This episode features an interview with Gary Harbison VP, Global CISO at Bayer. Bayer is a global enterprise with core competencies in the Life Science fields of healthcare and agriculture with a market cap of $53.5B. Gary has over 19 years of experience in the Information Security domain (21 years of overall IT experience) that includes roles at multiple global fortune 500 companies, as well as public sector experience with the US Department of Defense.

On this episode, Gary delves into where he thinks the largest gaps in security are today, what he believes will be a major issue in the future that nobody is currently aware of, and why he analogizes security leaders to car brakes. 

-------

“I would say that more than anything, I think people look at security as we exist to stop things. And while yes, we do want to stop attacks from happening and such, but in much the same way that having brakes on a car enables you to go faster, having a good security team that is able to assess and balance risk and bring forward solutions that allow you to take the right risks in a responsible way, can actually help the company move faster and help achieve business goals. So looking at it as we’re here to say no, or to stop things, we’re actually here to help figure out a way to say yes in a responsible way, and that can actually help the business move faster.” — Gary Harbison

-------

Episode Timestamps:

*(3:17) - How Gary got into security 

*(4:42) - Gary’s current role at Bayer

*(5:40) - Segment: Taboo Topics

*(5:40) - What outsiders get wrong about security

*(7:40) - The fasting growing risk in security today 

*(9:15) - How to do drive real-time risk assessment

*(9:28) - Segment: Deep Dive

*(28:52) - How Gary keeps up with security and gets better at his job

*(31:27) - What Gary would tell his younger CSO-self

*(33:30) - Segment: The Future

*(33:43) - What nobody is talking about right now that will be a major issue in the future

*(35:22) - What CSOs need to invest in for the future

*(36:49) - Segments: Quick Hits

-------

Links

Connect with Gary Harbison on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

 “How do we help create a pipeline of future cyber leaders, but then also, that pyramid, how do we get millions more people into the discipline? And just convince them that you don’t have to be a computer scientist or an engineer to do this. All you have to be is inquisitive. I want somebody who looks at something and says, ‘well, that’s interesting. That doesn’t make sense. Let me figure out why,’ that’s the person who would make a good security person. If you are somebody that looks at something and says, ‘I don’t understand why it looks like that, but I’m going to go figure out why,’ then you’re right for this field.” — Matthew McCormack

-------

Episode Timestamps:

*(2:30) - Matthew’s first job in security

*(4:10) - Segment: Taboo Topics

*(5:30) - Matthew’s role at GSK

*(7:05) - How Matthew keeps up with the changing industry of security

*(8:30) - Segment: Deep Dive

*(8:35) - What it was like going from federal security to commercial security

*(13:10) - The fastest growing risk in security today

*(24:10) - Birds-eye-view on the current state of frameworks 

*(29:00) - Segment: The Future

*(30:00) - What security leaders can do about the talent gap

*(35:25) - Matthew’s favorite domain in security

*(38:10) - Segment: Quick Hits

Links

Connect with Matthew McCormack on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

“This landscape is changing and it comes to a point where I honestly believe CSOs are going to be some of the highest paid professionals in the future. And it's already heading in that direction. Over the last few years, we've seen a lot of change already, but this is going to be one of the most highest paid jobs in business because it will get to a point that you're not going to be able to pay people enough money to take on this amount of risk.” — Emily Health

-------

Episode Timestamps:

*(2:40) - How Emily and Jason met

*(3:10) - Emily’s first security job 

*(4:10) - Emily’s current role at DocuSign

*(5:15) - Segment: Taboo Topics

*(6:35) - Paying ransom or not paying ransom

*(8:00) - Other rapid growing risks that people aren’t aware of 

*(10:35) - Segment: Deep Dive

*(12:15) - Careers are jigsaw puzzles 

*(15:05) - Differences and similarities between United Airlines and DocuSign

*(17:35) - The “Trust” portion of Emily’s DocuSign title explained 

*(21:25) - How the pandemic affected Docusign and Emily’s role

*(26:50) - Segment: Feeling vulnerable 

*(27:55) - Emily’s thoughts on gut made decisions vs. data/biased made decisions 

*(31:25) - Why CSOs are leaving their jobs 

*(37:40) - What retirement looks like for Emily

*(39:30) - Segment: Into the Future 

*(42:40) - Segment: Quick Hits 

Links

Emily’s LinkedIn

Emily’s Twitter

Jason Clark’s LinkedIn

www.netskope.com

“To be an innovator, to be a leader, you have to keep challenging the status quo. You have to keep challenging yesterday's thoughts. that's what we really did when we sat down and as a team started listening to our colleagues. And taking that input to really develop out these principles, It was about challenging the way we've been doing things and really thinking about how business digitalization is changing us and our organizations” — James Christiansen

-------

Episode Timestamps:

*(2:05) - Setting the theme for the 2nd half of discussion & introductions

*(5:00) - Principle One: Challenge Your Existing Principles! 
*(7:29) - Principle Two: Stop Buying Blackbox Solutions — Buy “Open and Integrated” Instead

*(10:54) - Principle Three: Focus on Five Foundational Technologies that Integrate with Your Entire Security Ecosystem

*(15:05) - Principle Four: Only Buy Cloud-Powered New Technologies!

*(18:50) - Principle Five: Protect Business Data with Security Controls that Can Follow Data Everywhere

*(21:55) - Principle Six: Prioritize Business Risk/Reward When Making Security Strategy

*(27:50) - Principle Seven: Build Threat Models and Use Them in Every Architecture Decision You Make

*(29:34) - Principle Eight: Expand Security Operations Automation

*(37:16) - Principle Nine: Demand Continuous Visibility and Risk Assessment for Every Security Control

*(41:09) - Principle Ten: Reduce Attack Surface Using Zero Trust Principles

Links

Lamont Orange’s LinkedIn

James Robinson’s LinkedIn

James Christiansen’s LinkedIn

Erick Rudiak’s LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

“I think what I'd love for people to think about this series is the spirit of camaraderie and the spirit of community that has always been there in information security. And I think one of the really cool things about this series is that it creates a concentrated digestible version of that really enriching, magical experiences, where people who are passionate about their topic and just kind of get together and talk. And it's not about getting the predictions right so much as it is about having a conversation.” — Erick Rudiak 

-------

Episode Timestamps:

*(2:20) - How Erick and Jason met

*(3:20) - How Erick got into security & how he became the SVP & CTO of Northwestern Mutual

*(7:00) - What Erick would do differently with what he knows now

*(9:30) - Why Erick wanted to get involved in writing the book

*(12:30) - The purpose behind the book

*(14:30) - COVID-19 has accelerated everything 

*(16:55) - The convergence of network and security teams

*(19:35) - Who should be consuming this resource

*(21:50) - What’s changed the most in security since the start of the pandemic

*(23:40) - What CISOs will have wish they invested in now in 5-10 years time 

*(29:15) - Closing thoughts

Links

Erick Rudiak’s LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

Digital transformation can’t succeed without radical changes to security and networking. And with malicious cyber activity costing the global economy $6 Trillion every year, getting security right is more important than ever before. 

Fortunately, there is a group of security and networking visionaries who are building and protecting the future. Not only are they keeping up with the changing landscape, but they’re peering around corners to get ahead, and offer practical advice that avoids hype and provides realistic, actionable insights.

On this podcast, you’ll hear the secrets, strategies, and tactics of top practitioners and thought leaders in cloud security, networking, IT infrastructure, workflow optimization, and AI. These industry experts are writing the playbook on how to adapt to unforeseen events and leverage cutting-edge technology to design a safer digital future.

So if you want to learn more about what’s next, tap the follow button and get ready to help us create the future of digital security.

Welcome to Security Visionaries.

Powered by the team at Netskope