DrZeroTrust

Richard Stiennon (the OG Curmudgeon) and I discuss investments and market dynamics in cybersecurity.  He provides his views on a variety of topics and breaks down how he sees the market through his lens and vast experience.  Check out his books and his insights on this space every chance you get!

Stealing secrets via PB&J?  What is the MSSP market for ZT?  When is hacking not hacking?  Thoughts on the USAF Chief Software Officer's scorched earth letter, and more.

Cybersecurity awareness month at the White House, so what?  Big dollars for ZT in the DoD, really?  The demographics of cybercrime and what that means for the rest of us, and what about maritime cybersecurity?

Discussions on how a brand builder and designer worked to build one of the most successful brands in all of cybersecurity.  How valuable is culture and leadership to a brand in the space?  How do you "punch above your weight class" with marketing?  And how much value is there in a simple, authentic message?

Discussions on how a big time CISO handles security for his organization.  Getting executive buy in.  What is a non-starter for solutions and vendors?  How does his team select tooling?  What is the most important thing for his global organization?  These and other important questions in this episode.

Bad OPSEC on social media?  Farmers COOP hit with ransomware?  State government organization down for 4 months after "sophisticated" attack?  What should you know about cyber insurance?  Banking industry sees 1300% increase in attacks in 2021!  10 ways to avoid failing at ZT and more in this episode.

Are certifications worth it?  Does school prepare the workforce for a career in cyber?  What about K-12?  How do we get better?  What matters more being certified or time on the keyboard?  Why do we have a shortage of cyber folks when the labor statistics say so many people are looking for work in technology?

Deepfakes are being used by scammers, now!  What about the ZT study?  Do you need more money for ZT?  Is social media a valid threat vector?

Thoughts from a guy running a cyber security company on everything from growth, hiring, and how he keeps his company secure even though he knows they are a real target.

Is the new director of CISA doing the right thing?  Do people really pay for ransomware keys?  What about the T-Mobile hack?  Is sorry good enough?  What is the new method of ransomware that only encrypts part of a file?