The Paramify Podcast

We're talking with Mandy Andress, Chief Information Security Officer (CISO) at Elastic. Mandy is making a huge impact in the security industry as the author of Surviving Security: How to Integrate People, Process, and Technology, a Top 100 CISO (C100) Award recipient, and a LinkedIn Top Voice. Her leadership goes well beyond her role as CISO – she's also a trusted advisor to many organizations, a frequent speaker at global conferences like BlackHat and Networld + Interop, and a driving force behind Elastic's IPO success.

Learn more about Mandy Andress:

Learn more about Elastic:

Learn more about Kenny Scott:

Learn more about Paramify:

Today, we’re honored to have Michael Carter on the show! Michael is the Managing Partner and Co-founder of Fortreum. Michael brings over two decades of expertise in cybersecurity and compliance, specializing in FedRAMP, FISMA, PCI, and more. He has held key leadership roles at Coalfire and Veris Group, shaping compliance strategies for top organizations across both government and commercial sectors. Michael’s deep insights into security and risk management make him a leading voice in the industry.

Learn more about Michael Carter: / carte2ms

Learn more about Fortreum: https://fortreum.com/

Learn more about Kenny Scott: / kenny-g-scott

Learn more about Paramify: https://www.paramify.com/

Today, we're honored to have Alexander Stein on the show. Alexander has a host of experience in Cybersecurity. He has worked as an IT Cybersecurity Specialist at the National Institute of Standards and Technology (NIST). With over two years at NIST focusing on Information Technology and Vulnerability Management, Alex has also held key roles at Flexion Inc. as a Security Practice Lead and Application Security Engineer,

and at BAM Technologies Learn more about Alexander Stein here: LinkedIn:   / alexanderjstein  

GitHub: github.com/aj-stein.

Learn more about NIST: https://www.nist.gov/

Learn more about Kenny Scott: LinkedIn:   / kenny-g-scott   Learn more about Paramify: Website: https://www.paramify.com/ LinkedIn:   / dashboard  

Today, we're honored to have Michael Clauser, on the show. Mike is the Founder & Managing Director of Ark where he helps tech and defense companies navigate government relations. He is a seasoned professional in government affairs, cybersecurity, and national security. Michael has led pivotal roles at Okta, Access Partnership, Analog Devices, and Fujitsu Limited, and served as a national security aide in the Pentagon. With a decade as an Intelligence Officer in the U.S. Navy, he has also held leadership roles supporting veterans and contributing to public policy. 

Learn more about Michael Clauser: 

Learn more about Ark: https://ark.ga/

Learn more about Kenny Scott: 

Learn more about Paramify: 

LinkedIn: https://www.linkedin.com/company/80788473/admin/dashboard/

Today we're honored to have Matt Hillary on the podcast. Matt is the Vice President of Security and Chief Information Security Officer at Drata. He is a seasoned cybersecurity leader with 15 years of experience and a passion for enabling innovation. 

Learn more about Matt Hillary:

Learn More about Drata:

Learn more about Paramify: 

Matt Hillary brings over 15 years of experience in executive security leadership, risk management, and compliance. His impressive track record includes roles at Lumio, Weave HQ, Workfront, and Instructure. Matt holds a Master’s in Information Systems Management from Brigham Young University and is a CISA-certified professional. Known for his strong technical background, positive leadership style, and effective communication, Matt is dedicated to building tailored security solutions that drive measurable success.

Today we're honored to have Eric Evans on the show! Eric is the Founder and CTO of HanaByte, he is a cloud security and compliance expert. He has led security initiatives for startups to Fortune 10 companies and is a renowned public speaker on cloud security and compliance automation.

Learn more about Hanabyte:

https://www.hanabyte.com/ https://www.linkedin.com/company/hanabyte/posts/?feedView=all

Hanabyte's write-up on the OMB Memo:

https://www.hanabyte.com/a-look-at-the-modernizing-fedramp-memo/

Eric Evans's LinkedIn: https://www.linkedin.com/in/ericgonzalesevans/

Kenny Scott's LinkedIn: https://www.linkedin.com/in/kenny-g-scott/

Learn more about Paramify: https://www.paramify.com/

Today, we're honored to be joined by Den Jones, Founder and CEO of 909Cyber and a veteran in cybersecurity. With a robust career that includes roles as Chief Security Officer at SonicWall, CSO at Banyan Security and Senior Director of Enterprise Security at Cisco, Den brings a wealth of experience to the table. He's a Stanford alumnus with a focus on Cyber Security and Executive Strategy, holds a Higher National Certificate in Computing from West Lothian College, and is a certified CISSP. Den also hosts 'Get IT Started. Get IT Done.', a podcast that discusses the cybersecurity industry. He’s here to share his expertise on the evolving cybersecurity landscape, tackling complex security challenges, and his approach to leadership in this crucial sector.

Learn more about Den Jones: https://www.linkedin.com/in/denwjones/

Get IT Started. Get IT Done. Podcast: https://podcasters.spotify.com/pod/show/banyan-security

Learn more about Paramify here: https://www.paramify.com/

Learn more about Kenny Scott: https://www.linkedin.com/in/kenny-g-scott/

Today, we’re honored to have Rob Sherwood on the podcast. Rob is a seasoned cybersecurity professional with extensive experience in policy management, PKI architecture, and identity management. With over two decades in the field, Rob has left a lasting impact through his dedication to standards development, including his significant contributions to the Open Security Controls Assessment Language (OSCAL). From his role as a Principal Consultant at Credentive Security to his pivotal involvement in projects like the oscal-pki-policy-converter tool, Rob's passion for advancing cybersecurity practices is evident. As an advocate for collaboration and knowledge-sharing, his insights into OSCAL offer invaluable perspectives for professionals and organizations navigating the complexities of cybersecurity policy management.

Learn more about Rob: https://www.linkedin.com/in/rob-sherwood-credentive/

Credentive Security: https://www.credentive.com/

Paramify: https://www.paramify.com/

Today we had the honor to talk with Matthew Graham, the Director of US Federal Practice at Prescient Security. Matthew is a seasoned cybersecurity expert whose extensive career has spanned technical and strategic leadership roles. With a rich background that includes high-level certifications such as CISSP, CASP+, and CCNA, Matthew brings a wealth of knowledge on FedRAMP & cybersecurity practices and trends.

In this episode, we talk about everything from FedRAMP Rev 5 to Hurricane Katrina and police interrogations.

Learn more about Matthew Graham: https://www.linkedin.com/in/msgcyberassessments/

Learn more about Prescient Security: prescientsecurity.com

Learn more about Paramify: https://www.paramify.com/

Today we had honor to talk with Brandt Keller, a distinguished software engineer and open source developer advocate with a comprehensive background that spans significant achievements in both the military and technology sectors. A veteran of the U.S. Marine Corps, Brandt has transitioned his disciplined and strategic approach from the field of communications within the military to the forefront of software engineering and cybersecurity. His recent endeavors have led him to explore the intricacies of Governance, Risk Management, and Compliance (GRC), focusing on the adoption of the Open Security Controls Assessment Language (OSCAL) by NIST to promote data freedom and enhance the automation of compliance processes. Brandt's commitment to leveraging his expertise for the advancement of technology and compliance standards showcases his dedication to innovation and continuous improvement. We're truly excited to have Brandt on the show to delve into his rich experience, explore his contributions to the field of technology, and discuss his visionary work in making compliance data more accessible and actionable.

Brandt Keller's open source project: https://github.com/defenseunicorns/lula

Brant Keller's LinkedIn: https://www.linkedin.com/in/brandtkeller/

Paramify: https://www.paramify.com/