Defense in Depth

By David Spark

What's Defense in Depth about?

Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

Download our free app to listen on your phone

Defense in Depth episodes:

05.02.2024
Scaling Least Privilege for the Cloud
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
04.25.2024
Should CISOs Be More Empathetic Towards Salespeople?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
04.18.2024
Managing Data Leaks Outside Your Perimeter
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of...
04.11.2024
What Are the Risks of Being a CISO?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of...
04.04.2024
Onboarding Security Professionals
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
03.28.2024
How to Improve Your Relationship With Your Boss
All links and images for this episode can be found on CISO Series. Check out this post Monte Pedersen of The CDA Group for the discussion that is the basis of our conversation on this week’s episode co-hosted by...
03.21.2024
Improving the Responsiveness of Your SOC
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
03.14.2024
The Demand for Affordable Blue Team Training
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
03.07.2024
Why are CISOs Excluded from Executive Leadership?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of...
02.29.2024
What Is Your SOC's Single Search of Truth?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of...
02.22.2024
When Is Data an Asset and When Is It a Liability?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of...
02.15.2024
Tracking Anomalous Behaviors of Legitimate Identities
All links and images for this episode can be found on CISO Series. The Verizon DBIR found that about half of all breaches involved legitimate credentials. It’s a huge attack surface that we’re only starting to get a handle of....
02.08.2024
Why Do Cybersecurity Startups Fail?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
02.01.2024
Is "Compliance Doesn't Equal Security" a Pointless Argument?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
01.25.2024
CISOs Responsibilities Before and After an M&A
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
01.18.2024
Use Red Teaming To Build, Not Validate, Your Security Program
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
01.11.2024
The Do's and Don'ts of Approaching CISOs
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
01.04.2024
Doing Third Party Risk Management Right
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
12.14.2023
Warning Signs You're About To Be Attacked
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
12.07.2023
Do We Have to Fix ALL the Critical Vulnerabilities?
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
11.30.2023
Mitigating Generative AI Risks
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
11.16.2023
Building a Cyber Strategy for Unknown Unknowns
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
11.09.2023
Responsibly Embracing Generative AI
All links and images for this episode can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer...
11.02.2023
People Are the Top Attack Vector (Not the Weakest Link)
All links and images for this episode can be found on CISO Series. In increasingly complex technical defenses, threat actors frequently target the human element. This makes them a top attack vectors, but are they actually the weak leak in...
10.26.2023
What's Entry Level in Cybersecurity?
All links and images for this episode can be found on CISO Series. We often talk about the contradiction of seemingly entry-level security jobs requiring years of experience. But maybe that's because entry-level jobs don't actually exist. Check out this...
10.19.2023
New SEC Rules for Cyber Security
All links and images for this episode can be found on CISO Series. The Securities and Exchange Commission issued new cyber rules. What do these new rules mean for CISOs and will they ultimately improve our cybersecurity posture? Check out...
10.12.2023
The Value of RSA, Black Hat, and Mega Cyber Tradeshows
All links and images for this episode can be found on CISO Series. Are trade shows like RSA getting so big that there's not enough economic value for a CISO to attend? Or do these events have enough industry gravity...
10.05.2023
Is Remote Work Helping or Hurting Cybersecurity?
All links and images for this episode can be found on CISO Series. Work from home flourished during the pandemic. Many workers love it and don't want to go back. Some organizations are pushing for a return to the office....
09.28.2023
How to Manage Users' Desires for New Technology
All links and images for this episode can be found on CISO Series. Large language models and generative AI are today's disruptive technology. This is not the first time companies just want to ban a new technology that everyone loves....
09.21.2023
Cybersecurity Questions Heard Around the Kitchen Table
All links and images for this episode can be found on CISO Series. What do the people least in the know about cyber, want to know? What are they asking? Check out this post for the discussion that is...
09.14.2023
How to Prime Your Data Lake
All links and images for this episode can be found on CISO Series. A security data lake, a data repository of everything you need to analyze and get analyzed sounds wonderful. But priming that lake, and stocking it with the...
09.07.2023
Getting Ahead Of Your Threat Intelligence Program
All links and images for this episode can be found on CISO Series. A threat intelligence program sounds like a sound effort in any security program. But, can you pull it off? There are so many phases to execute properly....
08.31.2023
How Security Leaders Deal with Intense Stress
All links and images for this episode can be found on CISO Series. When you have an incident and you're engulfed by the stress that lasts more than a day, how do you manage and deal with it? And not...
08.24.2023
How Do We Influence Secure Behavior?
All links and images for this episode can be found on CISO Series. We all know that our employees need to be more security aware, but what are the methods to get them there? How can we make our employees...
08.17.2023
Security Concerns with ChatGPT
All links and images for this episode can be found on CISO Series. Users have tried to upload sensitive company information and PII, personally identifiable information, into ChatGPT. Those who are successful getting the data in, have now made that...
08.10.2023
Create A Pipeline of Cyber Talent
All links and images for this episode can be found on CISO Series. The demand for cybertalent is sky high. It's very competitive to get those people with skills. What if you were to train your staff and give them...
08.03.2023
Improving Adoption of Least Privileged Access
All links and images for this episode can be found on CISO Series. What are we doing to improve access management? Make it too loose and it's the number one way organizations get breached. Put on too many controls and...
07.27.2023
Securing SaaS Applications
All links and images for this episode can be found on CISO Series. With the growth of business-led IT, does SaaS security need to be a specific focus in a CISO’s architectural strategy? Check out this ...
07.20.2023
How Do We Get Better Control of Cloud Data?
All links and images for this episode can be found on CISO Series. When it comes to data, compliance, and reducing risk, where are we gaining control? Where are we losing control? And what are we doing about that?...
07.13.2023
Finding Your Security Community
All links and images for this episode can be found on CISO Series. If you're struggling to get your first job in security or you're trying to get back into the industry after being laid off, you need to...
07.06.2023
Let's Write Better Cybersecurity Job Descriptions
All links and images for this episode can be found on CISO Series. What should a cyber job description require, and what shouldn't it? What's reasonable and not reasonable? Check out this post for the...
06.29.2023
How Should Security Better Engage with Application Owners?
All links and images for this episode can be found on CISO Series. Since so much technology today is not launched by the IT department, but by business units themselves. How do security professionals engage with business and application owners...
06.22.2023
How To Get More People Into Cybersecurity
All links and images for this episode can be found on CISO Series. There are millions of cybersecurity jobs open. Over time, that number has just been growing. What we're doing now does not seem to be working. So what's...
06.15.2023
How to Create a Positive Security Culture
All links and images for this episode can be found on CISO Series. How do you create a positive security culture? It's rarely the first concept anyone wants to embrace, yet it's important everyone understands their responsibility. So what do...
06.08.2023
How Should We Trust Entry Level Employees?
All links and images for this episode can be found on CISO Series. All experienced security professionals were at one time very green. Entry level status means risk to your organization. That's if you give them too much access....
06.01.2023
How Must Processes Change to Reduce Risk?
All links and images for this episode can be found on CISO Series. What do we need to do to fix our processes to truly reduce risk and vulnerabilities? Check out this post for the discussion that is the...
05.25.2023
Reputational Damage from Breaches
All links and images for this episode can be found on CISO Series. Security professionals talk a lot about the reputational damage from breaches. And it seems logical, but major companies still do get breached and their reputation seems spared....
05.18.2023
Do RFPs Work?
All links and images for this episode can be found on CISO Series. Do RFPs or request for proposals work as intended? It seems they're loaded with flaws yet for some organizations who must follow processes, they become necessary evils...
05.11.2023
Successful Cloud Security
All links and images for this episode can be found on CISO Series. What are the moves we should be making in cloud to improve our security? What constitutes a good cloud security posture? Check out this post for the...
05.04.2023
How Should Security Vendors Engage With CISOs?
All links and images for this episode can be found on CISO Series. One CISO has had enough of the security vendor marketing emails and cold sales calls. He's blocking them all. But it's not a call to avoid all...

What's Defense in Depth about?

Download our free app to listen on your phone

Defense in Depth episodes:

Scaling Least Privilege for the Cloud

Should CISOs Be More Empathetic Towards Salespeople?

Managing Data Leaks Outside Your Perimeter

What Are the Risks of Being a CISO?

Onboarding Security Professionals

How to Improve Your Relationship With Your Boss

Improving the Responsiveness of Your SOC

The Demand for Affordable Blue Team Training

Why are CISOs Excluded from Executive Leadership?

What Is Your SOC's Single Search of Truth?

When Is Data an Asset and When Is It a Liability?

Tracking Anomalous Behaviors of Legitimate Identities

Why Do Cybersecurity Startups Fail?

Is "Compliance Doesn't Equal Security" a Pointless Argument?

CISOs Responsibilities Before and After an M&A

Use Red Teaming To Build, Not Validate, Your Security Program

The Do's and Don'ts of Approaching CISOs

Doing Third Party Risk Management Right

Warning Signs You're About To Be Attacked

Do We Have to Fix ALL the Critical Vulnerabilities?

Mitigating Generative AI Risks

Building a Cyber Strategy for Unknown Unknowns

Responsibly Embracing Generative AI

People Are the Top Attack Vector (Not the Weakest Link)

What's Entry Level in Cybersecurity?

New SEC Rules for Cyber Security

The Value of RSA, Black Hat, and Mega Cyber Tradeshows

Is Remote Work Helping or Hurting Cybersecurity?

How to Manage Users' Desires for New Technology

Cybersecurity Questions Heard Around the Kitchen Table

How to Prime Your Data Lake

Getting Ahead Of Your Threat Intelligence Program

How Security Leaders Deal with Intense Stress

How Do We Influence Secure Behavior?

Security Concerns with ChatGPT

Create A Pipeline of Cyber Talent

Improving Adoption of Least Privileged Access

Securing SaaS Applications

How Do We Get Better Control of Cloud Data?

Finding Your Security Community

Let's Write Better Cybersecurity Job Descriptions

How Should Security Better Engage with Application Owners?

How To Get More People Into Cybersecurity

How to Create a Positive Security Culture

How Should We Trust Entry Level Employees?

How Must Processes Change to Reduce Risk?

Reputational Damage from Breaches

Do RFPs Work?

Successful Cloud Security

How Should Security Vendors Engage With CISOs?