Episode notes
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of CISO Series , and Steve Zalewski . Joining us is our sponsored guest, Abby Kearns , CEO, ActiveState . In this episode: Trust, but nobody verifies The economics of trust just changed Implicit trust doesn't scale anymore Rethinking what "open" even means A huge thanks to our sponsor, ActiveState ActiveState gives security and engineering teams a single governed source for open source software. With…
Defense in Depth
by CISO Series · English · Tech & Science
Defense in Depth, hosted by David Spark, Steve Zalewski, Geoff Belknap, and Edward Contreras, promises clear talk on cybersecurity's most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community's insights to lead…
More from Defense in Depth
-
8 Oct 2026 · 33 minNew
Can SMBs Get the Same Security as Everyone Else?
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation for this week's episode co-hosted by me, David Spark , the producer of CISO Series , and Steve Zalewski . Joining us is their sponsored guest, Mark Stockley , cybersecurity evangelist, ThreatDown . In this episode: The ripple effect The economics of ignoring SMB Let the defaults do the work Accountability doesn't get outsourced A huge thanks to our sponsor, ThreatDown ThreatDown MDR is a 24/7/365 security analyst service that explains and resolves suspicious endpoint…
-
1 Oct 2026 · 34 min
Why Do We Keep Complaining About the Same Issues in Cybersecurity?
All links and images can be found on CISO Series LinkedIn used to have a decent reputation among cybersecurity professionals. But lately, it feels like our feeds are relitigating the same debates every day, just with different faces. Has the situation changed? Check out this post by Allan Alford of NTT Global Data Centers for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of CISO Series , and Geoff Belknap . Joining us is Howard Holton , founder, Phronia Counsel . In this episode: The clichés that say nothing A…
-
21 Sep 2026 · 21 min
BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection
All links and images can be found on CISO Series This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available Friday at 1 p.m. Eastern. In this episode, David Spark is joined by Karl Mattson , founder and managing director of Squared Circle Ventures, and Howard Holton , founder and principal analyst at Phronia Counsel LLC, to discuss how your existing environment shapes what you buy next — and whether that's a strategy or just inertia. Watch the full one-hour show at Crowdcast . Subscribe to Super…
-
17 Sep 2026 · 26 min
How AppSec Needs to Change For the Speed of AI
All links and images can be found on CISO Series Check out this post by Anand Singh, CSO, Symmetry Systems, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of CISO Series , and Steve Zalewski . Joining us is Ryan Barrett , svp, security, Intermedia Cloud Communications . In this episode: Risk by default, not by decision Identity, not just speed Building security into the pipeline, not around it Letting the machine make the fix A huge thanks to our sponsor, ThreatLocker An AI-generated attack may be new, but it still…
-
10 Sep 2026 · 28 min
Building Resilience for Microsoft 365
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of CISO Series , and Brett Conlon , CISO, American Century Investments . Joining us is our sponsored guest, Simon Hughes , vp of field security at CoreView . In this episode: Ecosystem, not platform Beyond backup, into resilience What survives the restore Toward a digital twin A huge thanks to our sponsor, CoreView Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant…
-
3 Sep 2026 · 28 min
Recommendations to Reboot the Security Vendor Pitch
All links and images can be found on CISO Series Check out this post by Val Tsanev of CyberRisk Alliance, for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark , the producer of CISO Series , and Edward Contreras , senior evp and CISO, Frost Bank . Joining is Jill Rhodes , svp, CISO, Option Care Health . In this episode: The ten-minute test Relevance beats format Price the problem or lose the room Whose meeting is it, really A huge thanks to our sponsor, Teleskope Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically…
-
27 Aug 2026 · 30 min
Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity
All links and images can be found on CISO Series Check out this post from Joe Head of RELEX Solutions for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark , the producer of CISO Series , and Edward Contreras , senior evp and CISO, Frost Bank . Joining is Mary Rose Martinez , CISO, and vp of digital technology services, Marathon Petroleum Corporation . In this episode: Left behind A hypothetical sale The philosophy problem Stop shifting the problems A huge thanks to our sponsor, ActiveState ActiveState gives security and engineering teams a…
-
20 Aug 2026 · 35 min
Will AI Replace Detection Roles in Cybersecurity?
All links and images can be found on CISO Series Check out this post from Caleb Sima of Whiterabbit for the discussion that is the basis of our conversation on this week's episode co-hosted David Spark, the producer of CISO Series , and Yaron Levi , CISO, Dolby . Joining is Adrian Ludwig , CSO, Rippling . In this episode: The messy middle The automatable part Where automation stops The influence gap A huge thanks to our sponsor, ThreatLocker ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific…
-
13 Aug 2026 · 31 min
What Makes a Good AI Security Deployment?
What Makes a Good AI Security Deployment? A ll links and images can be found on CISO Series Check out this post by Chris Matthews of UpGuard for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark , the producer of CISO Series , and Edward Contreras , senior evp and CISO, Frost Bank . Joining us is Peter Liebert , CISO, Salesloft & Clari. In this episode: Non-determinism changes everything The foundation problem Nobody owns the whole problem The authorization gap A huge thanks to our sponsor, CoreView Attackers don't break into Microsoft…
-
6 Aug 2026 · 29 min
The Office Politics of Remediation
All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark , the producer of CISO Series , and Dan Walsh , CISO, Datavant. Joining is our sponsored guest, Elizabeth Nammour , founder and CEO, Teleskope . In this episode: Data ownership before automation A shared vocabulary for agent risk Maturing from crawl to run Trust earns automation its place A huge thanks to our sponsor, Teleskope Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive…
Take it with you
The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.
