UberKnowledge

Rahul and Rudolph describe Awake’s approach to network security and explain the only way to earn credibility in the market is to be honest with your customers. They admit CISOs would love to see one vendor provide that single pane of glass but the fragmented nature of the industry prevents it. In an effort to balance the lack of diversity in cybersecurity, Rahul encourages every executive to mentor.

22:10 Give back and mentor. Change the landscape of cybersecurity one young person at a time.

What it Takes to be a Unicorn

Sanjay talks company culture and the importance of being aligned with your board and your team. He advises budding entrepreneurs to measure their success by their own life metrics and believes mentoring and good role models are the best way to encourage diversity in cybersecurity.

02:09 Company culture is incredibly important to your success.

05:02 IT no longer determines what applications a company can use. The ability to influence is shifting to end users and business units, and that is powerful.

06:08 BYOD equals choice and flexibility but also risk to the enterprise.

08:19 Visibility is great, but you have to want to know how to deal with it, which is where policies come in.

09:01 To be successful you need to build relationships from the CxO level down and make sure those executives understand your broad vision.

10:29 Don’t fall into the trap of trying to copy anyone; define success by your own life metrics.

11:28 When you pick your team, your co-founder, your board, make sure you are aligned.

13:27 If you are building a company, make sure it is the right time and that your friends and family are in. You will need that support system.

14:38 Big company versus small company – there are lessons to be learned at both.

15:31 Experience from a diversity of functions and enterprises is crucial when leading a company.

17:41 When hiring should you have a filter on or should you hire blind?

18:54 To encourage diversity it is important to provide people with opportunity and good role models.

19:57 Netskope partners with the Athena Alliance to make a difference to women in cyber.

21:24 Conferences like RSA are a great place to get six months’ worth of travel and meetings in a few days

Sanjay Beri Interview Transcript

Sanjay talks company culture and the importance of being aligned with your board and your team. He advises budding entrepreneurs to measure their success by their own life metrics and believes mentoring and good role models are the best way to encourage diversity in cybersecurity.

How should vendors and CISOs communicate?

Mark discusses the relationship between CISOs and vendors arguing for more transparency on both sides. He points out that the fundamentals are always overlooked and underhyped and considers the ethics of using security incidents to get more budget.

1:59 In the rush to market, startups are failing to speak to their true capabilities.

3:48 The customer pitch, the VC pitch, and the marketing script should all be separate conversations, but they must have commonality.

4:27 Don’t bow to the buzzword pressure. A good leader, technologist, or vendor needs to stick to their unique storyline whether talking to customers or investors.

6:21 Customers need to be transparent in their needs and make a partnership with the vendor they choose. It’s a two-way street.

8:27 CISOs should cultivate a community of trusted relationships for advice and involve their technical and operational staff in vendor choices.

12:09 Going to smaller industry-specific events can really help you understand your customer.

13:52 Fundamentals are always underhyped.

15:44 Good communication between the CISO and the board or leadership is crucial. Don’t wait until the company is hacked before opening those lines of communication.

17:53 A logical extension of the CISO-vendor partnership is having the vendor help make the case for investment to management.

19:12 Instead of being marginalized on the fringes, the CISO is enjoying more time at the table involved in discussions on business as well as technology and security.

20:27 Turn up to the big expos like Blackhat with a goal in mind. Learn as much as you can and take the opportunity to have conversations in an open forum.

Mark Orlando Interview Transcript

It is time for a Consumer’s Technical Bill of Rights?

Brian Vecci talks about how freely we give away our most precious assets – not our personal ID but the data on our habits and behavior.

2:07 We get trained to say yes to everything.

2:48 We will never get to the point where consumers actually understand the EULA they are signing.

4:35 Data breaches of names and addresses are old news. People will only sit up and take notice when the data breach is of their Google search history or most visited locations.

4:47 Privacy is different to security. Privacy is the next technical or security leap forward.

6:24 A consumer’s Technical Bill of Rights.

07:53 20 percent of all data is open to everyone.

09:11 Consumers don’t understand how little privacy protection they have, and businesses don’t understand how much risk they are undertaking.

10:58 Consumer behavior won’t change, so companies need to quantify risk.

12:12 There will never be enough manual hands to manage all the data and put the controls in place. We need AI and machine learning.

16:44 A great piece of advice for selling in any industry: listen with empathy.

21:09 What is trust in the security environment?

22:65 When you talk about vendor-customer relationships, trust is emotional. Security is emotional and poor security has consequences, perhaps not enough.

24:00 Trust is built within an organization and then between that company and its customers.

Brian Vecci Interview Transcript

Mark discusses the relationship between CISOs and vendors arguing for more transparency on both sides. He points out that the fundamentals are always overlooked and underhyped and considers the ethics of using security incidents to get more budget.

Brian Vecci talks about how freely we give away our most precious assets – not our personal ID but the data on our habits and behavior.

Ajit Sancheti, Co-founder and CEO, Preempt Security

The Challenge of Identity in Security

Ajit asks where enterprise CISOs are finding their biggest challenges. He discusses the often-overlooked role of cybersecurity in the M&A process and suggests CISOs tell the board how they will manage risk post-transaction. He believes cooperation is the future of cybersecurity and sees mature technologies on platforms and bleeding-edge technologies as point solutions.

1:01 The network perimeter change means enterprises have to deal with many moving parts, but they often don’t understand how to identify threats

1:37 There are an overwhelming number of threat alerts, 90 percent of which are suspicious but not malicious. The talent shortage means we are seeing enterprises chasing down suspicious threats with resources they don’t have.

2:46 The principles of Preempt: maintain security, allow the business process to take place, don’t use up scarce resources.

4:23 Customers aren’t satisfied with detection alone they want to see response too.

6:45 Organizational structure. Enterprises are not monolithic. They have very clear security groups

7:21 Identity has been part of the infrastructure team and the IT team, not the security team.

09:02 Cybersecurity is simply not considered enough in M&A.

09:49 80 percent of dealmakers uncover data security issues in at least a quarter of their transactions.

11:31 What the CISO needs during M&A is visibility. Crucially, put in the tools to gain insight; do not rely on the security team of the acquisition.

Interview with Ajit Sancheti | 2

13:06 CISOs do not have a veto in the M&A process so they need to tell the board how they intend to manage risk.

15:34 Identity is becoming a big deal for security because we have seen so many transformations in the workplace.

16:32 There’s only two ways you can think of where security can be really effective. One is around the assets and applications. The other is around your identity.

19:03 There is no single pane of glass. You can’t go to war with just tanks or just soldiers or just airplanes.

19:35 Maturing technologies will be platforms and emerging technologies will be point solutions.

20:34 Can’t use just platforms or point solutions, CISOs will have to judge where to use which.

21:24 If CISOs can walk away from RSA 2019 having seen vendors being open with their technologies and each other, then the industry will be winning.

Ajit Sancheti Interview Transcript

The Challenge of Identity in Security

Ajit asks where enterprise CISOs are finding their biggest challenges. He discusses the often-overlooked role of cybersecurity in the M&A process and suggests CISOs tell the board how they will manage risk post-transaction. He believes cooperation is the future of cybersecurity and sees mature technologies on platforms and bleeding-edge technologies as point solutions.

Interview with Ajit Sancheti | 2

The Rise of the Cyber Industrial Complex

Malcolm declares the security industry is not to be trusted because it profits from insecurity.

00:23 Non-traditional beginnings to a CSO career.

02:02 The unusual role of a CSO in a vendor.

02:24 Security needs to crawl out from under IT because it touches every aspect of the business.

04:04 The security industry is not to be trusted because it has no economic incentive to solve the problem.

06:12 Business wants three main things: the risk managed, the cost lowered, and the friction controlled. CISOs need to be measured on that.

8:59 The rise of the cyber industrial complex: defense and depth has actually turned into expensive depth

11:19 The cybersecurity industry is not economically motivated to solve the problem. We need to demand attribution to the controls that failed and hold the industry accountable.

13:27 The role of security in M&A processes: build the cost of remediation into the acquisition budget and this should be bidirectional.

16:24 Selling on fear is like eating junk food: short-term satisfaction, long-term ruin.

17:36 Please don’t ask me for my risk register.

20:21 If we focus on protecting our customers to the best of our ability, the result will be the limitation of liability.

23:36 We focus on the fact that technology done right can connect and enrich lives and can create social and economic benefit.

Malcolm Harkins Interview Transcript