Podcast
RSAC
Hosted by RSAC · EN
RSAC is a premier global cybersecurity event and community brand dedicated to empowering professionals at every level. We bring together industry experts to share insights, tackle emerging threats, and showcase cutting-edge innovations. Beyond the Conference, we offer continuous resources, educational programs, and networking opportunities to foster collaboration and resilience in an ever-evolving field, all while staying true to our mission of creating a safer, more connected future.
28episodes
Episodes
Newest firstAll episodes
Cyber at the Top: Shadow AI: The Hidden Threat Inside Your Organization
Apr 200:41:41Summary readyGuest: JR Williamson, SVP & CISO, Leidos Generative AI is accelerating innovation, but it’s also creating new blind spots. In this episode, we explore how CISOs can manage the rising risk of “shadow AI,” where employees use generative tools without oversight or safeguards. JR Williamson, SVP & CISO at Leidos, joins Dr. Hugh Thompson to share how the defense sector is approaching unauthorized AI use, from detecting activity early to putting practical guardrails around data handling, classification, and ethical use. They discuss how to balance innovation with security, bring unsanctioned tools into the light, and prepare for the emerging GenAI risks on the horizon.
SummaryCyber at the Top: Cyber Resilience in Action: Lessons from a CISO
Mar 1900:29:12Summary readyCyber resilience has become a defining priority for today’s security leaders, but translating the concept into real-world impact isn’t easy. In this episode of Cyber at the Top, Dr. Hugh Thompson is joined by Emma Smith, CISO at Vodafone, to explore what cyber resilience looks like in practice and how it shapes decision-making at scale. Drawing on her experience leading a major global security transformation, Emma shares how organizations can prepare for disruption, reduce impact, and recover more effectively over time. The conversation looks at resilience through the lens of people, culture, operating models, and measurement, and highlights why trust, accountability, and continuous improvement are essential to sustaining resilience in complex, highly regulated environments.
Summary
AI Is Here. Deepfakes Are Real. Trust Is Not Automatic Anymore.
Mar 1000:28:16Summary readyAI-powered impersonation and deepfakes are no longer theoretical—they are changing how trust works in real time. This discussion explores how industry and government can use existing legal frameworks, shared standards, and regulatory intent to move from abstract concern to concrete action, making trust, verification, and accountability explicit as deepfake-driven risk accelerates. Clarissa Cerda, Chief Legal Officer and Corporate Secretary, Pindrop Security Stefanie Fogel, Partner & Vice Chair, Markets & Sectors, DLA Piper Tatyana Sanchez, Senior Content Coordinator, RSAC Kacy Zurkus, Director, Content, RSAC
SummaryCyber at the Top: Beyond Confidentiality: The New Priorities in Information Security
Mar 500:24:53Summary readyFor years, information security was largely centered on protecting confidentiality. But as our world becomes more digital and increasingly dependent on always-available, trustworthy systems, integrity and availability are taking on equal importance. In this episode of Cyber at the Top, Dr. Hugh Thompson is joined by Bjørn Watne, Global CISO of INTERPOL, to explore how this shift is changing the way security leaders think about risk. Together, they discuss why disruption is becoming a defining threat, how emerging technologies are reshaping security priorities, and what it means to balance all three pillars of information security. The conversation offers a thoughtful look at how CISOs can reframe security as a driver of resilience, reliability, and organizational trust.
SummaryWhat Cybersecurity Professionals Need to Know about Legal and Regulatory Developments: A World Tour
Feb 2500:36:10Summary readyKeeping up with the laws and regulations in all the different jurisdictions relevant for your business already feels overwhelming. In this RSAC podcast, we are excited to be joined by two members of the RSAC Program Committee, who will simplify the tangle by highlighting the most important elements of the global legal and regulatory landscape for the cybersecurity community. Tune into this podcast as we explore how organizations can stay ahead of these changes and highlight the key sessions attendees can look forward to regarding regulations at the upcoming RSAC 2026 Conference. Speakers: John Elliott, Principal Consultant, Withoutfire Laura Koetzle, Head of Community Research, RSAC Tatyana Sanchez, Senior Coordinator, Content & Programming, RSAC Kacy Zurkus, Director, Content, RSAC
SummaryCyber at the Top: Third-Party Risk: Challenges and Strategies for Security Leaders
Feb 1900:26:48Summary readyAs digital ecosystems expand, third-party relationships have become both business enablers and critical sources of cyber risk. In this episode, T.J. Patterson, VP and Information Security Officer at STAR Financial Bank, joins Dr. Hugh Thompson to explore how CISOs can navigate the growing complexity of third-party risk management. They discuss practical methods for identifying and prioritizing high-risk vendors, maintaining visibility beyond initial assessments, and driving accountability across the supply chain. From regulatory shifts to the limits of automation, this conversation offers actionable strategies for managing risk at scale.
SummaryBridging Artificial and Emotional Intelligence in Audit
Feb 1100:22:18Summary readyThe use of AI has weakened many of us in the areas of critical thinking and emotional intelligence. We are enticed by the speed of AI responses to our problems but it is our neural pathways that are stunted in growth due to the lack of usage. Tune into this podcast to learn how to bridge neuroscience, emotional and artificial intelligence to enhance and understand how to optimize. This podcast will drawn on the speaker’s research results in how we can effectively use AI to assist us in our professional and even personal lives while keeping our brains exercised. Nancy Yuen, Sr. Director of Global SOX and Audit Compliance, SoFi Technologies Tatyana Sanchez, Senior Coordinator, Content & Programming, RSAC Kacy Zurkus, Director of Content, RSAC
Summary
Cyber at the Top: Risk Quantification: Turning Cyber Risk into Business Language
Feb 500:29:43Summary readyBridging the gap between cybersecurity and business priorities starts with a common language that explains risk in terms business leaders can relate to. In this episode, Mathias Buecherl, Group CISO at Heidelberg Materials, joins Dr. Hugh Thompson to explore how data-driven measurement is reshaping how organizations communicate, prioritize, and invest in security. They discuss why standardized metrics matter, how to translate cyber threats into financial and business terms, and what it takes to gain executive buy-in. From overcoming resistance to applying financial rigor to building maturity over time, this conversation offers a roadmap for making cyber risk measurable and meaningful.
SummaryI vs AI
Jan 2600:22:40Summary readyAI is a friend, but it can be a terrible foe when not properly used. In cybersecurity, we also see AI as an enabler of cyber-criminal activities and security errors. In this podcast, we will focus on what you need to know to defend your enterprise against AI-enabled cyberattacks. We will also discuss how to protect yourself and your company against errors caused by the improper use of AI. Alex Holden, CISO, Hold Security, LLC Tatyana Sanchez, Content & Program Coordinator, RSAC
SummaryCyber at the Top: Choosing the Right Cybersecurity Partners: A CISO’s Playbook
Jan 2200:36:11Summary readyFrom busy showroom floors to hyped up vendor marketing claims, security leaders are constantly asked to choose the “right” cybersecurity partner. In this episode, Dr. Hugh Thompson sits down with Tal Arad, former CTO and Group CISO at Carlsberg Group, to unpack how security leaders can cut through the noise and build partnerships that strengthen their organizations. Drawing on his experience, Tal explores how to determine whether a solution truly addresses a real problem, why early technical discussions and proofs of concept matter, and what signals indicate a vendor can be a trusted partner. Ultimately, this episode offers a practical, experience-driven playbook for CISOs looking to choose partners they’ll still trust and want to work with years down the road.
Summary