The Virtual CISO Podcast

Solving the Problems of Cloud Native Applications

Building Cloud Native Applications can bring about many operational and security problems. Today, we sat down

Ep#104 – Is Digital Business Risk Management the future of Attack Surface Management?

Digital Business Risk Management helps companies track and disrupt the most advanced bad actors and malevolent infrastructures.

Ep#103 – The Complexity of deploying a secure application in the cloud

Governance, Risk, and Compliance (GRC) platforms can be very tricky to construct. Today, we sat down with

Ep#102 – Rosemary Martorana – The intersection of Privacy and Security

You cannot have privacy without security. While they once existed quite distinct from one another, they are

Ep#101 – George Perezdiaz – Most Asked CMMC Questions

CMMC (Cybersecurity Maturity Model Certification) can raise many red flags and concerns – As CMMC rulemaking approaches

Ep#100 – Dimitri Sirota – The Two Audiences For Privacy & How They Drive Data Collection

This marks our 100th episode of The Virtual CISO and an insightful journey into having the opportunity

Ep#99 – Willy Fabritius – Unpacking Critical Elements of Supply Chain Risk Management

Supply chain risk management can prove to be a slippery slope—why should you take pains to conduct

Ep#98 – Taylor Smith – Breaking Down the Latest in Software Security Standards & the Impact on SaaS Businesses

What are the merits of the Software Assurance Maturity Model (SAMM), and how does it differ from

Ep#97 – Rob Dickinson – What You Need to Know about APIs and API Security

Application development is moving from a web-centric world to an API-centric world. If you’re wondering what that

EP#96 – James Fair – How to Measure the Value of Information Security

Most recognize the value preservation in cybersecurity. But forward thinking professionals also see the value creation in

EP#95 – Elzar Camper – Understanding NIST’s Secure Software Development Framework

What exactly is a Software Development Life Cycle, and how does NIST’s Secure Software Development Framework impact

EP#94 – Mark Montgomery – US Gov. Cybersecurity Roadmap: Where it came from and Where is it Going?

Today, information is worth more than riches. The new currency is data. With this being true, the

EP#93 – Robert Buda – Confronting the Wild West of Database Security

Don’t wait for an emergency; secure your database correctly right out of the gate. Think of everything

EP#92 – Ron Gula – Bridging the Gap Between Cybersecurity and the Business World

Ron Gula, President and Co-Founder of Gula Tech Adventures, has a very specific goal: To defend the

EP#91 – Eric Jesse – Legal & Infosec Strategies to Deal with Exploding Cyber Liability Insurance Premiums

There’s no denying that cybersecurity risks in the workplace have increased exponentially in recent years. From the

EP#90 – John Verry – Important Clarifications on CMMC v2 from CMMC Day May 9, 2022

To invest in CMMC or to not invest in CMMC, that is the question. CMMC (Cybersecurity Maturity

EP#89 – Alberto Yépez – The Past, Present and Future of Cybersecurity From the Viewpoint of a Venture Capitalist

Alberto Yépez joins the show to share his perspective as a venture capitalist working to help entrepreneurs

EP#88 – Michelangelo Sidagni – Understanding Attack Surface Management and how it applies to your cyber security strategy

We’ve spent the last two and a half years with rapidly rising cloud adoption. It was a

EP#87 – Chris Ciabarra – The Convergence of Physical & Cyber Security and the Impact to Cyber Security Professionals

As technology advances, there will always be new threats from malicious actors seeking to exploit these advancements

EP#86 – Caleb Leidy – What New Cybersecurity Maturity Model Certification (CMMC) Guidance Means for Managed Service Providers (MSPs)

As the implementation of CMMC by the DIB picks up pace, the frequently shifting requirements can be

EP#85 – Deidre Diamond – 8 Ingredients for Baking Inclusivity Into Your Culture

Inclusivity and diversity aren’t just about who you hire — it’s about the culture you create.

EP#84 – Jack Naglieri – Becoming More Efficient With a Cloud-Native Approach

What if you could be proactive in your approach to cloud data security rather than a

EP#83 – John DiMaria – Essential Cloud Security & Compliance Tips From CSA

Even before the pandemic, the majority of businesses were already moving to the cloud. Now, it

EP#82 – Kyle Lai & Caleb Leidy – Ongoing Challenges in CMMC

We’ve had another bumpy year in 2021. So, what’s coming down the pike in 2022? And

EP#81 – Mike McNeil – Is Open Source the Future of Endpoint Security?

Open source is a transparency issue. Being able to see what code is running on your

EP#80 – Maxime Lamothe-Brassard – The AWS Approach to Provable Security

Traditionally, companies have relied on the promises of vendors when it comes to reaffirming their security

EP#79 – Ryan Mackie & Danny Manimbo – What Does the New ISO 27002 Update Mean for You?

After years, ISO 27002 is finally here. What does that mean for your business? Luckily, the

EP#78 – Andrea Willis – CMMC 2.0 & Continuous Compliance

If you look around at what’s happening in the world of cybersecurity, you’ll notice one

EP#77 – John Verry – 8 Information Security Predictions for 2022

We’ve had another bumpy year in 2021. So, what’s coming down the pike in 2022?

EP#76 – John Verry – Government Security Guidance: How We Got Here

If you’re beholden to government security guidance — and let’s face it, if you’re a

EP#75 – Joe Grand – How Hardware Hackers Exploit IoT Vulnerabilities

You’ve probably heard the hype: IoT is the next frontier in the information revolution that

EP#74 – Harshil Parikh – Bridging the Gap Between Security & Development Teams

There is an age-old conflict between security and development teams. Development teams are focused on

EP#73 – Mark Richman – Why Cloud Is More Secure Than Your Average On-Prem Solution

What’s more secure? A cloud-based or on-prem document management system? It’s a question that

EP#72 – Brian Hajost – How Configuration Management Makes Security Simple

Configuration management is the best kept secret in security. Not only will it save time

EP#71 – Caleb Leidy & George Perezdiaz – CMMC 2.0 is Here! Find Out What It Really Means for DIB and Non-DIB USG Contractors

The US Department of Defense (DoD) has just announced CMMC 2.0, a new strategic direction for

EP#70 – Gerald Auger – How Simply Cyber Helps People Pivot to a Cybersecurity Career

A lot of people want to break into cybersecurity. And why not? Where else can you have

EP#69 – Steve Ginty – Can You Benefit From Attack Surface Management?

In a world where new vulnerabilities appear seemingly every minute, threat intelligence is more important than

EP#68 – Mosi Platt – Why Continuous Compliance Matters More than Ever

As public trust in technology erodes — for the first time — it’s clear that we need

EP#67 – Hoala Greevy – ‎The Virtual CISO Podcast: How HIPAA Compliant Email is Revolutionizing Healthcare

When it comes to healthcare InfoSec, it’s the Wild West. Most healthcare organizations just don’t have

EP#66 – Jason Powell – Private Practices: How to Prioritize Privacy in Your Organization

In the U.S., it’s easy to look at overseas privacy legislation like GDPR and conclude it’s a

EP#65 – Chris Dorr – Why Information Security Is Key to Business Strategy

Chess legend Bobby Fischer once said that winning tactics flow from a superior position. Bobby Fischer would

EP#64 – John Grange – Head in the Clouds: Multi-Cloud Security & Governance

How well do you know what’s happening in your cloud? With so many people in an organization

EP#63 – Johnna Verry – Can We Predict Security Threats w/ Machine Learning?

Every CISO’s dreams of moving from reactive security to purely proactive security posture. In an era of

EP#62 – John Verry – What People Get Wrong About ISO 27001 Compliance

Just because ISO 27001 suggests a control, doesn’t mean you have to have it – in fact,

EP#61 – Raj Krishnamurthy – Bridging the Gap Between Traditional Compliance & DevOPs

Traditional compliance approaches have served us well for years… But they just don’t cut it anymore. We

EP#60 – John Verry – A Guide for Validating Your Security Process

In this special episode, we’re sharing a guest appearance I made on The Perfect Storm. During that

EP#59 – John Verry – Governing Cybersecurity: A Process for Becoming Provably Secure & Compliant

Today’s special episode was inspired by a conversation I had with a then potential, now current client

EP#58 – Scott Sarris – The Cybersecurity Executive Order: What You Need to Know

In the wake of the SolarWinds fiasco, a new executive order mandates practices to prevent future attacks…

EP#57 – Is Your Business Safe? w/ Josh Amishav-Zlatin

By the time you think of a ‘new’ password, attackers already have a way to crack it.

EP#56 – Information Governance w/ David Gould

Information governance is the solution to that irrational fear of deletion we all experience from time to

EP#55 – DIBCAC & CMMC Audit Prep with George Perezdiaz & Caleb Leidy

Are you ready for your DIBCAC/CMMC audit? Let’s make sure. We’re speaking to two of our best

EP#54 – John Kindervag – Trust Is a Vulnerability: 5 Steps on the Path to Zero Trust

How do you quantify trust? Is it something that can be digitized? In the world of cybersecurity,

EP#53 – Dr. Eric Cole – You Are a Target: Assessing Cybersecurity Risk

Whoever propagates the rumor that the goal of cybersecurity is to prevent all attacks deserves to be

EP#52 – Stacy High-Brinkley – CMMC Assessments Are Here: What You Need to Know

In the latest episode, Stacy High-Brinkley, VP of Compliance Solutions at Cask, shares what you need to

EP#51 – Leah McGrath – Everything You Need to Know About StateRAMP

The federal government has FedRAMP to manage security authorizations for cloud service offerings. But cyber attacks don’t

EP#50 – Chris Neyhuis – How EDR & NDR Help You Make Better Security Decisions

Remember those halcyon days when you could just stick an antivirus on your desktop and not worry

EP#49 – Sanjeev Verma – How PreVeil Drive Makes Storing and Sharing Data More Secure

PreVeil Drive is a cloud service that lets users encrypt, store and share their files for CMMC

EP#48 – John Verry – Lessons Learned in Our Initial 27701 Certification Audits

ISO-27701 is an exciting new standard. But it comes with a learning curve for all of us

Using your ISO 9001 Management System to Simplify CMMC Certification

John Laffey, Program Manager at Perry Johnson Registrars, Inc. discusses the cornerstones of an information security management

EP#46 – John Sheridan – How to Communicate Across Departmental Divides

Have you ever wished that there was some sort of Star-Trek universal translator device for communicating your

EP#45 – Charles Weaver – MSPs, MSSPs & Validation: What You Need to Kno‪w

Gone are the days when every company had their own internal IT department. We’re well into the

EP#44 – John Verry Guest Appearance with Eric Hess on The Encrypted Economy: Why CMMC Is the Most Significant Standard of All Tim‪e

With the proliferation of so many information security standards, are we nearing a breaking point? In the

EP#43 – John Verry – CMMC Level 1: An Overview

Let’s talk about the Cybersecurity Maturity Model Certification, or CMMC. What is it, why should you care

EP#42 – John Virgolino – Solutions to Security, Compliance, and Technology Challenges in Aerospace

Manufacturing tends to resist new technology. Not aerospace, though. It’s on the cutting edge. In this episode

EP#41 – John Verry – CMMC Level 3: What Government Staffing Agencies Need to Kno‪w

In this episode of The Virtual CISO Podcast, host John Verry, CISO and Managing Partner at Pivot

EP#40 – Aaron Guzman – The ISVS: What You Need to Know

These days, everything is connected to the internet. Whether it’s your car, your light bulbs, your microwave,

EP#39 – Stephen Halbrook – FedRAMP: What You Need to Know

Are you looking to get your product authorized for use by federal agencies? Then you probably need

EP#38 – Dyann Mills – How Data Privacy Standards Affect Your Business

[et_pb_section fb_built=”1″ _builder_version=”3.22″][et_pb_row _builder_version=”4.8.2″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.8.2″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”] Privacy is

EP#37 – Craig Unger – Should You Invest in a GRC Tool for Security & Compliance?

[et_pb_section fb_built=”1″ _builder_version=”3.22″][et_pb_row _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.8.2″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ sticky_enabled=”0″] powered by Sounder

CMMC Preparation

ISO 27001

SOC 2 Readiness

Virtual CISO (vCISO)

IoT Security

Network Security

Application Security

Vendor Due Diligence

SaaS Security

Business Continuity

Blockchain Security

CMMC

NIST SP 800-218

CCPA

SOC 2

CIS CSC

PCI

FedRAMP

GLBA

NYDFS

GDPR

HIPAA

HITRUST

Podcasts

Resources

Blog

About Us

Leadership

Jobs

Locations

Partner With Us

The Virtual CISO Podcast