Security Visionaries

This episode features an interview with Rehman Khan, Director of Security Strategy Research & Design at Charles Schwab. Rehman has over 20 years of technology innovation and transformation experience in the financial, biotechnology, hospitality, and technology industries.

On this episode, Rehman shares his love for teaching the next generation of security leaders, how cloud security is changing the security landscape, and what goes into a successful security team.

-----------------

“I think it will be the design security, like I said, really focusing on security design and making sure that the way we approach security is not just with a whole bunch of tools, but we should be really stepping back and designing security into the overall organization and the process.” — Rehman Khan

-----------------

Episode Timestamps:

*(1:53) - Rehman’s background

*(4:25) - Segment: Deep Dive

*(7:28) - Rehman’s most/least favorite security domains

*(10:37) - Teaching the next generation of security leaders

*(16:11) - How to keep up with the industry

*(18:17) - A.I and cyber security

*(22:03) - How cloud security is changing the landscape

*(26:41) - Best career decisions Rehman has made

*(30:20) - Segment: The Future

*(32:48) - Segment: Quick Hits

-----------------

Links

Connect with Rehman on LinkedIn

Follow Rehman on Twitter

Jason Clark’s LinkedIn

www.netskope.com

This episode features a roundtable discussion with Shamla Naidoo, CISO, Head of Cloud Strategy at Netskope, Steve Riley, Field CTO at Netskope, Mike Anderson, Chief Digital & Information Officer at Netskope, and last but certainly not least, David Fairman, APAC CSO at Netskope. 

On this episode, Shamla, Steve, Mike, and David all share their predictions for 2022 and beyond. You’ll hear predictions ranging from more mental health support for security leaders to the increase of companies measuring their carbon footprint, and everything in between. If you’re in security and are curious about what the future of the industry might look like, this is an episode you won’t want to miss.

----------------

“My last prediction, Jason, is that what we’re going to see is CEOs in particular creating programs to support the mental health and wellbeing of the security leaders…this job is really hard and it continues to get harder, but at this point, there's very little in the way of mental health support for the security leaders and for the security teams. So I really think that CEOs are going to start to double down on not just innovating for the business. But also helping the CSOs to create both innovations for security, giving them the tools, the technology, and the solutions to kind of help them do their jobs better, but also supporting that with mental health and wellness support programs…And I think with that needs to come, not just funding and the support that we be seeing today, but it needs to come with mental health and wellness support because this job is probably the most stressful in the C-suite today.” — Shamla Naidoo

----------------

Episode Timestamps:

*(3:23) - Prediction: Increase of Insider Threats

*(5:20) - Prediction: Rebranding of Technology Specific Security Vendors

*(9:21) - Prediction: Rise in Deep Fakes, Voice Cloning, & Misinformation  

*(15:08) - Prediction: Increase in Companies Measuring Their Carbon Footprint

*(18:26) - Prediction: Autonomous Cybersecurity & Removing Human Delay

*(25:02) - Prediction: APIs as a Growing Attack Surface Risk 

*(33:54) - Prediction: The Risk of & Managing Machine Learning in the Future

*(37:40) - Prediction: CEOs to Create More Programs to Support the Mental Health of Security Leaders 

----------------

Links

Connect with Shamla on LinkedIn

Connect with David on LinkedIn

Connect with Steve on LinkedIn

Connect with Mike on LinkedIn 

Jason Clark’s LinkedIn

www.netskope.com

This episode features an interview with Dan Lohrmann, Field CISO of Presidio, a global digital services and solutions provider accelerating business transformation through secured technology modernization. Dan has more than 30 years of experience in the computer industry and is an internationally recognized cybersecurity leader, technologist, keynote speaker and author.

On this episode, Dan covers why every security leader needs to check out his new book, the biggest vulnerability that the government potentially isn’t aware of, and his top advice for a 1st-time CISO.   

-------------------

“The idea here is to marry up three parts: before, during and after an incident. So what can you do before, four chapters of the book is about, preparing everything from having playbooks and doing exercises, tabletop exercises, real true stories, what people learned and the good, the bad ugly. Then during incidents in the middle, real stories about that. And then at the end, what about afterwards? What, like the last chapter is turning cyber lemons into organizational lemonade. So really the idea of how can we take what we learned and then roll it back into our plan, into our playbooks, in our scenarios, and to get better and improve.” — Dan Lohrmann

-------------------

Episode Timestamps:

*(2:54) - Dan’s first job in security

*(4:42) - Dan’s current role as Field CISO of Presidio 

*(5:44) - Dan’s perspective on the changing speed of the government

*(7:19) - The biggest vulnerability that the government potentially isn’t aware of 

*(11:43) - Segment: The Deep Dive

*(25:44) - Dan’s predictions for the future

*(30:12) - Dan’s favorite security domain

*(34:16) - Top advice for a 1st time CISO

*(37:01) - If Dan could go back in time what he’d do differently

-------------------

Links

Connect with Dan on LinkedIn

Follow Dan on Twitter

Check out Dan’s new book! 

Jason Clark’s LinkedIn

www.netskope.com

This episode features an interview with Gary Harbison VP, Global CISO at Bayer. Bayer is a global enterprise with core competencies in the Life Science fields of healthcare and agriculture with a market cap of $53.5B. Gary has over 19 years of experience in the Information Security domain (21 years of overall IT experience) that includes roles at multiple global fortune 500 companies, as well as public sector experience with the US Department of Defense.

On this episode, Gary delves into where he thinks the largest gaps in security are today, what he believes will be a major issue in the future that nobody is currently aware of, and why he analogizes security leaders to car brakes. 

-------

“I would say that more than anything, I think people look at security as we exist to stop things. And while yes, we do want to stop attacks from happening and such, but in much the same way that having brakes on a car enables you to go faster, having a good security team that is able to assess and balance risk and bring forward solutions that allow you to take the right risks in a responsible way, can actually help the company move faster and help achieve business goals. So looking at it as we’re here to say no, or to stop things, we’re actually here to help figure out a way to say yes in a responsible way, and that can actually help the business move faster.” — Gary Harbison

-------

Episode Timestamps:

*(3:17) - How Gary got into security 

*(4:42) - Gary’s current role at Bayer

*(5:40) - Segment: Taboo Topics

*(5:40) - What outsiders get wrong about security

*(7:40) - The fasting growing risk in security today 

*(9:15) - How to do drive real-time risk assessment

*(9:28) - Segment: Deep Dive

*(28:52) - How Gary keeps up with security and gets better at his job

*(31:27) - What Gary would tell his younger CSO-self

*(33:30) - Segment: The Future

*(33:43) - What nobody is talking about right now that will be a major issue in the future

*(35:22) - What CSOs need to invest in for the future

*(36:49) - Segments: Quick Hits

-------

Links

Connect with Gary Harbison on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

 “How do we help create a pipeline of future cyber leaders, but then also, that pyramid, how do we get millions more people into the discipline? And just convince them that you don’t have to be a computer scientist or an engineer to do this. All you have to be is inquisitive. I want somebody who looks at something and says, ‘well, that’s interesting. That doesn’t make sense. Let me figure out why,’ that’s the person who would make a good security person. If you are somebody that looks at something and says, ‘I don’t understand why it looks like that, but I’m going to go figure out why,’ then you’re right for this field.” — Matthew McCormack

-------

Episode Timestamps:

*(2:30) - Matthew’s first job in security

*(4:10) - Segment: Taboo Topics

*(5:30) - Matthew’s role at GSK

*(7:05) - How Matthew keeps up with the changing industry of security

*(8:30) - Segment: Deep Dive

*(8:35) - What it was like going from federal security to commercial security

*(13:10) - The fastest growing risk in security today

*(24:10) - Birds-eye-view on the current state of frameworks 

*(29:00) - Segment: The Future

*(30:00) - What security leaders can do about the talent gap

*(35:25) - Matthew’s favorite domain in security

*(38:10) - Segment: Quick Hits

Links

Connect with Matthew McCormack on LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

“This landscape is changing and it comes to a point where I honestly believe CSOs are going to be some of the highest paid professionals in the future. And it's already heading in that direction. Over the last few years, we've seen a lot of change already, but this is going to be one of the most highest paid jobs in business because it will get to a point that you're not going to be able to pay people enough money to take on this amount of risk.” — Emily Health

-------

Episode Timestamps:

*(2:40) - How Emily and Jason met

*(3:10) - Emily’s first security job 

*(4:10) - Emily’s current role at DocuSign

*(5:15) - Segment: Taboo Topics

*(6:35) - Paying ransom or not paying ransom

*(8:00) - Other rapid growing risks that people aren’t aware of 

*(10:35) - Segment: Deep Dive

*(12:15) - Careers are jigsaw puzzles 

*(15:05) - Differences and similarities between United Airlines and DocuSign

*(17:35) - The “Trust” portion of Emily’s DocuSign title explained 

*(21:25) - How the pandemic affected Docusign and Emily’s role

*(26:50) - Segment: Feeling vulnerable 

*(27:55) - Emily’s thoughts on gut made decisions vs. data/biased made decisions 

*(31:25) - Why CSOs are leaving their jobs 

*(37:40) - What retirement looks like for Emily

*(39:30) - Segment: Into the Future 

*(42:40) - Segment: Quick Hits 

Links

Emily’s LinkedIn

Emily’s Twitter

Jason Clark’s LinkedIn

www.netskope.com

“To be an innovator, to be a leader, you have to keep challenging the status quo. You have to keep challenging yesterday's thoughts. that's what we really did when we sat down and as a team started listening to our colleagues. And taking that input to really develop out these principles, It was about challenging the way we've been doing things and really thinking about how business digitalization is changing us and our organizations” — James Christiansen

-------

Episode Timestamps:

*(2:05) - Setting the theme for the 2nd half of discussion & introductions

*(5:00) - Principle One: Challenge Your Existing Principles! 
*(7:29) - Principle Two: Stop Buying Blackbox Solutions — Buy “Open and Integrated” Instead

*(10:54) - Principle Three: Focus on Five Foundational Technologies that Integrate with Your Entire Security Ecosystem

*(15:05) - Principle Four: Only Buy Cloud-Powered New Technologies!

*(18:50) - Principle Five: Protect Business Data with Security Controls that Can Follow Data Everywhere

*(21:55) - Principle Six: Prioritize Business Risk/Reward When Making Security Strategy

*(27:50) - Principle Seven: Build Threat Models and Use Them in Every Architecture Decision You Make

*(29:34) - Principle Eight: Expand Security Operations Automation

*(37:16) - Principle Nine: Demand Continuous Visibility and Risk Assessment for Every Security Control

*(41:09) - Principle Ten: Reduce Attack Surface Using Zero Trust Principles

Links

Lamont Orange’s LinkedIn

James Robinson’s LinkedIn

James Christiansen’s LinkedIn

Erick Rudiak’s LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

“I think what I'd love for people to think about this series is the spirit of camaraderie and the spirit of community that has always been there in information security. And I think one of the really cool things about this series is that it creates a concentrated digestible version of that really enriching, magical experiences, where people who are passionate about their topic and just kind of get together and talk. And it's not about getting the predictions right so much as it is about having a conversation.” — Erick Rudiak 

-------

Episode Timestamps:

*(2:20) - How Erick and Jason met

*(3:20) - How Erick got into security & how he became the SVP & CTO of Northwestern Mutual

*(7:00) - What Erick would do differently with what he knows now

*(9:30) - Why Erick wanted to get involved in writing the book

*(12:30) - The purpose behind the book

*(14:30) - COVID-19 has accelerated everything 

*(16:55) - The convergence of network and security teams

*(19:35) - Who should be consuming this resource

*(21:50) - What’s changed the most in security since the start of the pandemic

*(23:40) - What CISOs will have wish they invested in now in 5-10 years time 

*(29:15) - Closing thoughts

Links

Erick Rudiak’s LinkedIn

Jason Clark’s LinkedIn

www.netskope.com

Digital transformation can’t succeed without radical changes to security and networking. And with malicious cyber activity costing the global economy $6 Trillion every year, getting security right is more important than ever before. 

Fortunately, there is a group of security and networking visionaries who are building and protecting the future. Not only are they keeping up with the changing landscape, but they’re peering around corners to get ahead, and offer practical advice that avoids hype and provides realistic, actionable insights.

On this podcast, you’ll hear the secrets, strategies, and tactics of top practitioners and thought leaders in cloud security, networking, IT infrastructure, workflow optimization, and AI. These industry experts are writing the playbook on how to adapt to unforeseen events and leverage cutting-edge technology to design a safer digital future.

So if you want to learn more about what’s next, tap the follow button and get ready to help us create the future of digital security.

Welcome to Security Visionaries.

Powered by the team at Netskope