On this episode of CISO Tradecraft, we feature Helen Patton.

Helen shares many of her career experiences working across JP Morgan, The Ohio State University, and now Cisco.  

-Is technical acumen needed for CISOs?

-Surviving organizational politics

(34:45) Helen discusses The Fab 5 Security Outcomes study.

Volume 1 Study - Link 

Volume 2 Study - Link

On this episode of CISO Tradecraft we feature Robin Dreeke from People Formula.  Robin was the former head of the FBI Counterintelligence Behavioral Analysis Program and has an amazing background in learning how individuals think, build trust, and communicate.  Robin highlights 4 Pillars of Communicating:

1. Seek the thoughts and opinions of others

To learn more about Robin's way of thinking you can check out his podcast and books:

• Forged By Trust Podcast

The People Formula Workbook 2.0: Communication Style Inventory

This episode is sponsored by Varonis.  You can learn more on how to reduce your ransomware radius by performing a free ransomware readiness assessment Link

On this episode, Sounil Yu continues his discussion about his new book ("Cyber Defense Matrix").  Listen to learn more about:   

• Pre-Event Structural Awareness vs Post-Event Situational Awareness

This episode is sponsored by Varonis.  You can learn more on how to reduce your ransomware radius by performing a free ransomware readiness assessment Link

This episode of CISO Tradecraft has Sounil Yu talk about his new book, "Cyber Defense Matrix: The Essential Guide to Navigating the Cybersecurity Landscape". Sounil reviews the Cyber Defense Matrix in depth.  We discuss how the Cyber Defense Matrix can be used for: 

• Capturing & Organizing Measurements & Metrics

You can purchase Sounil's new book here Link

On this episode of CISO Tradecraft, John Hellickson from Coalfire talks about his career as a CISO.  Listen and learn about:

• The evolving role of the CISO

A respected journalist focusing on cybersecurity and our community of people for over 25 years, Deb Radcliff remains a trusted information source who checks and double-checks her sources before publication -- a refreshing change to the low signal - high noise world of social media.

Breaking Backbones Information is Power may be purchased from the following Amazon Link

On this Episode of CISO Tradecraft we talk about the Top 10 areas of concern for the C Suite about Ransomware.  Note you can read the full ISC2 Study here (Link).

Cybersecurity professionals should keep the following golden rules in mind when communicating with the C-suite about ransomware.

1. Increase Communication and Reporting to Leadership

On this episode of CISO Tradecraft, Christian Hyatt from risk3sixty stops by to discuss the 3 major Business Objectives for CISOs:

1. Risk Management

He also discusses the five CISO Archetypes.  

1. The Executive

References:

Designing the CISO Role Link

Chances are your organization has information that someone else wants.  If it's another nation state, their methods may not be friendly or even legal.  In this episode we address assessing risk, known "bad" actors, information targets, exfiltration, cyber security models, what the federal government is doing for contractors, and response strategies.  Listen now so you don't become a statistic later.

References:

https://www.fbi.gov/file-repository/china-exec-summary-risk-to-corporate-america-2019.pdf

https://nhglobalpartners.com/made-in-china-2025/

https://www.cybintsolutions.com/cyber-security-facts-stats/

http://www.secretservice.gov/ntac/final_it_sector_2008_0109.pdf

http://www.secretservice.gov/ntac/final_government_sector2008_0109.pdf

CIS Controls v8.0, Center for Internet Security, May 2021, https://www.cisecurity.org

https://owasp.org/www-project-threat-and-safeguard-matrix/

https://www.acq.osd.mil/cmmc/about-us.html

Our career has been growing like crazy with an estimated 3.5 million unfilled cybersecurity jobs within the next few years.  More certs, more quals, more money, right?  The sky’s the limit.  But what if we’re wrong?  AI, machine learning, security-by-design, outsourcing, and H-1B programs may put huge downward pressure on future job opportunities (and pay) in this country.  Of course, we don’t WANT this, but shouldn’t a wise professional prepare for possibilities?  [We did a ton of research looking at facts, figures, industry trends, and possible futures that might have us thinking that 2022 may have been “the good old days.”  No gloom-and-doom here; just an objective look with a fresh perspective, you know, just in case.]