Security Visionaries: Recent Episodes
Netskope
Security Visionaries is a thought leadership venture in the networking and security space, profiling hand-selected senior security, trust, and networking executives who are successfully navigating today’s changing networking/security landscape and helping to redefine the role of security and trust at their respective organizations.
On the latest episode of Security Visionaries, host Bailey Popp sits down with Teresa Carlson, Global Head of Public Sector at Anthropic and former CEO of the General Catalyst Institute, for a wide-ranging conversation on the intersection of AI, cybersecurity, and public-private collaboration. Teresa draws on nearly three decades in technology to share what it truly takes to work with government. From navigating compliance frameworks like FedRAMP to building sponsor networks that accelerate the path to authority to operate. The discussion explores how security leaders can shift from a checklist culture to an outcomes-based mindset, and why going in as a partner, not a vendor, is the defining factor for success. Teresa and Bailey also tackle the fragmented global AI regulatory landscape, the challenge of data sovereignty, and why startups bear a disproportionate burden in a world of conflicting mandates. This episode's bottom line? AI is minting a new generation of citizen developers and the opportunity has never been bigger.
On the latest episode of Security Visionaries, host Max Havey and guest James Robinson, CISO at Netskope, connect live and in-person at RSAC 2026 to discuss the cutting edge of security in the age of AI, particularly for highly regulated industries. They dive into the conference's biggest trends, focusing on the rise of agentic AI, the necessity of heavy guardrails, and the complex challenge of data sovereignty in a global regulatory landscape. James offers insights on the major hurdles facing highly regulated industries as they adopt AI, and shares practical advice for security leaders on shifting their AI governance approach from "no" to enablement. The discussion also covers innovative data governance strategies like moving from data classification to detailed data categorization, and the critical importance of utilizing red teaming and incident investigation to build robust defenses against emerging threats like prompt injection. If you couldn’t make it to the conference, hopefully this will fill you in on some of what you missed.
In this episode of Security Visionaries, host Emily Wearmouth welcomes Nycholas Szucko, a board member for many security companies who is based in Brazil, to discuss better approaches to solving misaligned communication between CEOs, boards, and security leaders. Using key data points from the Crucial Conversations report as a jumping off point, Nycholas offers practical strategies for CISOs and CIOs to bridge the gap. Together they cover the essential skills needed, from communication and storytelling to selling skills and understanding financials. They also offer advice around becoming a CEO’s "trusted lieutenant," determining your CEO's risk appetite (even using AI role-play for preparation), navigating frustration with technology as a "black box," and shifting investment from short-term "band-aid" fixes to strategic, long-term platform modernization. This episode provides constructive approaches for improving alignment, becoming proactive in strategic planning, and leading the business into the age of agentic AI. This conversation is a must-listen, whether you’re a CEO, board member, security leader, or anything in between.
In this episode of Security Visionaries, host Max Havey speaks with Beth Miller, Field CISO at Mimecast and author of Risk Reframing: How to Navigate Uncertainty With Resilience, about moving to a human-centered approach to cybersecurity. They discuss why fear-based training is ineffective, how the rise of AI makes human judgment more critical than ever, and how security leaders can redefine risk from a negative to an opportunity to "dare." Additionally Beth introduces some frameworks as practical tools for shifting security culture from one of control and compliance to one of resilience and navigation.
On this episode of Security Visionaries hosts Max Havey and Emily Wearmouth are joined by renowned social engineering expert Jenny Radcliffe, "The People Hacker," for a deep dive into the world of physical, and psychological, hacking. Jenny shares the unconventional path of her storied career, and further explores the role of physical infiltration in security. Additionally she digs into how the rise of AI is changing the reconnaissance process and creating new vulnerabilities, her thoughts on the 2025 Louvre heist, and the simple value of shutting up. This one is not to be missed!
On this episode of Security Visionaries host Bailey Popp and guest Kirk Ball, CIO at Worldpay, explore the intricacies of the CIO role, particularly as it relates to AI, boardroom communication, and more. Together, Bailey and Kirk discuss balancing quarterly results with long-term risk management through strong architectural discipline, how to effectively communicate technical and cybersecurity value to a non-technical board audience, and the strategic approach CIOs should take in navigating the "organizational opportunity" of AI. Plus, Kirk shares his perspective on the long-term decisions that define a CIO’s legacy, emphasizing the importance of talent, culture, and empathy.
On the latest episode of Security Visionaries, we have all three co-hosts, Max Havey, Emily Wearmouth, and Bailey Popp, together to reintroduce themselves and talk about 2026. Together, they dig into the topics they gravitate toward, tips they’ve learned from past episodes, and some topics they’re hoping to cover in the year to come. Plus, stick around for a rousing game of Two Truths and a Lie to cap things off and get to know the hosts a little bit better.
On the latest Security Visionaries podcast, host Emily Wearmouth invites Steve Riley back to demystify another key acronym in the AI world: MCP, or model context protocol. They break down what MCP actually is, how it functions, and why it is critical to understanding AI interactions. From there, they pivot into a discussion about the critical security implications of MCP, covering the risks of unauthenticated servers and the necessity of building both an authorization layer and an external policy layer to ensure granular access, data security, and compliance as AI agents proliferate. As always, this conversation with Steve offers illuminating context and perspective on one of the key security terms going into 2026. You won’t want to miss it.
In this episode, host Emily Wearmouth welcomes back Steve Riley, VP and Field CTO at Netskope, to demystify CSMA: Cybersecurity Mesh Architecture. They dive into what CSMA is, how it's being evangelized by analysts, and its vital role in moving beyond a simple zero trust model to achieve continuous adaptive trust. Steve explains the industry friction holding back standardization and issues a call to action for technology buyers to demand CSMA-ready products from their vendors, prioritizing interoperability to improve security posture and reduce risk.
Host Max Havey digs into the world of agentic AI-enabled threats and cyber espionage with guests Neil Thacker, Global Privacy and Data Protection Officer at Netskope, and Ray Canzanese, Head of Netskope Threat Labs. Together they discuss a recent report from Anthropic about the first-ever reported agentic AI-orchestrated cyber espionage campaign, exploring why this report lacked key technical evidence and the potential motivations behind them. They also dissect the notion that AI is making existing attack techniques—like phishing and social engineering—more accessible and faster, and debate the likelihood of another agentic AI-driven data breach in 2026.
Host Emily Wearmouth is joined by Netskope's Chief Digital and Information Officer, Mike Anderson, and Chief Information Security Officer, James Robinson, to discuss the evolving, and often conflicting, mandates of CIOs and CISOs concerning AI adoption. They dive into how to identify high-impact AI projects, the security challenge of shadow AI, and the need for new security models, like Model Context Protocol (MCP), to manage agent-to-agent communication. Additionally, learn about the internal initiatives Mike and James help to drive, such as the "Promptathon" and "AI Ambassador" program, designed to bridge the gap between innovation and security, and get their top tips for both disrupting and defending your organization in the age of generative AI.
In this episode host Max Havey dives deep into the world of unified security with guests Sinead O’Donovan, VP of Product Management, Identity and Network Access at Microsoft, and Eliot Sun, VP of Product Management at Netskope. Eliot and Sinead offer their perspectives on how an ideal unified strategy brings together data, network access, and identity. Additionally, they dig into the topline benefits, key metrics, and how organizations need to evolve to make a unified strategy a reality.
In this episode of Security Visionaries, host Emily Wearmouth and guest Samantha Swift delve into the world of BSides and CSides events. Samantha, who has experience as an organizer at BSides Lancashire, BSides Leeds, and BSides Newcastle, shares the origins of BSides, its community-driven ethos, and the unique aspects of these cybersecurity conferences. They also discuss the newer CSIDES initiative, which aims to bring cybersecurity knowledge to coastal towns, and the importance of fostering a welcoming environment for newcomers to the industry. If you’re interested in the way the broader cyber community brings in industry veterans and the “cyber curious” together, this episode is for you!
The 1995 film Hackers celebrates its 30th anniversary in 2025. To mark the occasion, host Max Havey sat down for a chat with guests Neil Thacker, Netskope's Global Privacy and Data Protection Officer, and Abby Olcese, Film Editor at The Pitch, to talk about the film and their relationship to it over the intervening three decades. Together they discuss why Hackers remains a cult classic, how Hollywood's depiction of cybercrime, cybersecurity, and cyberspace has evolved, and what modern depictions tell us about the world we live in.
In this episode of the Security Visionaries podcast, host Bailey Harmon speaks with Danyel Bischof-Forsyth, Chief Technology & Information Officer at 7 Brew Coffee. Danyel shares insights on managing aging infrastructure and modernizing systems without large budgets, drawing on her extensive experience at companies like Hallmark Cards and Tyson Foods. She discusses 7 Brew's rapid growth, the importance of a strong IT foundation, strategies for platform consolidation, and how the company ensures secure and seamless experiences for its dispersed franchisees. The conversation also touches on the cautious integration of AI and automation to maintain 7 Brew's unique culture and customer experience. You won’t want to miss this one!
Join host Emily Wearmouth for the very special episode of Security Visionaries recorded live at Infosecurity Europe. She's joined by Holly Foxcroft, Ian Golding, and Rich Davis to discuss the crucial conversations CISOs need to have with their CEOs this year. The episode dives into four key areas: cost, risk, innovation, and AI, offering insights and exploring the differing perspectives between tech leaders and CEOs.
On the latest episode of Security Visionaries, host Max Havey interviews Marcus Thompson, Director of Cyber Compass and former head of Information Warfare for the Australian Defence Force. They discuss the intersection of military and cyber defense, exploring how cybersecurity roles differ between military and civilian sectors, and the transfer of techniques and concepts. Marcus shares insights from his 34-year career in the Australian army, including lessons learned from cyber exercises and the importance of "cyber hygiene." The conversation also touches on international information sharing, the rising threat of cyber attacks, the role of AI in defense, and the responsibilities of both governments and private organizations in maintaining cybersecurity.
In this episode of the Security Visionaries podcast, host Emily Wearmouth chats with Netskope's Chief Scientist, Mark Day. They delve into the topic of AI, particularly large language models (LLMs), and why Mark believes they are "bullshitters." Despite this assertion, they discuss how these models can still be valuable and where AI truly shines within Netskope's systems. They also explore the difference between generative AI and agentic AI and touch on the future of AI and art. Expect a thought-provoking and slightly sweary conversation that challenges conventional views on artificial intelligence.
In this episode of the Security Visionaries podcast, host Bailey Harmon interviews Dan Whittingham, Enterprise Security Architect for Cyber Tooling at Rolls-Royce. Dan shares his extensive experience navigating the complex landscape of global compliance standards in the defense and aerospace industry. They discuss key regulations like Cyber Essentials Plus, NIST 2, ERSA, and CMMC, the challenges of balancing compliance with business needs, and Dan's advice for other security leaders. Tune in to hear insights on managing regulations, communicating with leadership, and the future of security in the age of AI.
In this special bonus episode, hosts Emily Wearmouth and Max Havey welcome new co-host, Bailey Harmon, to the Security Visionaries team. Listen in and get to know Bailey with this fun chat ahead of her upcoming first episode.
In this episode of Security Visionaries, host Max Havey and guest Savannah Westbrock, VP of Innovation at Coegi, discuss how to approach more security-focused roles when coming from a non-technical background. Specifically, they dive into the particulars of Savannah’s role and how security has become a big part of her role in enabling innovation in an increasingly AI-enabled world. Max and Savannah also dig into their shared journalism background and how that helps them to ask the right questions to best communicate and contextualize extremely technical topics. You won’t want to miss this lively and entertaining chat!
In this episode of Security Visionaries, host Max Havey chats with Michael Dickerson, CEO of TSC Global and founder of Dickerson Digital, about the critical topic of data sovereignty. They explore the differences between data sovereignty and data residency, the significance of indigenous data ownership, and the groundbreaking work behind Australia's first indigenous sovereign cloud. Michael shares insights on the challenges of securing cultural data, working with global cloud providers, and the broader movement toward national data sovereignty worldwide. Tune in for an eye-opening conversation on the future of data security.
Security Visionaries is back for 2025, and host Emily Wearmouth is kicking things off with a conversation about the intersection between cyber and physical security when it comes to major events with Ben Morris, Group Head of Cyber Security for World Rugby. In their conversation, Ben and Emily discuss the unique challenges of safeguarding international sports events, where cybersecurity and physical security intersect. From securing stadiums worldwide to collaborating with governments and navigating evolving threat landscapes, Ben offers fascinating insights into the complexities of modern sports security. Additionally, they also discuss how popular culture portrays security and the future of cybersecurity in global sports.
In this episode of Security Visionaries, host Max Havey is closing out the year with a look back on some of the major threat trends from 2024 with guest Ray Canzanese, Director of Netskope Threat Labs. In their conversation, Max and Ray discuss the new frontier of AI-enabled threats and the proliferation of deepfakes used in social engineering attacks, as well as the landscape of nation-state attacks. Additionally, they also dig into the trend that surprised Ray the most, seeing phishing attacks continue to rise and their conversation concludes with a discussion of the cognitive burden that comes with users being bombarded with phishing at every turn.
In this episode of Security Visionaries, we're joined by Kiersten Todt, President at Wondros and former Chief of Staff for the Cybersecurity and Infrastructure Security Agency (CISA) to discuss predictions for 2025 and beyond.Topics include the role of artificial intelligence in security, the potential for an AI bubble burst, and reclassifying the cloud as critical infrastructure. Kiersten also predicts an increase in detections of cyber intrusions from nation-state actors, especially China, underscoring the need for readiness and global cooperation. The discussion concludes with Kiersten's resolution for 2025, emphasizing the role of individuals in demanding more safety and security measures.
Join host Emily Wearmouth on the Security Visionaries podcast for her engaging conversation with Phil Miller, Divisional CISO at LPL Financial, about democratizing security. Learn more about his unique approach to making security an understandable and shared responsibility, as well as how this democratized approach relates to the idea of “security by design.” Additionally, Phil showcases practical ways to implement the democratization of security, including leveraging automation and AI, as well as detailing what metrics are used to measure success and why the human factor cannot be overlooked within security protocols.
On the latest episode of Security Visionaries, hosts Emily Wearmouth and Max Havey sit down with Netskope co-founders CEO Sanjay Beri and CTO Krishna Narayanaswamy to talk about the future of security and where things are headed next. In this conversion, they delve into a wide-ranging array of subjects, that include how quantum advances are impacting data security, impending shifts due to AI, and the challenges posed by data protection regulations like GDPR. Additionally, Sanjay and Krishna shed light on strategies around planning for unforeseeable factors, like COVID-19, and the importance of incorporating climate change into business planning.
On the latest episode of Security Visionaries, host Max Havey sits down with guest Troy Wilkinson, CISO at Interpublic Group (IPG), for a deep dive into the world of data lakes. In this conversation Troy offers his perspective on why data lakes have become an important aspect of modern security strategies, the sorts of challenges CISOs often run into with data lakes, and advice he would offer to other security looking to protect their data lakes.
On this illuminating episode of the Security Visionaries Podcast, host Emily Wearmouth sits down for a conversation about neurodivergence in cyber with special guest Holly Foxcroft, a neurodiversity consultant and expert on neurodiversity research in the cybersecurity industry. Holly, who herself is autistic with ADHD, delves into the intricate world of neurodiversity, sharing her unique experiences and perspectives.Holly and Emily explore the crucial role of understanding and embracing neurodiversity in the workplace and share practical tools for building a truly neuro-inclusive environment. The discussion also delves into the lesser-known area of acquired neurodivergence and underlines the urgency for organizations to treat neurodiversity as a critical aspect of healthcare and mental health support.
Join host Max Havey on the latest episode of Security Visionaries as he sits down with guest Jadee Hanson, CISO at Vanta. Jadee offers an in-depth and insightful look at the intertwining roles of CIOs and CISOs in the high-stakes world of cybersecurity. Tune in to listen to Jadee's journey, learn about the strategies she’s used to build bridges between security and technology teams, gain insights into the future of CISO roles, and discover why integrated processes and equal accountability are changing the game.
As June draws to a close, co-hosts Emily Wearmouth and Max Havey zoom out a bit to reflect on some of the most interesting episodes of 2024, the trends that are piquing their interest, and peak at what they’re hoping to cover in the rest of the year to come. This episode is great, particularly if you’re a new listener looking for a place to start. Some of the episodes covered include:
- How to Use a Magic Quadrant and Other Industry Research (with Steve Riley & Mona Faulkner)
- Changing Perceptions of Risk Appetite (with David Fairman & Jack Freund)
- Personal Resilience in Cyber (with Shanon Jurkovic and Samm Macleod)
- Young Voices on Diversity in Cyber (with Jacklyne Mbuthia, Sam Van Stockrom, and Ally Frame)
- Elections, Disinformation, and Security (with Shamla Naidoo)
- Zero Trust: It's More Than Just Identity (with John Kindervag & Neil Thacker)
- The Intersection of Zero Trust and National Security (with Chase Cunningham)
On the latest episode of Security Visionaries, co-hosts Max Havey and Emily Wearmouth sit down for a conversation with guest Chase Cunningham (AKA Dr. Zero Trust) about zero trust and national security. Drawing from his vast experience in both the Navy and cyber forensics, Chase discusses the significance of national governments adopting a strategic approach to cybersecurity. Listen as he examines the evolving cyberattack landscape and whether a Geneva Convention for cyber would be effective. Chase doesn't shy away from the tough issues, as he discusses the ethical challenges faced by democratic nations in a world where some adversaries play by different rules and he also shares interesting insights from his career journey both in the public and private sectors. Don't miss this episode packed with invaluable insights into cybersecurity, national security, and the zero trust framework
On the latest episode of the Security Visionaries Podcast, host Emily Wearmouth welcomes guests Richard Starnes, CISO of Six Degrees, and Homaira Akbari, President and CEO of AKnowledge Partners, for a conversation about the role of a non-executive director (NED), shedding light on i what this role entails. They discuss why the NED role can be particularly appealing for cybersecurity leaders and delve into the paramount importance of diversity on boards. Additionally, they also explore the existing cybersecurity knowledge gap on boards, emphasizing the need for cybersecurity professionals to articulate their knowledge in business language, as well as the impact cyber incidents can have on board focus. This is a conversation you will not want to miss!
On the latest episode of Security Visionaries, host Emily Wearmouth chats with guests Suzanne Oliver, an intellectual property expert, and Krishna Narayanaswamy, co-founder and CTO of Netskope, about the world of patents. From defining what a patent is, to understanding the roles of patent offices and the application process, they leave no stone unturned. The discussion delves into the nitty-gritty details of patenting costs, timeframes, and their strategic importance for businesses. Suzanne and Krishna also tackle the issue of patent trolls and the hurdles they create, along with highlighting the relevance of diversity and inclusivity in patenting. Tune in to hear a wealth of knowledge about patents and their pivotal role in the tech industry.
On the latest episode of the Security Visionaries podcast, host Max Havey digs into the world of remote work and innovation. Joined by special guests Rebecca Hinds, head of the Work Innovation Lab at Asana, and Yihua Liao, Head of Netskope AI Labs, they delve into strategic methods to cultivate innovation as a routine part of everyday work. Listen as Rebecca and Yihua share personal success stories from projects they’ve worked on, relay the significance of digital literacy, and recommend ways in which leaders can nurture a digitally competent culture. They also shed light on the hurdles of fostering innovation in remote teams and recommend ways to instigate creative collisions and measure collaboration. Don't miss out on this episode packed with valuable insights and practical advice on driving innovation in the workplace!
In this episode of Security Visionaries, join host Max Havey dives into the fascinating world of analyst research, centering on the renowned Gartner Magic Quadrant with guests Steve Riley, Field CTO at Netskope and a former Gartner analyst, and Mona Faulkner, Vice President, Analyst Relations at Netskope. In their conversation, they discuss the importance of a Magic Quadrant, along with other highly visible analyst research, why it's much more than just a chart. Learn about the role of analyst relations and understand why customer references hold significant value. This episode is a must-listen for any organization looking to leverage analyst research for informed purchasing decisions in a competitive, complex market.
On this episode of Security Visionaries, host Emily Wearmouth explores the concept of zero trust with cybersecurity experts John Kindervag, the "Godfather of Zero Trust,” and Neil Thacker. Listen in as they recount the origins of zero trust, its underlying principles, and how it's reshaping modern organizations. They also clarify the common misconception that zero trust is only about identity and access management, stressing that its broader scope in safeguarding organizational assets. Moreover, they delve into the trials and tribulations of implementing zero trust, and the need for comprehending the organization's mission and protect surface. Finally, we encourage organizations to gradually, iteratively, and inconspicuously adopt zero trust while keeping a close eye on the system.
On the latest episode of Security Visionaries host Max Havey dives into a conversation about the complex world of election security with Shamla Naidoo and co-host Emily Wearmouth. As a distinguished law professor at the University of Illinois, Naidoo offers a fresh and valuable perspective on the influence of rapidly advancing technology on our electoral processes. The episode takes a look at aspects of election security around voter registration and physical controls at polling places. Naidoo’s biggest worry, though, is not about compromise at the polls, but instead the alarming rise of psychological manipulation through misinformation and disinformation, emphasizing the need for consumer education and awareness in combating these deceptive tactics. Tune in to hear critical discussions on combating these threats and tangible tips for consumers on how to adopt a discerning attitude towards information.
Just in time for International Women’s Day, the latest episode of Security Visionaries finds host Emily Wearmouth sitting down with guests Emily Heath and Shamla Naidoo, as they shine a light on the importance of diversity for better business outcomes whilst discussing the roadblocks faced by women and people of color in the cybersecurity sector. Listen in as they offer insightful reasons behind this decline and underline the necessity for true intent, focus, and discipline to revolutionize outdated norms, leading to a more inclusive cybersecurity industry. This episode underscores the urgent need for a shift in attitude and acknowledgement of diversity as an essential aspect of cybersecurity organizations.
Prepare yourself for an exploration into the ever-changing world of cookies and data privacy on the latest episode of the Security Visionaries Podcast! Join host Emily Wearmouth as she sits down with experts David Fairman and Zohar Hod to discuss the past, present, and future of internet cookies. From the rise of third-party cookies and their subsequent fall, to the role Google has played in these transformations, and beyond, this discussion promises to leave no stone unturned. Our guests delve into the responsibilities of data protection officers, the evolving future of personalization via AI, and the opportunities as well as challenges emerging from these shifts. Tune in to gain invaluable insights into data privacy's evolving landscape!
On the latest episode of the Security Visionaries Podcast, host Max Havey sits down with Rich Davis, Director of Product Solutions Marketing at Netskope for a deep dive into the crucial topic of cyber hygiene. Specifically, they get into assessing the impact of cyber awareness days and revealing the challenges businesses face in instilling year-round cyber hygiene habits. Discover how multi-factor authentication and zero trust principles can elevate your cyber hygiene. From making cybersecurity personal to converting it into a business initiative, this episode is packed with useful tips for improving cybersecurity in your organization and personal life.
In this episode, host Emily Wearmouth dives deep into the concept of personal resilience in cybersecurity with guests Shannon Jurkovic, CISO for Bendigo and Adelaide Bank, and Samm MacLeod, CSO & CRO for Culture Amp. Their discussion revolves around the role of personal resilience in strengthening corporate resilience and the effects stress can have on cybersecurity professionals. Shannon and Samm highlight the urgent need for organizations to address mental health, to identify signs of burnout, and to foster a supportive environment. Listen in as they share their own coping techniques to handle stress and build resilience personally and professionally.
Tune into our latest Security Visionaries podcast where host Max Havey engages in a riveting discussion with Ray Canzanese, the Director of Netskope Threat Labs as they reflect on the threat landscape trends of 2023. In this episode they examine the emergence of generative AI, the rampant use of Trojans in cyber attacks, the dynamic tactics of cyber extortion, and delve into the effects of geopolitical conflicts on cyber threats and the prevalent role of ransomware.
Read the latest Cloud and Threat Report here.
Join host Emily Wearmouth for an insightful discussion with three bright young professionals in cybersecurity: Ally Frame, Jacklyne Mbuthia, and Sam Van Stokrom. In this episode, they open up about their backgrounds, motives for venturing into cybersecurity, and their unique experiences in STEM fields. As the industry craves more diversity, the trio discusses the hurdles they face as minorities and share ambitions for their long-term careers. The episode also delves into strategies to encourage a more diverse pool of talent in cybersecurity, such as amplifying awareness of related career paths, funding training initiatives, and fostering mentorship opportunities.
Learn more about Cyber Girls here and your local Women in Cybersecurity chapter here.
On this episode of the Security Visionaries podcast host Max Havey engages in a fascinating discussion with Steve Riley, former Gartner analyst and Field CTO at Netskope and Carl Smittle, Network Engineer for Charter Communications, about the history, significance, and future of virtual private networks (VPNs). Understand how VPNs revolutionized businesses, and how the advent of zero trust network access (ZTNA) shows a potential replacement for VPNs, as Steve and Carl provide advice for organizations looking to take the next step as they retire their existing appliances.
It’s predictions season once again, and to mark the occasion, host Emily Wearmouth sits down for a conversation with Sherron Burgess, Senior VP and CISO for BCD Travel, and Shamla Naidoo, Head of Cloud Strategy and Inovation at Netskope, to talk about the hot topics they're seeing for the year to come. Sit back for a rousing conversation about the changing relationship between CISOs and boards, the evolving world of cyber skills, the impending rise of AI regulations, and continuous adaptive zero trust.
How have perceptions and appetite for risk changed over the past 5 years? In this episode of Security Visionaries we speak to the man who literally co-wrote the book on risk, Jack Freund, Chief Risk Officer at Kovrr, along with a CIO and CISO who has worked for more than one global financial institution, David Fairman CIO & CSO - APAC at Netskope, to try to better understand how cyber risk sits within broader organization risk decisions.
Interim security leaders head up huge teams, babysit massive budgets and are (for a time) responsible for some of the most well known brands in the world. In this episode we talk to Alex Clixby and Ian Golding experienced interim and fractional CIOs to find out more about the role. What challenges are unique to an interim? What sort of skills are needed to hold such a crucial role for a short period of time. Is Interim a way to avoid burnout or is it more prone to the issues?
In this episode of Security Visionaries, we sit down for a conversation with Ray Canzanese, Director of Netskope Threat Labs, to discuss some of the big takeaways from the just released October 2023 Cloud and Threat Report. Ray digs into why he chose to focus on the adversary this time around, what surprised him about his findings, and how security folks and beyond can best use the findings from this report.
Read the latest Cloud and Threat Report at: https://www.netskope.com/netskope-threat-labs
Amid the endless hype, what is the one thing about AI that you wish was being discussed more? In this episode, host Emily Wearmouth sits down with Neil Thacker, EMEA CISO, Yihua Liao, Head of Netskope AI Labs, and Suzanne Oliver, Director of IP Strategy at Scintilla, to discuss the topics in the realm of AI that they each wish people were discussing more.
In this episode Robert Arandjelovic, Director of Solutions Marketing at Netskope, and Gerry Plaza, Field CTO at Netskope, sit down to chat with Max Havey, Senior Content Specialist at Netskope, about how the conversations around SASE have evolved since Gartner coined the term in 2019 and how embracing a SASE journey can ultimately help bring networking and security teams closer together.
Register for SASE Week (September 26-28) to hear more exciting conversations about the future of SASE:
- Americas: https://bit.ly/44yWJfx
- EMEA: https://bit.ly/3QV7NAm
- APAC: https://bit.ly/3sqYkXa
In this episode, Shamla Naidoo (Head of Cloud Strategy and Innovation at Netskope) and Homaira Akbari (President & CEO of AKnowledge Partners) sit down for a discussion moderated by Steve Weber (Partner at Breakwater Strategy) to discuss their recently released, co-authored book "The Cyber Savvy Boardroom: Essentials Explained." In this conversation, Shamla and Homaira discuss their impetus for writing this book, how it addresses evolving trends in cybersecurity, and the sorts of feedback they’ve received on it from their peers.
This bonus episode features an interview with Steve Riley, Field CTO of Netskope. Steve is a widely-renowned expert speaker, author, researcher, and analyst. Prior to Netskope, Steve came from Gartner, where for five years he maintained a collection of cloud security research that included the Magic Quadrant for Cloud Access Security Brokers and the Market Guide for Zero Trust Network Access.
In this episode, Mike and Steve discuss the Gartner® Magic Quadrant™ for Security Service Edge (SSE), Netskope’s positioning, and how the current economic climate will impact the SASE journey.
Get your complimentary copy of the 2023 Gartner Critical Capabilities for Security Service Edge report and review the 2023 Gartner Magic Quadrant for Security Service Edge
“I would say that there's a lot of power in the singles. The single policy framework, the single console, the single agent. I've talked to a lot of folks who complain about having to log into multiple consoles, multiple single panes of glass, as some people might want to say. And they love the fact that when they come to Netskope, it's one spot. The singles are helping us eliminate all of these acronyms and eliminate all of the ways [of] thinking differently about the different destinations and having that unified policy mindset.” – Steve Riley
Episode Timestamps:
*(03:58): Steve’s background at Gartner
*(07:57): Steve discusses the importance of last year’s SSE MQ
*(10:49): What’s changed about SSE in the last year
*(19:51): How Netskope’s positioning furthers the SASE journey
*(24:43): How the current economic climate will affect SASE
*(34:29): The most important outcome of getting SASE right
*(37:45): Why SASE is the right bet to make
*(40:13): 2030 Goggles
*(44:11): Quick Hits
*(48:23): Mike’s 3 takeaways from his conversation with Steve
Links:
Connect with Steve Riley on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Parag Thakore, Senior Vice President of Borderless WAN at Netskope. Prior to Netskope, Parag was the CEO and co-founder of Infiot, which was acquired by Netskope in May 2022, and served as the Vice President of Products and founding member of Velocloud Networks.
In this episode, Mike sits down with Parag to discuss the convergence of networking and security teams, how SD-WAN helps the hybrid workforce, and simplifying the end user journey.
“I would say, encourage security buyers and security people to also start thinking about performance characteristics and optimization, and whether that infrastructure can deliver that for them or not. And they don't need to be experts. It's a very simple question in terms of, ‘Can I get this high performance connectivity from this cloud security that I'm purchasing or that security vendor that I'm looking for?’ I think ease of operations and that high performance connectivity is something that security should also look at as a criteria when they look at security platforms.” – Parag Thakore
Episode Timestamps:
*(02:12): Parag’s background
*(07:18): Parag’s take on security as a team sport
*(12:48): The convergence of networking and security teams
*(24:02): How SD-WAN helps the hybrid workforce
*(27:01): The consolidation opportunity SD-WAN provides
*(29:58): Creating better digital citizens through SD-WAN and converged principles
*(31:54): 2030 Goggles
*(35:23): Quick Hits
*(38:54): Mike’s takeaways
Links:
Connect with Parag Thakore on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Andreas Rohr, founding manager and CTO at the German Cyber-Security Organization (DCSO). At DCSO, Andreas is responsible for Innovation and Security Engineering and its Managed Cyber Defense Services. He has over 15 years of experience in IT and cybersecurity, holding management positions in the energy and automotive industries.
In this episode, Mike and Andreas discuss aligning with works councils, forging business relationships through transparency, and embedding security into value streams.
“The most convincing story for works council, who are actually not there to prevent security or the company doing the right things, they're there to make sure that the data is not abused against the employees. This is their mission, their task, and it's a valid one. [...] When I was in the CISO position in such companies where they were actually a strong works council, the best relationship is if you are really being transparent to what you do, why you're doing that.” – Andreas Rohr
Episode Timestamps:
*(02:06): Andreas explains what DCSO is
*(09:18): Guideposts DCSO is helping companies align to
*(15:45): How Andreas is helping companies navigate the German Works Council
*(19:27): Andreas’s journey from CISO to CTO
*(23:34): Andreas’s advice on determining the budget for security
*(27:30): How Andreas advises companies on making security part of the fabric of their organization
*(34:29): 2030 Goggles
*(43:01): Quick Hits
Links:
Connect with Andreas on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Alvina Antar, CIO at Okta. Alvina leads the Business Technology Organization and is responsible for enabling a smooth customer and employee experience. Prior to joining Okta, she spent 17 years at Dell and served as Zuora’s first ever CIO.
In this episode, Mike and Alvina discuss identity-first security, automating business processes through AI and ML, and leading by example to achieve a more diverse industry.
“For the longest time we've heard how there's a ton of friction between the CIO and CISO and IT and security teams. Where the security organization is developing strategies and IT hears about it and has to somehow deliver and execute against that strategy without any input around the decisions or choices that are made. And in reality, in order for us to be successful, we really need to operate as one team. And that's exactly what we're doing here. The only way we can really build a security-first culture is if we operate as one team. And not only just between IT and security, it's really building security champions across every part of the business. Every single employee should feel accountable for hardening our security posture.” – Alvina Antar
Episode Timestamps:
*(02:37): Alvina’s journey to becoming a CIO
*(05:01): How Okta uses Okta
*(10:38): How Alvina thinks of her role in the current environment
*(18:17): Alvina’s take on security as a team sport
*(22:22): Alvina’s advice for speaking to the board about security
*(26:29): How Alvina is building a human firewall
*(30:31): 2030 Goggles
*(33:10): How we can get more diversity in security
*(35:29): Quick Hits
*(38:09): Mike’s takeaways from his conversation with Alvina
Links:
Connect with Alvina on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Joe Topinka, CXO Advisor at Netskope. Joe is a mentor, author, speaker, and CIO with more than 35 years of experience leading IT organizations to drive business results. He is the founder of CIO Mentor, a consulting company that aims to help IT leaders achieve success in their organizations.
In this episode, Mike sits down with Joe to discuss enterprise risk management, fostering relationships with business units, and people-powered frameworks.
“I think having an enterprise risk management program is really huge. Whether it's formal or not, somebody has to be responsible for risk overall. That gets to this whole idea that it is a team sport and everyone has a role to play, especially business unit leaders that are making decisions on cloud platforms on their own. They're playing a huge role on that. [...] The idea around cybersecurity several years ago, it wasn't quite where it is now, but the enterprise risk management team has done a really solid effort of elevating the dialogue and getting everyone more cognitive and aware that cybersecurity is not just an IT thing, it's a company thing and it fits into the whole cybersecurity framework overall.” – Joe Topinka
Episode Timestamps:
*(02:53): Joe’s journey to becoming a CIO
*(11:07): How Joe advises people on translating business management to security
*(15:52): Joe’s new CIO acronym
*(20:25): Mike and Joe discuss the business relationship aspect of security
*(29:42): The importance of enterprise risk management programs
*(37:35): 2030 Goggles
*(41:13): Quick Hits
Links:
Connect with Joe on LinkedIn
Connect with Mike on LinkedIn
www.netskope.com
This episode features Mike Anderson leading a roundtable discussion with Ilona Simpson, Chief Information Officer EMEA at Netskope and David Fairman, Chief Information & Chief Security Officer APAC at Netskope.
In this episode, Ilona and David share their predictions and resolutions for cybersecurity in 2023. You’ll hear predictions about the industrial metaverse, confidential computing, quantified risk reduction plans, and convergence of priorities for security teams.
“If you think about cybersecurity, we are just a subset of a broader operational risk. Operational risk actually has a much better approach or a little bit more maturity in being able to quantify operational risk in the organization. CISOs need to be able to stand toe-to-toe and be able to have a discussion at parity in regards to risk buydown for this subset of operational risk. And that's really where we are. I think as an industry, as a practice, as a profession, we need to get much smarter at figuring out how do we make this a much more quantitative conversation.” – David Fairman
Episode Timestamps:
*(02:47) - Prediction & Resolution: The Industrial Metaverse
*(12:23) - Prediction & Resolution: Confidential Computing
*(17:54) - Prediction & Resolution: Quantified Risk Reduction Plans
*(25:27) - Prediction & Resolution: Convergence of Priorities as a Result of Transformation
*(30:38) - Mike’s Prediction: Vendor Consolidation
Links:
Connect with Ilona on LinkedIn
Connect with David on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Marilyn Miller, Chief People Officer at Netskope. Marilyn is responsible for Netskope’s global human resources functions, including employee experience and talent acquisition. She has over 20 years of experience in high-visibility HR roles, including Anaplan, Alfresco, and Cisco Systems.
In this episode, Mike and Marilyn discuss building security into the fabric of your organization, working collaboratively with CIOs and CISOs, and using storytelling to attract talent.
“We talk about security as a team sport and a shared responsibility and accountability. I think the more that you can drive it from it's instilled in your culture and your values, you have less of a dependency than on the policing and the policy requirements of it. You still need to have those things in place, but I believe a lot in how do we educate, how do we enroll, how do we talk about the importance, how do we make it part of the fabric and culture of the company? And everybody understands their responsibility around data security, and the protection of it.” – Marilyn Miller
Episode Timestamps:
*(02:33): Marilyn’s journey to becoming Chief People Officer
*(04:44): How Marilyn works with security leaders when recruiting talent
*(11:55): How Marilyn has seen cybersecurity becoming a company value
*(18:58): Examples of personal security hygiene translating to the office
*(21:53): Examples of CIOs and CISOs partnering with HR and People leaders
*(26:45): How the pandemic changed hybrid work and what Marilyn hopes will stay
*(33:56): Marilyn’s advice for Chief People Officers in other organizations
*(36:42): How we can get more diversity in security
*(39:38): Quick Hits
Links:
Connect with Marilyn on LinkedIn
Connect with Mike on LinkedIn
www.netskope.com
This episode features an interview with Daniel Hartert, CXO Advisor at Netskope. Over the last 20 years, Daniel has held CIO and CEO positions at large international organizations like Bayer Business Services and Philips Group. He is also a co-founder of DCSO (Deutsche Cyber Security Organisation), a company working to strengthen protection against evolving and growing cyber threats.
In this episode, Mike sits down with Daniel to discuss communicating with C-suite executives, how advisors can enable people through security, and the critical success factors of a CIO.
“I'm coming from industries where manufacturing and health and safety was a big point. So, in these industries, there is a mindset around EHS; environmental, health, and safety. [...] I see a strong analogy because watching out for a malicious email or malicious emails is very similar to using the handrailing when walking down the staircase. So, this is what we need to build into the DNA of an organization, this permanent security awareness. And if we can build this, then this protection level of a company will immensely increase. Because in the end, the doors to malicious actions are always the people.” – Daniel Hartert
Episode Timestamps:
*(02:27): Daniel’s journey to becoming a CIO
*(05:25): How Daniel transitioned into an advisory role
*(07:37): Daniel’s take on security as a team sport
*(17:57): How Daniel communicates security to C-suite executives
*(24:09): Ways Daniel thinks about enabling people through security
*(29:22): 2030 Goggles
*(32:09): How we can get more diversity in security
*(34:29): Daniel’s take on zero trust
*(36:50): Quick Hits
Links:
Connect with Daniel Hartert on LinkedIn
DCSO Germany
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Max Chan, Chief Information Officer at Avnet. In his role, Max is responsible for the delivery of strategic business IT and digital transformation initiatives. Prior to Avnet, Max held several IT leadership roles at publicly traded companies like VF Corporation and Johnson Controls.
In this episode, Mike and Max discuss digital enablement, fostering security from the top down, and how to talk to the board about security.
“Do not play adversary with your security organization, whether or not they are part of your group. At the end of the day, truly see that as your personal accountability and looking at it through the lens of the enterprise. That will ensure success. That will ensure the right tone from the top, down to through the organizations to ensure that everyone embraces that vigilance that is so needed to secure the company.” – Max Chan
Episode Timestamps:
*(02:30): Max’s explains what Avnet does
*(03:28): Max’s journey to becoming a CIO
*(08:11): Max’s take on security as a team sport
*(14:30): How Max is aligning teams across his organization
*(22:04): How Max talks to the board about security
*(28:51): 2030 Goggles
*(32:15): How we can get more diversity in security
*(37:34): Quick Hits
Links:
Connect with Max on LinkedIn
Visit Avnet
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Amanda Crawford, Executive Director & Chief Information Officer of the Texas Department of Information Resources (DIR). Prior to her role at DIR, Amanda served at the Office of the Attorney General of Texas for more than 17 years. Her roles included Deputy Attorney General for Administration and General Counsel. At DIR, Amanda is responsible for the leadership, direction, and daily operations.
In this episode, Mike and Amanda discuss building security across federated groups, diversity in the workforce, and why security education needs to start young.
“If you use a computer or the internet, you have a role to play in keeping our state safe. If you're a developer, it means that security needs to be injected throughout the development process. If you're a network manager, the tools need to be tuned to be able to respond to those threats. So role by role, each of us really need to consider how we are part of the team.” – Amanda Crawford
Episode Timestamps:
*(01:46): Amanda’s background and role with the state of Texas
*(03:40): Amanda’s take on security as a team sport
*(08:40): Adoption of the cloud in Texas
*(10:35): How Amanda builds security across federated groups
*(19:15): How Amanda is building a human firewall
*(25:52): 2030 Goggles
*(29:01): How we can get more diverse in security
*(35:24): Quick Hits
Links:
Connect with Amanda on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Harvey Ewing, Chief Information Officer at R1 RCM. Harvey has over 25 years of experience in cybersecurity, governance risk, and compliance. At R1 RCM, he is responsible for security, delivery, and improvement of enterprise technology.
In this episode, Mike and Harvey discuss prioritizing patient data, the importance of healthy conflict, and speaking to board members in a language they understand.
“When you say security is a team sport, you hit the nail on the head. This is something that we have to be spot on with our operators, our clinicians, the people that are supporting the process front, middle, and back, in addition to our technologists. And we focus across that spectrum. And I don't think that there's a better way to put it today in that it has to be a team sport because, as you well know, the perimeter is essentially gone in today's day and age. And we have to focus from a human aspect all the way down to the lowest level of the technology stack that we have.” – Harvey Ewing
Episode Timestamps:
*(02:09): Harvey’s background and transition from CISO to CIO
*(04:53): How R1 RCM is making security a priority
*(16:46): Harvey’s advice for getting organizations to think of security as a team sport
*(22:39): How Harvey is reducing friction in security
*(25:03): How R1 RCM is enabling people to be human firewalls
*(30:59): 2030 Goggles
*(34:06): Quick Hits
Links:
Connect with Harvey on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
This episode features an interview with Jason Clark, Chief Strategy, Security and Marketing Officer at Netskope. Jason hosted season 1 of the Security Visionaries Podcast and has spent nearly 30 years in security, serving companies like The New York Times, Optiv, and Emerson.
In this episode, Jason passes the baton to Mike Anderson, Chief Digital and Information Officer at Netskope. They discuss security as a team sport, creating a human firewall, and what the future of security holds.
“I think that security needs to be built into everything from the beginning. You build security in, and that's still probably a challenge at a lot of places. But that's the only way to have really good security, and it's to simplify. The enemy of security is complexity. Everybody's probably seen the aspects of quality and security that the difference of the cost of building it in right to begin with, versus the cost of coming and being reactive and trying to remediate is significant. So I think security should be in the beginning of that conversation.” – Jason Clark
Episode Timestamps:
*(05:03): Jason’s take on security as a team sport
*(07:03): How budgets influence security
*(12:39): What role security plays in determining a tech stack
*(22:25): How to enable a human firewall
*(26:29): Examples of HR being essential to security
*(29:33): 2030 Goggles
*(32:19): What CIOs and CISOs should invest in
*(35:25): Quick hits questions
Links:
Connect with Jason Clark on LinkedIn
Connect with Mike Anderson LinkedIn
www.netskope.com
Security only works if everyone across an organization is pulling their own weight. Whether you’re a longtime executive or a recent hire, security should be everyone’s responsibility. But, only half of US companies actually have a cybersecurity plan in place, leaving them vulnerable to attacks and at risk of exposing important data.
We think security should be a team sport. And we’re here to show you how.
On this next season of the Security Visionaries podcast, you’ll hear from some of the smartest, most forward-thinking minds in technology. Get an honest and credible take on how to tackle transformation from voices of experience including CIOs, CISOs, networking leads, and many more from across industries. We’ll deep dive into how these leaders are teaming up on security, rethinking budgets, pushing innovative thinking, and enabling people across their organizations to be better digital citizens.
So if you want to learn more about what’s next, tap the follow button and get ready to help us create the future of digital security.
Welcome to Security Visionaries.
Powered by the team at Netskope.
This episode features an interview with Marene Allison, Chief Information Security Officer for Johnson & Johnson. Marene was among the first class of women to graduate from the U.S. Military Academy at West Point. She went on to become a Special Agent in the FBI and has held corporate security roles at publicly traded companies such as Medco and Avaya.
On this episode, Marene shares how West Point translated to a security career, the evolution of security over the last decade, and what areas need the most innovation.
“In cyber, everything changes every six months. And there's a new lens and there's a whole new set of new technologies that are going to be out there. And as CSO, I got to take the new threat, my IT environment that doesn't change as rapidly as security environment does. And then wrap it again, and look at what works. I think we have an awesome job because we get all these new technologies. We get to look at all the different ways an adversary's gonna come after us and then look at how we're going to secure it.” - Marene Allison
Episode Timestamps
*(02:15): Marene’s background
*(04:09): Marene’s transition into cyber
*(05:37): How security has changed over the last decade
*(07:15): How acquisitions have become easier
*(09:22): Marene’s greatest learning experience in cyber
*(12:13): What makes the CISO job so stressful
*(20:43): Marene’s favorite domain in cyber
*(21:45): What areas of cyber need the most innovation
*(25:15): The Zero Trust approach
*(29:56): Segment: Quick Hits
Links:
Connect with Marene on LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
This bonus episode features an interview with Steve Riley, Field CTO of Netskope. Steve is a widely-renowned expert speaker, author, researcher, and analyst. Prior to Netskope Steve came from Gartner, where for five years he maintained a collection of cloud security research that included the Magic Quadrant for Cloud Access Security Brokers and the Market Guide for Zero Trust Network Access.
On this episode, Steve elaborates on his background as it pertains to being an analyst at Gartner, the exciting future of SSE, and so much more.
"The benefits of SSE, or security service edge and a SASE journey is very clear. It's the first time, to me its the perfect reset for security. They get to move the majority of their inspection points closer to the user, closer to the data, they get to move it out of the data center and into the cloud, where it can be applied everywhere their data goes, everywhere the user goes." - Steve Riley
Episode Timestamps:
*(0:40) - Steve’s background
*(2:50) - Avoiding boredom
*(6:29) - Huge announcement
*(11:13) - The moment that helped drive this new change
*(18:22) - The difference between SSE vs. SAS
*(21:55) - All things SSE
*(24:51) - Surprises with the new MQ
*(28:00) - What Steve loved/ddin’t love about publishing MQ
*(31:34) - The future of SSE
Links
Connect with Steve on LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
This episode features an interview with Sanjay Beri, Founder and CEO of Netskope. Sanjay has over 2 decades of innovation and success in the cloud, networking, and security industries. Prior to Netskope, Sanjay held leadership roles at Juniper Networks and McAfee.
On this episode, Sanjay shares why he is obsessed with creating and maintaining culture, how to be the best organizational partner, and why innovation is a lifeline for security companies.
“The first thing you want to do is make it clear what that culture is. So you embed it into your systems, your processes, and how you think, from myself to everybody else, how they think and hire. The second is if you hire on that culture and you espouse it, hopefully all your other leaders will do the same.” — Sanjay Beri
Episode Timestamps:
*(3:10): Sanjay’s background
*(6:23) - Segment: Taboo Topics
*(6:52): Early days of SAS
*(12:18) - Segment: Deep Dive
*(12:26): Difference between SSE and SASE
*(15:33): What Sanjay is doing to stay true to at Netskope
*(17:28): How to maintain culture of customers, partners, and employees
*(22:35): Sanjay’s biggest learning experiences
*(27:30) - Segment: Quick Hits
Links:
Connect with Sanjay on LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
This episode features an interview with Rehman Khan, Director of Security Strategy Research & Design at Charles Schwab. Rehman has over 20 years of technology innovation and transformation experience in the financial, biotechnology, hospitality, and technology industries.
On this episode, Rehman shares his love for teaching the next generation of security leaders, how cloud security is changing the security landscape, and what goes into a successful security team.
“I think it will be the design security, like I said, really focusing on security design and making sure that the way we approach security is not just with a whole bunch of tools, but we should be really stepping back and designing security into the overall organization and the process.” — Rehman Khan
Episode Timestamps:
*(1:53) - Rehman’s background
*(4:25) - Segment: Deep Dive
*(7:28) - Rehman’s most/least favorite security domains
*(10:37) - Teaching the next generation of security leaders
*(16:11) - How to keep up with the industry
*(18:17) - A.I and cyber security
*(22:03) - How cloud security is changing the landscape
*(26:41) - Best career decisions Rehman has made
*(30:20) - Segment: The Future
*(32:48) - Segment: Quick Hits
Links
Connect with Rehman on LinkedIn
Follow Rehman on Twitter
Jason Clark’s LinkedIn
www.netskope.com
This episode features a roundtable discussion with Shamla Naidoo, CISO, Head of Cloud Strategy at Netskope, Steve Riley, Field CTO at Netskope, Mike Anderson, Chief Digital & Information Officer at Netskope, and last but certainly not least, David Fairman, APAC CSO at Netskope.
On this episode, Shamla, Steve, Mike, and David all share their predictions for 2022 and beyond. You’ll hear predictions ranging from more mental health support for security leaders to the increase of companies measuring their carbon footprint, and everything in between. If you’re in security and are curious about what the future of the industry might look like, this is an episode you won’t want to miss.
“My last prediction, Jason, is that what we’re going to see is CEOs in particular creating programs to support the mental health and wellbeing of the security leaders…this job is really hard and it continues to get harder, but at this point, there's very little in the way of mental health support for the security leaders and for the security teams. So I really think that CEOs are going to start to double down on not just innovating for the business. But also helping the CSOs to create both innovations for security, giving them the tools, the technology, and the solutions to kind of help them do their jobs better, but also supporting that with mental health and wellness support programs…And I think with that needs to come, not just funding and the support that we be seeing today, but it needs to come with mental health and wellness support because this job is probably the most stressful in the C-suite today.” — Shamla Naidoo
Episode Timestamps:
*(3:23) - Prediction: Increase of Insider Threats
*(5:20) - Prediction: Rebranding of Technology Specific Security Vendors
*(9:21) - Prediction: Rise in Deep Fakes, Voice Cloning, & Misinformation
*(15:08) - Prediction: Increase in Companies Measuring Their Carbon Footprint
*(18:26) - Prediction: Autonomous Cybersecurity & Removing Human Delay
*(25:02) - Prediction: APIs as a Growing Attack Surface Risk
*(33:54) - Prediction: The Risk of & Managing Machine Learning in the Future
*(37:40) - Prediction: CEOs to Create More Programs to Support the Mental Health of Security Leaders
Links
Connect with Shamla on LinkedIn
Connect with David on LinkedIn
Connect with Steve on LinkedIn
Connect with Mike on LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
This episode features an interview with Dan Lohrmann, Field CISO of Presidio, a global digital services and solutions provider accelerating business transformation through secured technology modernization. Dan has more than 30 years of experience in the computer industry and is an internationally recognized cybersecurity leader, technologist, keynote speaker and author.
On this episode, Dan covers why every security leader needs to check out his new book, the biggest vulnerability that the government potentially isn’t aware of, and his top advice for a 1st-time CISO.
“The idea here is to marry up three parts: before, during and after an incident. So what can you do before, four chapters of the book is about, preparing everything from having playbooks and doing exercises, tabletop exercises, real true stories, what people learned and the good, the bad ugly. Then during incidents in the middle, real stories about that. And then at the end, what about afterwards? What, like the last chapter is turning cyber lemons into organizational lemonade. So really the idea of how can we take what we learned and then roll it back into our plan, into our playbooks, in our scenarios, and to get better and improve.” — Dan Lohrmann
Episode Timestamps:
*(2:54) - Dan’s first job in security
*(4:42) - Dan’s current role as Field CISO of Presidio
*(5:44) - Dan’s perspective on the changing speed of the government
*(7:19) - The biggest vulnerability that the government potentially isn’t aware of
*(11:43) - Segment: The Deep Dive
*(25:44) - Dan’s predictions for the future
*(30:12) - Dan’s favorite security domain
*(34:16) - Top advice for a 1st time CISO
*(37:01) - If Dan could go back in time what he’d do differently
Links
Connect with Dan on LinkedIn
Follow Dan on Twitter
Check out Dan’s new book!
Jason Clark’s LinkedIn
www.netskope.com
This episode features an interview with Gary Harbison VP, Global CISO at Bayer. Bayer is a global enterprise with core competencies in the Life Science fields of healthcare and agriculture with a market cap of $53.5B. Gary has over 19 years of experience in the Information Security domain (21 years of overall IT experience) that includes roles at multiple global fortune 500 companies, as well as public sector experience with the US Department of Defense.
On this episode, Gary delves into where he thinks the largest gaps in security are today, what he believes will be a major issue in the future that nobody is currently aware of, and why he analogizes security leaders to car brakes.
“I would say that more than anything, I think people look at security as we exist to stop things. And while yes, we do want to stop attacks from happening and such, but in much the same way that having brakes on a car enables you to go faster, having a good security team that is able to assess and balance risk and bring forward solutions that allow you to take the right risks in a responsible way, can actually help the company move faster and help achieve business goals. So looking at it as we’re here to say no, or to stop things, we’re actually here to help figure out a way to say yes in a responsible way, and that can actually help the business move faster.” — Gary Harbison
Episode Timestamps:
*(3:17) - How Gary got into security
*(4:42) - Gary’s current role at Bayer
*(5:40) - Segment: Taboo Topics
*(5:40) - What outsiders get wrong about security
*(7:40) - The fasting growing risk in security today
*(9:15) - How to do drive real-time risk assessment
*(9:28) - Segment: Deep Dive
*(28:52) - How Gary keeps up with security and gets better at his job
*(31:27) - What Gary would tell his younger CSO-self
*(33:30) - Segment: The Future
*(33:43) - What nobody is talking about right now that will be a major issue in the future
*(35:22) - What CSOs need to invest in for the future
*(36:49) - Segments: Quick Hits
Links
Connect with Gary Harbison on LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
“How do we help create a pipeline of future cyber leaders, but then also, that pyramid, how do we get millions more people into the discipline? And just convince them that you don’t have to be a computer scientist or an engineer to do this. All you have to be is inquisitive. I want somebody who looks at something and says, ‘well, that’s interesting. That doesn’t make sense. Let me figure out why,’ that’s the person who would make a good security person. If you are somebody that looks at something and says, ‘I don’t understand why it looks like that, but I’m going to go figure out why,’ then you’re right for this field.” — Matthew McCormack
Episode Timestamps:
*(2:30) - Matthew’s first job in security
*(4:10) - Segment: Taboo Topics
*(5:30) - Matthew’s role at GSK
*(7:05) - How Matthew keeps up with the changing industry of security
*(8:30) - Segment: Deep Dive
*(8:35) - What it was like going from federal security to commercial security
*(13:10) - The fastest growing risk in security today
*(24:10) - Birds-eye-view on the current state of frameworks
*(29:00) - Segment: The Future
*(30:00) - What security leaders can do about the talent gap
*(35:25) - Matthew’s favorite domain in security
*(38:10) - Segment: Quick Hits
Links
Connect with Matthew McCormack on LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
“This landscape is changing and it comes to a point where I honestly believe CSOs are going to be some of the highest paid professionals in the future. And it's already heading in that direction. Over the last few years, we've seen a lot of change already, but this is going to be one of the most highest paid jobs in business because it will get to a point that you're not going to be able to pay people enough money to take on this amount of risk.” — Emily Health
Episode Timestamps:
*(2:40) - How Emily and Jason met
*(3:10) - Emily’s first security job
*(4:10) - Emily’s current role at DocuSign
*(5:15) - Segment: Taboo Topics
*(6:35) - Paying ransom or not paying ransom
*(8:00) - Other rapid growing risks that people aren’t aware of
*(10:35) - Segment: Deep Dive
*(12:15) - Careers are jigsaw puzzles
*(15:05) - Differences and similarities between United Airlines and DocuSign
*(17:35) - The “Trust” portion of Emily’s DocuSign title explained
*(21:25) - How the pandemic affected Docusign and Emily’s role
*(26:50) - Segment: Feeling vulnerable
*(27:55) - Emily’s thoughts on gut made decisions vs. data/biased made decisions
*(31:25) - Why CSOs are leaving their jobs
*(37:40) - What retirement looks like for Emily
*(39:30) - Segment: Into the Future
*(42:40) - Segment: Quick Hits
Links
Emily’s LinkedIn
Emily’s Twitter
Jason Clark’s LinkedIn
www.netskope.com
“To be an innovator, to be a leader, you have to keep challenging the status quo. You have to keep challenging yesterday's thoughts. that's what we really did when we sat down and as a team started listening to our colleagues. And taking that input to really develop out these principles, It was about challenging the way we've been doing things and really thinking about how business digitalization is changing us and our organizations” — James Christiansen
Episode Timestamps:
*(2:05) - Setting the theme for the 2nd half of discussion & introductions
(5:00) - Principle One: Challenge Your Existing Principles!
(7:29) - Principle Two: Stop Buying Blackbox Solutions — Buy “Open and Integrated” Instead
*(10:54) - Principle Three: Focus on Five Foundational Technologies that Integrate with Your Entire Security Ecosystem
*(15:05) - Principle Four: Only Buy Cloud-Powered New Technologies!
*(18:50) - Principle Five: Protect Business Data with Security Controls that Can Follow Data Everywhere
*(21:55) - Principle Six: Prioritize Business Risk/Reward When Making Security Strategy
*(27:50) - Principle Seven: Build Threat Models and Use Them in Every Architecture Decision You Make
*(29:34) - Principle Eight: Expand Security Operations Automation
*(37:16) - Principle Nine: Demand Continuous Visibility and Risk Assessment for Every Security Control
*(41:09) - Principle Ten: Reduce Attack Surface Using Zero Trust Principles
Links
Lamont Orange’s LinkedIn
James Robinson’s LinkedIn
James Christiansen’s LinkedIn
Erick Rudiak’s LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
“I think what I'd love for people to think about this series is the spirit of camaraderie and the spirit of community that has always been there in information security. And I think one of the really cool things about this series is that it creates a concentrated digestible version of that really enriching, magical experiences, where people who are passionate about their topic and just kind of get together and talk. And it's not about getting the predictions right so much as it is about having a conversation.” — Erick Rudiak
Episode Timestamps:
*(2:20) - How Erick and Jason met
*(3:20) - How Erick got into security & how he became the SVP & CTO of Northwestern Mutual
*(7:00) - What Erick would do differently with what he knows now
*(9:30) - Why Erick wanted to get involved in writing the book
*(12:30) - The purpose behind the book
*(14:30) - COVID-19 has accelerated everything
*(16:55) - The convergence of network and security teams
*(19:35) - Who should be consuming this resource
*(21:50) - What’s changed the most in security since the start of the pandemic
*(23:40) - What CISOs will have wish they invested in now in 5-10 years time
*(29:15) - Closing thoughts
Links
Erick Rudiak’s LinkedIn
Jason Clark’s LinkedIn
www.netskope.com
Digital transformation can’t succeed without radical changes to security and networking. And with malicious cyber activity costing the global economy $6 Trillion every year, getting security right is more important than ever before.
Fortunately, there is a group of security and networking visionaries who are building and protecting the future. Not only are they keeping up with the changing landscape, but they’re peering around corners to get ahead, and offer practical advice that avoids hype and provides realistic, actionable insights.
On this podcast, you’ll hear the secrets, strategies, and tactics of top practitioners and thought leaders in cloud security, networking, IT infrastructure, workflow optimization, and AI. These industry experts are writing the playbook on how to adapt to unforeseen events and leverage cutting-edge technology to design a safer digital future.
So if you want to learn more about what’s next, tap the follow button and get ready to help us create the future of digital security.
Welcome to Security Visionaries.
Powered by the team at Netskope