Preparing to achieve CMMC compliance may seem daunting.   Especially in 6 challenging components.    But we’re going to make them easy.     In the latest The Virtual CISO Podcast episode, the tables are turned and I’m the one being interviewed. I explain these 6 problem areas and offer ways you can solve them.    To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.   If you don’t use Apple Podcasts, you can find all our episodes here.

Though 2020 has felt decades-long already…     We still haven’t had to deal with the long-term effects of the pandemic.   But we will. The question is: Can your security?    If you’re not sure, today’s guest will surely boost your confidence.    Reg Harnish, Founder and CEO at Slingshot Cyberventures and Founder at GreyCastle Security, joins the show to walk us through the threats and opportunities a post-pandemic world presents.    We discuss:   - How the pandemic is impacting security   - The threats companies face now and in the future   - Finding opportunities post-COVID-19 world

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.   If you don’t use Apple Podcasts, you can find all our episodes here.

CMMC is coming...   But that doesn’t mean 800-171 compliance is out the window.    In this episode, I catch up with John Ellis, Director of the Software Division at DCMA.   We discuss:   - How DCMA is conducting assessments   - Why 800-171 compliance doesn’t just go away until CMMC   - Why CMMC is so needed   To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.   If you don’t use Apple Podcasts, you can find all our episodes here.

Not too long ago, DevOps seemed like a fringe buzzword…   Now, it’s front-and-center.   So, what is DevOps and why should you care?   To answer, I invited Jon Bass, Co-Founder & CTO at Sym, onto the show. Jon’s expertise in the field makes him a perfect tour guide for the exciting — and often misunderstood — world of DevOps.    Jon explains:   - How DevOps moved from the fringe to the mainstream   - How agile comes into the picture   - What SecDevOps is and why it’s used   To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.   If you don’t use Apple Podcasts, you can find all our episodes here.

When ISO 27001 is optimized for speed, it’s an amazingly effective and efficient way to manage security and compliance.   Today’s guest is one of our most seasoned ISO experts in both client-facing and training roles.    In this episode, I interview Rich Stever, IT Security Auditor at Pivot Point Security, about key artifacts for optimizing your ISMS.   What we talked about: - Key artifacts of the ISMS, including security management policy - Objectives during your ISMS refresh - Privacy, ISO 27701 extensions, and all about the Information Security Management Committee - Poe Dameron (yes, the Star Wars pilot)   To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.   If you don’t use Apple Podcasts, you can find all our episodes here.

If your organization is in the DIB, CMMC compliance is a big deal.   It’s probably the biggest thing to happen to information security in history.    And you need to prepare. Your business could depend on it.    That’s why for this episode, I sat down with Chris Lank, Founder and CEO at Ivis, a company offering a solution for monitoring any compliance, not just CMMC, year-round.   Chris goes over the ins-and-outs of the changes CMMC will bring for your business — especially for smaller DIB organizations — and how to prepare.   What we talked about:   - Why CMMC is necessary   - What your organization needs to start doing right now to prepare   - How tools like Ivis’ can make the compliance process a whole lot easier   To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.   If you don’t use Apple Podcasts, you can find all our episodes here.

Prepping for an ISO 27001 audit can be a nerve-wracking process.  But it doesn’t have to be.  You just need to know what you’re getting into.  And Ryan Mackie, as Principal and ISO Practice Director at Schellman & Company, is the perfect person to guide you through an audit.  In today’s episode, he covers:

• Both stages of the ISO 27001 audit process
• What to expect on the day of the audit
• What to look for in a registrar (and what to avoid)

  To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

If you have a growing SaaS company, security may be far down your list of priorities.  I’ll be blunt… it shouldn’t. Security maturity can be make-or-break for SaaS clients and maybe even more importantly, SaaS investors.  As a Partner at Reitler Kailas & Rosenblatt, Jesse Nash has a wealth of experience representing early-stage SaaS companies and venture capital investors, so he’s seen how security helps and hurts deals from both sides.   He joined me today to go over:

• How he counsels SaaS on security matters
• How he counsels venture capital & private equity firms when approaching a SaaS
• Why security has become such an important part of the investment process

  To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here.
If you don’t use Apple Podcasts, you can find all our episodes here.

If you are scrambling to figure out CMMC, you aren’t alone. It’s perhaps the most sweeping information security change for DoD contractors in history…  And that comes with an assessment program dwarfing any other.  As Member of the Board of Directors for CMMC AB, the accreditation body for CMMC, Ben Tchoubineh is one of the minds behind these assessments… just don’t call it an audit :). Ben came on the show to demystify the CMMC assessment and certification process. He covered:

• The challenge of assessments and training
• How competition will help with scalability of getting qualified people in the market
• Types of certifications and careers

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

If your company works with the DoD. You might be worried about CMMC compliance. But it doesn’t have to be hard or expensive. In this episode, I caught up with Sanjeev Verma, Co-Founder at PreVeil, a company offering one solution for CMMC’s requirement for encryption of email and file sharing that can save you money and hassle, while giving you unparalleled security. What we talked about:

• The stakes of migrating from O365 Enterprise to O365 GCC High
• How a simple end-to-end encryption solution can save you big
• How to be as secure as the U.S. nuclear arsenal
• Why we are all active combatants in a new kind of war

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.