Home Podcasts CISO Series Podcast
CISO Series Podcast

CISO Series Podcast

David Spark, Mike Johnson, and Andy Ellis 409 Episodes Oct 13, 2026

Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

Episodes

I Sent the AI a Strongly Worded Prompt. I Think We'll Be Fine.
I Sent the AI a Strongly Worded Prompt. I Think We'll Be Fine. Oct 13, 2026 39:06 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Chad Rubin, svp cybersecurity, Publicis Re:Sources. In this episode: Getting started beats getting it perfect Bring security in before the concrete dries The instruction was never the control If everyone likes your idea, you're alr
Data Is the New Oil, in That It's Useless Until You Refine It
Data Is the New Oil, in That It's Useless Until You Refine It Oct 6, 2026 44:01 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Jake Lorz, vp information technology and CISO, Cintas. In this episode: Security's identity crisis The AI that never has a bad day Your permissions have secrets Nobody wrote it down A huge thanks to our sponsor, ThreatLocker
Mirror, Mirror on the Wall, Who Has the Best Infrastructure of Them All?
Mirror, Mirror on the Wall, Who Has the Best Infrastructure of Them All? Sep 29, 2026 42:18 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, the producer of CISO Series, and Geoff Belknap. Joining us is our sponsored guest Ryan Lloyd, chief product officer, GuardSquare. In this episode: Determinism was never the point Every MCP server is an uncontracted vendor Mobile security, the version everyone's tired of hearing Architectural vanity
Our AI Agents Are So Safe and Reliable You Can't Buy Insurance for Them
Our AI Agents Are So Safe and Reliable You Can't Buy Insurance for Them Sep 22, 2026 46:19 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Aaron Stanley, former vp of security, DBT Labs. In this episode: Saying no just hides the agent Communication is not a side project Even OpenAI can't buy enough coverage Identity governance beats the illusion of control A hug
BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection
BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection Sep 21, 2026 21:17 All links and images can be found on CISO Series This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available Friday at 1 p.m. Eastern. In this episode, David Spark is joined by Karl Mattson, founder and managing director of Squared Circle Ventures, and Howard Holton, founder and principal analyst at P
We Strongly Value Your Willingness to Accept Less
We Strongly Value Your Willingness to Accept Less Sep 15, 2026 43:55 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Gina Ciavarro, former managing director of infrastructure and CISO at Accordion. In this episode: Patching won't evict a squatter Boards accept risk by saying nothing Fast enough to hide the damage Job posting for a unicorn A
Backlogs? Where We're Going We Don't Need Backlogs.
Backlogs? Where We're Going We Don't Need Backlogs. Sep 8, 2026 41:38 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Steve Zalewski. Joining us is Varsha Agrawal, head of information security, Prosper Marketplace. In this episode: Lock-in was never about the tech The board wants a green light, not a lesson Time was never the constraint What founders keep getting wrong about security A
When Frameworks Stop Being Polite and Start Getting Real
When Frameworks Stop Being Polite and Start Getting Real Sep 1, 2026 37:22 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Will Gregorian, CISO, Galileo Medical. Joining us is Ryan Brown, director and head of cybersecurity operations, Children's National Hospital. In this episode: Policy is easy. The exam room isn't. Robotics, Asimov, and the gap before regulation The token bill nobody can e
"Ignorance Is Bliss" Is Our Acceptable Use Policy
"Ignorance Is Bliss" Is Our Acceptable Use Policy Aug 25, 2026 39:03 http://www.Threatlocker.com/cisoAll links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker. In this episode: Not my job, still my problem The tools people actually use Mac, Windows, and the debate that won't q
Secure by Design. Ignored by Default.
Secure by Design. Ignored by Default. Aug 18, 2026 37:55 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Julie Davila, president, Security Tinkerers. In this episode: Two paths, one dead end One size fits nobody Own it or orphan it The agent you should worry about A huge thanks to our sponsor, Guardsquare Guardsquare delivers mobile ap
Why Solve Your Problems When We Can Just Scare You?
Why Solve Your Problems When We Can Just Scare You? Aug 11, 2026 41:15 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Nada Noaman, SVP and CISO, Estee Lauder Companies. In this episode: Skipping the apprenticeship Privileged users nobody manages like one Findings without the authority to fix them Security was always behavioral A huge thanks
See, Our Compliance Framework Includes a Checkbox for Resilience
See, Our Compliance Framework Includes a Checkbox for Resilience Aug 4, 2026 43:43 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Khush Kashyap, senior director of GRC at Vanta. In this episode: Running up the token meter Some risks resist a price tag Resilience isn't a vacation policy Compliance is the wrong finish line A huge thank

Recommended