S4 E4 Should the office of the CISO be separate from IT?

21/04/2021 1h 11min Temporada 4 Episodio 4

Listen "S4 E4 Should the office of the CISO be separate from IT?"

Episode Synopsis

We are joined by Rob Oden for a discussion on cybersecurity. Rob is an Air Force veteran and has over 16 years of experience in cybersecurity and is a practicing security architect. This is part 2 of our interview with him. Rob provides insights into the many issues prevalent in cybersecurity and relevant to anyone serious about making their cyber environment safer.  
00:00 Introduction 
01:50 Why does being compliant not equate to great cybersecurity? 
13:53 No good deed goes unpunished 
16:50 Technology vs Process in cybersecurity
21:45 The Prevention Paradox 
28:54 Gov't Policies addressing cybersecurity 
34:41 Cybersecurity business problem or an IT Problem? 
37:37 Should the office of the CISO be separate from IT? 
40:26 How to quantify cybersecurity risk?
44:08 The insider threat and the executive order governing it? 
54:10 How to leverage the most underutilized cybersecurity asset? 
01:00:20 Vulnerability management 
01:07:18 Rob's favorite cybersecurity organizations  
To learn more about Rob Oden https://www.linkedin.com/in/robertoden/ 
To learn more about Dark Rhino Security https://www.darkrhinosecurity.com
To watch the videocast of this episode https://youtu.be/FnEilYhfrOw