
Hosted by 909Exec Podcast · EN

Introduction Summary: In this episode of Cyber 909, host Den Jones introduces the podcast and welcomes guest Jake Bernardes, a seasoned multi-CISO and host of the Risking It All podcast. [00:20] Den highlights Jake's extensive experience in the cybersecurity field and his involvement in the CSO Society group. Guest Highlights: Background: Jake Bernardes is a seasoned multi-CISO and host of the Risking It All podcast. He has a diverse background, having worked in various regions including the UK, US, Far East, and Middle East. Key Contributions: Hosts the Risking It All podcast, focusing on people and leadership topics. [00:53] Currently the CISO at Anecdotes, a GRC automation platform. [14:04] Holds advisory and fractional CISO roles. [31:54] Extensive experience in pen testing, consulting, and working with startups. Known for his expertise in social engineering and cybersecurity strategy. Main Topics Covered: Jake's Background and Journey: Discussion on Jake's career path, including his early interest in computers, university studies in Chinese, and various roles in cybersecurity. [03:51] Role of Compliance in Cybersecurity: Debate on whether compliance equals security, with Jake emphasizing that they are different but both important. [25:40] Cyber Insurance: Jake's critical view on the effectiveness of cyber insurance and its role in the industry. [29:44] CISO's Role and Evolution: Conversation on the evolving role of CISOs, the importance of business acumen, and the need for CISOs to demonstrate value beyond technical expertise. [33:25] Strategic Security Management: Insights into how CISOs can align security strategies with business goals and the importance of being adaptable and creative in problem-solving. [33:25]

In this episode of Cyber 909, host Den Jones introduces a special "Ask Us Anything" segment featuring guest Aaron Wurthman. The episode promises to deliver unique insights, stories, and analysis on cybersecurity topics, with a focus on cyber leadership. Main Topics Covered AI in Cybersecurity: Predictions for AI's impact on cybersecurity, including its use by both attackers and defenders. [23:12] Zero Trust Architecture: The ongoing relevance and implementation of zero trust principles in organizations. [25:30] Metrics for Security Programs: Effective metrics for measuring the success of security initiatives. [07:36] Communication with Executives: Strategies for bridging the communication gap between technical teams and the executive suite. [10:25] Minimizing Friction in Security: Approaches to reducing complexity and improving security outcomes without adding friction. Aligning Security with Business Growth: How security strategies can support business objectives like revenue growth and customer satisfaction. [41:41] Emerging Trends: Key trends in cybersecurity that professionals should be prepared for, including AI and zero trust. [23:40] Cyber Insurance: Effective ways to reduce cyber insurance premiums while strengthening security. [56:42]

In this episode of Cyber 909, host Den Jones welcomes Jimmy Sanders, the current president of ISSA International and former head of security for Netflix DVD. [00:18] The conversation delves into Jimmy's extensive career in IT security, his educational journey, and the challenges he faced along the way. [02:19] Jimmy shares insights on the importance of passion and perseverance, the role of diversity in the tech industry, and the significance of understanding human psychology in security management. They also discuss the evolution of security practices at Netflix, the concept of freedom and responsibility in the workplace, and the future plans for ISSA under Jimmy's leadership. [01:09] The episode wraps up with advice for aspiring security professionals and a reflection on the importance of mentorship and continuous learning. Main Topics Covered Career Journey: Jimmy's path from flunking out of the University of Houston to becoming a prominent figure in IT security. Motivation and Passion: The importance of finding passion in one's work and the role of psychology in understanding and managing people. Diversity in Tech: Challenges and advice for aspiring black professionals in the tech industry. Leadership at Netflix: Managing a team during Netflix's transition from DVDs to streaming, and the unique challenges of working in an environment where employees are not primarily motivated by money. Security Philosophy: The balance between security measures and user experience, and the importance of layered security defenses. ISSA Initiatives: Future plans for ISSA, including international conferences, the 40th anniversary celebration, and partnerships with other organizations. Mentorship and Community Building: The value of mentorship and the importance of building a supportive community in the cybersecurity industry.

In this episode of Cyber909, host Den Jones introduces the podcast's focus on the softer side of life, including topics like coaching, stress management, and community support. He welcomes back guest Mel Reyes, who previously appeared in episode three, to discuss additional resonant topics they didn't cover in their last conversation. Main Topics Covered Personal and Professional Growth: -The discussion revolves around the importance of taking risks, setting goals, and maintaining a positive mindset to achieve personal and professional success. Emotional Intelligence: Mel and Den talk about the critical role of emotional intelligence in leadership and how understanding and managing emotions can lead to better team dynamics and personal fulfillment. Visualization and Gratitude: The episode highlights the power of visualization and gratitude practices in manifesting goals and maintaining a positive outlook on life. Handling Challenges: They discuss how to reframe negative experiences as learning opportunities and the importance of letting go of emotional baggage to move forward. Practical Advice: Mel shares practical tips on creating vision boards, setting achievable goals, and maintaining focus and motivation through various techniques and personal anecdotes.

In this episode of Cyber909, host Den Jones welcomes back Tyler Farrar, CISO at Exabeam. Den highlights the podcast's focus on the softer aspects of cybersecurity, differentiating it from other podcasts that primarily cover breaches. Den invites Tyler to discuss his recent articles and insights on cybersecurity. Main Topics Covered Technology Sprawl in Cybersecurity: - Companies often invest heavily in tools rather than focusing on people and processes. - The importance of foundational elements like asset management and network segmentation. - The need for actionable intelligence from data generated by security tools. CISO Paradox: -The challenge of CISOs being held responsible for security outcomes without having the necessary authority. - The struggle for CISOs to justify budgets and report effectively within their organizations. - The importance of CISOs being part of the executive leadership team to influence business strategy. Future of the CISO Role: - The potential increase in legal responsibilities and personal liabilities for CISOs. - The growing trend of virtual CISOs and the challenges in finding quality CISOs. - The need for better internal marketing and communication skills for CISOs to be seen as business leaders.

In this episode of Cyber909, host Den Jones introduces the podcast's focus on cybersecurity and beyond, emphasizing discussions on emotional health, the future of security, and other off-topic subjects. Den welcomes his guest, Nic Moy, the Chief Security Officer at Scrut Automation, and highlights Nic's extensive background in the security industry, including his work in the Obama administration on cybersecurity policy. Main Topics Covered NIST Cybersecurity Framework: - Nic's involvement in the creation of the framework. - The importance of making the framework outcomes-based rather than prescriptive. - Challenges in developing a widely accepted document with input from various sectors. Security Industry Challenges: - The evolving nature of cybersecurity threats and the need for continuous adaptation. - The balance between securing assets and managing resources and budgets. - The importance of identifying and protecting the "crown jewels" of a business. AI in Cybersecurity: - The role of AI and large language models (LLMs) in cybersecurity. - The need for practical applications of AI that solve real problems. - The potential and limitations of AI in enhancing security operations and product development. Vendor Relationships and Solutions: - The importance of vendors understanding the specific needs of their customers. - The challenge of differentiating between useful AI solutions and those that are overhyped. - The need for vendors to provide clear value propositions and support tailored to their customers' requirements. Future of AI and Cybersecurity: - Predictions for the AI industry in the coming year. - The potential for AI to transform underserved areas and improve efficiency in various sectors. - The likelihood of increased consolidation and acquisitions in the AI startup space.

The episode begins with the narrator introducing the podcast "Cyber909," hosted by Den Jones, a veteran chief security officer and CEO of 909Cyber. The podcast promises to deliver unique insights into cybersecurity through guests, stories, opinions, predictions, and analysis. This episode features an "ask us anything" session with Den Jones and Aaron Wurthmann, advisory CISO for 909Cyber. Main Topics Covered: Leadership and Security: Advice for CEOs and CTOs on prioritizing security, including starting security practices early and avoiding unnecessary tool purchases. Company Culture: Building a security-conscious culture from the top down and ensuring security is everyone's responsibility. Common Security Missteps: Observations on common security mistakes in startups and how VCs can address them. Role of 909Cyber: Supporting security leaders during board-level discussions, preparing startups for compliance and regulatory audits, and balancing short-term wins with long-term strategic goals. Career Advice: Importance of internships, apprenticeships, and critical skills for entry-level professionals in cybersecurity. Personal Stories: Den Jones' and Aaron Wurthmann's transitions into cybersecurity, including their backgrounds and career journeys.

In this episode of Cyber 909, host Den Jones interviews Bridget O'Connor, Managing Partner at Fortalice. Bridget shares her journey in cybersecurity, starting from her early days at the White House, where she was involved in the transition between the Bush and Obama administrations. She recounts her experiences working with Theresa Peyton, the founder of Fortalice, and how they built the company from the ground up. The discussion delves into the challenges of being a woman in a male-dominated field, the importance of human-centered design in cybersecurity, and the need for continuous education and training for cybersecurity professionals. Bridget emphasizes the significance of protecting personal and corporate digital footprints and the role of proactive measures in cybersecurity. The episode concludes with insights into the culture at Fortalice and the importance of building genuine relationships in the industry.

In this episode of Cyber 909, host Den Jones introduces the podcast as a source for cyber leadership and life skills, rather than focusing on incidents and breaches. He welcomes guest Jason Cenamor, the Chief Community Officer of the CISO Society, and invites him to introduce himself. Guest Highlights: Background: Jason Cenamor is based in Chicago and originally from the UK. He has a background in the event industry and technology. Key Contributions: - Founder of the CISO Society, a community for CISOs to discuss issues without vendor influence. - The CISO Society has grown to over 1200 members. -Jason emphasizes the importance of creating a safe space for CISOs to share and collaborate. -He also started a CIO Society but found more engagement and value in the CISO community. Main Topics Covered CISO Society: - Origin and evolution of the CISO Society. - The importance of a vendor-free space for CISOs to discuss and share. - The community's growth and engagement strategies. - Event Industry Insights: - Jason's disillusionment with traditional event models that prioritize vendor interests over attendee value. - The creation of the CISO Society as a response to these issues. Startup Showcase: - Introduction of the Startup Showcase to connect CISOs with vetted startups. - The process of CISO nominations for startups to ensure valuable engagements. CISO Role Evolution: - The increasing importance of the CISO role in organizations. - The need for CISOs to be involved in strategic decision-making. - The potential future of the CISO role, including its relationship with the CIO role. Advice for CISOs: - Avoid getting caught up in negativity and focus on finding solutions. - The importance of community and support among CISOs.

In this episode of Cyber 909, host Den Jones introduces the podcast as a source of wit and wisdom in cybersecurity. He emphasizes the focus on sharing lessons and experiences in leadership and life rather than delving into breaches and incidents. The guest for this episode is Diana Davis, the founder of Code Like a Girl, a keynote speaker, and a podcaster. Guest Highlights Background: Diana Davis initially pursued a career as a math teacher but discovered her passion for computing and cryptography during her university years. She completed a master's degree in cybersecurity at the University of Waterloo and worked at Blackberry, where she contributed to mobile cybersecurity and cryptography. Key Contributions: Developed cryptographic algorithms and protocols at Blackberry.Founded Code Like a Girl, a publication on Medium aimed at empowering women in tech.Advocates for women in technology and shares her experiences through blogging and public speaking. Main Topics Covered Diana's Career Journey: Transition from aspiring math teacher to cybersecurity expert, her work at Blackberry, and her move into leadership roles. Challenges and Experiences: Facing and overcoming gender biases in the tech industry, dealing with a toxic work environment, and the importance of support systems. Code Like a Girl: The inception and growth of the publication, its mission to amplify women's voices in tech, and the impact it has had. Advice for Women in Tech: Encouragement to believe in themselves, the importance of having a support network, and strategies for dealing with workplace challenges. Leadership and Mentorship: Insights into effective leadership, the significance of allyship, and the role of mentorship in career development. Work-Life Balance: The importance of managing stress, finding balance, and the role of family and community support in achieving career success.