Trust, but verify. These famous words of Ronald Reagan, who, incidentally, would make a fantastic CISO, are also the simplest explanation of what it’s like to work as a virtual CISO. If step one is building trust and relationship with clients, step two is being let in to see all the inner workings and operations to make informed and strategic decisions. In this episode, John interviews Andrew Farkas, Virtual CISO at Pivot Point Security, about his experience as a vCISO and why the need exists for such a role.   What we talked about:

• What is a vCISO and why you (probably) need one
• Working with a vCISO to create a security plan
• Real examples of what a vCISO does
• Scope vs Risk vs Gaps

  You can reach out to Andrew via the Pivot Point Security website. To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

Considering an ISO 27001 certification? Wondering about SOC 2 attestation? Trying to figure out the differences between the two? We got you covered. We invited Dan Schroeder, Partner-in-Charge for Information Assurance Services at Aprio LLP, onto The Virtual CISO Podcast to explain attestation, certification, ISO 27001, and SOC 2.   What we talked about:

• What is attestation?
• ISO 27001 certification v. SOC 2 attestation
• Which does my company need: ISO 27001 or SOC 2? 

To hear this episode, and many more like it, you can subscribe to The Virtual CISO Podcast here. If you don’t use Apple Podcasts, you can find all our episodes here.

The cyber talent search feels like a global, dangerous game of Marco Polo. We’re all looking for each other, but nobody can find anyone. (And even if we do, it’ll only last 18 months or less.) In this episode, I interview Deidre Diamond, Founder and CEO of CyberSN, about attracting and retaining cyber talent during the talent shortage. What we talked about:

• How the fact that we are short 500K information security pros in the US impacts attracting and retaining them
• How career planning is the #1 way to retain talent
• Why job searching should be like using a dating app

Check out these resources we mentioned during the podcast:

• Deidre’s not for profit, Secure Diversity
• Get better at recruiting (CyberSN blog)
• KnowMore talent search

This post is based on a Virtual CISO podcast with Deidre Diamond. To hear this episode, and many more like it, you can subscribe to Virtual CISO here.
If you don’t use Apple Podcasts, you can find all our episodes here.

Katie Arrington is THE expert in the national cyber security battle.  As CISO for Acquisition and Sustainment at the United States Department of Defense, she’s well beyond needing analogies to understand cyber security news and trends. Yet, she had the best one on hand to explain Cybersecurity Maturity Model Certification (CMMC, for short). “At the end of the day, the CMMC is your cyber driver’s license to participate in the DoD supply chain.” Katie is the very first guest of the Virtual CISO podcast. She joined John Verry to discuss recent changes to verifying contractors’ ability to protect unclassified information. We also chat about:

• How the Department of Defense CMMC program will ensure the supply chain is properly protecting unclassified sensitive information
• When RFP’s will begin requiring CMMC certification
• How and when CMMC audits will begin
• What companies should do now to remain viable and competitive

Reach out to Katie: [email protected]
You can find this interview (and many more to come) by subscribing to The Virtual CISO Podcast on Apple Podcasts or Spotify.

Information security is a serious topic.     However, the host of The Virtual CISO Podcast and managing partner at Pivot Point Security, John Verry, doesn’t think security pros *always* need to be so serious.     In this intro episode of The Virtual CISO Podcast, Logan Lyles of Sweet Fish Media catches up with John to find out what exactly the show’s going to be covering.     John offers up:     

• His mantra that he shares with the great Tyrion Lannister 
• The challenges a CISO and managing partner faces every day 
• How the podcast will help to simplify information security processes 
• How the podcast will help Pivot Point’s customers (and their customers, too)  

To hear this episode and more like it, subscribe to Virtual CISO on Apple Podcasts, Spotify, or wherever you get your podcasts.