Home Podcasts CISO Series Podcast
CISO Series Podcast

CISO Series Podcast

David Spark, Mike Johnson, and Andy Ellis 409 Episodes Aug 18, 2026

Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

Episodes

Secure by Design. Ignored by Default.
Secure by Design. Ignored by Default. Aug 18, 2026 37:55 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Julie Davila, president, Security Tinkerers. In this episode: Two paths, one dead end One size fits nobody Own it or orphan it The agent you should worry about A huge thanks to our sponsor, Guardsquare Guardsquare delivers mobile ap
Why Solve Your Problems When We Can Just Scare You?
Why Solve Your Problems When We Can Just Scare You? Aug 11, 2026 41:15 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Nada Noaman, SVP and CISO, Estee Lauder Companies. In this episode: Skipping the apprenticeship Privileged users nobody manages like one Findings without the authority to fix them Security was always behavioral A huge thanks
See, Our Compliance Framework Includes a Checkbox for Resilience
See, Our Compliance Framework Includes a Checkbox for Resilience Aug 4, 2026 43:43 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Khush Kashyap, senior director of GRC at Vanta. In this episode: Running up the token meter Some risks resist a price tag Resilience isn't a vacation policy Compliance is the wrong finish line A huge thank
Why Don't You Tell Me Which Metrics Sound Most Impressive?
Why Don't You Tell Me Which Metrics Sound Most Impressive? Jul 28, 2026 48:02 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Pavi Ramamurthy, Global CISO and CIO, Blackhawk Network. In this episode: Numbers that make the board feel good and nothing else The audit is not the same thing as the truth Receipts aren't a strategy Stop blaming the human, fi
With AI, I Can Now Be Pulled in 5x More Directions at Once!
With AI, I Can Now Be Pulled in 5x More Directions at Once! Jul 21, 2026 47:35 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is our sponsored guest, Brian Long, CEO, Adaptive Security. In this episode: Nobody clocks out anymore The rules nobody wrote down are the ones that count AI doesn't drain your empathy, it just shows your hand Loyalty runs both dir
The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt
The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt Jul 14, 2026 43:57 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is Tim Callahan, CIO/CISO, AFLAC. In this episode: Week one is the wrong time to overreach Nobody has the AI playbook Vulnerability management wasn't built for this clock Stop blaming the human, fix the system A huge thanks
What Part of Zero Trust Does Your Exception Not Understand?
What Part of Zero Trust Does Your Exception Not Understand? Jul 7, 2026 37:46 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is Patti Degnan, operating partner, Andreessen Horowitz. In this episode: Identity built for one person at a time Patching can't outrun the exploit timeline The exception hiding inside zero trust A revenue question nobody's answer
These Aren't Speed Bumps, They're Opportunity Ramps! (LIVE in NYC)
These Aren't Speed Bumps, They're Opportunity Ramps! (LIVE in NYC) Jun 30, 2026 42:20 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Nick Vigier, CISO, Oscar Health. Joining is our sponsored guest, Mitchem Boles, field CTO, Intezer. This episode was recorded live at Intezer's AI SOC event held at the NASDAQ in NYC. In this episode: Who owns the risk Before it gets better The SOC of zero The decision bo
It's Not That We Don't Value Your Experience, We Just Don't Want to Pay for It
It's Not That We Don't Value Your Experience, We Just Don't Want to Pay for It Jun 23, 2026 40:09 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Megan Samford, vp product and supply chain security, Schneider Electric. In this episode: Two modes of CISO The vendor has the keys The economic argument for secure code Burning through the talent A huge thanks to our sponsor,
Boards Love to Hear Jargon," Says Soon-to-Be-Fired CISO (LIVE in Boston)
Boards Love to Hear Jargon," Says Soon-to-Be-Fired CISO (LIVE in Boston) Jun 16, 2026 48:22 All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Dmitriy Sokolovskiy, senior vice president, information security, Semrush. This episode was recorded in front of a live audience at the offices of Aqueduct Technologies in Canton, MA. See photos from the event. In this epis
There's Nothing an LLM Can Screw Up That the Cloud Didn't Do First
There's Nothing an LLM Can Screw Up That the Cloud Didn't Do First Jun 9, 2026 44:25 All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is our sponsored guest, Danny Jenkins, CEO, ThreatLocker. In this episode: Permission creep at machine speed The pattern we keep calling a mistake Stop authenticating the human Vibe coded out of existence A huge thanks to our spo
Our Data Security Policy Is Transparent in That It Doesn't Exist
Our Data Security Policy Is Transparent in That It Doesn't Exist Jun 2, 2026 37:52 Our Data Security Policy Is Transparent in That It Doesn't Exist All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining is Mike Melo, CISO, TMX Group. In this episode: The weight of old controls Data you can actually see 68 vendors and counting Authority you never had to claim A huge t

Recommended