Security Visionaries

This episode features an interview with Marilyn Miller, Chief People Officer at Netskope. Marilyn is responsible for Netskope’s global human resources functions, including employee experience and talent acquisition. She has over 20 years of experience in high-visibility HR roles, including Anaplan, Alfresco, and Cisco Systems.

In this episode, Mike and Marilyn discuss building security into the fabric of your organization, working collaboratively with CIOs and CISOs, and using storytelling to attract talent.

-----------------

“We talk about security as a team sport and a shared responsibility and accountability. I think the more that you can drive it from it's instilled in your culture and your values, you have less of a dependency than on the policing and the policy requirements of it. You still need to have those things in place, but I believe a lot in how do we educate, how do we enroll, how do we talk about the importance, how do we make it part of the fabric and culture of the company? And everybody understands their responsibility around data security, and the protection of it.” – Marilyn Miller

-----------------

Episode Timestamps:

*(02:33): Marilyn’s journey to becoming Chief People Officer

*(04:44): How Marilyn works with security leaders when recruiting talent

*(11:55): How Marilyn has seen cybersecurity becoming a company value

*(18:58): Examples of personal security hygiene translating to the office 

*(21:53): Examples of CIOs and CISOs partnering with HR and People leaders

*(26:45): How the pandemic changed hybrid work and what Marilyn hopes will stay

*(33:56): Marilyn’s advice for Chief People Officers in other organizations

*(36:42): How we can get more diversity in security

*(39:38): Quick Hits

-----------------

Links:

Connect with Marilyn on LinkedIn

Connect with Mike on LinkedIn

www.netskope.com

This episode features an interview with Daniel Hartert, CXO Advisor at Netskope. Over the last 20 years, Daniel has held CIO and CEO positions at large international organizations like Bayer Business Services and Philips Group. He is also a co-founder of DCSO (Deutsche Cyber Security Organisation), a company working to strengthen protection against evolving and growing cyber threats.

In this episode, Mike sits down with Daniel to discuss communicating with C-suite executives, how advisors can enable people through security, and the critical success factors of a CIO.

-----------------

“I'm coming from industries where manufacturing and health and safety was a big point. So, in these industries, there is a mindset around EHS; environmental, health, and safety. [...] I see a strong analogy because watching out for a malicious email or malicious emails is very similar to using the handrailing when walking down the staircase. So, this is what we need to build into the DNA of an organization, this permanent security awareness. And if we can build this, then this protection level of a company will immensely increase. Because in the end, the doors to malicious actions are always the people.” – Daniel Hartert

-----------------

Episode Timestamps:

*(02:27): Daniel’s journey to becoming a CIO 

*(05:25): How Daniel transitioned into an advisory role 

*(07:37): Daniel’s take on security as a team sport

*(17:57): How Daniel communicates security to C-suite executives

*(24:09): Ways Daniel thinks about enabling people through security

*(29:22): 2030 Goggles

*(32:09): How we can get more diversity in security

*(34:29): Daniel’s take on zero trust

*(36:50): Quick Hits

-----------------

Links:

Connect with Daniel Hartert on LinkedIn

DCSO Germany

Connect with Mike Anderson LinkedIn

www.netskope.com

This episode features an interview with Max Chan, Chief Information Officer at Avnet. In his role, Max is responsible for the delivery of strategic business IT and digital transformation initiatives. Prior to Avnet, Max held several IT leadership roles at publicly traded companies like VF Corporation and Johnson Controls.

In this episode, Mike and Max discuss digital enablement, fostering security from the top down, and how to talk to the board about security.

-----------------

“Do not play adversary with your security organization, whether or not they are part of your group. At the end of the day, truly see that as your personal accountability and looking at it through the lens of the enterprise. That will ensure success. That will ensure the right tone from the top, down to through the organizations to ensure that everyone embraces that vigilance that is so needed to secure the company.” – Max Chan

-----------------

Episode Timestamps:

*(02:30): Max’s explains what Avnet does

*(03:28): Max’s journey to becoming a CIO

*(08:11): Max’s take on security as a team sport

*(14:30): How Max is aligning teams across his organization

*(22:04): How Max talks to the board about security

*(28:51): 2030 Goggles

*(32:15): How we can get more diversity in security

*(37:34): Quick Hits

-----------------

Links:

Connect with Max on LinkedIn

Visit Avnet

Connect with Mike Anderson LinkedIn

www.netskope.com

This episode features an interview with Amanda Crawford, Executive Director & Chief Information Officer of the Texas Department of Information Resources (DIR). Prior to her role at DIR, Amanda served at the Office of the Attorney General of Texas for more than 17 years. Her roles included Deputy Attorney General for Administration and General Counsel. At DIR, Amanda is responsible for the leadership, direction, and daily operations.

In this episode, Mike and Amanda discuss building security across federated groups, diversity in the workforce, and why security education needs to start young.

-----------------

“If you use a computer or the internet, you have a role to play in keeping our state safe. If you're a developer, it means that security needs to be injected throughout the development process. If you're a network manager, the tools need to be tuned to be able to respond to those threats. So role by role, each of us really need to consider how we are part of the team.” – Amanda Crawford

-----------------

Episode Timestamps:

*(01:46): Amanda’s background and role with the state of Texas

*(03:40): Amanda’s take on security as a team sport

*(08:40): Adoption of the cloud in Texas

*(10:35): How Amanda builds security across federated groups

*(19:15): How Amanda is building a human firewall

*(25:52): 2030 Goggles

*(29:01): How we can get more diverse in security

*(35:24): Quick Hits

-----------------

Links:

Connect with Amanda on LinkedIn

Connect with Mike Anderson LinkedIn

www.netskope.com

This episode features an interview with Harvey Ewing, Chief Information Officer at R1 RCM. Harvey has over 25 years of experience in cybersecurity, governance risk, and compliance. At R1 RCM, he is responsible for security, delivery, and improvement of enterprise technology.

In this episode, Mike and Harvey discuss prioritizing patient data, the importance of healthy conflict, and speaking to board members in a language they understand.

-----------------

“When you say security is a team sport, you hit the nail on the head. This is something that we have to be spot on with our operators, our clinicians, the people that are supporting the process front, middle, and back, in addition to our technologists. And we focus across that spectrum. And I don't think that there's a better way to put it today in that it has to be a team sport because, as you well know, the perimeter is essentially gone in today's day and age. And we have to focus from a human aspect all the way down to the lowest level of the technology stack that we have.” – Harvey Ewing

-----------------

Episode Timestamps:

*(02:09): Harvey’s background and transition from CISO to CIO

*(04:53): How R1 RCM is making security a priority

*(16:46): Harvey’s advice for getting organizations to think of security as a team sport

*(22:39): How Harvey is reducing friction in security

*(25:03): How R1 RCM is enabling people to be human firewalls

*(30:59): 2030 Goggles

*(34:06): Quick Hits

-----------------

Links:

Connect with Harvey on LinkedIn

Connect with Mike Anderson LinkedIn

www.netskope.com

This episode features an interview with Jason Clark, Chief Strategy, Security and Marketing Officer at Netskope. Jason hosted season 1 of the Security Visionaries Podcast and has spent nearly 30 years in security, serving companies like The New York Times, Optiv, and Emerson. 

In this episode, Jason passes the baton to Mike Anderson, Chief Digital and Information Officer at Netskope. They discuss security as a team sport, creating a human firewall, and what the future of security holds.

-----------------

“I think that security needs to be built into everything from the beginning. You build security in, and that's still probably a challenge at a lot of places. But that's the only way to have really good security, and it's to simplify. The enemy of security is complexity. Everybody's probably seen the aspects of quality and security that the difference of the cost of building it in right to begin with, versus the cost of coming and being reactive and trying to remediate is significant. So I think security should be in the beginning of that conversation.” – Jason Clark

-----------------

Episode Timestamps:

*(05:03): Jason’s take on security as a team sport

*(07:03): How budgets influence security

*(12:39): What role security plays in determining a tech stack

*(22:25): How to enable a human firewall

*(26:29): Examples of HR being essential to security 

*(29:33): 2030 Goggles

*(32:19): What CIOs and CISOs should invest in

*(35:25): Quick hits questions

-----------------

Links:

Connect with Jason Clark on LinkedIn

Connect with Mike Anderson LinkedIn

www.netskope.com

Security only works if everyone across an organization is pulling their own weight. Whether you’re a longtime executive or a recent hire, security should be everyone’s responsibility. But, only half of US companies actually have a cybersecurity plan in place, leaving them vulnerable to attacks and at risk of exposing important data. 

We think security should be a team sport. And we’re here to show you how.

On this next season of the Security Visionaries podcast, you’ll hear from some of the smartest, most forward-thinking minds in technology. Get an honest and credible take on how to tackle transformation from voices of experience including CIOs, CISOs, networking leads, and many more from across industries. We’ll deep dive into how these leaders are teaming up on security, rethinking budgets, pushing innovative thinking, and enabling people across their organizations to be better digital citizens. 

So if you want to learn more about what’s next, tap the follow button and get ready to help us create the future of digital security.

Welcome to Security Visionaries.

Powered by the team at Netskope.

This episode features an interview with Marene Allison, Chief Information Security Officer for Johnson & Johnson. Marene was among the first class of women to graduate from the U.S. Military Academy at West Point. She went on to become a Special Agent in the FBI and has held corporate security roles at publicly traded companies such as Medco and Avaya.

On this episode, Marene shares how West Point translated to a security career, the evolution of security over the last decade, and what areas need the most innovation.

-----------------

“In cyber, everything changes every six months. And there's a new lens and there's a whole new set of new technologies that are going to be out there. And as CSO, I got to take the new threat, my IT environment that doesn't change as rapidly as security environment does. And then wrap it again, and look at what works. I think we have an awesome job because we get all these new technologies. We get to look at all the different ways an adversary's gonna come after us and then look at how we're going to secure it.” - Marene Allison

-----------------

Episode Timestamps

*(02:15): Marene’s background

*(04:09): Marene’s transition into cyber

*(05:37): How security has changed over the last decade

*(07:15): How acquisitions have become easier

*(09:22): Marene’s greatest learning experience in cyber

*(12:13): What makes the CISO job so stressful

*(20:43): Marene’s favorite domain in cyber

*(21:45): What areas of cyber need the most innovation

*(25:15): The Zero Trust approach

*(29:56): Segment: Quick Hits

-----------------

Links:

Connect with Marene on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

This bonus episode features an interview with Steve Riley, Field CTO of Netskope. Steve is a widely-renowned expert speaker, author, researcher, and analyst. Prior to Netskope Steve came from Gartner, where for five years he maintained a collection of cloud security research that included the Magic Quadrant for Cloud Access Security Brokers and the Market Guide for Zero Trust Network Access.

On this episode, Steve elaborates on his background as it pertains to being an analyst at Gartner, the exciting future of SSE, and so much more. 

-----------------

"The benefits of SSE, or security service edge and a SASE journey is very clear. It's the first time, to me its the perfect reset for security. They get to move the majority of their inspection points closer to the user, closer to the data, they get to move it out of the data center and into the cloud, where it can be applied everywhere their data goes, everywhere the user goes." - Steve Riley

-----------------

Episode Timestamps:

*(0:40) - Steve’s background

*(2:50) - Avoiding boredom

*(6:29) - Huge announcement

*(11:13) - The moment that helped drive this new change

*(18:22) - The difference between SSE vs. SAS

*(21:55) - All things SSE

*(24:51) - Surprises with the new MQ

*(28:00) - What Steve loved/ddin’t love about publishing MQ

*(31:34) - The future of SSE

Links

Connect with Steve on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

This episode features an interview with Sanjay Beri, Founder and CEO of Netskope. Sanjay has over 2 decades of innovation and success in the cloud, networking, and security industries. Prior to Netskope, Sanjay held leadership roles at Juniper Networks and McAfee.

On this episode, Sanjay shares why he is obsessed with creating and maintaining culture, how to be the best organizational partner, and why innovation is a lifeline for security companies.

-----------------

“The first thing you want to do is make it clear what that culture is. So you embed it into your systems, your processes, and how you think, from myself to everybody else, how they think and hire. The second is if you hire on that culture and you espouse it, hopefully all your other leaders will do the same.” — Sanjay Beri

-----------------

Episode Timestamps:

*(3:10): Sanjay’s background

*(6:23) - Segment: Taboo Topics

*(6:52): Early days of SAS

*(12:18) - Segment: Deep Dive

*(12:26): Difference between SSE and SASE

*(15:33): What Sanjay is doing to stay true to at Netskope

*(17:28): How to maintain culture of customers, partners, and employees

*(22:35): Sanjay’s biggest learning experiences

*(27:30) - Segment: Quick Hits

-----------------

Links:

Connect with Sanjay on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com