurity budget is crucial for effective risk management.
• The role of a VCISO is to consult and influence decision-making in organizations.
• Communication with the CEO is essential for a VCISO's effectiveness.
• The CVCISO course is open to anyone interested in information security leadership.
• Creating a culture around information security can help justify budgets.
• Fun and excitement in cybersecurity can lead to better engagement and results.
• Risk management is a critical aspect of cybersecurity that should not be overlooked.
• The importance of having a seat at the table for cybersecurity discussions.
• Building trust and credibility is essential for a VCISO's success. Finding fun in work can enhance customer loyalty.
• Burnout is a significant issue in the cybersecurity field.
• You cannot outsource ultimate responsibility for cybersecurity.
• Small businesses are often targeted by cyber attackers.
• Leadership is crucial for organizational success.
• Authenticity in the workplace can reduce burnout.
• Mental health challenges are prevalent in high-stress jobs.
• Creating a fun work environment can improve morale.
• Understanding your vulnerabilities is key to cybersecurity.
• Investing in leadership development is essential for growth.

]]>3039authenticity,burnout,communication,costs,cvciso,cybersecurity,information-security,leadership,loyalty,mental-health,risk-management,smb,vcisofalse128fullhttps://www.spreaker.com/episode/episode-27-handling-objections-as-a-vciso--62403972In this episode of the CvCISO Podcast, hosts Evan, Jordon, and Meg engage in a lively discussion about overcoming objections in vCISO consulting, the importance of framing security in business terms, and leveraging data to support their recommendations. They also touch on personal challenges and the role of emotional intelligence in navigating objections, emphasizing the need for clear communication and understanding the root causes of objections. In this engaging conversation, the speakers explore various themes including the importance of humor in communication, the need for flexibility and challenging ideas, and the significance of building credibility through quick wins. They discuss strategies for anticipating objections, utilizing emotional intelligence, and focusing on long-term gains. The conversation also emphasizes the value of engaging champions and allies within organizations.

Takeaways

• Understanding the root cause of objections is crucial.
• Framing security recommendations in business terms can enhance acceptance.
• Using data and case studies strengthens arguments in consulting.
• Emotional intelligence helps in managing objections effectively.
• Building trust is essential for successful consulting relationships.
• Anticipating objections can prepare you for discussions.
• Clear communication is key to overcoming resistance.
• Different stakeholders may require different approaches to decision-making.
• It's important to separate personal feelings from professional objections.
• Continuous learning from experiences enhances consulting skills. Humor can enhance conversations and make them more engaging.
• Challenging ideas is essential for growth and understanding.
• Flexibility in presenting solutions is crucial.
• Building credibility often comes from achieving quick wins.
• Anticipating objections can prepare you for better discussions.
• Emotional intelligence plays a key role in effective communication.
• Focusing on long-term gains can outweigh short-term costs.
• Engaging champions within an organization can facilitate change.
• Staying solution-oriented helps maintain focus during discussions.

]]>https://api.spreaker.com/episode/62403972Fri, 18 Oct 2024 15:56:46 +0000SecurityStudioSUMMARY In this episode of the CvCISO Podcast, hosts Evan, Jordon, and Meg engage in a lively discussion about overcoming objections in vCISO consulting, the importance of framing security in business terms, and leveraging data to support their...In this episode of the CvCISO Podcast, hosts Evan, Jordon, and Meg engage in a lively discussion about overcoming objections in vCISO consulting, the importance of framing security in business terms, and leveraging data to support their recommendations. They also touch on personal challenges and the role of emotional intelligence in navigating objections, emphasizing the need for clear communication and understanding the root causes of objections. In this engaging conversation, the speakers explore various themes including the importance of humor in communication, the need for flexibility and challenging ideas, and the significance of building credibility through quick wins. They discuss strategies for anticipating objections, utilizing emotional intelligence, and focusing on long-term gains. The conversation also emphasizes the value of engaging champions and allies within organizations.

Takeaways

• Understanding the root cause of objections is crucial.
• Framing security recommendations in business terms can enhance acceptance.
• Using data and case studies strengthens arguments in consulting.
• Emotional intelligence helps in managing objections effectively.
• Building trust is essential for successful consulting relationships.
• Anticipating objections can prepare you for discussions.
• Clear communication is key to overcoming resistance.
• Different stakeholders may require different approaches to decision-making.
• It's important to separate personal feelings from professional objections.
• Continuous learning from experiences enhances consulting skills. Humor can enhance conversations and make them more engaging.
• Challenging ideas is essential for growth and understanding.
• Flexibility in presenting solutions is crucial.
• Building credibility often comes from achieving quick wins.
• Anticipating objections can prepare you for better discussions.
• Emotional intelligence plays a key role in effective communication.
• Focusing on long-term gains can outweigh short-term costs.
• Engaging champions within an organization can facilitate change.
• Staying solution-oriented helps maintain focus during discussions.

]]>3599business,communication,consulting,credibility,data-driven,emotional-intelligence,flexibility,gains,information-security,infosec,objections,overcoming,podcast,risk-management,security,vcisofalse127fullhttps://www.spreaker.com/episode/episode-26-is-the-cvciso-program-credible--62303752
The hosts also highlight the need for collaboration within the industry and the role of local chapters in enhancing the program's credibility. Ultimately, they conclude that the CvCISO certification is credible due to its practical application and the success stories of its participants.  

Takeaways

• CvCISO certification is valuable for career growth.
• Community ownership enhances the credibility of the certification.
• Real-world application is crucial for credibility.
• Experience is more important than letters behind your name.
• Authenticity and transparency are vital in the industry.
• Local chapters contribute to the program's credibility.
• Collaboration among industry professionals is essential.
• The CvCISO program focuses on practical application.
• Credibility is built through successful implementation.
• The program is designed to serve clients' best interests.

]]>https://api.spreaker.com/episode/62303752Wed, 09 Oct 2024 20:23:25 +0000SecurityStudioIn this episode, Jordon, Meg, and Evan discuss the credibility of the CvCISO certification with special guest Lyle Melnychuk. They explore the value of the certification, the importance of community support, and the real-world application of the...
The hosts also highlight the need for collaboration within the industry and the role of local chapters in enhancing the program's credibility. Ultimately, they conclude that the CvCISO certification is credible due to its practical application and the success stories of its participants.  

Takeaways

• CvCISO certification is valuable for career growth.
• Community ownership enhances the credibility of the certification.
• Real-world application is crucial for credibility.
• Experience is more important than letters behind your name.
• Authenticity and transparency are vital in the industry.
• Local chapters contribute to the program's credibility.
• Collaboration among industry professionals is essential.
• The CvCISO program focuses on practical application.
• Credibility is built through successful implementation.
• The program is designed to serve clients' best interests.

]]>4137certification,community,credibility,cvciso,industrystandards,informationsecurity,professionaldevelopment,riskmanagement,training,vcisofalsefullhttps://www.spreaker.com/episode/episode-25-understanding-the-role-of-vciso--62271441
The conversation emphasizes the empowerment of business owners to make informed decisions about their security practices, moving beyond mere compliance to a more holistic risk management strategy.

Takeaways

• Talking with friends can improve mental health.
• Physical health impacts mental well-being.
• Ruts in life are common and relatable.
• Psychoanalyzing others can lead to misunderstandings.
• Compliance is about following orders, not understanding risks.
• Information security should focus on risk management.
• Complacency can arise from a focus on compliance.
• Empowerment in decision-making is crucial for business owners.
• Education in security is essential for informed decisions.
• The relationship between VCISO and clients is vital for success.

]]>https://api.spreaker.com/episode/62271441Mon, 07 Oct 2024 15:09:48 +0000SecurityStudioIn this episode of the CvCISO Podcast, hosts Evan, Meg, and Jordon engage in a candid discussion about mental health, the role of a Virtual Chief Information Security Officer (vCISO), and the critical distinction between compliance and risk management...
The conversation emphasizes the empowerment of business owners to make informed decisions about their security practices, moving beyond mere compliance to a more holistic risk management strategy.

Takeaways

• Talking with friends can improve mental health.
• Physical health impacts mental well-being.
• Ruts in life are common and relatable.
• Psychoanalyzing others can lead to misunderstandings.
• Compliance is about following orders, not understanding risks.
• Information security should focus on risk management.
• Complacency can arise from a focus on compliance.
• Empowerment in decision-making is crucial for business owners.
• Education in security is essential for informed decisions.
• The relationship between VCISO and clients is vital for success.

]]>3652business,compliance,consulting,cvciso,cybersecurity,education,health,information,infosec,management,mental,mentalhealth,podcast,risk,security,vcisofalse125fullhttps://www.spreaker.com/episode/episode-24-communication-trust-and-authenticity--62155240
Takeaways

• Always consider your audience when communicating.
• Trust is essential for effective communication.
• Authenticity leads to stronger relationships.
• Empathy is crucial in understanding different perspectives.
• Words have power; choose them wisely.
• Navigating professional parameters requires awareness.
• Vulnerability can inspire others to open up.
• Transparency can prevent misunderstandings.
• Judgment can hinder personal growth and change.
• Investing in personal development benefits all areas of life.

]]>https://api.spreaker.com/episode/62155240Sun, 29 Sep 2024 16:40:24 +0000SecurityStudioIn this episode, the Evan, Meg, and Jordon engage in a deep conversation about the importance of communication, trust, and authenticity in both personal and professional relationships. They explore how understanding one's audience and being aware of...
Takeaways

• Always consider your audience when communicating.
• Trust is essential for effective communication.
• Authenticity leads to stronger relationships.
• Empathy is crucial in understanding different perspectives.
• Words have power; choose them wisely.
• Navigating professional parameters requires awareness.
• Vulnerability can inspire others to open up.
• Transparency can prevent misunderstandings.
• Judgment can hinder personal growth and change.
• Investing in personal development benefits all areas of life.

]]>3274audience,authenticity,awareness,communication,cvciso,cybersecurity,emotional,empathy,growth,informationsecurity,infosec,intelligence,personal,relationships,transparency,trust,vciso,vulnerabilityfalse124fullhttps://www.spreaker.com/episode/episode-23-radical-acceptance-and-mental-health--62049886
Takeaways

• Radical acceptance is about accepting reality, not agreeing with it.
• Stigma around mental health can prevent open discussions.
• Self-acceptance is crucial for personal growth.
• Guilt holds you back, while conviction propels you forward.
• You can only change yourself, not others.
• Radical acceptance can help break the cycle of ruminating thoughts.
• Mental health issues are common and should be openly discussed.
• Acceptance can lead to a deeper calmness after initial sadness.
• The connection between acceptance and change is vital for growth.
• Creating a safe space for mental health discussions is essential.

]]>https://api.spreaker.com/episode/62049886Fri, 20 Sep 2024 21:51:30 +0000SecurityStudioIn Episode 23 of the CvCISO Podcast, hosts Meg, Evan, and Jordon discuss the concept of radical acceptance and its implications for mental health. They explore how radical acceptance can help individuals cope with their realities, the stigma...
Takeaways

• Radical acceptance is about accepting reality, not agreeing with it.
• Stigma around mental health can prevent open discussions.
• Self-acceptance is crucial for personal growth.
• Guilt holds you back, while conviction propels you forward.
• You can only change yourself, not others.
• Radical acceptance can help break the cycle of ruminating thoughts.
• Mental health issues are common and should be openly discussed.
• Acceptance can lead to a deeper calmness after initial sadness.
• The connection between acceptance and change is vital for growth.
• Creating a safe space for mental health discussions is essential.

]]>2250acceptance,awareness,ciso,conviction,cvciso,cybersecurity,development,emotional,growth,guilt,health,informationsecurity,mental,personal,professional,radical,self-acceptance,stigma,vciso,well-beingfalse123fullhttps://www.spreaker.com/episode/episode-22-recent-s2-changes-clarifying-infosec-definitions--61470100
This is Jordon's topic this week, and he decided to play a game of sorts. He chooses a common information security term or buzzword, Evan and Meg give their definitions of the term/buzzword, then he compares our definitions to what ChatGPT says. The terms/buzzwords he chose were "Zero Trust", "Pentesting", "Nextgen", and "Threat Hunting". The perspectives shared by the CvCISO Podcast crew might be enlightening, but they're certainly entertaining!

See how your definitions compare to theirs and ChatGPT's.

To learn more about the CvCISO Program, visit: https://www.securitystudio.com/academy]]>https://api.spreaker.com/episode/61470100Tue, 17 Sep 2024 19:05:12 +0000SecurityStudioIn this conversation, Evan, Jordon, and Meg discuss the recent changes at Security Studio and attempt to define some common information security terms/buzzwords. This is Jordon's topic this week, and he decided to play a game of sorts. He chooses a...
This is Jordon's topic this week, and he decided to play a game of sorts. He chooses a common information security term or buzzword, Evan and Meg give their definitions of the term/buzzword, then he compares our definitions to what ChatGPT says. The terms/buzzwords he chose were "Zero Trust", "Pentesting", "Nextgen", and "Threat Hunting". The perspectives shared by the CvCISO Podcast crew might be enlightening, but they're certainly entertaining!

See how your definitions compare to theirs and ChatGPT's.

To learn more about the CvCISO Program, visit: https://www.securitystudio.com/academy]]>4169ciso,cvciso,cybersecurity,informationsecurity,nextgen,pentesting,security,securitystudio,threathunting,vciso,zerotrustfalse122fullhttps://www.spreaker.com/episode/episode-21-events-incidents-breaches-and-compromises--61566034Evan, Meg, and Jordon in this engaging episode of the CvCISO Podcast as they explore critical topics in information security, including the definitions and distinctions between events, incidents, breaches, and compromises, and how aligning these definitions with clients and stakeholders is vital for clear communication.
 
The discussion moves into personal experiences with intrusion detection systems, the challenges of false positives, and the process of fine-tuning these systems for better situational awareness. Along the way, they highlight how precision and clarity in incident response can prevent misunderstandings and help build trust within organizations.
 
In a deeply personal turn, the hosts touch on the impact of shame and stigma surrounding security incidents in the cybersecurity community, underscoring the need for empathy, understanding, and a supportive environment to foster better mental health.
 
Key Takeaways:

• Authentic conversations are crucial for both mental health and personal growth.
• Defining and agreeing on security terms, such as events, incidents, and breaches, is essential for effective communication.
• Tuning intrusion detection systems is challenging but necessary for gaining valuable insights and increasing situational awareness.
• False positives can complicate cybersecurity efforts, making context crucial in evaluating the severity of incidents.
• Situational awareness is key to protecting networks and responding to incidents effectively.
• Clear communication and documentation prevent misunderstandings and ensure everyone is on the same page during incident response.
• Shame and stigma in cybersecurity can prevent individuals from seeking help or reporting incidents—creating a culture of support is essential.

Whether you’re a seasoned vCISO or new to cybersecurity, this episode is packed with insights, real-world experiences, and practical advice for aligning security practices with human connection and clarity. Don’t miss it!
 
Lastly, Evan announces the upcoming launch of his new podcast, Infosec to Insanity (link: https://evanfrancen.com/podcast).]]>https://api.spreaker.com/episode/61566034Sat, 14 Sep 2024 06:37:23 +0000SecurityStudioJoin hosts Evan, Meg, and Jordon in this engaging episode of the CvCISO Podcast as they explore critical topics in information security, including the definitions and distinctions between events, incidents, breaches, and compromises, and how aligning...Evan, Meg, and Jordon in this engaging episode of the CvCISO Podcast as they explore critical topics in information security, including the definitions and distinctions between events, incidents, breaches, and compromises, and how aligning these definitions with clients and stakeholders is vital for clear communication.
 
The discussion moves into personal experiences with intrusion detection systems, the challenges of false positives, and the process of fine-tuning these systems for better situational awareness. Along the way, they highlight how precision and clarity in incident response can prevent misunderstandings and help build trust within organizations.
 
In a deeply personal turn, the hosts touch on the impact of shame and stigma surrounding security incidents in the cybersecurity community, underscoring the need for empathy, understanding, and a supportive environment to foster better mental health.
 
Key Takeaways:

• Authentic conversations are crucial for both mental health and personal growth.
• Defining and agreeing on security terms, such as events, incidents, and breaches, is essential for effective communication.
• Tuning intrusion detection systems is challenging but necessary for gaining valuable insights and increasing situational awareness.
• False positives can complicate cybersecurity efforts, making context crucial in evaluating the severity of incidents.
• Situational awareness is key to protecting networks and responding to incidents effectively.
• Clear communication and documentation prevent misunderstandings and ensure everyone is on the same page during incident response.
• Shame and stigma in cybersecurity can prevent individuals from seeking help or reporting incidents—creating a culture of support is essential.

Whether you’re a seasoned vCISO or new to cybersecurity, this episode is packed with insights, real-world experiences, and practical advice for aligning security practices with human connection and clarity. Don’t miss it!
 
Lastly, Evan announces the upcoming launch of his new podcast, Infosec to Insanity (link: https://evanfrancen.com/podcast).]]>3319awareness,breach,ciso,communication,compromise,cvciso,cybersecurity,definitions,detection,incident,incidentresponse,informationsecurity,intrusion,intrusiondetection,security,vcisofalse121fullhttps://www.spreaker.com/episode/episode-20-taking-the-non-technical-path--61210008
To learn more about Minerva Consulting, visit: https://minervaconsultinginc.com/

To learn more about the CvCISO Program, visit: https://www.securitystudio.com/academy]]>https://api.spreaker.com/episode/61210008Fri, 30 Aug 2024 14:08:58 +0000SecurityStudioIn this episode of the CvCISO Podcast, Evan and Meg sit down with Sonal Chandler, founder of Minerva Consulting, to discuss her journey into cybersecurity as a non-technical professional. Sonal shares how she built credibility through certifications...
To learn more about Minerva Consulting, visit: https://minervaconsultinginc.com/

To learn more about the CvCISO Program, visit: https://www.securitystudio.com/academy]]>3500cyberconsulting,cybersecurity,informationsecurity,vciso,vcisoconsultingfalse120fullhttps://www.spreaker.com/episode/episode-19-the-art-of-likability--61118890
To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>https://api.spreaker.com/episode/61118890Fri, 23 Aug 2024 13:00:02 +0000SecurityStudioIn this episode of the CvCISO Podcast, hosts Meg, Jordon, and Evan explore how likability plays a crucial role in building strong relationships. They discuss essential strategies such as active listening, being fully engaged, and showing authentic...
To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>3466consulting,cvciso,cybersecurity,informationsecurity,vcisofalse119fullhttps://www.spreaker.com/episode/episode-18-cvciso-training-program-plans-updates--61045126
To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>https://api.spreaker.com/episode/61045126Fri, 16 Aug 2024 13:00:09 +0000SecurityStudioIn this episode, Jordon, Evan, and Meg cover a range of topics, from personal hobbies like attending concerts, painting, fishing, and watching dog movies, to Evan’s plans for a puppy party while his wife is away. They also dive into important updates...
To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>3670community,consulting,cvciso,cybersecurity,informationsecurity,vcisofalse118fullhttps://www.spreaker.com/episode/episode-17-finding-your-niche-in-the-cybersecurity-industry--60969867
To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>https://api.spreaker.com/episode/60969867Fri, 09 Aug 2024 14:45:01 +0000SecurityStudioIn this episode, our hosts sit down with cybersecurity experts Lyle Melnychuk and Brian Gibbs to discuss their journeys from traditional IT roles to cybersecurity leadership. They delve into the challenges of making this transition, the critical role...
To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>3931ciso,cybersecurity,informationsecurity,vciso,vcisotrainingfalse17fullhttps://www.spreaker.com/episode/episode-16-the-power-of-mentorship-community-in-cybersecurity--60888623
Key topics include the importance of security in information management, practical experience in policy management and communication, the enjoyment of conducting assessments, and balancing availability with security. The conversation also highlights the need for continuous learning and collaboration in the cybersecurity community and encourages individuals to take ownership of their careers and challenge the status quo.

Tune in for valuable insights on building a supportive cybersecurity community and successfully transitioning to InfoSec.

To learn more about the CvCISO Program, visit: https://securitystudio.com/academy
]]>https://api.spreaker.com/episode/60888623Fri, 02 Aug 2024 13:00:04 +0000SecurityStudioIn this episode, our hosts and special guests explore the crucial role of mentorship and community in the cybersecurity industry. They address the challenges faced when transitioning from IT to InfoSec, emphasizing the importance of support,...
Key topics include the importance of security in information management, practical experience in policy management and communication, the enjoyment of conducting assessments, and balancing availability with security. The conversation also highlights the need for continuous learning and collaboration in the cybersecurity community and encourages individuals to take ownership of their careers and challenge the status quo.

Tune in for valuable insights on building a supportive cybersecurity community and successfully transitioning to InfoSec.

To learn more about the CvCISO Program, visit: https://securitystudio.com/academy
]]>2774cvciso,cybersecurity,cybersecurityconsutling,informationsecurity,vcisofalse16fullhttps://www.spreaker.com/episode/episode-15-the-challenges-and-rewards-of-being-a-virtual-ciso--60805613
Throughout the conversation, Greg emphasizes the significance of having a clear purpose and mission in information security, especially for those helping small and mid-sized businesses (SMBs).

He discusses his book, "Information Security for Small and Mid-sized Businesses," and underscores the value of staying mission-focused rather than being driven by monetary gains. 

Links referred to in the episode: 
https://vcisoservices.com/
The Virtual CISO Moment: https://www.youtube.com/channel/UCEXU-7bLJKY5WPEd7N3afSg
"Information Security for Small and Mid-sized Businesses" Book: https://www.amazon.com/Information-Security-Small-Midsized-Businesses/dp/1733066861?source=ps-sl-shoppingads-lpcontext&ref_=fplfs&psc=1&smid=ATVPDKIKX0DER

To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>https://api.spreaker.com/episode/60805613Fri, 26 Jul 2024 13:00:04 +0000SecurityStudioIn this episode, Evan Francen and Meg Perron sit down with Greg Schaffer, a seasoned virtual Chief Information Security Officer (vCISO) and the host of the Virtual CISO Podcast. Together, they delve into the critical pillars of trust, credibility, and...
Throughout the conversation, Greg emphasizes the significance of having a clear purpose and mission in information security, especially for those helping small and mid-sized businesses (SMBs).

He discusses his book, "Information Security for Small and Mid-sized Businesses," and underscores the value of staying mission-focused rather than being driven by monetary gains. 

Links referred to in the episode: 
https://vcisoservices.com/
The Virtual CISO Moment: https://www.youtube.com/channel/UCEXU-7bLJKY5WPEd7N3afSg
"Information Security for Small and Mid-sized Businesses" Book: https://www.amazon.com/Information-Security-Small-Midsized-Businesses/dp/1733066861?source=ps-sl-shoppingads-lpcontext&ref_=fplfs&psc=1&smid=ATVPDKIKX0DER

To learn more about the CvCISO Program, visit: https://securitystudio.com/academy]]>3824ciso,cybersecurityconsulting,informationsecurity,vcisofalse15fullhttps://www.spreaker.com/episode/episode-14-decoding-cybersecurity-leadership-fractional-ciso-vs-vciso--60734473
What exactly distinguishes a fractional CISO from a vCISO? How do these roles impact organizations differently? Our hosts and guests explore how these roles differ in scope, engagement models, and strategic alignment within organizations. Discover the unique advantages each role offers.

To learn more about the CvCISO program, visit: https://www.securitystudio.com/academy/academy-overview
]]>https://api.spreaker.com/episode/60734473Fri, 19 Jul 2024 14:26:35 +0000SecurityStudioIn this episode, our hosts tackle the world of cybersecurity leadership with special guests Brent Forrest and Lyle Melnychuk. They bring their extensive experience to the table to dissect and differentiate between two crucial roles: the fractional...
What exactly distinguishes a fractional CISO from a vCISO? How do these roles impact organizations differently? Our hosts and guests explore how these roles differ in scope, engagement models, and strategic alignment within organizations. Discover the unique advantages each role offers.

To learn more about the CvCISO program, visit: https://www.securitystudio.com/academy/academy-overview
]]>3347cvciso,cybersecurity,fractionalciso,informationsecurity,vciso,vcisoconsultingfalse14fullhttps://www.spreaker.com/episode/episode-13-get-yourself-a-kevin-mastering-the-transition-to-a-successful-vciso-role--60609204
Through sharing their own experiences, the hosts offer valuable advice for those contemplating a career change to vCISO. They highlight the importance of having a clear purpose, commitment, and vision, as well as the necessity of a strong support system. The idea of finding a 'Kevin'—a trusted partner or team member to complement your strengths—is explored. Additionally, the episode covers understanding the market, aligning with your target audience, and delivering value by addressing their security challenges.

Tune in to gain insights into becoming a successful vCISO and navigating this dynamic role with purpose and confidence.

To learn more about the CvCISO program visit: https://www.securitystudio.com/academy/
]]>https://api.spreaker.com/episode/60609204Fri, 05 Jul 2024 13:15:28 +0000SecurityStudioIn this episode, our hosts discuss the transition to a Virtual Chief Security Officer (vCISO) role. They discuss the motivations behind choosing a vCISO career and the key factors to consider when making this shift. Learn about the unique benefits of...
Through sharing their own experiences, the hosts offer valuable advice for those contemplating a career change to vCISO. They highlight the importance of having a clear purpose, commitment, and vision, as well as the necessity of a strong support system. The idea of finding a 'Kevin'—a trusted partner or team member to complement your strengths—is explored. Additionally, the episode covers understanding the market, aligning with your target audience, and delivering value by addressing their security challenges.

Tune in to gain insights into becoming a successful vCISO and navigating this dynamic role with purpose and confidence.

To learn more about the CvCISO program visit: https://www.securitystudio.com/academy/
]]>2961business,consulting,cybersecurity,informationsecurity,transitioningrole,vcisofalse13fullhttps://www.spreaker.com/episode/episode-12-convenience-vs-security--60538593
The hosts also address how businesses can responsibly leverage technology, simplify processes, and prioritize impactful measures. Key takeaways include the need for transparent handling of data breaches, the importance of responsible data management, and actionable strategies to enhance data security.

Tune in for a candid discussion on balancing security, transparency, and the practical application of technology in today's business landscape.

For more information on the CvCISO Program, visit https://www.cvciso.com]]>https://api.spreaker.com/episode/60538593Fri, 28 Jun 2024 13:45:44 +0000SecurityStudioIn this episode, Evan and Jordon explore the tension between convenience and security, and the common resistance to stronger security practices. They dive into the recent Snowflake breach, scrutinizing the company's lack of transparency and...
The hosts also address how businesses can responsibly leverage technology, simplify processes, and prioritize impactful measures. Key takeaways include the need for transparent handling of data breaches, the importance of responsible data management, and actionable strategies to enhance data security.

Tune in for a candid discussion on balancing security, transparency, and the practical application of technology in today's business landscape.

For more information on the CvCISO Program, visit https://www.cvciso.com]]>2888breach,cybersecurity,informationsecurity,multi-factorauthentication,securityfalse12fullhttps://www.spreaker.com/episode/episode-11-leading-through-organizational-change--60384990
To learn more about the CvCISO program visit: https://cvciso.com ]]>https://api.spreaker.com/episode/60384990Fri, 14 Jun 2024 13:54:33 +0000SecurityStudioIn this episode, Evan Francen, Meg Perron, Jordon Darling, and special guest Jim Perron work through the nuances of leading through organizational change. They explore the importance of aligning leadership with the business’s mission and language,...
To learn more about the CvCISO program visit: https://cvciso.com ]]>3443consulting,csuite,cybersecurity,informationsecurity,leadership,organizationalchange,vcisofalse11fullhttps://www.spreaker.com/episode/episode-10-all-about-mentorship--60287291
For more information on the CvCISO program visit: https://cvciso.com]]>https://api.spreaker.com/episode/60287291Fri, 07 Jun 2024 13:00:03 +0000SecurityStudioIn this episode, Jordon Darling and Evan Francen explore the power of mentorship and the role it plays in personal and professional development. They discuss the qualities of a good mentor, the spectrum of mentorship, and the importance of setting an...
For more information on the CvCISO program visit: https://cvciso.com]]>2209authenticity,mentor,mentorship,vciso,vcisotrainingfalse10fullhttps://www.spreaker.com/episode/episode-9-mental-health-awareness-for-vcisos--60155013
Our conversation also tackles the often-overlooked impact of technology on mental health, highlighting the adverse effects of social media and the constant bombardment of current events. We wrap up with practical advice on practicing gratitude, using positive affirmations, and taking essential breaks from screens to maintain mental balance.

Tune in to discover how open dialogue and unwavering support can change the narrative around mental health, not just for VCSOs but for everyone.

For more information about the CvCISO Program, visit https://cvciso.com
]]>https://api.spreaker.com/episode/60155013Fri, 24 May 2024 13:00:04 +0000SecurityStudioIn this impactful episode, our hosts dive deep into the critical topic of mental health awareness, specifically focusing on its significance for Virtual Chief Security Officers (vCISOs). Join us as we explore the importance of creating safe spaces for...
Our conversation also tackles the often-overlooked impact of technology on mental health, highlighting the adverse effects of social media and the constant bombardment of current events. We wrap up with practical advice on practicing gratitude, using positive affirmations, and taking essential breaks from screens to maintain mental balance.

Tune in to discover how open dialogue and unwavering support can change the narrative around mental health, not just for VCSOs but for everyone.

For more information about the CvCISO Program, visit https://cvciso.com
]]>3096acceptance,awareness,business,currentevents,dialogue,gratitude,mentalhealth,owners,socialmedia,stigma,support,technology,vcisos,workplacetrue9fullhttps://www.spreaker.com/episode/episode-8-a-pulse-on-k-12-cybersecurity--60072141They discuss the importance of prioritizing cybersecurity to ensure the safety and digital responsibility of students. They emphasize the need for increased funding, awareness, and leadership in the education sector to protect our schools and prepare students for the digital age.

Our guests highlight the critical role of setting a good example in information security education, discussing the significance of compliance standards, security assessments, and resource allocation. They also explore the mission-driven approach required to serve, support, and advocate for educational excellence and equal access.
Join us for an enlightening conversation on the power of grassroots efforts and the importance of empowering individuals to make a meaningful impact in the realm of cybersecurity in education.

To learn more about the CvCISO training program, visit www.cvciso.com
]]>https://api.spreaker.com/episode/60072141Fri, 17 May 2024 14:57:29 +0000SecurityStudioIn this episode of the CvCISO Podcast, we dive into the crucial topic of cybersecurity in K-12 education with our special guests, Jonathan Skarin and Chris Rule. Jonathan, from an education agency in Iowa, and Chris, working within a school district...They discuss the importance of prioritizing cybersecurity to ensure the safety and digital responsibility of students. They emphasize the need for increased funding, awareness, and leadership in the education sector to protect our schools and prepare students for the digital age.

Our guests highlight the critical role of setting a good example in information security education, discussing the significance of compliance standards, security assessments, and resource allocation. They also explore the mission-driven approach required to serve, support, and advocate for educational excellence and equal access.
Join us for an enlightening conversation on the power of grassroots efforts and the importance of empowering individuals to make a meaningful impact in the realm of cybersecurity in education.

To learn more about the CvCISO training program, visit www.cvciso.com
]]>3818cybersecurity,informationsecurity,k12cybersecurity,vcisofalse8fullhttps://www.spreaker.com/episode/episode-7-the-officer-in-vciso--59957913
For more information on the CvCISO Program visit: https://cvciso.com]]>https://api.spreaker.com/episode/59957913Fri, 10 May 2024 13:00:04 +0000SecurityStudioIn this episode, the hosts discuss the importance of the 'O' in vCISO (virtual Chief Information Security Officer) and how vCISOs can effectively communicate and work with leadership. They emphasize the need for vCISOs to have a seat at the table and...
For more information on the CvCISO Program visit: https://cvciso.com]]>2511cybersecurity,informationsecurity,vciso,vcisotrainingfalse7fullhttps://www.spreaker.com/episode/episode-6-communicating-your-value--59774808
For more information on the CvCISO Training Academy, visit: https://academy.securitystudio.com/]]>https://api.spreaker.com/episode/59774808Fri, 03 May 2024 13:00:04 +0000SecurityStudioIn this episode, the hosts discuss the importance of effectively communicating their value as a vCISO (Virtual Chief Information Security Officer) and how it applies to other industries as well. The hosts discuss the need to understand the client's...
For more information on the CvCISO Training Academy, visit: https://academy.securitystudio.com/]]>3401clientrelationships,communicating,communication,connection,customers,empathy,informationsecurity,security,storytelling,value,vcisofalse6fullhttps://www.spreaker.com/episode/episode-5-essential-advice-for-an-aspiring-vciso--59660211
For more information on the CvCISO Training Academy, visit: https://academy.securitystudio.com/]]>https://api.spreaker.com/episode/59660211Fri, 26 Apr 2024 13:00:04 +0000SecurityStudioIn this episode, the conversation is about essential advice for aspiring vCISOs (Virtual Chief Information Security Officers), focusing on integrity, ethics, and establishing clear boundaries. They emphasize the importance of understanding the...
For more information on the CvCISO Training Academy, visit: https://academy.securitystudio.com/]]>3476aspiringvciso,cybersecurity,infosec,infosecconsulting,vciso,vcisotrainingfalse5fullhttps://www.spreaker.com/episode/episode-4-imposter-syndrome--59495848
*Content Warning* In this episode, we talk about imposter syndrome, PTSD, and thoughts of suicide. This warning is to empower you, our audience, with the knowledge you need to make healthy decisions about how and if you should consume this podcast content. If you're in crisis, there are options available to help you cope. You can call or text 988 at any time to speak to someone and get support. If you'd like to know more information about PTSD, please visit: https://www.nimh.nih.gov/health/topics/post-traumatic-stress-disorder-ptsd Additionally, for more information on imposter syndrome, visit https://impostorsyndrome.com/resources. 

Learn more about the CvCISO Program: https://www.cvciso.com/


]]>https://api.spreaker.com/episode/59495848Fri, 19 Apr 2024 13:00:02 +0000SecurityStudioIn this podcast episode, the hosts engage in a deep dive into the topic of imposter syndrome as Meg Perron shares her journey of grappling with it after a significant career change. They explore the psychological roots of imposter syndrome, including...
*Content Warning* In this episode, we talk about imposter syndrome, PTSD, and thoughts of suicide. This warning is to empower you, our audience, with the knowledge you need to make healthy decisions about how and if you should consume this podcast content. If you're in crisis, there are options available to help you cope. You can call or text 988 at any time to speak to someone and get support. If you'd like to know more information about PTSD, please visit: https://www.nimh.nih.gov/health/topics/post-traumatic-stress-disorder-ptsd Additionally, for more information on imposter syndrome, visit https://impostorsyndrome.com/resources. 

Learn more about the CvCISO Program: https://www.cvciso.com/


]]>3438consulting,cybersecurity,impostersyndrome,informationsecurity,mentalhealth,vcisotrue4fullhttps://www.spreaker.com/episode/episode-3-aligning-infosec-objectives-with-business-goals--59419041
Learn more about the CvCISO Program: https://www.cvciso.com/]]>https://api.spreaker.com/episode/59419041Fri, 12 Apr 2024 13:00:03 +0000SecurityStudioIn this conversation, the hosts discuss the importance of understanding the organization and industry as a CISO. They emphasize that successful CISOs are not just about technology, but also about aligning information security objectives with business...
Learn more about the CvCISO Program: https://www.cvciso.com/]]>3267alignment,assetmanagement,business,ciso,communication,continuouslearning,differentiation,efficiency,goals,market,mentorship,organization,revenue,security,vcisofalsefullhttps://www.spreaker.com/episode/episode-2-so-you-re-a-vciso-now-what--59292002
Learn more about the CvCISO Program: https://www.cvciso.com/]]>https://api.spreaker.com/episode/59292002Fri, 05 Apr 2024 14:33:55 +0000SecurityStudioJoin our hosts for episode two as they dive into the VCISO journey, from the challenge of landing that first customer to the ongoing quest of building trust, credibility, and honesty in client relationships. They discuss the art of demonstrating value...
Learn more about the CvCISO Program: https://www.cvciso.com/]]>3012ciso,cybersecurity,cybersecurityconsulting,informationsecurity,vcisofalse2fullhttps://www.spreaker.com/episode/episode-1-the-start--59217813
In this episode, we kick off by introducing ourselves and delving into the importance of mental health, the power of different perspectives, and the necessity of context in decision-making. We delve into the crucial topic of establishing credibility in a vCISO (Virtual Chief Information Security Officer) setting. We discuss strategies for borrowing credibility, building confidence through education, and the importance of humility in admitting mistakes and seeking help. Our conversation highlights the people-focused nature of vCISO work and the diverse backgrounds that bring unique perspectives to the table.

We also reflect on the motivation and mission behind vCISO work, emphasizing the importance of finding purpose and trust in the industry. Whether you're a seasoned professional or just starting out, this podcast provides encouragement and inspiration, reminding you that you're not alone in facing challenges. Tune in for future episodes where we'll cover headlines, dive into the mailbag, share wisdom, play games, and feature special guest appearances. Don't miss out on the opportunity to gain valuable insights and join the conversation in the dynamic world of information security and beyond.
]]>https://api.spreaker.com/episode/59217813Fri, 29 Mar 2024 12:18:48 +0000SecurityStudioWelcome to the inaugural episode of our podcast, where we dive deep into the world of information security and beyond. Join us as we explore stories, experiences, and perspectives from industry professionals. In this episode, we kick off by...
In this episode, we kick off by introducing ourselves and delving into the importance of mental health, the power of different perspectives, and the necessity of context in decision-making. We delve into the crucial topic of establishing credibility in a vCISO (Virtual Chief Information Security Officer) setting. We discuss strategies for borrowing credibility, building confidence through education, and the importance of humility in admitting mistakes and seeking help. Our conversation highlights the people-focused nature of vCISO work and the diverse backgrounds that bring unique perspectives to the table.

We also reflect on the motivation and mission behind vCISO work, emphasizing the importance of finding purpose and trust in the industry. Whether you're a seasoned professional or just starting out, this podcast provides encouragement and inspiration, reminding you that you're not alone in facing challenges. Tune in for future episodes where we'll cover headlines, dive into the mailbag, share wisdom, play games, and feature special guest appearances. Don't miss out on the opportunity to gain valuable insights and join the conversation in the dynamic world of information security and beyond.
]]>3726cyberriskmanagement,cybersecurity,cybersecurityconsulting,informationsecurity,informationsecuritytraining,infosec,msp,vciso,vcisotrainingfalse1full